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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xf8, 0x7, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x6, 0x20000000, 0x4, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x2452, 0x6, 0x5, 0x8}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x8000, 0xffffffffffffffff, 0x5, 0x27}, 0x1}}]}, {0x70, 0x6, "b88ff407fc1ddca236a6093a1bbad54d0bdd703eb8dd39610d926a9daa445aa79f85c56e912480ff7d4676372224222f66253897040b826cbf9a5a1bc16d48c5fea1f8d989a127947d2aab84f0c33e5ad2cd002003e61d6398286147141aecc78ccde4a419d9827dcf4fd3fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x198, 0x1e, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe5, 0x6, {0x0, 'mangle\x00', 0x7f, 0x80, "dfbc13c0993b1a023cb5a0b017df5e4cf71742051dfa11d9e78c674d482201fad35d32d18f9f06e6a5ad1c92d2ea11ec30023d9ff8d4bfe9fa412292ad55b51c4fa795d49d82761621f4576e9c65efd478c4f1d030574508790b4c4cf845d07f6bf651fd7fd8ed4edc86cb709f519e0794153f1df01363503f697f2cee58060ba6840d5c1ad3d81dbb86b9ee2ae222ad9e4c9ec72d5b74f3c5a0958c6b8f5080e08b2e5a0cc96c8cdcfec1b654e08c65e95eefb7855165314223dc"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0x7d, 0x6, "dd44f962b56e5eb932f99a4d5ea4cf84ac3f4cd9a5bd82c272e14e6c708cf26b7b155b5514fe5170aba6915bc6c8fafe42feaad06eb8d42c627e1eb05db61c6e58b1aa753465bed264665f69f24f72f70c155593a4df769d57f843df11b7655381a6de606c22525edd25bedf8ee0116fe6ad96df43acbd8763"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x15c, 0x20, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x4, 0x401, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0xffffffffffffffff, 0x0, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0x551, 0xbe0d}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5bfcc7f9, 0x3, 0x8, 0x0, 0x8}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xa5, 0x7, 0x101}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0xdb, 0x3, 0x7f, 0x3}}}]}, {0x6f, 0x6, "08de7a54f38b1a47d6f7aa3ead134bf4f850df24d4beba81285672115b54d49e817cd6519aad3f5f84bfd87f8bd25540955127df3f7bdaa9506124477cdc0926ddf06243aa00158042be1fad3696ac68537ff5b8fe7d0a806e47db894b3339ade45ff36c223a1578fd5b76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_POLICE={0x90, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x140000000000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x800, 0x7, 0x1, {0x4, 0x2, 0x4, 0x7f, 0x1000, 0x66}, {0x1, 0x1, 0x7fff, 0x30, 0x2, 0x7b2}, 0x150, 0x0, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xf, 0xfffffff9, 0xff, 0x7, {0x31, 0x0, 0x6, 0x401, 0x100}, {0xc1, 0x1, 0xfff, 0x8, 0x7, 0x20}, 0xffff0, 0x5}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x3f}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x20}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5a8c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private2}, @TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d9a8932, 0x3, 0x6, 0x4, 0x6, 0x80000000, 0x6, 0x2, 0xa4, 0xb1, 0x1, 0xfff, 0xdce, 0x3, 0x24e1, 0x10000, 0x1f, 0xd0f, 0x3f, 0x9, 0x2, 0xfffffff9, 0x4000, 0xfb3, 0xbe, 0x6, 0x6, 0x400, 0xbd, 0x6, 0x97, 0x80000001, 0x40, 0x4, 0x10001, 0xeed, 0x7, 0x1b, 0x1000, 0x3ff, 0x247, 0x8, 0x9, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffbec, 0x7, 0x400, 0x3, 0xfff, 0x1, 0x3, 0xff, 0x0, 0x4, 0xacf, 0x8, 0x7, 0x4, 0x73, 0x7fff, 0x3, 0xe73, 0x5, 0x9, 0x7f, 0xffffffaa, 0x4, 0x7, 0xfffffe01, 0x2d, 0x9, 0x0, 0x1ff, 0x3f, 0x5, 0x10000, 0x100, 0x6, 0x3, 0x5, 0xfffffffd, 0x2000200, 0x7ff, 0x3, 0x4, 0x1ff, 0x1, 0x6, 0x0, 0xffff, 0x1, 0x80000000, 0xce4, 0x3, 0x80, 0x3, 0x3, 0x2, 0xfffffffa, 0x3, 0x400, 0x7dc, 0x6, 0x1ff, 0x8001, 0x7, 0x7, 0x4, 0x3, 0x7fff, 0x0, 0x20, 0x2, 0x0, 0x10000, 0x9, 0x9, 0x8, 0x1, 0x200, 0x7, 0x8, 0x7fffffff, 0x3, 0xfff, 0x0, 0xff, 0x0, 0x40, 0x0, 0x200, 0xffffffff, 0x2, 0x1, 0x5, 0x4, 0x7, 0x8, 0x4, 0x2, 0x3, 0x0, 0x2, 0x1, 0x7f, 0x7, 0x9, 0x10001, 0x719, 0x2, 0xff, 0x4, 0x6, 0x1ff, 0x0, 0x5, 0x8, 0x83ce, 0x5, 0xab, 0x6, 0x8, 0xfb, 0x8, 0x1, 0x6, 0x0, 0x80, 0x7, 0x7ff, 0x9, 0xfe, 0x1aa6, 0xffff, 0xffff, 0x4, 0x8, 0x66, 0x7, 0x3, 0x1, 0x8, 0x3, 0x4, 0x7ff, 0x8, 0x7ff, 0xffff7fff, 0x4, 0x7, 0x8bd, 0x6, 0x9, 0x6, 0x7fff, 0x66a6, 0x4b9, 0x7, 0x2, 0x20, 0x7fffffff, 0x9, 0x4, 0x10000, 0x8433, 0x1, 0x9, 0x8, 0x9, 0x1, 0xe6, 0x2, 0x0, 0xfffffffd, 0xffffffff, 0xb879, 0x7, 0x1000, 0x5, 0x4, 0x1, 0x1, 0x9, 0x3, 0x20, 0x9f0, 0x73, 0x3, 0xfffffe00, 0x1, 0x8, 0x2, 0x81, 0x7, 0x4, 0x0, 0x80000001, 0x7, 0x80000001, 0x4, 0x7fff, 0x9, 0x9, 0x7, 0x4, 0x0, 0xff, 0x5, 0x6, 0x0, 0x3, 0x1]}]}, @TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_ACT={0x4db0, 0x6, [@m_ipt={0x1094, 0x1a, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0xa4dfcaf82fcbf1ca}]}, {0x1004, 0x6, "cb3c06ea3cb0df40c36cabd4498fda3af4106917c3e67906ec7d78c9a22b5a3f7ec10f1181799018612ceeab0e0782d5718701c6f730228e745bc956fefff9b2e7e2c94c49c047ffe47337f5215b3714f2f00622e4318620783d1690a3a0adbcd3533fe2e509ccae6b41a8e66b6d44f0415af7503f083901568e1e941572dcc7f76ce823bb6b356829113bd01245bdf512abd4660ae3f0dd48a9ea64869e7825802561f4b238fc73ff09e423bcc674caac6c5b3af11455653e5a6522b658d1274a0f3c8806262261d5fd1c948c4c6bc6d8b38e177d7a111f74f8c6f59a6c1d1db22f22dd58f94a54fc3f54cbd6f27c1e8c4ff8fce213fa5ea85e3c2f8c8a0537323dd5d35e3ae24d2018ed1a4c58c6935606d9fdaf22d7a7032ec684946bd108c5cbbfba702f25af6ae1d230c2c2a3f5b7978597a022f37888231178b915f5430ba19da840586b9f8a8d39a1ad106280f3c491a7a3879cd1bf8103b8b65301bdd6a4afe3e0f44923fd0a21f40ecdfc9895b9d22fe83547df4302fad5007052cb2785a3deb218141ca86fd2203b131c6019c79ad20e7d064c47430bad6dc7c103f97fcd8eb080753a44b586801718a92cd4e1996ce30353cb0639e17c4258ac1e4947953d735dea54a2e9cb16eab86ea52c64116917eb3fa3b5c5eee53f56615decd01d2c224acb6bb7dfb669b80d9dd9f209c49f4b9a85bc5a88f33b383ed83934f5703891fb7c82e11533b954b2173469c0e1d50738e1b93af766d85ad2a4e8d39e4bcffcefcf2fcd850931c82e134142ab120f6c629a74debb65bd0f20e8abda1365c3b8b930bcc1a3a02dfcc4edd58b03d8db7539e9ebf8fb2e9e37b21a2dbdfaaecd5883c8603d6b554d47918ef5ce3fbc72ca5afa35a075d3c320680c7a5aa5cb53a9784da90c32ad08dc8345c452284b9b0ed5a6897772c5d02034c50342e213e392557cebbf7e382c09a4dcb4f3ffa2b1bf36a1ee775b462921c4d57d7f14c47e76afb1be0cae1f4cea8649ed794198d445ad5e41e2c17de189c78066121487ccd44d5369b5f195012afc4c7309c136270f13271414a2433d0830331efe53fe76d8480e85c63eacaf01ad0884a58f30614de761bbdd4737e91125da6243a648e7fb2a9ab7b7568cf325c5987c9c62b6c8490d0e4428937ba49ee54cc67165886a08b7b796b433863baf8c3e74fbd20f48d6b218d81afdd22cb801fc1f1261d6361657860904e5167bf7fd46703396f85eef302bcc8e04f0eab8199954c18efa2da1f009651773a69686c35ec411e03d6b769cf1d6cd1daa661ed1c75165f0d18cf379753016b01472e182b5b9c7d38ab76b2e263c6dc337ef800a62b358a3e382a5085a9ef8995054f61d5d6b365144acb4be8ef5c1078420bd3d5271731c1f4bec5ac907b0b5e1b9f4a527992dace6954adb999aacc19f03c9ecff45f2d64fe7a8854d6cc99a225b55b15c07ff98c0e1792c1314bea8bbee08adcc51cc3acda3bf383b04a4a85e22a280ca06c6550f60d23bce4f7da53bcb4a8622854cb98ed8131579c623dffd33b23bbe3ecf3505d3058e73121fa76ebe7987c5736a6c0ba0435335f9ee4eb627dfd03665dff436de6ff711c0016bbe704d9be61a0f7f66f54dbf60f8519835b819cc5bdcffd39d668f3c65e7207c30b5b66e6f38d777a4f525a659b2796d4ba62b0ca752543ecc46c6dd656e2c454f4b25fcb072b476a1e33a338e64a8c2107f800fff30f21415addca03efb13cc5d71bd0398b81002a5ed2502679b276e1060a40302a59abfb72e2093e44079768601eebaa96a7c418f78ebc7c75919e5eea8a7a5a0f34594870f1d4973c5c70fc443202a2fdc1cc41736912aeb20c3def4a674519b4593640f12501d791ec5228ae7e922e6dd1a4d21e4ae26a4844113a766c896f92b4683e09eeb3a298e68661c0563e559bd91ceabdd1c13133a51cb576f6b810c6b039acd5887a50e12402537c84cb9327a0b28db320809afc8178d5ee336e618827cc548b0035c03898ccd3dd39e6592cd42873ea61e47d2191aa6b7e042f5e36a0be6bf7ba83d7e74b04c9a03a8272cb9b32b75e29e4ce66a5342c046486c6ce309acd5901366001d6998adc8981a63c1beec41b79ee505556eb962e3341bc7aa994d6d1b8917d935b8d1d52e316b5468966b4caba895c3fbf18ee96783a374703d07f8faa71204341c50d46fb20a58f99628162d1878e86c5f1764bb617e96662e6071cbf51f1fac2747ffb2e4c7c20f62b3affc6c1a252ad3a6db7f8d10bb148900e36cc048c15046e0167052c8dbec01966a882339a6f3298bc272b7c0ed595551b024092f28d2e20db9601d37d3d8a5d03e8d90c3a9b3bb9e48da4917c0f9cf1b88ae6dd7582c6e5358a869596b653b0a9e5bc57c2226688900ef0f5da36202475b44349159f1c18965306807684ed6168703cedd366dc267737ad3df8d0cadea09e4daaf0de7d611b30ee12e867c626fa22250745f52b69e51c694f4f662945c53d1f303cd25d29e6f1952a4539f223d4393c1e3c953a20378013ad8bda9a662b212880e03f04040d90f63341628e7dfea332e3676acf72dd0557eb23a4b0eacd6f2cd5773fb38bc8821bef936a668d34d97ce5cba471a37a7a3b5e66c5dce1ae1d08f505a9fa15aa8c93a367a38551979ce3387a1db363489bd16f3bb218089a688d297ff6d03edcfe29de69c091e6c88414ff44fecb0d7b32eb2b87d663db5e28faa0ae26ed5468631fc30f4db47f1ff37d4115b9a3f15b9213e6285b2e91ba98a95ee0b8b8d858e64d5691a3530ae24785848cbaabc18f8d1b274726be9a46f0fa8ddf07793fa2fc03406599934891d12ed8a77247534f5e9f4fab00241ab1fa57f53fdeb1ff472ef2c27c138ead3037118c51de8cc897fb10f360f5e85e1b8ebd04057799f3d072129669271d51b45505e6f7857320086227bd0171fd5bc70fe992e54df45a4f5686fe174f9384f6474d8d2ace1b59b9fbd3c86a4cff4d6eed7aea7917319f065d90e094e02c81ac58a66534c4c2d8ac22c6daea7b83f4e1420e037bbbe2c0aa43cc76eec524997b6be00ba035e8567a83160334ccb698f387d616fa07734af8998f575c7df1aedb14fa9cf35b615b0c51341b8447edc2a5dbf7f9662a17b55860ce91a4f874953a4ccc43ce234174ff84524c2c27087e1d32ea7801baeb776791608864d183c273100d25190ab15dbd478d7f4ff29b4bd388ae946b6e678cedd5e43605feb0ddf06e522a27966751fe4824cd089c4804517370371b7de7131bae7b97784e6750ce586c907ad1ae013b7da00b672405cdeff1fff6b574f69e60e6850014c7a8f77dfc072f9810a7e976b8a5d664308568c215878a5f77f8025b5f2618f26c60c3769b0ba77fa347792f1a0b2ccb3f4647a2d4e986a438c8c079a256083d68f972982425657e4b3ebfc6023ee02bafaff208a831573b63c1b0d88672a96dab59eb62706da1cb7bbaedc523e7e61d296f9fbbd40a0036ed610bd7a004abcf0999755f99147217198d604139dffa53bcf10efdc7764c3aae521e632962cc1cbe0dd10232323f76dcc856ba52bce86ed8ace1eb6dc0ab5c065f19c0cd1a8cbcf461ab4f40d9c45e0f6fc31ef1cc1c8124807b66a9cd42d2d06ec0383b9eb6706ba73a5bd6f80cf1b73f76a026d5b2ce36e8ae51c8e64b97e401410d3ebe05a4fa6ca79f1eda97790cc845ed0036301048e25af1d5e1370e4a0fef18797b21e9e2ddb59fd391e958dc308ffd7c42871eeaca8c52339f112f19a717eb31b07453e8810a9cb8cbe11c2758d132915f678a3ab4b08271c71ab372a57e164cf0462fcf24a63956256c2556bd7bacbc4eecf66cf8b8d8dd5ae6c8fd0ac14b66148cc649ab0bf852494ec4f9c61d2e9e8aef27430e8ab76d9c903e09ea37a40db0bebf78567c7addc3268222f4cca1792ca798c3470158e8593c46ea17b0e039ba0966507777f6e60ac3f6bd516b7b04e89ed4aac70787473a3ffe75b4c823ed837104f5b9cac832ed8b6614556e449a87baed78d9c46d365f09b7dd3ea70800bf3a9451f95bce5eee0f465941be989abe0e08304640204db33605d089a61bd1363c2ed116e2c943f008cd659c0e274d4673be31f73f39101abd573fef5c3e7903cac5764b98d4ced419e2cd2ad2958b4d179869a670fc9caf815602c5c9c7c7a1643f332232bc89a15f2b5b6c2c26cc235486b527e6bbb0d074d41d5908cad2d5414957307f43d484da8a106629eb5682dfbc1c815de0d1e8ed779dca3fbf84a6c85810c596aeecd31aeb6cb9a049d2fdec6e5f7a5f14ac350e8a43d3dd4324229a42e2aeb981c68a14a801d7ece4c81fd722c5e0335c00f631b167b9390b7fa0a7a86e101690abb951598bd605f203