0dc66c41b779ae7172cee90e2af69a32cf674fee418a0d0d6ab7a029c5ef2a404df7e11c6e9b26e601c2bc5f9ce475367a9f3b27b56fbba0f5417d6010500"/101], 0x65) r8 = epoll_create(0xac) ioctl(r0, 0x8916, &(0x7f0000000140)="af0ee1acb3aa7da7b79d377af4e7d1a20e2d6358412aea75bb55f228fd50d2368f81cdb4aa9d8349449f6325854d6089bf3d4134e57fa90800758aa9e05b61397b3ab724e686a576ca13be15") ioctl(r7, 0x8936, &(0x7f0000000000)) sendfile(r1, r8, &(0x7f0000000040)=0x6, 0x8) 13:53:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lstat(&(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000a00)) symlink(0x0, &(0x7f0000000340)='./file1\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x3}], 0x80020c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001700)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='func') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), 0x40000, &(0x7f00000005c0)={[{@index_on}, {@xino_auto}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_lt}]}) rmdir(&(0x7f0000000500)='./bus/file0\x00') [ 359.745450][ T8606] 9pnet: Insufficient options for proto=fd [ 359.817566][ T8592] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 359.977161][ T8592] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:53:09 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/serdev_ttyport', 0x40000, 0x102) r5 = fcntl$dupfd(r0, 0x406, r0) io_submit(0x0, 0x4, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc83c14fa04188d3d, 0x7, 0xffffffffffffffff, &(0x7f0000000340)="d8abc79d72c6691304ca935620df94edb1061144a008f8ac34d17cb0013747c8094360f100303ae266a95bfc7bf8f9e0f7055497924f748b926ef9629465e48ad59095c50c5b624c98e5abad2c889f3f9db5524a78de92ca8f9e93a9f9adff8c40c1de0f1c2027a8196ca6fe62f1d92ce57dd1195a33bda12a75d6a764a06357912a4ad87ee2ee1a41abd1552b8a7ecb7c67fdb96bc7ec99ba37db930af5904f8ac7dc519d745aad7387cf38788aec5cb8141bf7c9ee10d31220212610d96e99ebaaf26b93b9d339f17b1b8e752a096312242c61ab71f4a721a2133cf38d31f4745f0c", 0xe3, 0x0, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000100)="34fb6223d9da96103361f60f8a430b33d9ce47ea8dea70e2f4d9502d1f48d518e271b39e9556732fc4da", 0x2a, 0x4, 0x0, 0x3, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000480)="6fd27a40c6e03a333df2c0e084fb8eb143f25a053ba2bd1acb013c667ecc", 0x1e, 0x3, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000500)="9756df368dab403ea64ba9dcafa4879db67ba32b2b5f627e9b64f3000814bbb1e30efc3fda18e644eeca5d3532145bb172055a6e9270417b60030ce001f6999d834000515575638ad0a01f09c028344f147ae82be6860cca30f736d5e5d193fd4570ced0ab4f77a14c1e4a5f3aa8161691c57a326775da88c5b93147ed1afd4ce247e63fe64b6ac4e150802a423beb5cc953bda73dca8715fdede08f146cf0dff65c7fcec7a0edee97ff4a6437e0a8f7f3e5a02642d257a4892c573c41bbb669587f2219050dad2a022003450e43b152d6335a15678a9492aa37037f626d99", 0xdf, 0x8000, 0x0, 0xd2d24ef7bd60a5ce, r5}]) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x0, 0x4e23, 0x4, 0x0, 0x20, 0x0, 0x165, r1, 0xee01}, {0x7, 0x7, 0x3, 0x649f04b1, 0x6, 0x5, 0xffff}, {0x3, 0x938f, 0x5, 0x6ee6}, 0x9, 0x6e6bbc, 0x2, 0x1, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x2b}, 0xa, @in=@private=0xa010102, 0x3503, 0x2, 0x1, 0x1f, 0x2, 0x800, 0x8}}, 0xe8) [ 360.056337][ T8592] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 360.080792][ T8592] F2FS-fs (loop2): invalid crc_offset: 0 [ 360.086525][ T8592] attempt to access beyond end of device [ 360.086525][ T8592] loop2: rw=12288, want=8200, limit=8192 [ 360.097944][ T8592] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 360.145961][ T8641] overlayfs: maximum fs stacking depth exceeded [ 360.155865][ T8645] overlayfs: filesystem on './bus' not supported as upperdir 13:53:10 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3b6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) [ 360.365911][ T8652] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 360.377721][ T8652] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.386710][ T8652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 360.396600][ T8652] F2FS-fs (loop2): invalid crc_offset: 0 [ 360.402301][ T8652] attempt to access beyond end of device [ 360.402301][ T8652] loop2: rw=12288, want=8200, limit=8192 13:53:10 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lstat(&(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000a00)) symlink(0x0, &(0x7f0000000340)='./file1\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x3}], 0x80020c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001700)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='func') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), 0x40000, &(0x7f00000005c0)={[{@index_on}, {@xino_auto}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_lt}]}) rmdir(&(0x7f0000000500)='./bus/file0\x00') [ 360.416854][ T8652] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 360.706385][ T8652] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 360.730940][ T8652] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.747708][ T8652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 360.769032][ T8652] F2FS-fs (loop2): invalid crc_offset: 0 [ 360.782182][ T8652] attempt to access beyond end of device [ 360.782182][ T8652] loop2: rw=12288, want=8200, limit=8192 [ 360.813083][ T8652] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 361.623042][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 361.629206][ T87] Bluetooth: hci0: sending frame failed (-49) [ 363.702955][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 363.708976][ T87] Bluetooth: hci0: sending frame failed (-49) [ 365.782887][ T1004] Bluetooth: hci0: command 0x1009 tx timeout 13:53:19 executing program 1: perf_event_open(0x0, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:53:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000009480)={&(0x7f0000008bc0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x2, 0x802710, 0x27, 0x9, 0x0, 0x60000000}}, &(0x7f0000008c40)={0x18, 0xffffffffffffffda}, 0x0, &(0x7f0000008cc0)={0x18}, &(0x7f0000008d00)={0x18, 0xffffffffffffffda}, 0x0, 0x0, &(0x7f0000008e00)={0x18, 0xfffffffffffffffe, 0x401}, &(0x7f0000002140)=ANY=[@ANYBLOB], &(0x7f0000008e80)={0x20, 0xfffffffffffffffe}, &(0x7f0000008ec0)={0x78, 0x0, 0x2978, {0x6, 0xd, 0x0, {0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x4, 0xc597, 0x0, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x20}}}, &(0x7f0000008f40)={0x90, 0x0, 0x8000, {0x0, 0x1, 0x4, 0x5, 0x8, 0x40, {0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0xc, 0x1, 0x40, 0x8000, 0x0, 0x0, 0x0, 0x743}}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="9000000000000000000000163fdd3388dbdb09a8999f95f2c58ae4f654208a327dda07c96aff5d43ce50b58ffe78b0ce44f2bdba359efe1ee3cf3bc9474277eef8c4264e195bf5956371f7689b"], &(0x7f0000004380)={0x1f8, 0x0, 0x7, [{{0x3, 0x0, 0x100, 0x6, 0x0, 0x0, {0x0, 0x2, 0x200, 0x8, 0x3d2, 0x2, 0x1, 0x3fc0, 0x3ff, 0xa000, 0x0, 0x0, 0xee00, 0x7, 0x80000}}, {0x2, 0x4, 0xd, 0x352, 'net/anycast6\x00'}}, {{0x6, 0x0, 0xa4, 0x100, 0x0, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x800, 0x5, 0x0, 0x6, 0x80, 0x0, 0x80000000, 0x0, 0x0, 0x9058, 0x800}}, {0x3, 0x0, 0x5, 0x0, 'fuse\x00'}}, {{0x0, 0x2, 0x3, 0x0, 0x890, 0xfffffffd, {0x4, 0x0, 0x9, 0x4, 0x81, 0x4}}, {0x0, 0x0, 0x6, 0x0, '{$\xcd%(&'}}]}, &(0x7f0000009380)={0xa0, 0x0, 0x0, {{0x0, 0x2, 0x9, 0x4, 0x5, 0x0, {0x4, 0xfff, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, &(0x7f0000009440)={0x20, 0x0, 0x1, {0x0, 0x4, 0x10001, 0x4}}}) creat(0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) fallocate(r5, 0x10, 0x67, 0x4) sendfile(r3, r4, 0x0, 0x401ffc000) 13:53:19 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3b7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:53:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lstat(&(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000a00)) symlink(0x0, &(0x7f0000000340)='./file1\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x3}], 0x80020c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001700)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='func') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), 0x40000, &(0x7f00000005c0)={[{@index_on}, {@xino_auto}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_lt}]}) rmdir(&(0x7f0000000500)='./bus/file0\x00') 13:53:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x80000, 0xfffffff9) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:53:19 executing program 5: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001700), 0x40842, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001740)={0x0, @remote, @initdev}, &(0x7f0000001780)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@local, 0x4e20, 0xa, 0x4e20, 0x8, 0x0, 0x20, 0x20, 0x0, 0x0, r3}, {0xffffffff, 0xf25, 0x80000000, 0x0, 0x5, 0x8, 0x100000001, 0x64f}, {0x80000001, 0x40, 0x4, 0x8}, 0x5, 0x6e6bbd, 0x3, 0x1, 0x5, 0x2}, {{@in=@remote, 0x4d5, 0x2b}, 0x2, @in6=@local, 0x3503, 0x1, 0x2, 0xe1, 0x9, 0x10001, 0xfffffffe}}, 0xe8) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) [ 369.814463][ T8683] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 369.827096][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 369.838366][ T8683] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.850610][ T8683] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 369.902966][ T8683] F2FS-fs (loop2): invalid crc_offset: 0 [ 369.909389][ T8683] attempt to access beyond end of device [ 369.909389][ T8683] loop2: rw=12288, want=8200, limit=8192 13:53:19 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3b6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:53:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='j'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 370.081344][ T8685] overlayfs: failed to resolve './file0': -2 [ 370.087805][ T8683] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:53:19 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x10000, &(0x7f0000000080)="784ca5112ee4bf57705c6aecb6ab60da6a2056ba8188232c2068679369112f5ae0e0823e53173bd86fc8aa875b8a731d07de5f9b157f7616e4a73e3da1a80c0c9924a272d53189f484faa74fecc259") ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40300, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@deltaction={0x13c, 0x31, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1a}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e62}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4fbe}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44008844}, 0x20000080) 13:53:20 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, 0xffffffffffffffff, 0xc80) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 370.211969][ T8683] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 370.222317][ T8683] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.231182][ T8712] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 370.236901][ T8683] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 370.250643][ T8712] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:53:20 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="421fa96709603639a9208eda8c7d2567d922e37d7470a23663aabfbc9fc2a24e5f213afb36e2ea916a2871ef1b082f0314f48092dbffecd3f6666a3452ff17fe177ebfa792db5b2a44ad7a7fc69eae6e9caa67af35b2c3caa63372c410ac6b671f6a91ae0caa"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = accept4$unix(r2, &(0x7f0000000180), &(0x7f0000000100)=0x6e, 0x800) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="04ab4c50c1a46ec9151befd1c06d65dfd0ad6f06df2ae3c99dd9d52d2e20ea3474444fa663d35d85487dc39ce9b42ff2ee263f3b20d7cfb3c7d52d558de3d678fbf0ef5785515f0faea5dc8e08bd624244add4878c110742d01f095358505f9a5c50cc18fdf7224757aeac9e500fbb5ac1ac946f37d354bae6584635b30f39af46d4d5b08e083f27d5abb81157b25476434676a1d12a1f96ae3be22e5760dea889d9a92ccf4a227ecd8bc412f818", 0xae}], 0x1, &(0x7f0000000300)=[{0x38, 0x115, 0x1, "7f0041c0db9d5762b9451ad9ea2862d6cf5924b941e4e90934880c29fe7c4a0c0d"}, {0x78, 0x109, 0xf0, "20eeafb86ed1f7c319f5def3eb53e5eb090ece34a99eabc8a099d5d451fd55dacb1ce03a40414857d27ab59fae83e880f5060a56d2f8eab2a5d0facc12c0ff4e12d974bd7a1d5c6611ade93bd89a0eb94e19f0278b90263bdb6d72e49d59aad117f5d669b600"}, {0x108, 0x103, 0x81, "4b102103f88a3dbffa8a32234a37d537c69291ad1462a632e27250c71b9d53aab88e83d1c93a05c9795894f5c99499901e34379b9c13c79ee973caf2d6a7643acb6aa67d5c36d373528a51f05b419e20c8e1a7edc5fc6c7e8cf2e9eff605852703255b40f74b837ef890b88bb09e485a7dfb0b7e6628b5bf3bdf2eb5bc0f4dd222926e1bc708a10524046b6af7ba68a5bcfb28b2be4cb6d5784d8c077fd85c8658e40a6ee8f55b97b58685c7ae102fb74481f77345df3b65aa8140b81dbf6b7a288a3846f28b914244f081497a23b75c98bac074736978437f6968bc28afddd6a58e7d56caad0c348a07946bd478eb51d2eb1f0ae7f2"}, {0xd8, 0x110, 0x0, "43657caaae3e32bfda212447483dedccc80b7d87e3c837adc5dab415ede811aa65f4b27be288a7f6d84645ae4c641b1646a143b3c3b8604404992f64a89069c7e5ac170e139704b6f66fc52a02844d40c9d42709bfa1e3a8fade9b58322b60a77420320688214d38968aea0b374db431c55335169bb9f817ed2f630d4696f68e90310a452dacfc8b6fcae86ddd92bb06e47944c2910b4f18a7f52e8a00a5f54bd3135c075a482560024798ae854c63219950fcd3af47448446e0ffea67e8ff503745"}, {0x60, 0x3a, 0x1a60, "81aff287d6759a77cdfdaa47f76ec46941490816546133f487fb6e22489d8c8e145f7419e3a3eb27765a7a56de87ba867c89cbd2878b21817c01602b0dee67fd83a6c40181b8e85e88"}], 0x2f0}, 0x4) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 370.263999][ T8683] F2FS-fs (loop2): invalid crc_offset: 0 [ 370.268225][ T8712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 370.270750][ T8683] attempt to access beyond end of device [ 370.270750][ T8683] loop2: rw=12288, want=8200, limit=8192 [ 370.282122][ T8712] F2FS-fs (loop3): invalid crc_offset: 0 [ 370.289713][ T8683] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 370.308895][ T8712] attempt to access beyond end of device [ 370.308895][ T8712] loop3: rw=12288, want=8200, limit=8192 [ 370.320713][ T8712] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 371.862673][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 371.868894][ T87] Bluetooth: hci0: sending frame failed (-49) [ 373.942569][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 373.948643][ T87] Bluetooth: hci0: sending frame failed (-49) [ 376.022492][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:53:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:53:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="e2f329a2f2da36c0853f309bad50950100633620eeedfcde7b9851ead82093fd60de322c02e68f0863273a05ce46692f532fabe75105a98af76dbf4825ff50a082717082252ca1df2615c2c7cc"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @loopback}, {0x6, @random="4ca8555794fb"}, 0x10, {0x2, 0x4e23, @loopback}, 'veth1_vlan\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x4) 13:53:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3dc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:53:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lstat(&(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000a00)) symlink(0x0, &(0x7f0000000340)='./file1\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x3}], 0x80020c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001700)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='func') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), 0x40000, &(0x7f00000005c0)={[{@index_on}, {@xino_auto}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_lt}]}) rmdir(&(0x7f0000000500)='./bus/file0\x00') 13:53:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lstat(&(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000a00)) symlink(0x0, &(0x7f0000000340)='./file1\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x3}], 0x80020c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001700)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='func') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), 0x40000, &(0x7f00000005c0)={[{@index_on}, {@xino_auto}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_lt}]}) rmdir(&(0x7f0000000500)='./bus/file0\x00') 13:53:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="ab899789642b1bd1416daababf4ce703fa4d23c65287dc719f3be8f210ef3fc9e730f94c63ff99b6b8051c741632ce87b8c07c1ee9a348180ee4b61cb5bc48d20389a4f65649d73af8651983e73944ae4079b3a74e69fed36c5eebb18bd044e7374430f3fbf10ad4df2dc70f4b1b228e377bce5c758fb534c17482af5cb31b193882dd984d557e40f073ec1052c75096587431c2680ec952dc33a207fac7a0a00fa11a9dbddc8df240da"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 380.059341][ T8739] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 380.097824][ T8739] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:53:29 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x1, 0x2, 0x178b, 0x8, 0x7fff, 0xfff}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 380.129833][ T8739] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 380.147183][ T8739] F2FS-fs (loop2): invalid crc_offset: 0 [ 380.161234][ T8739] attempt to access beyond end of device [ 380.161234][ T8739] loop2: rw=12288, want=8200, limit=8192 13:53:30 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x505100, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="d5729846575db507242d4f09cf6470f9fa4b757572909f1a3652ed7be64ad5a2d81e5a15cbc5003060149ec2dc2f39f33029b8f2575cb0ba9112293c02e4662afc5c3957e6998150976406d1a3221e0ffeb680dbbfb6b89e386745d7361636d75d208b745a889566adfd69024ec279cc3e356c70445b8b55379c8c3a0544bfafb992afccac9753747cabd1ab2a7fdc34f062684ae66b874e1c4b73863b484cc6f35294229b8c77b206789f6e681726676b6d8d8d47a087efe052b530eb91f2e31ba73a6eda63b610e9ef95e8c48e931eeac1933359dc24bf57e82aa1ebea4862415de3963da45ea8634a397c415213eb96ef5fd07230fe7d9273ec804897f64caa13cc6910283ce86ee150a0be7a998799a55aec713e9740ec519e947233118cdcbc147796ae1e74f72e3288e6ce23dccf3a3ead64191626a2eb1d07045926f9c8251f947124e31940b970a5708241f33dc93526526f89c3bb5506ea0bae9ef2862308ba6aaa636a8103373219c3fe1fbc2c0c9d86e105428376cf706241382c1817486a520c0b7a38fff2b022189588e6ffd43942c4594618e6d6f8ec42048dbf6ef6718ddc74e1a21c6322c3083b979f710791e1be035932517cb03426ddd45c047e3c3b79281ed48cbccc5c8f12d0f9d3ee8c5a62e8579826d9a398e4a72f8ceb82b60571d8e2212f3cd0f2f64c52eded8c7bd3e0a3ecc0368b290b4bd4ed0d2235d65dbc03ebe07533ac89d2b5960d802386640e6b4628d49ea1a690e8914b5833c46e8d623e744a0a13425f085b64addad1aeaea4154516c21802cc2d43a1e962ce115e53692f935c31c4ca015d22dde4a1ee4d1802aaad929918b55d1766d6108d830877aef10b5ed64f7ba7993efc997b4b0ac59abc6e7f1e7dee66d73d1741d862871166572139aba09b346956d109a0c703c69d8c623bf495884392e41f57bad3c415f1ab1eb77a1a0b510343404ab627467bad48e7f39a38fadf98b82ae6621a7625b1579b53ca72aef21b09c974c397c7cf60bb61c6c1101c3ecb63a8a09a24aed7650269d2042274199792f53569228cbff52e95b677193fbd40a4821027074b92aa655fa4f34032b3405b9bb07c76e4ace33d95a51f3e7cb6d03e48eefde91a1e5536bebc62303aaed253df8b8da0934cba269eebf5fd8ac24ab9474317760c5707607e93046b16b8c33301b9d5ff10dbe5dd1b14a4c8ba17ac70ef46f5ca2a3687e3fb4e5014b23df6bcc1c381cc1b4864ff8f9fd0096008845652733029697fbcc8eef765eda0ca36127cc4a6f279adb35175293e05c695fd8f75667ac4aa1c0656fc07ab77d67c805b1a46a92a5c87d046b109c329b9fdd8274cfbb5608bb0fcb080190d5e37199cc5c4c76d441fb9a827260bb60cabdb0b335133c7cfa3420760ad12e8d9a6a424cb37e2e25f7df4ef4bd962bf462702d8058966c246976d611192b8797f54d65db2ac13f2e60ba4c4fbe210d8191d071044d9d7ecf69f02806ff96201af504cafa32cd5485fd272b67c10615446d76a3bbdd69591fe78756eea636fdeec4addaf3845c317f819f9173deba79f504004c6e668d7169202fbbc5b10c89d777e51252c9375ab0336705f5b829cf5e1fc44884ef085310f2f59bcae09a3e23012bc6d31312422decd7fc4d38b07f9321ae46c1f754ad60545e3dd47aea7ed080623b7db741754c8ddacc7b4e9962061d4eee2566ca8cab1a10a79dca488583fd0533cd5c0c746bf26256d6b2f9e96fbc40f57b3069d2af4558511ca60d1ab51401531dc3df1fbcb9640cf6a9ba2a8711c38894422f1b5a6746e9f0e02547dca982b45194f3f8e08c144b649052cf0735fed8e88980f2d680cbcfb604fac82870b3910dab99c6eb4c500bde236ba721ded1caf5844c6f9f7373774204e1484c95f6ffc31f340b81dbe6da303a0db891da98b8131496dca628ac45e77e2dfe8d204805f6197e54efa3ee538520030061a2e4e8f6d1a915fc6218ba61d18e4cd2f90cf9768da7d26c55be9805b99ffa16df25c75b575499a2f36d5e0426790720feade176ed94a4ae6e12bc0f95c5270a820b294a62169e27fff6490c2033aaad29fcbaaa419ed74e5fa050a097b7592b94755aa8e49f0f1b03ee2ee5b62958b37c6fa21d378ad8fa3a209d786f49ed672e63ea4a743b7b6a5e79d97cc7247197fed9d93a38acc1c112e45b55118c67d37c87153921404a019b9bdf53663128a288cfcb3534f05534d21b4e3226c05b82e62176c620e806c11f7cc606bf41e9419c212e8e73b262677eb27834e820e5aabcc38748697b586508b1f7f35bb195adef4073d2e453b53d5074fbf4087baf806d914c4383984dbeefdbf5532b502df5766def2bb4263f03238d807b67f6d2ba59acc8d6efe6b7c9f3ac9d3e3cb78ebeb4aa295bb788d41b4294e13ccea06e0b214b0c58046efdd4ce29e86d1c1facaeef945df281ccd6c18f05ec0125ff81ba716281a9b2a4bfca43fb7b414ac5ea6a476b486dbb36bcfbf2f02b679625cc7a61c331a961e4eb2d4877f51852de1a7dd969e1918bf97809452af51806392a8ee6dd0f3004b547ebe1ca72159d970054d8a044613595ac4c63f262925d5fa0e4f37e3afbaf07afaa8d3337f44f31857f94394f4a954094c0251c637fc0e9d8fb0514b570bd8f0cd9ae68b3585a2ffd8f3d61252c4c525be479542698562ac8dbacc828fd63d73a35f9103af0eed0a42043feaee7dd5a738a0eebba28bed2820cd74163636823c5a2869adf856cb03378b1496fd80aeb6883a0ddecd74be54969477cbd4de2842f0cc7888c5f5abd3d8e43273125d6595ea1b321bf08701c814f83d89b2f9b97c938da4977cd9f62c28ac76ae90f4195010588dc0124e134dcb9901ec6afc254e9b059410451d0ad56cb28533a1f3e1683593004778aed89e89c8902b453b82a1177ff9e27154ba0e6548ba18740dedc03a78c427b09dcf6b2a4da235938f044b0a03a92d828cba6032d44a58b72867801e9db2abb973e3ca8a3e37e83b37610bae339fe893a943271c7d4de5eee2d7f502fce09bdd4d4c1f36a16429a466c9663f78058a78cc97edd419b67fd6dfdc90c1c51475251c14a638a41bac4cfcfe41b9306d4f2796aa8141e2e05cfd725da8b3464fecfb7b6426af03c3891d94363506145a8c13898d19328a9cb4f91a197c18f71c37c94db0a3d9b1f9f7ac4be14183e8db884da689e1207bd62f45f55daaaecc66ab4dfc4622d1c278031d8e5f96f04b2261a3dec6ff39153b96a8e28a6602c453a7dc2f24ea8880624bb3e8e3beb5173186183aa8a38c830d6f536108eeba07deb9f5d04dd6b57c70d4b39e58ea64792f783c5dfb7510a102291147fbd40b3a0660a7e5e882074e0764eed5761955a51c0431e7558ba721dc5101fbcee29f01e2f169f63bec16894d41e53a3656b31fa301f5b6be516dc1a5ab3dfec18e2d7e9e2eaf4dc7a53c0bfd6639c659d73995f894ba18346ba07c380f55a1064b440bf6a44b35333a32922e3767d6622a4399d285729d7b3c198515154de3baf47c9b56c31176351ad4fe0d2b8b368ebddcaafbcc46b658f2a8199be87581f31ae272a37d133aceaaae94910d66c732b8d218795f0219ff7eade6597583cb44e7d0fd29efd562325c94b0e11075d0257a327b4c199d8703fccfbbf375a8197dcddae733220d1a02bd9bc90dc0690dde9c7c5e9e5b93ecfd75822b2a00c8cdef6943f23942c650aac60e118e6c26369596daa04b4c7eb1ba55348c81a958d03dacac55ec95b20a85de53384c228c839ce66198e454462304a134d0a1c14fd2fb71cf7746549fc422e99e10f6393a4249cc92d7ac20bb6aaef97a8764b48ea0477774ec40b2089ee3bea9d8647447b7adb57ee3f48a4e8f5c50b77f771d193fcb64262335afd3bebdb2de7eafb97c1749f96c8226cf90a96309348a7ee30a68c74f83f12020e85a5d9196c4c6e8e574c2ac4a50c1ca14bebc0f8d8ef08e7fc370e5fe220575da663faf81706f760aba014bfc2b8a3d78637c65e73065db2b8f4d3d724eb315674d2bdcaec9b39fc08a5b00b5b56f81c897fb223872f952b6c7b78c68e20aec57da0ecf37fa2f488e2763dfb46554dd208d4fe4dc4aa7364eb19c975a2e48277ca29c43d597d835913b8ef2c3dedb05cf5bad126261a7a083947257ee4052d92593f9b91da5a45560a8bd60eafeef83b29a3a328ba03a07803517540798385406a4ecb64782ec538a05ba9c1d91f0719a5d298be08629666f16994cb661d55d808a7c73d905c15c5850967e83ca252a6592102a738329edb73da677780bb0d61d584fa01532f1b7aa643f00e47c86da391cc5fe0dcfd41b8aebbf06b841f50dff48f8eea1bbc65865e1eeb37fd0a7771355a358359786bd59c4ae7de753ef9cb3ae7e5064f45bf012b94d29e76d1af9ccbf3fd4f64ab12821b3a43d72593383bc9641aab6ca805f1ae87f8aa4e2410c055758bbb59070b314d30f34dcde552a4053e9e394bd5b1d06732ccf13a648e5af7f9f6cffc90c804e0e0868daf701e91fd21949db6f2110ad6231eeb58d9be5c522097be547a56c23501100522441b5d35d614844190c603e15cbf1f552e4b605c1f92043c82b4423c7b167f10926a37c1f3c7cc32da8b6e90cfcfae59ab61c81842bb1447bc7102f53c165f6ca1fc4ee887cae3a6abd63300109384f242c6c40cc51ca2779e77f58f1dcb4ec252f8e781cda6ed672441bd237a03eeaaccb439d5c98b06e18d8e097304615d7b4807a36d00881d6e45102d5a3be1bff0e227f4516b7b3dbe2d76659d908d01b088e03542951d698bc33979ce360ef8d3424484178a5ce39a759ff238bcd7eaca9581c724406da2c25067b6d151f0b5f671bce8dbcb9d013f99886ac54b19f1ec6bbaf32db5b4e35b269cc0aa90fbe1e4978c9801bf552bbd5c2d7d764ee9ad1c079f2bfd3f2407615903394862fc666a702624223413d93ec4f5b12daad261f3d7a6159a204ceb81bfebc7fb1ba7545cd0ff6fe29329edd6acd2c4b5b64ea3b3774dbb07a3e4856e8d027b8ecb3ac64e54dd15e29bb074f74723e99475611d1877832102d82984c14cc7185128df945dd97c9eba2a7bbf400d8b4316b8457a0c00a4ccd19d072b52f7430312eafcadffcdfe60d46fb7b05ffd209407b1a3627b0e43fd895b6cce5cc9a81ca99daed4da1e2c71f1a275fa66dd8be825bea1831834124903a66478a00ffbee1123f4d4f53216b72169d3b71b2e25f3f1c92065e4e03ce7c0c0d1dc46feaaa3ff97e990c39c0876f71af5299e7da8a80afe7811752cd3460c2c5ac1c3b35ddc057ee937c13cc7f49188fa8d1e7c8a407a3ba0ca4bcd142b62c06d5faee0956ce3eaac1cc67222ae0f90e0398c49b4ccb881a946c46b62ec917720d0eff7b7a8e7c4a1a77d61d3afeb9f62490fb55f477caed06d1a59b212ec072ff205bd5b05465384b63b63d7ef3094dc5617758ef3936797f036c8013e9271f6ae89db6c2c12e6669f256dc8bd1f8cb14ed7c40a484f393a594ffc0ce6e89f536e6c263020a4ab3695b531c250c295fde46cd4cf272a64dc6127c2f5be3fa89fed2ea88abf5239ad5c4fdc6de8129ebd46063e097ef28271602cfce583c7a977420c2b5b702fe38921581ce48e534bfe8ff9cd5438348ca99a19b3c14b1c048480fcd7e776ee09f75b53b9a0fac0691fe54753b58698ed59a3dd52f3fc450f2bbcdd76235b926ae1a73c08a5ffe6ffd1ace9274b5aa80ddc987881755053b4743b50191a6f6", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="6c000000000000000000000007000000442c8781ffffffff000080017f000001000000020a010102000000eee0000001000000097f00000100000081831b73e00000020a010100ac1414bb640101027f000001ac141415071303ac1e0001ac1414bbac1414bb0a01010200000000000014000000000000000000000001000000ffffffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0101e0000001000000004c000000000700000094040100861600000001ffad74744a15ff1f71faadd9dff163f8fdb78e5bd428071f470000000000000000000000985458926d3dcb005c9af736984b3393140739c88816f160c3"], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x4, 0x40, 0x0, 0x1, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x2, 0x19}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x4, 0x9, 0x81, 0x5, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11, 0x700, 0x0, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xe51}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xa3ff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7ff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4814) r7 = socket(0xa, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a31fed0e2126d955c3ebe718130dc66c41b779ae7172cee90e2af69a32cf674fee418a0d0d6ab7a029c5ef2a404df7e11c6e9b26e601c2bc5f9ce475367a9f3b27b56fbba0f5417d6010500"/101], 0x65) r8 = epoll_create(0xac) ioctl(r0, 0x8916, &(0x7f0000000140)="af0ee1acb3aa7da7b79d377af4e7d1a20e2d6358412aea75bb55f228fd50d2368f81cdb4aa9d8349449f6325854d6089bf3d4134e57fa90800758aa9e05b61397b3ab724e686a576ca13be15") ioctl(r7, 0x8936, &(0x7f0000000000)) sendfile(r1, r8, &(0x7f0000000040)=0x6, 0x8) 13:53:30 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000002340)=ANY=[@ANYBLOB="02000000010001000000000002002dc3", @ANYRES32, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000400", @ANYRESHEX=r9, @ANYBLOB="02000500", @ANYRESDEC=r0, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32=r4, @ANYBLOB="08009e00", @ANYRESHEX=r6, @ANYRES64, @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="08000600", @ANYRES32=0xee01, @ANYBLOB="100002000000000020000200000054cbc8439c802e872ca74c270e91e600af6ad00401fccb95fda263d784175a881520db13f06e7f42e217f6074fa4a04b9527d6dfb771c48d806b9c03026ddb9ebb07a98e1c60439c3c09a3efa6ac81cfcac7f1539b"], 0x7c, 0x6) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r12) setxattr$system_posix_acl(&(0x7f00000022c0)='./file1\x00', &(0x7f0000002300)='system.posix_acl_access\x00', &(0x7f0000002500)={{}, {0x1, 0x3}, [{0x2, 0x2, r5}, {0x2, 0x2, r7}, {0x2, 0x2}], {0x4, 0x5}, [{0x8, 0x3, r10}, {0x8, 0x4, r12}], {0x10, 0x4}, {0x20, 0x7}}, 0x4c, 0x2) r13 = socket(0xa, 0x1, 0x0) ioctl(r13, 0x8916, &(0x7f0000000000)) ioctl(r13, 0x8936, &(0x7f0000000000)) [ 380.174921][ T8739] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:53:30 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xc4101, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @private}, &(0x7f0000000100)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x1, 0x8, 0x1, 0x80000000, {{0x21, 0x4, 0x3, 0x21, 0x84, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x1, [{@broadcast, 0xb8}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x10, 0x14, 0x0, 0x1, [0x401, 0x81, 0xffffffc0]}, @end, @timestamp_addr={0x44, 0x44, 0xf2, 0x1, 0x0, [{@private=0xa010101, 0x582c8baf}, {@empty, 0xff}, {@remote, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x11}, {@private=0xa010101, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4}]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) [ 380.338470][ T8739] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 380.360777][ T8739] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 380.373972][ T8739] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 380.414103][ T8739] F2FS-fs (loop2): invalid crc_offset: 0 [ 380.421729][ T8739] attempt to access beyond end of device [ 380.421729][ T8739] loop2: rw=12288, want=8200, limit=8192 [ 380.436227][ T8739] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 382.102210][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 382.108260][ T87] Bluetooth: hci0: sending frame failed (-49) [ 384.182059][ T4321] Bluetooth: hci0: command 0x1001 tx timeout [ 384.188343][ T87] Bluetooth: hci0: sending frame failed (-49) [ 386.261744][ T4321] Bluetooth: hci0: command 0x1009 tx timeout 13:53:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:53:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:53:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x505100, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="6c000000000000000000000007000000442c8781ffffffff000080017f000001000000020a010102000000eee0000001000000097f00000100000081831b73e00000020a010100ac1414bb640101027f000001ac141415071303ac1e0001ac1414bbac1414bb0a01010200000000000014000000000000000000000001000000ffffffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0101e0000001000000004c000000000700000094040100861600000001ffad74744a15ff1f71faadd9dff163f8fdb78e5bd428071f470000000000000000000000985458926d3dcb005c9af736984b3393140739c88816f160c3"], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x4, 0x40, 0x0, 0x1, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x2, 0x19}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @loopback}, &(0x7f0000000540)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'sit0\x00', r2, 0x4, 0x9, 0x81, 0x5, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11, 0x700, 0x0, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xe51}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xa3ff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7ff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4814) r7 = socket(0xa, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a31fed0e2126d955c3ebe718130dc66c41b779ae7172cee90e2af69a32cf674fee418a0d0d6ab7a029c5ef2a404df7e11c6e9b26e601c2bc5f9ce475367a9f3b27b56fbba0f5417d6010500"/101], 0x65) r8 = epoll_create(0xac) ioctl(r0, 0x8916, &(0x7f0000000140)="af0ee1acb3aa7da7b79d377af4e7d1a20e2d6358412aea75bb55f228fd50d2368f81cdb4aa9d8349449f6325854d6089bf3d4134e57fa90800758aa9e05b61397b3ab724e686a576ca13be15") ioctl(r7, 0x8936, &(0x7f0000000000)) sendfile(r1, r8, &(0x7f0000000040)=0x6, 0x8) 13:53:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:40 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x402, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:53:40 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:40 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffca5, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xd89, 0x3, 0x8, 0xffff, 0x745, 0xffffffffffffff32]}, &(0x7f00000000c0)=0x78) 13:53:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="494c8e9043fb3b64f067e10c1aad518cf4218e00e8f2a92a98a63b67ecfd6fa2b0fe937e212709203bdcdca5f3900c4f498f7b9b726f"], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @remote}, {0x306, @remote}, 0xe, {0x2, 0x4e22, @private=0xa010102}, 'veth0_vlan\x00'}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:53:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 390.290401][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 390.303704][ T8794] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 390.324980][ T8794] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 390.333451][ T8794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 13:53:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="494c8e9043fb3b64f067e10c1aad518cf4218e00e8f2a92a98a63b67ecfd6fa2b0fe937e212709203bdcdca5f3900c4f498f7b9b726f"], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @remote}, {0x306, @remote}, 0xe, {0x2, 0x4e22, @private=0xa010102}, 'veth0_vlan\x00'}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:53:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="a8142257389cfde260a1f2170c7150f93b6a5951ddec2fea5a638e0ddf9d7e1d31f01c5995bd13628712678924a0b90f042b3dbffaaa323dbd192923cde24da2c3cdfa623e9a7b7a0c5afe7606edcdf8ce437d1debe145dba1106ee0f2a3ea07ffffae7b7ef30000047f9416821aafdc3a7f0f93a47d8bdd580f2974f50d90a1ca9387471103819362b39eb66ffe68220e2063c07845f30161f1fe22c9d33404eb377bf52d30a377ddbdd7f7db55c527c7d586c7fb5119020112c56a7a987b607850da1073569dadc61458dd0b4bc20a8adf5c204d612dd22e2e5f3444e67584f15bf6d0e81cf8a9de2c196bcc51c9"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0xe2, [0x40, 0xe9b, 0x9, 0x9, 0x1, 0xb7], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000340)=""/226}, &(0x7f0000000100)=0x78) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 390.366505][ T8794] F2FS-fs (loop2): invalid crc_offset: 0 [ 390.383208][ T8794] attempt to access beyond end of device [ 390.383208][ T8794] loop2: rw=12288, want=8200, limit=8192 13:53:40 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1b5b07073700006300000000000000000000000000000000000000000000000040000000000000000000000a00000000000000000000380000000000000000207065cf4c6ca0ed1c88243a78542f418e322cfe42720e1d9683cc433d5c394c78"], 0x40) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) capget(&(0x7f0000000180)={0x20071026, r1}, &(0x7f00000001c0)={0x1000, 0xfffff800, 0x0, 0xc9, 0x7, 0x57c1}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) pipe(&(0x7f0000000240)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x304) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000640)=""/108, 0x6c}], 0x5, &(0x7f0000000200)=""/8, 0x8}, 0x7}], 0x1, 0x10143, &(0x7f0000000780)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) r8 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 390.426787][ T8794] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 390.609796][ T8794] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 390.619432][ T8794] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 390.628026][ T8794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 390.644561][ T8794] F2FS-fs (loop2): invalid crc_offset: 0 [ 390.653689][ T8794] attempt to access beyond end of device [ 390.653689][ T8794] loop2: rw=12288, want=8200, limit=8192 [ 390.669660][ T8794] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 392.340914][ T4321] Bluetooth: hci0: command 0x1003 tx timeout [ 392.346925][ T87] Bluetooth: hci0: sending frame failed (-49) [ 394.420695][ T4321] Bluetooth: hci0: command 0x1001 tx timeout [ 394.426712][ T87] Bluetooth: hci0: sending frame failed (-49) [ 396.500398][ T4321] Bluetooth: hci0: command 0x1009 tx timeout 13:53:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:53:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x1) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:53:50 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1b5b07073700006300000000000000000000000000000000000000000000000040000000000000000000000a00000000000000000000380000000000000000207065cf4c6ca0ed1c88243a78542f418e322cfe42720e1d9683cc433d5c394c78"], 0x40) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) capget(&(0x7f0000000180)={0x20071026, r1}, &(0x7f00000001c0)={0x1000, 0xfffff800, 0x0, 0xc9, 0x7, 0x57c1}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) pipe(&(0x7f0000000240)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x304) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000640)=""/108, 0x6c}], 0x5, &(0x7f0000000200)=""/8, 0x8}, 0x7}], 0x1, 0x10143, &(0x7f0000000780)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) r8 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:53:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:53:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80023, 0x4, &(0x7f0000000200)=[{&(0x7f0000000040)="200000004600000019000000600100000ff68f01000000000000000004000001000000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000002d24200001203d17c8a5a5639bf4b", 0x6e, 0x400}, {&(0x7f0000000140)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41002746da8c69c473471c446b87060e0000040000ddf4655fddf4655fddf4655f000000000000040020", 0x2b, 0x14fd}], 0x81, &(0x7f00000002c0)=ANY=[]) mknodat$null(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x20, 0x103) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 13:53:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x406, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:53:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = gettid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) clone3(&(0x7f0000000880)={0x60004000, &(0x7f0000000080), &(0x7f0000000240), &(0x7f00000002c0)=0x0, {}, &(0x7f0000000540)=""/170, 0xaa, &(0x7f0000000780)=""/243, &(0x7f0000000300)=[r0, r1, r0, r0, 0x0, r1, r1, r0, r0, r1], 0xa}, 0x58) sched_setattr(r2, &(0x7f0000000900)={0x38, 0x2, 0x48, 0x5, 0x43, 0x10000, 0x280, 0x20, 0x20, 0x1ff}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x5, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f00000001c0)=""/20, 0x14}, {0x0}, {&(0x7f0000000600)=""/213, 0xd5}], 0x6, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x9, 0x2, 0x0, 0x3e2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4000c, 0x0, 0x6, 0x0, 0x7fff, 0x8a, 0x1, 0x1, @perf_config_ext={0x1000}, 0x1d2da, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, r6, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x9) sendfile(r5, r7, 0x0, 0x4000000000010046) 13:53:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x9, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x7, 0x3, 0xdcf7}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x8, [{@broadcast, 0x8001}, {@loopback, 0x2}, {@private=0xa010102, 0xee}, {@multicast1, 0x9}, {@loopback, 0x81}]}, @lsrr={0x83, 0x1b, 0x73, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "830e891faeeb63fcfdb78e5bd428"}]}, @rr={0x7, 0x1f, 0x47, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002cc0)={'ip6tnl0\x00', &(0x7f0000002c40)={'sit0\x00', r1, 0x4, 0x1, 0x2, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xb97, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ac0), 0xc, &(0x7f0000002fc0)={&(0x7f0000002d00)={0x284, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) [ 400.525598][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 400.530032][ T8847] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 400.541517][ T8847] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 400.541525][ T8847] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 400.542775][ T8847] F2FS-fs (loop2): invalid crc_offset: 0 [ 400.542814][ T8847] attempt to access beyond end of device [ 400.542814][ T8847] loop2: rw=12288, want=8200, limit=8192 [ 400.542835][ T8847] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 400.588184][ T8862] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. 13:53:50 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1b5b07073700006300000000000000000000000000000000000000000000000040000000000000000000000a00000000000000000000380000000000000000207065cf4c6ca0ed1c88243a78542f418e322cfe42720e1d9683cc433d5c394c78"], 0x40) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) capget(&(0x7f0000000180)={0x20071026, r1}, &(0x7f00000001c0)={0x1000, 0xfffff800, 0x0, 0xc9, 0x7, 0x57c1}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) pipe(&(0x7f0000000240)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x304) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000640)=""/108, 0x6c}], 0x5, &(0x7f0000000200)=""/8, 0x8}, 0x7}], 0x1, 0x10143, &(0x7f0000000780)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) r8 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:53:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="d59f93d174fac8a6d641fe5b583a32ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 400.627935][ T8865] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 400.716695][ T8847] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) 13:53:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="42e482856b91"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 400.787183][ T8847] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 400.800867][ T8847] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 400.850901][ T8847] F2FS-fs (loop2): invalid crc_offset: 0 [ 400.866028][ T8847] attempt to access beyond end of device [ 400.866028][ T8847] loop2: rw=12288, want=8200, limit=8192 13:53:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x9, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x7, 0x3, 0xdcf7}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x8, [{@broadcast, 0x8001}, {@loopback, 0x2}, {@private=0xa010102, 0xee}, {@multicast1, 0x9}, {@loopback, 0x81}]}, @lsrr={0x83, 0x1b, 0x73, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "830e891faeeb63fcfdb78e5bd428"}]}, @rr={0x7, 0x1f, 0x47, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002cc0)={'ip6tnl0\x00', &(0x7f0000002c40)={'sit0\x00', r1, 0x4, 0x1, 0x2, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xb97, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ac0), 0xc, &(0x7f0000002fc0)={&(0x7f0000002d00)={0x284, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) [ 400.899264][ T8847] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 400.952817][ T8885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.579503][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 402.585627][ T87] Bluetooth: hci0: sending frame failed (-49) [ 404.659283][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 404.665300][ T87] Bluetooth: hci0: sending frame failed (-49) [ 406.739037][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:54:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000380)={{r1}, "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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88000000150004002bbd7000fddbdf250280a5fe", @ANYRES32=0x0, @ANYBLOB="080008004001000008000200e000722d36344cbb893ce3ec917b5315448e0001080002007f0000011400030063616966300000000000000000000000140006000000008050f00000020000000100000008000200ac1414aa140006000500000005000000010400006200000014000600"], 0x88}, 0x1, 0x0, 0x0, 0x10040001}, 0x20048090) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002a40)={0x0, @initdev, @empty}, &(0x7f0000002a80)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x60100}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)=@mpls_getnetconf={0x1c, 0x52, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) r4 = socket(0xa, 0x1, 0x0) r5 = getpgid(0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6001, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x7, 0x9, 0x0, 0x7ff}, r5, 0x5, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)=r5) ioctl(r4, 0x8916, &(0x7f0000000000)) perf_event_open(&(0x7f0000001400)={0x0, 0x80, 0x2, 0x3b, 0x1f, 0x1f, 0x0, 0x401, 0x89, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0x3}, 0x1000, 0x0, 0x0, 0x2, 0x101, 0x8, 0x6c, 0x0, 0xfff, 0x0, 0x8000}, 0x0, 0x8, r6, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl(r4, 0x8936, &(0x7f0000000000)) 13:54:00 executing program 4: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="1b5b07073700006300000000000000000000000000000000000000000000000040000000000000000000000a00000000000000000000380000000000000000207065cf4c6ca0ed1c88243a78542f418e322cfe42720e1d9683cc433d5c394c78"], 0x40) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) capget(&(0x7f0000000180)={0x20071026, r1}, &(0x7f00000001c0)={0x1000, 0xfffff800, 0x0, 0xc9, 0x7, 0x57c1}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) pipe(&(0x7f0000000240)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x304) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000640)=""/108, 0x6c}], 0x5, &(0x7f0000000200)=""/8, 0x8}, 0x7}], 0x1, 0x10143, &(0x7f0000000780)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) r8 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:54:00 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x48000) 13:54:00 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:00 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x3c, 0x26, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xb}, {0x0, 0xfff1}, {0x2, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x8040) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:00 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x100000002) r2 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa08000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@aname={'aname', 0x3d, '\'['}}], [{@obj_type}, {@uid_lt={'uid<', 0xee01}}, {@smackfshat}, {@uid_gt={'uid>', 0xee01}}, {@fowner_lt={'fowner<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@fsname={'fsname', 0x3d, ':\\/*,#^.--$'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}]}}) 13:54:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="ab", @ANYRES16], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 410.772525][ T8900] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 410.795029][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 410.812043][ T8900] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:54:00 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r1, 0xee01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fstatfs(r4, &(0x7f0000000040)=""/17) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000180)={0x2c, 0x6, 0x0, {0x3, 0x2, 0x3, 0x0, '$+@'}}, 0x2c) dup3(r2, r1, 0x80000) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x1, 0x81, 0xff, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x48000000, 0x0, @perf_config_ext={0x0, 0x5}, 0x1044, 0x51b, 0x1, 0x0, 0x13c, 0x4, 0x3, 0x0, 0xfff, 0x0, 0x1}, 0x0, 0x4, r4, 0x2) 13:54:00 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) pwritev(r0, &(0x7f0000001780), 0x0, 0x0, 0x0) 13:54:00 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x852d9940502477a2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 410.822500][ T8900] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 410.857910][ T8900] F2FS-fs (loop2): invalid crc_offset: 0 [ 410.875313][ T8900] attempt to access beyond end of device [ 410.875313][ T8900] loop2: rw=12288, want=8200, limit=8192 [ 410.897729][ T8900] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 411.046370][ T8900] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 411.059066][ T8900] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.066971][ T8900] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 411.087865][ T8900] F2FS-fs (loop2): invalid crc_offset: 0 [ 411.104042][ T8900] attempt to access beyond end of device [ 411.104042][ T8900] loop2: rw=12288, want=8200, limit=8192 [ 411.119047][ T8900] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 412.818306][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 412.824376][ T87] Bluetooth: hci0: sending frame failed (-49) [ 414.898119][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 414.904171][ T87] Bluetooth: hci0: sending frame failed (-49) [ 416.977886][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:54:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:10 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x400, 0x6, 0xff, 0x4, 0x80000001, 0x9]}, &(0x7f0000000240)=0x78) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) socket$inet(0x2, 0x5, 0x1) ioctl(r4, 0x0, &(0x7f00000000c0)="30cd03144197d485c9faf0fe00"/27) 13:54:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde0f86c0a68085264f0fbbd68f73f9548f6a610f61948ef71f5b9e76717343ac268255ae9c93dd4753dcfd9c6d4c8437d4a1de8cf3c4a805f3c0e9eb03cfce52162f70c2a09dcdcc6f7e8421aa9f530eb3d8da631bfafba1bc2f2050fdd80b8b336b", 0x79) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000004, 0x0, 0x0, 0xe7}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0xffffffff) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x1f, 0x7, 0x10000, 0x1, 0x1, 0xfffffeff}, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f47", 0x8b}, {&(0x7f0000001340)="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", 0x1b8}], 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 13:54:10 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r1, 0xee01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fstatfs(r4, &(0x7f0000000040)=""/17) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000180)={0x2c, 0x6, 0x0, {0x3, 0x2, 0x3, 0x0, '$+@'}}, 0x2c) dup3(r2, r1, 0x80000) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x1, 0x81, 0xff, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x48000000, 0x0, @perf_config_ext={0x0, 0x5}, 0x1044, 0x51b, 0x1, 0x0, 0x13c, 0x4, 0x3, 0x0, 0xfff, 0x0, 0x1}, 0x0, 0x4, r4, 0x2) 13:54:10 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x600, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:10 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:10 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:10 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 421.005066][ T8950] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 421.013953][ T87] Bluetooth: hci0: sending frame failed (-49) [ 421.024993][ T8950] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.035464][ T8950] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 421.049436][ T8950] F2FS-fs (loop2): invalid crc_offset: 0 [ 421.060619][ T8950] attempt to access beyond end of device [ 421.060619][ T8950] loop2: rw=12288, want=8200, limit=8192 [ 421.074140][ T8950] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 421.208165][ T8950] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 421.225919][ T8950] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.264306][ T8950] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 421.307722][ T8950] F2FS-fs (loop2): invalid crc_offset: 0 [ 421.329385][ T8950] attempt to access beyond end of device [ 421.329385][ T8950] loop2: rw=12288, want=8200, limit=8192 [ 421.341011][ T8950] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:54:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@remote, 0x4e23, 0x4, 0x4e21, 0x2, 0x2, 0x100, 0x20, 0x33, 0x0, 0xffffffffffffffff}, {0xffff, 0xe00, 0x92c6, 0x8, 0x7, 0x3ff, 0x3f, 0x6}, {0x8000, 0x6, 0x9, 0x10001}, 0xc405, 0x6e6bb4, 0x2, 0x0, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, 0x2, @in6=@remote, 0x0, 0x4, 0x3, 0x4, 0x5, 0x300, 0x4}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="af"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x200, 0x420000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xe8, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9ae013ea8d53710b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x450201, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in=@empty, @in=@loopback, 0x4e23, 0xfff7, 0x4e22, 0x9, 0xa, 0xe0, 0x80, 0x1d, r2, r8}, {0x17, 0x8, 0x80000001, 0x3, 0xce, 0x7, 0x3f, 0x1f}, {0x1, 0x40, 0x9, 0x485a}, 0x5, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in=@broadcast, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3500, 0x1, 0x1, 0xce, 0x5, 0x401, 0x1ac6}}, 0xe8) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f00000003c0)={@local, @rand_addr=0x64010101, @empty}, 0xc) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x25}, @empty, 0x40, 0xff, 0x401, 0x0, 0x6, 0x46000040, r2}) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:54:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = syz_io_uring_complete(0x0) dup(r2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x895a, &(0x7f0000000080)="69d2f143b86a51d4f74f94f2baf374d39cfe107e3c49bf3e2c0b6f37c7d9d7b2a4c9594cc65c52") ioctl(r3, 0x8936, &(0x7f0000000000)) 13:54:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='9L'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x6, &(0x7f0000000300)="00000004000000000000e02fa6fd467da2b70441e95c98cb213f62ef771400ff0bfa0447aeacef2cc3cae1a5cc605e03debea4e4cc70317b4f32a3fb4b9d226fbe4d185ce99a1cf9751457dbc7116aefcddb04a6355096fd1fd9b4d11004d57020effb4d978f9854ae340b98a3894c89842c54f519063d5c089c43ece95d303d5a85fa38517ce48daeb02228c761483c73b209ade21bbf747fc47fe3642fc839bcb8ea5fbc6d278d7984d0b86d2bbf90e0bd859fc6194ef7f9041bd872ae9f492ebfd75c83b54b254e82c4ca0e434504a50774dd0f3176adf076760bacb503078e78a5d0ea0b519a7c85f7f82d095e140adc954f1bcedfd94e8aa632d0ebfcc40cea238c3ac2ae0f057cfe2494cbae14a6772d185a3ca10d318191d7fec37ac7b28abb36df2c5e20fb18042deab4d8a51933c9ea13dfe0494ff5562fcdd7c09f756308af364151c9502d8ce7cf6807f17339cfb7788fa84a8ddd3ba21519bef3f36b52fce3b4ddd02107628b3f56f143bc931e0351b0ba574ea4323becb17f427e07d392f98db66321bc51ff2692de4e7b204d60e5b305b45983af445698b73830274c9d777821e064a1b6cf78a757caedb044caf22e04602216d4c13f5704e4f354a67520cdc81fd87752108ffb477719c7d9f34267a01a4e8974b2e2ef159201325bfe71d9e6b23433dec8e7f1958b0e6144f0cebb9b58106ac83fb1df0aa08c79") ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x604, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) [ 421.524403][ T8992] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 421.534341][ T8992] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.542214][ T8992] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 421.552841][ T8992] F2FS-fs (loop2): invalid crc_offset: 0 [ 421.559009][ T8992] attempt to access beyond end of device [ 421.559009][ T8992] loop2: rw=12288, want=8200, limit=8192 [ 421.570218][ T8992] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 421.712881][ T8992] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 421.721912][ T8992] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.730026][ T8992] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 421.739484][ T8992] F2FS-fs (loop2): invalid crc_offset: 0 [ 421.745232][ T8992] attempt to access beyond end of device [ 421.745232][ T8992] loop2: rw=12288, want=8200, limit=8192 [ 421.756434][ T8992] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 423.057208][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 423.063368][ T87] Bluetooth: hci0: sending frame failed (-49) [ 425.137082][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 425.143148][ T87] Bluetooth: hci0: sending frame failed (-49) [ 427.216939][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:54:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="abb596e48b3852ee07000000634045d814bf3e856986acf45e85fb4769a3979f55a70fd171a440998740"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendto$inet(r0, &(0x7f0000000180)="ea151da9b9cea495a0dfab1733138f0ba9021a7db1b1b84ce954d4c7eae71ea999e96adf59a9738aeda15f35fb241a847cdad1fe1b19b61d9a5d275779f2b5128c0665e00d0d04329435be1c84c757846faedc85b27f95e57a9d0880183087f39884232425ba14a3c3aadbf3316b74e1fa47a098be0fb7e92ace367459561ca48af573c2", 0x84, 0x0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000080)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 13:54:21 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x700, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x35, 0x5d, 0x10}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000340)='bpf_lsm_cred_prepare\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000850000000000965300009f9b2247c1ca417c5b9de5f092fcb5ed"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x74) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x40}, @generic={0x0, 0x5, 0x4, 0x8, 0x3c5db144}, @jmp={0x5, 0x0, 0xe, 0x1, 0x6, 0x6, 0xfffffffffffffff0}, @exit, @call={0x85, 0x0, 0x0, 0x8c}], &(0x7f0000000140)='GPL\x00', 0xe8, 0x9, &(0x7f0000000180)=""/9, 0x40f00, 0x1a, '\x00', r4, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x2, 0x9}, 0x10, r5, r6}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x9, &(0x7f0000000040)=@raw=[@map={0x18, 0x8, 0x1, 0x0, r0}, @map, @alu={0x7, 0x1, 0x3, 0x6, 0xa, 0xffffffffffffffff, 0x1}, @jmp={0x5, 0x1, 0xa, 0xb, 0x6, 0x10, 0x6e8771c0ac5e4e5d}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @generic={0x1, 0x3, 0x2, 0x100, 0xfffffffc}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x35, &(0x7f0000000100)=""/53, 0x40f00, 0x12, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0xe685, 0x7ff}, 0x10, r5}, 0x78) 13:54:21 executing program 5: r0 = socket$inet(0x2, 0xa, 0x400) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket(0x1a, 0x800, 0xe2) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, &(0x7f00000000c0)=0xc) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) [ 431.252302][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.263681][ T9019] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 431.282954][ T9019] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:54:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="c1"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=@newsa={0x224, 0x10, 0x100, 0x70bd25, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0x4e24, 0xfff9, 0x4e21, 0x7e, 0x0, 0x20, 0x80, 0x2b, r1, 0xee01}, {@in=@multicast1, 0x4d4, 0x3c}, @in6=@loopback, {0x3, 0xffff, 0x40, 0x7ff, 0xf61, 0x3}, {0x5, 0x100, 0x7, 0x5}, {0xf47, 0x41f74e0a, 0x6}, 0x70bd27, 0x3502, 0x2, 0x2, 0x4, 0x81}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@loopback, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x6}, @policy={0xac, 0x7, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e24, 0x0, 0x4e21, 0x3, 0xa, 0x1a0, 0xa0, 0x2f, r1, 0xee01}, {0x5d9, 0x3, 0x4, 0x400, 0x3, 0x9, 0x20, 0x5}, {0x9, 0x7f, 0xa5}, 0x5, 0x6e6bbe, 0x0, 0x1, 0x2, 0x2}}, @policy_type={0xa, 0x10, {0x1}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x80000001}}, @replay_thresh={0x8, 0xb, 0x3}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @lastused={0xc, 0xf, 0x1f}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2d, 0x80000001}}]}, 0x224}, 0x1, 0x0, 0x0, 0x8815}, 0x40) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r3 = socket(0x11, 0x5, 0x2) sendto$inet(r3, &(0x7f00000005c0)="8393b655e1b77f734531e8335e2e674b0a8c5bde76862f0e7f1b0512c1ad5549d8a6aa04a8b6bc0342944d3a4809e4145280c7c056e84cd762e1b02633a1a13edd33206f6a6bf309b5b2b4b7a9cf37a1e416def01797f8ae84902ba0030a81fd38f3280903122f3e8d6d6f00dbd3651d3e9197a4dfde543a606579b6d7c957fbab047c94ead783d0d31a7ea3bb4a05e549b60540cc22c9278d", 0x99, 0x40840, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) sendto$inet(r5, &(0x7f00000000c0)="94a8b3beda5d499ca1ae8b9e1add29c947cab2bb97e6c8d0a4d7f5841f7ba679f9467c98f15d970ee9ea04783a34225fbc52caddfcaa064619009774eb0f30ec40784ca28710edac849339829f304f4c3ba5485ce2befe8cda81996873db7fdb585df450385d4f681b4df30dc0b3fb74a7f14e4f", 0x74, 0x80, 0x0, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 13:54:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) fcntl$setpipe(r2, 0x407, 0x10001) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 431.299893][ T9019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 431.315575][ T9019] F2FS-fs (loop2): invalid crc_offset: 0 [ 431.328096][ T9019] attempt to access beyond end of device [ 431.328096][ T9019] loop2: rw=12288, want=8200, limit=8192 [ 431.344468][ T9019] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:54:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="a9c18bacf0afc9994cfc7513e170ce31b437014db0202614d511caedebf6f0918d6c8d0f508ba4a6d3e67771"], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x100) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 13:54:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote, @empty, @loopback, 0x8, 0x8000, 0x7, 0x100, 0x6, 0x4040001, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0x0, @local, 0x4e24, 0x2, 'lc\x00', 0x28, 0x4, 0x21}, 0x2c) [ 431.506155][ T9019] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 431.515101][ T3117] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 431.536583][ T9019] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 431.548846][ T9019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 431.563905][ T9019] F2FS-fs (loop2): invalid crc_offset: 0 [ 431.577785][ T9019] attempt to access beyond end of device [ 431.577785][ T9019] loop2: rw=12288, want=8200, limit=8192 [ 431.594856][ T9019] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 431.896391][ T3117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.907358][ T3117] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 431.916633][ T3117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.926901][ T3117] usb 4-1: config 0 descriptor?? [ 432.407019][ T3117] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 432.417332][ T3117] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input14 [ 432.499186][ T3117] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 432.614034][ T4333] usb 4-1: USB disconnect, device number 14 [ 433.296209][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 433.302534][ T87] Bluetooth: hci0: sending frame failed (-49) [ 433.386188][ T4333] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 435.376140][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 435.382211][ T87] Bluetooth: hci0: sending frame failed (-49) [ 437.455848][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:54:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="a9c18bacf0afc9994cfc7513e170ce31b437014db0202614d511caedebf6f0918d6c8d0f508ba4a6d3e67771"], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x100) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 13:54:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="8a6cd36bc130ff78e8d11f2b668ccd399b70927fa691b6a105ce489c9c8a3eab405bab4a9bdc65b75ff97ff3735c17c6d71b41be33826ad75002de47aaa733c0e43e432792d3e1be835e5f3ba4aaeebae46151806b25b7d2c295d8fa608448fd46566dbd4f9fcbf37b62bc4c5c3d6f427e08b06dbda4419cbb5e5a1d155e8ffb100bd2240b38ae752cd4c2f8a562b4140193b2de17079489bf204645e7b40d85796c9c2993ac6f8351ba3ecef548e838"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000180)=0x1e) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4b4, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x3c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "85cd70d58af5c6edd113a7333f4d4518239322c0166ed5102921f6ebf369633f702fd5cac0f24d5ebfd1ca821b1196cd38cc3c3fad24feab28e22629b7daed2be75f86872d5dfc618d5b8125a7a61d324a88cb3e11e4843a0587bb09bf8fd3e064fbedc2075b057e40b2474da4fd0ca0542613c24b49e6fdb4f584a594673ff2c34c0c09ec1ad577b7f82c41b38881a4689d23b25a47acba4d22a271c206fe36d5de246696c3fdf1d78a467d26cc22547e51d843a89db5c2b6ab69e5887e4b685e49647383a441c3e397ba9f46ff60256c49269fa5fc44d702b649209e4e3ed44034de7ec577"}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "3fa7517fcbd5c084bc39cf12f537fc5cd46c76b1ba18a72620f640fd97fa8453d20fba24283619f29f31976f65eb6e330ab55b44401405e9fe91ef2400da5e168f750131c7ffb42d3f5cc7453e79c87eebbec6476662ddebf91a1e8681d474584e2b3fe248dd0770025929dcc59f0e0af94183a8bb1d820e"}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "562c95d0c1cd5978f3c3bc029b7a6c0c3f7b9633b42e7b3dc9a1363e15b268df2f56639c311f9c6f8fec1dbc48c3304ef29b1f18d2f96a38b1aeceb74111f44dcb429eb9acf1712dad1f4ad1a252d25a589780148ca259ec281ef246f3b94bf4d3665ddf7ca9ef0f7b3cab899b9bc6a09e7e124880ef129e2362d2c61d3be05edc262117028d76dbb47c97d4b68b393780a4b9a86a2c93477af7717798159fd3f478f720173d38c4c2c09dd51dc466a2b24f59a547b04c6a3317f1d3318b90dd6f1ea678bb96e0867f3dc0b4515fb7466964e67a685eac8589bfd5cac178ef572737451155"}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "4f59da5100c25f4e6112c5b0b9b29265c846faef6dd24e573e59a73cdddd997dcec8659f21d14a96f91032fc2f43b4b609615b4c378e5b8d2d00ecfbb87c76c634e93e948e09e73151c8187e23f7bc4a191ed61eb27499423c4a1c823676c29353f14699af568bd2719910ec5ff0b47b4f50e30419a8fd958db5e0c86cae7367d844a8afd09a67cd9dd23ff6fc18685680015393f2e2510794ede88d35517da97f806a5d83d09e2c1f4ed86c9a424b3f94c58e157fb5a670dcfce97e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "374664de98005c2142f94fbacbb3f9720ad81435aa3341dafd0e6ce44dfccabf0445b4d7aac69374bfa80c38f933336c0a45f9a4dcb6afecb3fca3bbc20fbe43a4d119fc4cf0d4d554956e08853bfcc9ab52c3fd38abe65da1dd03b38399bc41c7dc2a6cf3c93ffe3760bf982ad832b15d82107e4ea0d414b57a195375664fd8a47590e4ba6b1209e75712703411f58693f91574f5e4752dbc6ddbc6e5"}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]^>5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$)@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1bf}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x80000001}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x40}, 0x200080d0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', r1, 0x0, 0x7800, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@timestamp={0x44, 0x2c, 0x71, 0x0, 0x5, [0xe300, 0x8, 0x4, 0x92, 0xd198, 0x8000, 0x7ff, 0x1, 0x3ff, 0xd264]}, @cipso={0x86, 0x3b, 0x3, [{0x2, 0xb, "4ffae30e80316dd5e3"}, {0x2, 0xf, "f079d3c49b7219a26d921cefe7"}, {0x7, 0xd, "f72f5e7124b829d6b46305"}, {0x7, 0xe, "532f9561ca8064b67351c3bb"}]}, @ssrr={0x89, 0x1f, 0xd7, [@rand_addr=0x64010100, @rand_addr=0x64010101, @multicast2, @private=0xa010102, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x27}]}, @end, @rr={0x7, 0x23, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010100, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback]}, @generic={0x89, 0x10, "a4f61ca8bfda3581733d1df0b255"}, @rr={0x7, 0x27, 0x9f, [@remote, @empty, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @local, @local, @empty, @multicast1]}]}}}}}) bind(r3, &(0x7f0000000800)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6001, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x7, 0x9, 0x0, 0x7ff}, 0x0, 0x5, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x5, 0x2, 0x8, 0x6, 0x0, 0x75, 0x10988, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b4, 0x0, @perf_config_ext={0x4, 0x1c10}, 0xc000, 0x4, 0x20, 0x1, 0xd51e, 0x4, 0xff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) r5 = socket(0x18, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) 13:54:31 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x900, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000080)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mkdir(&(0x7f0000000240)='./file0/file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 13:54:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 441.471036][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 441.491563][ T9095] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) 13:54:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) sendto$inet(r2, &(0x7f0000000080)="9863d5316a13452e1faa885b0d26343f43019e8a877608e1b45aa7ab2a38d8e8b443d7e76b49b22324fbeebba257b3485a9a5ba8b4d17292057b580b54e20809b5ee569b14c2b47f0496f279fbb230c16d16b781d17ed759bc225433e1cfa6d49b202a54", 0x64, 0x4048000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 441.520437][ T9095] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 441.528321][ T9095] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 441.542171][ T9095] F2FS-fs (loop2): invalid crc_offset: 0 [ 441.551472][ T9095] attempt to access beyond end of device [ 441.551472][ T9095] loop2: rw=12288, want=8200, limit=8192 [ 441.564023][ T9095] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 441.636151][ T9095] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 441.645150][ T9095] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 441.653532][ T9095] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 441.669101][ T9095] F2FS-fs (loop2): invalid crc_offset: 0 13:54:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = signalfd(r0, &(0x7f0000000080)={[0x9]}, 0x8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x9, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x7, 0x3, 0xdcf7}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000009ac73fbdb600", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x8, [{@broadcast, 0x8001}, {@loopback, 0x2}, {@multicast2, 0xee}, {@multicast1, 0x8}, {@loopback, 0x81}]}, @lsrr={0x83, 0x1b, 0x73, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x1}, @generic={0x44, 0x12, "e07354f14949a678e56ca06189b2ed97"}, @noop]}}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x128}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000002140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@empty, @in=@multicast1, 0x4e21, 0x20, 0x4e22, 0x4, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x5, 0x533f, 0x8, 0x2, 0xffe0000000, 0x9, 0xfe8, 0x9}, {0x400, 0x6, 0x1ff, 0x3198}, 0x9, 0x6e6bb9, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d2, 0x32}, 0xa, @in=@empty, 0x3503, 0x4, 0x2, 0x0, 0x7, 0xffff5cf7, 0x8}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x9, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl(r4, 0x8936, &(0x7f0000000000)) [ 441.683637][ T9095] attempt to access beyond end of device [ 441.683637][ T9095] loop2: rw=12288, want=8200, limit=8192 [ 441.714117][ T9095] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 441.718387][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 13:54:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="a063db1055a8ec6e220c1609ee4d1e5068b5c512"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) r3 = memfd_create(&(0x7f0000000040)='gtp\x00', 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000ec0)={{}, r5, 0x0, @unused=[0x0, 0x0, 0x0, 0x3], @subvolid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000100)={"daa2671f2d8d8d979660f0dddf2c5859", r5, 0x0, {0x14a, 0xb6f}, {}, 0x9, [0x0, 0xffffffffffffff7f, 0xffff, 0x5, 0x9, 0x2, 0xfff, 0x3, 0x100000001, 0x8, 0xe4f, 0x9, 0x3, 0x0, 0x20, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000080)=r5) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r6 = socket(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) [ 441.775484][ T4333] usb 4-1: new high-speed USB device number 16 using dummy_hcd 13:54:31 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 441.894845][ T9135] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 441.904336][ T9135] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 441.913052][ T9135] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 441.922689][ T9135] F2FS-fs (loop2): invalid crc_offset: 0 [ 441.928631][ T9135] attempt to access beyond end of device [ 441.928631][ T9135] loop2: rw=12288, want=8200, limit=8192 [ 441.939969][ T9135] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 442.069115][ T9135] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 442.078294][ T9135] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 442.086890][ T9135] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 442.099498][ T9135] F2FS-fs (loop2): invalid crc_offset: 0 [ 442.105190][ T9135] attempt to access beyond end of device [ 442.105190][ T9135] loop2: rw=12288, want=8200, limit=8192 [ 442.116916][ T9135] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 442.155518][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.166445][ T4333] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.176577][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.185177][ T4333] usb 4-1: config 0 descriptor?? [ 442.666071][ T4333] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 442.676397][ T4333] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input15 [ 442.758231][ T4333] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 442.881445][ T4333] usb 4-1: USB disconnect, device number 16 [ 443.535285][ T3117] Bluetooth: hci1: command 0x1003 tx timeout [ 443.535328][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 443.541316][ T7800] Bluetooth: hci1: sending frame failed (-49) [ 443.547483][ T8474] Bluetooth: hci0: sending frame failed (-49) [ 445.615293][ T1004] Bluetooth: hci0: command 0x1001 tx timeout [ 445.615298][ T3117] Bluetooth: hci1: command 0x1001 tx timeout [ 445.627512][ T8474] Bluetooth: hci1: sending frame failed (-49) [ 445.633613][ T8474] Bluetooth: hci0: sending frame failed (-49) [ 447.695071][ T1004] Bluetooth: hci0: command 0x1009 tx timeout [ 447.701086][ T1004] Bluetooth: hci1: command 0x1009 tx timeout 13:54:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:41 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:41 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast1}, &(0x7f0000000180)=0xc) socket(0xf, 0x800, 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00007800000000000000000014bba41414bb"]}) r4 = accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x4b47, &(0x7f0000000380)={0x0, 0xa825, 0x4, 0x1, 0x115}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000240)={0xffffffff, {{0x2, 0x4e22, @loopback}}}, 0x88) shutdown(r0, 0x1) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) sendto$inet(r2, &(0x7f0000000080)="9863d5316a13452e1faa885b0d26343f43019e8a877608e1b45aa7ab2a38d8e8b443d7e76b49b22324fbeebba257b3485a9a5ba8b4d17292057b580b54e20809b5ee569b14c2b47f0496f279fbb230c16d16b781d17ed759bc225433e1cfa6d49b202a54", 0x64, 0x4048000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:54:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) sendto$inet(r2, &(0x7f0000000080)="9863d5316a13452e1faa885b0d26343f43019e8a877608e1b45aa7ab2a38d8e8b443d7e76b49b22324fbeebba257b3485a9a5ba8b4d17292057b580b54e20809b5ee569b14c2b47f0496f279fbb230c16d16b781d17ed759bc225433e1cfa6d49b202a54", 0x64, 0x4048000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:54:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 451.735442][ T9172] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 451.749529][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 451.751422][ T9172] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 451.769739][ T9172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 13:54:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="8a6cd36bc130ff78e8d11f2b668ccd399b70927fa691b6a105ce489c9c8a3eab405bab4a9bdc65b75ff97ff3735c17c6d71b41be33826ad75002de47aaa733c0e43e432792d3e1be835e5f3ba4aaeebae46151806b25b7d2c295d8fa608448fd46566dbd4f9fcbf37b62bc4c5c3d6f427e08b06dbda4419cbb5e5a1d155e8ffb100bd2240b38ae752cd4c2f8a562b4140193b2de17079489bf204645e7b40d85796c9c2993ac6f8351ba3ecef548e838"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000180)=0x1e) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4b4, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x3c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "85cd70d58af5c6edd113a7333f4d4518239322c0166ed5102921f6ebf369633f702fd5cac0f24d5ebfd1ca821b1196cd38cc3c3fad24feab28e22629b7daed2be75f86872d5dfc618d5b8125a7a61d324a88cb3e11e4843a0587bb09bf8fd3e064fbedc2075b057e40b2474da4fd0ca0542613c24b49e6fdb4f584a594673ff2c34c0c09ec1ad577b7f82c41b38881a4689d23b25a47acba4d22a271c206fe36d5de246696c3fdf1d78a467d26cc22547e51d843a89db5c2b6ab69e5887e4b685e49647383a441c3e397ba9f46ff60256c49269fa5fc44d702b649209e4e3ed44034de7ec577"}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "3fa7517fcbd5c084bc39cf12f537fc5cd46c76b1ba18a72620f640fd97fa8453d20fba24283619f29f31976f65eb6e330ab55b44401405e9fe91ef2400da5e168f750131c7ffb42d3f5cc7453e79c87eebbec6476662ddebf91a1e8681d474584e2b3fe248dd0770025929dcc59f0e0af94183a8bb1d820e"}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "562c95d0c1cd5978f3c3bc029b7a6c0c3f7b9633b42e7b3dc9a1363e15b268df2f56639c311f9c6f8fec1dbc48c3304ef29b1f18d2f96a38b1aeceb74111f44dcb429eb9acf1712dad1f4ad1a252d25a589780148ca259ec281ef246f3b94bf4d3665ddf7ca9ef0f7b3cab899b9bc6a09e7e124880ef129e2362d2c61d3be05edc262117028d76dbb47c97d4b68b393780a4b9a86a2c93477af7717798159fd3f478f720173d38c4c2c09dd51dc466a2b24f59a547b04c6a3317f1d3318b90dd6f1ea678bb96e0867f3dc0b4515fb7466964e67a685eac8589bfd5cac178ef572737451155"}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "4f59da5100c25f4e6112c5b0b9b29265c846faef6dd24e573e59a73cdddd997dcec8659f21d14a96f91032fc2f43b4b609615b4c378e5b8d2d00ecfbb87c76c634e93e948e09e73151c8187e23f7bc4a191ed61eb27499423c4a1c823676c29353f14699af568bd2719910ec5ff0b47b4f50e30419a8fd958db5e0c86cae7367d844a8afd09a67cd9dd23ff6fc18685680015393f2e2510794ede88d35517da97f806a5d83d09e2c1f4ed86c9a424b3f94c58e157fb5a670dcfce97e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "374664de98005c2142f94fbacbb3f9720ad81435aa3341dafd0e6ce44dfccabf0445b4d7aac69374bfa80c38f933336c0a45f9a4dcb6afecb3fca3bbc20fbe43a4d119fc4cf0d4d554956e08853bfcc9ab52c3fd38abe65da1dd03b38399bc41c7dc2a6cf3c93ffe3760bf982ad832b15d82107e4ea0d414b57a195375664fd8a47590e4ba6b1209e75712703411f58693f91574f5e4752dbc6ddbc6e5"}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]^>5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$)@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1bf}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x80000001}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x40}, 0x200080d0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', r1, 0x0, 0x7800, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote, {[@timestamp={0x44, 0x2c, 0x71, 0x0, 0x5, [0xe300, 0x8, 0x4, 0x92, 0xd198, 0x8000, 0x7ff, 0x1, 0x3ff, 0xd264]}, @cipso={0x86, 0x3b, 0x3, [{0x2, 0xb, "4ffae30e80316dd5e3"}, {0x2, 0xf, "f079d3c49b7219a26d921cefe7"}, {0x7, 0xd, "f72f5e7124b829d6b46305"}, {0x7, 0xe, "532f9561ca8064b67351c3bb"}]}, @ssrr={0x89, 0x1f, 0xd7, [@rand_addr=0x64010100, @rand_addr=0x64010101, @multicast2, @private=0xa010102, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x27}]}, @end, @rr={0x7, 0x23, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010100, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback]}, @generic={0x89, 0x10, "a4f61ca8bfda3581733d1df0b255"}, @rr={0x7, 0x27, 0x9f, [@remote, @empty, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @local, @local, @empty, @multicast1]}]}}}}}) bind(r3, &(0x7f0000000800)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6001, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x7, 0x9, 0x0, 0x7ff}, 0x0, 0x5, 0xffffffffffffffff, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x5, 0x2, 0x8, 0x6, 0x0, 0x75, 0x10988, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b4, 0x0, @perf_config_ext={0x4, 0x1c10}, 0xc000, 0x4, 0x20, 0x1, 0xd51e, 0x4, 0xff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) r5 = socket(0x18, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) 13:54:41 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000080)=0xffffffff) 13:54:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 451.793557][ T9172] F2FS-fs (loop2): invalid crc_offset: 0 [ 451.806092][ T9172] attempt to access beyond end of device [ 451.806092][ T9172] loop2: rw=12288, want=8200, limit=8192 [ 451.825422][ T9172] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 451.955983][ T9172] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 451.965086][ T9172] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 451.973022][ T9172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 451.994274][ T9172] F2FS-fs (loop2): invalid crc_offset: 0 [ 452.000223][ T9172] attempt to access beyond end of device [ 452.000223][ T9172] loop2: rw=12288, want=8200, limit=8192 [ 452.012089][ T9172] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:54:41 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:41 executing program 5: r0 = socket$inet(0x2, 0x3, 0x807) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:41 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 453.774451][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 453.780469][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 455.854364][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 455.860740][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 457.934204][ T17] Bluetooth: hci0: command 0x1009 tx timeout 13:54:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:54:51 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x100, 0x200102, 0x12345}, 0x9) 13:54:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:51 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) fcntl$setpipe(r2, 0x407, 0x10001) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:54:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) fcntl$setpipe(r2, 0x407, 0x10001) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:54:51 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'bond0\x00'}, 0x18) r2 = socket(0xa, 0x4, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:54:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:54:51 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, 0x0, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:54:51 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 461.979045][ T9239] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 461.988241][ T9239] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 462.014116][ T9239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 462.044598][ T9239] F2FS-fs (loop2): invalid crc_offset: 0 [ 462.052856][ T9239] attempt to access beyond end of device [ 462.052856][ T9239] loop2: rw=12288, want=8200, limit=8192 [ 462.072382][ T9239] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 462.215106][ T9239] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 462.224241][ T9239] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 462.232155][ T9239] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 462.248724][ T9239] F2FS-fs (loop2): invalid crc_offset: 0 [ 462.263769][ T9239] attempt to access beyond end of device [ 462.263769][ T9239] loop2: rw=12288, want=8200, limit=8192 [ 462.276761][ T9239] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 464.013597][ T3117] Bluetooth: hci0: command 0x1003 tx timeout [ 464.019753][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 466.093529][ T3117] Bluetooth: hci0: command 0x1001 tx timeout [ 466.099706][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 468.173387][ T3117] Bluetooth: hci0: command 0x1009 tx timeout 13:55:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:01 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:55:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 472.195331][ T9285] usb usb1: usbfs: process 9285 (syz-executor.3) did not claim interface 4 before use [ 472.209050][ T9289] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 472.220282][ T9289] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 472.231063][ T9289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 13:55:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:55:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 472.241504][ T9285] usb usb1: usbfs: process 9285 (syz-executor.3) did not claim interface 4 before use [ 472.259246][ T9289] F2FS-fs (loop2): invalid crc_offset: 0 [ 472.269787][ T9289] attempt to access beyond end of device [ 472.269787][ T9289] loop2: rw=12288, want=8200, limit=8192 13:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:02 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="5d20361c2abd30ff9393f7ed2c1bea5b2c1ad616092870528d496134e450", 0x1e, 0x80c1, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x87, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x0, 'rr\x00', 0x0, 0x3}, {@broadcast, 0x4e24, 0x2000, 0x10001, 0x4c, 0x8}}, 0x44) io_uring_enter(0xffffffffffffffff, 0x76da, 0x4e54, 0x0, &(0x7f0000000140), 0x8) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200)="aea9478ab3e1539d01d07bac18dc160130a91b53c2788529bc1dbf935ae0d7768dbfb0f1bc86cc1548bd33dc0c89414348da45159813e402093dbd07db1d2f094a8adf1a", 0x44, 0x10, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x18, 0xffff, 0x800, 0x1, 0x10, r0, 0xb8, '\x00', 0x0, r0, 0x1, 0x4, 0x5}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x810, r1, 0x5c5dd000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x721100, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000340)=0xe, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ehci_hcd', 0x4a0000, 0x24) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000003c0)="36ce9b48e8fcf7b99584aa62f1cc2e0f1ded0ccce5d5b1243b5ec3571ca92c286c8d5d978000fe31f44ff5f7a1ffc622ec2afb090a61b036c67fa8dd00d4aa5c2914eb392176105b233d80bbad3dc293ff1c9bcd4badff8e6a1e00dab23b09573106fca87eac323ca64e977230623283c098dcbb0c5f33d766dbaf57133e9072a0858510dd44756f4ea770a286e916b93db181618de40e16f5d714fbaa4b4c3ac323d53b41317ef51c8fbe125637", &(0x7f0000000480)=@udp6=r0}, 0x20) pselect6(0x40, &(0x7f0000000500)={0xfffffffffffffff8, 0x9c09, 0x3ff, 0x8, 0x101, 0x1, 0x1}, &(0x7f0000000540)={0x7fffffff, 0x5d, 0x9, 0x1, 0x0, 0x2, 0x3240, 0x1}, &(0x7f0000000580)={0x7, 0x1, 0x1, 0x5, 0x59, 0x4, 0x9, 0x400}, &(0x7f00000005c0), &(0x7f0000000640)={&(0x7f0000000600)={[0x100]}, 0x8}) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000680)=0xa1, 0x4) sendto$inet(r0, &(0x7f00000006c0)="c719e68f5ca9d6f4d1e12d4f3dd9d2dd1fd8be80dddb58fa110ff8591e504253f3bd9282ecf2885898352428864ea67c910e52218d50b4633f848689f25376458d9e90962e98", 0x46, 0x801, &(0x7f0000000740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000880)={r4, r5+60000000}, 0x8) r6 = syz_open_dev$vcsa(&(0x7f00000008c0), 0x8, 0x101a00) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000900)) 13:55:02 executing program 5: r0 = socket$inet(0x2, 0x80f, 0x20015) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000100010000000000faffffff85100000fdffffff183a000004000000000000000000000085100000ffffffffcfb7c0ff1000000018180000cc976e15c450af16c096e9bec1360e0a04d3998d9928bff720a2265ccd4dff570eee7dff30f9cfed68794ac60ececfba9c", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000240)=""/94, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0xe3e}, 0x10, 0x40bd, r4}, 0x78) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)) [ 472.289189][ T9289] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 472.394935][ T9289] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 472.403819][ T9289] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 472.411759][ T9289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 472.422167][ T9289] F2FS-fs (loop2): invalid crc_offset: 0 [ 472.430101][ T9289] attempt to access beyond end of device [ 472.430101][ T9289] loop2: rw=12288, want=8200, limit=8192 [ 472.444183][ T9289] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xe00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x6, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x9, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x7, 0x3, 0xdcf7}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x8, [{@broadcast, 0x8001}, {@loopback, 0x2}, {@private=0xa010102, 0xee}, {@multicast1, 0x9}, {@loopback, 0x81}]}, @lsrr={0x83, 0x1b, 0x73, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "830e891faeeb63fcfdb78e5bd428"}]}, @rr={0x7, 0x1f, 0x47, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x124}}, 0x4000001) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60001804}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x60, 0x18, 0x100, 0x70bd29, 0x25dfdbfe, {0xa, 0x10, 0x20, 0x9, 0xff, 0x0, 0xfe, 0x8, 0x200}, [@RTA_METRICS={0x41, 0x8, 0x0, 0x1, "0b09d5fa5744a7dc4048b8bd2a94b26d246ca24ea22724750da83607e3ca0569ad08e25d292432772d8af1afad37ffa74b1cf40143a3e4ed6630294c3f"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044140}, 0x400c810) 13:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 472.559566][ T9334] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. 13:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 472.595137][ T9339] A link change request failed with some changes committed already. Interface Y­4`Ò˜ may have been left with an inconsistent configuration, please check. 13:55:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) dup2(r0, r2) ioctl(r2, 0x8936, &(0x7f0000000000)) sendto$inet(r2, &(0x7f0000000240)="4f0e732a933b7a037fd842de370d594ac515b05e12dcf674f437400c8bd3279bc90d93867dc822a062fb07763f810b3edde70b3886ac73fec847fb5485e8f8bcb3d72d9ec5825bd88981c2b0c6c90d512300f5027efd5eaac0b262c2a6b573a1d026d7b82189e5e31df428db0f57391a5596a1f8a8d4d0406d7da60fcb8b6a24d08c56f0ca81015396d7da8ff8eabeeeb83996bdcb8c18c0eb54fae49ed89b53b10844502616e3c9688a824fff01eceed162216aaf01baa371814b16e796a736c4f50297a0af48f1a8fde691b680ecf78391", 0xd2, 0x24018891, 0x0, 0x0) 13:55:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 472.637136][ T9343] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 472.652173][ T9343] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 472.660343][ T9343] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 472.677365][ T9343] F2FS-fs (loop2): invalid crc_offset: 0 [ 472.687117][ T9343] attempt to access beyond end of device [ 472.687117][ T9343] loop2: rw=12288, want=8200, limit=8192 [ 472.692191][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 472.700525][ T9343] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 472.820237][ T9343] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 472.829371][ T9343] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 472.837884][ T9343] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 472.848407][ T9343] F2FS-fs (loop2): invalid crc_offset: 0 [ 472.858562][ T9343] attempt to access beyond end of device [ 472.858562][ T9343] loop2: rw=12288, want=8200, limit=8192 [ 472.874636][ T9343] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x6, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x9, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x7, 0x3, 0xdcf7}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=@mpls_getnetconf={0x2c, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x8, [{@broadcast, 0x8001}, {@loopback, 0x2}, {@private=0xa010102, 0xee}, {@multicast1, 0x9}, {@loopback, 0x81}]}, @lsrr={0x83, 0x1b, 0x73, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "830e891faeeb63fcfdb78e5bd428"}]}, @rr={0x7, 0x1f, 0x47, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x124}}, 0x4000001) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60001804}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x60, 0x18, 0x100, 0x70bd29, 0x25dfdbfe, {0xa, 0x10, 0x20, 0x9, 0xff, 0x0, 0xfe, 0x8, 0x200}, [@RTA_METRICS={0x41, 0x8, 0x0, 0x1, "0b09d5fa5744a7dc4048b8bd2a94b26d246ca24ea22724750da83607e3ca0569ad08e25d292432772d8af1afad37ffa74b1cf40143a3e4ed6630294c3f"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044140}, 0x400c810) 13:55:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000003000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x40, 0x9, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x20, 0x7, 0x3, 0xdcf7}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="2c0000007900000829bd7000fbdbdf251c08000000", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060007000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="0898730000000000"], 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="60000000000000000000000007000000442c8781ffffffff000080017f000001000000020a010102000000eee0000001000000097f0000010000008101071303ac1e0001ac1414bbac1414bb0a01010294040000440cef930a010100000003ff14000000000000000000000001000000ffffffff000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac1e0101e8000001000000004c0000000000000000fa000207000000940401008616000000010510830e891faeeb63fcfdb78e5bd4280000ffffffffac141441ac1e0101e0000001ac1e0101ac1e01010100000000000023cc"], 0xe8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000002140)="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"/329, 0x149}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f00000015c0)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f2347b03c3ff47b16dee66ef459519c28628266d6376e3890fbf4bb81b95ac180a954009a8c4ff9bb7104a1aa14ebf599a0d91eaea183bad2d1f0bbcd81fc18498a7f69f4aaca294dce3801da3166", 0x90}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0xb0}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}], 0x30}}], 0x4, 0x4040810) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @dev={0xfe, 0x80, '\x00', 0x26}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x8, 0x1, 0x1, 0x400, 0x5, 0x89000080}) r6 = socket(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl(r7, 0x2b, &(0x7f0000000080)="589065b24da38468e85b825e9633f74fdb1ee351d589234c16b740f80b88c76978854879a6cd40dd3abf3ec7cf495ce9a5d0a1dd537c83f783aa1a9e4fe03c545b0afd52bd797f2be7c6d0384981e03beba16b0fb8d49425b0e259273a6da26e6fca0885d3cd5286a1a1107b2e5cd03bcb5ad57fdce712d4e7354313ca7224b212b32388added0a26a181e00f4621b") ioctl(r6, 0x8936, &(0x7f0000000000)) 13:55:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1003, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 473.168887][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 473.178467][ T9379] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 473.188807][ T9379] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 473.198815][ T9379] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 13:55:03 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x52080, 0x0) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x11, r1, 0x1, 0x3, 0x6, @random="092b367de6e6"}, 0x14) r3 = socket(0xa, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:55:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 473.199784][ T9380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.208389][ T9379] F2FS-fs (loop2): invalid crc_offset: 0 [ 473.243517][ T9379] attempt to access beyond end of device [ 473.243517][ T9379] loop2: rw=12288, want=8200, limit=8192 13:55:03 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:03 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet(0x2, 0x80004, 0x5) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 473.273158][ T9379] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 473.316092][ T9398] FAULT_INJECTION: forcing a failure. [ 473.316092][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 473.330438][ T9398] CPU: 0 PID: 9398 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 473.340604][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.350732][ T9398] Call Trace: [ 473.354016][ T9398] dump_stack+0x1d8/0x24e [ 473.358330][ T9398] ? devkmsg_release+0x11c/0x11c [ 473.363268][ T9398] ? show_regs_print_info+0x12/0x12 [ 473.368560][ T9398] ? check_preemption_disabled+0x9e/0x330 [ 473.374268][ T9398] ? __rcu_read_lock+0x50/0x50 [ 473.379013][ T9398] ? __unwind_start+0x72f/0x8e0 [ 473.383881][ T9398] ? debug_smp_processor_id+0x20/0x20 [ 473.389249][ T9398] should_fail+0x6f6/0x860 [ 473.393656][ T9398] ? setup_fault_attr+0x3d0/0x3d0 [ 473.398750][ T9398] ? ldsem_down_read+0xb7/0x890 [ 473.403669][ T9398] ? unwind_get_return_address+0x48/0x80 [ 473.409284][ T9398] ? hci_alloc_dev+0x4d/0x15e0 [ 473.414034][ T9398] should_failslab+0x5/0x20 [ 473.418619][ T9398] kmem_cache_alloc_trace+0x39/0x2b0 [ 473.423889][ T9398] hci_alloc_dev+0x4d/0x15e0 [ 473.428470][ T9398] hci_uart_tty_ioctl+0x3c0/0xa10 [ 473.434536][ T9398] ? hci_uart_tty_write+0x10/0x10 [ 473.439542][ T9398] tty_ioctl+0xf68/0x1710 [ 473.443852][ T9398] ? tty_do_resize+0x170/0x170 [ 473.448594][ T9398] ? avc_ss_reset+0x3a0/0x3a0 [ 473.453337][ T9398] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 473.459467][ T9398] ? refcount_inc_checked+0x50/0x50 [ 473.464650][ T9398] ? proc_fail_nth_write+0x1d5/0x240 [ 473.470006][ T9398] ? proc_fail_nth_read+0x1c0/0x1c0 [ 473.475183][ T9398] ? memset+0x1f/0x40 [ 473.479144][ T9398] ? fsnotify+0x1332/0x13f0 [ 473.483616][ T9398] ? tty_do_resize+0x170/0x170 [ 473.488347][ T9398] do_vfs_ioctl+0x76a/0x1720 [ 473.492904][ T9398] ? selinux_file_ioctl+0x72f/0x990 [ 473.498066][ T9398] ? ioctl_preallocate+0x250/0x250 [ 473.503259][ T9398] ? __fget+0x37b/0x3c0 [ 473.507380][ T9398] ? vfs_write+0x422/0x4e0 [ 473.511761][ T9398] ? fget_many+0x20/0x20 [ 473.515967][ T9398] ? debug_smp_processor_id+0x20/0x20 [ 473.521322][ T9398] ? security_file_ioctl+0x9d/0xb0 [ 473.526401][ T9398] __x64_sys_ioctl+0xd4/0x110 [ 473.531044][ T9398] do_syscall_64+0xcb/0x1e0 [ 473.535513][ T9398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.541369][ T9398] RIP: 0033:0x4665d9 [ 473.545232][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.564887][ T9398] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.573275][ T9398] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 473.581213][ T9398] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 473.589151][ T9398] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 473.597088][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.605112][ T9398] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 473.619553][ T9398] Bluetooth: Can't allocate HCI device [ 473.642252][ T9379] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 473.651585][ T9379] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 473.659559][ T9379] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 473.669957][ T9379] F2FS-fs (loop2): invalid crc_offset: 0 [ 473.676670][ T9379] attempt to access beyond end of device [ 473.676670][ T9379] loop2: rw=12288, want=8200, limit=8192 [ 473.688606][ T9379] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 474.732870][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 474.738911][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 476.812793][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 476.818817][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 478.892658][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:55:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:12 executing program 3 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:12 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0xffffffff, 0x1, 0x8000, 0x2, 0x0, 0x6208, 0x3ff}, 0x1c) 13:55:12 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1020, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 483.070056][ T9418] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 483.087212][ T9418] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.094075][ T9429] FAULT_INJECTION: forcing a failure. [ 483.094075][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 483.101442][ T9418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 483.112221][ T9429] CPU: 1 PID: 9429 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 483.119756][ T9418] F2FS-fs (loop2): invalid crc_offset: 0 [ 483.126832][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.126836][ T9429] Call Trace: [ 483.126852][ T9429] dump_stack+0x1d8/0x24e [ 483.126862][ T9429] ? devkmsg_release+0x11c/0x11c [ 483.126870][ T9429] ? show_regs_print_info+0x12/0x12 [ 483.126878][ T9429] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 483.126886][ T9429] should_fail+0x6f6/0x860 [ 483.126895][ T9429] ? setup_fault_attr+0x3d0/0x3d0 [ 483.126907][ T9429] ? memset+0x1f/0x40 [ 483.126916][ T9429] ? h4_open+0x4f/0x140 [ 483.126926][ T9429] should_failslab+0x5/0x20 [ 483.126935][ T9429] kmem_cache_alloc_trace+0x39/0x2b0 [ 483.126943][ T9429] h4_open+0x4f/0x140 [ 483.126952][ T9429] hci_uart_tty_ioctl+0x7ea/0xa10 [ 483.126960][ T9429] ? hci_uart_tty_write+0x10/0x10 [ 483.126968][ T9429] tty_ioctl+0xf68/0x1710 [ 483.126977][ T9429] ? tty_do_resize+0x170/0x170 [ 483.126985][ T9429] ? avc_ss_reset+0x3a0/0x3a0 [ 483.126992][ T9429] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 483.127004][ T9429] ? refcount_inc_checked+0x50/0x50 [ 483.136811][ T9418] attempt to access beyond end of device [ 483.136811][ T9418] loop2: rw=12288, want=8200, limit=8192 [ 483.143110][ T9429] ? proc_fail_nth_write+0x1d5/0x240 [ 483.143120][ T9429] ? proc_fail_nth_read+0x1c0/0x1c0 [ 483.143129][ T9429] ? memset+0x1f/0x40 [ 483.143142][ T9429] ? fsnotify+0x1332/0x13f0 [ 483.147789][ T9418] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 483.150725][ T9429] ? tty_do_resize+0x170/0x170 [ 483.150741][ T9429] do_vfs_ioctl+0x76a/0x1720 [ 483.278900][ T9429] ? selinux_file_ioctl+0x72f/0x990 [ 483.284094][ T9429] ? ioctl_preallocate+0x250/0x250 [ 483.289178][ T9429] ? __fget+0x37b/0x3c0 [ 483.293325][ T9429] ? vfs_write+0x422/0x4e0 [ 483.297822][ T9429] ? fget_many+0x20/0x20 [ 483.302073][ T9429] ? debug_smp_processor_id+0x20/0x20 [ 483.307436][ T9429] ? security_file_ioctl+0x9d/0xb0 [ 483.312783][ T9429] __x64_sys_ioctl+0xd4/0x110 [ 483.317451][ T9429] do_syscall_64+0xcb/0x1e0 [ 483.321929][ T9429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 483.327798][ T9429] RIP: 0033:0x4665d9 [ 483.331769][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 483.351521][ T9429] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.359908][ T9429] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:55:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 13:55:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:55:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) [ 483.367856][ T9429] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 483.375829][ T9429] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 483.383783][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.391730][ T9429] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 13:55:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) [ 483.511304][ T9418] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 483.527415][ T9418] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.536489][ T9418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 483.555083][ T9418] F2FS-fs (loop2): invalid crc_offset: 0 [ 483.563970][ T9418] attempt to access beyond end of device [ 483.563970][ T9418] loop2: rw=12288, want=8200, limit=8192 [ 483.579557][ T9418] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 485.132176][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 485.138731][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 487.212125][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 487.218273][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 489.291911][ T5] Bluetooth: hci0: command 0x1009 tx timeout 13:55:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="fffffffffffffffaab2304acadda6936bf7a7e570b77b07e7e40e2ef43aac08d184251e608b8319fb932989f302d2273e5cd1ce7358f541f1a8d6bd8d63d10148900082930d559a48a7e6e70e0d02b9390739a806739111e3d549337a545d0cfb2e1b53b5ff28f9907fcbd0de550932dd73206f2dedae1390bb0807e460c76d1e89c088d0f0e46b10ebc55ece572a2c454d881464740d71ff9e75cc9f52ae0673b02147e1fd220688705ad461030b88d5aa8a9470995"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x0, 0x7800, 0x6, 0x0, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x44}, {[@ra={0x94, 0x4}]}}}}}) sendto$inet(r3, &(0x7f0000000240)="d724ba7e478f6c0b0c0911eb93a544ed2b4ae644b61d25322822e5e6e51699d77f5d4e146495ca181dc2182600ca3927580750f8fbe8cbac6f6b25f0ed2d1cdc8c842fdd2d222268899cb77cf4e98d745068ebe1150081d7b6c8611673e07d40e7068c9b6ca8b8aed3753914c6bf2199a5088beb8ee2361c2858ddaa4f6d850cd185cee56cd1d734567f7ca05544c44702cade65a48575", 0x97, 0x200808a5, 0x0, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) 13:55:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:23 executing program 3 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:23 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1100, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 493.317590][ T9469] FAULT_INJECTION: forcing a failure. [ 493.317590][ T9469] name failslab, interval 1, probability 0, space 0, times 0 [ 493.344388][ T9469] CPU: 1 PID: 9469 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 493.345960][ T9474] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 493.354546][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.354550][ T9469] Call Trace: [ 493.354567][ T9469] dump_stack+0x1d8/0x24e [ 493.354577][ T9469] ? devkmsg_release+0x11c/0x11c [ 493.354584][ T9469] ? memset+0x1f/0x40 [ 493.354592][ T9469] ? show_regs_print_info+0x12/0x12 [ 493.354601][ T9469] ? number+0xea3/0x1300 [ 493.354607][ T9469] ? xas_create+0x12c3/0x13b0 [ 493.354617][ T9469] should_fail+0x6f6/0x860 [ 493.354626][ T9469] ? setup_fault_attr+0x3d0/0x3d0 [ 493.354633][ T9469] ? xas_store+0xae3/0x1610 [ 493.354641][ T9469] ? vsnprintf+0x1e4/0x1d60 [ 493.354649][ T9469] ? alloc_workqueue+0x156/0x11d0 [ 493.354656][ T9469] should_failslab+0x5/0x20 [ 493.354663][ T9469] __kmalloc+0x5f/0x2f0 [ 493.354671][ T9469] alloc_workqueue+0x156/0x11d0 [ 493.354685][ T9469] ? ptr_to_hashval+0x60/0x60 [ 493.363679][ T9474] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 493.373459][ T9469] ? sprintf+0xd6/0x120 [ 493.373466][ T9469] ? idr_replace+0x230/0x230 [ 493.373474][ T9469] ? vsnprintf+0x1caa/0x1d60 [ 493.373482][ T9469] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 493.373492][ T9469] ? h4_open+0x4f/0x140 [ 493.373502][ T9469] hci_register_dev+0x19a/0x710 [ 493.373515][ T9469] ? h4_open+0x60/0x140 [ 493.377581][ T9474] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 493.381102][ T9469] hci_uart_tty_ioctl+0x89e/0xa10 [ 493.381111][ T9469] ? hci_uart_tty_write+0x10/0x10 [ 493.381136][ T9469] tty_ioctl+0xf68/0x1710 [ 493.381148][ T9469] ? tty_do_resize+0x170/0x170 [ 493.401296][ T9474] F2FS-fs (loop2): invalid crc_offset: 0 [ 493.404063][ T9469] ? avc_ss_reset+0x3a0/0x3a0 [ 493.404071][ T9469] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 493.404079][ T9469] ? refcount_inc_checked+0x50/0x50 [ 493.404091][ T9469] ? proc_fail_nth_write+0x1d5/0x240 [ 493.404102][ T9469] ? proc_fail_nth_read+0x1c0/0x1c0 [ 493.414451][ T9474] attempt to access beyond end of device [ 493.414451][ T9474] loop2: rw=12288, want=8200, limit=8192 [ 493.418054][ T9469] ? memset+0x1f/0x40 [ 493.418063][ T9469] ? fsnotify+0x1332/0x13f0 [ 493.418075][ T9469] ? tty_do_resize+0x170/0x170 [ 493.436511][ T9474] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 493.440969][ T9469] do_vfs_ioctl+0x76a/0x1720 [ 493.440979][ T9469] ? selinux_file_ioctl+0x72f/0x990 [ 493.440991][ T9469] ? ioctl_preallocate+0x250/0x250 [ 493.590605][ T9469] ? __fget+0x37b/0x3c0 [ 493.594734][ T9469] ? vfs_write+0x422/0x4e0 [ 493.599132][ T9469] ? fget_many+0x20/0x20 [ 493.603343][ T9469] ? debug_smp_processor_id+0x20/0x20 [ 493.608692][ T9469] ? security_file_ioctl+0x9d/0xb0 [ 493.613769][ T9469] __x64_sys_ioctl+0xd4/0x110 [ 493.618415][ T9469] do_syscall_64+0xcb/0x1e0 [ 493.622889][ T9469] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.628750][ T9469] RIP: 0033:0x4665d9 [ 493.632614][ T9469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 493.652275][ T9469] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.661084][ T9469] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:55:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 493.669024][ T9469] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 493.676964][ T9469] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.684907][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.692859][ T9469] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 13:55:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="93c269b77f07c7544d2c855952d8223fb3c47d43c0ee4de71744b22bb690c36ee25748e9fb387b2407566f599edb49358dafa93a717773acb34d4c6d7ffaabee7cf47efedbca58c07db4c45441db1d7d289993b0fd3c0eefe7c8efc42b6f42ce53a88f7f775a136f0846cdb8"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0x11, 0x1, 0x1f) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 13:55:23 executing program 3 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 493.797643][ T9469] Bluetooth: Can't register HCI device [ 493.839393][ T9507] FAULT_INJECTION: forcing a failure. [ 493.839393][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 493.852326][ T9507] CPU: 0 PID: 9507 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 493.862462][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.872508][ T9507] Call Trace: [ 493.875801][ T9507] dump_stack+0x1d8/0x24e [ 493.880105][ T9507] ? devkmsg_release+0x11c/0x11c [ 493.885014][ T9507] ? show_regs_print_info+0x12/0x12 [ 493.890196][ T9507] should_fail+0x6f6/0x860 [ 493.894584][ T9507] ? setup_fault_attr+0x3d0/0x3d0 [ 493.899580][ T9507] ? alloc_workqueue+0x1cb/0x11d0 [ 493.904590][ T9507] should_failslab+0x5/0x20 [ 493.909178][ T9507] kmem_cache_alloc_trace+0x39/0x2b0 [ 493.914433][ T9507] ? alloc_workqueue+0x156/0x11d0 [ 493.919428][ T9507] alloc_workqueue+0x1cb/0x11d0 [ 493.924252][ T9507] ? sprintf+0xd6/0x120 [ 493.928393][ T9507] ? idr_replace+0x230/0x230 [ 493.932968][ T9507] ? vsnprintf+0x1caa/0x1d60 [ 493.937530][ T9507] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 493.943653][ T9507] ? h4_open+0x4f/0x140 [ 493.947776][ T9507] ? h4_open+0x4f/0x140 [ 493.951903][ T9507] hci_register_dev+0x19a/0x710 [ 493.956723][ T9507] ? h4_open+0x60/0x140 [ 493.960847][ T9507] hci_uart_tty_ioctl+0x89e/0xa10 [ 493.965841][ T9507] ? hci_uart_tty_write+0x10/0x10 [ 493.970834][ T9507] tty_ioctl+0xf68/0x1710 [ 493.975145][ T9507] ? tty_do_resize+0x170/0x170 [ 493.979893][ T9507] ? avc_ss_reset+0x3a0/0x3a0 [ 493.984562][ T9507] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 493.990698][ T9507] ? refcount_inc_checked+0x50/0x50 [ 493.995875][ T9507] ? proc_fail_nth_write+0x1d5/0x240 [ 494.001129][ T9507] ? proc_fail_nth_read+0x1c0/0x1c0 [ 494.006297][ T9507] ? memset+0x1f/0x40 [ 494.010248][ T9507] ? fsnotify+0x1332/0x13f0 [ 494.014729][ T9507] ? tty_do_resize+0x170/0x170 [ 494.019463][ T9507] do_vfs_ioctl+0x76a/0x1720 [ 494.024026][ T9507] ? selinux_file_ioctl+0x72f/0x990 [ 494.029195][ T9507] ? ioctl_preallocate+0x250/0x250 [ 494.034297][ T9507] ? __fget+0x37b/0x3c0 [ 494.038444][ T9507] ? vfs_write+0x422/0x4e0 [ 494.042829][ T9507] ? fget_many+0x20/0x20 [ 494.047039][ T9507] ? debug_smp_processor_id+0x20/0x20 [ 494.052383][ T9507] ? security_file_ioctl+0x9d/0xb0 [ 494.057463][ T9507] __x64_sys_ioctl+0xd4/0x110 [ 494.063175][ T9507] do_syscall_64+0xcb/0x1e0 [ 494.067649][ T9507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.073544][ T9507] RIP: 0033:0x4665d9 [ 494.077409][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 494.097007][ T9507] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.105510][ T9507] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 494.113451][ T9507] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 494.121392][ T9507] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 494.129334][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.137276][ T9507] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 494.146735][ T9507] Bluetooth: Can't register HCI device [ 494.178915][ T9508] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 494.198000][ T9508] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 494.206686][ T9508] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 494.216316][ T9508] F2FS-fs (loop2): invalid crc_offset: 0 [ 494.222169][ T9508] attempt to access beyond end of device [ 494.222169][ T9508] loop2: rw=12288, want=8200, limit=8192 [ 494.233546][ T9508] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) socketpair(0x26, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c010000", @ANYBLOB="01002cbd7000fddbdf252800000008"], 0x19c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000002040)={0x1c4, r4, 0x101, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r1, 0x2f, 0xf8, 0x81, 0x0, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x0, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x24000014) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) r7 = accept$inet(r2, &(0x7f0000000100), &(0x7f0000000180)=0x10) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000280)="833a8602dda45351a6e20c7bc3be33e6502641bed0e8542be6398ae52c71446863ac1ce2c1c802213b8ed4dcf7df9b6ae8d8072d621f524f4d5125718b0968427df6c0d4f5f5dc7ecd866885285d7b337f5c8d12cdd9edfb89ef416bbda2e43a0a7cd47724523a8eeaacb1e3cacfec428de8e8e5ceec1211867dad1cc9d1065ff276b24cd913fde2c7b0eee2c75624e81250c8364641897518c1f2a3692b27411785b08a7d940843f5095a53ff18ae3cccf24bd87db5fdbe2377e17f4a0310c6bdc5adf59811aeae318897e5ab6a172ca380dd15b84652", 0xd7}, {&(0x7f0000000380)="a0883dea0daf20189c6e00c122d217fcbd62d854a6500b62098bac2f973da3fe8e17d340ef8f0981d9228c46768c49d2ec63e3c0c0088a1da0c0d50fbafbfd420a4065bc5106d26df8c3be8d69811b24a7345db874aeedd54ad8d11dbd3717f5f7d01f94e679e65e1fc519279064fa395309f17013bcc5a7362815be8259dcf31e916dd829", 