d7d73e0604a7823e8f2829b832c887b7669478fb59ebf6af65d5d68023e8f9b4f91e033133e4c99f0a3a059573028ba3277b0269db9580fa1201457593a897e7edb760bf4c8d8c8686d2e93c25d449c5f3b6df556c4316211d1c7496a69f73042bd1f1be149d51bb0a7bfdf41e28114390e2120501458fd734288e2e48b2c9fdf7b1bd119e1408adb0af993b4a8495a1ee0d47647ab7ca5daa295114ad56850d59e43c13d382a2e2e5a3e42138516b9bcad6b84d172e06acc2f504d06f0cd10efc20f30cd1481865f7869d90eadffd3a292dab8305b3a54a185a5547bf8089920118f74b9b8796dcad5311b2c323430954e610ddd1d895955fcb3b7774e7d7966ed7faa6f8d7743d3bf75b33c38a03b2c2875f84727f855555014b2e74e431b45eff57b00ca2c44fdbbccffe411412a3be5f6e8ab93adac45300f766f0fe176431fc15c97162dccb3a00770a3dc7862b58f2bd2a7a14b06a01ecf74eaa7a7ec170d13fb919d979753ad4e9a33dae90324ec023fb09e2fc4fba40c54fb2a6c2df51991268453183330d3a0917c46483f03a2692c404576808a68e15353971c1dc159c4f3ea3b3c7e50af1694060dbcf88c82f5a77acb84176fcd8711f03cdeca8b353406ebe13bab62e18f7da9a26c472732b54154f8dc1c9b522d1f9bd019c109ebfe2c379b17485ceec67be508a536ed35a7037baef6c1ba7276387dcae79c5d910f2923bb2ba7e72c75905b7246c7e5eb6e8b04d97c45758275414d40d6d019f20e6d9e3972bba63ef452efbc808644ea1e206798e795e5483bea7db25ec327ad1255ebe054bc1060468a0900c7dc80bea6a35e0120e962c838c5d002fdb6df286f8b1d20c533f823b952a072221e555e9dc89951088ef4b11551d9c3763894051f167efd371f679cfe648523e59ea4a5402fdfdd62b954452afacc06c4c71a79ad5ef5180ddeedb9fca4b197337c592f4f1ab71b9e4e4f17f881fdfe3effb6ac9dd7f14fe635be2eadc8f3725117d9ac56841a44deaeeeebc37408d5414cc34203ce239482b82795e6e2c7e52b37a2de6145d8b340f1ebf10011504d597ad431f6e43ba5dc251cf9b589bd9484a34ac915e09c0326f7d6387a7b8028833589f41c3ba0865fdcbdde5b83ee4d147962f3aa3fc8d98e13404c92704af855a198d45ed8d9e005b16a1763671cb2e3f31189bbef737439a9b8c418bed986792dc9ff681531d644f4a8d77c74fe713e29de5521b7b215761b840dd5a1a1e48d680d4bda9d93c6950549c1b0f9621aeeb11d8bedcbaa2baa7c4f77126d73669928bd6501d7460caa165a5bb5ced744687a56464b54ff401fadfdbc2ee64c59834b8a6d2ae1b84fb3f1fc9eb22c5ce60163ebb9ec4e76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x178, 0x20, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x3, 0x5, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x7, 0x2ad, 0x101}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x48000000, 0x81, 0x7, 0x80000001, 0x78b}, 0x2}}]}, {0xd5, 0x6, "d4fa48a3c6d16874c47418d1b70fce596e77d9aa2736c432c0dda8a211ef8bf0d21f96680bcf6a4cad407b7fd82f08ccd8fe43eb729bb2b83aedcc54ad8948467e172fbd9b8a645c217802c71dad9bd1ad605d1ce18189671f6381a9998283065d0cfc929aa1cac096f57c7a9f6dfe1817b338bc3003ea45a0869e739ddabef85f3932ee6b0d5905b635c99015cdc6dd7f3fb1fbc6a6f8951bd00cdc021918c5d26a0374ce24137f63f4bebada6a0c75b6a799099a014fe2d196f25a4fa9d59bb455d75234732bf24e89d898d2a20717c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_simple={0xc4, 0x14, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'netdevsim\x00'}, @TCA_DEF_DATA={0x11, 0x3, '0000:00:10.0\x00'}, @TCA_DEF_DATA={0x8, 0x3, '{\xc8/\x00'}, @TCA_DEF_DATA={0x18, 0x3, '&-%#\x01,^%^/){-(()[:/\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'netdevsim'}, @TCA_DEF_DATA={0x9, 0x3, ',@,]\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x12, 0x3, '}--()}@+\n{$\'\'\x00'}]}, {0x1b, 0x6, "d99bc32791596f591073c6c10b60bd1689a5a8a8954ab8"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x3adc, 0xf, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x3a6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0xff, 0x2, 0x10000000, 0xc9, 0x800}, 0x4, 0x5, [{0x0, 0x4, 0x4, 0x6, 0x80, 0x8}, {0x0, 0x40, 0x3, 0xfffffffe, 0x1, 0x8}, {0x6, 0x9, 0x4, 0x1, 0xa6, 0x10001}, {0x7, 0x6, 0x200, 0x8, 0x7, 0x8000}, {0x0, 0x7, 0x6, 0x80, 0x7, 0x6}, {0xc6, 0x9, 0x6, 0x1f, 0x7, 0x6}, {0x1, 0xe3, 0x18, 0x7f, 0x8, 0xffff}]}, [{0x20, 0x5, 0x101, 0x610b, 0x94, 0x80000000}, {0xe9, 0x3, 0x9, 0x6, 0x2, 0xb4}, {0x6, 0xff, 0xfffff801, 0x4, 0x7fffffff, 0x80000000}, {0x5, 0xfffffff7, 0x3, 0x1, 0x4, 0x2}, {0x7ff, 0x5, 0x1ff, 0x1, 0x7ff, 0xa4}, {0xff, 0xfff, 0x7, 0x9, 0xa8, 0x1f}, {0xfffffff9, 0x8, 0xfffffffc, 0x6, 0x1, 0x101}, {0x7, 0x800, 0x7ff, 0x7193, 0x1157, 0x8}, {0x3, 0x2, 0x7, 0xd9a, 0x3f, 0x1000}, {0x3, 0x44, 0x7d, 0x62, 0x6}, {0x8, 0xfffffffa, 0x7f3a, 0x7, 0xff, 0x8}, {0x6, 0x3, 0x8, 0x1, 0x9fe2, 0x7f}, {0x0, 0x7, 0x0, 0x7f, 0x8, 0x800}, {0xfffffff8, 0x6, 0x3ff, 0x61, 0x20, 0x2}, {0x4, 0x302e, 0x1, 0x66f6, 0x2, 0x4}, {0x4, 0x0, 0x8, 0x8, 0x400, 0x7f}, {0x0, 0xffffffff, 0x4, 0x3, 0x0, 0x9}, {0x0, 0x3, 0x0, 0xfff, 0x10001, 0x20}, {0x6, 0x4, 0x5, 0x7fff, 0x800, 0x1ff}, {0x3ff, 0xfff, 0x2, 0x40, 0xfffffffc, 0x200}, {0xf0b, 0x0, 0x171, 0x7, 0x6, 0xffffffff}, {0x80000000, 0x2, 0x9, 0xffffffff, 0x101, 0x4}, {0x5a5f1bf7, 0x5, 0x8, 0x3, 0x26, 0x7fff}, {0x5, 0x1, 0x2c, 0x4, 0x79459388, 0x7f}, {0x7, 0x6, 0x5, 0x2, 0x8, 0x401}, {0x3, 0x1840000, 0x3ff, 0x5, 0x1, 0x2}, {0x5, 0x1, 0xb1, 0xf6a, 0x6, 0x8000}, {0x5, 0x1, 0x0, 0x6, 0xfff, 0x3}, {0x10000, 0x40, 0x20, 0x9, 0x8f, 0xfffffff9}, {0x419377b8, 0x3, 0xff, 0x65b1, 0x4e68, 0x7}, {0x929, 0x2, 0x7, 0x3, 0x401, 0x6}, {0x2, 0x20, 0x1, 0x7, 0x73c3, 0x1ff}, {0xc5f, 0x1, 0x0, 0x1, 0x740, 0x8}, {0x1, 0x3ff, 0x6, 0x90, 0x6, 0x6a1}, {0x7ff, 0x80000001, 0x10001, 0x4c4, 0x8}, {0x2, 0x8, 0xafb, 0x4, 0x7, 0x3}, {0x3, 0x200, 0x200, 0x9, 0x1, 0x8}, {0xffffffff, 0x7, 0x9, 0xe4, 0x1000, 0x5}, {0xffffffff, 0xfffffff8, 0x5, 0x6, 0xb4d5, 0xffffff27}, {0xfffff82e, 0x4, 0x0, 0xff, 0x9}, {0x4, 0x2, 0x10000, 0x4, 0x5, 0x5}, {0xfffffff9, 0x80000001, 0x8, 0x9b, 0x9245, 0xead}, {0x6, 0x4, 0x8, 0x2, 0x0, 0x9}, {0x20, 0x80000000, 0x2000000, 0x6, 0xd, 0xd41}, {0x6, 0xfffffffe, 0x4, 0x40, 0x1ff, 0x25e}, {0x1, 0x1000, 0xfffff801, 0x9, 0x6c, 0xec}, {0x0, 0x40000, 0x1, 0x200, 0x8, 0xfffffffa}, {0x3, 0x1, 0x0, 0x7, 0x4, 0x7}, {0xffffffc0, 0x0, 0x9, 0x1, 0xfffff801, 0xe05}, {0x7b73, 0x7, 0x40, 0x6, 0x400, 0x1f}, {0x1, 0x2, 0x4, 0x3dad6099, 0x101, 0x800}, {0x8, 0x3, 0x401, 0x7, 0x3, 0x8001}, {0x5, 0x401, 0x68e4c11c, 0x6, 0x7, 0x6}, {0xa20, 0x3f, 0x3, 0x100, 0x1, 0x2}, {0x3f, 0x3, 0x5, 0x200, 0x0, 0x307b}, {0x400, 0x1f, 0x8, 0x31, 0x5, 0x10001}, {0x0, 0x0, 0x5, 0x7, 0x1000, 0xb01}, {0x6, 0x81, 0x0, 0x10001, 0x7, 0xffff}, {0x200, 0x3c1, 0x7f, 0x7f, 0x5, 0x401}, {0x2, 0x6, 0x800, 0x7f, 0x7, 0x3fe}, {0x2, 0x7, 0x9, 0x4, 0x5, 0x7f}, {0x3, 0x6, 0x401, 0x9, 0x3, 0x4d31}, {0x6, 0x10, 0x9, 0x6, 0x7, 0x4}, {0xd4, 0x857e, 0x7, 0x9, 0x0, 0x100}, {0x6, 0x8000, 0x81, 0x1, 0x95, 0x5}, {0x9, 0x8, 0x80000000, 0x8, 0x1, 0x9}, {0x1f, 0x9, 0x7fff, 0x0, 0xb6, 0xd7}, {0x8000, 0x9, 0xfffffe00, 0x75, 0x5, 0x9}, {0x7, 0x634, 0xfffff800, 0x4, 0x7fff, 0x20f0}, {0x1, 0x6, 0x6, 0x8, 0x6, 0x91f5}, {0x0, 0x100, 0x177, 0x1, 0x9, 0x6}, {0x8001, 0xfffffff9, 0x400, 0x6, 0x9, 0x2}, {0x9, 0x7f, 0x0, 0x9, 0x0, 0x77}, {0x8, 0x1ff, 0x5e4a7be3, 0x0, 0x3, 0x7}, {0x48, 0x390, 0xf5, 0x6f80000, 0x5, 0x10000}, {0x4, 0x101, 0x71, 0x4, 0x7, 0x8}, {0x9, 0x21d, 0x8, 0x7f, 0x80000001, 0x6}, {0x5, 0x0, 0x4, 0x200, 0x6, 0x1000}, {0x9, 0x9, 0x7, 0x26, 0x4, 0x8}, {0xa3a9, 0x9, 0x3ff, 0x4, 0x7ef28888, 0x2}, {0x1, 0x7f, 0xfffffff8, 0x7fff, 0x7f, 0x6}, {0x0, 0x80000001, 0x1000, 0x1, 0x7, 0xecb1}, {0x200, 0x0, 0x2, 0x78, 0x0, 0x2}, {0xffff0000, 0x100, 0x401, 0x5f, 0x967, 0x9}, {0x55e, 0x80000000, 0x3ff, 0x5, 0xc4c, 0x6}, {0x0, 0x8001, 0xff, 0x10000, 0x8001, 0x4ef23fdc}, {0x1, 0xfffffff8, 0x5, 0x20, 0x2}, {0x0, 0x9, 0x7, 0x9, 0xcd9b, 0x8}, {0x3, 0x0, 0x5, 0x8, 0x0, 0x800}, {0x10001, 0xffff, 0x800, 0x6, 0x7}, {0x9b, 0x6, 0x0, 0x0, 0x2, 0x2}, {0x7, 0x8, 0x2, 0xa78, 0xb9, 0x6}, {0x1, 0x7ff, 0x200, 0x5, 0x6, 0x8}, {0x4, 0x80000000, 0xfffffffe, 0x6, 0x2, 0x9}, {0x2, 0x5, 0x20, 0xfff, 0x1ff, 0x35}, {0x7fffffff, 0x3, 0x5, 0x2, 0x2, 0x9d8b}, {0x81, 0xef7, 0x4, 0xf070, 0x400, 0x6}, {0x9, 0x80, 0x1f, 0x1, 0x48, 0x81}, {0x0, 0x7, 0x5, 0x0, 0x27, 0x8}, {0x40, 0x4, 0xa05, 0xff, 0xff, 0x7fff}, {0x478, 0x20, 0xb5, 0x3, 0x2, 0xd5}, {0x7, 0xa8, 0x9, 0x0, 0x7, 0xfffffff7}, {0x3f, 0x1f, 0x9, 0x1, 0x20, 0x2}, {0xffffffff, 0x4, 0x6, 0x5, 0x0, 0x2}, {0x5, 0x0, 0x6, 0x4, 0xfff, 0x200}, {0x0, 0x7ff, 0x6, 0xe3, 0x3622}, {0xffffffff, 0xffffffff, 0x8, 0x9, 0x7, 0xffffffe0}, {0x4, 0x8, 0x7fff, 0x5, 0x7, 0x8000}, {0x1, 0x80000000, 0xe48c, 0x4, 0x80000000, 0x8}, {0x81, 0xffffffff, 0x20, 0x4, 0x3}, {0x9, 0x0, 0x200, 0x8, 0x1, 0x5be7}, {0x7, 0x8, 0x3ff, 0x3, 0x4c56d2d3, 0x7}, {0x8, 0x6, 0x258e, 0x80000001, 0x8, 0x200}, {0xfffffffd, 0x4, 0x1, 0x9, 0x0, 0x5}, {0x99, 0x7ff, 0x10000, 0x100, 0x3899, 0x3}, {0x0, 0x8, 0xfff, 0x4, 0x8, 0x7}, {0x50c8, 0x2, 0x8, 0x7, 0xa7, 0x7fff}, {0xffff7fff, 0x7, 0x412, 0x3f, 0x4, 0x2}, {0x1, 0x410513ee, 0x3, 0x34, 0xf42a, 0x5}, {0x9, 0x2, 0x30, 0x2, 0x4, 0xffffffff}, {0x8bf, 0x7ff, 0x30478b91, 0xffff0000, 0x4, 0x7fff}, {0x5, 0x3, 0x0, 0x3, 0x9, 0x80000001}, {0x8, 0xfeb, 0x7, 0x5, 0xd7, 0x8001}, {0x0, 0x0, 0xf10, 0xfff, 0x80000001, 0x4}, {0x8, 0xfffff6d1, 0x55e, 0x1, 0x1ff, 0xfff}, {0x5, 0x817, 0x5, 0x8f, 0x13b9, 0x3}, {0x3d1, 0x8, 0xfff, 0x4, 0x0, 0x4}, {0x400, 0x3f, 0x20000000, 0x4e4c, 0x7, 0xffffffff}], [{0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {}, {0x2}, {0x2}, {0x5}, {}, {0x1}, {0x2, 0x3}, {}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x4}, {0x2}, {0x2}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xffffffe0, 0x0, 0x0, 0xd05b95b, 0x8}, 0x1, 0x9, [{0x8000000, 0x1, 0x46a, 0x7, 0x6}, {0x8, 0x80000000, 0x8, 0x9, 0x0, 0xd3}, {0x101, 0x273, 0x400, 0x3, 0x7fc00000, 0x5}]}, [{0x1, 0x3, 0x8, 0x200, 0x8, 0x5}, {0xddb, 0x4, 0x5, 0xfffffff9, 0x7, 0x3}, {0x4, 0x2, 0x0, 0xb3, 0x1ff, 0x7}, {0x0, 0xfffffff9, 0x4, 0x0, 0x20, 0xfff}, {0x8000, 0x1, 0x0, 0x3f, 0x8, 0x8}, {0x6, 0x3ff, 0x6, 0x7, 0xffffc000, 0x800}, {0x8, 0x1, 0x42d5, 0x5, 0xd4, 0x7}, {0x2e4, 0xffff5f55, 0x8001, 0x521294ce, 0x7ff}, {0x4, 0x83, 0x3, 0x20, 0x7f, 0x4}, {0x4, 0x9, 0x3, 0x1, 0x4}, {0xebda, 0x8000, 0x1, 0x3ff, 0x3ff, 0x7fff}, {0x3, 0x2, 0x1, 0x3, 0xb85, 0xfffffffe}, {0x2, 0xffffff01, 0xff, 0x38ee, 0x1, 0x100}, {0x0, 0xff, 0x8001, 0x73, 0x9, 0xffffffff}, {0xba, 0x0, 0x0, 0x8, 0x6, 0x2}, {0x9, 0xfffffffd, 0x7ff, 0x2, 0x0, 0x6}, {0x10000, 0x7f, 0x686, 0x5, 0x4, 0x5}, {0x28df, 0x8, 0x1, 0x101, 0x8a3}, {0x9, 0x9, 0xffffffff, 0x7f, 0x3, 0x8}, {0x6, 0x5, 0x1, 0xa15, 0x7fffffff, 0xa410}, {0x265, 0x1f, 0x401, 0x0, 0x9}, {0x1, 0x45, 0x20, 0x6, 0x8, 0x8}, {0x80000000, 0x8, 0x4, 0x400, 0x43, 0x7}, {0x2, 0xd03a, 0x1b, 0x40, 0x6, 0x6}, {0x267161e, 0xdfc, 0x0, 0x1, 0x8, 0x7fff}, {0x7fff, 0x80000000, 0x4, 0x80000001, 0x6}, {0x4, 0x2, 0x1f, 0x401, 0x10001, 0x8}, {0x8, 0x1, 0x7b32efdb, 0x3, 0x5, 0x1}, {0xd44, 0xf6b, 0x1a, 0x80, 0x8, 0x80000001}, {0x3, 0x185e, 0x1, 0x401, 0x1, 0x3}, {0x2, 0x9, 0x3, 0x7, 0x7fff, 0xe3}, {0x9, 0x2, 0x3f, 0x0, 0x800, 0x1ff}, {0x2, 0x0, 0x80000001, 0x4, 0x101, 0x9}, {0xfffffff7, 0x0, 0x2, 0x1, 0x3, 0x7}, {0x0, 0x1, 0x72, 0xe8c, 0x3f, 0x8001}, {0xfb5d, 0x3ff, 0x0, 0x7ff, 0x3}, {0x5e93, 0xa2, 0x400, 0x2, 0xff}, {0x4, 0x7, 0x4e, 0xffff, 0x4, 0x5b}, {0x5, 0x7, 0xffffffff, 0x15d, 0x9, 0x5}, {0xdafb, 0x32, 0x1, 0x1, 0x2, 0x9a3}, {0x20, 0xfffff001, 0x400, 0x2, 0xff, 0x7}, {0xffffffff, 0x4, 0xfffffffe, 0x8, 0x6, 0x5}, {0x7, 0x40, 0x1, 0x0, 0x800, 0x8}, {0x5, 0x7, 0x5, 0x5, 0x101, 0x81}, {0x8, 