0x85}, {&(0x7f0000000440)="d5729846575db507242d4f09cf6470f9fa4b757572909f1a3652ed7be64ad5a2d81e5a15cbc5003060149ec2dc2f39f33029b8f2575cb0ba9112293c02e4662afc5c3957e6998150976406d1a3221e0ffeb680dbbfb6b89e386745d7361636d75d208b745a889566adfd69024ec279cc3e356c70445b8b55379c8c3a0544bfafb992afccac9753747cabd1ab2a7fdc34f062684ae66b874e1c4b73863b484cc6f35294229b8c77b206789f6e681726676b6d8d8d47a087efe052b530eb91f2e31ba73a6eda63b610e9ef95e8c48e931eeac1933359dc24bf57e82aa1ebea4862415de3963da45ea8634a397c415213eb96ef5fd07230fe7d9273ec804897f64caa13cc6910283ce86ee150a0be7a998799a55aec713e9740ec519e947233118cdcbc147796ae1e74f72e3288e6ce23dccf3a3ead64191626a2eb1d07045926f9c8251f947124e31940b970a5708241f33dc93526526f89c3bb5506ea0bae9ef2862308ba6aaa636a8103373219c3fe1fbc2c0c9d86e105428376cf706241382c1817486a520c0b7a38fff2b022189588e6ffd43942c4594618e6d6f8ec42048dbf6ef6718ddc74e1a21c6322c3083b979f710791e1be035932517cb03426ddd45c047e3c3b79281ed48cbccc5c8f12d0f9d3ee8c5a62e8579826d9a398e4a72f8ceb82b60571d8e2212f3cd0f2f64c52eded8c7bd3e0a3ecc0368b290b4bd4ed0d2235d65dbc03ebe07533ac89d2b5960d802386640e6b4628d49ea1a690e8914b5833c46e8d623e744a0a13425f085b64addad1aeaea4154516c21802cc2d43a1e962ce115e53692f935c31c4ca015d22dde4a1ee4d1802aaad929918b55d1766d6108d830877aef10b5ed64f7ba7993efc997b4b0ac59abc6e7f1e7dee66d73d1741d862871166572139aba09b346956d109a0c703c69d8c623bf495884392e41f57bad3c415f1ab1eb77a1a0b510343404ab627467bad48e7f39a38fadf98b82ae6621a7625b1579b53ca72aef21b09c974c397c7cf60bb61c6c1101c3ecb63a8a09a24aed7650269d2042274199792f53569228cbff52e95b677193fbd40a4821027074b92aa655fa4f34032b3405b9bb07c76e4ace33d95a51f3e7cb6d03e48eefde91a1e5536bebc62303aaed253df8b8da0934cba269eebf5fd8ac24ab9474317760c5707607e93046b16b8c33301b9d5ff10dbe5dd1b14a4c8ba17ac70ef46f5ca2a3687e3fb4e5014b23df6bcc1c381cc1b4864ff8f9fd0096008845652733029697fbcc8eef765eda0ca36127cc4a6f279adb35175293e05c695fd8f75667ac4aa1c0656fc07ab77d67c805b1a46a92a5c87d046b109c329b9fdd8274cfbb5608bb0fcb080190d5e37199cc5c4c76d441fb9a827260bb60cabdb0b335133c7cfa3420760ad12e8d9a6a424cb37e2e25f7df4ef4bd962bf462702d8058966c246976d611192b8797f54d65db2ac13f2e60ba4c4fbe210d8191d071044d9d7ecf69f02806ff96201af504cafa32cd5485fd272b67c10615446d76a3bbdd69591fe78756eea636fdeec4addaf3845c317f819f9173deba79f504004c6e668d7169202fbbc5b10c89d777e51252c9375ab0336705f5b829cf5e1fc44884ef085310f2f59bcae09a3e23012bc6d31312422decd7fc4d38b07f9321ae46c1f754ad60545e3dd47aea7ed080623b7db741754c8ddacc7b4e9962061d4eee2566ca8cab1a10a79dca488583fd0533cd5c0c746bf26256d6b2f9e96fbc40f57b3069d2af4558511ca60d1ab51401531dc3df1fbcb9640cf6a9ba2a8711c38894422f1b5a6746e9f0e02547dca982b45194f3f8e08c144b649052cf0735fed8e88980f2d680cbcfb604fac82870b3910dab99c6eb4c500bde236ba721ded1caf5844c6f9f7373774204e1484c95f6ffc31f340b81dbe6da303a0db891da98b8131496dca628ac45e77e2dfe8d204805f6197e54efa3ee538520030061a2e4e8f6d1a915fc6218ba61d18e4cd2f90cf9768da7d26c55be9805b99ffa16df25c75b575499a2f36d5e0426790720feade176ed94a4ae6e12bc0f95c5270a820b294a62169e27fff6490c2033aaad29fcbaaa419ed74e5fa050a097b7592b94755aa8e49f0f1b03ee2ee5b62958b37c6fa21d378ad8fa3a209d786f49ed672e63ea4a743b7b6a5e79d97cc7247197fed9d93a38acc1c112e45b55118c67d37c87153921404a019b9bdf53663128a288cfcb3534f05534d21b4e3226c05b82e62176c620e806c11f7cc606bf41e9419c212e8e73b262677eb27834e820e5aabcc38748697b586508b1f7f35bb195adef4073d2e453b53d5074fbf4087baf806d914c4383984dbeefdbf5532b502df5766def2bb4263f03238d807b67f6d2ba59acc8d6efe6b7c9f3ac9d3e3cb78ebeb4aa295bb788d41b4294e13ccea06e0b214b0c58046efdd4ce29e86d1c1facaeef945df281ccd6c18f05ec0125ff81ba716281a9b2a4bfca43fb7b414ac5ea6a476b486dbb36bcfbf2f02b679625cc7a61c331a961e4eb2d4877f51852de1a7dd969e1918bf97809452af51806392a8ee6dd0f3004b547ebe1ca72159d970054d8a044613595ac4c63f262925d5fa0e4f37e3afbaf07afaa8d3337f44f31857f94394f4a954094c0251c637fc0e9d8fb0514b570bd8f0cd9ae68b3585a2ffd8f3d61252c4c525be479542698562ac8dbacc828fd63d73a35f9103af0eed0a42043feaee7dd5a738a0eebba28bed2820cd74163636823c5a2869adf856cb03378b1496fd80aeb6883a0ddecd74be54969477cbd4de2842f0cc7888c5f5abd3d8e43273125d6595ea1b321bf08701c814f83d89b2f9b97c938da4977cd9f62c28ac76ae90f4195010588dc0124e134dcb9901ec6afc254e9b059410451d0ad56cb28533a1f3e1683593004778aed89e89c8902b453b82a1177ff9e27154ba0e6548ba18740dedc03a78c427b09dcf6b2a4da235938f044b0a03a92d828cba6032d44a58b72867801e9db2abb973e3ca8a3e37e83b37610bae339fe893a943271c7d4de5eee2d7f502fce09bdd4d4c1f36a16429a466c9663f78058a78cc97edd419b67fd6dfdc90c1c51475251c14a638a41bac4cfcfe41b9306d4f2796aa8141e2e05cfd725da8b3464fecfb7b6426af03c3891d94363506145a8c13898d19328a9cb4f91a197c18f71c37c94db0a3d9b1f9f7ac4be14183e8db884da689e1207bd62f45f55daaaecc66ab4dfc4622d1c278031d8e5f96f04b2261a3dec6ff39153b96a8e28a6602c453a7dc2f24ea8880624bb3e8e3beb5173186183aa8a38c830d6f536108eeba07deb9f5d04dd6b57c70d4b39e58ea64792f783c5dfb7510a102291147fbd40b3a0660a7e5e882074e0764eed5761955a51c0431e7558ba721dc5101fbcee29f01e2f169f63bec16894d41e53a3656b31fa301f5b6be516dc1a5ab3dfec18e2d7e9e2eaf4dc7a53c0bfd6639c659d73995f894ba18346ba07c380f55a1064b440bf6a44b35333a32922e3767d6622a4399d285729d7b3c198515154de3baf47c9b56c31176351ad4fe0d2b8b368ebddcaafbcc46b658f2a8199be87581f31ae272a37d133aceaaae94910d66c732b8d218795f0219ff7eade6597583cb44e7d0fd29efd562325c94b0e11075d0257a327b4c199d8703fccfbbf375a8197dcddae733220d1a02bd9bc90dc0690dde9c7c5e9e5b93ecfd75822b2a00c8cdef6943f23942c650aac60e118e6c26369596daa04b4c7eb1ba55348c81a958d03dacac55ec95b20a85de53384c228c839ce66198e454462304a134d0a1c14fd2fb71cf7746549fc422e99e10f6393a4249cc92d7ac20bb6aaef97a8764b48ea0477774ec40b2089ee3bea9d8647447b7adb57ee3f48a4e8f5c50b77f771d193fcb64262335afd3bebdb2de7eafb97c1749f96c8226cf90a96309348a7ee30a68c74f83f12020e85a5d9196c4c6e8e574c2ac4a50c1ca14bebc0f8d8ef08e7fc370e5fe220575da663faf81706f760aba014bfc2b8a3d78637c65e73065db2b8f4d3d724eb315674d2bdcaec9b39fc08a5b00b5b56f81c897fb223872f952b6c7b78c68e20aec57da0ecf37fa2f488e2763dfb46554dd208d4fe4dc4aa7364eb19c975a2e48277ca29c43d597d835913b8ef2c3dedb05cf5bad126261a7a083947257ee4052d92593f9b91da5a45560a8bd60eafeef83b29a3a328ba03a07803517540798385406a4ecb64782ec538a05ba9c1d91f0719a5d298be08629666f16994cb661d55d808a7c73d905c15c5850967e83ca252a6592102a738329edb73da677780bb0d61d584fa01532f1b7aa643f00e47c86da391cc5fe0dcfd41b8aebbf06b841f50dff48f8eea1bbc65865e1eeb37fd0a7771355a358359786bd59c4ae7de753ef9cb3ae7e5064f45bf012b94d29e76d1af9ccbf3fd4f64ab12821b3a43d72593383bc9641aab6ca805f1ae87f8aa4e2410c055758bbb59070b314d30f34dcde552a4053e9e394bd5b1d06732ccf13a648e5af7f9f6cffc90c804e0e0868daf701e91fd21949db6f2110ad6231eeb58d9be5c522097be547a56c23501100522441b5d35d614844190c603e15cbf1f552e4b605c1f92043c82b4423c7b167f10926a37c1f3c7cc32da8b6e90cfcfae59ab61c81842bb1447bc7102f53c165f6ca1fc4ee887cae3a6abd63300109384f242c6c40cc51ca2779e77f58f1dcb4ec252f8e781cda6ed672441bd237a03eeaaccb439d5c98b06e18d8e097304615d7b4807a36d00881d6e45102d5a3be1bff0e227f4516b7b3dbe2d76659d908d01b088e03542951d698bc33979ce360ef8d3424484178a5ce39a759ff238bcd7eaca9581c724406da2c25067b6d151f0b5f671bce8dbcb9d013f99886ac54b19f1ec6bbaf32db5b4e35b269cc0aa90fbe1e4978c9801bf552bbd5c2d7d764ee9ad1c079f2bfd3f2407615903394862fc666a702624223413d93ec4f5b12daad261f3d7a6159a204ceb81bfebc7fb1ba7545cd0ff6fe29329edd6acd2c4b5b64ea3b3774dbb07a3e4856e8d027b8ecb3ac64e54dd15e29bb074f74723e99475611d1877832102d82984c14cc7185128df945dd97c9eba2a7bbf400d8b4316b8457a0c00a4ccd19d072b52f7430312eafcadffcdfe60d46fb7b05ffd209407b1a3627b0e43fd895b6cce5cc9a81ca99daed4da1e2c71f1a275fa66dd8be825bea1831834124903a66478a00ffbee1123f4d4f53216b72169d3b71b2e25f3f1c92065e4e03ce7c0c0d1dc46feaaa3ff97e990c39c0876f71af5299e7da8a80afe7811752cd3460c2c5ac1c3b35ddc057ee937c13cc7f49188fa8d1e7c8a407a3ba0ca4bcd142b62c06d5faee0956ce3eaac1cc67222ae0f90e0398c49b4ccb881a946c46b62ec917720d0eff7b7a8e7c4a1a77d61d3afeb9f62490fb55f477caed06d1a59b212ec072ff205bd5b05465384b63b63d7ef3094dc5617758ef3936797f036c8013e9271f6ae89db6c2c12e6669f256dc8bd1f8cb14ed7c40a484f393a594ffc0ce6e89f536e6c263020a4ab3695b531c250c295fde46cd4cf272a64dc6127c2f5be3fa89fed2ea88abf5239ad5c4fdc6de8129ebd46063e097ef28271602cfce583c7a977420c2b5b702fe38921581ce48e534bfe8ff9cd5438348ca99a19b3c14b1c048480fcd7e776ee09f75b53b9a0fac0691fe54753b58698ed59a3dd52f3fc450f2bbcdd76235b926ae1a73c08a5ffe6ffd1ace9274b5aa80ddc987881755053b4743b50191a6f6", 0x1000}, {&(0x7f00000000c0)="dee410374abf692ee2d1d753df7d161bdaf1c9dd0ef1f96d39202fe97aa79154add308de446ffd05eb70b6e78b018b5888dd179720f8d805e0", 0x39}, {&(0x7f0000001440)="a1f3abbf4c12637e3c1bc6fdd5b6c9021d2518a2a166328c06104022fdbea4f99037a0f78be2d11ff72a9044aa5801fd49615b85f0d3862d528ec2abf3123ed105009f92a4a9461bfd8bb57effaa9eba177a7a3a96ce4994f8519ba004d49411c59ef20712e1b5db9f38f69d73f2ccf6331d355f42f9c1a6de9c01a5b5991da0dc5d36173a83625b2ed920eeb5e78b01d259f8d0f8f7602a4a134d1bfe53341d6ba8db24ee5f40a256628b646eb037a2524b2d0d68768f076b0c8cc289b93db4af2819ea02471086c7b58ee12a908c1156dd5b5e8bac1870", 0xd8}], 0x5, &(0x7f00000015c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x8, [{@broadcast, 0x8001}, {@loopback, 0x2}, {@private=0xa010102, 0xee}, {@multicast1, 0x9}, {@loopback, 0x81}]}, @lsrr={0x83, 0x1b, 0x73, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}, @rr={0x7, 0x13, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "830e891faeeb63fcfdb78e5bd428"}]}, @rr={0x7, 0x1f, 0x47, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="b884a57a04ac856a3c8242ef5fa715d117761bfc3608a19e267e7fb4", 0x1c}, {&(0x7f00000001c0)="087d2ff015d04445f74f82aee97b8baeffb913449cb34b2f35c0c8d38c355a19c8656a455f70b9", 0x27}, {&(0x7f00000016c0)="1802520ab48184f5fbef46576494c6de50013359680a134d72b33799cd12e4cd593b4cb1b7e890b5754aea9d77107f44b4d91a0470b7f4b0109f8ba7bf417af4240f6717ce784a17cc18634f68f02fe8", 0x50}, {&(0x7f0000001740)="3d30a34340f2347871de3c45afebeb94e1f3d982a2aea44a199c466687c6adbfdce2c3c863ebfe94c1803ab9ac6551d9ab95aec82f0e41d338966bdf2dc6468887fe0b968614699259fae8", 0x4b}, {&(0x7f00000017c0)="b9da20fcc6445ce921140734efbaf293f3e60ee95ea0221c2301bdd997fad2ffb7881e2ef87dcb89489ff2eff67f9c8d3fd198dd121de3ea67ce99465d800e8531ff1268aa819fd9be6ab295fb7f5c3a923dcd22d4e010a8c2fd1f181967b6cfdf9624f8fc1dfcaa62cc", 0x6a}, {&(0x7f0000001840)="e5ca21e70bccbcf83fcab2c7cf07187af2257a5abe9accc6d648a3546b0f9b921b603a09accb124b9e4bd77137f6e6046138fc775071f488e15369fea28c2b93884f", 0x42}, {&(0x7f00000018c0)="8505ef4d183961b7ae8f9b8b98", 0xd}], 0x7, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@end, @timestamp={0x44, 0x24, 0xa, 0x0, 0x5, [0x401, 0x15b3, 0x401, 0x4, 0x4, 0x9, 0x7, 0x3]}, @timestamp_addr={0x44, 0x4c, 0x7d, 0x1, 0x6, [{@empty, 0xe33}, {@rand_addr=0x64010101, 0x7ff}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc2b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x557c}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x2, [{@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80008000}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9}}], 0x138}}, {{&(0x7f0000001b80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="95741c9a5a2840467584e078204c35f1263b58a304ce00ba11e11548be70cb6dce1a745380e966e11ff6d08285a2b29da74cdab50f47d06aec37253eb7a3e97f893a0a47fc3dc9a9552883c103c3b744f38a63d6a49de504eae03eea4117576e63070ba7dea923c5ff71fb1db54844352ac526a2a4405dab42751dc3a3", 0x7d}], 0x1, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)="90eae1f12d6b6a3ceb45203d366a6a2de6acf5533f9079354eaabeb79aed61a317b4c0d93f1a14c42b8f14f0ad", 0x2d}, {&(0x7f0000001dc0)="34ca1e29721dbfcc5d29a341641a008c2891a32ff6ee05ed6ba0f5015d8f3a0b278ceeebc008a0f507895462c518cd35a806dd074ee8e4c588ef1d1fa4748dfe00e834f4f28e7867a00eb97dcf446f980724ff629acf3e5b29db911ef143e6d0b82fc5a3f3b55a5e9ff67b33b15e6be4e9a94a7b086de39ed083c2e2f144fd333070981b363f6b115334", 0x8a}, {&(0x7f0000001e80)="91710f4495ef648598c21624feeca4ae79ac00afbf5c51289d67534d4e87aa2d8747acdeb48fd9", 0x27}], 0x3, &(0x7f0000001f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x30}}], 0x4, 0x4040810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@deltclass={0x44, 0x29, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0xb, 0xffff}, {0xfffa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x44}}, 0x44804) 13:55:24 executing program 3 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x1, 0x2, 0x2, 0x7, 0x2], 0x6}, {0x4, [0x5, 0x4, 0x2, 0x1, 0x4, 0x3], 0x6, 0x7}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, 0xff000000, 0xffffffff, 'netpci0\x00', '\x00', {0xff}, {}, 0x5c, 0x0, 0x10}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x3}], 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2}, {0x1, 0x0, 0x6}, {0x2, 0x4}, 0x2, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:55:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 494.441157][ T9523] FAULT_INJECTION: forcing a failure. [ 494.441157][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 494.456104][ T9523] CPU: 1 PID: 9523 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 494.466337][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.476472][ T9523] Call Trace: [ 494.479755][ T9523] dump_stack+0x1d8/0x24e [ 494.484079][ T9523] ? devkmsg_release+0x11c/0x11c [ 494.489002][ T9523] ? arch_stack_walk+0xf8/0x140 [ 494.493844][ T9523] ? show_regs_print_info+0x12/0x12 [ 494.499030][ T9523] should_fail+0x6f6/0x860 [ 494.503439][ T9523] ? setup_fault_attr+0x3d0/0x3d0 [ 494.508457][ T9523] ? __unwind_start+0x72f/0x8e0 [ 494.513298][ T9523] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 494.518830][ T9523] should_failslab+0x5/0x20 [ 494.523317][ T9523] kmem_cache_alloc_trace+0x39/0x2b0 [ 494.528587][ T9523] apply_wqattrs_prepare+0xcb/0x17e0 [ 494.533853][ T9523] ? alloc_workqueue+0x1cb/0x11d0 [ 494.538932][ T9523] ? hci_register_dev+0x19a/0x710 [ 494.544026][ T9523] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 494.549460][ T9523] ? tty_ioctl+0xf68/0x1710 [ 494.553939][ T9523] ? do_vfs_ioctl+0x76a/0x1720 [ 494.558674][ T9523] ? __x64_sys_ioctl+0xd4/0x110 [ 494.563646][ T9523] ? do_syscall_64+0xcb/0x1e0 [ 494.568301][ T9523] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.574358][ T9523] ? format_decode+0xc5c/0x1ab0 [ 494.579186][ T9523] ? cwt_wakefn+0x70/0x70 [ 494.583501][ T9523] ? vsnprintf+0x1d60/0x1d60 [ 494.588111][ T9523] ? string+0x280/0x2c0 [ 494.592242][ T9523] ? widen_string+0x3a/0x340 [ 494.596807][ T9523] ? string+0x280/0x2c0 [ 494.600934][ T9523] apply_workqueue_attrs_locked+0x136/0x6d0 [ 494.606800][ T9523] ? check_preemption_disabled+0x9e/0x330 [ 494.612490][ T9523] ? apply_workqueue_attrs+0x40/0x40 [ 494.617748][ T9523] ? mutex_lock+0xa6/0x110 [ 494.622144][ T9523] ? mutex_trylock+0xb0/0xb0 [ 494.626725][ T9523] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 494.632241][ T9523] alloc_workqueue+0xcc4/0x11d0 [ 494.637066][ T9523] ? sprintf+0xd6/0x120 [ 494.641195][ T9523] ? idr_replace+0x230/0x230 [ 494.645762][ T9523] ? vsnprintf+0x1caa/0x1d60 [ 494.650338][ T9523] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 494.656374][ T9523] ? h4_open+0x4f/0x140 [ 494.660499][ T9523] ? h4_open+0x4f/0x140 [ 494.664641][ T9523] hci_register_dev+0x19a/0x710 [ 494.669473][ T9523] ? h4_open+0x60/0x140 [ 494.673607][ T9523] hci_uart_tty_ioctl+0x89e/0xa10 [ 494.678613][ T9523] ? hci_uart_tty_write+0x10/0x10 [ 494.683608][ T9523] tty_ioctl+0xf68/0x1710 [ 494.687917][ T9523] ? tty_do_resize+0x170/0x170 [ 494.692652][ T9523] ? avc_ss_reset+0x3a0/0x3a0 [ 494.697303][ T9523] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 494.703425][ T9523] ? refcount_inc_checked+0x50/0x50 [ 494.708603][ T9523] ? proc_fail_nth_write+0x1d5/0x240 [ 494.713862][ T9523] ? proc_fail_nth_read+0x1c0/0x1c0 [ 494.719028][ T9523] ? memset+0x1f/0x40 [ 494.722981][ T9523] ? fsnotify+0x1332/0x13f0 [ 494.727455][ T9523] ? tty_do_resize+0x170/0x170 [ 494.732204][ T9523] do_vfs_ioctl+0x76a/0x1720 [ 494.736858][ T9523] ? selinux_file_ioctl+0x72f/0x990 [ 494.742051][ T9523] ? ioctl_preallocate+0x250/0x250 [ 494.747134][ T9523] ? __fget+0x37b/0x3c0 [ 494.751260][ T9523] ? vfs_write+0x422/0x4e0 [ 494.755645][ T9523] ? fget_many+0x20/0x20 [ 494.759858][ T9523] ? debug_smp_processor_id+0x20/0x20 [ 494.765200][ T9523] ? security_file_ioctl+0x9d/0xb0 [ 494.770288][ T9523] __x64_sys_ioctl+0xd4/0x110 [ 494.774978][ T9523] do_syscall_64+0xcb/0x1e0 [ 494.779454][ T9523] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.785316][ T9523] RIP: 0033:0x4665d9 [ 494.789201][ T9523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 494.808781][ T9523] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.817247][ T9523] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 494.825190][ T9523] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 494.833131][ T9523] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 494.841080][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.849021][ T9523] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 494.881865][ T9523] Bluetooth: Can't register HCI device [ 494.895938][ T9543] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 494.908117][ T9543] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 494.916052][ T9543] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 494.925858][ T9543] F2FS-fs (loop2): invalid crc_offset: 0 [ 494.937019][ T9543] attempt to access beyond end of device [ 494.937019][ T9543] loop2: rw=12288, want=8200, limit=8192 [ 494.950481][ T9543] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 495.079606][ T9543] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 495.088695][ T9543] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.097162][ T9543] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 495.112047][ T9543] F2FS-fs (loop2): invalid crc_offset: 0 [ 495.119577][ T9543] attempt to access beyond end of device [ 495.119577][ T9543] loop2: rw=12288, want=8200, limit=8192 [ 495.133650][ T9543] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:25 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:25 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl(r3, 0x8916, &(0x7f0000000000)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000033c0)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', r5, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xffff, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) sendmmsg$sock(r4, &(0x7f00000032c0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)="9098ba43b5b964500416bc9b71974b404df5614bd03312a044d8cce4b343ea11d59e42e585e047332de5f4c7cf5ec525524b245aec546e460346b50e084d9d563ca010b64789fef16cd6ff85cd7291f8e88fda9cd010b50fd969f1192bff8814951a32db7bdf5bb76e43d9257de3e9cb088ee5c234a688f5fcf6d7bc169d59c0ddd54d95535de4139a08b6c4fed7008553f6bf0818d810bef8ccad54eea6254555947008073bfdf60c19c826cdf30c2bdd5356f321e9f5db65f85e309af06b3948643eabb4", 0xc5}, {&(0x7f0000000340)="77fa3205771ddf40114062ea86a641c58b9a6b029d108818e1310d7ced48fdbdebd994acb719238777f1d557a5477d8f660d6f31710359c5025ed254cd310a1e3889f439038cb6bc63d2f821dff3e94f62be8cd20aabe69b6b4ed10327ee6e8abee044195a0ff2aa9ac5e0d674e48082fadfe6ab37eaa1063bd7330583d10c3a837b31bc13e6b5f76ffccfac", 0x8c}, {&(0x7f0000000400)="4345953aa63e859df12729ae1dc4f1b6ed08d455b5a8975fc58f3c6a51d9ab3703b6b25aae141798f8f31b537fe04bada44bbaf86ac15e98d10dbdb11ee21bf9fee0c9e123bc4b0696ab17181f356ef59cd25e221bf42950b5196a31754707c97dd783b25416f34fe011fc52acdd22878c50c641595154b2a716ca808264cf7a97c24434d1087bc9f43af4fdb84af35a81f54aced8bf96a0a5857fd05db069b382870754d4a0f8e6638983becc2ffcb9b1b267f7a90326b27d21fcc57db809f7473442bc81d89298125db6e6681db9d411aa5b94241c00820040e6c196ef834de301ce2ded1eeee76d110193095654d395dab26e96", 0xf5}, {&(0x7f0000000500)="e6092a2b64d1b01fcea3196ba3e94bac458f2940856575d6fa5a0231ab3d8ac6eae689747f51d692fbc6d4b808f992a83464d122ef3220df64e8aa7a2a0dda3deb4418753fd44e91b0ea01c800b85eb5d4711d74f9a8e00c66d5df4eaf954e44ef2585b4e830ea7dcf05c3784e1b7c3de5cf4c45ad54a2be38c0b0a8303800bf576ff7bf875265188482288257f6aa148f7c645fd4df48e314a0780932a909011cebf9fc15915bb1524ea39fbc7fe5dbf639f587d798ae60bf9b4f2e21c8ac23c3b7e077dfb525d81eaa119792996e60fae25fa87a10a3966e", 0xd9}, {&(0x7f0000000180)="339fb7d3aa53c0a06c0e5e7f60ab165e3134a51964314e63afdfec4139bc957be40641765e5ee7593850d4e43aa249e3e0992225db44dc7ff996dbce585898536f309f080f1888", 0x47}, {&(0x7f0000000600)="4fc438b9e6d43b5724263139b88c9c6ebf6151db0bee1218eb3c43fa44a897d4b2a3da43cf56b114afe079c3771df911e089152c1cbddce76d5524d141ca857e9d2452fb0f858d34323f6c18d4a378d9e7d785a35a7920e57b41cd223a9e1e598ba575ea1b5fbd48d1f9b372c377a0d3ff09633e7b9243b68f", 0x79}, {&(0x7f0000000680)="2e8242efd846c3de819bc67eb09fac340319328386f784b171bf94e6d09af5606b6bcede622c37424ea44514178d35c00a8c54023db228e4eb6ae9e64c1577c462e10c498b3b58b2763850ae69", 0x4d}, {&(0x7f0000000700)="5078eb6069e075ab79ef1ec7d44a9ee302ab1319926fc841116a1bdceca500e21db389350a8596a19af2e7074ca046d80a5937038d22039a141a2b02c9b266c5fef068d94d616f944d0af13bda246618fa4e7c20bca2621f09f80c00ff594e448d4efeeca7477d8cb1651e10ee96eaa4eedbeea931af2d2e97c0a72793b2e54e11c730fb55987e542cbac318fb1d26f58d53f44f6ce29d5a5b6372b38db0a5", 0x9f}, {&(0x7f0000000100)="d03e38f08e2064456d9786bc3dcbe7024bee64b0f464067c4aa26b64ee3fc1272a23fc3e1ba22d313114", 0x2a}], 0x9, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xbc8d}}, @timestamping={{0x14, 0x1, 0x25, 0xffff4a7a}}, @mark={{0x14, 0x1, 0x24, 0xffffff01}}], 0x60}}, {{&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x4, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)="946ad944c279520b18703232c800b05ce059fc69ae0d292fa8392c8c55674682a580846adb99fb646ae247b9e2d5740626666bffc758ae0c86f27f3e96553e55b57baa2d6961f55ff89bedff4d775db8359dc69ed2d0e1eac67091ff4035c9dac623e871c9778907c58206f04730a2ca6d99314080bf8d5165296811e73e2d57de822ac2", 0x84}, {&(0x7f0000000a40)="bea8486e7b5eefd1aaea47dcfe83e212335d7616591d78ff7fb4e8e1142c787adc1021e363b8f79035300a47a6c8474e3a2a28bb6564542fb89ad561c631f486f957c14aa45652f1d9a4dfc4714b1612840748a8c7ad3e86e2c0a41f64dfc37d00b0e3aafaf0101d2ac05e6625999bf07e5e6d812692f95cba9b20ceea903e966d9fd8de1c3f9e982befff38b8a6eeb19559bdb5474a563670666dadffa761360d1b122313d96bdf0be4878dcef517f2aedba332f6228fe213579f52cb", 0xbd}, {&(0x7f0000000b00)="598575114713e1f32257608fc3c0d82a367063b6caecf3773fd5e826fba958678385b957994be17ca2e5205aebffec7b231be0ad08b9f99668c95e020a8ee12f219f6f1aa4ec0ba545522cff4a7e5613dcc8a1546f7bb73d15383846c9a5cb609fe5c3942647b362a36e90d78a45dba5a874d0c90bf66addde47f73b42fb60c6a367e5ebd361817a2546eec9b0321492e055bb33fd3206f88f1eceb003aa3ba432e94db5404d6a7c52cac3ef0ec98fb8e1072c2e4c6654fe5debe8888922d8b692ab8f9e96e931bf8ea3876aea", 0xcd}], 0x3}}, {{&(0x7f0000000c40)=@nl=@unspec, 0x80, &(0x7f0000003040)=[{&(0x7f0000000cc0)="09d9d108bfa95640db9a80d899fb1bb95363f0f84c6819699687745f74b70eb5fdba2f1b48e2fb95f3c36a83858ca6a826e9aebda898dd24d6e6a3bce415ebde65888c31a4523d12e442a6a3957fca9c4f5799d252d509d2880fbcb146ad00926321236a8a3684fa51e505629990de2d00bdcf355dca633cedb5141eaeb1f92a615ac1fc5a68ac73b50c77b5a1a2e6d86f73b2fed7199a87b6270f77c3d55c118e28c75602a001cee26b2a7bc0103b99354a787937bb0289b12bccd0f6d2128ed859a870b07d61efd33b28c33691ed03b1e3d7fbcd34e5bc6f02a9ffa6d3b84de9313aabd71b87436cc803ea8fe644f68a2e67338f", 0xf5}, {&(0x7f0000000dc0)="13e1ba66f403ea19ea5964044d9cdf71df92a0e1030a4231ceaeb995790abf69c5e3e229a0473aa29b13070f5d2b2b9669476b1f5964c72bdfbe199541e27deb135131ecaa17860363c1097da739d6749175be82d923b4830a5587c5ea4b40eea73eff5beae0d5010db6c447d1f9363fe0", 0x71}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="c186af18897c29d105ec2a746a49c72c13abb6cf69031388a45d64d6a8a635e7f5ddfd0f23e5aa7cdcf8d2abf8e008bffd65a8fa50259493c02e40fea19170579781ea113d23f1ef69c53f11e6444ecabc34502a911325bdbc36b4dbddaea341386cf3d2a6e349818e7c6adf5219d95643ac2128ae9413dbae60a477021f81403063717ffb807204c524e05dabcb67455bf0bd60448d061829370b85c63b1ac349ba8508a96c0ef9b4afbeee8b7be650ddf56cb318", 0xb5}, {&(0x7f0000001f00)="f970aed3b1230d2ac4ae85cf3bf2e3f7d711a1d8b00681c5be79362b334443789f21c1e73e139ff7ad97829d6951b17a2a862e72a4a0f9213475ad7a93e1ba6ac590ff92f5100fd3f4e305aeb96d5cf66f477a3ede19d034207fe68e76d7c5661f24fabf81bb886112f907f749dd", 0x6e}, {&(0x7f0000001f80)="68590a8effdeeea5b46471032934e7a0fd2667c822a3fd8140044f1c21faf0baa1aca9caf3b30873b0b85849d3834cf034cd7cd7ac0423e68c162d533025f309dc65c1ec0b13a408e912cc8e464f98a90ed57dfdf42d51e5dde8968d3adffe07e3e1ddc0b5e4e2b2873fac0854159524b44296d2ee0b18a26462bb1ce0e05b54818d57ba962a913d0494ddddd4e5789e23fc2e5876fcd4ed7cbea73aeaf4f5d0dfac9416c0da75beba06383bb1b5780eefd691a6f46b4268a3ea35702558efe9d3bf567ba400e22cbb9fd7ca59d8bbb6a54bc621694067c6660aa4c3d0629613e5c7db2309ac8c8d30fa4521d703a8baf2dd199c06181cda20fce3fea827045ca1af13a4c7cba25a65cf1d1cc168e4bb65698cca0d70fd3925e8a4c8042268aafb280d39171c515c2ef8124c4a67d74bbf262562a7a8748f22c841d572a488391aa838c59ed817ce9c5c803066b9c9506eb30d6721f3088106f935b238c32b917bbace5e06b42ab78ed839bc21cea02c48e1826e300c7b639c987dcffa447f5a63c629db21b8c74df38ef3cf419d9d91095c6b055ed863fd31d63bc0265574f409024f4831cd3f800fa46c3c4ec5a2557456aeb498010ad9303a01b8aeb67b9cee4d815c0d39c63226042fc3763d8226f458859296674a9db2c34944d9528d6b7493d74208ba1d5d321a2258e33e5c06c1b879ff3133703a12ff353704cedbba5cca8e1f1dcbd796104b2f274221c7261d89ee2743bf7839dd02386fcd3c926bead80d2dc42ea472e6a07c85826fe7f8a98d1e1e48ea103461dcb27fa840d61ec5fd043e32dcc9f475b13f199bd9c3ac34da2af34e00ea11d694a55d0f23cf32a978410c451099bde677fd5fe6206428b8e282f00103356bbbddf55ab6128841d9f1ab762139802b1cf5e150524634b328e09dd5df449f546320e224f435a77af7ca48771802e04c0ffd65820fbfff82ca8600447583b31d69a532a61c4dcc8536521764987bb39119dc4255ce44da2fdf851f6f6826dc2a94e1200fa4d29203b44b131cbd27a54e328fa01d2951f1b068a3ec4d3edca89a1bda550d4dd80e3bb256cf3ad9a7f22b404a3be7ec7cddca90ee70828b5f347b8146bb5480310a9ae57405932726ec34d9b4cd924889f237b6b1f9776e2bf50b7d8b634ce81882cdc085b127cbd578412ea7fd8a8351fbc9fcdf990a574fb6e9f059afe7419f35655c477ff1bef05b50e0f4b067c5f4df359b36424f7d4349bea58a4001814eca5f51c51b9a0c535f6363cd2940c28d5e4767fe54531e96c8a3f45dcb54f5da804f5c60a53cadf7133bb0e35048ddbe85152d0432696a2184e74545af9e453b507a3c98e406f8a03a41f6a2615474bc791567b9c0487113df502a97ac3c9a4e9f3ef6086040282f73cfb987b062ad41649b601f5172f42024d6256e50c7729d45fbb3b7eb1e1b7e5db73e8716a4d2ef2d8392610a683be48022654103ea9d6718cc17124b7ebb51915a7fb00931920257fef36a079bfa72c49ef822f9a6e5d5f467cb8ef301328c892725a0e4478b441f44863985e35b3b0f8a4064de01585e0b58948affb7d62fe6c7342081f10808c553ee4a6ec3b0372a385319637ea4585fca0da964067d21b5305f2110c270694774ed6fe464841d88c140164dd28199ac24446c3d862fe88b3e543377662db986b42a8654f43c9808ead05641606cacf02f8d6f11787a03df6a5f42a596bea964085dbf89e6092e0bf51febfd1866fdfd5206132fe281f23ffb460be7fe83ce01c71f93dd4085c783d7ef9baca59754bc5b66a9966974d56c34d48af05f8771201081b3fb60a1ce9cc75d702e32f19f7564d6aac6a3e4ef769afea797d22e7897f7513782b3a5977c263ba0c0ae0424060c490787c4c2a0c1f62e983f23f7d6855d0ab7dc32dedb26a4027bad31209a7fd19a56745e8a4d6750d57c4ccb7e36299c46050c8b160aaa670df075012212a2aac8f3dd96e99c6c03ed20abab08978f167b0620d232732d32bcc36ef8daf33708fa9f97af39fc5eb7683da0d0237c62a804de7694d6e6d27b98031bb805631ee3fba97813e598e8e9de80bd07544be18b66d0be8ebbc3c284f59f4426e58909b5ce7959963a69926ec3492bbfa5c54465505a664e794a9534591160ddd9031e5e28c5d08b38990334bb3fe489631d6ae95f9913008bf8bcb27a8429369bd7ec5da966baf400dc0f926abfc4a3ef6bb4dd1d96f238b7c33fa031abe43120ceb78d00b278aae2186635aeec026eef68c0662b9a797ce5e777e6647e60b1c03dd13914f5d6f7b13c92652b181f7f214d1d1233a5bfaf420b6fcc91d866e932960240ae9284c7dca8642a18172108047a119515cf8fd808ad3b6425e7c79081fdfe5ba46f08535fbb9a53d3a10af93df937bd427f82f2eb49879f1b463ff92f2ed5f63303954dc4bcad069c19f523c0cab60c2d6a6d294a0fd03c0242fe615fb415ee34cad73cb071f421a60561b4902cfef625b2dddeb3c22ad285111bac5852e989d18de196360489ea67d0778e9660b849e47cb90d234183d38afda05036534df85971118d046a621bf51f1be7e0ffe0491d324dc4230cd22e7e67d72ba0ecbdbbf04d79742af6bf85ac18a968002195d621def3fe7166f056d15a919ac2abc3270fc204ed52521c4c7154dee723e14e53ed105678c54d03f0d55a4b111f97b2f4bcfa48a39fb9a56e7429ab9561ca8e54783045295f59cea0cad9c5252d0a865a9d9c945178c9a46afd640abe67075a081380a1e62e85609cce80d22b93bdcbd114b6de0c3f52995c1b6711bd2f58cb1cfc3f8eac576e24bbf7121b173663757e000a0056c6b712be5caeee06f9efca91f5559d0ab0dda4b0e514fe3ca7c735f995bc6217db1279931025e23e29bbfbed674722b87d088021ee82887df1b443b4f25d909ea50c2a62534704f49c18dfb3c818ffcd50c6ef57bb39460071e9b5afc376c8872db57a9577a9277df1e4510e15579bf2bec02a18970cf5836c1f7fbe9bf1692b97759aac96b5e3f5b72c9523c022c290e60f0496d19a8a79bf103ef7baa7045754d4df6eb09afd3a7cd375cf8aae320066de59d61a595bcb6318588e07f0da2842c58f7c8dcd47b48eed70b2f516197939f0b008e85d16cafc39406efee9775223c1ea8cb5ee00f479b1cfff77d3662117af1f2b3582514454329979ae80076b55bc983dd2191a209247f98a4e8fe20904011b38a5233e6f03f74a6e00fda8fcc64a307751f00d3c36df85777918af4d6062b295da501e126dffb22ef1fd95e7752a0f1c3be3a64847a7c1701e6086daad76482da552a963a9b207147ea055af3e45e8965d1ceed62d70e0da62a0557c49588800a7935680cfda6d229cf7edd2f648aa92e80e9a8ce32468643b54fe8c6c1b4824a936061a490425ef95d2b0c7fb482afab5ec826b79a05a5b2a076c276326035dd588c69d273a8e651c03225cf6266406efc3c15cedf9ef796cfaee4c8e321c60d61f67096052158074fa036bcc553c215dc7453aab4a8c2d7e55613ca027b2c0e601ff1f8c2ba58bfabf7605dabd1e9454e017b30ee38711aaf4a967c5235d6316973f472a19a29627e3e15bd2a96c189cafe2a6775d005eefa1e4d78226e7fef7241ba0f902b0992d5724efa0f9bfcdfdec0e4e6b381bae6e80a9ec5599e6062e57fbdcabbd26c27b1fb74c92c034a5db9359a2537343fc691baa058de2f5ceaa5c59969e62697697c4b8308fc3ec992589d1803bcac8d56abfaf6adb77699815708c8b4027d95bc1cbf3a399977e9c6cad2ba33228b8ed07949f018deaa0e634fcedf4542e4f1dd2f38e99dddebc7b07fd05b7827949a4bcb8f6e11c213efc12e5472d7b6db78a6ad62686c229dfb216ba141f36f675d6a3378ae97ad0ec0dbce841054aea4147d583acb6117f95625be43c7cf201fa2f3a2cc0dde3349338edb0ac7acc67728f02851cec2d54a0ea305d4ccd359bcb97ac405d1a4b83b15576b37adedfb7ccff4866f407986cb29dedf7199452c801276d93793c9ec024f5504e30638104b2c92f75ebffa9eed7b82049778e24a44775515e28bb4eadf9d9c91a035d9a9ee143fa12187050bd5947beb8988f7524d9e28e461218934158c6ea449c3f7fedf8b9d2ffa62495eb93a57cbbb9d3330298f7bb48a6a119e2c423ef1611d455393d368d5c44de467681fe0223d21a643409b1be276fd8f266de630e5e7dd592f09be59caa8aed29c7b3260aad712b51e3d1f2df696393a10a4e88e81dd55e235be50aa853fe8532a5cba2fa3f53baa5a4456b4e41ab10dc15dd6bea218263b6816717335d89b603483a83fcae0c9973bbe0df89f0d2ab1f49b577099767ad1f4a1b3f91b0ab297087a40f1cbbed26286ce54b54aaa3942f4a2c989fec16a5bff754fce7e39854fabd5479d667013f4608165cbdd9dcb1230751ed4f5f90a2a7c63b6f5833b9fb64bac59689acc07abb9afcd1e5deea9a9637bc506bda59929126bd063ab336b312530f55b2f89207779b9b67397cecfcbe7bf2c2fd7898659159c41317729438614e88a0b749b964479836a7523862d1c13b442b5a5bba717dcdaba1757658ff9bdeff04ede0dfb89f5ac506a54b1565649360c9979639b2522a3f93bdd20dfc2a1fa7ba3613c00787dc49ed9f48548b70d38b009ee733a8e9f4c1175edddb89ee9891e568f0d904dcff2523cf293ea5d842444d6844db87062b454bb5b07694d5fefbcc321eb69ea39520bf761c9925fa5c9561f75dc138106ab3bbcf0160b514c4ad887ddb6908a7ba268f28a7c17c888df6412982e2cda6b89818e1dac50905c3f1824b9c2cc53d725ee7afb54e047e160f3c49038aa032889a4437d9e6830749d5a948846eab5b934e2b9ab3f0d57337495fa4e35b140b2964cadc257b96ea9533120b7406bd0ad8cf15723f2ee2e55a2751babba7540229db30b96ba8b28e1a8202e4f3eb309556b039e8888fec40f3a5ea48891f5fa5981498064b70aa50f839dc85516a6db4eb22fadb647327dfef4396d147e71541c412d74ae4279b01f1d18d23710298ddf3a67f3fceb5ceefcdfca044e5c56cf578e5c1ce5916686d8c684ffbd96f2d6bd81d24b41843189e2386e3e9077cdafa899fc81374a2cccac5ff8fa04a1866dc55d602fd7a113ccaf22f97aaff3f208a0ed15aecb15ec5c4c310f3ef361b568987972209b386e452ba3bfb19b2494c0f59b2f0975bdfbe8c23252bf73729b30d18d3eeeedb6e15cd34e274955e2a2ea2af8f360e3208ea92c7b11fc7a523a21d228622a3b9d69e9d3c8383719c16ae83454827482b3b939cabf0b0fd7b3562eefffac00fa4053fea4a6beedc3d867c56535debec1e3ba240504957e2db9097fa41ff4d15f3472f2642ba36551eb6fbc778ff396d709cd4756790fadf8bac2fae776b650facb5e8d6461d2ce9dde27f6688941cf698cd50acefd1e980239e65c6ba7f8a0de3bf7bfccd5500e6348bc258aa6bdbf6c2156e3845debdf7aa0e04b643763f116800139f55c69d77d4f2025b9e6d34dfd80400d55cd7978783031c20af32a1842b57360709107937cbbd2281ced24cd280475be24e866d1ad051ece12f18290c3180d91b22841d89b96f391dc1d3a3f04e9082da7bbc5f50ff67d1e9c93eb8ded0ae90788808dba2aa73ca5ab53b67fd69c3dc628fbfcf1f9e615421e22cf7dd9730b9aaace73ab4881c68eb8943329af6270d88bff4b3734be9e110a57ef89fdcf3aed989afed3b3eef9cc15f0cdc", 0x1000}, {&(0x7f0000002f80)="32c45a54c6aa5cdbc0d4968e71799b52822f9db94bb586dfaf5989a725d0b85f440259480220d40d78d616c17ca486840e4452d91973a08343fedb5386d67d8e0f7335aada5151a140ad7ba447406ae9f45e7bdcaf04dfc050c8c91bc0233803020471e3e90e796cd0f5011ead0394a6f3cdd2fc1b7d4df0f895057100fa9b94c4c270580b52a6f929fa", 0x8a}], 0x7, &(0x7f00000030c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}, {{&(0x7f0000003100)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'gretap0\x00'}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003180)="8ff4c3d01e028b5b740912665e8f1ff1dfba242b693c957353897bf811be00fc51f2d7451a834d16979d8ad88169ea71add3d2c452bc55bddcd0d7df71dd3c2980bf78320d080cf5416a3489", 0x4c}], 0x1, &(0x7f0000003240)=[@mark={{0x14, 0x1, 0x24, 0x52b}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x48}}], 0x4, 0x80) ioctl(r2, 0x8936, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) sendto$inet(r6, &(0x7f0000003400)="b5ed1bfb03e7bff9aadcb0dfeadf97a27b872752c52cae5863bb94d200d3160253f7375834986e374577ed513b7e0c659ab5f8dab31c37ab09a0fcd584c133547edc40b840dee191d1bf8c101edc5684e57a55765ecd58a7cc68b9c51a8dfd7b59ff503b2b77b9a0eed4b4", 0x6b, 0xeafd8b7ee7eebadf, &(0x7f0000003480)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 13:55:25 executing program 3 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 495.316008][ T9566] FAULT_INJECTION: forcing a failure. [ 495.316008][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 495.328873][ T9566] CPU: 1 PID: 9566 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 495.339014][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.349059][ T9566] Call Trace: [ 495.352346][ T9566] dump_stack+0x1d8/0x24e [ 495.356668][ T9566] ? devkmsg_release+0x11c/0x11c 13:55:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 495.361684][ T9566] ? show_regs_print_info+0x12/0x12 [ 495.366878][ T9566] should_fail+0x6f6/0x860 [ 495.371285][ T9566] ? setup_fault_attr+0x3d0/0x3d0 [ 495.376299][ T9566] ? apply_wqattrs_prepare+0x102/0x17e0 [ 495.376442][ T9577] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 495.381832][ T9566] should_failslab+0x5/0x20 [ 495.381843][ T9566] kmem_cache_alloc_trace+0x39/0x2b0 [ 495.381851][ T9566] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 495.381858][ T9566] apply_wqattrs_prepare+0x102/0x17e0 [ 495.381869][ T9566] ? alloc_workqueue+0x1cb/0x11d0 [ 495.398380][ T9577] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.400343][ T9566] ? hci_register_dev+0x19a/0x710 [ 495.400352][ T9566] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 495.400366][ T9566] ? tty_ioctl+0xf68/0x1710 [ 495.416458][ T9577] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 495.423833][ T9566] ? do_vfs_ioctl+0x76a/0x1720 [ 495.423841][ T9566] ? __x64_sys_ioctl+0xd4/0x110 [ 495.423848][ T9566] ? do_syscall_64+0xcb/0x1e0 [ 495.423856][ T9566] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.423869][ T9566] ? format_decode+0xc5c/0x1ab0 [ 495.435230][ T9577] F2FS-fs (loop2): invalid crc_offset: 0 [ 495.438526][ T9566] ? cwt_wakefn+0x70/0x70 [ 495.438536][ T9566] ? vsnprintf+0x1d60/0x1d60 [ 495.438548][ T9566] ? string+0x280/0x2c0 [ 495.448633][ T9577] attempt to access beyond end of device [ 495.448633][ T9577] loop2: rw=12288, want=8200, limit=8192 [ 495.451402][ T9566] ? widen_string+0x3a/0x340 [ 495.451410][ T9566] ? string+0x280/0x2c0 [ 495.451420][ T9566] apply_workqueue_attrs_locked+0x136/0x6d0 [ 495.451430][ T9566] ? check_preemption_disabled+0x9e/0x330 [ 495.451436][ T9566] ? apply_workqueue_attrs+0x40/0x40 [ 495.451449][ T9566] ? mutex_lock+0xa6/0x110 [ 495.458712][ T9577] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 495.460915][ T9566] ? mutex_trylock+0xb0/0xb0 [ 495.460926][ T9566] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 495.460933][ T9566] alloc_workqueue+0xcc4/0x11d0 [ 495.460946][ T9566] ? sprintf+0xd6/0x120 [ 495.558037][ T9566] ? idr_replace+0x230/0x230 [ 495.562597][ T9566] ? vsnprintf+0x1caa/0x1d60 [ 495.567155][ T9566] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 495.573190][ T9566] ? h4_open+0x4f/0x140 [ 495.577317][ T9566] hci_register_dev+0x19a/0x710 [ 495.582138][ T9566] ? h4_open+0x60/0x140 [ 495.586265][ T9566] hci_uart_tty_ioctl+0x89e/0xa10 [ 495.591621][ T9566] ? hci_uart_tty_write+0x10/0x10 [ 495.596614][ T9566] tty_ioctl+0xf68/0x1710 [ 495.600912][ T9566] ? tty_do_resize+0x170/0x170 [ 495.605643][ T9566] ? avc_ss_reset+0x3a0/0x3a0 [ 495.610286][ T9566] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 495.616419][ T9566] ? refcount_inc_checked+0x50/0x50 [ 495.621595][ T9566] ? proc_fail_nth_write+0x1d5/0x240 [ 495.626847][ T9566] ? proc_fail_nth_read+0x1c0/0x1c0 [ 495.632016][ T9566] ? memset+0x1f/0x40 [ 495.635969][ T9566] ? fsnotify+0x1332/0x13f0 [ 495.640438][ T9566] ? tty_do_resize+0x170/0x170 [ 495.645180][ T9566] do_vfs_ioctl+0x76a/0x1720 [ 495.649738][ T9566] ? selinux_file_ioctl+0x72f/0x990 [ 495.654900][ T9566] ? ioctl_preallocate+0x250/0x250 [ 495.659979][ T9566] ? __fget+0x37b/0x3c0 [ 495.664100][ T9566] ? vfs_write+0x422/0x4e0 [ 495.668483][ T9566] ? fget_many+0x20/0x20 [ 495.672701][ T9566] ? debug_smp_processor_id+0x20/0x20 [ 495.678039][ T9566] ? security_file_ioctl+0x9d/0xb0 [ 495.683129][ T9566] __x64_sys_ioctl+0xd4/0x110 [ 495.687775][ T9566] do_syscall_64+0xcb/0x1e0 [ 495.692255][ T9566] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.698114][ T9566] RIP: 0033:0x4665d9 [ 495.701980][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.721567][ T9566] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.729941][ T9566] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 495.737878][ T9566] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 495.745815][ T9566] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.753751][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:55:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:25 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="c4c69dc3496066064cab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x8, 0x1, 0x7a, 0x2, {{0x38, 0x4, 0x1, 0x25, 0xe0, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x18, [@dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0xc9, [@loopback, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @private=0xa010100]}, @timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0x8, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x467d}, {@remote, 0xffffffff}, {@local, 0x9}, {@remote, 0xffffffff}, {@local, 0x1005}, {@multicast1, 0x3}]}, @lsrr={0x83, 0x7, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @lsrr={0x83, 0xf, 0xd9, [@empty, @local, @remote]}, @timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x6}, {@loopback, 0x1}, {@loopback, 0xea4d}]}, @lsrr={0x83, 0x1f, 0xfc, [@local, @rand_addr=0x64010102, @rand_addr=0x64010101, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) [ 495.761772][ T9566] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 495.806782][ T9566] Bluetooth: Can't register HCI device [ 495.877709][ T9577] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 495.892740][ T9577] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.902333][ T9577] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 495.914326][ T9577] F2FS-fs (loop2): invalid crc_offset: 0 [ 495.926390][ T9577] attempt to access beyond end of device [ 495.926390][ T9577] loop2: rw=12288, want=8200, limit=8192 [ 495.937902][ T9577] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:25 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:25 executing program 3 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:25 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2c, r3}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) [ 496.069830][ T9608] FAULT_INJECTION: forcing a failure. [ 496.069830][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 496.085457][ T9608] CPU: 1 PID: 9608 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 496.095595][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.105622][ T9608] Call Trace: [ 496.108895][ T9608] dump_stack+0x1d8/0x24e [ 496.113202][ T9608] ? devkmsg_release+0x11c/0x11c [ 496.118111][ T9608] ? show_regs_print_info+0x12/0x12 [ 496.123286][ T9608] should_fail+0x6f6/0x860 [ 496.127677][ T9608] ? setup_fault_attr+0x3d0/0x3d0 [ 496.132677][ T9608] ? apply_wqattrs_prepare+0x1c0/0x17e0 [ 496.138191][ T9608] should_failslab+0x5/0x20 [ 496.142708][ T9608] kmem_cache_alloc_trace+0x39/0x2b0 [ 496.148049][ T9608] ? apply_wqattrs_prepare+0x102/0x17e0 [ 496.153562][ T9608] apply_wqattrs_prepare+0x1c0/0x17e0 [ 496.158899][ T9608] ? alloc_workqueue+0x1cb/0x11d0 [ 496.163914][ T9608] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 496.169090][ T9608] ? tty_ioctl+0xf68/0x1710 [ 496.173577][ T9608] ? do_vfs_ioctl+0x76a/0x1720 [ 496.178306][ T9608] ? __x64_sys_ioctl+0xd4/0x110 [ 496.183124][ T9608] ? do_syscall_64+0xcb/0x1e0 [ 496.187771][ T9608] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.193806][ T9608] ? format_decode+0xc5c/0x1ab0 [ 496.198660][ T9608] ? cwt_wakefn+0x70/0x70 [ 496.202979][ T9608] ? vsnprintf+0x1d60/0x1d60 [ 496.207544][ T9608] ? string+0x280/0x2c0 [ 496.211669][ T9608] ? widen_string+0x3a/0x340 [ 496.216230][ T9608] ? string+0x280/0x2c0 [ 496.220357][ T9608] apply_workqueue_attrs_locked+0x136/0x6d0 [ 496.226235][ T9608] ? check_preemption_disabled+0x9e/0x330 [ 496.231925][ T9608] ? apply_workqueue_attrs+0x40/0x40 [ 496.237175][ T9608] ? mutex_lock+0xa6/0x110 [ 496.241570][ T9608] ? mutex_trylock+0xb0/0xb0 [ 496.246149][ T9608] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 496.251663][ T9608] alloc_workqueue+0xcc4/0x11d0 [ 496.256485][ T9608] ? sprintf+0xd6/0x120 [ 496.260635][ T9608] ? idr_replace+0x230/0x230 [ 496.265194][ T9608] ? vsnprintf+0x1caa/0x1d60 [ 496.269772][ T9608] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 496.275903][ T9608] ? h4_open+0x4f/0x140 [ 496.280031][ T9608] hci_register_dev+0x19a/0x710 [ 496.284866][ T9608] ? h4_open+0x60/0x140 [ 496.289078][ T9608] hci_uart_tty_ioctl+0x89e/0xa10 [ 496.294073][ T9608] ? hci_uart_tty_write+0x10/0x10 [ 496.299068][ T9608] tty_ioctl+0xf68/0x1710 [ 496.303396][ T9608] ? tty_do_resize+0x170/0x170 [ 496.308147][ T9608] ? avc_ss_reset+0x3a0/0x3a0 [ 496.312793][ T9608] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 496.318919][ T9608] ? refcount_inc_checked+0x50/0x50 [ 496.324663][ T9608] ? proc_fail_nth_write+0x1d5/0x240 [ 496.330068][ T9608] ? proc_fail_nth_read+0x1c0/0x1c0 [ 496.335235][ T9608] ? memset+0x1f/0x40 [ 496.339202][ T9608] ? fsnotify+0x1332/0x13f0 [ 496.343676][ T9608] ? tty_do_resize+0x170/0x170 [ 496.348560][ T9608] do_vfs_ioctl+0x76a/0x1720 [ 496.353123][ T9608] ? selinux_file_ioctl+0x72f/0x990 [ 496.358292][ T9608] ? ioctl_preallocate+0x250/0x250 [ 496.363418][ T9608] ? __fget+0x37b/0x3c0 [ 496.367546][ T9608] ? vfs_write+0x422/0x4e0 [ 496.371967][ T9608] ? fget_many+0x20/0x20 [ 496.376319][ T9608] ? debug_smp_processor_id+0x20/0x20 [ 496.381669][ T9608] ? security_file_ioctl+0x9d/0xb0 [ 496.386806][ T9608] __x64_sys_ioctl+0xd4/0x110 [ 496.391455][ T9608] do_syscall_64+0xcb/0x1e0 [ 496.395975][ T9608] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.401891][ T9608] RIP: 0033:0x4665d9 [ 496.405754][ T9608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.425337][ T9608] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.433715][ T9608] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 496.441655][ T9608] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 496.449614][ T9608] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.457556][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.465495][ T9608] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 496.486761][ T9608] Bluetooth: Can't register HCI device 13:55:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:26 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="93810714d117d48f"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:26 executing program 3 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 496.516845][ T9613] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 496.526829][ T9613] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 496.535710][ T9613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 496.561084][ T9613] F2FS-fs (loop2): invalid crc_offset: 0 13:55:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 496.570832][ T9623] FAULT_INJECTION: forcing a failure. [ 496.570832][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 496.583554][ T9613] attempt to access beyond end of device [ 496.583554][ T9613] loop2: rw=12288, want=8200, limit=8192 [ 496.590142][ T9623] CPU: 0 PID: 9623 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 496.602521][ T9613] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 496.605172][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.605175][ T9623] Call Trace: [ 496.605190][ T9623] dump_stack+0x1d8/0x24e [ 496.605206][ T9623] ? devkmsg_release+0x11c/0x11c [ 496.634537][ T9623] ? show_regs_print_info+0x12/0x12 [ 496.639711][ T9623] should_fail+0x6f6/0x860 [ 496.644097][ T9623] ? setup_fault_attr+0x3d0/0x3d0 [ 496.649092][ T9623] ? apply_wqattrs_prepare+0x8a5/0x17e0 [ 496.654607][ T9623] should_failslab+0x5/0x20 [ 496.659079][ T9623] kmem_cache_alloc+0x36/0x290 [ 496.663831][ T9623] apply_wqattrs_prepare+0x8a5/0x17e0 [ 496.669173][ T9623] ? __x64_sys_ioctl+0xd4/0x110 [ 496.673995][ T9623] ? format_decode+0xc5c/0x1ab0 [ 496.678815][ T9623] ? cwt_wakefn+0x70/0x70 [ 496.683117][ T9623] ? vsnprintf+0x1d60/0x1d60 [ 496.687678][ T9623] ? string+0x280/0x2c0 [ 496.691826][ T9623] ? widen_string+0x3a/0x340 [ 496.696385][ T9623] ? string+0x280/0x2c0 [ 496.700530][ T9623] apply_workqueue_attrs_locked+0x136/0x6d0 [ 496.706393][ T9623] ? check_preemption_disabled+0x9e/0x330 [ 496.712087][ T9623] ? apply_workqueue_attrs+0x40/0x40 [ 496.717340][ T9623] ? mutex_lock+0xa6/0x110 [ 496.721753][ T9623] ? mutex_trylock+0xb0/0xb0 [ 496.726332][ T9623] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 496.731849][ T9623] alloc_workqueue+0xcc4/0x11d0 [ 496.736671][ T9623] ? sprintf+0xd6/0x120 [ 496.740793][ T9623] ? idr_replace+0x230/0x230 [ 496.745349][ T9623] ? vsnprintf+0x1caa/0x1d60 [ 496.749906][ T9623] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 496.755940][ T9623] ? h4_open+0x4f/0x140 [ 496.760063][ T9623] hci_register_dev+0x19a/0x710 [ 496.764883][ T9623] ? h4_open+0x60/0x140 [ 496.769008][ T9623] hci_uart_tty_ioctl+0x89e/0xa10 [ 496.774003][ T9623] ? hci_uart_tty_write+0x10/0x10 [ 496.779018][ T9623] tty_ioctl+0xf68/0x1710 [ 496.783339][ T9623] ? tty_do_resize+0x170/0x170 [ 496.788074][ T9623] ? avc_ss_reset+0x3a0/0x3a0 [ 496.792721][ T9623] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 496.798843][ T9623] ? refcount_inc_checked+0x50/0x50 [ 496.804023][ T9623] ? proc_fail_nth_write+0x1d5/0x240 [ 496.809285][ T9623] ? proc_fail_nth_read+0x1c0/0x1c0 [ 496.814453][ T9623] ? memset+0x1f/0x40 [ 496.818413][ T9623] ? fsnotify+0x1332/0x13f0 [ 496.822889][ T9623] ? tty_do_resize+0x170/0x170 [ 496.827623][ T9623] do_vfs_ioctl+0x76a/0x1720 [ 496.832183][ T9623] ? selinux_file_ioctl+0x72f/0x990 [ 496.837355][ T9623] ? ioctl_preallocate+0x250/0x250 [ 496.842458][ T9623] ? __fget+0x37b/0x3c0 [ 496.846597][ T9623] ? vfs_write+0x422/0x4e0 [ 496.850981][ T9623] ? fget_many+0x20/0x20 [ 496.855193][ T9623] ? debug_smp_processor_id+0x20/0x20 [ 496.860548][ T9623] ? security_file_ioctl+0x9d/0xb0 [ 496.865629][ T9623] __x64_sys_ioctl+0xd4/0x110 [ 496.870283][ T9623] do_syscall_64+0xcb/0x1e0 [ 496.875467][ T9623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.881343][ T9623] RIP: 0033:0x4665d9 [ 496.885229][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.904824][ T9623] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.913223][ T9623] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 496.921177][ T9623] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 496.929121][ T9623] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.937061][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.945001][ T9623] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 496.954916][ T9623] Bluetooth: Can't register HCI device [ 497.040911][ T9613] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 497.051736][ T9613] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 497.059829][ T9613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 497.069991][ T9613] F2FS-fs (loop2): invalid crc_offset: 0 [ 497.082038][ T9613] attempt to access beyond end of device [ 497.082038][ T9613] loop2: rw=12288, want=8200, limit=8192 [ 497.094106][ T9613] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="abefb4c85a66115bca1999090437fc06764d7bb815a97e6d3e7c94dde4214589b365760c2784cb5d99b2a8ba9171dfa99ee840a4bc6ef756486da715643840eb7901f50e160fdcf9f7cbd89bf7a9160653d8f268a34ec258dc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 13:55:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1ff8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:26 executing program 3 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 497.202110][ T9652] FAULT_INJECTION: forcing a failure. [ 497.202110][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 497.231837][ T9652] CPU: 0 PID: 9652 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 497.242181][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.252310][ T9652] Call Trace: [ 497.255594][ T9652] dump_stack+0x1d8/0x24e [ 497.259911][ T9652] ? devkmsg_release+0x11c/0x11c [ 497.264834][ T9652] ? show_regs_print_info+0x12/0x12 [ 497.268042][ T9656] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 497.270011][ T9652] ? kfree+0xe0/0x660 [ 497.270020][ T9652] ? apply_wqattrs_commit+0x3d1/0x730 [ 497.270033][ T9652] should_fail+0x6f6/0x860 [ 497.278966][ T9656] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 497.282718][ T9652] ? setup_fault_attr+0x3d0/0x3d0 [ 497.282726][ T9652] ? check_preemption_disabled+0x9e/0x330 [ 497.282734][ T9652] ? pwq_adjust_max_active+0xc0/0x900 [ 497.282743][ T9652] ? mutex_lock+0xa6/0x110 [ 497.282755][ T9652] ? alloc_workqueue+0x156/0x11d0 [ 497.288545][ T9656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 497.292498][ T9652] should_failslab+0x5/0x20 [ 497.292507][ T9652] __kmalloc+0x5f/0x2f0 [ 497.292515][ T9652] alloc_workqueue+0x156/0x11d0 [ 497.292526][ T9652] ? sprintf+0xd6/0x120 [ 497.292537][ T9652] ? idr_replace+0x230/0x230 [ 497.305456][ T9656] F2FS-fs (loop2): invalid crc_offset: 0 [ 497.310906][ T9652] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 497.310915][ T9652] ? hci_register_dev+0x12f/0x710 [ 497.310927][ T9652] hci_register_dev+0x1f2/0x710 [ 497.318208][ T9656] attempt to access beyond end of device [ 497.318208][ T9656] loop2: rw=12288, want=8200, limit=8192 [ 497.320762][ T9652] hci_uart_tty_ioctl+0x89e/0xa10 [ 497.320771][ T9652] ? hci_uart_tty_write+0x10/0x10 [ 497.320780][ T9652] tty_ioctl+0xf68/0x1710 [ 497.320792][ T9652] ? tty_do_resize+0x170/0x170 [ 497.326168][ T9656] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 497.333990][ T9652] ? avc_ss_reset+0x3a0/0x3a0 [ 497.333998][ T9652] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 497.334006][ T9652] ? refcount_inc_checked+0x50/0x50 [ 497.334016][ T9652] ? proc_fail_nth_write+0x1d5/0x240 [ 497.334027][ T9652] ? proc_fail_nth_read+0x1c0/0x1c0 [ 497.441157][ T9652] ? memset+0x1f/0x40 [ 497.445111][ T9652] ? fsnotify+0x1332/0x13f0 [ 497.449587][ T9652] ? tty_do_resize+0x170/0x170 [ 497.454350][ T9652] do_vfs_ioctl+0x76a/0x1720 [ 497.458927][ T9652] ? selinux_file_ioctl+0x72f/0x990 [ 497.464100][ T9652] ? ioctl_preallocate+0x250/0x250 [ 497.469179][ T9652] ? __fget+0x37b/0x3c0 [ 497.473304][ T9652] ? vfs_write+0x422/0x4e0 [ 497.477691][ T9652] ? fget_many+0x20/0x20 [ 497.481904][ T9652] ? debug_smp_processor_id+0x20/0x20 [ 497.487243][ T9652] ? security_file_ioctl+0x9d/0xb0 [ 497.492349][ T9652] __x64_sys_ioctl+0xd4/0x110 [ 497.496998][ T9652] do_syscall_64+0xcb/0x1e0 [ 497.501472][ T9652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.507331][ T9652] RIP: 0033:0x4665d9 [ 497.511197][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.530770][ T9652] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.539146][ T9652] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 497.547085][ T9652] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 497.555023][ T9652] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.562978][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.570920][ T9652] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 13:55:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:27 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='*'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:27 executing program 3 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 497.610010][ T9652] Bluetooth: Can't register HCI device [ 497.644900][ T9673] FAULT_INJECTION: forcing a failure. [ 497.644900][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 497.658308][ T9673] CPU: 1 PID: 9673 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 497.668464][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.678493][ T9673] Call Trace: [ 497.681766][ T9673] dump_stack+0x1d8/0x24e [ 497.686089][ T9673] ? devkmsg_release+0x11c/0x11c [ 497.691017][ T9673] ? show_regs_print_info+0x12/0x12 [ 497.696184][ T9673] should_fail+0x6f6/0x860 [ 497.700572][ T9673] ? setup_fault_attr+0x3d0/0x3d0 [ 497.705581][ T9673] ? mutex_lock+0xa6/0x110 [ 497.709966][ T9673] ? alloc_workqueue+0x1cb/0x11d0 [ 497.714958][ T9673] should_failslab+0x5/0x20 [ 497.719430][ T9673] kmem_cache_alloc_trace+0x39/0x2b0 [ 497.724682][ T9673] ? alloc_workqueue+0x156/0x11d0 [ 497.729685][ T9673] alloc_workqueue+0x1cb/0x11d0 [ 497.734507][ T9673] ? sprintf+0xd6/0x120 [ 497.738642][ T9673] ? idr_replace+0x230/0x230 [ 497.743201][ T9673] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 497.749236][ T9673] ? h4_open+0x4f/0x140 [ 497.753363][ T9673] hci_register_dev+0x1f2/0x710 [ 497.758183][ T9673] hci_uart_tty_ioctl+0x89e/0xa10 [ 497.763175][ T9673] ? hci_uart_tty_write+0x10/0x10 [ 497.768167][ T9673] tty_ioctl+0xf68/0x1710 [ 497.772469][ T9673] ? tty_do_resize+0x170/0x170 [ 497.777202][ T9673] ? avc_ss_reset+0x3a0/0x3a0 [ 497.781848][ T9673] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 497.787968][ T9673] ? refcount_inc_checked+0x50/0x50 [ 497.793138][ T9673] ? proc_fail_nth_write+0x1d5/0x240 [ 497.798407][ T9673] ? proc_fail_nth_read+0x1c0/0x1c0 [ 497.803574][ T9673] ? memset+0x1f/0x40 [ 497.807524][ T9673] ? fsnotify+0x1332/0x13f0 [ 497.811997][ T9673] ? tty_do_resize+0x170/0x170 [ 497.816732][ T9673] do_vfs_ioctl+0x76a/0x1720 [ 497.821291][ T9673] ? selinux_file_ioctl+0x72f/0x990 [ 497.826457][ T9673] ? ioctl_preallocate+0x250/0x250 [ 497.831536][ T9673] ? __fget+0x37b/0x3c0 [ 497.835672][ T9673] ? vfs_write+0x422/0x4e0 [ 497.840058][ T9673] ? fget_many+0x20/0x20 [ 497.844270][ T9673] ? debug_smp_processor_id+0x20/0x20 [ 497.849698][ T9673] ? security_file_ioctl+0x9d/0xb0 [ 497.854778][ T9673] __x64_sys_ioctl+0xd4/0x110 [ 497.859423][ T9673] do_syscall_64+0xcb/0x1e0 [ 497.863897][ T9673] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.869756][ T9673] RIP: 0033:0x4665d9 [ 497.873621][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.893193][ T9673] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.901745][ T9673] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:55:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:27 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002100090000000000000000000a00000000000000000000000800100000000000cc3c218700e1cdb6cbcf600b9d1ad61bbd966036ee5aa2f481714ac595faa70431fd70b7b1eb56a9cda912a9af11aaf32492b8200d3969"], 0x24}}, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6001, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x7, 0x9, 0x0, 0x7ff}, r5, 0x5, 0xffffffffffffffff, 0x3) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETNSID={0x24, 0x5a, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl(r3, 0x28936, &(0x7f0000000380)="38e8161369f50ff650ed6b0cdccfeefb0db100d6a8904998edd4f7f6a4242023dce2c020bc310dc2cfb580b3222583da21b198a0cddf7c76901f7420817064c62d34bee61d1488046bbbeb6f90078368eb75c244cf831f0c27bd1fa76db23c97b6c6386794de9202515120d8f660a2d47931081c1fd1fea4e47cd058c1b25184ddbce44456aec33f304a436b343d43d9793c33c008f7e552538252111fed5d4712b29645aa0c24a22fcd1882c0d76a5699034290a0ba") 13:55:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:27 executing program 3 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 497.909697][ T9673] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 497.917637][ T9673] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.925577][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.933530][ T9673] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 497.952087][ T9673] Bluetooth: Can't register HCI device [ 497.991650][ T9656] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 497.998677][ T9683] FAULT_INJECTION: forcing a failure. [ 497.998677][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 498.020112][ T9656] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 498.021519][ T9683] CPU: 1 PID: 9683 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 498.037956][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.047997][ T9683] Call Trace: [ 498.050147][ T9656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 498.051273][ T9683] dump_stack+0x1d8/0x24e [ 498.051283][ T9683] ? devkmsg_release+0x11c/0x11c [ 498.051296][ T9683] ? arch_stack_walk+0xf8/0x140 [ 498.073477][ T9683] ? show_regs_print_info+0x12/0x12 [ 498.078678][ T9683] should_fail+0x6f6/0x860 [ 498.083100][ T9683] ? setup_fault_attr+0x3d0/0x3d0 [ 498.088116][ T9683] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 498.093571][ T9683] should_failslab+0x5/0x20 [ 498.098062][ T9683] kmem_cache_alloc_trace+0x39/0x2b0 [ 498.103395][ T9683] apply_wqattrs_prepare+0xcb/0x17e0 [ 498.108663][ T9683] ? alloc_workqueue+0x1cb/0x11d0 [ 498.113672][ T9683] ? hci_register_dev+0x1f2/0x710 [ 498.118679][ T9683] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 498.123882][ T9683] ? tty_ioctl+0xf68/0x1710 [ 498.128381][ T9683] ? do_vfs_ioctl+0x76a/0x1720 [ 498.133131][ T9683] ? __x64_sys_ioctl+0xd4/0x110 [ 498.137971][ T9683] ? do_syscall_64+0xcb/0x1e0 [ 498.142632][ T9683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.148687][ T9683] ? format_decode+0xc5c/0x1ab0 [ 498.153522][ T9683] ? cwt_wakefn+0x70/0x70 [ 498.157849][ T9683] ? vsnprintf+0x1d60/0x1d60 [ 498.162422][ T9683] ? string+0x280/0x2c0 [ 498.166560][ T9683] ? widen_string+0x3a/0x340 [ 498.171138][ T9683] ? string+0x280/0x2c0 [ 498.175276][ T9683] apply_workqueue_attrs_locked+0x136/0x6d0 [ 498.181176][ T9683] ? check_preemption_disabled+0x9e/0x330 [ 498.186886][ T9683] ? apply_workqueue_attrs+0x40/0x40 [ 498.192158][ T9683] ? mutex_lock+0xa6/0x110 [ 498.196221][ T9656] F2FS-fs (loop2): invalid crc_offset: 0 [ 498.196560][ T9683] ? mutex_trylock+0xb0/0xb0 [ 498.202258][ T9656] attempt to access beyond end of device [ 498.202258][ T9656] loop2: rw=12288, want=8200, limit=8192 [ 498.206725][ T9683] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 498.206739][ T9683] alloc_workqueue+0xcc4/0x11d0 [ 498.228175][ T9683] ? sprintf+0xd6/0x120 [ 498.232316][ T9683] ? idr_replace+0x230/0x230 [ 498.236910][ T9683] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 498.242940][ T9656] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 498.242964][ T9683] ? h4_open+0x4f/0x140 [ 498.253919][ T9683] hci_register_dev+0x1f2/0x710 [ 498.258747][ T9683] hci_uart_tty_ioctl+0x89e/0xa10 [ 498.263748][ T9683] ? hci_uart_tty_write+0x10/0x10 [ 498.268745][ T9683] tty_ioctl+0xf68/0x1710 [ 498.273045][ T9683] ? tty_do_resize+0x170/0x170 [ 498.277787][ T9683] ? avc_ss_reset+0x3a0/0x3a0 [ 498.282452][ T9683] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 498.288578][ T9683] ? refcount_inc_checked+0x50/0x50 [ 498.293754][ T9683] ? proc_fail_nth_write+0x1d5/0x240 [ 498.299011][ T9683] ? proc_fail_nth_read+0x1c0/0x1c0 [ 498.304181][ T9683] ? memset+0x1f/0x40 [ 498.308132][ T9683] ? fsnotify+0x1332/0x13f0 [ 498.312636][ T9683] ? tty_do_resize+0x170/0x170 [ 498.317392][ T9683] do_vfs_ioctl+0x76a/0x1720 [ 498.321962][ T9683] ? selinux_file_ioctl+0x72f/0x990 [ 498.327157][ T9683] ? ioctl_preallocate+0x250/0x250 [ 498.332249][ T9683] ? __fget+0x37b/0x3c0 [ 498.336376][ T9683] ? vfs_write+0x422/0x4e0 [ 498.340763][ T9683] ? fget_many+0x20/0x20 [ 498.344972][ T9683] ? debug_smp_processor_id+0x20/0x20 [ 498.350312][ T9683] ? security_file_ioctl+0x9d/0xb0 [ 498.355391][ T9683] __x64_sys_ioctl+0xd4/0x110 [ 498.360039][ T9683] do_syscall_64+0xcb/0x1e0 [ 498.364511][ T9683] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.370373][ T9683] RIP: 0033:0x4665d9 [ 498.374332][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.393903][ T9683] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.402281][ T9683] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 498.410222][ T9683] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 498.418164][ T9683] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.426197][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.434142][ T9683] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 498.456875][ T9683] Bluetooth: Can't register HCI device 13:55:28 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002100090000000000000000000a00000000000000000000000800100000000000cc3c218700e1cdb6cbcf600b9d1ad61bbd966036ee5aa2f481714ac595faa70431fd70b7b1eb56a9cda912a9af11aaf32492b8200d3969"], 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@delchain={0x34, 0x65, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xa}, {0xffe0, 0x4}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xa0}}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4010) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', r1, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) writev(r3, &(0x7f0000001580)=[{&(0x7f0000000240)="150551ba8d8426867fe2c7a2bdd1035c6dce20ad23a9fdfb825723102b7a48d7e5db755d6fb7a64b492a9387f1f3f065bef0a392632e7d8f6389f81ab326eaa41c58faaa9f82b4b88ac1a00c56f47cd6949379045f7a42dc1d4d5037e4a756832882861a7bda2bd08c2521d7b438ce49b6f0ccb25c5e127c5294cfc51ed9dde5992cd160164b3db3f784dbf0c22716c820df5383bcf8cafdd979bdbaac21dabbd22be4fc7f1c1dfc5e3552130182f49a13f8cef1d55dca4e5adbf193ac8a79ccac72b57e88cdceef501888c784089bbcf086aaee5dde2e8e45", 0xd9}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000080)="0ef193390f06fc73fb1aa98ce37259170e05eddc98788eb121a7942e2ee98153246cf616efc185f6c09aee561e39b61879f9d3861ce5ebdd82ad8a79c1841ba8e46cf80d4ef9610a9ae6c1b4a32feccd290fa142d8df66b253b05169f2", 0x5d}, {&(0x7f0000001340)="d4b69063b3df2160ed5bf7b6d7f622b0407fc040ce1b5d351850571b143dc4bcd9a8e3ab0266366b0781123cca9363d84d5f2f4a368a5c3195ea6f9c82bc87b18bfd9043c1f7bc5e2d14ccd284654f5977dcd6c95a1fd60ec648a3bc9e028c761cfbc77df897984fe58931e792599b84e3be4388dbca2f8505141fc232ab4e19bcab1300b984b36a180fb5b514883125df375b7b3c62448f247813ca8936d831b53b879d2f66fc72d6d3b1b93173d3fc62e7873bb4d96394fdad18c8c27b4ebb9bcd7def92cae5d301bc2f28", 0xcc}, {&(0x7f0000000180)="31d7db9844a3d640f98df2949164f6e3e5160843d7c066f888900df09aee4dfb6251792b444c463359c58cf3fa1abef28664886cf14465613232f228b6db80daae4df2c9e67cc650b57d675e81f5465a7aefa6fb32956980926423ced4246dc9a7fb", 0x62}, {&(0x7f0000000100)="fdfc6a63dc4b0696f33e288d7aff1c24f74c553022a9375d7c5c9ad60483592b0be48af016dbd59b", 0x28}, {&(0x7f0000001440)="dbfb0e40ca54c277b3d08ca47fd642bf27bdd077a813660367679e7b5c2d9fef9e127417cb2718fcda85c3f78853081208fba76ff29f3151062818aa147e980a", 0x40}, {&(0x7f0000001480)="24cd92f81d0c91c28f4004974bec2a45cdf1d96808a6565d388f2f89ea3ff2f69072a9e45b3d218b5bc20421a88713fb32537bfaead7a72ccd80092081cc4c76b079c510147733ae04190ab83060e54412ca621fd3c746f179ff07acab0953e4b33b4b49b92e746f19d66d73d6018b51650569d31683dac621579f5cd4ff1a4408b9a801bd11506bbe7cbaac5ed373c22d171780", 0x94}, {&(0x7f0000001540)="ef9d90593f15ad13f49f4d225e07054a9dffaac6df0b529d1c42f4045dfea8e17312292add296f8c94e70c0b2c45774b0e92ac91a6b9815abc4e0ee6b1f79003", 0x40}], 0x9) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 13:55:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 13:55:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:28 executing program 3 (fault-call:4 fault-nth:11): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:28 executing program 1: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80380, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x2, 0x23, 0x10001, 0xfffffffffffffc00, 0x3]}, &(0x7f0000000100)=0x78) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000078000000000e00000000450000140000000000009078ac1414bbac1414bb"]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX=r5], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r6}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) 13:55:28 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 498.579641][ T9700] FAULT_INJECTION: forcing a failure. [ 498.579641][ T9700] name failslab, interval 1, probability 0, space 0, times 0 [ 498.597390][ T9700] CPU: 1 PID: 9700 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 498.607559][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.617603][ T9700] Call Trace: [ 498.620897][ T9700] dump_stack+0x1d8/0x24e 13:55:28 executing program 1: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:28 executing program 1: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:55:28 executing program 1: r0 = socket$inet(0x2, 0x0, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 498.625222][ T9700] ? devkmsg_release+0x11c/0x11c [ 498.630153][ T9700] ? show_regs_print_info+0x12/0x12 [ 498.635519][ T9700] should_fail+0x6f6/0x860 [ 498.639932][ T9700] ? setup_fault_attr+0x3d0/0x3d0 [ 498.644954][ T9700] ? apply_wqattrs_prepare+0x102/0x17e0 [ 498.650498][ T9700] should_failslab+0x5/0x20 [ 498.654995][ T9700] kmem_cache_alloc_trace+0x39/0x2b0 [ 498.660269][ T9700] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 498.665721][ T9700] apply_wqattrs_prepare+0x102/0x17e0 [ 498.671083][ T9700] ? alloc_workqueue+0x1cb/0x11d0 [ 498.676092][ T9700] ? hci_register_dev+0x1f2/0x710 [ 498.681106][ T9700] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 498.686335][ T9700] ? tty_ioctl+0xf68/0x1710 [ 498.690823][ T9700] ? do_vfs_ioctl+0x76a/0x1720 [ 498.695576][ T9700] ? __x64_sys_ioctl+0xd4/0x110 [ 498.700438][ T9700] ? do_syscall_64+0xcb/0x1e0 [ 498.705098][ T9700] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.706844][ T9712] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 498.711150][ T9700] ? format_decode+0xc5c/0x1ab0 [ 498.711160][ T9700] ? cwt_wakefn+0x70/0x70 [ 498.711167][ T9700] ? vsnprintf+0x1d60/0x1d60 [ 498.711174][ T9700] ? string+0x280/0x2c0 [ 498.711186][ T9700] ? widen_string+0x3a/0x340 [ 498.721777][ T9712] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 498.724752][ T9700] ? string+0x280/0x2c0 [ 498.724762][ T9700] apply_workqueue_attrs_locked+0x136/0x6d0 [ 498.724772][ T9700] ? check_preemption_disabled+0x9e/0x330 [ 498.724779][ T9700] ? apply_workqueue_attrs+0x40/0x40 [ 498.724786][ T9700] ? mutex_lock+0xa6/0x110 [ 498.724794][ T9700] ? mutex_trylock+0xb0/0xb0 [ 498.724802][ T9700] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 498.724814][ T9700] alloc_workqueue+0xcc4/0x11d0 [ 498.729822][ T9712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 498.733696][ T9700] ? sprintf+0xd6/0x120 [ 498.733703][ T9700] ? idr_replace+0x230/0x230 [ 498.733711][ T9700] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 498.733720][ T9700] ? h4_open+0x4f/0x140 [ 498.733732][ T9700] hci_register_dev+0x1f2/0x710 [ 498.750978][ T9712] F2FS-fs (loop2): invalid crc_offset: 0 [ 498.754297][ T9700] hci_uart_tty_ioctl+0x89e/0xa10 [ 498.754306][ T9700] ? hci_uart_tty_write+0x10/0x10 [ 498.754316][ T9700] tty_ioctl+0xf68/0x1710 [ 498.754323][ T9700] ? tty_do_resize+0x170/0x170 [ 498.754335][ T9700] ? avc_ss_reset+0x3a0/0x3a0 [ 498.770384][ T9712] attempt to access beyond end of device [ 498.770384][ T9712] loop2: rw=12288, want=8200, limit=8192 [ 498.771170][ T9700] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 498.771178][ T9700] ? refcount_inc_checked+0x50/0x50 [ 498.771190][ T9700] ? proc_fail_nth_write+0x1d5/0x240 [ 498.771197][ T9700] ? proc_fail_nth_read+0x1c0/0x1c0 [ 498.771209][ T9700] ? memset+0x1f/0x40 [ 498.778771][ T9712] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 498.780160][ T9700] ? fsnotify+0x1332/0x13f0 [ 498.780170][ T9700] ? tty_do_resize+0x170/0x170 [ 498.780179][ T9700] do_vfs_ioctl+0x76a/0x1720 [ 498.780192][ T9700] ? selinux_file_ioctl+0x72f/0x990 [ 498.915651][ T9700] ? ioctl_preallocate+0x250/0x250 [ 498.920733][ T9700] ? __fget+0x37b/0x3c0 [ 498.924864][ T9700] ? vfs_write+0x422/0x4e0 [ 498.929250][ T9700] ? fget_many+0x20/0x20 [ 498.933475][ T9700] ? debug_smp_processor_id+0x20/0x20 [ 498.938813][ T9700] ? security_file_ioctl+0x9d/0xb0 [ 498.943895][ T9700] __x64_sys_ioctl+0xd4/0x110 [ 498.948544][ T9700] do_syscall_64+0xcb/0x1e0 [ 498.953020][ T9700] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.958896][ T9700] RIP: 0033:0x4665d9 [ 498.962765][ T9700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.982339][ T9700] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.990717][ T9700] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 498.998657][ T9700] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 499.006603][ T9700] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.014545][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.022495][ T9700] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 499.056395][ T9700] Bluetooth: Can't register HCI device [ 499.166526][ T9712] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 499.186200][ T9712] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 499.206649][ T9712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 499.240019][ T9712] F2FS-fs (loop2): invalid crc_offset: 0 [ 499.253895][ T9712] attempt to access beyond end of device [ 499.253895][ T9712] loop2: rw=12288, want=8200, limit=8192 [ 499.272230][ T9712] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2010, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:29 executing program 1: r0 = socket$inet(0x2, 0x0, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") ioctl(r2, 0x8936, &(0x7f0000000000)) 13:55:29 executing program 3 (fault-call:4 fault-nth:12): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:29 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:29 executing program 1: r0 = socket$inet(0x2, 0x0, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 499.472649][ T9752] FAULT_INJECTION: forcing a failure. [ 499.472649][ T9752] name failslab, interval 1, probability 0, space 0, times 0 [ 499.488255][ T9752] CPU: 1 PID: 9752 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 499.498659][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.508698][ T9752] Call Trace: [ 499.511979][ T9752] dump_stack+0x1d8/0x24e [ 499.516294][ T9752] ? devkmsg_release+0x11c/0x11c [ 499.521259][ T9752] ? show_regs_print_info+0x12/0x12 [ 499.524014][ T9763] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 499.526450][ T9752] should_fail+0x6f6/0x860 [ 499.526459][ T9752] ? setup_fault_attr+0x3d0/0x3d0 [ 499.526468][ T9752] ? apply_wqattrs_prepare+0x1c0/0x17e0 [ 499.526481][ T9752] should_failslab+0x5/0x20 [ 499.535575][ T9763] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 499.539684][ T9752] kmem_cache_alloc_trace+0x39/0x2b0 [ 499.539693][ T9752] ? apply_wqattrs_prepare+0x102/0x17e0 [ 499.539701][ T9752] apply_wqattrs_prepare+0x1c0/0x17e0 [ 499.539712][ T9752] ? alloc_workqueue+0x1cb/0x11d0 [ 499.544805][ T9763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 499.550215][ T9752] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 499.550224][ T9752] ? tty_ioctl+0xf68/0x1710 [ 499.550232][ T9752] ? do_vfs_ioctl+0x76a/0x1720 [ 499.550242][ T9752] ? __x64_sys_ioctl+0xd4/0x110 [ 499.559680][ T9763] F2FS-fs (loop2): invalid crc_offset: 0 [ 499.562391][ T9752] ? do_syscall_64+0xcb/0x1e0 [ 499.562400][ T9752] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.562410][ T9752] ? format_decode+0xc5c/0x1ab0 [ 499.562417][ T9752] ? cwt_wakefn+0x70/0x70 [ 499.562451][ T9752] ? vsnprintf+0x1d60/0x1d60 [ 499.567798][ T9763] attempt to access beyond end of device [ 499.567798][ T9763] loop2: rw=12288, want=8200, limit=8192 [ 499.573221][ T9752] ? string+0x280/0x2c0 [ 499.573229][ T9752] ? widen_string+0x3a/0x340 [ 499.573236][ T9752] ? string+0x280/0x2c0 [ 499.573245][ T9752] apply_workqueue_attrs_locked+0x136/0x6d0 [ 499.573253][ T9752] ? check_preemption_disabled+0x9e/0x330 [ 499.573265][ T9752] ? apply_workqueue_attrs+0x40/0x40 [ 499.578689][ T9763] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 499.583597][ T9752] ? mutex_lock+0xa6/0x110 [ 499.583606][ T9752] ? mutex_trylock+0xb0/0xb0 [ 499.583616][ T9752] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 499.583623][ T9752] alloc_workqueue+0xcc4/0x11d0 [ 499.583638][ T9752] ? sprintf+0xd6/0x120 [ 499.712842][ T9752] ? idr_replace+0x230/0x230 [ 499.717401][ T9752] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 499.723436][ T9752] ? h4_open+0x4f/0x140 [ 499.727558][ T9752] hci_register_dev+0x1f2/0x710 [ 499.732387][ T9752] hci_uart_tty_ioctl+0x89e/0xa10 [ 499.737747][ T9752] ? hci_uart_tty_write+0x10/0x10 [ 499.742740][ T9752] tty_ioctl+0xf68/0x1710 [ 499.747047][ T9752] ? tty_do_resize+0x170/0x170 [ 499.751775][ T9752] ? avc_ss_reset+0x3a0/0x3a0 [ 499.756424][ T9752] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 499.762542][ T9752] ? refcount_inc_checked+0x50/0x50 [ 499.767709][ T9752] ? proc_fail_nth_write+0x1d5/0x240 [ 499.772973][ T9752] ? proc_fail_nth_read+0x1c0/0x1c0 [ 499.778236][ T9752] ? memset+0x1f/0x40 [ 499.782194][ T9752] ? fsnotify+0x1332/0x13f0 [ 499.786838][ T9752] ? tty_do_resize+0x170/0x170 [ 499.791569][ T9752] do_vfs_ioctl+0x76a/0x1720 [ 499.796123][ T9752] ? selinux_file_ioctl+0x72f/0x990 [ 499.801372][ T9752] ? ioctl_preallocate+0x250/0x250 [ 499.806450][ T9752] ? __fget+0x37b/0x3c0 [ 499.810600][ T9752] ? vfs_write+0x422/0x4e0 [ 499.814983][ T9752] ? fget_many+0x20/0x20 [ 499.819188][ T9752] ? debug_smp_processor_id+0x20/0x20 [ 499.824524][ T9752] ? security_file_ioctl+0x9d/0xb0 [ 499.829599][ T9752] __x64_sys_ioctl+0xd4/0x110 [ 499.834349][ T9752] do_syscall_64+0xcb/0x1e0 [ 499.838820][ T9752] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.844679][ T9752] RIP: 0033:0x4665d9 [ 499.848555][ T9752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:55:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 499.868128][ T9752] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.876600][ T9752] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 499.884626][ T9752] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 499.892566][ T9752] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.900939][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.908879][ T9752] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 499.990555][ T9752] Bluetooth: Can't register HCI device [ 500.034665][ T9763] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 500.057457][ T9763] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 500.079409][ T9763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 500.106056][ T9763] F2FS-fs (loop2): invalid crc_offset: 0 [ 500.114294][ T9763] attempt to access beyond end of device [ 500.114294][ T9763] loop2: rw=12288, want=8200, limit=8192 [ 500.149293][ T9763] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:55:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2200, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:30 executing program 3 (fault-call:4 fault-nth:13): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 500.315354][ T9790] FAULT_INJECTION: forcing a failure. [ 500.315354][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 500.350570][ T9790] CPU: 1 PID: 9790 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 13:55:30 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 500.361009][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.371048][ T9790] Call Trace: [ 500.374320][ T9790] dump_stack+0x1d8/0x24e [ 500.378713][ T9790] ? devkmsg_release+0x11c/0x11c [ 500.383649][ T9790] ? show_regs_print_info+0x12/0x12 [ 500.388855][ T9790] should_fail+0x6f6/0x860 [ 500.394388][ T9790] ? setup_fault_attr+0x3d0/0x3d0 [ 500.399397][ T9790] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 500.404836][ T9790] ? apply_wqattrs_prepare+0x8a5/0x17e0 [ 500.410363][ T9790] should_failslab+0x5/0x20 13:55:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 500.414849][ T9790] kmem_cache_alloc+0x36/0x290 [ 500.417773][ T9795] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 500.419594][ T9790] apply_wqattrs_prepare+0x8a5/0x17e0 [ 500.419604][ T9790] ? __x64_sys_ioctl+0xd4/0x110 [ 500.419619][ T9790] ? format_decode+0xc5c/0x1ab0 [ 500.441143][ T9795] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 500.443445][ T9790] ? cwt_wakefn+0x70/0x70 [ 500.443455][ T9790] ? vsnprintf+0x1d60/0x1d60 [ 500.443464][ T9790] ? string+0x280/0x2c0 [ 500.443475][ T9790] ? widen_string+0x3a/0x340 [ 500.462826][ T9795] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 500.464164][ T9790] ? string+0x280/0x2c0 [ 500.464174][ T9790] apply_workqueue_attrs_locked+0x136/0x6d0 [ 500.464189][ T9790] ? check_preemption_disabled+0x9e/0x330 [ 500.478494][ T9795] F2FS-fs (loop2): invalid crc_offset: 0 [ 500.481013][ T9790] ? apply_workqueue_attrs+0x40/0x40 [ 500.481022][ T9790] ? mutex_lock+0xa6/0x110 [ 500.481030][ T9790] ? mutex_trylock+0xb0/0xb0 [ 500.481043][ T9790] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 500.493199][ T9795] attempt to access beyond end of device [ 500.493199][ T9795] loop2: rw=12288, want=8200, limit=8192 [ 500.493475][ T9790] alloc_workqueue+0xcc4/0x11d0 [ 500.510352][ T9795] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 500.513394][ T9790] ? sprintf+0xd6/0x120 [ 500.513402][ T9790] ? idr_replace+0x230/0x230 [ 500.513413][ T9790] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 500.513422][ T9790] ? h4_open+0x4f/0x140 [ 500.513435][ T9790] hci_register_dev+0x1f2/0x710 [ 500.565290][ T9790] hci_uart_tty_ioctl+0x89e/0xa10 [ 500.570281][ T9790] ? hci_uart_tty_write+0x10/0x10 [ 500.575359][ T9790] tty_ioctl+0xf68/0x1710 [ 500.579655][ T9790] ? tty_do_resize+0x170/0x170 [ 500.584385][ T9790] ? avc_ss_reset+0x3a0/0x3a0 [ 500.589030][ T9790] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 500.595150][ T9790] ? refcount_inc_checked+0x50/0x50 [ 500.600319][ T9790] ? proc_fail_nth_write+0x1d5/0x240 [ 500.605576][ T9790] ? proc_fail_nth_read+0x1c0/0x1c0 [ 500.610739][ T9790] ? memset+0x1f/0x40 [ 500.614691][ T9790] ? fsnotify+0x1332/0x13f0 [ 500.619158][ T9790] ? tty_do_resize+0x170/0x170 [ 500.623887][ T9790] do_vfs_ioctl+0x76a/0x1720 [ 500.628464][ T9790] ? selinux_file_ioctl+0x72f/0x990 [ 500.633630][ T9790] ? ioctl_preallocate+0x250/0x250 [ 500.639316][ T9790] ? __fget+0x37b/0x3c0 [ 500.643439][ T9790] ? vfs_write+0x422/0x4e0 [ 500.647835][ T9790] ? fget_many+0x20/0x20 [ 500.652046][ T9790] ? debug_smp_processor_id+0x20/0x20 [ 500.657391][ T9790] ? security_file_ioctl+0x9d/0xb0 [ 500.662468][ T9790] __x64_sys_ioctl+0xd4/0x110 [ 500.667112][ T9790] do_syscall_64+0xcb/0x1e0 [ 500.671609][ T9790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.677495][ T9790] RIP: 0033:0x4665d9 [ 500.681360][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.700944][ T9790] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.709410][ T9790] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 500.717476][ T9790] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 500.725416][ T9790] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.733469][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.741419][ T9790] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 500.771767][ T9790] Bluetooth: Can't register HCI device [ 500.851868][ T9795] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 500.861511][ T9795] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 500.869677][ T9795] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 500.903682][ T9795] F2FS-fs (loop2): invalid crc_offset: 0 [ 500.923996][ T9795] attempt to access beyond end of device [ 500.923996][ T9795] loop2: rw=12288, want=8200, limit=8192 [ 500.971116][ T9795] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 502.010986][ T4333] Bluetooth: hci1: command 0x1003 tx timeout [ 502.017019][ T8316] Bluetooth: hci1: sending frame failed (-49) [ 504.090871][ T1004] Bluetooth: hci1: command 0x1001 tx timeout [ 504.096972][ T8316] Bluetooth: hci1: sending frame failed (-49) [ 506.172897][ T1004] Bluetooth: hci1: command 0x1009 tx timeout 13:55:40 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:40 executing program 3 (fault-call:4 fault-nth:14): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:40 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 510.593047][ T9827] FAULT_INJECTION: forcing a failure. [ 510.593047][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 510.596885][ T9831] FAULT_INJECTION: forcing a failure. [ 510.596885][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 510.609469][ T9827] CPU: 1 PID: 9827 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 510.628364][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.638396][ T9827] Call Trace: [ 510.641674][ T9827] dump_stack+0x1d8/0x24e [ 510.646001][ T9827] ? devkmsg_release+0x11c/0x11c [ 510.650911][ T9827] ? show_regs_print_info+0x12/0x12 [ 510.656105][ T9827] should_fail+0x6f6/0x860 [ 510.660510][ T9827] ? setup_fault_attr+0x3d0/0x3d0 [ 510.665508][ T9827] ? __d_alloc+0x2a/0x6a0 [ 510.669811][ T9827] should_failslab+0x5/0x20 [ 510.674307][ T9827] kmem_cache_alloc+0x36/0x290 [ 510.674640][ T9833] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 510.679062][ T9827] __d_alloc+0x2a/0x6a0 [ 510.679071][ T9827] d_alloc_parallel+0xf3/0x1350 [ 510.679084][ T9827] ? avc_has_perm_noaudit+0x30c/0x400 [ 510.696659][ T9833] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 510.696769][ T9827] ? avc_denied+0x1c0/0x1c0 [ 510.696782][ T9827] ? kfree+0xe0/0x660 [ 510.712411][ T9833] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 510.714328][ T9827] ? d_hash_and_lookup+0x1e0/0x1e0 [ 510.714343][ T9827] ? __rcu_read_lock+0x50/0x50 [ 510.727859][ T9833] F2FS-fs (loop2): invalid crc_offset: 0 [ 510.731677][ T9827] ? selinux_inode_permission+0x445/0x690 [ 510.731687][ T9827] __lookup_slow+0x14f/0x450 [ 510.731695][ T9827] ? lookup_one_len+0x2c0/0x2c0 [ 510.731704][ T9827] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 510.731710][ T9827] ? generic_permission+0x13a/0x490 [ 510.731722][ T9827] lookup_one_len+0x17f/0x2c0 [ 510.743477][ T9833] attempt to access beyond end of device [ 510.743477][ T9833] loop2: rw=12288, want=8200, limit=8192 [ 510.747954][ T9827] ? lookup_one_len_common+0x430/0x430 [ 510.747963][ T9827] ? sprintf+0xd6/0x120 [ 510.747975][ T9827] ? mntput+0x63/0xb0 [ 510.777250][ T9833] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 510.783834][ T9827] start_creating+0xec/0x270 [ 510.783843][ T9827] debugfs_create_dir+0x24/0x3f0 [ 510.783851][ T9827] ? h4_open+0x4f/0x140 [ 510.783861][ T9827] hci_register_dev+0x297/0x710 [ 510.783874][ T9827] hci_uart_tty_ioctl+0x89e/0xa10 [ 510.828344][ T9827] ? hci_uart_tty_write+0x10/0x10 [ 510.833348][ T9827] tty_ioctl+0xf68/0x1710 [ 510.837646][ T9827] ? tty_do_resize+0x170/0x170 [ 510.842484][ T9827] ? avc_ss_reset+0x3a0/0x3a0 [ 510.847130][ T9827] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 510.853251][ T9827] ? refcount_inc_checked+0x50/0x50 [ 510.858428][ T9827] ? proc_fail_nth_write+0x1d5/0x240 [ 510.863683][ T9827] ? proc_fail_nth_read+0x1c0/0x1c0 [ 510.868849][ T9827] ? memset+0x1f/0x40 [ 510.872797][ T9827] ? fsnotify+0x1332/0x13f0 [ 510.877270][ T9827] ? tty_do_resize+0x170/0x170 [ 510.882002][ T9827] do_vfs_ioctl+0x76a/0x1720 [ 510.886560][ T9827] ? selinux_file_ioctl+0x72f/0x990 [ 510.891726][ T9827] ? ioctl_preallocate+0x250/0x250 [ 510.896894][ T9827] ? __fget+0x37b/0x3c0 [ 510.901031][ T9827] ? vfs_write+0x422/0x4e0 [ 510.905415][ T9827] ? fget_many+0x20/0x20 [ 510.909628][ T9827] ? debug_smp_processor_id+0x20/0x20 [ 510.914969][ T9827] ? security_file_ioctl+0x9d/0xb0 [ 510.920051][ T9827] __x64_sys_ioctl+0xd4/0x110 [ 510.924695][ T9827] do_syscall_64+0xcb/0x1e0 [ 510.929172][ T9827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 510.935033][ T9827] RIP: 0033:0x4665d9 [ 510.938898][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 510.958467][ T9827] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.966852][ T9827] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 510.974875][ T9827] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 510.982821][ T9827] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 13:55:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 510.990757][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.998695][ T9827] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 511.015581][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 511.020013][ T9831] CPU: 1 PID: 9831 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 511.032056][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.042272][ T9831] Call Trace: [ 511.045585][ T9831] dump_stack+0x1d8/0x24e [ 511.049926][ T9831] ? devkmsg_release+0x11c/0x11c [ 511.054855][ T9831] ? show_regs_print_info+0x12/0x12 [ 511.060039][ T9831] ? check_preemption_disabled+0x9e/0x330 [ 511.065741][ T9831] ? __set_page_owner+0x35/0x200 [ 511.070748][ T9831] should_fail+0x6f6/0x860 [ 511.075150][ T9831] ? setup_fault_attr+0x3d0/0x3d0 [ 511.080176][ T9831] ? ldsem_down_read+0xb7/0x890 [ 511.085009][ T9831] ? hci_alloc_dev+0x4d/0x15e0 [ 511.089753][ T9831] should_failslab+0x5/0x20 [ 511.094238][ T9831] kmem_cache_alloc_trace+0x39/0x2b0 [ 511.099599][ T9831] hci_alloc_dev+0x4d/0x15e0 [ 511.104181][ T9831] hci_uart_tty_ioctl+0x3c0/0xa10 [ 511.109273][ T9831] ? hci_uart_tty_write+0x10/0x10 [ 511.114279][ T9831] tty_ioctl+0xf68/0x1710 [ 511.118587][ T9831] ? tty_do_resize+0x170/0x170 [ 511.123337][ T9831] ? avc_ss_reset+0x3a0/0x3a0 [ 511.128000][ T9831] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 511.134134][ T9831] ? refcount_inc_checked+0x50/0x50 [ 511.139311][ T9831] ? memcg_check_events+0x5c/0x5b0 [ 511.144402][ T9831] ? proc_fail_nth_write+0x1d5/0x240 [ 511.149676][ T9831] ? proc_fail_nth_read+0x1c0/0x1c0 [ 511.154856][ T9831] ? __lru_cache_add+0x1c4/0x210 [ 511.159772][ T9831] ? memset+0x1f/0x40 [ 511.163731][ T9831] ? fsnotify+0x1332/0x13f0 [ 511.168217][ T9831] ? tty_do_resize+0x170/0x170 [ 511.173025][ T9831] do_vfs_ioctl+0x76a/0x1720 [ 511.177601][ T9831] ? selinux_file_ioctl+0x72f/0x990 [ 511.182790][ T9831] ? ioctl_preallocate+0x250/0x250 [ 511.187896][ T9831] ? __fget+0x37b/0x3c0 [ 511.192038][ T9831] ? vfs_write+0x422/0x4e0 [ 511.196445][ T9831] ? fget_many+0x20/0x20 [ 511.200675][ T9831] ? debug_smp_processor_id+0x20/0x20 [ 511.206031][ T9831] ? security_file_ioctl+0x9d/0xb0 [ 511.211132][ T9831] __x64_sys_ioctl+0xd4/0x110 [ 511.215794][ T9831] do_syscall_64+0xcb/0x1e0 [ 511.220382][ T9831] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.226349][ T9831] RIP: 0033:0x4665d9 13:55:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700000069be6d28c41bd34e677d114b655ef53cb325fbc68f72e44e260f82a9bfc92b5579c65d37237647e947e4fb73950000fb216dcadc09215d3568dab9af674d5cc06f3eb349fd086c22e3fc", 0x50}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x1f, r0, 0x80000001, 0x100000000000) r1 = getpgid(r0) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000140)="e073021b44b9069faf5db1a08532fc45fb44425a26a2d2fd9208011fdec4e14b64ca9365af79d9a323aaa1091032cac9d764d5bd8fdbdab5746883671a1f00922738493a63d6fad732b1b9cd3d8c1ae9b5277501cea2a581825987ee2006eb0b20ea0174194e3e642b4de205d331a7a30651b78bdf94d76361935d12ab7811d0a0e93d551b760e413a71541c8180") sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 511.230227][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.249832][ T9831] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.258230][ T9831] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 511.266622][ T9831] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 511.274578][ T9831] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.282532][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:55:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:41 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 511.290487][ T9831] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 511.310991][ T9831] Bluetooth: Can't allocate HCI device 13:55:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001b40)={0x0, 0x0}) clone(0x40000902, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x5, 0x44, 0xf2, 0x5, 0x9, 0x7, 0x0, 0x401}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf253600000008000300", @ANYRES32=0x0, @ANYBLOB="06447502c959c00f14c27769080900169824011234f86c24a265260489006d3a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) clone(0x4004000, &(0x7f0000000180)="6f7acb3c31e334e3da2794d30d7a1bab034650613e98c4c26de997f0ffd3c4632bd0cd7fb0fff2af44b7b7ee7d2be00f166f147358b671678f40eb28a083dcf403c7bdc860646ab98e7f15ca6cf0e2d9294863276a05c68779bb59cbef", &(0x7f0000000100), &(0x7f0000001ac0), &(0x7f0000001b80)="0179f97b62872120ae8807298c6fbbd2ae766023aa93d845acb6b38133b9852b65daf5e144441f37c7a5b2e13a03212633d1d9af6dcc12f0a7b29916477438b5c6ed961ff14b86f1cd953dc1ddffaa9e92f28613572c8ad66b4aee72714fb5c6cd6d3d7228205745c509e8fa38c3df2adecbf09cdb35481ab381a35264ae4927125e8b1ba23455531fa45e21bcdfaa8de3385fd53dd243df781102de33ca4755aa32b2c0c66a1f8b0becac8d68b5bd") ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{}, 0x0, 0x4, @unused=[0x4, 0xfffffffffffffffd, 0x100, 0x1], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000ac0)={{r4}, 0x0, 0x2, @unused=[0x2, 0x8, 0x0, 0x4], @name="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"}) 13:55:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 511.348197][ T9858] FAULT_INJECTION: forcing a failure. [ 511.348197][ T9858] name failslab, interval 1, probability 0, space 0, times 0 [ 511.376592][ T9858] CPU: 1 PID: 9858 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 511.386823][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.396988][ T9858] Call Trace: [ 511.400265][ T9858] dump_stack+0x1d8/0x24e [ 511.404577][ T9858] ? devkmsg_release+0x11c/0x11c [ 511.409495][ T9858] ? show_regs_print_info+0x12/0x12 [ 511.414678][ T9858] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 511.420212][ T9858] should_fail+0x6f6/0x860 [ 511.424621][ T9858] ? setup_fault_attr+0x3d0/0x3d0 [ 511.429631][ T9858] ? memset+0x1f/0x40 [ 511.433604][ T9858] ? h4_open+0x4f/0x140 [ 511.437745][ T9858] should_failslab+0x5/0x20 [ 511.442236][ T9858] kmem_cache_alloc_trace+0x39/0x2b0 [ 511.447507][ T9858] h4_open+0x4f/0x140 [ 511.451475][ T9858] hci_uart_tty_ioctl+0x7ea/0xa10 [ 511.456502][ T9858] ? hci_uart_tty_write+0x10/0x10 [ 511.461513][ T9858] tty_ioctl+0xf68/0x1710 [ 511.465844][ T9858] ? tty_do_resize+0x170/0x170 [ 511.470595][ T9858] ? avc_ss_reset+0x3a0/0x3a0 [ 511.475257][ T9858] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 511.481398][ T9858] ? refcount_inc_checked+0x50/0x50 [ 511.486575][ T9858] ? memcg_check_events+0x5c/0x5b0 [ 511.491667][ T9858] ? proc_fail_nth_write+0x1d5/0x240 [ 511.496923][ T9858] ? proc_fail_nth_read+0x1c0/0x1c0 [ 511.502089][ T9858] ? __lru_cache_add+0x1c4/0x210 [ 511.506995][ T9858] ? memset+0x1f/0x40 [ 511.510946][ T9858] ? fsnotify+0x1332/0x13f0 [ 511.515420][ T9858] ? tty_do_resize+0x170/0x170 [ 511.520151][ T9858] do_vfs_ioctl+0x76a/0x1720 [ 511.524712][ T9858] ? selinux_file_ioctl+0x72f/0x990 [ 511.529888][ T9858] ? ioctl_preallocate+0x250/0x250 [ 511.534972][ T9858] ? __fget+0x37b/0x3c0 [ 511.539100][ T9858] ? vfs_write+0x422/0x4e0 [ 511.543510][ T9858] ? fget_many+0x20/0x20 [ 511.547749][ T9858] ? debug_smp_processor_id+0x20/0x20 [ 511.553105][ T9858] ? security_file_ioctl+0x9d/0xb0 [ 511.558191][ T9858] __x64_sys_ioctl+0xd4/0x110 [ 511.562846][ T9858] do_syscall_64+0xcb/0x1e0 [ 511.567337][ T9858] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 511.573217][ T9858] RIP: 0033:0x4665d9 [ 511.577085][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:55:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 511.596660][ T9858] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.605041][ T9858] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 511.612991][ T9858] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 511.620932][ T9858] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.628875][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.636996][ T9858] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 513.050243][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 513.056274][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 515.130151][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 515.136266][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 517.210051][ T5] Bluetooth: hci0: command 0x1009 tx timeout 13:55:51 executing program 3 (fault-call:4 fault-nth:15): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:51 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2687, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:55:51 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:51 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:55:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001b40)={0x0, 0x0}) clone(0x40000902, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x5, 0x44, 0xf2, 0x5, 0x9, 0x7, 0x0, 0x401}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf253600000008000300", @ANYRES32=0x0, @ANYBLOB="06447502c959c00f14c27769080900169824011234f86c24a265260489006d3a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) clone(0x4004000, &(0x7f0000000180)="6f7acb3c31e334e3da2794d30d7a1bab034650613e98c4c26de997f0ffd3c4632bd0cd7fb0fff2af44b7b7ee7d2be00f166f147358b671678f40eb28a083dcf403c7bdc860646ab98e7f15ca6cf0e2d9294863276a05c68779bb59cbef", &(0x7f0000000100), &(0x7f0000001ac0), &(0x7f0000001b80)="0179f97b62872120ae8807298c6fbbd2ae766023aa93d845acb6b38133b9852b65daf5e144441f37c7a5b2e13a03212633d1d9af6dcc12f0a7b29916477438b5c6ed961ff14b86f1cd953dc1ddffaa9e92f28613572c8ad66b4aee72714fb5c6cd6d3d7228205745c509e8fa38c3df2adecbf09cdb35481ab381a35264ae4927125e8b1ba23455531fa45e21bcdfaa8de3385fd53dd243df781102de33ca4755aa32b2c0c66a1f8b0becac8d68b5bd") ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{}, 0x0, 0x4, @unused=[0x4, 0xfffffffffffffffd, 0x100, 0x1], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000ac0)={{r4}, 0x0, 0x2, @unused=[0x2, 0x8, 0x0, 0x4], @name="547a41d2f345791ee30fe7bfb7b80700d704230174e5a2b02afce5faf1ae091d3a857b6e2d61a96a9cfa370aeca82fa580d87dbdc5bc1396c30d48db114b5419ef4b7e67ebc583ccd31aca661971c1c41f6d954e189b30a0a9735b987ddfb426d145a3f8c4617ba37a00ac4a43442837ca418d9af29651f97816742594f0a7332fddb4de0a40b5ac8c7f821a0b6588b2f62b96dfa9d4b0157dfd4c09c8f11a8e1762940138ec737e6e6439d8afec74f037ec6d50312acd7ee1bbeb66aad7803d9433d43f4507564ae2f3d25ae02dac5d556f8f021f39f3eb303a1e0fe70c38de052b911fb49c223b47d249c5644b13b302467cd62df81f05b3503e0741a0e3f00ed1a9b5fc08522cbd0149452ce44997feb4536effa2092e766bb8f5816fa666802f0664bc87a5311917520454cd031dddcfadfa48602c20fcdf1aa00cc7a06baeaa80683bbef3ed48753827dffb6d32398fc7795556fb3b710e86a028ec0c0a76fd0896212f30db5618b60a92b9ec1fe7f9fa88497755c4cbb74aecfa210f854b64e41a5f83d35db61c0c23c0a2b922272c32b641904bd97fc1e15f0fe4039103a34a773f315d07d34fad139a7005735da90eb925dc41cc29549f6b7518a03609490d8da52c7ad32bae2ebaf265e6ad29bc158a844a8016ceed24206df8924becfef01e83bff073932272d862f8bfcf4334ec69c881a1a1a8eee5daee0a632d63aaa2c94606404d205ca9c035ce25fcfafd98f5dcc189ef60c4da6d39a76890cbffd3d113fea3321458b03c31c2eeb29169881ca232582925d87470b1214c271322546e372f82e4e02f0c447d6a1d8de4b3922c51b649669c0017cb1c3d44c1ac7b61babece74de4b58cd3d5930ece30e99ff7c7cc4e05ad73b13a7b89bd727a5636728e9f2e2f2be02c1379529c6905dc922a9d77219976afef71d6e15bca96da6941d7cc55c1ef34928fbd1d0a823fe99f163136fd2077a2ee82af34e96d6b901a1d21ba080bbccd69fe3b09e4f6b7797e3ff23f726f3e99fd4c2aa9999158bdd9b20cb39f60c9551082f85f6ab887683de9af234d46e71df2c3bca7c87d732d73524563cff1006e1c795c663fb9a19d0fbd3f3138422080bc25498b60bb930ce3cdefd330c6ce3321fba9ae504be005b02f20a07e9d36c3367984969a1f4dd23883cb8c46e9ffb6f9dd8bbc5d54e6e90f88266573536351e364de5605b2c5f8d698f34a4e20767e54543b065d4437600e9615dc8fdeb4a034d4facff966c1215febb0421f5f9722a406875bcb9b5f6525eb0881613ded2d9a3cdff3595743ade315d68ca5f610ca326d719db47f639351fe9747801ce2d79e951e7dddb1f21062f1392434b282031397ae4e06e7ecfb489ea4a71654b7217c39904c0239bcf5cb14383f754dd0ff5c2946564bcc141be94dcb0161375ce77b117138987ae2bc1fb1dcb503ca7bd1ef3c6abcff0e48040915a0197082965a64d3cad679904e4275ea0006de7afd136c6b5ba7e6434764559c0287d49db5a07538db32c31f1bcf17986b1fb7b7df6de0bca910939e428c98c51bd5a66168de1498ce31ff239f910593e88a7a45692dfdf6c1b0a5d5629f7834551be9343cb41527eeb19f6a04249d1fd5f00fa1243fb407e129bb127d69a31a0ee5d4a1bd1e69af18ac1e3ccd74ac196e00bfbf30dde1d20381cc37928cc0a8314b231fb62246f43155d9df4719af0deb8e9574c26fbb74381d4c0eab82082abd7729e236333d8f216bb0713e137dc73dd2d64244d344f58c3cb508064f20689b59c8ebfdc071330aa210d2a67d5db11a10d3506bff77382e7bcad85481d240f8d9d57b7d6a548e61541a6aae62213acfb8152d5000489fddbfcd2119bc72681972660d04fa5f9704e5393ef12116524fa1e8adf2c6237d9835eb5a7749a8b6cba8669ed5c2219d54618e06cbb5eeee28dbd6a6df755760fefdeba0c09f4e34c520dc9ad625534782227c38d2465d580795d2b7775ebfced64efd7f6fc443cdc0449d46645aa938ae8b3908e4a5fd7ea655dfc468a6fbe56b75f0f525ccfcc27ed16413112442c028194492207915b3f27f6b999e0a7671fa9eaa014f45afc4ea6b5d4a150744a64421741d3ffb7dc87cdcc6b104da49b4daecf71fd6640e8648af00b36fdf1024e8e58408a5f95506f5415fd9a6302df2d0cf117465f87bf5089a2db6280a9485b5fc2dbce8c7730b653d8c577e810202cc683c0755e6f0d5e1e60cdc5edc39e8ebdfe97a26d4d0aaa79ec0370c611395ed40b14d5aea6ee163a0d945857dd794b630b0de16970b856bcf72e260b4fe9c4a537fd60ad4db8ef7996e7d0134591247789e39e346895e3ba39bd9ae4280aeef6865c39d27d26fefec239867ec978af1a95e094e776caeed77fc6ca45507424932297b958d7b09544cb738a28d3fba275aa980962b60e55cf926cd310f1b0480ddeea72198ad7acfeba3985db332653389f8be35ec5575b4fa1c7179c91f25cfff33f176e3157cae417e83df7e795250f929b484827d6c96f85e419141b113b6b51d168576918642185115fbed246f58ba9e588e150657739e1ef015d37ecc92f20ad94ee0e230829f1fb29abc10236e8cd97a2ad3ae3ea8b82851af93c1b625a0d7ffc9574d6c04607acdf78da42e47fe1357cab8ab88f246f14534fca5f6107109155fe8d7f45f414ae05cc5436fe064be1e383c1f9b371cc6be7d49d426c204a9a7f665aea2d0a1b090d40de9959418a766f4a38a1201d88a265e9b5a2fc0ecf3d552e72e38574406c22ed5e26bb3d748e531746b93e52af386bdf9fe3eb812fb7a2fd46036063993fcf29456ad270d06b0fd8ef0b500a2a32af70d7208b42109588289aa15ca423080cc2301cdb0f8f828a76451cbc28e15d72acb63e4d851fe4f818144fc3dfb0b6f65d401e93cfb473d9fab3a8405bda1ef20726f1efdf2cbdd9e2dd9e0c2d0d824076a79b2ee170f4ac4bca96f0d4940248cd470fb1055acbfde2969e6ddb97b8820cfc8aa9ba9a98de91e5e32ad544a10fe257084ed5972894036ada4232ffd294fd9726bf24e3de1dcd2f44d21eba8b9715ec81fc82c7c13f53901f18143e9158aa732c006bb8ec08cc710563190e8bd01e7a3c6d64555f2416384fdc2eb2e0f943630006071bb0a6c5e6c99f7da3677872d623cbf23bd53ca0cf3633d5397f4cb071c35a7464ceeb0a922abd99213324f833336059cc093e8dfeee091343b0b079e8863a2123a47dfef28979db6aee4d5d3755b0fea749da6127da61889b6c8646a858b4f71d2847af266a1e554c84c7e80d892b71ba278d64d160a7fb955ff9252e792a8e6b0f1b9f3a39edadf5251fd269039b22208863dea3957a08bdd1f930636c1e44a1a31324b85f0ef3c0b0cd9e1d37f5fa8c02ef48aa4904b0e7a460e1294d93f8bb1f09e569e2132322012fcbe96155e0d178cd2bf1376dc41ae3365918236aca19696e79377baa9a99598b95c6d5860deab5817ca3314b6ac5ee03ab615ebc4f99d20aaecec8734c420630c4a3c408169871af34452cbdb32ba834cda8d52a17d41f58fd9a83a7ff402154e9f2dee4a40fe33446f4bf35d9a32e7402918d75ebd03b54772f1f0b92b5a999661ce5950a5e78d2f0e178feba488ddcac83f393248cfa60211a652d11c0064c252a93d9e3afbf258eb287ceb7951bad0c52e0f9fbdccaff7d6f216ad12d44cfd146b9bc3a24f337b64196dd11b601e84fee44122ba4aafea8fa60bd5b662f7eb06fb1f23e289abb28747b3ebea9b60e0ebcb007a96e66fca3f1eba4dfcfd9ab87d3182cc0b59502e783760f21a56377d7671742c6d57ec497c1e10b02c763b17d68c929c495174b0418a45742531c65871f708f20a6c9476660ce078f0cd5d15bb3af3453782ed5748910fb731ed703c7ea63e9ebf5b53fde78184a773fc3be214ea558f1d81373e81cb398e69099ccc715f34a9d9118b0a64b57d94364734dee3efff1ca4af4518dc60c4ebd73afecfd6622edb1bb053eb9b981f5a121c1ffb3d04fe5cef9c99b30574d3a67900db7bee885083eb29acab8b97020efebb913e13fb339c6051a57fe6b7934ae81ddbdb85881dadfdea2f22a3fba7248ff035f1fa49f42ba747f0c25835ce858c8ec76260823a80f667049e29292d18a43709f1c97e722c2d1fbcacd0398e6393ec9fed900fda798d0d1353d2071240447c435e0da0239624f385d672d3ceac9d3c19415ea870dcb67a83c0463269717f221ba83be156b1c239611f1b0657eee336cb6faa847a7ef7382143f579d331d744ea3ec294043ba64c3e13015e6dd655b751cd644b96f715b478daa63c74d323f1c2e929c9b013552139454d896c19f32681fae4cfb4e8b9d55a32055395890c3a37390c26f3985226a3a83e67734214a558fa888fb67b9ee51c636b3ff4d7b88e5f6a99ccd2a1821e7e0be78ee49c31e5fbca56eb49e09015991871e760ce9581b44d99eed8b3958b192d3a33e74bbd5dcb0e31337c3cfb4d4a0268bb16da95f1411a0bae20757cf8cfffc69604a66a6f17df1fc91e3fe8cd07839ef6e69137e0e9a4592bd38cb8b088876d3fe82da062f142425ed2ede0d4de157c7ea9850f8527103c6dcc5366523d0b080a2e541ce012f7634c5bfd982203902dc55444ec8dff38912d5085d85756997b666bed981ec250a046b071839285aa31221e8a4c80df385a06e7d0489a74ca54eba09a14ea4a34e022cbca7fe997af522df26ce7403c3d25e804ec7ba73ca2d3051ad7768c66b5ef3ab5a2e3b6248b29b31ef73e50877de4de0ed3fcd613ae3e94be5de1555ac0c9de76abb30d28d2b165132ae376b4dfba4607fe9fe53e758936c337f994518aafc8b9e473e966b4c5498df967dd58f8133f806bd985004f874c618feb616d2fa25c320b9f29a45b86c8a503620b9d3bda53657e919e4cfe3b3231deaf13cc7f2c66d9c176e7e32c830464682de664fb9c368a7a25d197364b4af43603c6f7879266fec2ca7af066343512c29b26d1dc75e568790d44cee3c9ac38f8317c7b9f487b96dd82fbab28a09da6b069eb6cd000d3dce5650968f88e0fceabc655c23de0cae39e5adc5abb0cce6d1fcc2082762636d49df3d108b2b5aa1ce5a3a2bfd6c1a0670c149cfb221ca646f22c60bb2949e3666bef11d925e9978964be901debb97bc5248875a0b9daa377d24fa43e749a89e1cbccfc52665c2d8f16416561a9af6f3ec1c3ea2733c92ecfdf7220cd5da1a3511c1b1781952c489ba29eb0c7d177c9ab2f50f5f86b8f7c241a1e3acc06fc750db42a1d258bda6b64d6e95dc5f427243405843aa6ced5abf0d7506351665df52a6f5c90051d606a5011c5e8f4962f187385c77fd40ff162158a3744d0f335c2dc7bcb8a6ac70c48db8d21a2f5f1958425514604d86ddaa04d60d92b10c4cb2bf85f9e0b73186888bb57236b2dbf3ed3b1cdba432ee5773784ce30ed75fe9bad1e49f097e762b52b1279ffdf27f5c272246cbff771368809ff0963a2eb410412263f537b2666988893df00eeb15b7ffa64f9fe74cc0a57f811d5e58dd867e2a15c1dbefd4005a58b4d8ccc99e91ea7564451b5649ba4945e9a66668da29781a44baa79008cfa48d3f6365bd8d6bc98674634c23fa2bb583b3fd9f3263eacaf869da805649426f04dda057f690b95d56310b0c142efe6f0fd96485dae3d7"}) 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 521.472115][ T9888] FAULT_INJECTION: forcing a failure. [ 521.472115][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 521.481559][ T9887] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 521.487380][ T9889] FAULT_INJECTION: forcing a failure. [ 521.487380][ T9889] name failslab, interval 1, probability 0, space 0, times 0 [ 521.495622][ T9887] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 521.514909][ T9888] CPU: 1 PID: 9888 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 521.517857][ T9887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 521.525059][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.525064][ T9888] Call Trace: [ 521.525082][ T9888] dump_stack+0x1d8/0x24e [ 521.525092][ T9888] ? devkmsg_release+0x11c/0x11c [ 521.525099][ T9888] ? memset+0x1f/0x40 [ 521.525113][ T9888] ? show_regs_print_info+0x12/0x12 [ 521.545587][ T9887] F2FS-fs (loop2): invalid crc_offset: 0 [ 521.546581][ T9888] ? number+0xea3/0x1300 [ 521.546595][ T9888] ? xas_create+0x12c3/0x13b0 [ 521.555186][ T9887] attempt to access beyond end of device [ 521.555186][ T9887] loop2: rw=12288, want=8200, limit=8192 [ 521.555812][ T9888] should_fail+0x6f6/0x860 [ 521.555826][ T9888] ? setup_fault_attr+0x3d0/0x3d0 [ 521.560593][ T9887] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 521.565053][ T9888] ? xas_store+0xae3/0x1610 [ 521.565062][ T9888] ? vsnprintf+0x1e4/0x1d60 [ 521.565074][ T9888] ? alloc_workqueue+0x156/0x11d0 [ 521.621256][ T9888] should_failslab+0x5/0x20 [ 521.625732][ T9888] __kmalloc+0x5f/0x2f0 [ 521.629860][ T9888] alloc_workqueue+0x156/0x11d0 [ 521.634720][ T9888] ? ptr_to_hashval+0x60/0x60 [ 521.639368][ T9888] ? sprintf+0xd6/0x120 [ 521.643492][ T9888] ? idr_replace+0x230/0x230 [ 521.648066][ T9888] ? vsnprintf+0x1caa/0x1d60 [ 521.652626][ T9888] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 521.658669][ T9888] ? h4_open+0x4f/0x140 [ 521.662814][ T9888] hci_register_dev+0x19a/0x710 [ 521.667636][ T9888] ? h4_open+0x60/0x140 [ 521.671763][ T9888] hci_uart_tty_ioctl+0x89e/0xa10 [ 521.676755][ T9888] ? hci_uart_tty_write+0x10/0x10 [ 521.681748][ T9888] tty_ioctl+0xf68/0x1710 [ 521.686048][ T9888] ? tty_do_resize+0x170/0x170 [ 521.690785][ T9888] ? avc_ss_reset+0x3a0/0x3a0 [ 521.695432][ T9888] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 521.701554][ T9888] ? refcount_inc_checked+0x50/0x50 [ 521.706736][ T9888] ? memcg_check_events+0x5c/0x5b0 [ 521.712030][ T9888] ? proc_fail_nth_write+0x1d5/0x240 [ 521.717300][ T9888] ? proc_fail_nth_read+0x1c0/0x1c0 [ 521.722471][ T9888] ? __lru_cache_add+0x1c4/0x210 [ 521.727375][ T9888] ? memset+0x1f/0x40 [ 521.731334][ T9888] ? fsnotify+0x1332/0x13f0 [ 521.735808][ T9888] ? tty_do_resize+0x170/0x170 [ 521.740543][ T9888] do_vfs_ioctl+0x76a/0x1720 [ 521.745102][ T9888] ? selinux_file_ioctl+0x72f/0x990 [ 521.750268][ T9888] ? ioctl_preallocate+0x250/0x250 [ 521.755350][ T9888] ? __fget+0x37b/0x3c0 [ 521.759473][ T9888] ? vfs_write+0x422/0x4e0 [ 521.763878][ T9888] ? fget_many+0x20/0x20 [ 521.768088][ T9888] ? debug_smp_processor_id+0x20/0x20 [ 521.773429][ T9888] ? security_file_ioctl+0x9d/0xb0 [ 521.778530][ T9888] __x64_sys_ioctl+0xd4/0x110 [ 521.783191][ T9888] do_syscall_64+0xcb/0x1e0 [ 521.787666][ T9888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 521.793550][ T9888] RIP: 0033:0x4665d9 [ 521.797416][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 521.817008][ T9888] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.825384][ T9888] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 521.833327][ T9888] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 521.841268][ T9888] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.849217][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.857157][ T9888] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 521.881053][ T9889] CPU: 0 PID: 9889 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 521.891295][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.901334][ T9889] Call Trace: [ 521.904610][ T9889] dump_stack+0x1d8/0x24e [ 521.908930][ T9889] ? devkmsg_release+0x11c/0x11c [ 521.913851][ T9889] ? show_regs_print_info+0x12/0x12 [ 521.919032][ T9889] ? simple_lookup+0xb9/0xf0 [ 521.923616][ T9889] ? __lookup_slow+0x340/0x450 [ 521.928366][ T9889] should_fail+0x6f6/0x860 [ 521.932772][ T9889] ? setup_fault_attr+0x3d0/0x3d0 [ 521.937782][ T9889] ? new_inode_pseudo+0x79/0x220 [ 521.942830][ T9889] should_failslab+0x5/0x20 [ 521.947409][ T9889] kmem_cache_alloc+0x36/0x290 [ 521.952159][ T9889] ? lookup_one_len_common+0x430/0x430 [ 521.957606][ T9889] new_inode_pseudo+0x79/0x220 [ 521.962355][ T9889] new_inode+0x25/0x1d0 [ 521.966496][ T9889] ? start_creating+0x183/0x270 [ 521.971352][ T9889] debugfs_create_dir+0x68/0x3f0 [ 521.971366][ T9889] ? h4_open+0x4f/0x140 [ 521.980417][ T9889] hci_register_dev+0x297/0x710 [ 521.985291][ T9889] hci_uart_tty_ioctl+0x89e/0xa10 [ 521.990480][ T9889] ? hci_uart_tty_write+0x10/0x10 [ 521.995501][ T9889] tty_ioctl+0xf68/0x1710 [ 521.999820][ T9889] ? tty_do_resize+0x170/0x170 [ 522.004570][ T9889] ? avc_ss_reset+0x3a0/0x3a0 [ 522.009230][ T9889] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 522.015454][ T9889] ? refcount_inc_checked+0x50/0x50 [ 522.020642][ T9889] ? proc_fail_nth_write+0x1d5/0x240 [ 522.025936][ T9889] ? proc_fail_nth_read+0x1c0/0x1c0 [ 522.031120][ T9889] ? memset+0x1f/0x40 [ 522.035117][ T9889] ? fsnotify+0x1332/0x13f0 [ 522.039609][ T9889] ? tty_do_resize+0x170/0x170 [ 522.044357][ T9889] do_vfs_ioctl+0x76a/0x1720 [ 522.048934][ T9889] ? selinux_file_ioctl+0x72f/0x990 [ 522.054124][ T9889] ? ioctl_preallocate+0x250/0x250 [ 522.059233][ T9889] ? __fget+0x37b/0x3c0 [ 522.063376][ T9889] ? vfs_write+0x422/0x4e0 [ 522.067786][ T9889] ? fget_many+0x20/0x20 [ 522.068396][ T9888] Bluetooth: Can't register HCI device 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 522.072010][ T9889] ? debug_smp_processor_id+0x20/0x20 [ 522.072020][ T9889] ? security_file_ioctl+0x9d/0xb0 [ 522.072030][ T9889] __x64_sys_ioctl+0xd4/0x110 [ 522.072040][ T9889] do_syscall_64+0xcb/0x1e0 [ 522.072050][ T9889] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 522.072062][ T9889] RIP: 0033:0x4665d9 [ 522.107204][ T9889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:55:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 522.127359][ T9889] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.135846][ T9889] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 522.144769][ T9889] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 522.152900][ T9889] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.160948][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.168909][ T9889] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 522.180139][ T9889] debugfs: out of free dentries, can not create directory 'hci1' [ 522.189589][ T4363] Bluetooth: hci1: Frame reassembly failed (-84) [ 522.277423][ T9887] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 522.286576][ T9887] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 522.294818][ T9887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 522.305037][ T9887] F2FS-fs (loop2): invalid crc_offset: 0 [ 522.311534][ T9887] attempt to access beyond end of device [ 522.311534][ T9887] loop2: rw=12288, want=8200, limit=8192 [ 522.324738][ T9887] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 524.249541][ T17] Bluetooth: hci1: command 0x1003 tx timeout [ 524.255650][ T8316] Bluetooth: hci1: sending frame failed (-49) [ 526.329570][ T17] Bluetooth: hci1: command 0x1001 tx timeout [ 526.335889][ T8316] Bluetooth: hci1: sending frame failed (-49) [ 528.409507][ T17] Bluetooth: hci1: command 0x1009 tx timeout 13:56:02 executing program 3 (fault-call:4 fault-nth:16): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:56:02 executing program 4 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001b40)={0x0, 0x0}) clone(0x40000902, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x5, 0x44, 0xf2, 0x5, 0x9, 0x7, 0x0, 0x401}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf253600000008000300", @ANYRES32=0x0, @ANYBLOB="06447502c959c00f14c27769080900169824011234f86c24a265260489006d3a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) clone(0x4004000, &(0x7f0000000180)="6f7acb3c31e334e3da2794d30d7a1bab034650613e98c4c26de997f0ffd3c4632bd0cd7fb0fff2af44b7b7ee7d2be00f166f147358b671678f40eb28a083dcf403c7bdc860646ab98e7f15ca6cf0e2d9294863276a05c68779bb59cbef", &(0x7f0000000100), &(0x7f0000001ac0), &(0x7f0000001b80)="0179f97b62872120ae8807298c6fbbd2ae766023aa93d845acb6b38133b9852b65daf5e144441f37c7a5b2e13a03212633d1d9af6dcc12f0a7b29916477438b5c6ed961ff14b86f1cd953dc1ddffaa9e92f28613572c8ad66b4aee72714fb5c6cd6d3d7228205745c509e8fa38c3df2adecbf09cdb35481ab381a35264ae4927125e8b1ba23455531fa45e21bcdfaa8de3385fd53dd243df781102de33ca4755aa32b2c0c66a1f8b0becac8d68b5bd") ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{}, 0x0, 0x4, @unused=[0x4, 0xfffffffffffffffd, 0x100, 0x1], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000ac0)={{r4}, 0x0, 0x2, @unused=[0x2, 0x8, 0x0, 0x4], @name="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"}) 13:56:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x26ae, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) [ 532.353903][ T9934] FAULT_INJECTION: forcing a failure. [ 532.353903][ T9934] name failslab, interval 1, probability 0, space 0, times 0 [ 532.354782][ T9938] FAULT_INJECTION: forcing a failure. [ 532.354782][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 532.373448][ T9934] CPU: 0 PID: 9934 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 532.389379][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.399422][ T9934] Call Trace: [ 532.402698][ T9934] dump_stack+0x1d8/0x24e [ 532.407091][ T9934] ? devkmsg_release+0x11c/0x11c [ 532.412001][ T9934] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.418076][ T9934] ? show_regs_print_info+0x12/0x12 [ 532.423249][ T9934] should_fail+0x6f6/0x860 [ 532.427642][ T9934] ? setup_fault_attr+0x3d0/0x3d0 [ 532.432739][ T9934] ? security_inode_alloc+0x32/0x1d0 [ 532.438005][ T9934] should_failslab+0x5/0x20 [ 532.442481][ T9934] kmem_cache_alloc+0x36/0x290 [ 532.447221][ T9934] security_inode_alloc+0x32/0x1d0 [ 532.452308][ T9934] inode_init_always+0x387/0x810 [ 532.457270][ T9934] new_inode_pseudo+0x90/0x220 [ 532.462007][ T9934] new_inode+0x25/0x1d0 [ 532.466136][ T9934] ? start_creating+0x183/0x270 [ 532.470983][ T9934] debugfs_create_dir+0x68/0x3f0 [ 532.475904][ T9934] ? h4_open+0x4f/0x140 [ 532.480035][ T9934] hci_register_dev+0x297/0x710 [ 532.484863][ T9934] hci_uart_tty_ioctl+0x89e/0xa10 [ 532.489869][ T9934] ? hci_uart_tty_write+0x10/0x10 [ 532.494880][ T9934] tty_ioctl+0xf68/0x1710 [ 532.499204][ T9934] ? tty_do_resize+0x170/0x170 [ 532.503959][ T9934] ? avc_ss_reset+0x3a0/0x3a0 [ 532.508617][ T9934] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 532.514769][ T9934] ? refcount_inc_checked+0x50/0x50 [ 532.519949][ T9934] ? proc_fail_nth_write+0x1d5/0x240 [ 532.525236][ T9934] ? proc_fail_nth_read+0x1c0/0x1c0 [ 532.530505][ T9934] ? memset+0x1f/0x40 [ 532.534560][ T9934] ? fsnotify+0x1332/0x13f0 [ 532.539044][ T9934] ? tty_do_resize+0x170/0x170 [ 532.543792][ T9934] do_vfs_ioctl+0x76a/0x1720 [ 532.548376][ T9934] ? selinux_file_ioctl+0x72f/0x990 [ 532.553569][ T9934] ? ioctl_preallocate+0x250/0x250 [ 532.558667][ T9934] ? __fget+0x37b/0x3c0 [ 532.562809][ T9934] ? vfs_write+0x422/0x4e0 [ 532.567213][ T9934] ? fget_many+0x20/0x20 [ 532.571441][ T9934] ? debug_smp_processor_id+0x20/0x20 [ 532.576798][ T9934] ? security_file_ioctl+0x9d/0xb0 [ 532.581906][ T9934] __x64_sys_ioctl+0xd4/0x110 [ 532.586561][ T9934] do_syscall_64+0xcb/0x1e0 [ 532.591048][ T9934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.596915][ T9934] RIP: 0033:0x4665d9 [ 532.600792][ T9934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.620395][ T9934] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.628802][ T9934] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 532.636763][ T9934] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 532.644718][ T9934] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.652671][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.660624][ T9934] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 532.668586][ T9938] CPU: 1 PID: 9938 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 532.670435][ T9934] debugfs: out of free dentries, can not create directory 'hci0' [ 532.678716][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.678720][ T9938] Call Trace: [ 532.678738][ T9938] dump_stack+0x1d8/0x24e 13:56:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:56:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 532.678752][ T9938] ? devkmsg_release+0x11c/0x11c [ 532.708970][ T9938] ? show_regs_print_info+0x12/0x12 [ 532.714158][ T9938] should_fail+0x6f6/0x860 [ 532.718559][ T9938] ? setup_fault_attr+0x3d0/0x3d0 [ 532.723570][ T9938] ? alloc_workqueue+0x1cb/0x11d0 [ 532.728586][ T9938] should_failslab+0x5/0x20 [ 532.733078][ T9938] kmem_cache_alloc_trace+0x39/0x2b0 [ 532.738346][ T9938] ? alloc_workqueue+0x156/0x11d0 [ 532.743368][ T9938] alloc_workqueue+0x1cb/0x11d0 [ 532.748245][ T9938] ? sprintf+0xd6/0x120 13:56:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 532.752391][ T9938] ? idr_replace+0x230/0x230 [ 532.756961][ T9938] ? vsnprintf+0x1caa/0x1d60 [ 532.761541][ T9938] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 532.767598][ T9938] ? h4_open+0x4f/0x140 [ 532.771749][ T9938] hci_register_dev+0x19a/0x710 [ 532.776590][ T9938] ? h4_open+0x60/0x140 [ 532.780821][ T9938] hci_uart_tty_ioctl+0x89e/0xa10 [ 532.785835][ T9938] ? hci_uart_tty_write+0x10/0x10 [ 532.790846][ T9938] tty_ioctl+0xf68/0x1710 [ 532.795159][ T9938] ? tty_do_resize+0x170/0x170 [ 532.799916][ T9938] ? avc_ss_reset+0x3a0/0x3a0 [ 532.804584][ T9938] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 532.810726][ T9938] ? refcount_inc_checked+0x50/0x50 [ 532.815907][ T9938] ? memcg_check_events+0x5c/0x5b0 [ 532.821056][ T9938] ? proc_fail_nth_write+0x1d5/0x240 [ 532.826332][ T9938] ? proc_fail_nth_read+0x1c0/0x1c0 [ 532.827973][ T9940] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 532.831513][ T9938] ? __lru_cache_add+0x1c4/0x210 [ 532.831521][ T9938] ? memset+0x1f/0x40 [ 532.831528][ T9938] ? fsnotify+0x1332/0x13f0 13:56:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, r4, 0xb}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r5, 0x2}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000010000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0xffffffff}], 0x0, &(0x7f0000000080)) [ 532.831536][ T9938] ? tty_do_resize+0x170/0x170 [ 532.831544][ T9938] do_vfs_ioctl+0x76a/0x1720 [ 532.831552][ T9938] ? selinux_file_ioctl+0x72f/0x990 [ 532.831560][ T9938] ? ioctl_preallocate+0x250/0x250 [ 532.831569][ T9938] ? __fget+0x37b/0x3c0 [ 532.831576][ T9938] ? vfs_write+0x422/0x4e0 [ 532.831584][ T9938] ? fget_many+0x20/0x20 [ 532.831591][ T9938] ? debug_smp_processor_id+0x20/0x20 [ 532.831600][ T9938] ? security_file_ioctl+0x9d/0xb0 [ 532.831608][ T9938] __x64_sys_ioctl+0xd4/0x110 [ 532.831617][ T9938] do_syscall_64+0xcb/0x1e0 [ 532.831625][ T9938] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.831632][ T9938] RIP: 0033:0x4665d9 [ 532.831639][ T9938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.831649][ T9938] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.840598][ T9940] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:56:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:02 executing program 4 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 532.845289][ T9938] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 532.845294][ T9938] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 532.845298][ T9938] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.845302][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.845306][ T9938] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 532.861552][ T9938] Bluetooth: Can't register HCI device [ 532.901344][ T9940] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 532.907226][ T9940] F2FS-fs (loop2): invalid crc_offset: 0 [ 532.970070][ T9964] FAULT_INJECTION: forcing a failure. [ 532.970070][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 532.983999][ T9940] attempt to access beyond end of device [ 532.983999][ T9940] loop2: rw=12288, want=8200, limit=8192 [ 532.994925][ T9964] CPU: 1 PID: 9964 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 532.998084][ T9940] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 533.005149][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.005153][ T9964] Call Trace: [ 533.005168][ T9964] dump_stack+0x1d8/0x24e [ 533.005178][ T9964] ? devkmsg_release+0x11c/0x11c [ 533.005185][ T9964] ? arch_stack_walk+0xf8/0x140 [ 533.005194][ T9964] ? show_regs_print_info+0x12/0x12 [ 533.005205][ T9964] should_fail+0x6f6/0x860 [ 533.005214][ T9964] ? setup_fault_attr+0x3d0/0x3d0 [ 533.005221][ T9964] ? __unwind_start+0x72f/0x8e0 [ 533.005231][ T9964] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 533.005240][ T9964] should_failslab+0x5/0x20 [ 533.005249][ T9964] kmem_cache_alloc_trace+0x39/0x2b0 [ 533.005261][ T9964] apply_wqattrs_prepare+0xcb/0x17e0 [ 533.118492][ T9964] ? alloc_workqueue+0x1cb/0x11d0 [ 533.123490][ T9964] ? hci_register_dev+0x19a/0x710 [ 533.128485][ T9964] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 533.133653][ T9964] ? tty_ioctl+0xf68/0x1710 [ 533.138142][ T9964] ? do_vfs_ioctl+0x76a/0x1720 [ 533.142877][ T9964] ? __x64_sys_ioctl+0xd4/0x110 [ 533.147700][ T9964] ? do_syscall_64+0xcb/0x1e0 [ 533.152350][ T9964] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.158474][ T9964] ? format_decode+0xc5c/0x1ab0 [ 533.163293][ T9964] ? cwt_wakefn+0x70/0x70 [ 533.167593][ T9964] ? vsnprintf+0x1d60/0x1d60 [ 533.172151][ T9964] ? string+0x280/0x2c0 [ 533.176270][ T9964] ? widen_string+0x3a/0x340 [ 533.180827][ T9964] ? string+0x280/0x2c0 [ 533.184977][ T9964] apply_workqueue_attrs_locked+0x136/0x6d0 [ 533.190852][ T9964] ? check_preemption_disabled+0x9e/0x330 [ 533.196546][ T9964] ? apply_workqueue_attrs+0x40/0x40 [ 533.201807][ T9964] ? mutex_lock+0xa6/0x110 [ 533.206216][ T9964] ? mutex_trylock+0xb0/0xb0 [ 533.210797][ T9964] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 533.216315][ T9964] alloc_workqueue+0xcc4/0x11d0 [ 533.221136][ T9964] ? sprintf+0xd6/0x120 [ 533.225270][ T9964] ? idr_replace+0x230/0x230 [ 533.229854][ T9964] ? vsnprintf+0x1caa/0x1d60 [ 533.234497][ T9964] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 533.240531][ T9964] ? h4_open+0x4f/0x140 [ 533.244672][ T9964] hci_register_dev+0x19a/0x710 [ 533.249489][ T9964] ? h4_open+0x60/0x140 [ 533.253614][ T9964] hci_uart_tty_ioctl+0x89e/0xa10 [ 533.258607][ T9964] ? hci_uart_tty_write+0x10/0x10 [ 533.263600][ T9964] tty_ioctl+0xf68/0x1710 [ 533.267903][ T9964] ? tty_do_resize+0x170/0x170 [ 533.272648][ T9964] ? avc_ss_reset+0x3a0/0x3a0 [ 533.277294][ T9964] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 533.283414][ T9964] ? refcount_inc_checked+0x50/0x50 [ 533.288579][ T9964] ? memcg_check_events+0x5c/0x5b0 [ 533.293661][ T9964] ? proc_fail_nth_write+0x1d5/0x240 [ 533.298914][ T9964] ? proc_fail_nth_read+0x1c0/0x1c0 [ 533.304166][ T9964] ? __lru_cache_add+0x1c4/0x210 [ 533.309168][ T9964] ? memset+0x1f/0x40 [ 533.313120][ T9964] ? fsnotify+0x1332/0x13f0 [ 533.317612][ T9964] ? tty_do_resize+0x170/0x170 [ 533.322359][ T9964] do_vfs_ioctl+0x76a/0x1720 [ 533.326945][ T9964] ? selinux_file_ioctl+0x72f/0x990 [ 533.332116][ T9964] ? ioctl_preallocate+0x250/0x250 [ 533.337199][ T9964] ? __fget+0x37b/0x3c0 [ 533.341328][ T9964] ? vfs_write+0x422/0x4e0 [ 533.345715][ T9964] ? fget_many+0x20/0x20 [ 533.349946][ T9964] ? debug_smp_processor_id+0x20/0x20 [ 533.355290][ T9964] ? security_file_ioctl+0x9d/0xb0 [ 533.360383][ T9964] __x64_sys_ioctl+0xd4/0x110 [ 533.365045][ T9964] do_syscall_64+0xcb/0x1e0 [ 533.369525][ T9964] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 533.375405][ T9964] RIP: 0033:0x4665d9 [ 533.379272][ T9964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 533.398852][ T9964] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.407243][ T9964] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 533.415643][ T9964] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 533.423589][ T9964] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.431547][ T9964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.439493][ T9964] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 533.463917][ T9964] Bluetooth: Can't register HCI device [ 534.729013][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 534.735219][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 536.808990][ T380] Bluetooth: hci0: command 0x1001 tx timeout [ 536.815161][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 538.888836][ T1004] Bluetooth: hci0: command 0x1009 tx timeout 13:56:13 executing program 3 (fault-call:4 fault-nth:17): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 13:56:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:13 executing program 5: getpgrp(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002500020007ffffffbd0301000000000095002000000000006916000000000000bf6700000000000017060000b964b01a4606feff00200000370600000ee60000bf150000000000000f5700000000000065070000020000002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e057df9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8da39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10311145eac1f2ede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed8400200aab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000008000000000000072c6000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab779b8dbe843aeeda0426c7e7c0032028c95b29b6ddb55117669d9598c0f3598073f3a922a76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b77d6e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c40000000000000000000000000000000026b80c3899543223a6079ee96198b9a326db3be3248af415ca28ca68c502550045ed8e29af8d763ef9b1f31befcad2ce5394601c7c4f5975e8bd07d8dcce3c7bebdc233ba3d4ce26ed703dcbb3ad650f7fe339768924f6dbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4946bf19e617d51f964727bfd5cc5ba15370f6e1b39f1541eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d95ac7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1dc02af2b7bcf6f8af41933ce5370e593d9eafbefdb91fbdff9ee3307d4a1837963b2dc3f3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e37f0c85d13a33250d78cfa7daf529c5bea49cad7c3433e322d8dbd6e9b000065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d7d24b20166d7f510f80d131382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da047ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673893ff2c1e27ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874cd004179e5b6025c0e1050faec7d7d9de19a0975db2f8c06a551236278c47"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x9) r1 = open(&(0x7f0000000000)='./bus\x00', 0x161242, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) signalfd4(r1, &(0x7f0000000140)={[0x5]}, 0x8, 0x80000) r2 = syz_io_uring_complete(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) copy_file_range(r3, &(0x7f0000000040)=0xee, r0, 0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x4, &(0x7f0000000540)=@raw=[@exit, @ldst={0x0, 0x3, 0x1, 0x2, 0x4}, @generic={0x3, 0x2, 0x4, 0x800, 0x1}, @jmp={0x5, 0x0, 0x7, 0xb, 0x5, 0x30, 0xfffffffffffffff0}], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x53, &(0x7f00000005c0)=""/83, 0x40f00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0x66b0, 0x5}, 0x10, 0x0, r2}, 0x78) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 13:56:13 executing program 4 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:13 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) [ 543.228847][ T9982] FAULT_INJECTION: forcing a failure. [ 543.228847][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 543.242045][ T9982] CPU: 1 PID: 9982 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 543.252190][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.262227][ T9982] Call Trace: [ 543.265508][ T9982] dump_stack+0x1d8/0x24e [ 543.270614][ T9982] ? devkmsg_release+0x11c/0x11c [ 543.275534][ T9982] ? show_regs_print_info+0x12/0x12 [ 543.280713][ T9982] should_fail+0x6f6/0x860 [ 543.285111][ T9982] ? setup_fault_attr+0x3d0/0x3d0 [ 543.290112][ T9982] ? apply_wqattrs_prepare+0x102/0x17e0 [ 543.295634][ T9982] should_failslab+0x5/0x20 [ 543.300121][ T9982] kmem_cache_alloc_trace+0x39/0x2b0 [ 543.305392][ T9982] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 543.310835][ T9982] apply_wqattrs_prepare+0x102/0x17e0 [ 543.316186][ T9982] ? alloc_workqueue+0x1cb/0x11d0 [ 543.321200][ T9982] ? hci_register_dev+0x19a/0x710 [ 543.326199][ T9982] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 543.331370][ T9982] ? tty_ioctl+0xf68/0x1710 [ 543.335851][ T9982] ? do_vfs_ioctl+0x76a/0x1720 [ 543.340591][ T9982] ? __x64_sys_ioctl+0xd4/0x110 [ 543.345433][ T9982] ? do_syscall_64+0xcb/0x1e0 [ 543.350085][ T9982] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.356129][ T9982] ? format_decode+0xc5c/0x1ab0 [ 543.360952][ T9982] ? cwt_wakefn+0x70/0x70 [ 543.365255][ T9982] ? vsnprintf+0x1d60/0x1d60 [ 543.369818][ T9982] ? string+0x280/0x2c0 [ 543.373946][ T9982] ? widen_string+0x3a/0x340 [ 543.378508][ T9982] ? string+0x280/0x2c0 [ 543.382641][ T9982] apply_workqueue_attrs_locked+0x136/0x6d0 [ 543.388512][ T9982] ? check_preemption_disabled+0x9e/0x330 [ 543.394204][ T9982] ? apply_workqueue_attrs+0x40/0x40 [ 543.399463][ T9982] ? mutex_lock+0xa6/0x110 [ 543.403852][ T9982] ? mutex_trylock+0xb0/0xb0 [ 543.408416][ T9982] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 543.413936][ T9982] alloc_workqueue+0xcc4/0x11d0 [ 543.418783][ T9982] ? sprintf+0xd6/0x120 [ 543.422910][ T9982] ? idr_replace+0x230/0x230 [ 543.427484][ T9982] ? vsnprintf+0x1caa/0x1d60 [ 543.432057][ T9982] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 543.438097][ T9982] ? h4_open+0x4f/0x140 [ 543.442227][ T9982] hci_register_dev+0x19a/0x710 [ 543.447065][ T9982] ? h4_open+0x60/0x140 [ 543.451193][ T9982] hci_uart_tty_ioctl+0x89e/0xa10 [ 543.456193][ T9982] ? hci_uart_tty_write+0x10/0x10 [ 543.461189][ T9982] tty_ioctl+0xf68/0x1710 [ 543.465490][ T9982] ? tty_do_resize+0x170/0x170 [ 543.470230][ T9982] ? avc_ss_reset+0x3a0/0x3a0 [ 543.474879][ T9982] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 543.481000][ T9982] ? refcount_inc_checked+0x50/0x50 [ 543.486168][ T9982] ? memcg_check_events+0x5c/0x5b0 [ 543.491946][ T9982] ? proc_fail_nth_write+0x1d5/0x240 [ 543.497214][ T9982] ? proc_fail_nth_read+0x1c0/0x1c0 [ 543.502382][ T9982] ? __lru_cache_add+0x1c4/0x210 [ 543.507291][ T9982] ? memset+0x1f/0x40 [ 543.511245][ T9982] ? fsnotify+0x1332/0x13f0 [ 543.515720][ T9982] ? tty_do_resize+0x170/0x170 [ 543.520460][ T9982] do_vfs_ioctl+0x76a/0x1720 [ 543.525039][ T9982] ? selinux_file_ioctl+0x72f/0x990 [ 543.530211][ T9982] ? ioctl_preallocate+0x250/0x250 [ 543.535297][ T9982] ? __fget+0x37b/0x3c0 [ 543.539428][ T9982] ? vfs_write+0x422/0x4e0 [ 543.543820][ T9982] ? fget_many+0x20/0x20 [ 543.548041][ T9982] ? debug_smp_processor_id+0x20/0x20 [ 543.553387][ T9982] ? security_file_ioctl+0x9d/0xb0 [ 543.558475][ T9982] __x64_sys_ioctl+0xd4/0x110 [ 543.563134][ T9982] do_syscall_64+0xcb/0x1e0 [ 543.567612][ T9982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.573480][ T9982] RIP: 0033:0x4665d9 [ 543.577359][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 543.596933][ T9982] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.605317][ T9982] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 543.613263][ T9982] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 13:56:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 543.621210][ T9982] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 543.630890][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.638831][ T9982] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 543.655993][ T9983] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) 13:56:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) [ 543.679040][ T9983] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 543.718210][ T9983] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 13:56:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 543.746275][ T9983] F2FS-fs (loop2): invalid crc_offset: 0 [ 543.760580][ T9983] attempt to access beyond end of device [ 543.760580][ T9983] loop2: rw=12288, want=8200, limit=8192 [ 543.772056][ T9983] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 543.782196][ T9988] FAULT_INJECTION: forcing a failure. [ 543.782196][ T9988] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 543.796958][ T9982] Bluetooth: Can't register HCI device [ 543.804619][ T9988] CPU: 0 PID: 9988 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 543.814760][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.824801][ T9988] Call Trace: [ 543.828088][ T9988] dump_stack+0x1d8/0x24e [ 543.832418][ T9988] ? devkmsg_release+0x11c/0x11c [ 543.837346][ T9988] ? show_regs_print_info+0x12/0x12 [ 543.842535][ T9988] ? __kasan_kmalloc+0x1a3/0x1e0 [ 543.847484][ T9988] should_fail+0x6f6/0x860 [ 543.851895][ T9988] ? setup_fault_attr+0x3d0/0x3d0 [ 543.856906][ T9988] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.862951][ T9988] __alloc_pages_nodemask+0x1c4/0x880 [ 543.868307][ T9988] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 543.873829][ T9988] ? lockref_get+0x1b2/0x2a0 [ 543.878394][ T9988] ? asan.module_dtor+0x20/0x20 [ 543.883230][ T9988] __get_free_pages+0xa/0x30 [ 543.887823][ T9988] inode_doinit_with_dentry+0x93a/0x11d0 [ 543.893434][ T9988] ? sb_finish_set_opts+0x7b0/0x7b0 [ 543.898606][ T9988] ? current_time+0x1ae/0x2f0 [ 543.903260][ T9988] ? atime_needs_update+0x560/0x560 [ 543.908522][ T9988] security_d_instantiate+0xa5/0x100 [ 543.913779][ T9988] d_instantiate+0x51/0x90 [ 543.918177][ T9988] debugfs_create_dir+0x1bc/0x3f0 [ 543.923185][ T9988] hci_register_dev+0x297/0x710 [ 543.928030][ T9988] hci_uart_tty_ioctl+0x89e/0xa10 [ 543.933046][ T9988] ? hci_uart_tty_write+0x10/0x10 [ 543.938047][ T9988] tty_ioctl+0xf68/0x1710 [ 543.942355][ T9988] ? tty_do_resize+0x170/0x170 [ 543.947098][ T9988] ? avc_ss_reset+0x3a0/0x3a0 [ 543.951749][ T9988] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 543.957876][ T9988] ? refcount_inc_checked+0x50/0x50 [ 543.963060][ T9988] ? proc_fail_nth_write+0x1d5/0x240 [ 543.968320][ T9988] ? proc_fail_nth_read+0x1c0/0x1c0 [ 543.973501][ T9988] ? memset+0x1f/0x40 [ 543.977462][ T9988] ? fsnotify+0x1332/0x13f0 [ 543.981942][ T9988] ? tty_do_resize+0x170/0x170 [ 543.986680][ T9988] do_vfs_ioctl+0x76a/0x1720 [ 543.991246][ T9988] ? selinux_file_ioctl+0x72f/0x990 [ 543.996417][ T9988] ? ioctl_preallocate+0x250/0x250 [ 544.001503][ T9988] ? __fget+0x37b/0x3c0 [ 544.005634][ T9988] ? vfs_write+0x422/0x4e0 [ 544.010024][ T9988] ? fget_many+0x20/0x20 [ 544.014239][ T9988] ? debug_smp_processor_id+0x20/0x20 [ 544.019587][ T9988] ? security_file_ioctl+0x9d/0xb0 [ 544.024672][ T9988] __x64_sys_ioctl+0xd4/0x110 [ 544.029326][ T9988] do_syscall_64+0xcb/0x1e0 [ 544.033802][ T9988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.039666][ T9988] RIP: 0033:0x4665d9 [ 544.043536][ T9988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.063148][ T9988] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.071558][ T9988] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 544.079510][ T9988] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 544.087476][ T9988] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 13:56:13 executing program 4 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:13 executing program 5: bpf$OBJ_GET_PROG(0x8, 0x0, 0x0) 13:56:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 544.095428][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.103378][ T9988] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 544.166876][T10015] FAULT_INJECTION: forcing a failure. [ 544.166876][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 544.183812][T10015] CPU: 0 PID: 10015 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 544.194111][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.204157][T10015] Call Trace: [ 544.207425][T10015] dump_stack+0x1d8/0x24e [ 544.211755][T10015] ? devkmsg_release+0x11c/0x11c [ 544.216723][T10015] ? show_regs_print_info+0x12/0x12 [ 544.221889][T10015] should_fail+0x6f6/0x860 [ 544.226272][T10015] ? setup_fault_attr+0x3d0/0x3d0 [ 544.231261][T10015] ? apply_wqattrs_prepare+0x1c0/0x17e0 [ 544.236893][T10015] should_failslab+0x5/0x20 [ 544.241365][T10015] kmem_cache_alloc_trace+0x39/0x2b0 [ 544.246613][T10015] ? apply_wqattrs_prepare+0x102/0x17e0 [ 544.252154][T10015] apply_wqattrs_prepare+0x1c0/0x17e0 [ 544.257608][T10015] ? alloc_workqueue+0x1cb/0x11d0 [ 544.262598][T10015] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 544.267775][T10015] ? tty_ioctl+0xf68/0x1710 [ 544.272248][T10015] ? do_vfs_ioctl+0x76a/0x1720 [ 544.276993][T10015] ? __x64_sys_ioctl+0xd4/0x110 [ 544.281808][T10015] ? do_syscall_64+0xcb/0x1e0 [ 544.286474][T10015] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.292509][T10015] ? format_decode+0xc5c/0x1ab0 [ 544.297340][T10015] ? cwt_wakefn+0x70/0x70 [ 544.301635][T10015] ? vsnprintf+0x1d60/0x1d60 [ 544.306220][T10015] ? string+0x280/0x2c0 [ 544.310358][T10015] ? widen_string+0x3a/0x340 [ 544.314933][T10015] ? string+0x280/0x2c0 [ 544.319056][T10015] apply_workqueue_attrs_locked+0x136/0x6d0 [ 544.324938][T10015] ? check_preemption_disabled+0x9e/0x330 [ 544.330624][T10015] ? apply_workqueue_attrs+0x40/0x40 [ 544.335873][T10015] ? mutex_lock+0xa6/0x110 [ 544.340253][T10015] ? mutex_trylock+0xb0/0xb0 [ 544.344809][T10015] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 544.350335][T10015] alloc_workqueue+0xcc4/0x11d0 [ 544.355171][T10015] ? sprintf+0xd6/0x120 [ 544.359293][T10015] ? idr_replace+0x230/0x230 [ 544.363849][T10015] ? vsnprintf+0x1caa/0x1d60 [ 544.368405][T10015] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 544.374440][T10015] ? h4_open+0x4f/0x140 [ 544.378562][T10015] hci_register_dev+0x19a/0x710 [ 544.383380][T10015] ? h4_open+0x60/0x140 [ 544.387507][T10015] hci_uart_tty_ioctl+0x89e/0xa10 [ 544.392504][T10015] ? hci_uart_tty_write+0x10/0x10 [ 544.397508][T10015] tty_ioctl+0xf68/0x1710 [ 544.401805][T10015] ? tty_do_resize+0x170/0x170 [ 544.406709][T10015] ? avc_ss_reset+0x3a0/0x3a0 [ 544.411354][T10015] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 544.417472][T10015] ? refcount_inc_checked+0x50/0x50 [ 544.422637][T10015] ? memcg_check_events+0x5c/0x5b0 [ 544.427718][T10015] ? proc_fail_nth_write+0x1d5/0x240 [ 544.432970][T10015] ? proc_fail_nth_read+0x1c0/0x1c0 [ 544.438152][T10015] ? __lru_cache_add+0x1c4/0x210 [ 544.443056][T10015] ? memset+0x1f/0x40 [ 544.447023][T10015] ? fsnotify+0x1332/0x13f0 [ 544.451493][T10015] ? tty_do_resize+0x170/0x170 [ 544.456239][T10015] do_vfs_ioctl+0x76a/0x1720 [ 544.460893][T10015] ? selinux_file_ioctl+0x72f/0x990 [ 544.466055][T10015] ? ioctl_preallocate+0x250/0x250 [ 544.471169][T10015] ? __fget+0x37b/0x3c0 [ 544.475290][T10015] ? vfs_write+0x422/0x4e0 [ 544.479670][T10015] ? fget_many+0x20/0x20 [ 544.483983][T10015] ? debug_smp_processor_id+0x20/0x20 [ 544.489344][T10015] ? security_file_ioctl+0x9d/0xb0 [ 544.494422][T10015] __x64_sys_ioctl+0xd4/0x110 [ 544.499062][T10015] do_syscall_64+0xcb/0x1e0 [ 544.503532][T10015] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 544.509391][T10015] RIP: 0033:0x4665d9 [ 544.513254][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.532839][T10015] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.541227][T10015] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 544.550014][T10015] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 544.558732][T10015] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 544.566669][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.574628][T10015] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 544.595096][T10015] Bluetooth: Can't register HCI device [ 546.168352][ T1004] Bluetooth: hci1: command 0x1003 tx timeout [ 546.174482][ T8316] Bluetooth: hci1: sending frame failed (-49) [ 548.248292][ T380] Bluetooth: hci1: command 0x1001 tx timeout [ 548.254343][ T8316] Bluetooth: hci1: sending frame failed (-49) [ 550.328181][ T380] Bluetooth: hci1: command 0x1009 tx timeout 13:56:24 executing program 3 (fault-call:4 fault-nth:18): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:24 executing program 5: mprotect(&(0x7f0000001000/0x1000)=nil, 0x1004, 0x0) pipe(&(0x7f0000000040)) 13:56:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:24 executing program 4 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:24 executing program 5: syz_emit_ethernet(0xfc1, &(0x7f0000001040)={@random="72d2086e0d1e", @broadcast, @val, {@ipv6}}, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1004, 0x4) 13:56:24 executing program 5: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0) 13:56:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x0, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x0, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 554.754949][T10028] FAULT_INJECTION: forcing a failure. [ 554.754949][T10028] name failslab, interval 1, probability 0, space 0, times 0 [ 554.773412][T10028] CPU: 1 PID: 10028 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 554.783647][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.793687][T10028] Call Trace: 13:56:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x0, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 554.794095][T10029] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 554.796965][T10028] dump_stack+0x1d8/0x24e [ 554.796980][T10028] ? devkmsg_release+0x11c/0x11c [ 554.809875][T10029] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.810021][T10028] ? show_regs_print_info+0x12/0x12 [ 554.821922][T10029] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 554.822639][T10028] should_fail+0x6f6/0x860 [ 554.840294][T10029] F2FS-fs (loop2): invalid crc_offset: 0 [ 554.840846][T10028] ? setup_fault_attr+0x3d0/0x3d0 13:56:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 554.848358][T10029] attempt to access beyond end of device [ 554.848358][T10029] loop2: rw=12288, want=8200, limit=8192 [ 554.851463][T10028] ? apply_wqattrs_prepare+0x8a5/0x17e0 [ 554.851474][T10028] should_failslab+0x5/0x20 [ 554.851482][T10028] kmem_cache_alloc+0x36/0x290 [ 554.851494][T10028] apply_wqattrs_prepare+0x8a5/0x17e0 [ 554.870756][T10029] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 554.872563][T10028] ? __x64_sys_ioctl+0xd4/0x110 [ 554.872575][T10028] ? format_decode+0xc5c/0x1ab0 [ 554.872587][T10028] ? cwt_wakefn+0x70/0x70 [ 554.903457][T10028] ? vsnprintf+0x1d60/0x1d60 [ 554.908021][T10028] ? string+0x280/0x2c0 [ 554.912160][T10028] ? widen_string+0x3a/0x340 [ 554.916718][T10028] ? string+0x280/0x2c0 [ 554.920847][T10028] apply_workqueue_attrs_locked+0x136/0x6d0 [ 554.926719][T10028] ? check_preemption_disabled+0x9e/0x330 [ 554.932406][T10028] ? apply_workqueue_attrs+0x40/0x40 [ 554.937659][T10028] ? mutex_lock+0xa6/0x110 [ 554.942043][T10028] ? mutex_trylock+0xb0/0xb0 [ 554.946613][T10028] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 554.952131][T10028] alloc_workqueue+0xcc4/0x11d0 [ 554.956954][T10028] ? sprintf+0xd6/0x120 [ 554.961078][T10028] ? idr_replace+0x230/0x230 [ 554.965637][T10028] ? vsnprintf+0x1caa/0x1d60 [ 554.970197][T10028] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 554.976231][T10028] ? h4_open+0x4f/0x140 [ 554.980355][T10028] hci_register_dev+0x19a/0x710 [ 554.985176][T10028] ? h4_open+0x60/0x140 [ 554.989316][T10028] hci_uart_tty_ioctl+0x89e/0xa10 [ 554.994308][T10028] ? hci_uart_tty_write+0x10/0x10 [ 554.999304][T10028] tty_ioctl+0xf68/0x1710 [ 555.003606][T10028] ? tty_do_resize+0x170/0x170 [ 555.008361][T10028] ? avc_ss_reset+0x3a0/0x3a0 [ 555.013007][T10028] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 555.019127][T10028] ? refcount_inc_checked+0x50/0x50 [ 555.024296][T10028] ? proc_fail_nth_write+0x1d5/0x240 [ 555.029551][T10028] ? proc_fail_nth_read+0x1c0/0x1c0 [ 555.034718][T10028] ? __lru_cache_add+0x1c4/0x210 [ 555.039621][T10028] ? memset+0x1f/0x40 [ 555.043572][T10028] ? fsnotify+0x1332/0x13f0 [ 555.048045][T10028] ? tty_do_resize+0x170/0x170 [ 555.052779][T10028] do_vfs_ioctl+0x76a/0x1720 [ 555.057341][T10028] ? selinux_file_ioctl+0x72f/0x990 [ 555.062514][T10028] ? ioctl_preallocate+0x250/0x250 [ 555.067600][T10028] ? __fget+0x37b/0x3c0 [ 555.071772][T10028] ? vfs_write+0x422/0x4e0 [ 555.076181][T10028] ? fget_many+0x20/0x20 [ 555.080401][T10028] ? debug_smp_processor_id+0x20/0x20 [ 555.085753][T10028] ? security_file_ioctl+0x9d/0xb0 [ 555.091011][T10028] __x64_sys_ioctl+0xd4/0x110 [ 555.095659][T10028] do_syscall_64+0xcb/0x1e0 [ 555.100160][T10028] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 555.106022][T10028] RIP: 0033:0x4665d9 [ 555.109907][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.129494][T10028] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.137884][T10028] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 555.145826][T10028] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 555.153770][T10028] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.161725][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.169667][T10028] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 555.190323][T10030] FAULT_INJECTION: forcing a failure. [ 555.190323][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 555.197891][T10028] Bluetooth: Can't register HCI device [ 555.203477][T10030] CPU: 1 PID: 10030 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 555.219054][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.229091][T10030] Call Trace: [ 555.232369][T10030] dump_stack+0x1d8/0x24e [ 555.236690][T10030] ? devkmsg_release+0x11c/0x11c [ 555.241613][T10030] ? show_regs_print_info+0x12/0x12 [ 555.246792][T10030] ? lockref_put_or_lock+0x1cd/0x340 [ 555.252062][T10030] should_fail+0x6f6/0x860 [ 555.256463][T10030] ? setup_fault_attr+0x3d0/0x3d0 [ 555.261470][T10030] ? kobject_set_name_vargs+0x5d/0x110 [ 555.266909][T10030] should_failslab+0x5/0x20 [ 555.271392][T10030] __kmalloc_track_caller+0x5d/0x2e0 [ 555.276716][T10030] kstrdup_const+0x51/0x90 [ 555.281117][T10030] kobject_set_name_vargs+0x5d/0x110 [ 555.286387][T10030] dev_set_name+0xd1/0x120 [ 555.290786][T10030] ? up_read+0x10/0x10 [ 555.294837][T10030] ? up_write+0xa6/0x270 [ 555.299064][T10030] ? get_device+0x30/0x30 [ 555.303378][T10030] hci_register_dev+0x326/0x710 [ 555.308228][T10030] hci_uart_tty_ioctl+0x89e/0xa10 [ 555.313237][T10030] ? hci_uart_tty_write+0x10/0x10 [ 555.318392][T10030] tty_ioctl+0xf68/0x1710 [ 555.323147][T10030] ? tty_do_resize+0x170/0x170 [ 555.327899][T10030] ? avc_ss_reset+0x3a0/0x3a0 [ 555.332558][T10030] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 555.338694][T10030] ? refcount_inc_checked+0x50/0x50 [ 555.343886][T10030] ? proc_fail_nth_write+0x1d5/0x240 [ 555.349165][T10030] ? proc_fail_nth_read+0x1c0/0x1c0 [ 555.354345][T10030] ? memset+0x1f/0x40 [ 555.358311][T10030] ? fsnotify+0x1332/0x13f0 [ 555.362804][T10030] ? tty_do_resize+0x170/0x170 [ 555.367558][T10030] do_vfs_ioctl+0x76a/0x1720 [ 555.372496][T10030] ? selinux_file_ioctl+0x72f/0x990 [ 555.377689][T10030] ? ioctl_preallocate+0x250/0x250 [ 555.382789][T10030] ? __fget+0x37b/0x3c0 [ 555.386919][T10030] ? vfs_write+0x422/0x4e0 [ 555.391423][T10030] ? fget_many+0x20/0x20 [ 555.395634][T10030] ? debug_smp_processor_id+0x20/0x20 [ 555.400977][T10030] ? security_file_ioctl+0x9d/0xb0 [ 555.406174][T10030] __x64_sys_ioctl+0xd4/0x110 [ 555.410831][T10030] do_syscall_64+0xcb/0x1e0 [ 555.415314][T10030] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 555.421264][T10030] RIP: 0033:0x4665d9 [ 555.425169][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.445607][T10030] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:56:25 executing program 3 (fault-call:4 fault-nth:19): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 555.454024][T10030] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 555.461971][T10030] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 555.469935][T10030] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.477878][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.485839][T10030] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 555.500373][T10030] Bluetooth: Can't register HCI device [ 555.521651][T10052] FAULT_INJECTION: forcing a failure. [ 555.521651][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 555.534394][T10052] CPU: 1 PID: 10052 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 555.544615][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.554657][T10052] Call Trace: [ 555.557941][T10052] dump_stack+0x1d8/0x24e [ 555.562252][T10052] ? devkmsg_release+0x11c/0x11c [ 555.567188][T10052] ? show_regs_print_info+0x12/0x12 [ 555.572360][T10052] should_fail+0x6f6/0x860 [ 555.576760][T10052] ? setup_fault_attr+0x3d0/0x3d0 [ 555.581770][T10052] ? refcount_add_checked+0x50/0x50 [ 555.586957][T10052] ? device_add+0x121/0x18a0 [ 555.591534][T10052] should_failslab+0x5/0x20 [ 555.596037][T10052] kmem_cache_alloc_trace+0x39/0x2b0 [ 555.601303][T10052] device_add+0x121/0x18a0 [ 555.605705][T10052] ? dev_set_name+0xd1/0x120 [ 555.610313][T10052] ? up_read+0x10/0x10 [ 555.614367][T10052] ? up_write+0xa6/0x270 [ 555.618593][T10052] ? get_device+0x30/0x30 [ 555.622908][T10052] ? virtual_device_parent+0x50/0x50 [ 555.628180][T10052] hci_register_dev+0x32e/0x710 [ 555.633032][T10052] hci_uart_tty_ioctl+0x89e/0xa10 [ 555.638032][T10052] ? hci_uart_tty_write+0x10/0x10 [ 555.643030][T10052] tty_ioctl+0xf68/0x1710 [ 555.647329][T10052] ? tty_do_resize+0x170/0x170 [ 555.652063][T10052] ? avc_ss_reset+0x3a0/0x3a0 [ 555.656708][T10052] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 555.662845][T10052] ? refcount_inc_checked+0x50/0x50 [ 555.668015][T10052] ? proc_fail_nth_write+0x1d5/0x240 [ 555.673282][T10052] ? proc_fail_nth_read+0x1c0/0x1c0 [ 555.678451][T10052] ? memset+0x1f/0x40 [ 555.682401][T10052] ? fsnotify+0x1332/0x13f0 [ 555.686875][T10052] ? tty_do_resize+0x170/0x170 [ 555.691604][T10052] do_vfs_ioctl+0x76a/0x1720 [ 555.696162][T10052] ? selinux_file_ioctl+0x72f/0x990 [ 555.701327][T10052] ? ioctl_preallocate+0x250/0x250 [ 555.706407][T10052] ? __fget+0x37b/0x3c0 [ 555.710562][T10052] ? vfs_write+0x422/0x4e0 [ 555.714958][T10052] ? fget_many+0x20/0x20 [ 555.719180][T10052] ? debug_smp_processor_id+0x20/0x20 [ 555.724524][T10052] ? security_file_ioctl+0x9d/0xb0 [ 555.729614][T10052] __x64_sys_ioctl+0xd4/0x110 [ 555.734269][T10052] do_syscall_64+0xcb/0x1e0 [ 555.738742][T10052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 555.744601][T10052] RIP: 0033:0x4665d9 [ 555.748468][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:56:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003a40)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 13:56:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 555.768056][T10052] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.776435][T10052] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 555.784483][T10052] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 555.792424][T10052] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.800380][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.808323][T10052] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 13:56:25 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:25 executing program 4 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:25 executing program 5: r0 = fork() fork() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)) 13:56:25 executing program 3 (fault-call:4 fault-nth:20): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 555.829591][T10052] Bluetooth: Can't register HCI device 13:56:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 555.880368][T10068] FAULT_INJECTION: forcing a failure. [ 555.880368][T10068] name failslab, interval 1, probability 0, space 0, times 0 [ 555.883695][T10073] debugfs: Directory 'hci1' with parent 'bluetooth' already present! [ 555.907835][T10069] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 555.923029][T10069] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 13:56:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 555.923839][T10068] CPU: 0 PID: 10068 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 555.936989][T10069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 555.940966][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.940970][T10068] Call Trace: [ 555.940986][T10068] dump_stack+0x1d8/0x24e [ 555.940994][T10068] ? devkmsg_release+0x11c/0x11c [ 555.941002][T10068] ? show_regs_print_info+0x12/0x12 [ 555.941009][T10068] ? kfree+0xe0/0x660 13:56:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 555.941022][T10068] ? apply_wqattrs_commit+0x3d1/0x730 [ 555.949332][T10073] FAULT_INJECTION: forcing a failure. [ 555.949332][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 555.959184][T10068] should_fail+0x6f6/0x860 [ 555.959193][T10068] ? setup_fault_attr+0x3d0/0x3d0 [ 555.959200][T10068] ? check_preemption_disabled+0x9e/0x330 [ 555.959208][T10068] ? pwq_adjust_max_active+0xc0/0x900 [ 555.959216][T10068] ? mutex_lock+0xa6/0x110 [ 555.959227][T10068] ? alloc_workqueue+0x156/0x11d0 13:56:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 555.983662][T10069] F2FS-fs (loop2): invalid crc_offset: 0 [ 555.986291][T10068] should_failslab+0x5/0x20 [ 555.986300][T10068] __kmalloc+0x5f/0x2f0 [ 555.986312][T10068] alloc_workqueue+0x156/0x11d0 [ 556.032699][T10069] attempt to access beyond end of device [ 556.032699][T10069] loop2: rw=12288, want=8200, limit=8192 [ 556.034574][T10068] ? sprintf+0xd6/0x120 [ 556.034581][T10068] ? idr_replace+0x230/0x230 [ 556.034589][T10068] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 556.034603][T10068] ? h4_open+0x4f/0x140 [ 556.051217][T10069] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 556.060084][T10068] hci_register_dev+0x1f2/0x710 [ 556.060096][T10068] hci_uart_tty_ioctl+0x89e/0xa10 [ 556.060104][T10068] ? hci_uart_tty_write+0x10/0x10 [ 556.060113][T10068] tty_ioctl+0xf68/0x1710 [ 556.060124][T10068] ? tty_do_resize+0x170/0x170 [ 556.109729][T10068] ? avc_ss_reset+0x3a0/0x3a0 [ 556.114412][T10068] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 556.120549][T10068] ? refcount_inc_checked+0x50/0x50 [ 556.125918][T10068] ? memcg_check_events+0x5c/0x5b0 [ 556.131119][T10068] ? proc_fail_nth_write+0x1d5/0x240 [ 556.136399][T10068] ? proc_fail_nth_read+0x1c0/0x1c0 [ 556.141567][T10068] ? __lru_cache_add+0x1c4/0x210 [ 556.146485][T10068] ? memset+0x1f/0x40 [ 556.150455][T10068] ? fsnotify+0x1332/0x13f0 [ 556.155463][T10068] ? tty_do_resize+0x170/0x170 [ 556.160212][T10068] do_vfs_ioctl+0x76a/0x1720 [ 556.164772][T10068] ? selinux_file_ioctl+0x72f/0x990 [ 556.169964][T10068] ? ioctl_preallocate+0x250/0x250 [ 556.175055][T10068] ? __fget+0x37b/0x3c0 [ 556.179178][T10068] ? vfs_write+0x422/0x4e0 [ 556.183592][T10068] ? fget_many+0x20/0x20 [ 556.187811][T10068] ? debug_smp_processor_id+0x20/0x20 [ 556.193162][T10068] ? security_file_ioctl+0x9d/0xb0 [ 556.198253][T10068] __x64_sys_ioctl+0xd4/0x110 [ 556.202912][T10068] do_syscall_64+0xcb/0x1e0 [ 556.207405][T10068] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.213283][T10068] RIP: 0033:0x4665d9 [ 556.217159][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 556.236761][T10068] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.245154][T10068] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 556.253124][T10068] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 556.261081][T10068] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 556.269022][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.276974][T10068] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 556.290066][T10073] CPU: 1 PID: 10073 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 556.300306][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.310349][T10073] Call Trace: [ 556.313633][T10073] dump_stack+0x1d8/0x24e [ 556.317962][T10073] ? devkmsg_release+0x11c/0x11c [ 556.322889][T10073] ? show_regs_print_info+0x12/0x12 [ 556.328117][T10073] ? _raw_spin_lock+0xa3/0x1b0 [ 556.332872][T10073] should_fail+0x6f6/0x860 [ 556.337302][T10073] ? setup_fault_attr+0x3d0/0x3d0 [ 556.342315][T10073] ? mutex_lock+0xa6/0x110 [ 556.346725][T10073] ? mutex_trylock+0xb0/0xb0 [ 556.351304][T10073] ? __kernfs_new_node+0xdb/0x6d0 [ 556.356315][T10073] should_failslab+0x5/0x20 [ 556.360805][T10073] kmem_cache_alloc+0x36/0x290 [ 556.365556][T10073] __kernfs_new_node+0xdb/0x6d0 [ 556.370466][T10073] ? mutex_unlock+0x19/0x40 [ 556.374962][T10073] ? kernfs_new_node+0x160/0x160 [ 556.379883][T10073] ? kernfs_create_dir_ns+0x1df/0x220 [ 556.385238][T10073] ? sysfs_create_dir_ns+0x181/0x390 [ 556.390509][T10073] ? sysfs_create_dir_ns+0x1c7/0x390 [ 556.395786][T10073] ? sysfs_warn_dup+0xa0/0xa0 [ 556.400449][T10073] kernfs_new_node+0x95/0x160 [ 556.405113][T10073] __kernfs_create_file+0x45/0x260 [ 556.410212][T10073] sysfs_add_file_mode_ns+0x293/0x340 [ 556.415663][T10073] sysfs_create_file_ns+0x18c/0x2b0 [ 556.420848][T10073] ? sysfs_add_file_mode_ns+0x340/0x340 [ 556.426380][T10073] ? device_create_file+0xe2/0x1a0 [ 556.431824][T10073] device_add+0x64c/0x18a0 [ 556.436230][T10073] ? get_device+0x30/0x30 [ 556.440637][T10073] ? virtual_device_parent+0x50/0x50 [ 556.445911][T10073] ? h4_open+0x4f/0x140 [ 556.450059][T10073] hci_register_dev+0x32e/0x710 [ 556.454897][T10073] hci_uart_tty_ioctl+0x89e/0xa10 [ 556.459904][T10073] ? hci_uart_tty_write+0x10/0x10 [ 556.464910][T10073] tty_ioctl+0xf68/0x1710 [ 556.469226][T10073] ? tty_do_resize+0x170/0x170 [ 556.473975][T10073] ? avc_ss_reset+0x3a0/0x3a0 [ 556.478639][T10073] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 556.484780][T10073] ? refcount_inc_checked+0x50/0x50 [ 556.489964][T10073] ? proc_fail_nth_write+0x1d5/0x240 [ 556.495233][T10073] ? proc_fail_nth_read+0x1c0/0x1c0 [ 556.499197][T10068] Bluetooth: Can't register HCI device [ 556.500416][T10073] ? memset+0x1f/0x40 [ 556.500423][T10073] ? fsnotify+0x1332/0x13f0 [ 556.500435][T10073] ? tty_do_resize+0x170/0x170 [ 556.519039][T10073] do_vfs_ioctl+0x76a/0x1720 [ 556.523614][T10073] ? selinux_file_ioctl+0x72f/0x990 [ 556.528801][T10073] ? ioctl_preallocate+0x250/0x250 [ 556.533908][T10073] ? __fget+0x37b/0x3c0 [ 556.538054][T10073] ? vfs_write+0x422/0x4e0 [ 556.542473][T10073] ? fget_many+0x20/0x20 [ 556.546697][T10073] ? debug_smp_processor_id+0x20/0x20 [ 556.552046][T10073] ? security_file_ioctl+0x9d/0xb0 [ 556.557126][T10073] __x64_sys_ioctl+0xd4/0x110 [ 556.561775][T10073] do_syscall_64+0xcb/0x1e0 [ 556.566249][T10073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.572138][T10073] RIP: 0033:0x4665d9 [ 556.576005][T10073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 556.595598][T10073] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.603976][T10073] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 556.611921][T10073] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 556.619955][T10073] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 13:56:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0), 0x0) 13:56:26 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockname(r0, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 13:56:26 executing program 4 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 556.627897][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.635837][T10073] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 556.652462][T10073] Bluetooth: Can't register HCI device [ 556.683509][T10101] FAULT_INJECTION: forcing a failure. [ 556.683509][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 556.696493][T10101] CPU: 1 PID: 10101 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 556.706839][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.716874][T10101] Call Trace: [ 556.720187][T10101] dump_stack+0x1d8/0x24e [ 556.724510][T10101] ? devkmsg_release+0x11c/0x11c [ 556.729441][T10101] ? show_regs_print_info+0x12/0x12 [ 556.734646][T10101] should_fail+0x6f6/0x860 [ 556.739058][T10101] ? setup_fault_attr+0x3d0/0x3d0 [ 556.744193][T10101] ? mutex_lock+0xa6/0x110 [ 556.748583][T10101] ? alloc_workqueue+0x1cb/0x11d0 [ 556.753643][T10101] should_failslab+0x5/0x20 [ 556.758117][T10101] kmem_cache_alloc_trace+0x39/0x2b0 [ 556.763386][T10101] ? alloc_workqueue+0x156/0x11d0 [ 556.768383][T10101] alloc_workqueue+0x1cb/0x11d0 [ 556.773206][T10101] ? sprintf+0xd6/0x120 [ 556.777332][T10101] ? idr_replace+0x230/0x230 [ 556.781909][T10101] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 556.787946][T10101] ? h4_open+0x4f/0x140 [ 556.792096][T10101] hci_register_dev+0x1f2/0x710 [ 556.797007][T10101] hci_uart_tty_ioctl+0x89e/0xa10 [ 556.802011][T10101] ? hci_uart_tty_write+0x10/0x10 [ 556.807116][T10101] tty_ioctl+0xf68/0x1710 [ 556.811525][T10101] ? tty_do_resize+0x170/0x170 [ 556.816344][T10101] ? avc_ss_reset+0x3a0/0x3a0 [ 556.820995][T10101] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 556.827118][T10101] ? refcount_inc_checked+0x50/0x50 [ 556.832289][T10101] ? memcg_check_events+0x5c/0x5b0 [ 556.837389][T10101] ? proc_fail_nth_write+0x1d5/0x240 [ 556.842648][T10101] ? proc_fail_nth_read+0x1c0/0x1c0 [ 556.847815][T10101] ? __lru_cache_add+0x1c4/0x210 [ 556.852722][T10101] ? memset+0x1f/0x40 [ 556.856676][T10101] ? fsnotify+0x1332/0x13f0 [ 556.861147][T10101] ? tty_do_resize+0x170/0x170 [ 556.865879][T10101] do_vfs_ioctl+0x76a/0x1720 [ 556.870443][T10101] ? selinux_file_ioctl+0x72f/0x990 [ 556.875609][T10101] ? ioctl_preallocate+0x250/0x250 [ 556.880689][T10101] ? __fget+0x37b/0x3c0 [ 556.884815][T10101] ? vfs_write+0x422/0x4e0 [ 556.889202][T10101] ? fget_many+0x20/0x20 [ 556.893484][T10101] ? debug_smp_processor_id+0x20/0x20 [ 556.898824][T10101] ? security_file_ioctl+0x9d/0xb0 [ 556.903905][T10101] __x64_sys_ioctl+0xd4/0x110 [ 556.908582][T10101] do_syscall_64+0xcb/0x1e0 [ 556.913069][T10101] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.918931][T10101] RIP: 0033:0x4665d9 [ 556.922795][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 556.942393][T10101] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.950780][T10101] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 556.958741][T10101] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 556.966681][T10101] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 556.974642][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.982584][T10101] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 556.992434][T10101] Bluetooth: Can't register HCI device 13:56:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4502, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:26 executing program 3 (fault-call:4 fault-nth:21): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0) 13:56:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:26 executing program 4 (fault-call:2 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 557.121181][T10116] FAULT_INJECTION: forcing a failure. [ 557.121181][T10116] name failslab, interval 1, probability 0, space 0, times 0 [ 557.126939][T10117] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 557.135035][T10115] debugfs: Directory 'hci1' with parent 'bluetooth' already present! [ 557.142860][T10117] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 557.160290][T10115] FAULT_INJECTION: forcing a failure. 