0x2, 0x7a66, 0x40, 0x5, 0x10001}, {0x1, 0x5, 0xfffffff9, 0x4, 0x1, 0x1}, {0xff, 0x3ff, 0x1, 0xff, 0x100, 0x3f}, {0x9, 0x3, 0x5, 0x4, 0x4, 0x3}, {0x5f5, 0x7, 0x6, 0xec0, 0xd, 0x1}, {0x0, 0x3, 0x4, 0x9, 0x62c, 0x3f}, {0x3f, 0x538, 0x8001, 0x1ff, 0xfffffff8, 0x1}, {0x7e, 0x80, 0x6, 0x9c, 0x6, 0xffff}, {0x6, 0x8, 0x2, 0x8, 0x4, 0x2}, {0x1, 0x8, 0x3ff, 0xd6, 0x400, 0xdbe}, {0x81, 0x5, 0x6, 0x3f, 0x5, 0xfffffffe}, {0x0, 0x2, 0xd29, 0x80000001, 0x0, 0x6}, {0x6, 0x7fff, 0x5, 0x5, 0x6}, {0x7fffffff, 0x2, 0xdb07, 0x1, 0x0, 0x2}, {0xbed, 0x80000001, 0x5, 0x7fffffff, 0x4f9b, 0x4}, {0x0, 0x9, 0x8, 0x9, 0x6, 0x4}, {0xffffffff, 0x81, 0x0, 0x5, 0x8, 0x2}, {0x9575, 0x6, 0x9, 0x80, 0x8, 0x4}, {0x97, 0x81c, 0xffff3973, 0x81, 0x6, 0x4}, {0x3, 0xab9, 0x4, 0x9, 0x0, 0x3ff}, {0x0, 0x10000, 0x80000001, 0x40, 0x3, 0xff}, {0x6, 0x1e56, 0x8, 0x1, 0x1000000, 0x5}, {0x7, 0x101, 0x5, 0x5, 0x10001, 0x1}, {0x4, 0x3, 0xb3e4, 0xfffffff8, 0x0, 0x1}, {0x7fff, 0x20, 0x465ed20b, 0xf2, 0x1, 0x81}, {0xfffffffa, 0xb75, 0x8, 0xfff, 0x8306, 0xffff1d66}, {0x8, 0x3, 0x200, 0x1, 0x5, 0xc0ca}, {0xffffffff, 0x9, 0x3, 0x5, 0xff, 0x100}, {0x5, 0x10000, 0xffffff4c, 0x4, 0x3, 0x10000}, {0x5, 0x20, 0x80000001, 0x5, 0x200, 0x3}, {0xbdd, 0x80000001, 0x9, 0x14, 0x8, 0x5}, {0x2, 0x5, 0x1, 0x200, 0x6, 0x8}, {0x7c36, 0x40, 0x7f, 0x80, 0xb3e8, 0x4}, {0x1, 0x6, 0x8, 0x80000001, 0x1f, 0x46}, {0x3, 0x5, 0x7f, 0x68b5, 0xffffffff, 0x9}, {0x800, 0x1, 0x0, 0x0, 0x25ba, 0xffff8001}, {0x7f, 0x1ff, 0x81, 0x3140, 0xf08, 0x7d6a}, {0x4, 0x7fffffff, 0x200, 0x10000, 0x2, 0x7fff}, {0x2, 0x400, 0x401, 0xfffffff7, 0x4, 0x200}, {0x9, 0x81, 0x0, 0x7ff, 0x2, 0x6}, {0x800, 0x927, 0x0, 0x1, 0x401, 0x77}, {0x6, 0x80000000, 0x9, 0x7fff, 0x8001, 0xffffffe1}, {0x1, 0x0, 0x0, 0x5, 0x20, 0xff}, {0x56, 0x7, 0x9, 0xc6, 0x6}, {0x1, 0x1, 0x3, 0x70d4, 0x7592, 0xa0000000}, {0x7ff, 0x3, 0x5, 0x6, 0x400, 0x9e}, {0x6, 0x8382, 0x8, 0x3, 0x0, 0x3}, {0x3ff, 0x6207, 0x6, 0x0, 0x2, 0x7f}, {0x9, 0x2, 0x80, 0x5, 0x2, 0x3bba}, {0x7f, 0x7, 0xfff, 0x8, 0xfffffffb, 0xfffffffe}, {0x8, 0x8, 0x0, 0x81, 0x3, 0x2}, {0x401, 0x9, 0x7, 0x7fff, 0x401}, {0x80, 0x5, 0xc8e0, 0xf5, 0x2, 0x6}, {0x3f, 0x8, 0x5989d6eb, 0x3f}, {0x31a4c193, 0x16e, 0x517, 0x100, 0x800, 0x5}, {0x4, 0x4, 0xffff8000, 0x8, 0x101, 0x200}, {0xff, 0xf3, 0x1ff, 0x0, 0x9, 0x800}, {0xf4, 0x6f5, 0x9, 0x7, 0x3ff, 0x4}, {0x3f, 0x9, 0x0, 0x3, 0x32c7, 0x800}, {0x4, 0x3ff, 0x9, 0x7fff, 0x5, 0x4}, {0x5, 0x2, 0x9, 0xff, 0x0, 0xc0}, {0x800000, 0x2, 0x4, 0x2, 0x5, 0x40}, {0x9, 0x9, 0x2, 0x4, 0x56da4bb0, 0xfffffe01}, {0x20, 0x7, 0xc0e9, 0xef8f, 0x4, 0x5}, {0x80000001, 0x4, 0x7fffffff, 0x1, 0x9, 0x7e}, {0x4, 0x8, 0x2, 0xfffffffc, 0x9, 0x3}, {0x9, 0xfffffffa, 0x9, 0xffffa01f, 0x100, 0x3}, {0xea, 0x1, 0x10000, 0x2, 0xffffffff, 0x100}, {0x4, 0x1, 0x9, 0x0, 0x6, 0x8}, {0x8, 0x6, 0x5, 0x7fff, 0xffff}, {0xa6b, 0x80000000, 0x0, 0xffff8000, 0x1, 0x6}, {0x7, 0x0, 0x4, 0x7, 0x6, 0xd70d}, {0x6, 0x1, 0x5, 0x4, 0x1, 0x8}, {0x2, 0x200, 0x4, 0x8, 0x2}, {0x8, 0x80000000, 0x5, 0x4, 0x0, 0x1}, {0x1, 0x81, 0x913, 0x4, 0x4, 0x393}, {0x3, 0x4, 0x4, 0x4, 0x20, 0x6}, {0xfffffff8, 0x0, 0xb6d8, 0x80000001, 0xffff0001, 0x4}, {0xbf, 0x0, 0x1, 0x3ff, 0x5, 0x7f}, {0xfffff800, 0x3, 0xb3b, 0x8, 0x4, 0x6}, {0x9, 0xc2645114, 0x3ff, 0x7, 0x7ff, 0x42}, {0x5, 0x6, 0x9, 0x1, 0x7}, {0x2, 0x7f, 0x3ff, 0xff, 0xd3df, 0x7fffffff}, {0x1, 0x62, 0x7, 0x1ff, 0x9, 0x8}], [{0x3}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x3}, {0x5}, {0x3, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x337698d75db1cde9}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x6}, {0xd6df5e0a0296476f, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x2}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x7, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x6b141bb696ae4a94}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x7a02252e4c5d6941}, {0x5, 0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x3, 0x0, 0x8, 0x6, 0x800}, 0x7, 0x41, [{0x7ff, 0x100, 0x401, 0x10000, 0x5, 0x7fff}, {0x0, 0x2, 0xfff, 0x65, 0x9, 0x5}, {0x1000, 0x1ff, 0xfffffff9, 0x5, 0x9, 0x80}]}, [{0x6, 0x2, 0x1, 0x80000001, 0x1132, 0x5}, {0xffffffff, 0x7f, 0x4, 0x800, 0x1, 0x1}, {0xffff, 0x8, 0x10, 0x3ff, 0x7, 0x910}, {0x9, 0x6, 0x0, 0x7, 0x4, 0x80000001}, {0xffff, 0x7, 0x89, 0x6, 0xffffffff}, {0x2, 0x4, 0x9, 0x40, 0xfffffe00}, {0x9, 0x401, 0x2, 0x0, 0xfff, 0x9}, {0x1, 0x4, 0x5, 0xfff, 0x1, 0x4}, {0x0, 0x7, 0x3f, 0x8, 0x2, 0x4}, {0x4, 0x3, 0x1, 0x1f, 0x3, 0xfffffffe}, {0x5, 0xf0, 0x800, 0x3, 0x40000000, 0x200}, {0x3, 0xe1d, 0xd9a, 0x6ef9, 0x100, 0x7}, {0x6000, 0x5, 0x8, 0x20, 0x7, 0xffffffff}, {0x7fffffff, 0x0, 0xc64, 0xffffffff, 0x7fffffff, 0x9}, {0x7, 0x4, 0x7938, 0x0, 0x1f, 0x1f}, {0x8, 0x7, 0x800, 0x8, 0x40, 0xfb}, {0x5, 0x579, 0xff, 0x80, 0x1, 0xbc}, {0x200, 0x6, 0x6, 0x80000001, 0x7c2c2f88, 0x3f}, {0x9, 0x40000, 0xffffff00, 0x7, 0x4, 0x10000}, {0x2, 0x8, 0x5, 0x7fff, 0x3f, 0x7f}, {0x5, 0x623, 0x1c5, 0x665bf83e, 0xffffff5b, 0x2}, {0x3, 0x0, 0x8, 0x6, 0x7fc, 0x3}, {0x1f, 0xff, 0x1bb6, 0x6, 0x80000001, 0x4c}, {0x7, 0x5, 0x3, 0x4, 0x8001, 0x4}, {0x88, 0x8, 0x3, 0x8, 0x3, 0x80000001}, {0x2, 0xce58, 0x6af5, 0x9, 0x8, 0x8000}, {0x3b, 0x26, 0x200, 0x5, 0xec8, 0x6}, {0x1, 0x3, 0x117d7300, 0x4, 0x0, 0xffffffe1}, {0x10000, 0x9, 0x5, 0x8, 0x0, 0x7f}, {0x2, 0x6, 0xaa, 0x7fffffff, 0x4, 0x3}, {0x101, 0x1000, 0x80000000, 0x10000, 0x7, 0xcb}, {0x4, 0x10000, 0x2bc1, 0x0, 0x40, 0x7}, {0x0, 0x3000000, 0x3385, 0x2, 0x4, 0x259a}, {0x0, 0x1, 0x200, 0x4, 0x10000, 0x1}, {0x1c5, 0x1, 0x1ff, 0x9, 0x5, 0x80000001}, {0x80, 0x2, 0x7, 0x8, 0xfffffffc, 0x8}, {0x5, 0x1ff, 0x5, 0xfffffffb, 0x9, 0x3e92}, {0x4, 0xb356, 0x7f, 0x6, 0x5, 0x636}, {0x1ff, 0x0, 0x3, 0xcc, 0x8, 0xfb6c}, {0x64f8bde, 0x7, 0x4, 0x617f, 0x4, 0xb9cb}, {0x2, 0x4, 0x9, 0x1, 0x9, 0x9}, {0x1b4, 0x4a03, 0xd4, 0x2, 0xc3a, 0x401}, {0x5, 0x2a9d, 0x7, 0x4, 0xfffff1ef, 0x7}, {0x400, 0x3, 0x9, 0x8001, 0x20, 0x8e0}, {0x5e, 0x3, 0x3, 0x8b, 0x6, 0x9}, {0x9, 0x5, 0x477, 0x31, 0xbbb3, 0x7}, {0x13e7, 0x4, 0xb5, 0xa421, 0x7, 0x2}, {0xffffff38, 0x1ff, 0x9, 0x1, 0x7, 0x3}, {0x0, 0x3, 0xa20e, 0x10001, 0x1f, 0x7e6}, {0x5, 0x89e, 0xf127, 0xfff, 0x4, 0x5f}, {0x20, 0xd8f, 0x200, 0x4c23, 0xfffffffd, 0x41a}, {0xffffff01, 0xfffffff9, 0x8, 0x2, 0x3ff, 0xf6c2}, {0x2, 0xffff0000, 0x401, 0x80000001, 0x6, 0x100}, {0x7, 0x3, 0x8000, 0x6fa, 0x10000, 0xffffffbb}, {0x20, 0x1, 0x7, 0x0, 0x78, 0x76}, {0x8636, 0x7, 0x10001, 0xaf28, 0x3f, 0x5}, {0x32358870, 0xa7fc, 0x4, 0x7fff, 0x3, 0x4}, {0xa0a, 0x8, 0x0, 0xfff, 0x1, 0x40}, {0x9, 0xddd, 0x3, 0x24d, 0x1f, 0x401}, {0xffff, 0x2, 0x6, 0x8, 0x4, 0x401}, {0x40, 0x8, 0xffff0760, 0x20, 0x7fff, 0xfffffffa}, {0x7, 0x4, 0xffffffe0, 0x7, 0x3f, 0x80000000}, {0x80000000, 0x7fff, 0x1, 0x7, 0x1, 0x5}, {0x7ff, 0x2, 0x3, 0x6b4b, 0x3, 0x3}, {0x7, 0x1ff, 0x1, 0x9d9, 0x59, 0x7}, {0xff, 0x0, 0x6, 0x0, 0x8, 0x6}, {0x5, 0xd0, 0x3ff, 0x1f, 0x4, 0x400}, {0x9, 0x800, 0x9, 0x2, 0x7, 0x5}, {0xde, 0xd48, 0x8000, 0x6, 0x7fff, 0x99d}, {0xbf, 0x6, 0x0, 0x7ff, 0x55a3, 0x80}, {0x9, 0x1, 0x1c4, 0x629, 0x4, 0x3}, {0x8, 0x9, 0x20000, 0xfffffffb, 0x64, 0x9}, {0x7f, 0x10001, 0xc791, 0x5, 0x8, 0x7ff}, {0x20, 0x7f1, 0x8000, 0x6, 0x1, 0x2}, {0x7, 0xf8, 0x76, 0xfffffffa, 0x81, 0x4}, {0x1a, 0x4, 0x4, 0x10d5, 0x3, 0x9}, {0xffff8001, 0x4, 0x5, 0x80000000, 0x52c, 0x1ff}, {0x7, 0x4, 0x8564, 0x7f, 0x71f, 0x7fff}, {0x9, 0xefc, 0xf5, 0x0, 0xfff, 0x7}, {0x6, 0x8d35, 0x3, 0x3, 0x7ff, 0x80000001}, {0x8, 0x5, 0x7, 0x2, 0x4, 0x7ff}, {0x8, 0x5f, 0x8, 0x9, 0x7, 0xb536}, {0xfffffc01, 0xffffffff, 0x6, 0x411, 0x5, 0x1}, {0x3f1, 0x9, 0x42, 0x6, 0x9, 0x7f}, {0x7, 0x3, 0xa, 0x0, 0xffffffff, 0x9}, {0x8, 0x8, 0x424fe28a, 0x3ff, 0x6, 0x97616a72}, {0x1000, 0x800, 0x5, 0x100, 0x8, 0x7}, {0x3ff, 0x0, 0x1e, 0x4, 0x3, 0x7}, {0x100, 0x1f, 0x7fffffff, 0x9, 0x1, 0x2}, {0x2, 0x4, 0x8000, 0x1f, 0x5, 0x5}, {0x0, 0xe, 0x1, 0x20, 0x7, 0x7}, {0x3, 0x1, 0x7, 0x2, 0x8001, 0x1}, {0x7f, 0xffffffe0, 0x800, 0x6, 0x8, 0x5}, {0x1, 0x0, 0x3f, 0x3, 0x797, 0xad}, {0x20, 0x31a, 0x7, 0x320d, 0x6, 0x27}, {0x400, 0x8, 0x7, 0x2, 0xffff, 0x1}, {0x38000, 0x1, 0x1000, 0x0, 0x6, 0x7fffffff}, {0x80, 0x2, 0x7, 0x9, 0x47f, 0x3f}, {0x1, 0x0, 0x7fffffff, 0xfff, 0x8, 0x101}, {0x7, 0x10000, 0x3, 0x0, 0x6, 0x8}, {0x2, 0x3, 0x4, 0x8001, 0x2, 0x3c}, {0xffff, 0x7, 0x1, 0xfffffffe, 0x0, 0x80000001}, {0x5, 0x3dc7, 0x1ff, 0x800, 0x9, 0x6cc}, {0x7, 0x3, 0x4, 0x8001, 0x1, 0x8}, {0x9, 0xd2a8eb1f, 0x3, 0x8, 0x2be5, 0x800}, {0x609, 0x7070cc57, 0x81, 0xffff0000, 0x7, 0x8}, {0xffffffff, 0x6, 0x0, 0x7, 0x0, 0xf9}, {0xe9, 0x9, 0x7, 0xa0, 0x3, 0x4}, {0x53, 0x0, 0x9e, 0x6, 0x3, 0x7}, {0x1, 0x94, 0x9, 0x1, 0x3, 0x80000000}, {0x6, 0x5, 0x40000000, 0x4, 0x651, 0x1}, {0x6, 0x7bdd2c0, 0x1, 0x1ffc0000, 0x1, 0x7}, {0xfff, 0x6d4c, 0x3ff, 0x1ff, 0x10001, 0x5}, {0x7ff, 0x7, 0xfffffffa, 0x1, 0x3, 0x8000}, {0x2, 0x1, 0x7fffffff, 0x1f, 0x101, 0x3ff}, {0x0, 0xfffffff7, 0x200, 0x4, 0x1000, 0x7}, {0x1200000, 0xffff, 0x8001, 0x1, 0x0, 0xfffffff8}, {0xe7c, 0x55, 0x1188800, 0x10001, 0x0, 0x6}, {0xffffffff, 0x3, 0x3ff, 0x2, 0xed2, 0x960}, {0x1000, 0x9, 0xb49, 0x3, 0xcb4, 0xac61}, {0x0, 0x4, 0x6, 0xfff, 0xfff, 0x1000}, {0x5fa, 0xd8, 0x7, 0x200, 0x20, 0x1ff}, {0x3ff, 0x100, 0xce6, 0x9, 0x9, 0xffffffff}, {0x2c8, 0x6c5e, 0x8, 0xffffffff, 0x80000000, 0x10001}, {0x8, 0x5, 0x5, 0x800, 0x2, 0x3}, {0x0, 0xfffffffc, 0x8, 0x4, 0x2, 0x1}, {0x4, 0x3, 0x1, 0xe0, 0x9, 0x5}, {0x2, 0xffff, 0x1, 0x3, 0x9, 0x10001}], [{0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0xaca7d7ab4ba36a13, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x49d00a19509b24d8}, {0x5}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x401, 0x2, 0x5, 0x8, 0x5}, 0x4, 0x2, [{0x81, 0x9c, 0x4, 0x4, 0x31de}, {0x7fff, 0x2, 0xbd6, 0xe5f, 0x2}, {0xffffffff, 0x1, 0x401, 0x6, 0x0, 0x6}, {0x20, 0x80000000, 0x10000, 0x9, 0x3, 0x9}, {0x9e, 0x101, 0x80000001, 0xffffff80, 0x1, 0x9}, {0x3, 0x1, 0x9, 0x6c, 0x6, 0x6}]}, [{0x80, 0x2f45b243, 0xffff0000, 0x4, 0x5, 0x9}, {0x9, 0x1000, 0x48a, 0x4, 0x2, 0x5}, {0x4, 0x1, 0xfffff468, 0x7, 0x3, 0x10000}, {0x800, 0x6, 0x6, 0x9, 0xffffffff, 0x8}, {0x8, 0x101, 0x8, 0x8, 0x2, 0xfff}, {0x80000000, 0x101, 0xbb9c, 0x7ff, 0xffff8001, 0x400}, {0x7f, 0x6, 0x6, 0x5, 0x1, 0xfffffe00}, {0x200, 0x3, 0xf4, 0xc1b, 0x1}, {0x39d, 0xec76, 0x4, 0x3, 0x6, 0x3}, {0xecfc, 0x7, 0x3, 0x31, 0x1, 0xb5}, {0x3, 0x80000000, 0x5, 0x10001, 0xffffffff, 0x6e79}, {0x2b000000, 0xfffffff9, 0x9, 0x4, 0x80000000, 0x7}, {0xaad8, 0xb7fc, 0xff, 0x81, 0x4b136fa0, 0x80}, {0x5, 0x0, 0x5, 0x4, 0x2dfe, 0x1}, {0x7, 0x3, 0xff, 0x2, 0x64d0, 0x2}, {0x5, 0x101, 0x1, 0x80, 0xfffffffb, 0x5}, {0x7, 0x1, 0x0, 0x9, 0xfffff000, 0x9}, {0x8, 0x8000000, 0x1, 0x476c66, 0x1, 0x1}, {0x9, 0x7, 0xffff, 0x9, 0x12ba8, 0x60000}, {0x10000, 0x4, 0xffffffff, 0x0, 0x5, 0xe5}, {0x0, 0x9, 0x4, 0x1ff, 0x6}, {0x80, 0x5, 0x1, 0x57d9, 0x0, 0x400}, {0x7fff, 0x7, 0x1be397f9, 0x9, 0x0, 0xa3b8}, {0x9, 0x1, 0x5, 0x0, 0x4}, {0x6, 0x5d8, 0xffff, 0x0, 0x3ff, 0x1f}, {0x0, 0x3, 0x6, 0xc2, 0x7, 0xfe9}, {0x0, 0x9, 0x10000, 0x3a261f24, 0x7f1, 0x5}, {0xff, 0x7ff, 0x7f, 0x0, 0x9, 0x14}, {0x8, 0xfffffffb, 0x9, 0x8000, 0x7fffffff}, {0x5, 0x80, 0x400, 0x6, 