13:56:26 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206010200000000000000000000000011000300686173683a6e6504006e65740000000005000400000000000900020073797a31000000000500010006000000050005"], 0x58}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:56:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 557.160290][T10115] name failslab, interval 1, probability 0, space 0, times 0 [ 557.165301][T10117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 557.185839][T10115] CPU: 1 PID: 10115 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 557.196166][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.206201][T10115] Call Trace: [ 557.209480][T10115] dump_stack+0x1d8/0x24e [ 557.213798][T10115] ? devkmsg_release+0x11c/0x11c [ 557.215116][T10117] F2FS-fs (loop2): invalid crc_offset: 0 [ 557.218723][T10115] ? show_regs_print_info+0x12/0x12 [ 557.218730][T10115] ? _raw_spin_lock+0xa3/0x1b0 [ 557.218740][T10115] should_fail+0x6f6/0x860 [ 557.218748][T10115] ? setup_fault_attr+0x3d0/0x3d0 [ 557.218756][T10115] ? mutex_lock+0xa6/0x110 [ 557.218763][T10115] ? mutex_trylock+0xb0/0xb0 [ 557.218770][T10115] ? __kernfs_new_node+0xdb/0x6d0 [ 557.218783][T10115] should_failslab+0x5/0x20 [ 557.238298][T10117] attempt to access beyond end of device [ 557.238298][T10117] loop2: rw=12288, want=8200, limit=8192 [ 557.238688][T10115] kmem_cache_alloc+0x36/0x290 [ 557.251653][T10117] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 557.252739][T10115] __kernfs_new_node+0xdb/0x6d0 [ 557.252752][T10115] ? kernfs_add_one+0x49e/0x5c0 [ 557.294505][T10115] ? kernfs_new_node+0x160/0x160 [ 557.299416][T10115] ? __kernfs_create_file+0x1f1/0x260 [ 557.304759][T10115] ? sysfs_add_file_mode_ns+0x293/0x340 [ 557.310282][T10115] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 557.315814][T10115] kernfs_new_node+0x95/0x160 [ 557.320507][T10115] kernfs_create_link+0x9c/0x1f0 [ 557.325516][T10115] sysfs_do_create_link_sd+0x85/0x100 [ 557.330885][T10115] device_add+0x74b/0x18a0 [ 557.335289][T10115] ? get_device+0x30/0x30 [ 557.339602][T10115] ? virtual_device_parent+0x50/0x50 [ 557.344855][T10115] ? h4_open+0x4f/0x140 [ 557.348979][T10115] hci_register_dev+0x32e/0x710 [ 557.353800][T10115] hci_uart_tty_ioctl+0x89e/0xa10 [ 557.358791][T10115] ? hci_uart_tty_write+0x10/0x10 [ 557.363784][T10115] tty_ioctl+0xf68/0x1710 [ 557.368084][T10115] ? tty_do_resize+0x170/0x170 [ 557.372817][T10115] ? avc_ss_reset+0x3a0/0x3a0 [ 557.377481][T10115] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 557.383621][T10115] ? refcount_inc_checked+0x50/0x50 [ 557.388809][T10115] ? proc_fail_nth_write+0x1d5/0x240 [ 557.394062][T10115] ? proc_fail_nth_read+0x1c0/0x1c0 [ 557.399228][T10115] ? memset+0x1f/0x40 [ 557.403179][T10115] ? fsnotify+0x1332/0x13f0 [ 557.407760][T10115] ? tty_do_resize+0x170/0x170 [ 557.412494][T10115] do_vfs_ioctl+0x76a/0x1720 [ 557.417066][T10115] ? selinux_file_ioctl+0x72f/0x990 [ 557.422234][T10115] ? ioctl_preallocate+0x250/0x250 [ 557.427316][T10115] ? __fget+0x37b/0x3c0 [ 557.431442][T10115] ? vfs_write+0x422/0x4e0 [ 557.435831][T10115] ? fget_many+0x20/0x20 [ 557.440043][T10115] ? debug_smp_processor_id+0x20/0x20 [ 557.445383][T10115] ? security_file_ioctl+0x9d/0xb0 [ 557.450464][T10115] __x64_sys_ioctl+0xd4/0x110 [ 557.455116][T10115] do_syscall_64+0xcb/0x1e0 [ 557.459938][T10115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 557.465798][T10115] RIP: 0033:0x4665d9 [ 557.469663][T10115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.489234][T10115] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.497613][T10115] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 557.505555][T10115] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 557.513495][T10115] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 13:56:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 557.521529][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.529484][T10115] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 557.538794][T10116] CPU: 1 PID: 10116 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 557.549040][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.559085][T10116] Call Trace: [ 557.562373][T10116] dump_stack+0x1d8/0x24e [ 557.566694][T10116] ? devkmsg_release+0x11c/0x11c [ 557.571615][T10116] ? show_regs_print_info+0x12/0x12 [ 557.574289][T10115] Bluetooth: Can't register HCI device [ 557.576789][T10116] should_fail+0x6f6/0x860 [ 557.576803][T10116] ? setup_fault_attr+0x3d0/0x3d0 [ 557.591611][T10116] ? mutex_lock+0xa6/0x110 [ 557.596003][T10116] ? alloc_workqueue+0x1cb/0x11d0 [ 557.600998][T10116] should_failslab+0x5/0x20 [ 557.605473][T10116] kmem_cache_alloc_trace+0x39/0x2b0 [ 557.610737][T10116] ? alloc_workqueue+0x156/0x11d0 [ 557.615727][T10116] alloc_workqueue+0x1cb/0x11d0 [ 557.620550][T10116] ? sprintf+0xd6/0x120 [ 557.624674][T10116] ? idr_replace+0x230/0x230 [ 557.629229][T10116] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 557.635266][T10116] ? h4_open+0x4f/0x140 [ 557.639394][T10116] hci_register_dev+0x1f2/0x710 [ 557.644233][T10116] hci_uart_tty_ioctl+0x89e/0xa10 [ 557.649229][T10116] ? hci_uart_tty_write+0x10/0x10 [ 557.654242][T10116] tty_ioctl+0xf68/0x1710 [ 557.658561][T10116] ? tty_do_resize+0x170/0x170 [ 557.663310][T10116] ? check_preemption_disabled+0x9e/0x330 [ 557.668998][T10116] ? avc_ss_reset+0x3a0/0x3a0 [ 557.673655][T10116] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 557.679779][T10116] ? check_preemption_disabled+0x9e/0x330 [ 557.685468][T10116] ? perf_pmu_sched_task+0x430/0x430 [ 557.690719][T10116] ? switch_mm_irqs_off+0x72f/0x9a0 [ 557.695887][T10116] ? _raw_spin_unlock_irq+0x4a/0x60 [ 557.701053][T10116] ? finish_task_switch+0x130/0x550 [ 557.706220][T10116] ? tty_do_resize+0x170/0x170 [ 557.710967][T10116] do_vfs_ioctl+0x76a/0x1720 [ 557.715529][T10116] ? selinux_file_ioctl+0x72f/0x990 [ 557.720696][T10116] ? ioctl_preallocate+0x250/0x250 [ 557.725788][T10116] ? __fget+0x37b/0x3c0 [ 557.729911][T10116] ? debug_smp_processor_id+0x20/0x20 [ 557.735268][T10116] ? fget_many+0x20/0x20 [ 557.739482][T10116] ? __fpregs_load_activate+0x1d7/0x3c0 [ 557.744995][T10116] ? security_file_ioctl+0x9d/0xb0 [ 557.750077][T10116] __x64_sys_ioctl+0xd4/0x110 [ 557.754727][T10116] do_syscall_64+0xcb/0x1e0 [ 557.759201][T10116] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 557.765059][T10116] RIP: 0033:0x4665d9 [ 557.768920][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.788490][T10116] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.796883][T10116] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 557.804823][T10116] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 557.812776][T10116] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 13:56:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0), 0x0) 13:56:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466", 0x4a, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 557.820716][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.828744][T10116] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 557.875138][T10116] Bluetooth: Can't register HCI device [ 557.939620][T10117] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 557.956427][T10117] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 557.971385][T10117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 557.985290][T10117] F2FS-fs (loop2): invalid crc_offset: 0 [ 557.994863][T10117] attempt to access beyond end of device [ 557.994863][T10117] loop2: rw=12288, want=8200, limit=8192 [ 558.016213][T10117] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:27 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:27 executing program 3 (fault-call:4 fault-nth:22): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466", 0x4a, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:27 executing program 4 (fault-call:2 fault-nth:11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @random="574e0c03f1d3"}]}, 0x28}, 0x1, 0x64cb0100}, 0x0) 13:56:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0), 0x0) 13:56:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466", 0x4a, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 558.134766][T10156] FAULT_INJECTION: forcing a failure. [ 558.134766][T10156] name failslab, interval 1, probability 0, space 0, times 0 [ 558.162732][T10164] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 558.171893][T10164] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.176430][T10156] CPU: 1 PID: 10156 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 558.179966][T10164] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 558.189821][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.189824][T10156] Call Trace: [ 558.189841][T10156] dump_stack+0x1d8/0x24e [ 558.189855][T10156] ? devkmsg_release+0x11c/0x11c [ 558.202604][T10164] F2FS-fs (loop2): invalid crc_offset: 0 [ 558.208027][T10156] ? show_regs_print_info+0x12/0x12 [ 558.208040][T10156] should_fail+0x6f6/0x860 [ 558.208049][T10156] ? setup_fault_attr+0x3d0/0x3d0 [ 558.208063][T10156] ? apply_wqattrs_prepare+0x102/0x17e0 [ 558.220185][T10164] attempt to access beyond end of device [ 558.220185][T10164] loop2: rw=12288, want=8200, limit=8192 [ 558.220580][T10156] should_failslab+0x5/0x20 [ 558.262063][T10156] kmem_cache_alloc_trace+0x39/0x2b0 [ 558.267316][T10156] ? apply_wqattrs_prepare+0xcb/0x17e0 [ 558.272744][T10156] apply_wqattrs_prepare+0x102/0x17e0 [ 558.278086][T10156] ? alloc_workqueue+0x1cb/0x11d0 [ 558.283080][T10156] ? hci_register_dev+0x1f2/0x710 [ 558.288096][T10156] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 558.293280][T10156] ? tty_ioctl+0xf68/0x1710 [ 558.297754][T10156] ? do_vfs_ioctl+0x76a/0x1720 [ 558.302493][T10156] ? __x64_sys_ioctl+0xd4/0x110 [ 558.307331][T10156] ? do_syscall_64+0xcb/0x1e0 [ 558.311981][T10156] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.318016][T10156] ? format_decode+0xc5c/0x1ab0 [ 558.322850][T10156] ? cwt_wakefn+0x70/0x70 [ 558.327148][T10156] ? vsnprintf+0x1d60/0x1d60 [ 558.331705][T10156] ? string+0x280/0x2c0 [ 558.335828][T10156] ? widen_string+0x3a/0x340 [ 558.340385][T10156] ? string+0x280/0x2c0 [ 558.344509][T10156] apply_workqueue_attrs_locked+0x136/0x6d0 [ 558.350376][T10156] ? check_preemption_disabled+0x9e/0x330 [ 558.356063][T10156] ? apply_workqueue_attrs+0x40/0x40 [ 558.361315][T10156] ? mutex_lock+0xa6/0x110 [ 558.365700][T10156] ? mutex_trylock+0xb0/0xb0 [ 558.370262][T10156] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 558.375774][T10156] alloc_workqueue+0xcc4/0x11d0 [ 558.380606][T10156] ? sprintf+0xd6/0x120 [ 558.384740][T10156] ? idr_replace+0x230/0x230 [ 558.389298][T10156] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 558.395330][T10156] ? h4_open+0x4f/0x140 [ 558.399453][T10156] ? h4_open+0x4f/0x140 [ 558.403580][T10156] hci_register_dev+0x1f2/0x710 [ 558.408405][T10156] hci_uart_tty_ioctl+0x89e/0xa10 [ 558.413397][T10156] ? hci_uart_tty_write+0x10/0x10 [ 558.419271][T10156] tty_ioctl+0xf68/0x1710 [ 558.423589][T10156] ? tty_do_resize+0x170/0x170 [ 558.428344][T10156] ? avc_ss_reset+0x3a0/0x3a0 [ 558.432991][T10156] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 558.439124][T10156] ? refcount_inc_checked+0x50/0x50 [ 558.444287][T10156] ? memcg_check_events+0x5c/0x5b0 [ 558.449377][T10156] ? proc_fail_nth_write+0x1d5/0x240 [ 558.454628][T10156] ? proc_fail_nth_read+0x1c0/0x1c0 [ 558.459812][T10156] ? __lru_cache_add+0x1c4/0x210 [ 558.464714][T10156] ? memset+0x1f/0x40 [ 558.468664][T10156] ? fsnotify+0x1332/0x13f0 [ 558.473137][T10156] ? tty_do_resize+0x170/0x170 [ 558.477871][T10156] do_vfs_ioctl+0x76a/0x1720 [ 558.482431][T10156] ? selinux_file_ioctl+0x72f/0x990 [ 558.487600][T10156] ? ioctl_preallocate+0x250/0x250 [ 558.492680][T10156] ? __fget+0x37b/0x3c0 [ 558.496817][T10156] ? vfs_write+0x422/0x4e0 [ 558.501220][T10156] ? fget_many+0x20/0x20 [ 558.505443][T10156] ? debug_smp_processor_id+0x20/0x20 [ 558.510795][T10156] ? security_file_ioctl+0x9d/0xb0 [ 558.515873][T10156] __x64_sys_ioctl+0xd4/0x110 [ 558.520534][T10156] do_syscall_64+0xcb/0x1e0 [ 558.525007][T10156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.530872][T10156] RIP: 0033:0x4665d9 [ 558.534742][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.554315][T10156] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.562704][T10156] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 558.570653][T10156] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 558.578617][T10156] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 13:56:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae1", 0x6f, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae1", 0x6f, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 558.586554][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.594492][T10156] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 558.609624][T10164] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae1", 0x6f, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @random="574e0c03f1d3"}]}, 0x28}, 0x1, 0x64cb0100}, 0x0) 13:56:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9", 0x82, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 558.686971][T10156] Bluetooth: Can't register HCI device [ 558.687016][T10158] debugfs: Directory 'hci1' with parent 'bluetooth' already present! [ 558.701706][T10158] FAULT_INJECTION: forcing a failure. [ 558.701706][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 558.731435][T10158] CPU: 1 PID: 10158 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 558.741717][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.752217][T10158] Call Trace: [ 558.755498][T10158] dump_stack+0x1d8/0x24e [ 558.759817][T10158] ? devkmsg_release+0x11c/0x11c [ 558.764772][T10158] ? show_regs_print_info+0x12/0x12 [ 558.769962][T10158] ? mutex_unlock+0x19/0x40 [ 558.774451][T10158] ? kernfs_xattr_get+0x81/0x90 [ 558.779288][T10158] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 558.785340][T10158] should_fail+0x6f6/0x860 [ 558.789751][T10158] ? setup_fault_attr+0x3d0/0x3d0 [ 558.794864][T10158] ? __kernfs_new_node+0x99/0x6d0 [ 558.799875][T10158] should_failslab+0x5/0x20 [ 558.804373][T10158] __kmalloc_track_caller+0x5d/0x2e0 [ 558.809648][T10158] kstrdup_const+0x51/0x90 [ 558.814054][T10158] __kernfs_new_node+0x99/0x6d0 [ 558.818892][T10158] ? mutex_lock+0xa6/0x110 [ 558.823319][T10158] ? kernfs_new_node+0x160/0x160 [ 558.828249][T10158] ? kernfs_activate+0x3fc/0x420 [ 558.833174][T10158] kernfs_new_node+0x95/0x160 [ 558.837837][T10158] kernfs_create_link+0x9c/0x1f0 [ 558.842758][T10158] sysfs_do_create_link_sd+0x85/0x100 [ 558.848122][T10158] device_add+0x989/0x18a0 [ 558.852616][T10158] ? get_device+0x30/0x30 [ 558.856942][T10158] ? virtual_device_parent+0x50/0x50 [ 558.862214][T10158] ? h4_open+0x4f/0x140 [ 558.866357][T10158] hci_register_dev+0x32e/0x710 [ 558.871398][T10158] hci_uart_tty_ioctl+0x89e/0xa10 [ 558.876391][T10158] ? hci_uart_tty_write+0x10/0x10 [ 558.881394][T10158] tty_ioctl+0xf68/0x1710 [ 558.885701][T10158] ? tty_do_resize+0x170/0x170 [ 558.890535][T10158] ? avc_ss_reset+0x3a0/0x3a0 [ 558.895186][T10158] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 558.901312][T10158] ? refcount_inc_checked+0x50/0x50 [ 558.906478][T10158] ? proc_fail_nth_write+0x1d5/0x240 [ 558.911733][T10158] ? proc_fail_nth_read+0x1c0/0x1c0 [ 558.916898][T10158] ? memset+0x1f/0x40 [ 558.921007][T10158] ? fsnotify+0x1332/0x13f0 [ 558.925480][T10158] ? tty_do_resize+0x170/0x170 [ 558.930213][T10158] do_vfs_ioctl+0x76a/0x1720 [ 558.934773][T10158] ? selinux_file_ioctl+0x72f/0x990 [ 558.939938][T10158] ? ioctl_preallocate+0x250/0x250 [ 558.945019][T10158] ? __fget+0x37b/0x3c0 [ 558.949144][T10158] ? vfs_write+0x422/0x4e0 [ 558.953558][T10158] ? fget_many+0x20/0x20 [ 558.957784][T10158] ? debug_smp_processor_id+0x20/0x20 [ 558.963127][T10158] ? security_file_ioctl+0x9d/0xb0 [ 558.968208][T10158] __x64_sys_ioctl+0xd4/0x110 [ 558.972872][T10158] do_syscall_64+0xcb/0x1e0 [ 558.977363][T10158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 558.983231][T10158] RIP: 0033:0x4665d9 [ 558.987096][T10158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.006673][T10158] RSP: 002b:00007f602d72a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.015071][T10158] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 559.023015][T10158] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 559.030968][T10158] RBP: 00007f602d72a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 559.038920][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.047008][T10158] R13: 00007ffedf434bcf R14: 00007f602d72a300 R15: 0000000000022000 [ 559.059623][T10158] Bluetooth: Can't register HCI device [ 559.075407][T10187] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 559.088185][T10187] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.095910][T10187] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 559.106700][T10187] F2FS-fs (loop2): invalid crc_offset: 0 [ 559.112963][T10187] attempt to access beyond end of device [ 559.112963][T10187] loop2: rw=12288, want=8200, limit=8192 [ 559.124431][T10187] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:29 executing program 4 (fault-call:2 fault-nth:12): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @random="574e0c03f1d3"}]}, 0x28}, 0x1, 0x64cb0100}, 0x0) 13:56:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) 13:56:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9", 0x82, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9", 0x82, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @random="574e0c03f1d3"}]}, 0x28}, 0x1, 0x64cb0100}, 0x0) 13:56:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f", 0x8b, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 559.347320][T10204] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 559.356777][T10203] FAULT_INJECTION: forcing a failure. [ 559.356777][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 559.403935][T10212] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 559.419380][T10203] CPU: 1 PID: 10203 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 559.429619][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.439660][T10203] Call Trace: [ 559.442942][T10203] dump_stack+0x1d8/0x24e [ 559.447262][T10203] ? devkmsg_release+0x11c/0x11c [ 559.452189][T10203] ? show_regs_print_info+0x12/0x12 [ 559.457377][T10203] should_fail+0x6f6/0x860 [ 559.461793][T10203] ? setup_fault_attr+0x3d0/0x3d0 [ 559.466817][T10203] ? apply_wqattrs_prepare+0x102/0x17e0 [ 559.472346][T10203] ? apply_wqattrs_prepare+0x1c0/0x17e0 [ 559.477877][T10203] should_failslab+0x5/0x20 [ 559.482423][T10203] kmem_cache_alloc_trace+0x39/0x2b0 [ 559.487779][T10203] ? apply_wqattrs_prepare+0x102/0x17e0 [ 559.493357][T10203] apply_wqattrs_prepare+0x1c0/0x17e0 [ 559.498745][T10203] ? alloc_workqueue+0x1cb/0x11d0 [ 559.503756][T10203] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 559.508936][T10203] ? tty_ioctl+0xf68/0x1710 [ 559.513423][T10203] ? do_vfs_ioctl+0x76a/0x1720 [ 559.518172][T10203] ? __x64_sys_ioctl+0xd4/0x110 [ 559.523010][T10203] ? do_syscall_64+0xcb/0x1e0 [ 559.527685][T10203] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 559.533747][T10203] ? format_decode+0xc5c/0x1ab0 [ 559.538590][T10203] ? cwt_wakefn+0x70/0x70 [ 559.542905][T10203] ? vsnprintf+0x1d60/0x1d60 [ 559.547497][T10203] ? string+0x280/0x2c0 [ 559.551638][T10203] ? widen_string+0x3a/0x340 [ 559.556212][T10203] ? string+0x280/0x2c0 [ 559.560355][T10203] apply_workqueue_attrs_locked+0x136/0x6d0 [ 559.566233][T10203] ? check_preemption_disabled+0x9e/0x330 [ 559.571944][T10203] ? apply_workqueue_attrs+0x40/0x40 [ 559.577214][T10203] ? mutex_lock+0xa6/0x110 [ 559.581629][T10203] ? mutex_trylock+0xb0/0xb0 [ 559.586206][T10203] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 559.591737][T10203] alloc_workqueue+0xcc4/0x11d0 [ 559.596576][T10203] ? sprintf+0xd6/0x120 [ 559.600721][T10203] ? idr_replace+0x230/0x230 [ 559.605302][T10203] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 559.611354][T10203] ? h4_open+0x4f/0x140 [ 559.615499][T10203] hci_register_dev+0x1f2/0x710 [ 559.620351][T10203] hci_uart_tty_ioctl+0x89e/0xa10 [ 559.625359][T10203] ? hci_uart_tty_write+0x10/0x10 [ 559.630367][T10203] tty_ioctl+0xf68/0x1710 [ 559.634681][T10203] ? tty_do_resize+0x170/0x170 [ 559.639433][T10203] ? avc_ss_reset+0x3a0/0x3a0 [ 559.644272][T10203] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 559.650413][T10203] ? refcount_inc_checked+0x50/0x50 [ 559.655855][T10203] ? memcg_check_events+0x5c/0x5b0 [ 559.660956][T10203] ? proc_fail_nth_write+0x1d5/0x240 [ 559.666324][T10203] ? proc_fail_nth_read+0x1c0/0x1c0 [ 559.671508][T10203] ? __lru_cache_add+0x1c4/0x210 [ 559.676429][T10203] ? memset+0x1f/0x40 [ 559.680397][T10203] ? fsnotify+0x1332/0x13f0 [ 559.684887][T10203] ? tty_do_resize+0x170/0x170 [ 559.689636][T10203] do_vfs_ioctl+0x76a/0x1720 [ 559.694227][T10203] ? selinux_file_ioctl+0x72f/0x990 13:56:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 13:56:29 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006540), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 13:56:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f", 0x8b, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 559.696878][T10212] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.699408][T10203] ? ioctl_preallocate+0x250/0x250 [ 559.699419][T10203] ? __fget+0x37b/0x3c0 [ 559.699427][T10203] ? vfs_write+0x422/0x4e0 [ 559.699435][T10203] ? fget_many+0x20/0x20 [ 559.699443][T10203] ? debug_smp_processor_id+0x20/0x20 [ 559.699451][T10203] ? security_file_ioctl+0x9d/0xb0 [ 559.699463][T10203] __x64_sys_ioctl+0xd4/0x110 [ 559.718628][T10212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 559.720816][T10203] do_syscall_64+0xcb/0x1e0 [ 559.720827][T10203] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 559.720839][T10203] RIP: 0033:0x4665d9 [ 559.742628][T10212] F2FS-fs (loop2): invalid crc_offset: 0 [ 559.748262][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.748267][T10203] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.748280][T10203] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 559.748284][T10203] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 559.748288][T10203] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 559.748292][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.748296][T10203] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 559.751102][T10203] Bluetooth: Can't register HCI device [ 559.755970][T10212] attempt to access beyond end of device [ 559.755970][T10212] loop2: rw=12288, want=8200, limit=8192 [ 559.855485][T10212] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 559.964319][T10212] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 559.973423][T10212] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.981268][T10212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 559.994557][T10212] F2FS-fs (loop2): invalid crc_offset: 0 [ 560.000541][T10212] attempt to access beyond end of device [ 560.000541][T10212] loop2: rw=12288, want=8200, limit=8192 [ 560.012405][T10212] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f", 0x8b, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:29 executing program 4 (fault-call:2 fault-nth:13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) 13:56:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802d", 0x90, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 560.167963][T10237] FAULT_INJECTION: forcing a failure. [ 560.167963][T10237] name failslab, interval 1, probability 0, space 0, times 0 [ 560.181321][T10237] CPU: 1 PID: 10237 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 560.191564][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.201606][T10237] Call Trace: [ 560.204916][T10237] dump_stack+0x1d8/0x24e [ 560.209223][T10237] ? devkmsg_release+0x11c/0x11c [ 560.214164][T10237] ? show_regs_print_info+0x12/0x12 [ 560.219333][T10237] should_fail+0x6f6/0x860 [ 560.223720][T10237] ? setup_fault_attr+0x3d0/0x3d0 [ 560.228714][T10237] ? apply_wqattrs_prepare+0x1c0/0x17e0 [ 560.234230][T10237] should_failslab+0x5/0x20 [ 560.238748][T10237] kmem_cache_alloc_trace+0x39/0x2b0 [ 560.244004][T10237] ? apply_wqattrs_prepare+0x102/0x17e0 [ 560.249519][T10237] apply_wqattrs_prepare+0x1c0/0x17e0 [ 560.254871][T10237] ? alloc_workqueue+0x1cb/0x11d0 [ 560.259864][T10237] ? hci_uart_tty_ioctl+0x89e/0xa10 [ 560.265058][T10237] ? tty_ioctl+0xf68/0x1710 [ 560.269551][T10237] ? do_vfs_ioctl+0x76a/0x1720 [ 560.274291][T10237] ? __x64_sys_ioctl+0xd4/0x110 [ 560.279112][T10237] ? do_syscall_64+0xcb/0x1e0 [ 560.283758][T10237] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.289793][T10237] ? format_decode+0xc5c/0x1ab0 [ 560.294609][T10237] ? cwt_wakefn+0x70/0x70 [ 560.298904][T10237] ? vsnprintf+0x1d60/0x1d60 [ 560.303465][T10237] ? string+0x280/0x2c0 [ 560.307587][T10237] ? widen_string+0x3a/0x340 [ 560.312162][T10237] ? string+0x280/0x2c0 [ 560.316306][T10237] apply_workqueue_attrs_locked+0x136/0x6d0 [ 560.322182][T10237] ? check_preemption_disabled+0x9e/0x330 [ 560.327876][T10237] ? apply_workqueue_attrs+0x40/0x40 [ 560.333189][T10237] ? mutex_lock+0xa6/0x110 [ 560.337687][T10237] ? mutex_trylock+0xb0/0xb0 [ 560.342253][T10237] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 560.347811][T10237] alloc_workqueue+0xcc4/0x11d0 [ 560.352637][T10237] ? sprintf+0xd6/0x120 [ 560.356775][T10237] ? idr_replace+0x230/0x230 [ 560.361338][T10237] ? apply_workqueue_attrs_locked+0x6d0/0x6d0 [ 560.367766][T10237] ? h4_open+0x4f/0x140 [ 560.371925][T10237] hci_register_dev+0x1f2/0x710 [ 560.376744][T10237] hci_uart_tty_ioctl+0x89e/0xa10 [ 560.381737][T10237] ? hci_uart_tty_write+0x10/0x10 [ 560.386730][T10237] tty_ioctl+0xf68/0x1710 [ 560.391028][T10237] ? tty_do_resize+0x170/0x170 [ 560.395759][T10237] ? avc_ss_reset+0x3a0/0x3a0 [ 560.400408][T10237] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 560.406527][T10237] ? refcount_inc_checked+0x50/0x50 [ 560.411697][T10237] ? memcg_check_events+0x5c/0x5b0 [ 560.416796][T10237] ? proc_fail_nth_write+0x1d5/0x240 [ 560.422046][T10237] ? proc_fail_nth_read+0x1c0/0x1c0 [ 560.427211][T10237] ? __lru_cache_add+0x1c4/0x210 [ 560.432115][T10237] ? memset+0x1f/0x40 [ 560.436063][T10237] ? fsnotify+0x1332/0x13f0 [ 560.440578][T10237] ? tty_do_resize+0x170/0x170 [ 560.445334][T10237] do_vfs_ioctl+0x76a/0x1720 [ 560.450018][T10237] ? selinux_file_ioctl+0x72f/0x990 [ 560.455205][T10237] ? ioctl_preallocate+0x250/0x250 [ 560.460284][T10237] ? __fget+0x37b/0x3c0 [ 560.464421][T10237] ? vfs_write+0x422/0x4e0 [ 560.468819][T10237] ? fget_many+0x20/0x20 [ 560.473030][T10237] ? debug_smp_processor_id+0x20/0x20 [ 560.478374][T10237] ? security_file_ioctl+0x9d/0xb0 [ 560.483973][T10237] __x64_sys_ioctl+0xd4/0x110 [ 560.488622][T10237] do_syscall_64+0xcb/0x1e0 [ 560.493102][T10237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.498994][T10237] RIP: 0033:0x4665d9 [ 560.502857][T10237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 560.522515][T10237] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.530894][T10237] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 560.538834][T10237] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 560.547332][T10237] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 560.555274][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.563215][T10237] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 560.571814][T10237] Bluetooth: Can't register HCI device [ 560.606662][T10247] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 560.622674][T10247] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 560.631211][T10247] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 560.645219][T10247] F2FS-fs (loop2): invalid crc_offset: 0 [ 560.654338][T10247] attempt to access beyond end of device [ 560.654338][T10247] loop2: rw=12288, want=8200, limit=8192 [ 560.680890][T10247] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 560.777665][T10247] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 560.786599][T10247] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 560.795041][T10247] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 560.809160][T10247] F2FS-fs (loop2): invalid crc_offset: 0 [ 560.814844][T10247] attempt to access beyond end of device [ 560.814844][T10247] loop2: rw=12288, want=8200, limit=8192 [ 560.826186][T10247] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 561.447413][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 561.453450][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 563.527372][ T380] Bluetooth: hci0: command 0x1001 tx timeout [ 563.533748][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 565.607251][ T380] Bluetooth: hci0: command 0x1009 tx timeout 13:56:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x2, 0x0) 13:56:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802d", 0x90, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:39 executing program 5: syz_emit_ethernet(0x14, &(0x7f00000001c0)={@random="c22685eae3b5", @random="e1ce2fe8aaed", @val={@void}, {@generic={0x0, "bcb7"}}}, 0x0) 13:56:39 executing program 4 (fault-call:2 fault-nth:14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) 13:56:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802d", 0x90, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b47, 0x0) 13:56:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac000000020601046c0000000074080000000000050005000a000000050001000600000005000400000000000900020073797a30000000000d000300686173683a6e6574000000000c000780080006400000008005004400000000000900020073797a3200000000440007800500030000000000080017400000007b060004404e2100000800084000000020080006400000000708001340"], 0xac}, 0x1, 0x40afc}, 0x0) 13:56:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b", 0x92, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b49, 0x0) [ 569.482554][T10273] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 569.504000][T10274] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 569.514293][T10273] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 569.519973][T10274] FAULT_INJECTION: forcing a failure. 13:56:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b", 0x92, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000040)=0xfffffffffffffe99) [ 569.519973][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 569.525452][T10273] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 569.562859][T10273] F2FS-fs (loop2): invalid crc_offset: 0 [ 569.563998][T10274] CPU: 0 PID: 10274 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 569.576327][T10273] attempt to access beyond end of device [ 569.576327][T10273] loop2: rw=12288, want=8200, limit=8192 [ 569.578795][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.578798][T10274] Call Trace: [ 569.578814][T10274] dump_stack+0x1d8/0x24e [ 569.578823][T10274] ? devkmsg_release+0x11c/0x11c [ 569.578836][T10274] ? show_regs_print_info+0x12/0x12 [ 569.593426][T10273] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 569.599939][T10274] ? __irq_work_queue_local+0xd1/0xe0 [ 569.599945][T10274] ? irq_work_queue+0xfa/0x110 [ 569.599955][T10274] should_fail+0x6f6/0x860 [ 569.599962][T10274] ? setup_fault_attr+0x3d0/0x3d0 [ 569.599974][T10274] ? _raw_spin_lock+0xa3/0x1b0 [ 569.648816][T10274] ? __rcu_read_lock+0x50/0x50 [ 569.653637][T10274] ? __d_lookup+0x4b8/0x510 [ 569.658108][T10274] ? kobject_set_name_vargs+0x5d/0x110 [ 569.663536][T10274] should_failslab+0x5/0x20 [ 569.668015][T10274] __kmalloc_track_caller+0x5d/0x2e0 [ 569.673268][T10274] ? mntput_no_expire+0x32b/0xbd0 [ 569.678348][T10274] kstrdup_const+0x51/0x90 [ 569.682830][T10274] kobject_set_name_vargs+0x5d/0x110 [ 569.688172][T10274] dev_set_name+0xd1/0x120 [ 569.692556][T10274] ? mntput_no_expire+0x307/0xbd0 [ 569.697548][T10274] ? get_device+0x30/0x30 [ 569.701856][T10274] ? h4_open+0x4f/0x140 [ 569.705980][T10274] hci_register_dev+0x326/0x710 [ 569.710821][T10274] hci_uart_tty_ioctl+0x89e/0xa10 [ 569.715811][T10274] ? hci_uart_tty_write+0x10/0x10 [ 569.720891][T10274] tty_ioctl+0xf68/0x1710 [ 569.725205][T10274] ? tty_do_resize+0x170/0x170 [ 569.729935][T10274] ? avc_ss_reset+0x3a0/0x3a0 [ 569.734576][T10274] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 569.740711][T10274] ? refcount_inc_checked+0x50/0x50 [ 569.745903][T10274] ? memcg_check_events+0x5c/0x5b0 [ 569.750986][T10274] ? proc_fail_nth_write+0x1d5/0x240 [ 569.756240][T10274] ? proc_fail_nth_read+0x1c0/0x1c0 [ 569.761406][T10274] ? __lru_cache_add+0x1c4/0x210 [ 569.766310][T10274] ? memset+0x1f/0x40 [ 569.770272][T10274] ? fsnotify+0x1332/0x13f0 [ 569.774742][T10274] ? tty_do_resize+0x170/0x170 [ 569.779478][T10274] do_vfs_ioctl+0x76a/0x1720 [ 569.784039][T10274] ? selinux_file_ioctl+0x72f/0x990 [ 569.789203][T10274] ? ioctl_preallocate+0x250/0x250 [ 569.794286][T10274] ? __fget+0x37b/0x3c0 [ 569.798407][T10274] ? vfs_write+0x422/0x4e0 [ 569.802889][T10274] ? fget_many+0x20/0x20 [ 569.807100][T10274] ? debug_smp_processor_id+0x20/0x20 [ 569.812440][T10274] ? security_file_ioctl+0x9d/0xb0 [ 569.817614][T10274] __x64_sys_ioctl+0xd4/0x110 [ 569.822262][T10274] do_syscall_64+0xcb/0x1e0 [ 569.826733][T10274] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 569.832591][T10274] RIP: 0033:0x4665d9 [ 569.836454][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 569.856033][T10274] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.864509][T10274] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 569.872448][T10274] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 13:56:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x0) 13:56:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1f, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) [ 569.880392][T10274] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.888332][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.896274][T10274] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 13:56:39 executing program 4 (fault-call:2 fault-nth:15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 569.942579][T10274] Bluetooth: Can't register HCI device [ 569.978368][T10309] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 569.987201][T10309] FAULT_INJECTION: forcing a failure. [ 569.987201][T10309] name failslab, interval 1, probability 0, space 0, times 0 [ 569.999876][T10309] CPU: 0 PID: 10309 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 570.010103][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.020143][T10309] Call Trace: [ 570.023438][T10309] dump_stack+0x1d8/0x24e [ 570.027761][T10309] ? devkmsg_release+0x11c/0x11c [ 570.032702][T10309] ? show_regs_print_info+0x12/0x12 [ 570.037892][T10309] should_fail+0x6f6/0x860 [ 570.042293][T10309] ? setup_fault_attr+0x3d0/0x3d0 [ 570.047422][T10309] ? refcount_add_checked+0x50/0x50 [ 570.052608][T10309] ? device_add+0x121/0x18a0 [ 570.057284][T10309] should_failslab+0x5/0x20 [ 570.061774][T10309] kmem_cache_alloc_trace+0x39/0x2b0 [ 570.067047][T10309] device_add+0x121/0x18a0 [ 570.071451][T10309] ? dev_set_name+0xd1/0x120 [ 570.076025][T10309] ? get_device+0x30/0x30 [ 570.080335][T10309] ? virtual_device_parent+0x50/0x50 [ 570.085602][T10309] ? h4_open+0x4f/0x140 [ 570.089741][T10309] hci_register_dev+0x32e/0x710 [ 570.094584][T10309] hci_uart_tty_ioctl+0x89e/0xa10 [ 570.099598][T10309] ? hci_uart_tty_write+0x10/0x10 [ 570.104656][T10309] tty_ioctl+0xf68/0x1710 [ 570.108960][T10309] ? tty_do_resize+0x170/0x170 [ 570.113751][T10309] ? avc_ss_reset+0x3a0/0x3a0 [ 570.118618][T10309] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 570.124864][T10309] ? refcount_inc_checked+0x50/0x50 [ 570.130049][T10309] ? check_preemption_disabled+0x9e/0x330 [ 570.135738][T10309] ? check_preemption_disabled+0x9e/0x330 [ 570.141452][T10309] ? debug_smp_processor_id+0x20/0x20 [ 570.146801][T10309] ? check_preemption_disabled+0x9e/0x330 [ 570.152575][T10309] ? debug_smp_processor_id+0x20/0x20 [ 570.158092][T10309] ? switch_mm_irqs_off+0x72f/0x9a0 [ 570.163258][T10309] ? check_preemption_disabled+0x9e/0x330 [ 570.168960][T10309] ? __perf_event_task_sched_in+0x57c/0x5e0 [ 570.174913][T10309] ? tty_do_resize+0x170/0x170 [ 570.179649][T10309] do_vfs_ioctl+0x76a/0x1720 [ 570.184214][T10309] ? selinux_file_ioctl+0x72f/0x990 [ 570.189383][T10309] ? ioctl_preallocate+0x250/0x250 [ 570.194740][T10309] ? _raw_spin_unlock_irq+0x4a/0x60 [ 570.199923][T10309] ? finish_task_switch+0x130/0x550 [ 570.205229][T10309] ? __fget+0x37b/0x3c0 [ 570.209358][T10309] ? debug_smp_processor_id+0x20/0x20 [ 570.214708][T10309] ? fget_many+0x20/0x20 [ 570.218925][T10309] ? __fpregs_load_activate+0x1d7/0x3c0 [ 570.224440][T10309] ? security_file_ioctl+0x9d/0xb0 [ 570.229532][T10309] __x64_sys_ioctl+0xd4/0x110 [ 570.234181][T10309] do_syscall_64+0xcb/0x1e0 [ 570.238655][T10309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 570.244515][T10309] RIP: 0033:0x4665d9 [ 570.248381][T10309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.268239][T10309] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.276617][T10309] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 570.284862][T10309] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 570.292804][T10309] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.300763][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.308711][T10309] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 570.321976][T10309] Bluetooth: Can't register HCI device 13:56:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 570.352810][T10312] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 570.361812][T10312] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 570.371403][T10312] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 570.388471][T10312] F2FS-fs (loop2): invalid crc_offset: 0 [ 570.394204][T10312] attempt to access beyond end of device [ 570.394204][T10312] loop2: rw=12288, want=8200, limit=8192 [ 570.405383][T10312] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:40 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x4082) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000000c80)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x80003) 13:56:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b", 0x92, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x0) 13:56:40 executing program 4 (fault-call:2 fault-nth:16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b73", 0x93, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x0) [ 570.532388][T10329] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 570.555265][T10329] FAULT_INJECTION: forcing a failure. [ 570.555265][T10329] name failslab, interval 1, probability 0, space 0, times 0 13:56:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) finit_module(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xe4f3) [ 570.584672][T10340] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 570.594945][T10329] CPU: 0 PID: 10329 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 570.605184][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.615231][T10329] Call Trace: [ 570.618519][T10329] dump_stack+0x1d8/0x24e [ 570.622845][T10329] ? devkmsg_release+0x11c/0x11c [ 570.627778][T10329] ? show_regs_print_info+0x12/0x12 13:56:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x0) 13:56:40 executing program 5: timer_create(0x2, 0x0, &(0x7f0000001180)) timer_gettime(0x0, &(0x7f00000011c0)) [ 570.632972][T10329] should_fail+0x6f6/0x860 [ 570.637380][T10329] ? setup_fault_attr+0x3d0/0x3d0 [ 570.642403][T10329] ? _raw_spin_lock+0xa3/0x1b0 [ 570.647161][T10329] ? get_device_parent+0x327/0x430 [ 570.652262][T10329] should_failslab+0x5/0x20 [ 570.656756][T10329] kmem_cache_alloc_trace+0x39/0x2b0 [ 570.662029][T10329] ? device_add+0x121/0x18a0 [ 570.666605][T10329] get_device_parent+0x327/0x430 [ 570.671534][T10329] ? device_add+0x3a6/0x18a0 [ 570.676120][T10329] device_add+0x3b3/0x18a0 [ 570.680527][T10329] ? get_device+0x30/0x30 13:56:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001040), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) [ 570.684855][T10329] ? virtual_device_parent+0x50/0x50 [ 570.690124][T10329] ? h4_open+0x4f/0x140 [ 570.694265][T10329] hci_register_dev+0x32e/0x710 [ 570.699107][T10329] hci_uart_tty_ioctl+0x89e/0xa10 [ 570.704133][T10329] ? hci_uart_tty_write+0x10/0x10 [ 570.709143][T10329] tty_ioctl+0xf68/0x1710 [ 570.713463][T10329] ? tty_do_resize+0x170/0x170 [ 570.718214][T10329] ? avc_ss_reset+0x3a0/0x3a0 [ 570.722877][T10329] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 570.729030][T10329] ? refcount_inc_checked+0x50/0x50 [ 570.734229][T10329] ? memcg_check_events+0x5c/0x5b0 [ 570.739333][T10329] ? proc_fail_nth_write+0x1d5/0x240 [ 570.744612][T10329] ? proc_fail_nth_read+0x1c0/0x1c0 [ 570.749797][T10329] ? __lru_cache_add+0x1c4/0x210 [ 570.754729][T10329] ? memset+0x1f/0x40 [ 570.759137][T10329] ? fsnotify+0x1332/0x13f0 [ 570.763625][T10329] ? tty_do_resize+0x170/0x170 [ 570.768374][T10329] do_vfs_ioctl+0x76a/0x1720 [ 570.772957][T10329] ? selinux_file_ioctl+0x72f/0x990 [ 570.778143][T10329] ? ioctl_preallocate+0x250/0x250 [ 570.783329][T10329] ? __fget+0x37b/0x3c0 [ 570.787470][T10329] ? vfs_write+0x422/0x4e0 [ 570.791872][T10329] ? fget_many+0x20/0x20 [ 570.796130][T10329] ? debug_smp_processor_id+0x20/0x20 [ 570.801575][T10329] ? security_file_ioctl+0x9d/0xb0 [ 570.806677][T10329] __x64_sys_ioctl+0xd4/0x110 [ 570.811341][T10329] do_syscall_64+0xcb/0x1e0 [ 570.815826][T10329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 570.819537][T10340] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 570.821689][T10329] RIP: 0033:0x4665d9 [ 570.821698][T10329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.821702][T10329] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.855017][T10340] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 570.861342][T10329] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 570.861347][T10329] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 13:56:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 570.861352][T10329] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.861355][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.861359][T10329] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 570.864609][T10329] Bluetooth: Can't register HCI device [ 570.902236][T10340] F2FS-fs (loop2): invalid crc_offset: 0 [ 570.929928][T10340] attempt to access beyond end of device [ 570.929928][T10340] loop2: rw=12288, want=8200, limit=8192 [ 570.944104][T10340] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 571.072521][T10340] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 571.081834][T10340] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 571.089779][T10340] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 571.103875][T10340] F2FS-fs (loop2): invalid crc_offset: 0 [ 571.114634][T10340] attempt to access beyond end of device [ 571.114634][T10340] loop2: rw=12288, want=8200, limit=8192 [ 571.126365][T10340] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x0) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b73", 0x93, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:41 executing program 4 (fault-call:2 fault-nth:17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={&(0x7f0000002600), 0x4, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x58}}, 0x0) 13:56:41 executing program 5: clock_gettime(0x0, &(0x7f0000000380)={0x0}) syz_open_dev$vcsa(&(0x7f0000000600), 0x0, 0x200800) pselect6(0x40, &(0x7f00000002c0)={0x1}, &(0x7f0000000300)={0x1}, &(0x7f0000000340)={0x9}, &(0x7f00000003c0)={r0}, 0x0) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b73", 0x93, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) [ 571.286602][T10377] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 571.303300][T10377] FAULT_INJECTION: forcing a failure. [ 571.303300][T10377] name failslab, interval 1, probability 0, space 0, times 0 13:56:41 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x107400) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 571.336724][T10386] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 571.346302][T10377] CPU: 1 PID: 10377 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 571.356536][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.366588][T10377] Call Trace: [ 571.369875][T10377] dump_stack+0x1d8/0x24e [ 571.374222][T10377] ? devkmsg_release+0x11c/0x11c [ 571.379150][T10377] ? show_regs_print_info+0x12/0x12 [ 571.384338][T10377] ? check_preemption_disabled+0x9e/0x330 [ 571.390040][T10377] ? __rcu_read_lock+0x50/0x50 [ 571.394779][T10377] ? __unwind_start+0x72f/0x8e0 [ 571.399605][T10377] ? debug_smp_processor_id+0x20/0x20 [ 571.404961][T10377] should_fail+0x6f6/0x860 [ 571.409354][T10377] ? setup_fault_attr+0x3d0/0x3d0 [ 571.414347][T10377] ? stack_trace_save+0x1f0/0x1f0 [ 571.419339][T10377] ? __kernel_text_address+0x93/0x100 [ 571.424687][T10377] ? unwind_get_return_address+0x48/0x80 [ 571.430303][T10377] ? __kernfs_new_node+0xdb/0x6d0 [ 571.435309][T10377] should_failslab+0x5/0x20 [ 571.439793][T10377] kmem_cache_alloc+0x36/0x290 [ 571.444592][T10377] __kernfs_new_node+0xdb/0x6d0 [ 571.449421][T10377] ? kernfs_new_node+0x160/0x160 [ 571.454332][T10377] ? stack_trace_save+0x120/0x1f0 [ 571.459327][T10377] ? stack_trace_snprint+0x150/0x150 [ 571.464590][T10377] ? __schedule+0x9b8/0x1170 [ 571.469149][T10377] ? __kasan_kmalloc+0x1a3/0x1e0 [ 571.474072][T10377] kernfs_create_dir_ns+0x90/0x220 [ 571.479155][T10377] sysfs_create_dir_ns+0x181/0x390 [ 571.484234][T10377] ? sysfs_warn_dup+0xa0/0xa0 [ 571.488881][T10377] kobject_add_internal+0x595/0xbd0 [ 571.494049][T10377] kobject_add+0x14c/0x210 [ 571.498449][T10377] ? kobject_init+0x1d0/0x1d0 [ 571.503110][T10377] ? get_device_parent+0x327/0x430 [ 571.508191][T10377] ? kobject_init+0x7d/0x1d0 [ 571.512767][T10377] get_device_parent+0x3d5/0x430 [ 571.517676][T10377] device_add+0x3b3/0x18a0 [ 571.522080][T10377] ? get_device+0x30/0x30 [ 571.526380][T10377] ? virtual_device_parent+0x50/0x50 [ 571.531635][T10377] ? h4_open+0x4f/0x140 [ 571.535766][T10377] hci_register_dev+0x32e/0x710 [ 571.540593][T10377] hci_uart_tty_ioctl+0x89e/0xa10 [ 571.545588][T10377] ? hci_uart_tty_write+0x10/0x10 [ 571.550596][T10377] tty_ioctl+0xf68/0x1710 [ 571.554909][T10377] ? tty_do_resize+0x170/0x170 [ 571.559641][T10377] ? avc_ss_reset+0x3a0/0x3a0 [ 571.564287][T10377] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 571.570410][T10377] ? refcount_inc_checked+0x50/0x50 [ 571.575603][T10377] ? memcg_check_events+0x5c/0x5b0 [ 571.580686][T10377] ? proc_fail_nth_write+0x1d5/0x240 [ 571.585939][T10377] ? proc_fail_nth_read+0x1c0/0x1c0 [ 571.591118][T10377] ? check_preemption_disabled+0x9e/0x330 [ 571.596806][T10377] ? memset+0x1f/0x40 [ 571.600774][T10377] ? fsnotify+0x1332/0x13f0 [ 571.605247][T10377] ? tty_do_resize+0x170/0x170 [ 571.609998][T10377] do_vfs_ioctl+0x76a/0x1720 [ 571.614557][T10377] ? selinux_file_ioctl+0x72f/0x990 [ 571.619725][T10377] ? ioctl_preallocate+0x250/0x250 [ 571.624819][T10377] ? __fget+0x37b/0x3c0 [ 571.628959][T10377] ? vfs_write+0x422/0x4e0 [ 571.633347][T10377] ? fget_many+0x20/0x20 [ 571.637559][T10377] ? debug_smp_processor_id+0x20/0x20 [ 571.642903][T10377] ? security_file_ioctl+0x9d/0xb0 [ 571.647982][T10377] __x64_sys_ioctl+0xd4/0x110 [ 571.652634][T10377] do_syscall_64+0xcb/0x1e0 [ 571.657106][T10377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 571.662967][T10377] RIP: 0033:0x4665d9 [ 571.666832][T10377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.686405][T10377] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.694782][T10377] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 571.702726][T10377] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 571.710671][T10377] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.718610][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.726551][T10377] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 571.743775][T10386] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 571.764052][T10386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 571.772773][T10377] kobject_add_internal failed for bluetooth (error: -12 parent: virtual) [ 571.784750][T10377] Bluetooth: Can't register HCI device 13:56:41 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 571.801972][T10386] F2FS-fs (loop2): invalid crc_offset: 0 [ 571.813749][T10386] attempt to access beyond end of device [ 571.813749][T10386] loop2: rw=12288, want=8200, limit=8192 [ 571.826182][T10386] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 571.952508][T10386] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 571.962048][T10386] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 571.970195][T10386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 571.988341][T10386] F2FS-fs (loop2): invalid crc_offset: 0 [ 571.996467][T10386] attempt to access beyond end of device [ 571.996467][T10386] loop2: rw=12288, want=8200, limit=8192 [ 572.010556][T10386] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:41 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x7a00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:41 executing program 5: timer_create(0x1, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 13:56:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x0) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:41 executing program 4 (fault-call:2 fault-nth:18): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @loopback}}) 13:56:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x0) [ 572.101804][T10420] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 572.124021][T10419] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 572.140175][T10419] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 572.144898][T10420] FAULT_INJECTION: forcing a failure. [ 572.144898][T10420] name failslab, interval 1, probability 0, space 0, times 0 [ 572.161633][T10419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 572.175521][T10420] CPU: 0 PID: 10420 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 572.185753][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.195799][T10420] Call Trace: [ 572.197619][T10419] F2FS-fs (loop2): invalid crc_offset: 0 [ 572.199080][T10420] dump_stack+0x1d8/0x24e [ 572.199090][T10420] ? devkmsg_release+0x11c/0x11c [ 572.199104][T10420] ? show_regs_print_info+0x12/0x12 [ 572.205656][T10419] attempt to access beyond end of device [ 572.205656][T10419] loop2: rw=12288, want=8200, limit=8192 [ 572.209031][T10420] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 572.209044][T10420] should_fail+0x6f6/0x860 [ 572.209052][T10420] ? setup_fault_attr+0x3d0/0x3d0 [ 572.209061][T10420] ? _raw_spin_lock+0xa3/0x1b0 [ 572.209070][T10420] ? __kernfs_new_node+0x99/0x6d0 [ 572.209083][T10420] should_failslab+0x5/0x20 [ 572.224348][T10419] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 572.230356][T10420] __kmalloc_track_caller+0x5d/0x2e0 [ 572.230366][T10420] ? security_kernfs_init_security+0x9a/0xb0 [ 572.230377][T10420] kstrdup_const+0x51/0x90 [ 572.230385][T10420] __kernfs_new_node+0x99/0x6d0 [ 572.230397][T10420] ? kernfs_new_node+0x160/0x160 [ 572.292169][T10420] ? kernfs_activate+0x3fc/0x420 [ 572.297599][T10420] ? mutex_unlock+0x19/0x40 [ 572.302072][T10420] ? kernfs_add_one+0x49e/0x5c0 [ 572.306911][T10420] ? kernfs_create_dir_ns+0x1df/0x220 [ 572.312250][T10420] kernfs_create_dir_ns+0x90/0x220 [ 572.317336][T10420] sysfs_create_dir_ns+0x181/0x390 [ 572.322421][T10420] ? sysfs_warn_dup+0xa0/0xa0 [ 572.327068][T10420] ? class_dir_child_ns_type+0x15/0x60 [ 572.332516][T10420] kobject_add_internal+0x595/0xbd0 [ 572.337683][T10420] kobject_add+0x14c/0x210 [ 572.342072][T10420] ? kobject_init+0x1d0/0x1d0 [ 572.346717][T10420] ? _raw_spin_lock+0xa3/0x1b0 [ 572.351460][T10420] ? kobject_init+0x1d0/0x1d0 [ 572.356122][T10420] ? get_device_parent+0x2cd/0x430 [ 572.361208][T10420] device_add+0x46a/0x18a0 [ 572.365605][T10420] ? get_device+0x30/0x30 [ 572.369913][T10420] ? virtual_device_parent+0x50/0x50 [ 572.375168][T10420] ? h4_open+0x4f/0x140 [ 572.379299][T10420] hci_register_dev+0x32e/0x710 [ 572.384125][T10420] hci_uart_tty_ioctl+0x89e/0xa10 [ 572.389123][T10420] ? hci_uart_tty_write+0x10/0x10 [ 572.394131][T10420] tty_ioctl+0xf68/0x1710 [ 572.398433][T10420] ? tty_do_resize+0x170/0x170 [ 572.403171][T10420] ? avc_ss_reset+0x3a0/0x3a0 [ 572.407818][T10420] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 572.413940][T10420] ? refcount_inc_checked+0x50/0x50 [ 572.419108][T10420] ? memcg_check_events+0x5c/0x5b0 [ 572.424188][T10420] ? proc_fail_nth_write+0x1d5/0x240 [ 572.429456][T10420] ? proc_fail_nth_read+0x1c0/0x1c0 [ 572.434623][T10420] ? __lru_cache_add+0x1c4/0x210 [ 572.439527][T10420] ? memset+0x1f/0x40 [ 572.443478][T10420] ? fsnotify+0x1332/0x13f0 [ 572.447962][T10420] ? tty_do_resize+0x170/0x170 [ 572.452693][T10420] do_vfs_ioctl+0x76a/0x1720 [ 572.457342][T10420] ? selinux_file_ioctl+0x72f/0x990 [ 572.462509][T10420] ? ioctl_preallocate+0x250/0x250 [ 572.467591][T10420] ? __fget+0x37b/0x3c0 [ 572.471723][T10420] ? vfs_write+0x422/0x4e0 [ 572.476106][T10420] ? fget_many+0x20/0x20 [ 572.480315][T10420] ? debug_smp_processor_id+0x20/0x20 [ 572.485654][T10420] ? security_file_ioctl+0x9d/0xb0 [ 572.490735][T10420] __x64_sys_ioctl+0xd4/0x110 [ 572.495386][T10420] do_syscall_64+0xcb/0x1e0 [ 572.499875][T10420] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 572.505737][T10420] RIP: 0033:0x4665d9 [ 572.509602][T10420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 572.529185][T10420] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.537563][T10420] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 572.545506][T10420] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 13:56:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @loopback}}) 13:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x0) [ 572.553450][T10420] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 572.561392][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.569333][T10420] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 572.601139][T10420] kobject_add_internal failed for hci0 (error: -12 parent: bluetooth) [ 572.611986][T10420] Bluetooth: Can't register HCI device 13:56:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 572.725505][T10419] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 572.734742][T10419] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 572.742596][T10419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 572.752399][T10419] F2FS-fs (loop2): invalid crc_offset: 0 [ 572.764005][T10419] attempt to access beyond end of device [ 572.764005][T10419] loop2: rw=12288, want=8200, limit=8192 [ 572.775694][T10419] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x0) 13:56:42 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8403, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @loopback}}) 13:56:42 executing program 4 (fault-call:2 fault-nth:19): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @loopback}}) 13:56:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x0) [ 572.870458][T10459] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 572.880572][T10459] FAULT_INJECTION: forcing a failure. [ 572.880572][T10459] name failslab, interval 1, probability 0, space 0, times 0 [ 572.923698][T10459] CPU: 1 PID: 10459 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 572.927387][T10466] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 572.933969][T10459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.933973][T10459] Call Trace: [ 572.933991][T10459] dump_stack+0x1d8/0x24e [ 572.934007][T10459] ? devkmsg_release+0x11c/0x11c [ 572.954628][T10466] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 572.956042][T10459] ? show_regs_print_info+0x12/0x12 [ 572.956050][T10459] ? _raw_spin_lock+0xa3/0x1b0 [ 572.956064][T10459] should_fail+0x6f6/0x860 [ 572.962918][T10466] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 572.965268][T10459] ? setup_fault_attr+0x3d0/0x3d0 [ 572.965277][T10459] ? mutex_lock+0xa6/0x110 [ 572.965289][T10459] ? mutex_trylock+0xb0/0xb0 [ 572.975096][T10466] F2FS-fs (loop2): invalid crc_offset: 0 [ 572.978362][T10459] ? __kernfs_new_node+0xdb/0x6d0 [ 572.978372][T10459] should_failslab+0x5/0x20 [ 572.978381][T10459] kmem_cache_alloc+0x36/0x290 [ 572.978389][T10459] __kernfs_new_node+0xdb/0x6d0 [ 572.978402][T10459] ? kernfs_add_one+0x49e/0x5c0 [ 572.984555][T10466] attempt to access beyond end of device [ 572.984555][T10466] loop2: rw=12288, want=8200, limit=8192 [ 572.987539][T10459] ? kernfs_new_node+0x160/0x160 [ 572.987549][T10459] ? __kernfs_create_file+0x1f1/0x260 [ 572.987559][T10459] ? sysfs_add_file_mode_ns+0x293/0x340 [ 572.987567][T10459] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 572.987581][T10459] kernfs_new_node+0x95/0x160 [ 572.997103][T10466] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 573.000698][T10459] kernfs_create_link+0x9c/0x1f0 [ 573.000707][T10459] sysfs_do_create_link_sd+0x85/0x100 [ 573.000719][T10459] device_add+0x74b/0x18a0 [ 573.097979][T10459] ? get_device+0x30/0x30 [ 573.102289][T10459] ? virtual_device_parent+0x50/0x50 [ 573.107544][T10459] ? h4_open+0x4f/0x140 [ 573.111785][T10459] hci_register_dev+0x32e/0x710 [ 573.116606][T10459] hci_uart_tty_ioctl+0x89e/0xa10 [ 573.121608][T10459] ? hci_uart_tty_write+0x10/0x10 [ 573.126617][T10459] tty_ioctl+0xf68/0x1710 [ 573.130931][T10459] ? tty_do_resize+0x170/0x170 [ 573.135666][T10459] ? avc_ss_reset+0x3a0/0x3a0 [ 573.140317][T10459] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 573.146611][T10459] ? refcount_inc_checked+0x50/0x50 [ 573.151780][T10459] ? memcg_check_events+0x5c/0x5b0 [ 573.156874][T10459] ? proc_fail_nth_write+0x1d5/0x240 [ 573.162127][T10459] ? proc_fail_nth_read+0x1c0/0x1c0 [ 573.167290][T10459] ? __lru_cache_add+0x1c4/0x210 [ 573.172208][T10459] ? memset+0x1f/0x40 [ 573.176156][T10459] ? fsnotify+0x1332/0x13f0 [ 573.180628][T10459] ? tty_do_resize+0x170/0x170 [ 573.185360][T10459] do_vfs_ioctl+0x76a/0x1720 [ 573.189919][T10459] ? selinux_file_ioctl+0x72f/0x990 [ 573.195082][T10459] ? ioctl_preallocate+0x250/0x250 [ 573.200164][T10459] ? __fget+0x37b/0x3c0 [ 573.204287][T10459] ? vfs_write+0x422/0x4e0 [ 573.208674][T10459] ? fget_many+0x20/0x20 [ 573.212888][T10459] ? debug_smp_processor_id+0x20/0x20 [ 573.218229][T10459] ? security_file_ioctl+0x9d/0xb0 [ 573.223310][T10459] __x64_sys_ioctl+0xd4/0x110 [ 573.227981][T10459] do_syscall_64+0xcb/0x1e0 [ 573.232803][T10459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 573.238682][T10459] RIP: 0033:0x4665d9 [ 573.242546][T10459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 573.262151][T10459] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:56:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) [ 573.270539][T10459] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 573.278483][T10459] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 573.286439][T10459] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 573.294382][T10459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 573.302325][T10459] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 13:56:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x0) [ 573.367290][T10459] Bluetooth: Can't register HCI device [ 573.446578][T10466] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 573.455852][T10466] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 573.463718][T10466] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 573.481034][T10466] F2FS-fs (loop2): invalid crc_offset: 0 [ 573.489466][T10466] attempt to access beyond end of device 13:56:43 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:43 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0xfffffffffffffdbe) [ 573.489466][T10466] loop2: rw=12288, want=8200, limit=8192 [ 573.505692][T10466] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:43 executing program 4 (fault-call:2 fault-nth:20): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5417, 0x0) 13:56:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0xc0045878, 0xffffffffffffffff) 13:56:43 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8726, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000140)) 13:56:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 573.609682][T10504] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 573.627731][T10504] FAULT_INJECTION: forcing a failure. [ 573.627731][T10504] name failslab, interval 1, probability 0, space 0, times 0 [ 573.651785][T10504] CPU: 0 PID: 10504 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 573.662110][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.672185][T10504] Call Trace: [ 573.675467][T10504] dump_stack+0x1d8/0x24e [ 573.679789][T10504] ? devkmsg_release+0x11c/0x11c [ 573.684799][T10504] ? show_regs_print_info+0x12/0x12 [ 573.689980][T10504] ? _raw_spin_lock+0xa3/0x1b0 [ 573.694730][T10504] should_fail+0x6f6/0x860 [ 573.699132][T10504] ? setup_fault_attr+0x3d0/0x3d0 [ 573.704149][T10504] ? mutex_lock+0xa6/0x110 [ 573.708579][T10504] ? mutex_trylock+0xb0/0xb0 [ 573.713160][T10504] ? __kernfs_new_node+0xdb/0x6d0 [ 573.718170][T10504] should_failslab+0x5/0x20 [ 573.722660][T10504] kmem_cache_alloc+0x36/0x290 [ 573.727430][T10504] __kernfs_new_node+0xdb/0x6d0 [ 573.732264][T10504] ? kernfs_add_one+0x49e/0x5c0 [ 573.737097][T10504] ? kernfs_new_node+0x160/0x160 [ 573.742019][T10504] ? __kernfs_create_file+0x1f1/0x260 [ 573.747375][T10504] ? sysfs_add_file_mode_ns+0x293/0x340 [ 573.752906][T10504] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 573.758437][T10504] kernfs_new_node+0x95/0x160 [ 573.763098][T10504] kernfs_create_link+0x9c/0x1f0 [ 573.768022][T10504] sysfs_do_create_link_sd+0x85/0x100 [ 573.773377][T10504] device_add+0x74b/0x18a0 [ 573.777782][T10504] ? get_device+0x30/0x30 [ 573.782097][T10504] ? virtual_device_parent+0x50/0x50 [ 573.787372][T10504] ? h4_open+0x4f/0x140 [ 573.791519][T10504] hci_register_dev+0x32e/0x710 [ 573.797141][T10504] hci_uart_tty_ioctl+0x89e/0xa10 [ 573.802151][T10504] ? hci_uart_tty_write+0x10/0x10 13:56:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 573.807163][T10504] tty_ioctl+0xf68/0x1710 [ 573.811636][T10504] ? tty_do_resize+0x170/0x170 [ 573.816413][T10504] ? avc_ss_reset+0x3a0/0x3a0 [ 573.821075][T10504] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 573.827297][T10504] ? refcount_inc_checked+0x50/0x50 [ 573.832497][T10504] ? memcg_check_events+0x5c/0x5b0 [ 573.837600][T10504] ? proc_fail_nth_write+0x1d5/0x240 [ 573.842874][T10504] ? proc_fail_nth_read+0x1c0/0x1c0 [ 573.848089][T10504] ? __lru_cache_add+0x1c4/0x210 [ 573.853013][T10504] ? memset+0x1f/0x40 13:56:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 573.856979][T10504] ? fsnotify+0x1332/0x13f0 [ 573.861473][T10504] ? tty_do_resize+0x170/0x170 [ 573.866231][T10504] do_vfs_ioctl+0x76a/0x1720 [ 573.870816][T10504] ? selinux_file_ioctl+0x72f/0x990 [ 573.876005][T10504] ? ioctl_preallocate+0x250/0x250 [ 573.879701][T10515] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 573.881120][T10504] ? __fget+0x37b/0x3c0 [ 573.881128][T10504] ? vfs_write+0x422/0x4e0 [ 573.881143][T10504] ? fget_many+0x20/0x20 [ 573.890087][T10515] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 573.894036][T10504] ? debug_smp_processor_id+0x20/0x20 [ 573.894045][T10504] ? security_file_ioctl+0x9d/0xb0 [ 573.894060][T10504] __x64_sys_ioctl+0xd4/0x110 [ 573.898496][T10515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 573.902658][T10504] do_syscall_64+0xcb/0x1e0 [ 573.902668][T10504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 573.902679][T10504] RIP: 0033:0x4665d9 [ 573.915430][T10515] F2FS-fs (loop2): invalid crc_offset: 0 [ 573.915755][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 573.924363][T10515] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 573.925477][T10504] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.925485][T10504] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 573.925489][T10504] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 13:56:43 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x0) 13:56:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:56:43 executing program 4 (fault-call:2 fault-nth:21): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:43 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xdc0c0) [ 573.925498][T10504] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 574.012100][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.020042][T10504] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 574.046477][T10504] Bluetooth: Can't register HCI device [ 574.100039][T10540] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 574.108249][T10540] FAULT_INJECTION: forcing a failure. [ 574.108249][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 574.121335][T10540] CPU: 1 PID: 10540 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 574.131560][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.141599][T10540] Call Trace: [ 574.144863][T10540] dump_stack+0x1d8/0x24e [ 574.149161][T10540] ? devkmsg_release+0x11c/0x11c [ 574.154065][T10540] ? show_regs_print_info+0x12/0x12 [ 574.159228][T10540] ? mutex_unlock+0x19/0x40 [ 574.163705][T10540] ? kernfs_xattr_get+0x81/0x90 [ 574.168537][T10540] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 574.174579][T10540] should_fail+0x6f6/0x860 [ 574.178975][T10540] ? setup_fault_attr+0x3d0/0x3d0 [ 574.183970][T10540] ? __kernfs_new_node+0x99/0x6d0 [ 574.188962][T10540] should_failslab+0x5/0x20 [ 574.193437][T10540] __kmalloc_track_caller+0x5d/0x2e0 [ 574.198705][T10540] kstrdup_const+0x51/0x90 [ 574.203111][T10540] __kernfs_new_node+0x99/0x6d0 [ 574.208190][T10540] ? mutex_lock+0xa6/0x110 [ 574.212586][T10540] ? kernfs_new_node+0x160/0x160 [ 574.217495][T10540] ? kernfs_activate+0x3fc/0x420 [ 574.222403][T10540] kernfs_new_node+0x95/0x160 [ 574.227056][T10540] kernfs_create_link+0x9c/0x1f0 [ 574.231969][T10540] sysfs_do_create_link_sd+0x85/0x100 [ 574.237414][T10540] device_add+0x989/0x18a0 [ 574.241821][T10540] ? get_device+0x30/0x30 [ 574.246136][T10540] ? virtual_device_parent+0x50/0x50 [ 574.251408][T10540] ? h4_open+0x4f/0x140 [ 574.255536][T10540] hci_register_dev+0x32e/0x710 [ 574.260380][T10540] hci_uart_tty_ioctl+0x89e/0xa10 [ 574.265372][T10540] ? hci_uart_tty_write+0x10/0x10 [ 574.270365][T10540] tty_ioctl+0xf68/0x1710 [ 574.274733][T10540] ? tty_do_resize+0x170/0x170 [ 574.279498][T10540] ? avc_ss_reset+0x3a0/0x3a0 [ 574.284144][T10540] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 574.290280][T10540] ? refcount_inc_checked+0x50/0x50 [ 574.295469][T10540] ? memcg_check_events+0x5c/0x5b0 [ 574.300555][T10540] ? proc_fail_nth_write+0x1d5/0x240 [ 574.305807][T10540] ? proc_fail_nth_read+0x1c0/0x1c0 [ 574.310974][T10540] ? __lru_cache_add+0x1c4/0x210 [ 574.315876][T10540] ? memset+0x1f/0x40 [ 574.319822][T10540] ? fsnotify+0x1332/0x13f0 [ 574.324290][T10540] ? tty_do_resize+0x170/0x170 [ 574.329020][T10540] do_vfs_ioctl+0x76a/0x1720 [ 574.333600][T10540] ? selinux_file_ioctl+0x72f/0x990 [ 574.338772][T10540] ? ioctl_preallocate+0x250/0x250 [ 574.343855][T10540] ? __fget+0x37b/0x3c0 [ 574.347980][T10540] ? vfs_write+0x422/0x4e0 [ 574.352367][T10540] ? fget_many+0x20/0x20 [ 574.356598][T10540] ? debug_smp_processor_id+0x20/0x20 [ 574.361958][T10540] ? security_file_ioctl+0x9d/0xb0 [ 574.367041][T10540] __x64_sys_ioctl+0xd4/0x110 [ 574.371688][T10540] do_syscall_64+0xcb/0x1e0 [ 574.376160][T10540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.382022][T10540] RIP: 0033:0x4665d9 [ 574.385886][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 574.405473][T10540] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.413872][T10540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 574.421834][T10540] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 574.429772][T10540] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 574.437714][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.445657][T10540] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 574.464063][T10540] Bluetooth: Can't register HCI device [ 574.473736][T10515] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 574.485573][T10515] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 574.503015][T10515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 574.520484][T10515] F2FS-fs (loop2): invalid crc_offset: 0 [ 574.526166][T10515] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:44 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa001, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541b, 0x0) 13:56:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x127f, 0xffffffffffffffff) 13:56:44 executing program 4 (fault-call:2 fault-nth:22): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:44 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000001500)={0x0, 0xaf47, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000eea000/0x1000)=nil, &(0x7f0000ee7000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 13:56:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x0) [ 574.661282][T10561] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 574.677727][T10568] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 574.678511][T10561] FAULT_INJECTION: forcing a failure. [ 574.678511][T10561] name failslab, interval 1, probability 0, space 0, times 0 [ 574.689675][T10568] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 574.699884][T10561] CPU: 1 PID: 10561 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 574.717084][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.727124][T10561] Call Trace: [ 574.730518][T10561] dump_stack+0x1d8/0x24e [ 574.734923][T10561] ? devkmsg_release+0x11c/0x11c [ 574.739856][T10561] ? __kasan_kmalloc+0x1a3/0x1e0 [ 574.740219][T10568] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 574.744780][T10561] ? show_regs_print_info+0x12/0x12 [ 574.744789][T10561] ? kmem_cache_alloc+0x115/0x290 [ 574.744801][T10561] ? __kernfs_new_node+0xdb/0x6d0 [ 574.768258][T10561] ? kernfs_new_node+0x95/0x160 [ 574.773143][T10561] ? sysfs_do_create_link_sd+0x85/0x100 [ 574.778856][T10561] should_fail+0x6f6/0x860 [ 574.783399][T10561] ? setup_fault_attr+0x3d0/0x3d0 [ 574.788262][T10568] F2FS-fs (loop2): invalid crc_offset: 0 [ 574.788418][T10561] ? mutex_unlock+0x19/0x40 [ 574.799640][T10561] ? kernfs_xattr_get+0x81/0x90 [ 574.804486][T10561] ? __kernfs_new_node+0xdb/0x6d0 [ 574.809586][T10561] should_failslab+0x5/0x20 [ 574.810400][T10568] handle_bad_sector: 2 callbacks suppressed [ 574.810407][T10568] attempt to access beyond end of device [ 574.810407][T10568] loop2: rw=12288, want=8200, limit=8192 [ 574.814080][T10561] kmem_cache_alloc+0x36/0x290 [ 574.814091][T10561] __kernfs_new_node+0xdb/0x6d0 [ 574.814102][T10561] ? kernfs_new_node+0x160/0x160 [ 574.814109][T10561] ? _raw_spin_lock+0xa3/0x1b0 [ 574.814128][T10561] ? security_kernfs_init_security+0x9a/0xb0 [ 574.841177][T10568] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 574.845569][T10561] ? __kernfs_new_node+0x50b/0x6d0 [ 574.845578][T10561] kernfs_new_node+0x95/0x160 [ 574.845587][T10561] __kernfs_create_file+0x45/0x260 [ 574.845598][T10561] sysfs_add_file_mode_ns+0x293/0x340 [ 574.883373][T10561] sysfs_create_file_ns+0x18c/0x2b0 [ 574.888550][T10561] ? sysfs_add_file_mode_ns+0x340/0x340 [ 574.894105][T10561] ? device_create_file+0xe2/0x1a0 [ 574.899187][T10561] device_add+0xc44/0x18a0 [ 574.903588][T10561] ? virtual_device_parent+0x50/0x50 [ 574.908849][T10561] hci_register_dev+0x32e/0x710 [ 574.913770][T10561] hci_uart_tty_ioctl+0x89e/0xa10 [ 574.918770][T10561] ? hci_uart_tty_write+0x10/0x10 [ 574.923768][T10561] tty_ioctl+0xf68/0x1710 [ 574.928095][T10561] ? tty_do_resize+0x170/0x170 [ 574.932839][T10561] ? avc_ss_reset+0x3a0/0x3a0 [ 574.937496][T10561] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 574.943622][T10561] ? refcount_inc_checked+0x50/0x50 [ 574.948894][T10561] ? proc_fail_nth_write+0x1d5/0x240 [ 574.954151][T10561] ? proc_fail_nth_read+0x1c0/0x1c0 [ 574.959330][T10561] ? __lru_cache_add+0x1bb/0x210 [ 574.964236][T10561] ? memset+0x1f/0x40 [ 574.968188][T10561] ? fsnotify+0x1332/0x13f0 [ 574.972663][T10561] ? tty_do_resize+0x170/0x170 [ 574.977400][T10561] do_vfs_ioctl+0x76a/0x1720 [ 574.982050][T10561] ? selinux_file_ioctl+0x72f/0x990 [ 574.987236][T10561] ? ioctl_preallocate+0x250/0x250 [ 574.992320][T10561] ? __fget+0x37b/0x3c0 [ 574.996449][T10561] ? vfs_write+0x422/0x4e0 [ 575.000842][T10561] ? fget_many+0x20/0x20 [ 575.005057][T10561] ? debug_smp_processor_id+0x20/0x20 [ 575.010402][T10561] ? security_file_ioctl+0x9d/0xb0 [ 575.015485][T10561] __x64_sys_ioctl+0xd4/0x110 [ 575.020131][T10561] do_syscall_64+0xcb/0x1e0 [ 575.024614][T10561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 575.030569][T10561] RIP: 0033:0x4665d9 [ 575.034439][T10561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 575.054147][T10561] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.062618][T10561] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 575.070565][T10561] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 575.078530][T10561] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 575.086487][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.094438][T10561] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 575.107652][T10561] Bluetooth: Can't register HCI device 13:56:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000008c0)={0x16, 0x0, 0x10000, 0x6, 0x8}, 0x40) 13:56:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x0) 13:56:44 executing program 4 (fault-call:2 fault-nth:23): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 575.178490][T10584] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 575.191927][T10584] FAULT_INJECTION: forcing a failure. [ 575.191927][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 575.205157][T10584] CPU: 1 PID: 10584 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 575.215667][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.225810][T10584] Call Trace: [ 575.229104][T10584] dump_stack+0x1d8/0x24e [ 575.233448][T10584] ? devkmsg_release+0x11c/0x11c [ 575.238481][T10584] ? __kasan_kmalloc+0x1a3/0x1e0 [ 575.243418][T10584] ? show_regs_print_info+0x12/0x12 [ 575.248618][T10584] ? kmem_cache_alloc+0x115/0x290 [ 575.253633][T10584] ? __kernfs_new_node+0xdb/0x6d0 [ 575.258646][T10584] ? kernfs_new_node+0x95/0x160 [ 575.263489][T10584] ? sysfs_do_create_link_sd+0x85/0x100 [ 575.269076][T10584] should_fail+0x6f6/0x860 [ 575.273487][T10584] ? setup_fault_attr+0x3d0/0x3d0 [ 575.278507][T10584] ? mutex_unlock+0x19/0x40 [ 575.283003][T10584] ? kernfs_xattr_get+0x81/0x90 [ 575.287845][T10584] ? __kernfs_new_node+0xdb/0x6d0 [ 575.292862][T10584] should_failslab+0x5/0x20 [ 575.297365][T10584] kmem_cache_alloc+0x36/0x290 [ 575.302128][T10584] __kernfs_new_node+0xdb/0x6d0 [ 575.307072][T10584] ? kernfs_new_node+0x160/0x160 [ 575.312045][T10584] ? _raw_spin_lock+0xa3/0x1b0 [ 575.316804][T10584] ? security_kernfs_init_security+0x9a/0xb0 [ 575.322951][T10584] ? __kernfs_new_node+0x50b/0x6d0 [ 575.328054][T10584] kernfs_new_node+0x95/0x160 [ 575.332760][T10584] __kernfs_create_file+0x45/0x260 [ 575.337869][T10584] sysfs_add_file_mode_ns+0x293/0x340 [ 575.343234][T10584] sysfs_create_file_ns+0x18c/0x2b0 [ 575.348427][T10584] ? sysfs_add_file_mode_ns+0x340/0x340 [ 575.354053][T10584] ? device_create_file+0xe2/0x1a0 [ 575.359157][T10584] device_add+0xc44/0x18a0 [ 575.363582][T10584] ? virtual_device_parent+0x50/0x50 [ 575.368866][T10584] ? h4_open+0x4f/0x140 [ 575.373016][T10584] hci_register_dev+0x32e/0x710 [ 575.377855][T10584] hci_uart_tty_ioctl+0x89e/0xa10 [ 575.382857][T10584] ? hci_uart_tty_write+0x10/0x10 [ 575.387865][T10584] tty_ioctl+0xf68/0x1710 [ 575.392179][T10584] ? tty_do_resize+0x170/0x170 [ 575.396915][T10584] ? avc_ss_reset+0x3a0/0x3a0 [ 575.401581][T10584] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 575.407733][T10584] ? refcount_inc_checked+0x50/0x50 [ 575.412908][T10584] ? memcg_check_events+0x5c/0x5b0 [ 575.417997][T10584] ? proc_fail_nth_write+0x1d5/0x240 [ 575.423504][T10584] ? proc_fail_nth_read+0x1c0/0x1c0 [ 575.428821][T10584] ? __lru_cache_add+0x1c4/0x210 [ 575.433734][T10584] ? memset+0x1f/0x40 [ 575.437690][T10584] ? fsnotify+0x1332/0x13f0 [ 575.442166][T10584] ? tty_do_resize+0x170/0x170 [ 575.446903][T10584] do_vfs_ioctl+0x76a/0x1720 [ 575.451472][T10584] ? selinux_file_ioctl+0x72f/0x990 [ 575.456676][T10584] ? ioctl_preallocate+0x250/0x250 [ 575.461769][T10584] ? __fget+0x37b/0x3c0 [ 575.465961][T10584] ? vfs_write+0x422/0x4e0 [ 575.470923][T10584] ? fget_many+0x20/0x20 [ 575.475138][T10584] ? debug_smp_processor_id+0x20/0x20 [ 575.480569][T10584] ? security_file_ioctl+0x9d/0xb0 [ 575.485653][T10584] __x64_sys_ioctl+0xd4/0x110 [ 575.490306][T10584] do_syscall_64+0xcb/0x1e0 [ 575.494788][T10584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 575.500650][T10584] RIP: 0033:0x4665d9 [ 575.504554][T10584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 575.524142][T10584] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.532629][T10584] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 575.540589][T10584] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 575.548552][T10584] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 575.556599][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.564638][T10584] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 13:56:45 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xac03, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:45 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000240)) 13:56:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x0) 13:56:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:45 executing program 4 (fault-call:2 fault-nth:24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 575.581092][T10584] Bluetooth: Can't register HCI device 13:56:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x0) 13:56:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="4bcd6a487f000000dec37e"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffdf3}, {&(0x7f00000193c0)=""/102385, 0xffffffffffffffaf}], 0x3, 0x0, 0x1d, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 575.623213][T10600] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 575.631816][T10600] FAULT_INJECTION: forcing a failure. [ 575.631816][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 575.643131][T10604] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 575.653728][T10604] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 575.663837][T10604] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 575.667880][T10600] CPU: 1 PID: 10600 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 575.682217][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.683033][T10604] F2FS-fs (loop2): invalid crc_offset: 0 [ 575.692265][T10600] Call Trace: [ 575.692283][T10600] dump_stack+0x1d8/0x24e [ 575.692298][T10600] ? devkmsg_release+0x11c/0x11c [ 575.701470][T10604] attempt to access beyond end of device [ 575.701470][T10604] loop2: rw=12288, want=8200, limit=8192 [ 575.705501][T10600] ? mutex_unlock+0x19/0x40 [ 575.710448][T10604] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 575.721475][T10600] ? show_regs_print_info+0x12/0x12 [ 575.721483][T10600] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 575.721496][T10600] should_fail+0x6f6/0x860 [ 575.748399][T10600] ? setup_fault_attr+0x3d0/0x3d0 [ 575.753396][T10600] ? _raw_spin_lock+0xa3/0x1b0 [ 575.758134][T10600] ? __kernfs_new_node+0xdb/0x6d0 [ 575.763132][T10600] should_failslab+0x5/0x20 [ 575.767608][T10600] kmem_cache_alloc+0x36/0x290 [ 575.772346][T10600] __kernfs_new_node+0xdb/0x6d0 [ 575.777170][T10600] ? mutex_lock+0xa6/0x110 [ 575.781575][T10600] ? kernfs_new_node+0x160/0x160 [ 575.786497][T10600] ? _raw_spin_lock+0xa3/0x1b0 [ 575.791247][T10600] ? kernfs_activate+0x3fc/0x420 [ 575.796246][T10600] kernfs_create_dir_ns+0x90/0x220 [ 575.801338][T10600] internal_create_group+0x294/0xf10 [ 575.806733][T10600] ? sysfs_create_group+0x20/0x20 [ 575.811732][T10600] ? sysfs_add_file_mode_ns+0x340/0x340 [ 575.817252][T10600] ? bus_add_device+0x92/0x3f0 [ 575.821992][T10600] dpm_sysfs_add+0x59/0x260 [ 575.826466][T10600] device_add+0xde7/0x18a0 [ 575.830908][T10600] ? virtual_device_parent+0x50/0x50 [ 575.836167][T10600] ? h4_open+0x4f/0x140 [ 575.840296][T10600] hci_register_dev+0x32e/0x710 [ 575.845120][T10600] hci_uart_tty_ioctl+0x89e/0xa10 [ 575.850135][T10600] ? hci_uart_tty_write+0x10/0x10 [ 575.855130][T10600] tty_ioctl+0xf68/0x1710 [ 575.859444][T10600] ? tty_do_resize+0x170/0x170 [ 575.864180][T10600] ? avc_ss_reset+0x3a0/0x3a0 [ 575.868827][T10600] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 575.874951][T10600] ? refcount_inc_checked+0x50/0x50 [ 575.880136][T10600] ? memcg_check_events+0x5c/0x5b0 [ 575.885220][T10600] ? proc_fail_nth_write+0x1d5/0x240 [ 575.890497][T10600] ? proc_fail_nth_read+0x1c0/0x1c0 [ 575.895667][T10600] ? __lru_cache_add+0x1c4/0x210 [ 575.900573][T10600] ? memset+0x1f/0x40 [ 575.904527][T10600] ? fsnotify+0x1332/0x13f0 [ 575.909000][T10600] ? tty_do_resize+0x170/0x170 [ 575.913734][T10600] do_vfs_ioctl+0x76a/0x1720 [ 575.918297][T10600] ? selinux_file_ioctl+0x72f/0x990 [ 575.923491][T10600] ? ioctl_preallocate+0x250/0x250 [ 575.928591][T10600] ? __fget+0x37b/0x3c0 [ 575.932760][T10600] ? vfs_write+0x422/0x4e0 [ 575.937154][T10600] ? fget_many+0x20/0x20 [ 575.941390][T10600] ? debug_smp_processor_id+0x20/0x20 [ 575.946735][T10600] ? security_file_ioctl+0x9d/0xb0 [ 575.951818][T10600] __x64_sys_ioctl+0xd4/0x110 [ 575.956554][T10600] do_syscall_64+0xcb/0x1e0 [ 575.961040][T10600] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 575.966906][T10600] RIP: 0033:0x4665d9 [ 575.970781][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 575.990443][T10600] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.998825][T10600] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 576.006769][T10600] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 576.014713][T10600] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 13:56:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x0) [ 576.022657][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.030603][T10600] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 576.042884][T10600] Bluetooth: Can't register HCI device 13:56:45 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000080), 0x40) 13:56:45 executing program 4 (fault-call:2 fault-nth:25): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 576.103031][T10630] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 576.117842][T10630] FAULT_INJECTION: forcing a failure. [ 576.117842][T10630] name failslab, interval 1, probability 0, space 0, times 0 [ 576.147282][T10630] CPU: 1 PID: 10630 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 576.157525][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.167584][T10630] Call Trace: [ 576.170873][T10630] dump_stack+0x1d8/0x24e [ 576.175196][T10630] ? devkmsg_release+0x11c/0x11c [ 576.180137][T10630] ? mutex_unlock+0x19/0x40 [ 576.184661][T10630] ? show_regs_print_info+0x12/0x12 [ 576.189878][T10630] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 576.196119][T10630] should_fail+0x6f6/0x860 [ 576.200526][T10630] ? setup_fault_attr+0x3d0/0x3d0 [ 576.205542][T10630] ? _raw_spin_lock+0xa3/0x1b0 [ 576.210328][T10630] ? __kernfs_new_node+0xdb/0x6d0 [ 576.215375][T10630] should_failslab+0x5/0x20 [ 576.219868][T10630] kmem_cache_alloc+0x36/0x290 [ 576.225666][T10630] __kernfs_new_node+0xdb/0x6d0 [ 576.230507][T10630] ? mutex_lock+0xa6/0x110 [ 576.234908][T10630] ? kernfs_new_node+0x160/0x160 [ 576.239831][T10630] ? mutex_lock+0xa6/0x110 [ 576.244241][T10630] ? kernfs_activate+0x3fc/0x420 [ 576.249170][T10630] kernfs_new_node+0x95/0x160 [ 576.253843][T10630] __kernfs_create_file+0x45/0x260 [ 576.259026][T10630] sysfs_add_file_mode_ns+0x293/0x340 [ 576.264375][T10630] sysfs_merge_group+0x204/0x440 [ 576.269317][T10630] ? sysfs_remove_groups+0xb0/0xb0 [ 576.274404][T10630] ? sysfs_add_file_mode_ns+0x340/0x340 [ 576.279944][T10630] ? bus_add_device+0x92/0x3f0 [ 576.284728][T10630] dpm_sysfs_add+0xbd/0x260 [ 576.289205][T10630] device_add+0xde7/0x18a0 [ 576.293594][T10630] ? virtual_device_parent+0x50/0x50 [ 576.298854][T10630] ? h4_open+0x4f/0x140 [ 576.303160][T10630] hci_register_dev+0x32e/0x710 [ 576.307988][T10630] hci_uart_tty_ioctl+0x89e/0xa10 [ 576.312993][T10630] ? hci_uart_tty_write+0x10/0x10 [ 576.318012][T10630] tty_ioctl+0xf68/0x1710 [ 576.322316][T10630] ? tty_do_resize+0x170/0x170 [ 576.327053][T10630] ? avc_ss_reset+0x3a0/0x3a0 [ 576.331701][T10630] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 576.337825][T10630] ? refcount_inc_checked+0x50/0x50 [ 576.342995][T10630] ? memcg_check_events+0x5c/0x5b0 [ 576.348121][T10630] ? proc_fail_nth_write+0x1d5/0x240 [ 576.353380][T10630] ? proc_fail_nth_read+0x1c0/0x1c0 [ 576.358549][T10630] ? __lru_cache_add+0x1c4/0x210 [ 576.363459][T10630] ? memset+0x1f/0x40 [ 576.367436][T10630] ? fsnotify+0x1332/0x13f0 [ 576.371959][T10630] ? tty_do_resize+0x170/0x170 [ 576.376720][T10630] do_vfs_ioctl+0x76a/0x1720 [ 576.381291][T10630] ? selinux_file_ioctl+0x72f/0x990 [ 576.386470][T10630] ? ioctl_preallocate+0x250/0x250 [ 576.391550][T10630] ? __fget+0x37b/0x3c0 [ 576.395703][T10630] ? vfs_write+0x422/0x4e0 [ 576.400093][T10630] ? fget_many+0x20/0x20 [ 576.404480][T10630] ? debug_smp_processor_id+0x20/0x20 [ 576.409826][T10630] ? security_file_ioctl+0x9d/0xb0 [ 576.414929][T10630] __x64_sys_ioctl+0xd4/0x110 [ 576.419579][T10630] do_syscall_64+0xcb/0x1e0 [ 576.424084][T10630] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.429957][T10630] RIP: 0033:0x4665d9 [ 576.433824][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.453422][T10630] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.461819][T10630] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 576.469779][T10630] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 576.477732][T10630] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.485685][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.493715][T10630] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 576.508994][T10630] Bluetooth: Can't register HCI device [ 576.519275][T10604] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 576.528230][T10604] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 576.538778][T10604] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 576.548268][T10604] F2FS-fs (loop2): invalid crc_offset: 0 [ 576.553986][T10604] attempt to access beyond end of device [ 576.553986][T10604] loop2: rw=12288, want=8200, limit=8192 [ 576.565888][T10604] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xad03, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x0) 13:56:46 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x4082) 13:56:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:46 executing program 4 (fault-call:2 fault-nth:26): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 576.706577][T10650] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 576.721303][T10652] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 576.730276][T10650] FAULT_INJECTION: forcing a failure. [ 576.730276][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 576.744065][T10650] CPU: 1 PID: 10650 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 576.754295][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.754760][T10652] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 576.764338][T10650] Call Trace: [ 576.764355][T10650] dump_stack+0x1d8/0x24e [ 576.764364][T10650] ? devkmsg_release+0x11c/0x11c [ 576.764373][T10650] ? mutex_unlock+0x19/0x40 [ 576.764381][T10650] ? show_regs_print_info+0x12/0x12 [ 576.764395][T10650] ? selinux_kernfs_init_security+0x1b2/0x7e0 13:56:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 576.787206][T10652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 576.789060][T10650] should_fail+0x6f6/0x860 [ 576.789074][T10650] ? setup_fault_attr+0x3d0/0x3d0 [ 576.799098][T10652] F2FS-fs (loop2): invalid crc_offset: 0 [ 576.800289][T10650] ? _raw_spin_lock+0xa3/0x1b0 [ 576.800298][T10650] ? __kernfs_new_node+0xdb/0x6d0 [ 576.800311][T10650] should_failslab+0x5/0x20 [ 576.815267][T10652] attempt to access beyond end of device [ 576.815267][T10652] loop2: rw=12288, want=8200, limit=8192 [ 576.817827][T10650] kmem_cache_alloc+0x36/0x290 [ 576.817838][T10650] __kernfs_new_node+0xdb/0x6d0 [ 576.817849][T10650] ? mutex_lock+0xa6/0x110 [ 576.817855][T10650] ? kernfs_new_node+0x160/0x160 [ 576.817873][T10650] ? mutex_lock+0xa6/0x110 [ 576.824923][T10652] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 576.828224][T10650] ? kernfs_activate+0x3fc/0x420 [ 576.828233][T10650] kernfs_new_node+0x95/0x160 [ 576.828243][T10650] __kernfs_create_file+0x45/0x260 [ 576.828251][T10650] sysfs_add_file_mode_ns+0x293/0x340 [ 576.828260][T10650] sysfs_merge_group+0x204/0x440 [ 576.828272][T10650] ? sysfs_remove_groups+0xb0/0xb0 [ 576.908891][T10650] ? sysfs_add_file_mode_ns+0x340/0x340 [ 576.914410][T10650] ? bus_add_device+0x92/0x3f0 [ 576.919164][T10650] dpm_sysfs_add+0xbd/0x260 [ 576.923647][T10650] device_add+0xde7/0x18a0 [ 576.928047][T10650] ? virtual_device_parent+0x50/0x50 [ 576.933302][T10650] ? h4_open+0x4f/0x140 [ 576.937433][T10650] hci_register_dev+0x32e/0x710 [ 576.942275][T10650] hci_uart_tty_ioctl+0x89e/0xa10 [ 576.947289][T10650] ? hci_uart_tty_write+0x10/0x10 [ 576.952284][T10650] tty_ioctl+0xf68/0x1710 [ 576.957203][T10650] ? tty_do_resize+0x170/0x170 [ 576.962288][T10650] ? avc_ss_reset+0x3a0/0x3a0 [ 576.966964][T10650] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 576.973178][T10650] ? refcount_inc_checked+0x50/0x50 [ 576.978349][T10650] ? memcg_check_events+0x5c/0x5b0 [ 576.983438][T10650] ? proc_fail_nth_write+0x1d5/0x240 [ 576.988695][T10650] ? proc_fail_nth_read+0x1c0/0x1c0 [ 576.993865][T10650] ? __lru_cache_add+0x1c4/0x210 [ 576.998776][T10650] ? memset+0x1f/0x40 [ 577.002730][T10650] ? fsnotify+0x1332/0x13f0 [ 577.007205][T10650] ? tty_do_resize+0x170/0x170 [ 577.011954][T10650] do_vfs_ioctl+0x76a/0x1720 [ 577.016519][T10650] ? selinux_file_ioctl+0x72f/0x990 [ 577.021908][T10650] ? ioctl_preallocate+0x250/0x250 [ 577.027013][T10650] ? __fget+0x37b/0x3c0 [ 577.031146][T10650] ? vfs_write+0x422/0x4e0 [ 577.035538][T10650] ? fget_many+0x20/0x20 [ 577.039755][T10650] ? debug_smp_processor_id+0x20/0x20 [ 577.045113][T10650] ? security_file_ioctl+0x9d/0xb0 [ 577.050203][T10650] __x64_sys_ioctl+0xd4/0x110 [ 577.054855][T10650] do_syscall_64+0xcb/0x1e0 [ 577.059330][T10650] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 577.065194][T10650] RIP: 0033:0x4665d9 [ 577.069063][T10650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 577.088640][T10650] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.097038][T10650] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:56:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) 13:56:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x0) 13:56:46 executing program 5: clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, r0/1000+10000}) 13:56:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 577.104982][T10650] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 577.112928][T10650] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 577.120877][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.128821][T10650] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 577.178985][T10650] Bluetooth: Can't register HCI device [ 577.272391][T10652] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 577.282498][T10652] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 577.290900][T10652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 577.305825][T10652] F2FS-fs (loop2): invalid crc_offset: 0 [ 577.314272][T10652] attempt to access beyond end of device [ 577.314272][T10652] loop2: rw=12288, want=8200, limit=8192 [ 577.327440][T10652] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:47 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xae03, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:47 executing program 4 (fault-call:2 fault-nth:27): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x0) 13:56:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c0a, 0xffffffffffffffff) 13:56:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0x0, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:47 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0x0, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) 13:56:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x0) 13:56:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4020940d, 0xffffffffffffffff) [ 577.436211][T10691] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 577.449613][T10691] FAULT_INJECTION: forcing a failure. [ 577.449613][T10691] name failslab, interval 1, probability 0, space 0, times 0 [ 577.471744][T10691] CPU: 1 PID: 10691 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 577.481993][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.485819][T10702] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 577.492047][T10691] Call Trace: [ 577.492064][T10691] dump_stack+0x1d8/0x24e [ 577.492075][T10691] ? devkmsg_release+0x11c/0x11c [ 577.492084][T10691] ? mutex_unlock+0x19/0x40 [ 577.492099][T10691] ? show_regs_print_info+0x12/0x12 [ 577.501116][T10702] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 577.504137][T10691] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 577.504147][T10691] should_fail+0x6f6/0x860 [ 577.504159][T10691] ? setup_fault_attr+0x3d0/0x3d0 [ 577.511388][T10702] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 577.513375][T10691] ? _raw_spin_lock+0xa3/0x1b0 [ 577.513385][T10691] ? __kernfs_new_node+0xdb/0x6d0 [ 577.513399][T10691] should_failslab+0x5/0x20 [ 577.525451][T10702] F2FS-fs (loop2): invalid crc_offset: 0 [ 577.530744][T10691] kmem_cache_alloc+0x36/0x290 [ 577.530762][T10691] __kernfs_new_node+0xdb/0x6d0 13:56:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x0) [ 577.530773][T10691] ? mutex_lock+0xa6/0x110 [ 577.530781][T10691] ? kernfs_new_node+0x160/0x160 [ 577.530787][T10691] ? mutex_lock+0xa6/0x110 [ 577.530797][T10691] ? kernfs_activate+0x3fc/0x420 [ 577.530804][T10691] kernfs_new_node+0x95/0x160 [ 577.530814][T10691] __kernfs_create_file+0x45/0x260 [ 577.530824][T10691] sysfs_add_file_mode_ns+0x293/0x340 [ 577.530833][T10691] sysfs_merge_group+0x204/0x440 [ 577.530842][T10691] ? sysfs_remove_groups+0xb0/0xb0 [ 577.530850][T10691] ? sysfs_add_file_mode_ns+0x340/0x340 [ 577.530856][T10691] ? bus_add_device+0x92/0x3f0 [ 577.530869][T10691] dpm_sysfs_add+0xbd/0x260 [ 577.567893][T10702] attempt to access beyond end of device [ 577.567893][T10702] loop2: rw=12288, want=8200, limit=8192 [ 577.568740][T10691] device_add+0xde7/0x18a0 [ 577.568753][T10691] ? virtual_device_parent+0x50/0x50 [ 577.568765][T10691] ? h4_open+0x4f/0x140 [ 577.601471][T10702] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 577.602700][T10691] hci_register_dev+0x32e/0x710 [ 577.602711][T10691] hci_uart_tty_ioctl+0x89e/0xa10 [ 577.602723][T10691] ? hci_uart_tty_write+0x10/0x10 [ 577.689261][T10691] tty_ioctl+0xf68/0x1710 [ 577.693589][T10691] ? tty_do_resize+0x170/0x170 [ 577.698326][T10691] ? avc_ss_reset+0x3a0/0x3a0 [ 577.702977][T10691] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 577.709102][T10691] ? refcount_inc_checked+0x50/0x50 [ 577.714275][T10691] ? proc_fail_nth_write+0x1d5/0x240 [ 577.719533][T10691] ? proc_fail_nth_read+0x1c0/0x1c0 [ 577.724703][T10691] ? __lru_cache_add+0x1c4/0x210 [ 577.729612][T10691] ? memset+0x1f/0x40 [ 577.733568][T10691] ? fsnotify+0x1332/0x13f0 [ 577.738044][T10691] ? tty_do_resize+0x170/0x170 [ 577.742781][T10691] do_vfs_ioctl+0x76a/0x1720 [ 577.747344][T10691] ? selinux_file_ioctl+0x72f/0x990 [ 577.752514][T10691] ? ioctl_preallocate+0x250/0x250 [ 577.757601][T10691] ? __fget+0x37b/0x3c0 [ 577.761732][T10691] ? vfs_write+0x422/0x4e0 [ 577.766121][T10691] ? fget_many+0x20/0x20 [ 577.770335][T10691] ? debug_smp_processor_id+0x20/0x20 [ 577.775681][T10691] ? security_file_ioctl+0x9d/0xb0 [ 577.780767][T10691] __x64_sys_ioctl+0xd4/0x110 [ 577.785420][T10691] do_syscall_64+0xcb/0x1e0 [ 577.789896][T10691] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 577.795758][T10691] RIP: 0033:0x4665d9 [ 577.799628][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 577.819293][T10691] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.827706][T10691] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:56:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0x0, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) [ 577.835656][T10691] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 577.843600][T10691] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 577.851545][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.859495][T10691] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 577.907041][T10691] Bluetooth: Can't register HCI device [ 578.005196][T10702] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 578.014075][T10702] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 578.023354][T10702] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 578.038035][T10702] F2FS-fs (loop2): invalid crc_offset: 0 [ 578.043720][T10702] attempt to access beyond end of device [ 578.043720][T10702] loop2: rw=12288, want=8200, limit=8192 [ 578.059993][T10702] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:48 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xae26, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x0) 13:56:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 13:56:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x0, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:48 executing program 4 (fault-call:2 fault-nth:28): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x0) 13:56:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x0, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x0) [ 578.263930][T10738] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 578.272587][T10738] FAULT_INJECTION: forcing a failure. [ 578.272587][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 578.285452][T10738] CPU: 1 PID: 10738 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 578.295686][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.305818][T10738] Call Trace: [ 578.309106][T10738] dump_stack+0x1d8/0x24e 13:56:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200), 0x4) 13:56:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x0) 13:56:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) [ 578.313435][T10738] ? devkmsg_release+0x11c/0x11c [ 578.318380][T10738] ? mutex_unlock+0x19/0x40 [ 578.322881][T10738] ? show_regs_print_info+0x12/0x12 [ 578.328076][T10738] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 578.334139][T10738] should_fail+0x6f6/0x860 [ 578.338553][T10738] ? setup_fault_attr+0x3d0/0x3d0 [ 578.343572][T10738] ? _raw_spin_lock+0xa3/0x1b0 [ 578.348429][T10738] ? __kernfs_new_node+0xdb/0x6d0 [ 578.353449][T10738] should_failslab+0x5/0x20 [ 578.357948][T10738] kmem_cache_alloc+0x36/0x290 [ 578.362705][T10738] __kernfs_new_node+0xdb/0x6d0 [ 578.367722][T10738] ? mutex_lock+0xa6/0x110 [ 578.372133][T10738] ? kernfs_new_node+0x160/0x160 [ 578.377061][T10738] ? mutex_lock+0xa6/0x110 [ 578.381488][T10738] ? kernfs_activate+0x3fc/0x420 [ 578.386414][T10738] kernfs_new_node+0x95/0x160 [ 578.391079][T10738] __kernfs_create_file+0x45/0x260 [ 578.396181][T10738] sysfs_add_file_mode_ns+0x293/0x340 [ 578.401545][T10738] sysfs_merge_group+0x204/0x440 [ 578.406470][T10738] ? sysfs_remove_groups+0xb0/0xb0 [ 578.411580][T10738] ? sysfs_add_file_mode_ns+0x340/0x340 [ 578.417119][T10738] ? bus_add_device+0x92/0x3f0 [ 578.421886][T10738] dpm_sysfs_add+0xbd/0x260 [ 578.426466][T10738] device_add+0xde7/0x18a0 [ 578.430882][T10738] ? virtual_device_parent+0x50/0x50 [ 578.436156][T10738] ? h4_open+0x4f/0x140 [ 578.440300][T10738] hci_register_dev+0x32e/0x710 [ 578.445172][T10738] hci_uart_tty_ioctl+0x89e/0xa10 [ 578.450188][T10738] ? hci_uart_tty_write+0x10/0x10 [ 578.455199][T10738] tty_ioctl+0xf68/0x1710 [ 578.459519][T10738] ? tty_do_resize+0x170/0x170 [ 578.464271][T10738] ? avc_ss_reset+0x3a0/0x3a0 [ 578.468946][T10738] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 578.475106][T10738] ? refcount_inc_checked+0x50/0x50 [ 578.480294][T10738] ? memcg_check_events+0x5c/0x5b0 [ 578.485396][T10738] ? proc_fail_nth_write+0x1d5/0x240 [ 578.490671][T10738] ? proc_fail_nth_read+0x1c0/0x1c0 [ 578.495859][T10738] ? __lru_cache_add+0x1c4/0x210 [ 578.500796][T10738] ? memset+0x1f/0x40 [ 578.504766][T10738] ? fsnotify+0x1332/0x13f0 [ 578.509256][T10738] ? tty_do_resize+0x170/0x170 [ 578.514013][T10738] do_vfs_ioctl+0x76a/0x1720 [ 578.518614][T10738] ? selinux_file_ioctl+0x72f/0x990 [ 578.523814][T10738] ? ioctl_preallocate+0x250/0x250 [ 578.528919][T10738] ? __fget+0x37b/0x3c0 [ 578.532196][T10763] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 578.533066][T10738] ? vfs_write+0x422/0x4e0 [ 578.542026][T10763] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 578.546235][T10738] ? fget_many+0x20/0x20 [ 578.546243][T10738] ? debug_smp_processor_id+0x20/0x20 [ 578.546256][T10738] ? security_file_ioctl+0x9d/0xb0 [ 578.564791][T10763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 578.568649][T10738] __x64_sys_ioctl+0xd4/0x110 [ 578.568658][T10738] do_syscall_64+0xcb/0x1e0 [ 578.568668][T10738] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.568675][T10738] RIP: 0033:0x4665d9 [ 578.568688][T10738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.583288][T10763] F2FS-fs (loop2): invalid crc_offset: 0 [ 578.586022][T10738] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.586030][T10738] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 578.586034][T10738] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 578.586042][T10738] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.594967][T10763] attempt to access beyond end of device [ 578.594967][T10763] loop2: rw=12288, want=8200, limit=8192 [ 578.595766][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.595771][T10738] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 578.602335][T10738] Bluetooth: Can't register HCI device [ 578.618221][T10763] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 578.834878][T10763] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 578.843804][T10763] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 578.852064][T10763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 578.861778][T10763] F2FS-fs (loop2): invalid crc_offset: 0 [ 578.868169][T10763] attempt to access beyond end of device [ 578.868169][T10763] loop2: rw=12288, want=8200, limit=8192 [ 578.880094][T10763] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:48 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xaf03, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x0) 13:56:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="82"], 0x38}}, 0x0) 13:56:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x0, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 13:56:48 executing program 4 (fault-call:2 fault-nth:29): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 13:56:48 executing program 5: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 13:56:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x0) 13:56:48 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f0000000080), 0x40) [ 579.103763][T10782] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 579.116334][T10782] FAULT_INJECTION: forcing a failure. [ 579.116334][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 579.135996][T10782] CPU: 1 PID: 10782 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 13:56:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 13:56:48 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x17, &(0x7f0000000400), 0x10) [ 579.146237][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.156283][T10782] Call Trace: [ 579.159575][T10782] dump_stack+0x1d8/0x24e [ 579.163902][T10782] ? devkmsg_release+0x11c/0x11c [ 579.168836][T10782] ? mutex_unlock+0x19/0x40 [ 579.173333][T10782] ? show_regs_print_info+0x12/0x12 [ 579.178527][T10782] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 579.184594][T10782] should_fail+0x6f6/0x860 [ 579.189007][T10782] ? setup_fault_attr+0x3d0/0x3d0 [ 579.194028][T10782] ? _raw_spin_lock+0xa3/0x1b0 [ 579.198882][T10782] ? __kernfs_new_node+0xdb/0x6d0 [ 579.203901][T10782] should_failslab+0x5/0x20 [ 579.208404][T10782] kmem_cache_alloc+0x36/0x290 [ 579.213186][T10782] __kernfs_new_node+0xdb/0x6d0 [ 579.215161][T10803] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 579.218033][T10782] ? mutex_lock+0xa6/0x110 [ 579.218043][T10782] ? kernfs_new_node+0x160/0x160 [ 579.218050][T10782] ? mutex_lock+0xa6/0x110 [ 579.218063][T10782] ? kernfs_activate+0x3fc/0x420 [ 579.227045][T10803] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 579.231195][T10782] kernfs_new_node+0x95/0x160 [ 579.231205][T10782] __kernfs_create_file+0x45/0x260 [ 579.231221][T10782] sysfs_add_file_mode_ns+0x293/0x340 [ 579.238476][T10803] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 579.240698][T10782] sysfs_merge_group+0x204/0x440 [ 579.240711][T10782] ? sysfs_remove_groups+0xb0/0xb0 [ 579.252531][T10803] F2FS-fs (loop2): invalid crc_offset: 0 [ 579.253369][T10782] ? sysfs_add_file_mode_ns+0x340/0x340 [ 579.253378][T10782] ? bus_add_device+0x92/0x3f0 [ 579.253391][T10782] dpm_sysfs_add+0xbd/0x260 [ 579.264595][T10803] attempt to access beyond end of device [ 579.264595][T10803] loop2: rw=12288, want=8200, limit=8192 [ 579.268477][T10782] device_add+0xde7/0x18a0 [ 579.268488][T10782] ? virtual_device_parent+0x50/0x50 [ 579.268496][T10782] ? h4_open+0x4f/0x140 [ 579.268510][T10782] hci_register_dev+0x32e/0x710 [ 579.277079][T10803] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 579.281649][T10782] hci_uart_tty_ioctl+0x89e/0xa10 [ 579.281658][T10782] ? hci_uart_tty_write+0x10/0x10 [ 579.281671][T10782] tty_ioctl+0xf68/0x1710 [ 579.357854][T10782] ? tty_do_resize+0x170/0x170 [ 579.362601][T10782] ? avc_ss_reset+0x3a0/0x3a0 [ 579.367295][T10782] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 579.373429][T10782] ? refcount_inc_checked+0x50/0x50 [ 579.378605][T10782] ? memcg_check_events+0x5c/0x5b0 [ 579.383696][T10782] ? proc_fail_nth_write+0x1d5/0x240 [ 579.388965][T10782] ? proc_fail_nth_read+0x1c0/0x1c0 [ 579.394137][T10782] ? __lru_cache_add+0x1c4/0x210 [ 579.399046][T10782] ? memset+0x1f/0x40 [ 579.403001][T10782] ? fsnotify+0x1332/0x13f0 [ 579.407476][T10782] ? tty_do_resize+0x170/0x170 [ 579.412214][T10782] do_vfs_ioctl+0x76a/0x1720 [ 579.416807][T10782] ? selinux_file_ioctl+0x72f/0x990 [ 579.421980][T10782] ? ioctl_preallocate+0x250/0x250 [ 579.427067][T10782] ? __fget+0x37b/0x3c0 [ 579.431283][T10782] ? vfs_write+0x422/0x4e0 [ 579.435672][T10782] ? fget_many+0x20/0x20 [ 579.439889][T10782] ? debug_smp_processor_id+0x20/0x20 [ 579.445250][T10782] ? security_file_ioctl+0x9d/0xb0 [ 579.450354][T10782] __x64_sys_ioctl+0xd4/0x110 [ 579.455100][T10782] do_syscall_64+0xcb/0x1e0 [ 579.459594][T10782] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.465479][T10782] RIP: 0033:0x4665d9 [ 579.469351][T10782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.488951][T10782] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.497341][T10782] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 579.505286][T10782] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 579.513317][T10782] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.521273][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.529225][T10782] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 579.573232][T10782] Bluetooth: Can't register HCI device [ 579.645536][T10803] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 579.654756][T10803] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 579.662826][T10803] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 579.677840][T10803] F2FS-fs (loop2): invalid crc_offset: 0 [ 579.685351][T10803] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:49 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb003, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) 13:56:49 executing program 5: clock_gettime(0xe771a3e373643664, 0x0) 13:56:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x0) 13:56:49 executing program 4 (fault-call:2 fault-nth:30): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:56:49 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:56:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x0, &(0x7f0000000000)) 13:56:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "573e6646df8593d9", "add78d87cde1c0b0932de1ac86bdce96", "f53776a0", "e11fb6beeb06dd6e"}, 0x28) 13:56:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x0) 13:56:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x0, &(0x7f0000000000)) 13:56:49 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0xa, 0x0, 0x0) [ 579.819481][T10831] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 579.838482][T10831] FAULT_INJECTION: forcing a failure. [ 579.838482][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 579.855078][T10831] CPU: 1 PID: 10831 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 13:56:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x0, &(0x7f0000000000)) [ 579.865497][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.875543][T10831] Call Trace: [ 579.878834][T10831] dump_stack+0x1d8/0x24e [ 579.883174][T10831] ? devkmsg_release+0x11c/0x11c [ 579.888108][T10831] ? show_regs_print_info+0x12/0x12 [ 579.893305][T10831] ? kernfs_add_one+0x49e/0x5c0 [ 579.898147][T10831] should_fail+0x6f6/0x860 [ 579.902594][T10831] ? setup_fault_attr+0x3d0/0x3d0 [ 579.907606][T10831] ? kernfs_put+0x46/0x4b0 [ 579.912014][T10831] ? sysfs_add_file_mode_ns+0x2b4/0x340 [ 579.917551][T10831] ? kobject_uevent_env+0x252/0x1000 [ 579.922923][T10831] should_failslab+0x5/0x20 [ 579.927419][T10831] kmem_cache_alloc_trace+0x39/0x2b0 [ 579.932682][T10831] kobject_uevent_env+0x252/0x1000 [ 579.937788][T10831] device_add+0xf42/0x18a0 [ 579.942182][T10831] ? virtual_device_parent+0x50/0x50 [ 579.947583][T10831] ? h4_open+0x4f/0x140 [ 579.951885][T10831] hci_register_dev+0x32e/0x710 [ 579.956711][T10831] hci_uart_tty_ioctl+0x89e/0xa10 [ 579.961710][T10831] ? hci_uart_tty_write+0x10/0x10 [ 579.966707][T10831] tty_ioctl+0xf68/0x1710 [ 579.971127][T10831] ? tty_do_resize+0x170/0x170 [ 579.975958][T10831] ? avc_ss_reset+0x3a0/0x3a0 [ 579.980703][T10831] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 579.986855][T10831] ? refcount_inc_checked+0x50/0x50 [ 579.992032][T10831] ? proc_fail_nth_write+0x1d5/0x240 [ 579.997392][T10831] ? proc_fail_nth_read+0x1c0/0x1c0 [ 580.002581][T10831] ? __lru_cache_add+0x1c4/0x210 [ 580.007590][T10831] ? memset+0x1f/0x40 [ 580.011552][T10831] ? fsnotify+0x1332/0x13f0 [ 580.016030][T10831] ? tty_do_resize+0x170/0x170 [ 580.020859][T10831] do_vfs_ioctl+0x76a/0x1720 [ 580.025451][T10831] ? selinux_file_ioctl+0x72f/0x990 [ 580.030741][T10831] ? ioctl_preallocate+0x250/0x250 [ 580.035835][T10831] ? __fget+0x37b/0x3c0 [ 580.040025][T10831] ? vfs_write+0x422/0x4e0 [ 580.044538][T10831] ? fget_many+0x20/0x20 [ 580.048966][T10831] ? debug_smp_processor_id+0x20/0x20 [ 580.054315][T10831] ? security_file_ioctl+0x9d/0xb0 [ 580.059404][T10831] __x64_sys_ioctl+0xd4/0x110 [ 580.064153][T10831] do_syscall_64+0xcb/0x1e0 [ 580.068636][T10831] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 580.074503][T10831] RIP: 0033:0x4665d9 [ 580.078393][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 580.098065][T10831] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.106452][T10831] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 580.114431][T10831] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 580.122435][T10831] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 580.130384][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.138337][T10831] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 580.159878][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 580.172637][T10825] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 580.184213][T10825] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 580.197738][T10825] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 580.216916][T10825] F2FS-fs (loop2): invalid crc_offset: 0 [ 580.224824][T10825] handle_bad_sector: 1 callbacks suppressed [ 580.224833][T10825] attempt to access beyond end of device [ 580.224833][T10825] loop2: rw=12288, want=8200, limit=8192 [ 580.246735][T10825] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 580.324089][T10825] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 580.337285][T10825] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 580.345251][T10825] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 580.369440][T10825] F2FS-fs (loop2): invalid crc_offset: 0 [ 580.376288][T10825] attempt to access beyond end of device [ 580.376288][T10825] loop2: rw=12288, want=8200, limit=8192 [ 580.389311][T10825] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:56:50 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb103, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:56:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, 0x0) 13:56:50 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 13:56:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x0) [ 580.617113][T10870] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 580.625915][T10870] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 580.635537][T10870] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 580.645131][T10870] F2FS-fs (loop2): invalid crc_offset: 0 [ 580.651004][T10870] attempt to access beyond end of device [ 580.651004][T10870] loop2: rw=12288, want=8200, limit=8192 [ 580.662219][T10870] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 580.784448][T10870] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 580.793393][T10870] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 580.801386][T10870] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 580.811002][T10870] F2FS-fs (loop2): invalid crc_offset: 0 [ 580.817053][T10870] attempt to access beyond end of device [ 580.817053][T10870] loop2: rw=12288, want=8200, limit=8192 [ 580.828573][T10870] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 582.166344][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 582.172567][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 584.246248][ T380] Bluetooth: hci0: command 0x1001 tx timeout [ 584.252263][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 586.326190][ T380] Bluetooth: hci0: command 0x1009 tx timeout 13:57:00 executing program 4 (fault-call:2 fault-nth:31): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:00 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000008c0)={0x16, 0x0, 0x10000, 0x6, 0xc}, 0x40) 13:57:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, 0x0) 13:57:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x0) 13:57:00 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb203, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x0) 13:57:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0xc020660b, 0xffffffffffffffff) 13:57:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="ab"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@private1, 0x74, r1}) sendto$inet(r0, &(0x7f0000000080)="0ce07db47f3e56665a1b6c281b62b57944a4d365a8e95f6fbd09d936b372373d4a46bdd29f247ee9d794e361ffee215236a28bdf30e5ae572438b11c8ec34b5af6f8bf040db1b54a2466a1bcf8ce7ab44252a6d3be81bf1c7f83656c6b2fa6bc9bd347502b315b5f6ac9efce579ae17a636bc3f35109f5bbb3cd566bbdd2666678e9577c6c728b86be5d3f236bad802da43b731d", 0x94, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r1}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, 0x0) [ 590.590542][T10894] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 590.599118][T10894] FAULT_INJECTION: forcing a failure. [ 590.599118][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 590.620478][T10895] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 590.629977][T10895] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.637882][T10895] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 590.644066][T10894] CPU: 0 PID: 10894 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 590.656225][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.656903][T10895] F2FS-fs (loop2): invalid crc_offset: 0 [ 590.666257][T10894] Call Trace: [ 590.666274][T10894] dump_stack+0x1d8/0x24e [ 590.666282][T10894] ? devkmsg_release+0x11c/0x11c [ 590.666290][T10894] ? show_regs_print_info+0x12/0x12 [ 590.666305][T10894] should_fail+0x6f6/0x860 [ 590.686586][T10895] attempt to access beyond end of device [ 590.686586][T10895] loop2: rw=12288, want=8200, limit=8192 [ 590.689569][T10894] ? setup_fault_attr+0x3d0/0x3d0 [ 590.689580][T10894] ? kzalloc+0x1d/0x30 [ 590.698996][T10895] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 590.705053][T10894] should_failslab+0x5/0x20 [ 590.705067][T10894] __kmalloc+0x5f/0x2f0 [ 590.729737][T10894] ? kobject_uevent_env+0x252/0x1000 [ 590.735005][T10894] kzalloc+0x1d/0x30 [ 590.738879][T10894] kobject_get_path+0xb3/0x190 [ 590.743614][T10894] kobject_uevent_env+0x269/0x1000 [ 590.748693][T10894] device_add+0xf42/0x18a0 [ 590.753079][T10894] ? virtual_device_parent+0x50/0x50 [ 590.758330][T10894] ? h4_open+0x4f/0x140 [ 590.762456][T10894] hci_register_dev+0x32e/0x710 [ 590.767273][T10894] hci_uart_tty_ioctl+0x89e/0xa10 [ 590.772261][T10894] ? hci_uart_tty_write+0x10/0x10 [ 590.777251][T10894] tty_ioctl+0xf68/0x1710 [ 590.781547][T10894] ? tty_do_resize+0x170/0x170 [ 590.786277][T10894] ? avc_ss_reset+0x3a0/0x3a0 [ 590.790918][T10894] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 590.797035][T10894] ? refcount_inc_checked+0x50/0x50 [ 590.802199][T10894] ? memcg_check_events+0x5c/0x5b0 [ 590.807279][T10894] ? proc_fail_nth_write+0x1d5/0x240 [ 590.812531][T10894] ? proc_fail_nth_read+0x1c0/0x1c0 [ 590.817695][T10894] ? __lru_cache_add+0x1c4/0x210 [ 590.822599][T10894] ? memset+0x1f/0x40 [ 590.826549][T10894] ? fsnotify+0x1332/0x13f0 [ 590.831016][T10894] ? tty_do_resize+0x170/0x170 [ 590.835747][T10894] do_vfs_ioctl+0x76a/0x1720 [ 590.840325][T10894] ? selinux_file_ioctl+0x72f/0x990 [ 590.845493][T10894] ? ioctl_preallocate+0x250/0x250 [ 590.850584][T10894] ? __fget+0x37b/0x3c0 [ 590.854710][T10894] ? vfs_write+0x422/0x4e0 [ 590.859094][T10894] ? fget_many+0x20/0x20 [ 590.863305][T10894] ? debug_smp_processor_id+0x20/0x20 [ 590.868642][T10894] ? security_file_ioctl+0x9d/0xb0 [ 590.873721][T10894] __x64_sys_ioctl+0xd4/0x110 [ 590.878365][T10894] do_syscall_64+0xcb/0x1e0 [ 590.882850][T10894] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 590.888720][T10894] RIP: 0033:0x4665d9 [ 590.892581][T10894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 590.912151][T10894] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.920628][T10894] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 590.928569][T10894] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 13:57:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) 13:57:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x0) 13:57:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x701}, 0x24}}, 0x0) [ 590.936595][T10894] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.944531][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.952556][T10894] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 591.038595][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 591.107712][T10895] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 591.117410][T10895] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 591.125234][T10895] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 591.138874][T10895] F2FS-fs (loop2): invalid crc_offset: 0 [ 591.145594][T10895] attempt to access beyond end of device [ 591.145594][T10895] loop2: rw=12288, want=8200, limit=8192 [ 591.157202][T10895] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 593.045715][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 593.051754][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 595.125650][ T380] Bluetooth: hci0: command 0x1001 tx timeout [ 595.131665][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 597.205638][ T380] Bluetooth: hci0: command 0x1009 tx timeout 13:57:11 executing program 4 (fault-call:2 fault-nth:32): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[], 0x4c0}}, 0x0) 13:57:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x0) 13:57:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}}}) 13:57:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb303, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:11 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6da, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:11 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f00000004c0), 0x0) 13:57:11 executing program 5: r0 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='jffs2\x00', &(0x7f0000000080)='\x00', 0x0) 13:57:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40086602, 0x0) 13:57:11 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 601.481744][T10939] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 601.490942][T10939] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 601.495130][T10946] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 601.499601][T10939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 601.518331][T10939] F2FS-fs (loop2): invalid crc_offset: 0 13:57:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x14}, 0x33fe0}}, 0x0) [ 601.530844][T10946] FAULT_INJECTION: forcing a failure. [ 601.530844][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 601.539620][T10939] attempt to access beyond end of device [ 601.539620][T10939] loop2: rw=12288, want=8200, limit=8192 [ 601.555006][T10939] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 601.562914][T10946] CPU: 0 PID: 10946 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 13:57:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40087602, 0x0) [ 601.573146][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.583815][T10946] Call Trace: [ 601.587094][T10946] dump_stack+0x1d8/0x24e [ 601.591418][T10946] ? devkmsg_release+0x11c/0x11c [ 601.596354][T10946] ? show_regs_print_info+0x12/0x12 [ 601.601537][T10946] ? vsnprintf+0x1cb4/0x1d60 [ 601.606114][T10946] should_fail+0x6f6/0x860 [ 601.610539][T10946] ? setup_fault_attr+0x3d0/0x3d0 [ 601.615549][T10946] ? __alloc_skb+0x75/0x4d0 [ 601.620036][T10946] should_failslab+0x5/0x20 [ 601.624522][T10946] kmem_cache_alloc+0x36/0x290 [ 601.629269][T10946] ? mutex_lock+0xa6/0x110 [ 601.633674][T10946] __alloc_skb+0x75/0x4d0 [ 601.637992][T10946] alloc_uevent_skb+0x73/0x220 [ 601.642741][T10946] kobject_uevent_env+0xaee/0x1000 [ 601.647841][T10946] device_add+0xf42/0x18a0 [ 601.652285][T10946] ? virtual_device_parent+0x50/0x50 [ 601.657573][T10946] ? h4_open+0x4f/0x140 [ 601.661711][T10946] hci_register_dev+0x32e/0x710 [ 601.666547][T10946] hci_uart_tty_ioctl+0x89e/0xa10 [ 601.671553][T10946] ? hci_uart_tty_write+0x10/0x10 [ 601.676565][T10946] tty_ioctl+0xf68/0x1710 [ 601.680878][T10946] ? tty_do_resize+0x170/0x170 [ 601.685625][T10946] ? avc_ss_reset+0x3a0/0x3a0 [ 601.690315][T10946] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 601.696449][T10946] ? refcount_inc_checked+0x50/0x50 [ 601.701630][T10946] ? memcg_check_events+0x5c/0x5b0 [ 601.706731][T10946] ? proc_fail_nth_write+0x1d5/0x240 [ 601.712000][T10946] ? proc_fail_nth_read+0x1c0/0x1c0 [ 601.717268][T10946] ? __lru_cache_add+0x1c4/0x210 [ 601.722191][T10946] ? memset+0x1f/0x40 [ 601.726158][T10946] ? fsnotify+0x1332/0x13f0 [ 601.730646][T10946] ? tty_do_resize+0x170/0x170 [ 601.735397][T10946] do_vfs_ioctl+0x76a/0x1720 [ 601.739996][T10946] ? selinux_file_ioctl+0x72f/0x990 [ 601.745192][T10946] ? ioctl_preallocate+0x250/0x250 [ 601.750294][T10946] ? __fget+0x37b/0x3c0 [ 601.754436][T10946] ? vfs_write+0x422/0x4e0 [ 601.758835][T10946] ? fget_many+0x20/0x20 [ 601.763063][T10946] ? debug_smp_processor_id+0x20/0x20 [ 601.768421][T10946] ? security_file_ioctl+0x9d/0xb0 [ 601.773520][T10946] __x64_sys_ioctl+0xd4/0x110 [ 601.778185][T10946] do_syscall_64+0xcb/0x1e0 [ 601.782674][T10946] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 601.788555][T10946] RIP: 0033:0x4665d9 [ 601.792436][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 601.812021][T10946] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.820589][T10946] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 601.828545][T10946] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 601.836501][T10946] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 601.844454][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.852415][T10946] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 601.996695][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.014256][T10939] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 602.034287][T10939] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 602.062090][T10939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 602.075878][T10939] F2FS-fs (loop2): invalid crc_offset: 0 [ 602.089349][T10939] attempt to access beyond end of device [ 602.089349][T10939] loop2: rw=12288, want=8200, limit=8192 [ 602.101772][T10939] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 604.005280][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 604.011364][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 606.085015][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 606.091131][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 608.164910][ T3117] Bluetooth: hci0: command 0x1009 tx timeout 13:57:22 executing program 4 (fault-call:2 fault-nth:33): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:22 executing program 5: r0 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 13:57:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x0) 13:57:22 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000) 13:57:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb403, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:22 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e) [ 612.340362][T10984] new mount options do not match the existing superblock, will be ignored [ 612.349639][T10983] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 612.353731][T10984] option changes via remount are deprecated (pid=10982 comm=syz-executor.5) [ 612.358721][T10983] FAULT_INJECTION: forcing a failure. [ 612.358721][T10983] name failslab, interval 1, probability 0, space 0, times 0 [ 612.380247][T10983] CPU: 1 PID: 10983 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 612.382511][T10984] new mount options do not match the existing superblock, will be ignored [ 612.390478][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.390482][T10983] Call Trace: [ 612.390504][T10983] dump_stack+0x1d8/0x24e [ 612.390513][T10983] ? devkmsg_release+0x11c/0x11c [ 612.390521][T10983] ? show_regs_print_info+0x12/0x12 [ 612.390530][T10983] ? vsnprintf+0x1d60/0x1d60 [ 612.390540][T10983] should_fail+0x6f6/0x860 [ 612.390548][T10983] ? setup_fault_attr+0x3d0/0x3d0 13:57:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x0) 13:57:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x0) 13:57:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x3e, 0x0) 13:57:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x0) 13:57:22 executing program 1: r0 = io_uring_setup(0x3593, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1) [ 612.390555][T10983] ? vsnprintf+0x1cb4/0x1d60 [ 612.390565][T10983] ? skb_clone+0x1b2/0x360 [ 612.390574][T10983] should_failslab+0x5/0x20 [ 612.390583][T10983] kmem_cache_alloc+0x36/0x290 [ 612.390597][T10983] skb_clone+0x1b2/0x360 [ 612.390608][T10983] netlink_broadcast_filtered+0x5d1/0x10a0 [ 612.390623][T10983] netlink_broadcast+0x35/0x50 [ 612.473672][T10983] kobject_uevent_env+0xb1f/0x1000 [ 612.478779][T10983] device_add+0xf42/0x18a0 [ 612.483188][T10983] ? virtual_device_parent+0x50/0x50 [ 612.488462][T10983] ? h4_open+0x4f/0x140 [ 612.492617][T10983] hci_register_dev+0x32e/0x710 [ 612.497509][T10983] hci_uart_tty_ioctl+0x89e/0xa10 [ 612.502517][T10983] ? hci_uart_tty_write+0x10/0x10 [ 612.507513][T10983] tty_ioctl+0xf68/0x1710 [ 612.511816][T10983] ? tty_do_resize+0x170/0x170 [ 612.516599][T10983] ? avc_ss_reset+0x3a0/0x3a0 [ 612.521245][T10983] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 612.527365][T10983] ? refcount_inc_checked+0x50/0x50 [ 612.532642][T10983] ? memcg_check_events+0x5c/0x5b0 [ 612.537733][T10983] ? proc_fail_nth_write+0x1d5/0x240 [ 612.542990][T10983] ? proc_fail_nth_read+0x1c0/0x1c0 [ 612.548172][T10983] ? __lru_cache_add+0x1c4/0x210 [ 612.553082][T10983] ? memset+0x1f/0x40 [ 612.557035][T10983] ? fsnotify+0x1332/0x13f0 [ 612.561510][T10983] ? tty_do_resize+0x170/0x170 [ 612.566344][T10983] do_vfs_ioctl+0x76a/0x1720 [ 612.570922][T10983] ? selinux_file_ioctl+0x72f/0x990 [ 612.576096][T10983] ? ioctl_preallocate+0x250/0x250 [ 612.581185][T10983] ? __fget+0x37b/0x3c0 [ 612.585311][T10983] ? vfs_write+0x422/0x4e0 [ 612.589974][T10983] ? fget_many+0x20/0x20 [ 612.594203][T10983] ? debug_smp_processor_id+0x20/0x20 [ 612.599576][T10983] ? security_file_ioctl+0x9d/0xb0 [ 612.604658][T10983] __x64_sys_ioctl+0xd4/0x110 [ 612.609480][T10983] do_syscall_64+0xcb/0x1e0 [ 612.613954][T10983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 612.619815][T10983] RIP: 0033:0x4665d9 [ 612.623711][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 612.644157][T10983] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.652536][T10983] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 612.660479][T10983] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 612.668452][T10983] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 612.676444][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.684416][T10983] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 612.694731][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 612.703931][T10991] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 612.719881][T10991] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 612.730123][T10991] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 612.744253][T10991] F2FS-fs (loop2): invalid crc_offset: 0 [ 612.753605][T10991] attempt to access beyond end of device [ 612.753605][T10991] loop2: rw=12288, want=8200, limit=8192 [ 612.767320][T10991] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 612.894410][T10991] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 612.903414][T10991] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 612.911264][T10991] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 612.921367][T10991] F2FS-fs (loop2): invalid crc_offset: 0 [ 612.931277][T10991] attempt to access beyond end of device [ 612.931277][T10991] loop2: rw=12288, want=8200, limit=8192 [ 612.943039][T10991] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 614.724603][ T3117] Bluetooth: hci0: command 0x1003 tx timeout [ 614.730617][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 616.804629][ T3117] Bluetooth: hci0: command 0x1001 tx timeout [ 616.810737][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 618.884404][ T3117] Bluetooth: hci0: command 0x1009 tx timeout 13:57:33 executing program 4 (fault-call:2 fault-nth:34): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x0) 13:57:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f00000001c0)="ffff01", 0x3, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013200)="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", 0x282, 0x11580}], 0x0, &(0x7f00000000c0)) 13:57:33 executing program 5: syz_io_uring_setup(0x3ec1, &(0x7f0000000080), &(0x7f0000e1b000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x77e1, &(0x7f0000000180), &(0x7f0000656000/0x3000)=nil, &(0x7f0000551000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 13:57:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb503, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:33 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:33 executing program 5: r0 = io_uring_setup(0x35b1, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000002c0), 0x40000000}], 0x3) syz_io_uring_setup(0x579b, &(0x7f0000000000), &(0x7f0000c00000/0x400000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 623.222985][T11034] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 623.238168][T11034] FAULT_INJECTION: forcing a failure. [ 623.238168][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 623.240096][T11039] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 623.260784][T11039] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 623.263502][T11034] CPU: 0 PID: 11034 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 623.269139][T11039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 623.278746][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.278750][T11034] Call Trace: [ 623.278765][T11034] dump_stack+0x1d8/0x24e [ 623.278774][T11034] ? devkmsg_release+0x11c/0x11c [ 623.278781][T11034] ? vsnprintf+0x1cb4/0x1d60 [ 623.278794][T11034] ? show_regs_print_info+0x12/0x12 [ 623.298565][T11039] F2FS-fs (loop2): invalid crc_offset: 0 [ 623.300250][T11034] should_fail+0x6f6/0x860 [ 623.300265][T11034] ? setup_fault_attr+0x3d0/0x3d0 [ 623.316085][T11039] attempt to access beyond end of device [ 623.316085][T11039] loop2: rw=12288, want=8200, limit=8192 [ 623.319224][T11034] ? add_uevent_var+0x1c2/0x360 [ 623.319235][T11034] ? call_usermodehelper_setup+0x91/0x200 [ 623.319248][T11034] should_failslab+0x5/0x20 [ 623.339319][T11039] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 623.345311][T11034] kmem_cache_alloc_trace+0x39/0x2b0 [ 623.345323][T11034] call_usermodehelper_setup+0x91/0x200 [ 623.345331][T11034] ? add_uevent_var+0x360/0x360 [ 623.345342][T11034] kobject_uevent_env+0xdd6/0x1000 [ 623.387837][T11034] device_add+0xf42/0x18a0 [ 623.392226][T11034] ? virtual_device_parent+0x50/0x50 [ 623.397482][T11034] ? h4_open+0x4f/0x140 [ 623.401610][T11034] hci_register_dev+0x32e/0x710 [ 623.406447][T11034] hci_uart_tty_ioctl+0x89e/0xa10 [ 623.411455][T11034] ? hci_uart_tty_write+0x10/0x10 [ 623.416449][T11034] tty_ioctl+0xf68/0x1710 [ 623.420748][T11034] ? tty_do_resize+0x170/0x170 [ 623.425492][T11034] ? avc_ss_reset+0x3a0/0x3a0 [ 623.430143][T11034] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 623.436279][T11034] ? refcount_inc_checked+0x50/0x50 [ 623.441535][T11034] ? memcg_check_events+0x5c/0x5b0 [ 623.446616][T11034] ? proc_fail_nth_write+0x1d5/0x240 [ 623.451872][T11034] ? proc_fail_nth_read+0x1c0/0x1c0 [ 623.457041][T11034] ? __lru_cache_add+0x1c4/0x210 [ 623.461978][T11034] ? memset+0x1f/0x40 [ 623.465944][T11034] ? fsnotify+0x1332/0x13f0 [ 623.470418][T11034] ? tty_do_resize+0x170/0x170 [ 623.475149][T11034] do_vfs_ioctl+0x76a/0x1720 [ 623.479709][T11034] ? selinux_file_ioctl+0x72f/0x990 [ 623.484900][T11034] ? ioctl_preallocate+0x250/0x250 [ 623.489985][T11034] ? __fget+0x37b/0x3c0 [ 623.494111][T11034] ? vfs_write+0x422/0x4e0 [ 623.498512][T11034] ? fget_many+0x20/0x20 [ 623.502723][T11034] ? debug_smp_processor_id+0x20/0x20 [ 623.508064][T11034] ? security_file_ioctl+0x9d/0xb0 [ 623.513927][T11034] __x64_sys_ioctl+0xd4/0x110 [ 623.518592][T11034] do_syscall_64+0xcb/0x1e0 [ 623.523067][T11034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 623.528929][T11034] RIP: 0033:0x4665d9 [ 623.532795][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 623.552368][T11034] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.560745][T11034] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 13:57:33 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 13:57:33 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) fork() linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) clock_gettime(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:57:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x0) 13:57:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x4b65, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bf255394def13900e9506fafbe6c17c499e63e"}) [ 623.568686][T11034] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 623.576628][T11034] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.584574][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.592522][T11034] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 13:57:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x0) [ 623.681445][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 623.801745][T11039] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 623.810858][T11039] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 623.818915][T11039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 623.834025][T11039] F2FS-fs (loop2): invalid crc_offset: 0 [ 623.843546][T11039] attempt to access beyond end of device [ 623.843546][T11039] loop2: rw=12288, want=8200, limit=8192 [ 623.855868][T11039] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 625.684059][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 625.690131][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 627.764013][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 627.770050][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 629.843906][ T4333] Bluetooth: hci0: command 0x1009 tx timeout 13:57:43 executing program 4 (fault-call:2 fault-nth:35): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:43 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 13:57:43 executing program 5: bpf$MAP_CREATE(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 13:57:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x0) 13:57:43 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:43 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb603, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x4b47, 0x0) 13:57:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8c94630b5ba58cd0cd6c1f2c1c9e43e9e9ea11"}) [ 634.111165][T11087] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 634.120315][T11087] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 634.124180][T11094] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 634.129904][T11087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 634.148249][T11087] F2FS-fs (loop2): invalid crc_offset: 0 13:57:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 13:57:44 executing program 5: openat$tun(0xffffff9c, &(0x7f0000000000), 0x111002, 0x0) [ 634.159198][T11087] attempt to access beyond end of device [ 634.159198][T11087] loop2: rw=12288, want=8200, limit=8192 [ 634.179310][T11094] FAULT_INJECTION: forcing a failure. [ 634.179310][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 634.198126][T11087] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 634.205759][T11094] CPU: 1 PID: 11094 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 634.216125][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.226168][T11094] Call Trace: [ 634.229451][T11094] dump_stack+0x1d8/0x24e [ 634.234494][T11094] ? devkmsg_release+0x11c/0x11c [ 634.239426][T11094] ? show_regs_print_info+0x12/0x12 [ 634.244617][T11094] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 634.250760][T11094] should_fail+0x6f6/0x860 [ 634.255166][T11094] ? setup_fault_attr+0x3d0/0x3d0 [ 634.260180][T11094] ? kobject_put+0xb4/0xe0 [ 634.264583][T11094] ? device_add+0x5d8/0x18a0 [ 634.269342][T11094] ? kzalloc+0x16/0x20 [ 634.273401][T11094] should_failslab+0x5/0x20 [ 634.277893][T11094] __kmalloc+0x5f/0x2f0 [ 634.282036][T11094] kzalloc+0x16/0x20 [ 634.285949][T11094] rfkill_alloc+0x94/0x250 [ 634.290353][T11094] ? h4_open+0x4f/0x140 [ 634.294935][T11094] hci_register_dev+0x360/0x710 [ 634.299775][T11094] hci_uart_tty_ioctl+0x89e/0xa10 [ 634.304789][T11094] ? hci_uart_tty_write+0x10/0x10 [ 634.309802][T11094] tty_ioctl+0xf68/0x1710 [ 634.314121][T11094] ? tty_do_resize+0x170/0x170 [ 634.318884][T11094] ? avc_ss_reset+0x3a0/0x3a0 [ 634.323552][T11094] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 634.329695][T11094] ? refcount_inc_checked+0x50/0x50 [ 634.334882][T11094] ? memcg_check_events+0x5c/0x5b0 [ 634.339987][T11094] ? proc_fail_nth_write+0x1d5/0x240 [ 634.345372][T11094] ? proc_fail_nth_read+0x1c0/0x1c0 [ 634.350643][T11094] ? __lru_cache_add+0x1c4/0x210 [ 634.355680][T11094] ? memset+0x1f/0x40 [ 634.360168][T11094] ? fsnotify+0x1332/0x13f0 [ 634.365227][T11094] ? tty_do_resize+0x170/0x170 [ 634.369976][T11094] do_vfs_ioctl+0x76a/0x1720 [ 634.374556][T11094] ? selinux_file_ioctl+0x72f/0x990 [ 634.379757][T11094] ? ioctl_preallocate+0x250/0x250 [ 634.384859][T11094] ? __fget+0x37b/0x3c0 [ 634.389002][T11094] ? vfs_write+0x422/0x4e0 [ 634.393409][T11094] ? fget_many+0x20/0x20 [ 634.397643][T11094] ? debug_smp_processor_id+0x20/0x20 [ 634.403009][T11094] ? security_file_ioctl+0x9d/0xb0 [ 634.408124][T11094] __x64_sys_ioctl+0xd4/0x110 [ 634.412967][T11094] do_syscall_64+0xcb/0x1e0 [ 634.417503][T11094] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 634.423384][T11094] RIP: 0033:0x4665d9 [ 634.427736][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.447863][T11094] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:57:44 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x1b, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558070800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0x6a, 0x0, &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x48) 13:57:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) [ 634.456496][T11094] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 634.464509][T11094] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 634.472458][T11094] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.480405][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.488354][T11094] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 634.507993][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 634.625842][T11087] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 634.635235][T11087] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 634.643610][T11087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 634.660605][T11087] F2FS-fs (loop2): invalid crc_offset: 0 [ 634.674106][T11087] attempt to access beyond end of device [ 634.674106][T11087] loop2: rw=12288, want=8200, limit=8192 [ 634.685911][T11087] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 636.563445][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 636.569630][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 638.643358][ T380] Bluetooth: hci0: command 0x1001 tx timeout [ 638.649384][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 640.723138][ T380] Bluetooth: hci0: command 0x1009 tx timeout 13:57:54 executing program 4 (fault-call:2 fault-nth:36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80086601, 0x0) 13:57:54 executing program 1: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) 13:57:54 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd63a32214488e8e3694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x1b, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558070800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0x6a, 0x0, &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x48) 13:57:54 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb703, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:54 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 13:57:54 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x1b, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558070800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0x6a, 0x0, &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x48) 13:57:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80087601, 0x0) [ 644.992961][T11139] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 645.015321][T11140] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 645.032071][T11139] FAULT_INJECTION: forcing a failure. [ 645.032071][T11139] name failslab, interval 1, probability 0, space 0, times 0 [ 645.045193][T11140] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.064771][T11140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 645.079329][T11139] CPU: 1 PID: 11139 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 645.089572][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.099615][T11139] Call Trace: [ 645.102905][T11139] dump_stack+0x1d8/0x24e [ 645.107229][T11139] ? devkmsg_release+0x11c/0x11c [ 645.112164][T11139] ? show_regs_print_info+0x12/0x12 [ 645.117357][T11139] should_fail+0x6f6/0x860 [ 645.121765][T11139] ? setup_fault_attr+0x3d0/0x3d0 [ 645.126781][T11139] ? kobject_set_name_vargs+0x5d/0x110 [ 645.132318][T11139] should_failslab+0x5/0x20 [ 645.136881][T11139] __kmalloc_track_caller+0x5d/0x2e0 [ 645.142156][T11139] kvasprintf+0xd6/0x180 [ 645.146388][T11139] ? asan.module_ctor+0x10/0x10 [ 645.151233][T11139] ? kvasprintf_const+0x4d/0x170 [ 645.156187][T11139] kobject_set_name_vargs+0x5d/0x110 [ 645.161468][T11139] dev_set_name+0xd1/0x120 [ 645.165873][T11139] ? memset+0x1f/0x40 [ 645.169843][T11139] ? rfkill_register+0x53/0x720 [ 645.174996][T11139] ? get_device+0x30/0x30 [ 645.179418][T11139] ? mutex_lock+0xa6/0x110 [ 645.183831][T11139] ? device_initialize+0x1d3/0x3e0 [ 645.188937][T11139] rfkill_register+0xb8/0x720 [ 645.193607][T11139] hci_register_dev+0x398/0x710 [ 645.198457][T11139] hci_uart_tty_ioctl+0x89e/0xa10 [ 645.203472][T11139] ? hci_uart_tty_write+0x10/0x10 [ 645.208488][T11139] tty_ioctl+0xf68/0x1710 [ 645.212840][T11139] ? tty_do_resize+0x170/0x170 [ 645.217591][T11139] ? avc_ss_reset+0x3a0/0x3a0 [ 645.222255][T11139] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 645.228401][T11139] ? refcount_inc_checked+0x50/0x50 [ 645.233592][T11139] ? memcg_check_events+0x5c/0x5b0 [ 645.238698][T11139] ? proc_fail_nth_write+0x1d5/0x240 [ 645.243981][T11139] ? proc_fail_nth_read+0x1c0/0x1c0 [ 645.249178][T11139] ? __lru_cache_add+0x1c4/0x210 [ 645.254107][T11139] ? memset+0x1f/0x40 [ 645.258081][T11139] ? fsnotify+0x1332/0x13f0 [ 645.262666][T11139] ? tty_do_resize+0x170/0x170 [ 645.267421][T11139] do_vfs_ioctl+0x76a/0x1720 [ 645.272005][T11139] ? selinux_file_ioctl+0x72f/0x990 [ 645.277194][T11139] ? ioctl_preallocate+0x250/0x250 [ 645.282298][T11139] ? __fget+0x37b/0x3c0 [ 645.286443][T11139] ? vfs_write+0x422/0x4e0 [ 645.290937][T11139] ? fget_many+0x20/0x20 [ 645.295186][T11139] ? debug_smp_processor_id+0x20/0x20 [ 645.300548][T11139] ? security_file_ioctl+0x9d/0xb0 [ 645.305656][T11139] __x64_sys_ioctl+0xd4/0x110 [ 645.310334][T11139] do_syscall_64+0xcb/0x1e0 [ 645.314827][T11139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 645.320706][T11139] RIP: 0033:0x4665d9 [ 645.324590][T11139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:57:55 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd63a32214488e8e3694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x1b, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558070800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0x6a, 0x0, &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x48) 13:57:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x0) 13:57:55 executing program 1: io_uring_setup(0x53f9, &(0x7f0000000100)) [ 645.344309][T11139] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.352335][T11140] F2FS-fs (loop2): invalid crc_offset: 0 [ 645.352705][T11139] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 645.352709][T11139] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 645.352714][T11139] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 645.352718][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:57:55 executing program 4 (fault-call:2 fault-nth:37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:57:55 executing program 1: syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}) 13:57:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x0) 13:57:55 executing program 5: bpf$MAP_CREATE(0x1c, 0x0, 0x0) [ 645.352721][T11139] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 645.401567][T11140] attempt to access beyond end of device [ 645.401567][T11140] loop2: rw=12288, want=8200, limit=8192 [ 645.412930][T11140] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 645.447791][T11171] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 645.451890][T11174] fuse: Bad value for 'fd' [ 645.462696][T11171] FAULT_INJECTION: forcing a failure. [ 645.462696][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 645.462762][T11174] fuse: Bad value for 'fd' [ 645.480997][T11171] CPU: 0 PID: 11171 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 645.491231][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.501281][T11171] Call Trace: [ 645.504570][T11171] dump_stack+0x1d8/0x24e [ 645.508891][T11171] ? devkmsg_release+0x11c/0x11c [ 645.513812][T11171] ? show_regs_print_info+0x12/0x12 [ 645.518981][T11171] should_fail+0x6f6/0x860 [ 645.523369][T11171] ? setup_fault_attr+0x3d0/0x3d0 [ 645.528380][T11171] ? kobject_set_name_vargs+0x5d/0x110 [ 645.533917][T11171] should_failslab+0x5/0x20 [ 645.538389][T11171] __kmalloc_track_caller+0x5d/0x2e0 [ 645.543686][T11171] kvasprintf+0xd6/0x180 [ 645.547914][T11171] ? asan.module_ctor+0x10/0x10 [ 645.552741][T11171] ? kvasprintf_const+0x4d/0x170 [ 645.557658][T11171] kobject_set_name_vargs+0x5d/0x110 [ 645.562915][T11171] dev_set_name+0xd1/0x120 [ 645.567312][T11171] ? memset+0x1f/0x40 [ 645.571266][T11171] ? rfkill_register+0x53/0x720 [ 645.576091][T11171] ? get_device+0x30/0x30 [ 645.580390][T11171] ? mutex_lock+0xa6/0x110 [ 645.584791][T11171] ? device_initialize+0x1d3/0x3e0 [ 645.589872][T11171] rfkill_register+0xb8/0x720 [ 645.594522][T11171] hci_register_dev+0x398/0x710 [ 645.599348][T11171] hci_uart_tty_ioctl+0x89e/0xa10 [ 645.604342][T11171] ? hci_uart_tty_write+0x10/0x10 [ 645.609335][T11171] tty_ioctl+0xf68/0x1710 [ 645.613634][T11171] ? tty_do_resize+0x170/0x170 [ 645.618367][T11171] ? avc_ss_reset+0x3a0/0x3a0 [ 645.623011][T11171] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 645.629133][T11171] ? refcount_inc_checked+0x50/0x50 [ 645.634299][T11171] ? memcg_check_events+0x5c/0x5b0 [ 645.639384][T11171] ? proc_fail_nth_write+0x1d5/0x240 [ 645.644646][T11171] ? proc_fail_nth_read+0x1c0/0x1c0 [ 645.649816][T11171] ? __lru_cache_add+0x1c4/0x210 [ 645.654740][T11171] ? memset+0x1f/0x40 [ 645.658693][T11171] ? fsnotify+0x1332/0x13f0 [ 645.663169][T11171] ? tty_do_resize+0x170/0x170 [ 645.668004][T11171] do_vfs_ioctl+0x76a/0x1720 [ 645.672564][T11171] ? selinux_file_ioctl+0x72f/0x990 [ 645.677733][T11171] ? ioctl_preallocate+0x250/0x250 [ 645.682819][T11171] ? __fget+0x37b/0x3c0 [ 645.686944][T11171] ? vfs_write+0x422/0x4e0 [ 645.691334][T11171] ? fget_many+0x20/0x20 [ 645.695684][T11171] ? debug_smp_processor_id+0x20/0x20 [ 645.701026][T11171] ? security_file_ioctl+0x9d/0xb0 [ 645.706107][T11171] __x64_sys_ioctl+0xd4/0x110 [ 645.710754][T11171] do_syscall_64+0xcb/0x1e0 [ 645.715232][T11171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 645.721094][T11171] RIP: 0033:0x4665d9 [ 645.724961][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.744534][T11171] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.752914][T11171] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 645.760857][T11171] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 645.768797][T11171] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 645.777088][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.785042][T11171] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 645.801249][ T4363] Bluetooth: hci0: Frame reassembly failed (-84) [ 645.943944][T11180] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 645.952816][T11180] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.960525][T11180] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 645.970348][T11180] F2FS-fs (loop2): invalid crc_offset: 0 [ 645.976524][T11180] attempt to access beyond end of device [ 645.976524][T11180] loop2: rw=12288, want=8200, limit=8192 [ 645.988008][T11180] F2FS-fs (loop2): Failed to get valid F2FS checkpoint 13:57:55 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xba01, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:57:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @remote, @private2}}) 13:57:55 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), 0xffffffffffffffff) 13:57:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x0) 13:57:55 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:57:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x9, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 13:57:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/129, 0x2c, 0x81, 0x1}, 0x20) 13:57:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x0) [ 646.220509][T11205] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 646.229828][T11205] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.241507][T11205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 646.255216][T11205] F2FS-fs (loop2): invalid crc_offset: 0 [ 646.262749][T11205] attempt to access beyond end of device [ 646.262749][T11205] loop2: rw=12288, want=8200, limit=8192 [ 646.277253][T11205] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 646.402271][T11205] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 646.412002][T11205] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.420642][T11205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 646.436354][T11205] F2FS-fs (loop2): invalid crc_offset: 0 [ 646.442047][T11205] attempt to access beyond end of device [ 646.442047][T11205] loop2: rw=12288, want=8200, limit=8192 [ 646.456777][T11205] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 647.842172][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 647.848218][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 649.922008][ T4333] Bluetooth: hci0: command 0x1001 tx timeout [ 649.928019][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 652.001748][ T1004] Bluetooth: hci0: command 0x1009 tx timeout 13:58:05 executing program 4 (fault-call:2 fault-nth:38): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:58:05 executing program 1: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 13:58:05 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0, 0x0) 13:58:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 13:58:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:58:05 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xce01, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:58:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00010000e3ffffa37906eb34"], 0x1c}}, 0x0) 13:58:05 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x193a42, 0x0) r1 = memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0\xfb\xff\xff\xff\xff\xff\xff\xffvelindf\xda\xf7\xe7VP]\x87\xbb\xbd\tJP\x98\rM\xea\x90r\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xe2x\x12\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17\x7f\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\xb1m\x11\x03J\x7f\xe4m\xe6T\xe9\x04\x00\x00\x19Y\x92$O_\xf6\xb6\x1cePR\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&\x1d\xadUg\xb5S5\xefD\x04\x160\xafy\x02\\\xcb1\x8f\xaeh\x8c~8\x9f\xf3\xd5\x0f\xef\xb0\x0fZ\xfd\x05\xed\xfd\x82\xbd*\x192\x06\xcb1t\xd0\x7f\x8c\x9f?\xd4x0\\\x1b\xe2Po\xef\xe1\xc4J\xcbz\x17\a\xf6\xac\xc1y\xe1\x8f\x17\\\xbcp\xaa\xa6\xc6\xd5\r\xbbm\x83e\xa1\xb1e\xc1\x88\xfe\xb8=\x1d\xc1(\xb7\xb7\"\xb8\x143r\xd5gL\xd2\xf7;#\xb4\x10d\xe9\xed\x19\xa3y\xe1\x80k\xbb;\xf7U\x13U\x0e\xd1{\xcb\xa6H\n\x7f,B\x93\xe4`d\x95zL\xee[w\x06(\xb1\x84\x11\xd9\x04\x99\x01\x192\xe3\xa88~4\x99\xd0U\xcd\xfa\x1d%e*\x02\xa0\x9b^\xa6\xcf9W\x9d\xcd \xb8K\xbe\xb1-\xad\xaay\x1ee\xba\b\xe8\x12\xa0\xb6Z7\x8f\x05j\x8a\xe9\xdf\x1c\xa0\xfc\x90\xb9\x00\x14', 0x0) ftruncate(r1, 0x40000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x2008000fffffffe) 13:58:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) [ 655.873464][T11231] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 655.889771][T11237] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 655.898103][T11231] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 655.906130][T11237] FAULT_INJECTION: forcing a failure. [ 655.906130][T11237] name failslab, interval 1, probability 0, space 0, times 0 13:58:05 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) [ 655.908248][T11231] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 655.945827][T11237] CPU: 0 PID: 11237 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 655.956340][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.966393][T11237] Call Trace: [ 655.969681][T11237] dump_stack+0x1d8/0x24e [ 655.974090][T11237] ? devkmsg_release+0x11c/0x11c [ 655.974804][T11231] F2FS-fs (loop2): invalid crc_offset: 0 [ 655.979015][T11237] ? show_regs_print_info+0x12/0x12 [ 655.979024][T11237] ? ptr_to_hashval+0x60/0x60 [ 655.979038][T11237] ? __kmalloc_track_caller+0x13a/0x2e0 [ 656.000165][T11237] should_fail+0x6f6/0x860 [ 656.004581][T11237] ? setup_fault_attr+0x3d0/0x3d0 [ 656.009101][T11231] attempt to access beyond end of device [ 656.009101][T11231] loop2: rw=12288, want=8200, limit=8192 [ 656.009593][T11237] ? refcount_add_checked+0x50/0x50 [ 656.009601][T11237] ? device_add+0x121/0x18a0 [ 656.009616][T11237] should_failslab+0x5/0x20 [ 656.034932][T11237] kmem_cache_alloc_trace+0x39/0x2b0 [ 656.040237][T11237] device_add+0x121/0x18a0 [ 656.044645][T11237] ? dev_set_name+0xd1/0x120 [ 656.046217][T11231] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 656.049254][T11237] ? memset+0x1f/0x40 [ 656.049265][T11237] ? get_device+0x30/0x30 [ 656.049279][T11237] ? mutex_lock+0xa6/0x110 [ 656.069386][T11237] ? virtual_device_parent+0x50/0x50 [ 656.074662][T11237] ? device_initialize+0x1d3/0x3e0 [ 656.079844][T11237] rfkill_register+0x180/0x720 [ 656.084605][T11237] hci_register_dev+0x398/0x710 [ 656.089437][T11237] hci_uart_tty_ioctl+0x89e/0xa10 [ 656.094437][T11237] ? hci_uart_tty_write+0x10/0x10 [ 656.099444][T11237] tty_ioctl+0xf68/0x1710 [ 656.103746][T11237] ? tty_do_resize+0x170/0x170 [ 656.108488][T11237] ? avc_ss_reset+0x3a0/0x3a0 [ 656.113160][T11237] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 656.119368][T11237] ? refcount_inc_checked+0x50/0x50 [ 656.124543][T11237] ? memcg_check_events+0x5c/0x5b0 [ 656.129628][T11237] ? proc_fail_nth_write+0x1d5/0x240 [ 656.134883][T11237] ? proc_fail_nth_read+0x1c0/0x1c0 [ 656.140052][T11237] ? __lru_cache_add+0x1c4/0x210 [ 656.144963][T11237] ? memset+0x1f/0x40 [ 656.148914][T11237] ? fsnotify+0x1332/0x13f0 [ 656.153388][T11237] ? tty_do_resize+0x170/0x170 [ 656.158122][T11237] do_vfs_ioctl+0x76a/0x1720 [ 656.162684][T11237] ? selinux_file_ioctl+0x72f/0x990 [ 656.167851][T11237] ? ioctl_preallocate+0x250/0x250 [ 656.172933][T11237] ? __fget+0x37b/0x3c0 [ 656.177061][T11237] ? vfs_write+0x422/0x4e0 [ 656.181482][T11237] ? fget_many+0x20/0x20 [ 656.185707][T11237] ? debug_smp_processor_id+0x20/0x20 [ 656.191058][T11237] ? security_file_ioctl+0x9d/0xb0 [ 656.196153][T11237] __x64_sys_ioctl+0xd4/0x110 [ 656.200808][T11237] do_syscall_64+0xcb/0x1e0 [ 656.205288][T11237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 656.211171][T11237] RIP: 0033:0x4665d9 [ 656.215037][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.234611][T11237] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:58:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 656.243008][T11237] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 656.251071][T11237] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 656.259017][T11237] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.266965][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 656.274914][T11237] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 13:58:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f00000012c0)=""/241, 0x26, 0xf1, 0x1}, 0x20) [ 656.315112][T11255] debugfs: Directory 'hci1' with parent 'bluetooth' already present! [ 656.350590][T11243] Bluetooth: hci1: Frame reassembly failed (-84) [ 656.351335][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 656.437113][T11231] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 656.447105][T11231] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 656.459058][T11231] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 656.474055][T11231] F2FS-fs (loop2): invalid crc_offset: 0 [ 656.480057][T11231] attempt to access beyond end of device [ 656.480057][T11231] loop2: rw=12288, want=8200, limit=8192 [ 656.492422][T11231] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 658.400865][ T4333] Bluetooth: hci0: command 0x1003 tx timeout [ 658.407822][ T8474] Bluetooth: hci0: sending frame failed (-49) [ 658.414397][ T4333] Bluetooth: hci1: command 0x1003 tx timeout [ 658.420386][ T8474] Bluetooth: hci1: sending frame failed (-49) [ 660.480680][ T1004] Bluetooth: hci1: command 0x1001 tx timeout [ 660.486693][ T8474] Bluetooth: hci1: sending frame failed (-49) [ 660.493275][ T1004] Bluetooth: hci0: command 0x1001 tx timeout [ 660.499268][ T8474] Bluetooth: hci0: sending frame failed (-49) [ 662.560449][ T4333] Bluetooth: hci0: command 0x1009 tx timeout [ 662.566565][ T4333] Bluetooth: hci1: command 0x1009 tx timeout [ 666.720069][T11232] BUG: scheduling while atomic: syz-executor.4/11232/0x00000002 [ 666.727707][T11232] Modules linked in: [ 666.731646][T11232] Preemption disabled at: [ 666.731657][T11232] [<0000000000000000>] 0x0 [ 666.740977][T11232] CPU: 1 PID: 11232 Comm: syz-executor.4 Not tainted 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 666.751248][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.761402][T11232] Call Trace: [ 666.764663][T11232] dump_stack+0x1d8/0x24e [ 666.768962][T11232] ? devkmsg_release+0x11c/0x11c [ 666.773879][T11232] ? show_regs_print_info+0x12/0x12 [ 666.779046][T11232] ? check_preemption_disabled+0x9e/0x330 [ 666.784733][T11232] ? debug_smp_processor_id+0x20/0x20 [ 666.790071][T11232] ? slab_free_freelist_hook+0x7b/0x150 [ 666.795583][T11232] ? kmem_cache_free+0xb8/0x5f0 [ 666.800402][T11232] __schedule_bug+0x1af/0x240 [ 666.805046][T11232] ? __migrate_task+0x160/0x160 [ 666.809863][T11232] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 666.815337][T11232] ? _raw_spin_lock+0x1b0/0x1b0 [ 666.820158][T11232] __schedule+0xa42/0x1170 [ 666.824559][T11232] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 666.830940][T11232] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 666.836712][T11232] ? is_mmconf_reserved+0x420/0x420 [ 666.841877][T11232] ? check_preemption_disabled+0x9e/0x330 [ 666.847586][T11232] ? debug_smp_processor_id+0x20/0x20 [ 666.852943][T11232] schedule+0x13b/0x1d0 [ 666.857084][T11232] lock_sock_nested+0x1ed/0x310 [ 666.861902][T11232] ? slab_free_freelist_hook+0x7b/0x150 [ 666.867434][T11232] ? sock_def_destruct+0x10/0x10 [ 666.872341][T11232] ? init_wait_entry+0xd0/0xd0 [ 666.877070][T11232] ? hci_send_to_sock+0x709/0x720 [ 666.882061][T11232] ? hci_sock_dev_event+0x274/0x570 [ 666.887224][T11232] hci_sock_dev_event+0x2da/0x570 [ 666.892217][T11232] hci_unregister_dev+0x2a5/0x13f0 [ 666.897294][T11232] ? rcu_sync_exit+0xc6/0x1a0 [ 666.901938][T11232] hci_uart_tty_close+0x1a2/0x220 [ 666.906938][T11232] ? hci_uart_tty_open+0x2d0/0x2d0 [ 666.912017][T11232] tty_ldisc_release+0x272/0x600 [ 666.916952][T11232] tty_release_struct+0x27/0xd0 [ 666.921772][T11232] tty_release+0xdd7/0x10a0 [ 666.926244][T11232] ? tty_release_struct+0xd0/0xd0 [ 666.931236][T11232] __fput+0x27d/0x6c0 [ 666.935209][T11232] task_work_run+0x186/0x1b0 [ 666.939778][T11232] prepare_exit_to_usermode+0x2b0/0x310 [ 666.945322][T11232] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 666.951182][T11232] RIP: 0033:0x4193eb [ 666.955045][T11232] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 666.974971][T11232] RSP: 002b:00007ffe7e678230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 666.983348][T11232] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004193eb [ 666.991290][T11232] RDX: 0000000000000000 RSI: ffffffff822cd525 RDI: 0000000000000003 [ 666.999230][T11232] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31220f00 [ 667.007170][T11232] R10: 00000000000015fb R11: 0000000000000293 R12: 000000000056cb00 [ 667.015110][T11232] R13: 000000000056cb00 R14: 000000000056bf80 R15: 00000000000a021b [ 667.023062][T11232] ? debug_smp_processor_id+0x5/0x20 [ 667.029322][T11232] ------------[ cut here ]------------ [ 667.034821][T11232] DEBUG_LOCKS_WARN_ON(val > preempt_count()) [ 667.034860][T11232] WARNING: CPU: 1 PID: 11232 at kernel/sched/core.c:4019 preempt_count_sub+0x9c/0x160 [ 667.050326][T11232] Modules linked in: [ 667.054191][T11232] CPU: 1 PID: 11232 Comm: syz-executor.4 Tainted: G W 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 667.065787][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.075840][T11232] RIP: 0010:preempt_count_sub+0x9c/0x160 [ 667.081466][T11232] Code: 42 8a 04 30 84 c0 0f 85 89 00 00 00 83 3d 5f a7 00 05 00 75 d3 48 c7 c7 80 cb aa 84 48 c7 c6 20 cc aa 84 31 c0 e8 54 33 f6 ff <0f> 0b eb ba e8 9b f2 de 00 85 c0 74 b1 48 c7 c0 54 3e 47 86 48 c1 [ 667.102427][T11232] RSP: 0018:ffff8881e3ee7c48 EFLAGS: 00010246 [ 667.108460][T11232] RAX: 9012eef8fee29e00 RBX: 0000000000000001 RCX: ffff8881a6059f80 [ 667.116414][T11232] RDX: 0000000000000000 RSI: 00000000000020de RDI: 0000000000000001 [ 667.124355][T11232] RBP: 0000000000000001 R08: ffffffff814e8ddf R09: fffffbfff0dc98da [ 667.132295][T11232] R10: fffffbfff0dc98da R11: 0000000000000000 R12: ffff8881e39f2c00 [ 667.140234][T11232] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8881a0d38000 [ 667.148188][T11232] FS: 0000000001ae0400(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 667.157189][T11232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.163740][T11232] CR2: 00000000023bc3bc CR3: 00000001e4058000 CR4: 00000000001406e0 [ 667.171683][T11232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 667.179623][T11232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 667.187577][T11232] Call Trace: [ 667.190870][T11232] _raw_read_unlock+0x21/0x40 [ 667.195524][T11232] hci_unregister_dev+0x2a5/0x13f0 [ 667.200696][T11232] ? rcu_sync_exit+0xc6/0x1a0 [ 667.205343][T11232] hci_uart_tty_close+0x1a2/0x220 [ 667.210339][T11232] ? hci_uart_tty_open+0x2d0/0x2d0 [ 667.215470][T11232] tty_ldisc_release+0x272/0x600 [ 667.220724][T11232] tty_release_struct+0x27/0xd0 [ 667.225671][T11232] tty_release+0xdd7/0x10a0 [ 667.230151][T11232] ? tty_release_struct+0xd0/0xd0 [ 667.235139][T11232] __fput+0x27d/0x6c0 [ 667.239133][T11232] task_work_run+0x186/0x1b0 [ 667.243691][T11232] prepare_exit_to_usermode+0x2b0/0x310 [ 667.249207][T11232] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.255108][T11232] RIP: 0033:0x4193eb [ 667.258971][T11232] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 667.278555][T11232] RSP: 002b:00007ffe7e678230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 667.286942][T11232] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004193eb [ 667.294907][T11232] RDX: 0000000000000000 RSI: ffffffff822cd525 RDI: 0000000000000003 [ 667.302853][T11232] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31220f00 [ 667.310809][T11232] R10: 00000000000015fb R11: 0000000000000293 R12: 000000000056cb00 13:58:17 executing program 4 (fault-call:2 fault-nth:39): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 13:58:17 executing program 1: bpf$MAP_CREATE(0x1c, &(0x7f0000000a80), 0x40) 13:58:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000015c0)={&(0x7f0000000080)=@ax25={{0x3, @default}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)='3', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 13:58:17 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xdc03, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c00000009000000010000000100000000000000004000000000000018000000200000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000010da0)) 13:58:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x361000, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x1000, &(0x7f0000000280), &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) fsmount(r2, 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6da, 0x1000}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) 13:58:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) [ 667.319040][T11232] R13: 000000000056cb00 R14: 000000000056bf80 R15: 00000000000a021b [ 667.327057][T11232] ? debug_smp_processor_id+0x5/0x20 [ 667.332311][T11232] ---[ end trace 2df782c29a91ec6a ]--- 13:58:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003b40)={0x1e, 0x1, &(0x7f0000000780)=@raw=[@alu], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:58:17 executing program 5: socketpair(0x23, 0x0, 0x7, &(0x7f0000000000)) 13:58:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/4096, 0x37, 0x1000, 0x1}, 0x20) [ 667.365497][T11280] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 667.386778][T11282] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 667.401228][T11280] FAULT_INJECTION: forcing a failure. [ 667.401228][T11280] name failslab, interval 1, probability 0, space 0, times 0 13:58:17 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 667.415044][T11282] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 667.438356][T11280] CPU: 0 PID: 11280 Comm: syz-executor.4 Tainted: G W 5.4.125-syzkaller-00237-g877ad62bde6f #0 [ 667.442151][T11282] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 13:58:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x20000000, &(0x7f0000000000)=@raw=[@func, @btf_id, @ldst, @ldst, @call], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x78) 13:58:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 667.449987][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.449991][T11280] Call Trace: [ 667.450009][T11280] dump_stack+0x1d8/0x24e [ 667.450020][T11280] ? devkmsg_release+0x11c/0x11c [ 667.450027][T11280] ? stack_trace_save+0x1f0/0x1f0 [ 667.450037][T11280] ? show_regs_print_info+0x12/0x12 [ 667.450051][T11280] ? check_preemption_disabled+0x9e/0x330 [ 667.496583][T11280] ? __rcu_read_lock+0x50/0x50 [ 667.501340][T11280] ? __unwind_start+0x72f/0x8e0 [ 667.502263][T11282] F2FS-fs (loop2): invalid crc_offset: 0 [ 667.506201][T11280] should_fail+0x6f6/0x860 [ 667.506210][T11280] ? setup_fault_attr+0x3d0/0x3d0 [ 667.506222][T11280] ? stack_trace_save+0x1f0/0x1f0 [ 667.526264][T11280] ? __kernel_text_address+0x93/0x100 [ 667.530785][T11282] attempt to access beyond end of device [ 667.530785][T11282] loop2: rw=12288, want=8200, limit=8192 [ 667.531652][T11280] ? __kernfs_new_node+0x99/0x6d0 [ 667.531660][T11280] should_failslab+0x5/0x20 [ 667.531675][T11280] __kmalloc_track_caller+0x5d/0x2e0 [ 667.557548][T11280] kstrdup_const+0x51/0x90 [ 667.561957][T11280] __kernfs_new_node+0x99/0x6d0 [ 667.566798][T11280] ? __kasan_kmalloc+0x137/0x1e0 [ 667.567251][T11282] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 667.571736][T11280] ? kernfs_new_node+0x160/0x160 [ 667.571745][T11280] ? number+0xea3/0x1300 [ 667.571754][T11280] ? __kasan_kmalloc+0x1a3/0x1e0 [ 667.571763][T11280] kernfs_create_dir_ns+0x90/0x220 [ 667.571776][T11280] sysfs_create_dir_ns+0x181/0x390 [ 667.571788][T11280] ? sysfs_warn_dup+0xa0/0xa0 [ 667.608365][T11280] kobject_add_internal+0x595/0xbd0 [ 667.613534][T11280] kobject_add+0x14c/0x210 [ 667.617921][T11280] ? refcount_inc_not_zero_checked+0x18d/0x280 [ 667.624129][T11280] ? kobject_init+0x1d0/0x1d0 [ 667.628777][T11280] ? get_device_parent+0x11a/0x430 [ 667.633855][T11280] device_add+0x46a/0x18a0 [ 667.638244][T11280] ? get_device+0x30/0x30 [ 667.642554][T11280] ? mutex_lock+0xa6/0x110 [ 667.646937][T11280] ? virtual_device_parent+0x50/0x50 [ 667.652189][T11280] ? device_initialize+0x1d3/0x3e0 [ 667.657286][T11280] rfkill_register+0x180/0x720 [ 667.662019][T11280] hci_register_dev+0x398/0x710 [ 667.666865][T11280] hci_uart_tty_ioctl+0x89e/0xa10 [ 667.671886][T11280] ? hci_uart_tty_write+0x10/0x10 [ 667.676879][T11280] tty_ioctl+0xf68/0x1710 [ 667.681179][T11280] ? tty_do_resize+0x170/0x170 [ 667.685919][T11280] ? avc_ss_reset+0x3a0/0x3a0 [ 667.690565][T11280] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 667.696686][T11280] ? refcount_inc_checked+0x50/0x50 [ 667.701855][T11280] ? memcg_check_events+0x5c/0x5b0 [ 667.706949][T11280] ? proc_fail_nth_write+0x1d5/0x240 [ 667.712224][T11280] ? proc_fail_nth_read+0x1c0/0x1c0 [ 667.717392][T11280] ? __lru_cache_add+0x1c4/0x210 [ 667.722308][T11280] ? memset+0x1f/0x40 [ 667.726279][T11280] ? fsnotify+0x1332/0x13f0 [ 667.730770][T11280] ? tty_do_resize+0x170/0x170 [ 667.735616][T11280] do_vfs_ioctl+0x76a/0x1720 [ 667.740200][T11280] ? selinux_file_ioctl+0x72f/0x990 [ 667.745369][T11280] ? ioctl_preallocate+0x250/0x250 [ 667.750451][T11280] ? __fget+0x37b/0x3c0 [ 667.754575][T11280] ? vfs_write+0x422/0x4e0 [ 667.758967][T11280] ? fget_many+0x20/0x20 [ 667.763266][T11280] ? debug_smp_processor_id+0x20/0x20 [ 667.768620][T11280] ? security_file_ioctl+0x9d/0xb0 [ 667.773700][T11280] __x64_sys_ioctl+0xd4/0x110 [ 667.778694][T11280] do_syscall_64+0xcb/0x1e0 [ 667.783168][T11280] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.789029][T11280] RIP: 0033:0x4665d9 [ 667.792899][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 667.812473][T11280] RSP: 002b:00007fa288dae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.820885][T11280] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 667.828847][T11280] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 667.837584][T11280] RBP: 00007fa288dae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 667.845558][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.853501][T11280] R13: 00007ffe7e6781cf R14: 00007fa288dae300 R15: 0000000000022000 [ 667.865733][T11280] kobject_add_internal failed for rfkill48 (error: -12 parent: hci0) [ 667.877531][ T163] Bluetooth: hci0: Frame reassembly failed (-84) [ 668.008530][T11282] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 668.025660][T11282] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 668.033614][T11282] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 668.046353][T11282] F2FS-fs (loop2): invalid crc_offset: 0 [ 668.052160][T11282] attempt to access beyond end of device [ 668.052160][T11282] loop2: rw=12288, want=8200, limit=8192 [ 668.064223][T11282] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 669.919521][ T1004] Bluetooth: hci0: command 0x1003 tx timeout [ 669.925538][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 671.999363][ T1004] Bluetooth: hci0: command 0x1001 tx timeout [ 672.006686][ T8316] Bluetooth: hci0: sending frame failed (-49) [ 674.079040][ T380] Bluetooth: hci0: command 0x1009 tx timeout