0x5, 0x1}, {0xfffffff9, 0x9, 0x400, 0xf340, 0x1, 0x3ff}, {0x8, 0x3ff, 0xf, 0x8, 0x7, 0xfffffff7}, {0x4033, 0x400, 0x8, 0x7, 0xfffffffd, 0xf}, {0xfffffffe, 0x5, 0xffffffff, 0x9, 0x3, 0x1f}, {0x9, 0x2, 0x101, 0x9cd, 0x7, 0x3}, {0x7fffffff, 0x2, 0x2, 0x3, 0x8, 0xee9}, {0x1153c0, 0x7, 0x75c, 0xfff, 0x7}, {0x9, 0x7, 0x200, 0x7, 0x20, 0x79bb}, {0x8, 0x81, 0x0, 0x2, 0x6, 0x2d7}, {0x230f, 0x3, 0x8, 0x8001, 0x8, 0x2}, {0x20, 0x80, 0x6, 0x7, 0x735, 0xc30}, {0x70000000, 0x3db4, 0x8, 0x1, 0x5, 0x4}, {0x3, 0x200, 0x7, 0xffffffff, 0x7, 0x6d49}, {0x20, 0x7fff, 0x1ff, 0x6, 0x81, 0x5}, {0x7, 0x0, 0x100, 0xa7, 0x0, 0xffffffff}, {0x1, 0x3f, 0x8, 0x27, 0x1, 0xfffff367}, {0x2, 0xfff, 0x7, 0xffffffff, 0x20, 0x97}, {0x401, 0xbfe, 0x7, 0x10000, 0x800, 0x3}, {0x7, 0x90000000, 0x7f, 0x0, 0x401, 0x9}, {0x8, 0x8000, 0x8, 0x0, 0x10000, 0xa5c}, {0x81, 0x0, 0x7, 0x3, 0x380, 0x3}, {0xffff, 0xfffffffd, 0xfffffffe, 0x8, 0x5, 0x6}, {0x8, 0x2, 0xffffffff, 0x3e51, 0x2, 0x25}, {0x0, 0x2, 0xc0, 0xf1, 0x40000, 0x4}, {0x3, 0x40, 0x8001, 0x2c, 0x7, 0x4}, {0x7f, 0x9e49, 0x2, 0xf6b, 0x501a, 0x6}, {0x2445, 0x100, 0x9, 0x2, 0x7, 0x8}, {0x5, 0x2, 0x1ac1d05d, 0x548b1420, 0x5, 0x4}, {0x5, 0x20, 0xe87, 0x4, 0x20, 0x6}, {0x0, 0x5, 0x5, 0x8, 0x8000, 0x101}, {0x1, 0xff, 0x3d, 0xfffffe00, 0xffff8000, 0x10000}, {0x4, 0x9, 0xc4c, 0x6, 0x9, 0x5}, {0x1, 0x1, 0x5, 0x9, 0x5, 0x1}, {0x1, 0x2, 0x8, 0x9, 0x3, 0x5}, {0x3ff, 0xffffffff, 0xff000000, 0x6, 0x6, 0x8}, {0x2, 0x5, 0x2, 0x1, 0x3, 0x5}, {0xfffffffd, 0x1, 0x820, 0x3, 0x3, 0x506}, {0x2, 0x4, 0x1, 0x8001, 0x5a2, 0x1f}, {0x7c, 0xaf0, 0xfffffffd, 0x9, 0x3, 0x7fffffff}, {0x3, 0x2, 0x9ede, 0x4, 0x8001, 0x200}, {0x3, 0x4, 0x8, 0x80000000, 0x9}, {0xa0, 0x2, 0x8001, 0x2, 0x7fff, 0x400}, {0x9, 0x0, 0xffff0001, 0x5, 0x75ac}, {0x8, 0x2, 0x800, 0x8, 0x9, 0x1f}, {0x33ef, 0x1, 0xfffffff9, 0xfc000000, 0x4, 0x8}, {0x66fb, 0x4, 0x0, 0x9, 0x9, 0xffffff01}, {0xff, 0x8, 0x1a9c00, 0x3, 0x3c9, 0xbe6f}, {0x2, 0xffffffff, 0x80, 0x3, 0x0, 0x75a}, {0x7, 0xffffc9c3, 0x9, 0x10001, 0x81, 0xbe8f}, {0x7, 0x6, 0x6, 0x5, 0x76, 0x80}, {0xffff, 0x1d, 0xd345, 0x3ff, 0xfffffffd, 0xb6}, {0x4, 0x7, 0x8, 0xfffffffa, 0x18, 0x45}, {0x3, 0x6, 0x4, 0x2, 0x100000, 0x5}, {0x0, 0xe63, 0x7, 0xfffffffc, 0x7f, 0x7fffffff}, {0x5e8, 0x101, 0xfd, 0x7fffffff, 0x80000000, 0x7}, {0x100, 0xffffffff, 0x7, 0x6, 0x1ff, 0x3044}, {0x80000001, 0x3, 0x0, 0x8, 0x7e, 0x4}, {0xe2f, 0x1, 0x9, 0x800, 0x4, 0x8000}, {0x7, 0x1, 0x80f, 0x4, 0x1000, 0xa0}, {0x7, 0x9114, 0x6, 0x101, 0xfffffff8, 0x7ff}, {0x50, 0x5, 0x7, 0x24, 0x1000, 0x9}, {0x64d, 0x8000, 0x80000001, 0x2, 0x3f, 0x2}, {0x3ff, 0x8, 0x8, 0x9, 0xfffffffc, 0x6}, {0xb2, 0x4d15, 0x2, 0x6, 0x3, 0x10000}, {0x5, 0x81, 0x101, 0x7fffffff, 0x6da96529, 0xfff}, {0x2, 0x6, 0x80, 0x1, 0xffff, 0x8}, {0x5, 0x8, 0x80000000, 0x7, 0xfff, 0x81}, {0xffff, 0x1ff, 0x8, 0x2, 0xa32, 0xffffff35}, {0x40, 0x3, 0x7ff, 0x8, 0x7, 0x4}, {0x4, 0x0, 0x4, 0x7fff, 0x7fffffff, 0x4}, {0x0, 0x3d6, 0x3, 0x4, 0x80000000}, {0x0, 0x3, 0x3, 0x2, 0x739, 0x8b}, {0x80000001, 0x5, 0xeb5, 0xfffffffc, 0x5, 0x5}, {0x0, 0x902, 0xfffffc00, 0x6, 0x7, 0x3}, {0x1, 0x7ba, 0x5, 0x0, 0x8d352c8, 0x3}, {0x7fffffff, 0x2, 0xb7f, 0x7, 0x9, 0x9bde}, {0x5, 0x8, 0xffffffff, 0x7, 0x1000, 0xd4}, {0xfffff9a3, 0x1f, 0xfffff001, 0x2, 0x7fff, 0x849}, {0x3, 0x40, 0x4b, 0x10, 0x6, 0x3}, {0x1, 0x5, 0x3, 0x9, 0xe6b, 0x9}, {0x8, 0x7ff, 0x3, 0x20000000, 0x6, 0x6}, {0x7, 0x80, 0x943, 0x80, 0x7, 0x7fffffff}, {0x20, 0x3, 0x401, 0x8000000, 0x2}, {0x8, 0x6, 0x1000, 0x5, 0x1, 0x8}, {0x59, 0xffff, 0x1, 0x1000, 0x401, 0x3bb2}, {0x7, 0x1f, 0x1, 0x7, 0x1, 0x401}, {0x7ff, 0xfffffff9, 0x10001, 0x6, 0x1ff, 0x7fffffff}, {0xd8, 0x8, 0xff, 0x3, 0x100, 0xe28}, {0x20000000, 0x7, 0x20, 0x4, 0x9, 0x7f}, {0x20, 0x2, 0x2, 0x0, 0xfffffffa, 0x6}, {0x4, 0x8001, 0x6, 0x94, 0x40, 0x617ce645}, {0x400, 0x6fc3, 0x5, 0xa5e, 0x2, 0x4}, {0xbaa, 0x94, 0x4, 0x101, 0x7ff, 0xfffffffb}, {0x6, 0x3, 0x7b34, 0x78, 0xbfad, 0x7}, {0x10001, 0x2, 0x40000000, 0x2de6, 0x8, 0x2}, {0x2, 0x1, 0xffff, 0x5, 0x2e, 0x6}, {0x7, 0x80000000, 0x8, 0x0, 0x10001, 0x5}, {0x9, 0x5, 0x3d81c90, 0x8001, 0x80000001, 0xff}], [{0x4, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x7}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x2}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0xf, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0xc72575af2f1ae2c0}, {0x2}, {0x3}, {0x3, 0x1}, {0x1}, {}, {}, {}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0xa7a4a5cf02341889}, {0x3}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x48, 0x6, "072ed4392d481f807a24e1f32adb135534b626755ba5aa74d3982ea67e7e83581a3603e30b61220c1a9bd68d642ae9fa698f18e7333c6299ead8802884bb4500c87fc07f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x38a4225a}]}, @TCA_RSVP_ACT={0x318, 0x6, [@m_skbmod={0x124, 0x7, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80, 0x8, 0x8, 0x9, 0x1ff}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x585b, 0x20000000, 0x7fffffff, 0x1ff}, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={[], 0x23}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x400, 0x8, 0x1, 0x131}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x1, 0x1, 0xffff0000, 0x8001}, 0x7}}]}, {0x5c, 0x6, "5d59ea98f2fed3982ced5d2fddc62b0f23180e53107cbb4b246054bf126e5b560a134470a5283f0f756618b3a2e7efc71d0dd12d7117a8f9536ad866af88cc75a689ed2a7ad5b36cefb8fa5c53b2ded660c9c7361c7ed8f3"}, {0xc}, {0xc}}}, @m_ct={0x130, 0x3, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0xc3, 0x6, "a1a34a45d4648208386de768228d5d071f3427f1ecd38685965989bf45f1a8867275b7d2641d5c99bc1db8721a7819cef30f041fd8a98c489eecd75ab68678b4356cea81fba8845fd9b3eb35383a36b57eac9d523eba9dd0a3ccef3b7f520bf0bf9c22a751cddd341c31690a0e4b909d3cef473a58cfa059167b346e1305caddac731624a6c3688f9c1b96ad4812d437a9a7bad64292f4bcfaf04ee3c52f0f91616e53ff90f96cb838badc99ca4d2765333a391a790642f1a78d6918bcf0c5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xc0, 0x1a, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x14ca, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff0001, 0x8, 0x0, 0x0, 0x62c132cb}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb3b, 0x1, 0x20000000, 0x5, 0x8000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x113, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0x8000, 0x0, 0x4, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x400, 0x3, 0x1, 0x81}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf7c, 0x20000000}}]}, {0xe, 0x6, "9407574f62fa29584253"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_ACT={0x574, 0x6, [@m_ctinfo={0x40, 0x11, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x10c, 0x16, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd5, 0x6, "e7e5069c2d7563b5be03f55e6f49ef32524976350aa42df0dedb2518ce21f76ebe2bd4796b3a73dffeb992f6349032fcd210c2bd51a6f89b7b51073803cb19760e53cc878cfe4f06033513ca1ed72c37c08c9be7da205eb12e40ddf28ac6d0e7a323c41c069a018ac89fa14e689dd05b5cd3c1f52006c61893c2a6471248964cfbbdf376f103fb501f8f53398aa125007e0fc406f77e12e5280fca39a5b17d94871699d071999195501b8bd8e8443330d6e9ce921611f2cf6d3136bdf6aad55e68ed23c11d62a9b47d7d240799c989e758"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x13c, 0x16, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x100}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0xf1, 0x6, "24965a4fb2c4314346c995cfb00c0c1280f706c646ac90fed8b64dc8ef468399cf5e097e4bc33669943b120fd5d946f36ec0fd34e2dea7e4e99895c37e031075dd09496a7f51f4358a7a20121ce67ec8884e5d46ae3f27579a86c622fe30998f60cc124c3c7ef44a939ed19431c2d32e243ffeebd28585fc26b036a83f9416ecd1df3656be42d9f2d9a14677d1519c3ca3e55a9ea2d3a5b01ebd5a1e102cf8fc69ceaafca54fc7372e39318c3f6a3522a954c0b721fe418501aa0a8b05782abc266a893d530d40ddbd572031882678a91468c415b8decb78365163d793536c6bfe0de85ad525f05292bfed57df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x114, 0x3, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffd}]}, {0xcf, 0x6, "58c2f86ba0ef71753948c30225333b6a349934b4c58dea85c50a2634c1136b3c78935ab1a43eabc084c4400dc459eea01c7f3e1dfd522b14f10195dd2e52215701a27e3950040c50f0778dcc3e24365c43c9044994d9c9ae3c34f845974bff9bfd0e82f603668ec07b66d5837fdc1a9670216e8a76c8753ac3f4209bf4989eb73648cc01ab9bf92359375358fef7c9f167084d6dfaff79779b0e875698ba105ff52b63538b50a1c44f9e436d4f87744e0e75934d65e21106c3fd6929a387f6d6f52d8d05fcda2125d6ff4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xa8, 0xe, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5dd2, 0x3f, 0x8, 0x3, 0xfffffffa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x246, 0x1adb, 0x6, 0x3ff, 0x1}}, @TCA_DEF_DATA={0x7, 0x3, '\\/\x00'}, @TCA_DEF_DATA={0xa, 0x3, '$-*{{\x00'}]}, {0x38, 0x6, "9125a7ab2d7d725e71bb3709bb755449057c60762b8ee1aed3984c544b082b78dc1f6096e1114f3c5cc125b92a5565b00373c6c0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x12c, 0x6, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x316}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xff, 0x2f0265a7, 0x20000000, 0x8, 0x101}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x2, 0x81}}]}, {0xbd, 0x6, "7d4995673f0150cad6f9b11b317dd85a14e55ac621087693919f04d1ac715b083d69f54f983e28ff9c969b76d7c5321fc36fdb54380134e5541e8f3c7a8285c7a3a71948dadeb4aff8388847f11f92adb836dc3bc90aedceb806a4145b796824c77707fc1719cec6d96d391803376898eff91c26b1cddc602e04b5d74e667314a510ae3aa847f81b3c5de90d26403df29f530c4cac675382ac17c559902a424557394bbd7f7a90e18222ac33cfece419203ae94204965538aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0xffb8}, 0x1, 0x0, 0x0, 0x10}, 0x8000060) 19:38:51 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:38:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x5509, &(0x7f0000000080)) [ 340.087245][T25849] loop1: detected capacity change from 0 to 8192 [ 340.142594][T25849] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 19:38:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:52 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:38:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x6364, &(0x7f0000000080)) [ 340.216398][T25849] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.272911][T25862] IPv6: sit1: Disabled Multicast RS [ 340.283732][T25849] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.320509][T25849] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:52 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:38:52 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e020900", 0xa, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 340.512262][T25883] loop1: detected capacity change from 0 to 8192 [ 340.531124][T25883] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 340.544855][T25883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.553286][T25883] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:38:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0xa, &(0x7f0000001700)=[{&(0x7f0000000080)="1db57c2c6173171b7918aca774f06672468197672239e752c0a7ec63921a5f85907d965f05b2942714ce9f1e3b6ed7f52685dae35909994db59f811a82827f0c78e6e7df899c38c86077e3c771a0ab299aa4ad008d465a7e128658df29109eb9a977149cebc47b60c92da86f04ae3ddad6cbd4094161e510", 0x78, 0x20}, {&(0x7f0000000100)="570f0813f4d2dbc9f70bc1d5b8dee92d7842318afa1d353a529a3154f9a9511747461d3a8663fa7c73d5da9fbee16a1ffa2d4d998174fb270e963c8e5aca369a110130c62a99d33ae9566f213477", 0x4e, 0x7}, {&(0x7f0000000180)="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", 0xfb, 0x3ff}, {&(0x7f0000000300)="26a16ac7b139f022595384959bb1f592fec56065b7cb773dd2556659888c3e843cf6d69e6c125a9f01b380159e35190e177a2f46d012c5d3f939f3745428b562d4d9648ec91a7672e459d6803a8af79aea1a1cdb4308b50ea7df5cb4256b9c5239da8bde9f1228b6ef84ad0e322dfa47a7bae6bcde38dc0425ea", 0x7a, 0xc13}, {&(0x7f0000000440)="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", 0x1000, 0x9}, {&(0x7f0000001440)="fda578f36c153dbadd8cc696d9d52d3a58520b78e7bf59e2798fc28f0b60930490c058c3dc11edfddfd4a31ccc4b8fb7e56de06c2f49bdfbe7b3b1dcbd20adaea5f4e730d905ce412d6e379b91fc8af378cff3503b570de40f5978f36740bea57f7f38cde8e35f64206cc821fee64a45a8625742d7e3e0b8f673a771e24a0fad5d9dcb390d9adc9d014bb05f9a8ddefc5c4156031696aa4b965b86811b215d8862566e4f47c5399e0ddd7a3462b764d37c4041be42a0053510c830b317f225a853fa66b37725fda2b282a3161f0181cf69b59947a8870c6ee4d9f6b9975c995ba76366eb2c99974d61c03f5fb2b9abf4a919319c", 0xf4, 0x3}, {&(0x7f0000000000)="d0de33dab1cd8d6b3e4afeec478aa023ad51ed0955464037926cb1b33670e0034662", 0x22, 0xffffffff00000000}, {&(0x7f0000001540)="ba9020becd4d027ca58becb8973c8ce94e208cd728c1ec1c688a4315035232e8c5219c8524022a18e43f2423f466ddeb0f96906d0ff4e0927eb5271eb4a27c3ec528ea81083766f8626d56c193daff1ab75cb616b90d81ae89f36ac937f46ea140a9b162e83421244ef5489bd4fd76266c8fc1e44834ff46397bff9c054e9f41754530d6252d7290503ff2bbf0a55602f1fe291fcd762672c5b15fc13854874b87c52b3b20490737aa0cf86bfc99f02a263f6e2ea6622da4a100a8", 0xbb, 0x3}, {&(0x7f0000000380)="de03860ecbfbbd6d86889fe437a4c0", 0xf, 0x6}, {&(0x7f0000001600)="86636bd2f9a5f32355874deca5722e346998e7c193adfb1cd9089f703f9caca68e449197b89e47c16b5ef10fc849d69a4e5d73c813cf58f61e0ee8631ea34e6ad580bf2ce38271c079c9c5a85e02b3b3df6c4fe557b9fba6faf217d529f80d1f1689b717900aa497c99b5c2646e4211bead1c0a00674fc5fb755ea7a8d68cb6a8923c6199da4c8fdf98c00d3e3059d3893f6d3d6f981b26989f45b8e1f09e2cfc942dd7875d9ccb853dbc65d7644bef2be096f4fd85c5c8350cebd243d66ec1810", 0xc1, 0x32f}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6578706f73655f00726976726f6f742c0034412a00e256ab792308e31e44955f1fa86b535d14dbd6d0641dd6b19d49664aea4cfe3dc6a42a1599ab28341eb800049897d68863fe9a38b9aa9dcf5babb68f401e7b"]) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = io_uring_setup(0x4175, &(0x7f0000000040)) r3 = io_uring_setup(0x4e50, &(0x7f00000000c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x200400, 0x0) recvmsg$kcm(r5, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001880)=""/34, 0x22}, {&(0x7f00000018c0)=""/238, 0xee}, {&(0x7f00000019c0)=""/47, 0x2f}, {&(0x7f0000001a00)=""/167, 0xa7}, {&(0x7f0000001ac0)=""/182, 0xb6}, {&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/209, 0xd1}], 0x7, &(0x7f0000001e00)=""/21, 0x15}, 0x140) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x9, 0x0, r4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00004a3000/0x3000)=nil, 0x3000, 0xf, 0x1, {0x0, r4}}, 0xffffff01) 19:38:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x8903, &(0x7f0000000080)) 19:38:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x5, 0x8, 0x3, @mcast1, @private1, 0x7, 0x7, 0x8f88, 0xfffffffe}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) [ 340.561097][T25883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:52 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e020900", 0xa, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x890b, &(0x7f0000000080)) [ 340.690128][T25895] IPv6: sit1: Disabled Multicast RS [ 340.690644][T25896] loop4: detected capacity change from 0 to 147456 19:38:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x8913, &(0x7f0000000080)) 19:38:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 340.750463][T25896] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "expose_" 19:38:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 340.824878][T25896] loop4: detected capacity change from 0 to 147456 [ 340.845139][T25912] loop1: detected capacity change from 0 to 8192 [ 340.858692][T25912] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 340.866508][T25912] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:38:52 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x204080, 0xa3) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x7) 19:38:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x8914, &(0x7f0000000080)) 19:38:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x5, 0x8, 0x3, @mcast1, @private1, 0x7, 0x7, 0x8f88, 0xfffffffe}}) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) [ 340.981965][T25930] ceph: No source [ 340.994298][T25912] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 341.008573][T25930] ceph: No source 19:38:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) fanotify_mark(r2, 0x61, 0x1, r0, &(0x7f0000000040)='./file0/file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19:38:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 341.051769][T25936] IPv6: sit1: Disabled Multicast RS [ 341.052959][T25912] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x8933, &(0x7f0000000080)) 19:38:52 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000", 0xf, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 341.206946][T25951] loop4: detected capacity change from 0 to 4096 19:38:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x5, 0x8, 0x3, @mcast1, @private1, 0x7, 0x7, 0x8f88, 0xfffffffe}}) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) 19:38:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 341.311594][T25961] loop1: detected capacity change from 0 to 8192 [ 341.342185][T25961] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 19:38:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x89f1, &(0x7f0000000080)) [ 341.352768][T25951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 19:38:53 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 341.456806][T25961] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 341.477398][T25970] IPv6: sit1: Disabled Multicast RS [ 341.519541][T25961] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:38:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x89f2, &(0x7f0000000080)) [ 341.585249][T25961] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="04696f76"], 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 19:38:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x5, 0x8, 0x3, @mcast1, @private1, 0x7, 0x7, 0x8f88, 0xfffffffe}}) socket$netlink(0x10, 0x3, 0x0) 19:38:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000", 0xf, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:53 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:38:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xae01, &(0x7f0000000080)) [ 342.091747][T25997] IPv6: sit1: Disabled Multicast RS [ 342.102573][T25998] loop1: detected capacity change from 0 to 8192 19:38:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 342.159904][T25998] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 19:38:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xae41, &(0x7f0000000080)) 19:38:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.270784][T25998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.323894][T25998] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:38:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x5, 0x8, 0x3, @mcast1, @private1, 0x7, 0x7, 0x8f88, 0xfffffffe}}) [ 342.376315][T25998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xae60, &(0x7f0000000080)) 19:38:54 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000", 0xf, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:54 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@caif, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="4d64dd7016a6874d8126cdfbbdee8a39e9d2b3cdd2f39d03c45d42b704bf315f0f0a6c778ab8b03e27cbb816453846abdec973f3bb0c848978e76cc631bf01f4604cc65c758795c1e5424ae91cf4", 0x4e}], 0x1, &(0x7f00000002c0)=[{0x108, 0x105, 0x108, "dd27304cb8222abc25e60698c078624a737410378165c1ab327b41eab8e3d3931d7d351c5f5f513365ffb7e1cb4a1db0e3a6dd21ebc53467555ca72f70ee773d1a445890ca2fdb60876f35e413a7c4ad9a4b643b3c9fb23ac8d8386110817d3decb1ae6f1089d19e450da7fe5c09910fbec6b9b94db0e65da2d555d4df12832f3478227fd93d1be73b4c75c52a4f44084bc5994980d80d849e537858f22d2b33ba56b49fc69509c5f5db987904d57509b4a7ffcadcb0327ac4236a3aa18ef27075327cba56b4ff0b1163a066cd0bf3c153d4a6124b053d2123844e9aec7e26bf8100bf08eb11efdd1585991864e7d42ae1d366cd340d2496"}, {0x50, 0x111, 0x0, "49acad775e157397ac5c78fcf3ff890998cc3ae3ea3929b42b4149ffa98b93b27745293db77cf2b6c1153f36dcd95b9aeb0954fb0c261955d665dec9"}, {0x30, 0x105, 0x400, "c763522accd749e844ac521d82de056bc5652700623924897a4c28"}], 0x188}}], 0x1, 0x20000000) sendto$inet(r0, &(0x7f0000000080), 0xa4f0, 0x0, &(0x7f00000001c0), 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x400000, 0x1) perf_event_open(&(0x7f00000004c0)={0x6, 0x70, 0x9, 0xe2, 0x8, 0x80, 0x0, 0x9, 0x42000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000480), 0x6}, 0x1800, 0x7, 0x8, 0x1, 0x4, 0x6, 0x6f59}, 0xffffffffffffffff, 0xd, r1, 0xc) 19:38:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:54 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 342.534634][T26030] IPv6: sit1: Disabled Multicast RS 19:38:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xae80, &(0x7f0000000080)) [ 342.619703][T26041] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 342.630954][T26040] loop1: detected capacity change from 0 to 8192 19:38:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 342.663486][T26040] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 342.673959][T26040] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.682631][T26040] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 342.703172][T26040] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:54 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:54 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x400448c9, &(0x7f0000000080)) 19:38:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="f20a8171792e114166e2a73a8bc49371ec1a448d5268864203a76e5f36cb9b9cca7f5a745cfcb72c0e47912f1691fe9b52e73e30f969c4d33630cfa7f96fb0016ec79db4e8ea4c0c1ac602b64480ee1b642a373fa19c6cd358de27cf138f2040bc5839256ca6b7f7a5c01bcd06d1d1239b7020970978dccf71557dbec86c7b754a1806eaafe811ed4cea193fced96d0441cb62dc901b73414088d3f41943c1b660aa811745334e3955866b99311a3198b29a3ab501645c56f43f8f73c3eec0081c95f98715", 0xc5}, {&(0x7f0000000280)="5fa973e36a2b34faaff82c008383d0e25f30992008bfee14892f7f697969526262e341d6f687743ec1d8ee2421bab49ec683406aee05c22037fc1025dc375373c7e64dea43606a5c34941b05e63d920f8acc76fe30fc6ee153c3ab9412921ac95f7e", 0x62}, {&(0x7f0000000300)="c7e4e7f1bdfad3a148d29888bba3055bed541a46f0d4ad0c897e55a619f3b05c914d7c634d985dbf62cb73b11124f15cd7fca97d45", 0x35}, {&(0x7f0000000340)="fb520e9b723366bfbcbde7e838b99e30e4ee4c08fddf311ce61f1146b149ba03f621effce88c9e1b8d25c21d199531f414fd3897382cd2f9031b43ed75e9c7dca766c8ad981b15f0247ba3a7a78ebbeb1cf7e26b5b11250256d74711d46939ce67a572c03ddd3b536fcd70d1ba8b137d054ea0c2b683097a42104712b87e2127d715878c48ddf8138e636a738104e428a06d4194ba2a4ebb642c1b349b3479c1e3ea95bbb6c961aa23ca437c377a7488565e693450913473", 0xb8}, {&(0x7f0000000580)="9acaf3b1e04530f1447d920e8a1ed218a867eefe6c6cba5bc471515a90d145de2b86bd9edb7954c234fdc0b09a8e3e038d78a2e41cb7c169ac4689d18f91574086e4be118cd0a43256584cafb5f048e9c3c1d217253f3e56b60ad16a315b58876743ad159be711fd94992df6c21b8171f985e24223c8c95820cb8f850ecc8e9489bace7e1c412118fe9aee7052e81e806e25b48b63497bbfa6d4682ea4116437fbe0cdfa62a3139da2872818f7d37a73b7316b72b1aa3617c83efba6a8cee41789d8a53bfb8e", 0xc6}], 0x5}}, {{&(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000740)="f63cd544c414f4984a1776d9c2c800545b69edfcdfb66e5136dd1d39dfd54b298c4f6a2ce6d976be90b1f5b9bd12a734fc60a7caacbec7cb7634b027", 0x3c}, {&(0x7f0000000780)="9d9bce78335c4827d06767becf1c3e054748e1050f06b719abdf5990171a467567afb65dae75ff9e9e7e1b6f2a8850fa30cc31f9ee8cd5a2e9a44f1ee02ffecc577cac24d19cac6e55e5aa3f089dd5c53d063216424a4562164f5d6d7f99b8379e88e31635c761ce32eecca11d7072137ceb175c49f1e122188ee0e8b4d229228b4b474f919cc633e16d87b5571631d93a27eb62f84d70b47ffddf51f01b9a81b845fe16e4c02400ec6e68d39a32ff54dd1733cd9102311e0a994ff9c68ad3b7adef56fe2b34c8fd3c71b6a363c6ee2b752d1ab879ec6ba3b084670f5945", 0xde}, {&(0x7f0000000880)="56b241340db31fa8209d8390fa1cb2867dfb1cdbfda165893c9600967b7496b1ae3f71efdd", 0x25}, {&(0x7f00000008c0)="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", 0x1000}], 0x4, &(0x7f0000001900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x120, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x76, [@empty]}, @timestamp_prespec={0x44, 0x34, 0x50, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x1}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff6}, {@broadcast, 0x5}]}, @lsrr={0x83, 0x13, 0xd3, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xb9, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x41}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@multicast2, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0x25, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x8}, {@private=0xa010101}, {@empty, 0x10001}, {@remote, 0xfff}, {@broadcast, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7b48ccc5}, {@remote}]}, @lsrr={0x83, 0x17, 0xa5, [@private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x40}, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x3b, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x1ff}, {@multicast1, 0x93f}, {@broadcast, 0x9}, {@multicast2, 0xc9}, {@loopback, 0x3fc28bf5}, {@empty, 0xda0}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x400}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x21, [@empty, @empty, @rand_addr=0x64010101, @multicast1, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x220}}, {{&(0x7f0000001b40)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001b80)="b7510fbebff4ec76579db60de391c9534c0c3936f7759c8bbcc2903cccb505ceb8c9ec4280b707a4f2aabdc4544bed1bec23db22", 0x34}, {&(0x7f0000001bc0)="946b322bcd971c09ffa2a407e462e846ad309490433e8f776ea9e0489e4fe8c38d4e6b01c847a10a1b1bf8acf8e41373d3146a32b987a4588332037cd19c8ee72e94c269da73b7ef6b9331652403e3b351941f7c83859acc7d077ed81f0b2595be3ab28ffad11eb30d6f46c8beb7e9dd89b8da5c6868c46ca59249c6ea1d8c3c488bfb9520b0bee44dbd2fcf20e7139b25bd6b6be17e01c10923cb2a4a14d8a46f789492e4332fe18624493cb5daf04b36a649049930e9668cec3b8118c03f8654767a8d58fbae4e295807ce246f1342ca9dcfe039a81b451adc543291a39f70922ab40d14cc3135318ed5a8f9634dec48ee1be5", 0xf4}, {&(0x7f0000001cc0)="f69e27b014279af803dfdc4f620576366fb4429f16dbca8dc1d303151402141d99d0549d210c7422c219ac0bddbf40222aa41b9b413378b2715279b55ff4603eec202c6fa9af99ba6a348a2bf15ea27fc45c73230c5f5360766a2ec15927e243c5988289524ad5caca5c2700", 0x6c}, {&(0x7f0000001d40)="b214d4c0c8975e7494725824f1e807ace090cc9f9d4db95bfa89ff213a53fb20f563fe15c75b7febf01995085df11797f7ae02792940b239785438ef71a72a1e9b1a60510c9b0822c675bd4a7998b8e2da0ebe90fe178da3df3e1c482945572e979e606d1190890a8b31ae4243ef83ac4630d989a694c822e536b788ba5fb4d7a36fbe17a216779d432e", 0x8a}, {&(0x7f0000001e00)="c22d5ad5c5ce9580ae4338d5765825913fe6788983f31544c6a9cc0be7aa72687f9b20a37942d9fe638b2607d5b37db1138c7c88515021645be000619819b66318c1510a7576b055d139a8153d2d1409f12baa650da5e919b22966a05e5dde47ef46a98f9ab0804f45262b47f5e29d598ff043eb42683c8a6db5321b77faf0b84345c60221bdb40967e6463821c0c425ba2fa8b7fcacc54c9631cdcfcd9d6953f4da9f797896029299f7", 0xaa}, {&(0x7f0000001ec0)="ad57723765ce86624233df4e4495ecc9e8586cf52cc5ea1822de292ba72e", 0x1e}, {&(0x7f0000001f00)="70d9746ad796e77e0559bdcf778168f6f6a492ae1c9a3c30aa34fcad1546d4bdaad863a0429093ee0958c67cdcbe0af423f49bddb599ad928941ed2a5042b2a7259c8ef55d3b5bea18d1368933840b1ca12a2a70d0de16702e975c86e8535f5e25ffc07a4a6fcdd149a823d29e69d273825eebbba7c1a22da454f5ff8070f4c3cec377e5f2863b044c594e3586955d2c49fa648197a1043456fd414c2169803aac414d657d1844dd50962b10b4ec1af8", 0xb0}, {&(0x7f0000001fc0)="a30dddbb97055d96e2d7f5352406ce788467f0a63c59f63ce099b88a9a76231a1b6e95d7281b6efb2feb370458c95bb1965a64d6ecb90ff1ec58853d4d6fb09a1aa9941ee5cb8629240e6049f1e95ea27fdfd9bed9eb7588a03ba110", 0x5c}], 0x8, &(0x7f00000020c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @local}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xe4, [@rand_addr=0x64010102]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x88, 0xf, "0233a5088687780253817ca957"}, @lsrr={0x83, 0xb, 0x35, [@rand_addr=0x64010100, @private=0xa010100]}, @ssrr={0x89, 0xf, 0x6c, [@multicast2, @empty, @rand_addr=0x64010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0xe0}}, {{&(0x7f00000021c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002200)="4196c89afd85e63424f71687631a3d525907e5e9f256084a6e7927e141e75d3a8d22d390274f7988c4ed7eb3622443439d407aadc63c475510ea52940ea4f774c33ee76d0d087df74f8a71cb180012189560b509efc5e72044339089378f4ec73432aa73dc02f11f8ccd197d64755b2ece567a188c306424615c", 0x7a}, {&(0x7f0000002280)="8ba12f75d7e58a55c125d2bb0872c212c701d1a552558b1241af1a39dc6286d5e3cadc05c52afc164b2093315cc3edb47d2d15062db8dcd059c3265f997ef63019a6dcf1bd0bb7a9723191e25b993fa2cfcd5740d90478afe60b4f9cd7e65a001e21dc4cf86164420aec3c2d16cb3136aac1347447b0f8a5faade90dc1a52453de7102aa8508866e07cb989a82620a8b26ab50f1a0859281785f3ea25df1842b070d5c10b9", 0xa5}, {&(0x7f0000002340)="6f5019fbe97eb1190edbf108c55eceac3615d61005b5b100f6b1ee0bab5e6090cd76cbb5285eb426293ce0569a3cd17df6c1c2e7d78be75e26b091af30d4b5d469d16507fa7fda6dccba0b5281c2a0828485e532b5b7f6ff76cf17139c3ea64f3134f48cf937500f60d5265f32709a80c62ee173d02b1702fc9ff8a980b7cf901264e6e7fd973cb44e37fd95f134a1fc8d90c71c42094f5287938211accec7fa36af14503e475a34312b98c58511e3f66129fd264a38eca7036d542c674810", 0xbf}, {&(0x7f0000002400)="e2e3a360ad10a4e6cc07d6af91c020b90ac6f4a58deac448d21089959389aafdbcc366267ade13e1a4a8b30c90fe715b4d1444da6c5736c21a751a18d967f6644cf52273b0e097fecfe505c9ffa64b2095e4b583c6c8d0ccba90b04c4907c56a1aa0cb307d20ddfed86328e692c8974ba6af0943b7316ba47d761e353a57632be6b9fd5fee029b790a99941ac70bddb440de2fdcc0c2ca06472d2511e9effc0c49d3b0691a1a42b96d588e4a05e2978644dfde8d46f506d5996447a07da2fdbe7d6be59b4418151534585f89a69578", 0xcf}], 0x4, &(0x7f00000026c0)=[@ip_retopts={{0xd4, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x6d, [@rand_addr=0x64010100, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0x4c, 0xb7, 0x1, 0x0, [{@broadcast, 0x5c}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@empty, 0x3ff}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x2}, {@local, 0x28}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x8}, {@private=0xa010101, 0xbd}]}, @cipso={0x86, 0x47, 0x3, [{0x7, 0x3, '^'}, {0x5, 0xb, "291114cfdedcbb961e"}, {0x5, 0x9, "43aa818af510f8"}, {0x2, 0x7, "f7af295de0"}, {0x7, 0x9, "f4be1f05d21d4e"}, {0x2, 0x8, "633c6c3e93b4"}, {0x5, 0x2}, {0x1, 0x10, "ccfa6ac9a7c4652d155e1066dd39"}]}, @lsrr={0x83, 0x17, 0x1e, [@empty, @multicast2, @remote, @local, @private=0xa010100]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x170}}, {{&(0x7f0000002840)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002880)="96f73a7563ceec596b21bc216602c22d56f1c709016c9b553ac366a6f10339e6d878262c2822c6ee5be15559d6bb5b4c7effaec20fbe6b17bc29d2fc6b2cb07e7e467572", 0x44}], 0x1, &(0x7f0000002940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000002980)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002a80)=[{&(0x7f00000029c0)="2e0175fa3eb3b8973fa94ebf31710fe282eda1fb9f77c328aeb93986832754a67b28445fff3faa7d75eb293fabab0487", 0x30}, {&(0x7f0000002a00)="2a189c8e9c0dcc3679950433a400cc64e14da4138eaaebf7c810f3a9b417ed88bce6537ebf48ed2db4e72e31700b6134269726aafd73c82b2792559a0c84e559ef7caf13a4c3e9a125d91ed50a046c25c6c016f71f47d7e5f5e6b7582887aaeaa40f76d5944cb93fb0", 0x69}], 0x2}}], 0x6, 0x4050) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x5, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, @union, @array, @int]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x145}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f0000000040)) [ 342.863845][T26060] IPv6: sit1: Disabled Multicast RS [ 342.876846][T26065] loop1: detected capacity change from 0 to 8192 [ 342.902035][T26065] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:38:54 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 342.912930][T26065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.922135][T26065] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 342.930397][T26065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:54 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x400448dd, &(0x7f0000000080)) 19:38:54 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000", 0xf, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:38:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40800, 0x40) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x4) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 19:38:54 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x400454ca, &(0x7f0000000080)) [ 343.136431][T26099] loop1: detected capacity change from 0 to 8192 [ 343.149369][T26099] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 343.157305][T26099] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 343.159276][T26101] IPv6: sit1: Disabled Multicast RS [ 343.165990][T26099] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 343.217002][T26099] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x4004550a, &(0x7f0000000080)) 19:38:55 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:55 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000", 0xf, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:38:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x40049409, &(0x7f0000000080)) 19:38:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 343.411649][T26134] loop1: detected capacity change from 0 to 8192 [ 343.431311][T26134] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 343.440221][T26134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 343.452562][T26139] IPv6: sit1: Disabled Multicast RS [ 343.458255][T26134] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 343.466506][T26134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:55 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000", 0xf, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 343.516942][ T9636] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 343.592784][T26156] loop1: detected capacity change from 0 to 8192 [ 343.611254][T26156] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 343.619510][T26156] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 343.628500][T26156] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 343.636378][T26156] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 343.766974][ T9636] usb 5-1: Using ep0 maxpacket: 16 [ 343.907044][ T9636] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 343.915816][ T9636] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 343.927926][ T9636] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.967010][ T9636] usb 5-1: language id specifier not provided by device, defaulting to English [ 344.107152][ T9636] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.129780][ T9636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.155824][ T9636] usb 5-1: Product: syz [ 344.171498][ T9636] usb 5-1: SerialNumber: syz [ 344.536977][ T9636] usb 5-1: 0:2 : does not exist [ 344.545846][ T9636] usb 5-1: USB disconnect, device number 6 [ 345.216978][ T9689] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 345.476960][ T9689] usb 5-1: Using ep0 maxpacket: 16 [ 345.627154][ T9689] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 345.635873][ T9689] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 345.646529][ T9689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.696985][ T9689] usb 5-1: language id specifier not provided by device, defaulting to English [ 345.827097][ T9689] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.836308][ T9689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.844575][ T9689] usb 5-1: Product: syz [ 345.848938][ T9689] usb 5-1: SerialNumber: syz 19:38:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40800, 0x40) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x4) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 19:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x4004ae99, &(0x7f0000000080)) 19:38:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:38:57 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e020900000003000000", 0x10, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 346.158101][T26203] kvm: pic: single mode not supported [ 346.163287][T26212] IPv6: sit1: Disabled Multicast RS [ 346.187019][T26218] loop1: detected capacity change from 0 to 8192 [ 346.202369][T26218] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 19:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x40084504, &(0x7f0000000080)) [ 346.211425][ T9689] usb 5-1: 0:2 : does not exist [ 346.219633][ T9689] usb 5-1: USB disconnect, device number 7 [ 346.226776][T26218] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.239903][T26218] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 346.255438][T26218] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e020900000003000000", 0x10, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:38:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 346.285391][T26238] kvm: pic: single mode not supported [ 346.383731][T26250] IPv6: sit1: Disabled Multicast RS [ 346.407001][T26258] loop1: detected capacity change from 0 to 8192 [ 346.438487][T26258] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 346.445910][T26254] kvm: pic: single mode not supported [ 346.468545][T26258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.493482][T26258] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 346.503547][T26258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 346.606944][ T9689] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 346.856928][ T9689] usb 5-1: Using ep0 maxpacket: 16 [ 347.007033][ T9689] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 347.015752][ T9689] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 347.026866][ T9689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.087124][ T9689] usb 5-1: language id specifier not provided by device, defaulting to English [ 347.247189][ T9689] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.256289][ T9689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.264620][ T9689] usb 5-1: Product: syz [ 347.268944][ T9689] usb 5-1: SerialNumber: syz [ 347.596973][ T9689] usb 5-1: 0:2 : does not exist [ 347.604943][ T9689] usb 5-1: USB disconnect, device number 8 19:38:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x40085503, &(0x7f0000000080)) 19:38:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e020900000003000000", 0x10, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:38:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001540)=0xd) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101c41, 0x101) accept4$inet6(r1, 0x0, &(0x7f0000000140), 0x80000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r3, &(0x7f0000000240)='0', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100)={0x0, r4+30000000}, 0x0) 19:38:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 348.061978][T26305] loop1: detected capacity change from 0 to 8192 [ 348.078274][T26305] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 348.099251][T26305] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 348.100950][T26311] IPv6: sit1: Disabled Multicast RS [ 348.108299][T26305] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.120549][T26305] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:38:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:38:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x40095505, &(0x7f0000000080)) 19:38:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:38:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:38:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000300ac1414aa060008001900000005000a00fd000000080004000100010008000a001f7a5ce8954b304426123cce70b4bc75926390ef7ae1ae66e0cdf3fe92f2eae61ae834ef9d97c2cd0d0cfd35485eecb5c95b70"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 348.174348][T26310] kvm: pic: single mode not supported [ 348.279699][T26336] loop1: detected capacity change from 0 to 8192 [ 348.306795][T26340] IPv6: sit1: Disabled Multicast RS 19:39:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x40104593, &(0x7f0000000080)) [ 348.325074][T26336] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.333213][T26336] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 348.342441][T26336] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.355889][T26336] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000340)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 348.388466][T26338] kvm: pic: single mode not supported [ 348.463530][T26362] loop1: detected capacity change from 0 to 8192 [ 348.480452][T26362] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.489742][T26362] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 348.498968][T26362] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.506766][T26362] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x122) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) 19:39:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x40186366, &(0x7f0000000080)) 19:39:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 348.516414][T26360] kvm: pic: single mode not supported [ 349.084125][T26391] kvm: pic: single mode not supported [ 349.090964][T26392] loop1: detected capacity change from 0 to 8192 19:39:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x4020940d, &(0x7f0000000080)) [ 349.131004][T26392] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 349.138969][T26392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 349.147943][T26392] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 349.155768][T26392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, 0x0) 19:39:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x41015500, &(0x7f0000000080)) 19:39:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x80085502, &(0x7f0000000080)) [ 349.190425][T26402] kvm: pic: single mode not supported [ 349.295935][T26421] loop1: detected capacity change from 0 to 8192 19:39:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, 0x0) 19:39:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x80086301, &(0x7f0000000080)) 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 349.406856][T26415] kvm: pic: single mode not supported [ 349.448973][T26428] kvm: pic: single mode not supported [ 349.475228][T26442] loop1: detected capacity change from 0 to 8192 19:39:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, 0x0) 19:39:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x80104592, &(0x7f0000000080)) 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 349.645732][T26460] loop1: detected capacity change from 0 to 8192 19:39:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x80108906, &(0x7f0000000080)) 19:39:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:01 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0x8208ae63, &(0x7f0000000080)) [ 349.849025][T26485] FAULT_INJECTION: forcing a failure. [ 349.849025][T26485] name failslab, interval 1, probability 0, space 0, times 0 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 349.922831][T26485] CPU: 1 PID: 26485 Comm: syz-executor.1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 349.933995][T26485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.944098][T26485] Call Trace: [ 349.947481][T26485] dump_stack+0x137/0x19d [ 349.951877][T26485] should_fail+0x23c/0x250 [ 349.956293][T26485] __should_failslab+0x81/0x90 [ 349.961068][T26485] ? __se_sys_memfd_create+0xfb/0x390 [ 349.966480][T26485] should_failslab+0x5/0x20 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 349.971258][T26485] __kmalloc+0x66/0x380 [ 349.975419][T26485] ? strnlen_user+0x137/0x1c0 [ 349.980101][T26485] __se_sys_memfd_create+0xfb/0x390 [ 349.985321][T26485] __x64_sys_memfd_create+0x2d/0x40 [ 349.990526][T26485] do_syscall_64+0x39/0x80 [ 349.995021][T26485] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.000955][T26485] RIP: 0033:0x466459 [ 350.004847][T26485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.024651][T26485] RSP: 002b:00007fb39b7eef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 350.033078][T26485] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 350.041055][T26485] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 350.049108][T26485] RBP: 0000000000000002 R08: 0000000000200000 R09: ffffffffffffffff [ 350.057170][T26485] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 350.065236][T26485] R13: 0000000020000100 R14: 0000000000400000 R15: 00000000200000c0 [ 350.073742][ C1] ------------[ cut here ]------------ [ 350.080175][ C1] WARNING: CPU: 1 PID: 26485 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 350.091033][ C1] Modules linked in: [ 350.094918][ C1] CPU: 1 PID: 26485 Comm: syz-executor.1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 350.105089][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.115159][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 350.121247][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 350.141306][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 350.147386][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000009 RCX: ffff88810acad000 [ 350.155379][ C1] RDX: 0000000000010001 RSI: 0000000000000009 RDI: 0000000000000001 [ 350.163359][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 350.171373][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 350.179803][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 350.187774][ C1] FS: 00007fb39b7ef700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 350.196714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.203300][ C1] CR2: 00000000004e4a65 CR3: 000000010def7000 CR4: 00000000001526e0 [ 350.211266][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.219234][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.227201][ C1] Call Trace: [ 350.230475][ C1] [ 350.233319][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 350.239134][ C1] __run_hrtimer+0x163/0x460 [ 350.243733][ C1] hrtimer_interrupt+0x380/0xaf0 [ 350.248696][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 350.254618][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 350.260276][ C1] [ 350.263202][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 350.269283][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 350.275104][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 350.294737][ C1] RSP: 0018:ffffc9000624fd18 EFLAGS: 00000202 [ 350.300807][ C1] RAX: 0000000000000000 RBX: ffff88810acad000 RCX: ffffffff85a00e37 [ 350.308775][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 350.316751][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.325451][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.333442][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.341433][ C1] ? native_iret+0x7/0x7 [ 350.345677][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 350.351228][ C1] irqentry_exit+0x2a/0x40 [ 350.355667][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 350.361131][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 350.366340][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 350.386306][ C1] RSP: 0018:ffffc9000624fdf0 EFLAGS: 00000283 [ 350.392380][ C1] RAX: 0f87e9df97493d00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 350.400450][ C1] RDX: ffffc90003249000 RSI: 0000000000013d9d RDI: 0000000000013d9e [ 350.408433][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 000188810acad3cf [ 350.416399][ C1] R10: 0001ffffffffffff R11: ffff88810acad000 R12: ffffffff8779af68 [ 350.424396][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 350.432374][ C1] ? dump_stack+0x15e/0x19d [ 350.436900][ C1] should_fail+0x23c/0x250 [ 350.441326][ C1] __should_failslab+0x81/0x90 [ 350.446089][ C1] ? __se_sys_memfd_create+0xfb/0x390 [ 350.451480][ C1] should_failslab+0x5/0x20 [ 350.455985][ C1] __kmalloc+0x66/0x380 [ 350.460135][ C1] ? strnlen_user+0x137/0x1c0 [ 350.464806][ C1] __se_sys_memfd_create+0xfb/0x390 [ 350.470004][ C1] __x64_sys_memfd_create+0x2d/0x40 [ 350.475210][ C1] do_syscall_64+0x39/0x80 [ 350.479647][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.485549][ C1] RIP: 0033:0x466459 [ 350.489451][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.509091][ C1] RSP: 002b:00007fb39b7eef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 350.517502][ C1] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 350.525512][ C1] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 350.533483][ C1] RBP: 0000000000000002 R08: 0000000000200000 R09: ffffffffffffffff [ 350.541453][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 350.549424][ C1] R13: 0000000020000100 R14: 0000000000400000 R15: 00000000200000c0 [ 350.557401][ C1] ---[ end trace 215dd0f65ef481ab ]--- [ 350.563232][ C1] ------------[ cut here ]------------ [ 350.568682][ C1] WARNING: CPU: 1 PID: 26485 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 350.579577][ C1] Modules linked in: [ 350.583463][ C1] CPU: 1 PID: 26485 Comm: syz-executor.1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 350.593617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.603692][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 350.609683][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 350.629325][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 350.635418][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001d RCX: ffff88810acad000 [ 350.643422][ C1] RDX: 0000000000010001 RSI: 000000000000001d RDI: 0000000000000001 [ 350.651478][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 350.659548][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 350.667517][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 350.675596][ C1] FS: 00007fb39b7ef700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 350.684528][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.691125][ C1] CR2: 00000000004e4a65 CR3: 000000010def7000 CR4: 00000000001526e0 [ 350.699106][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.707075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.715036][ C1] Call Trace: [ 350.718300][ C1] [ 350.721143][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 350.726948][ C1] __run_hrtimer+0x163/0x460 [ 350.731530][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 350.737350][ C1] hrtimer_interrupt+0x380/0xaf0 [ 350.742282][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 350.748185][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 350.753840][ C1] [ 350.756758][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 350.762751][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 350.768561][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 350.788248][ C1] RSP: 0018:ffffc9000624fd18 EFLAGS: 00000202 [ 350.794323][ C1] RAX: 0000000000000000 RBX: ffff88810acad000 RCX: ffffffff85a00e37 [ 350.802310][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 350.810275][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.818254][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.826220][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.834194][ C1] ? native_iret+0x7/0x7 [ 350.838439][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 350.843995][ C1] irqentry_exit+0x2a/0x40 [ 350.848436][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 350.853979][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 350.859098][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 350.878785][ C1] RSP: 0018:ffffc9000624fdf0 EFLAGS: 00000283 [ 350.884950][ C1] RAX: 0f87e9df97493d00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 350.892933][ C1] RDX: ffffc90003249000 RSI: 0000000000013d9d RDI: 0000000000013d9e [ 350.900901][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 000188810acad3cf [ 350.908875][ C1] R10: 0001ffffffffffff R11: ffff88810acad000 R12: ffffffff8779af68 [ 350.916841][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 350.924815][ C1] ? dump_stack+0x15e/0x19d [ 350.929342][ C1] should_fail+0x23c/0x250 [ 350.933861][ C1] __should_failslab+0x81/0x90 [ 350.938640][ C1] ? __se_sys_memfd_create+0xfb/0x390 [ 350.944036][ C1] should_failslab+0x5/0x20 [ 350.948587][ C1] __kmalloc+0x66/0x380 [ 350.952752][ C1] ? strnlen_user+0x137/0x1c0 [ 350.957422][ C1] __se_sys_memfd_create+0xfb/0x390 [ 350.962637][ C1] __x64_sys_memfd_create+0x2d/0x40 [ 350.967938][ C1] do_syscall_64+0x39/0x80 [ 350.972348][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.978245][ C1] RIP: 0033:0x466459 [ 350.982136][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 351.001741][ C1] RSP: 002b:00007fb39b7eef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 351.010166][ C1] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 351.018146][ C1] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 00000000004beba8 [ 351.026119][ C1] RBP: 0000000000000002 R08: 0000000000200000 R09: ffffffffffffffff [ 351.034092][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 351.042063][ C1] R13: 0000000020000100 R14: 0000000000400000 R15: 00000000200000c0 [ 351.050040][ C1] ---[ end trace 215dd0f65ef481ac ]--- [ 351.055882][ C1] ------------[ cut here ]------------ [ 351.061439][ C1] WARNING: CPU: 1 PID: 26485 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 351.075544][ C1] Modules linked in: [ 351.079448][ C1] CPU: 1 PID: 26485 Comm: syz-executor.1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 351.089625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.099684][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 351.105684][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 351.126358][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 351.132438][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001e RCX: ffff88810acad000 [ 351.140438][ C1] RDX: 0000000000010001 RSI: 000000000000001e RDI: 0000000000000001 [ 351.148410][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 351.156469][ C1] R10: 0001ffffffffffff R11: ffff88810acad000 R12: ffff88813bd1da58 [ 351.164453][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 351.172515][ C1] FS: 00007fb39b7ef700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 351.181455][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.188031][ C1] CR2: 00000000004e4a65 CR3: 000000010def7000 CR4: 00000000001526e0 [ 351.196019][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.203985][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.211953][ C1] Call Trace: [ 351.215245][ C1] [ 351.218287][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 351.224118][ C1] __run_hrtimer+0x163/0x460 [ 351.228710][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 351.234524][ C1] hrtimer_interrupt+0x380/0xaf0 [ 351.239474][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 351.245388][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 351.251026][ C1] [ 351.253948][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 351.259938][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 351.265768][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 351.285568][ C1] RSP: 0018:ffffc9000624fd18 EFLAGS: 00000202 [ 351.291639][ C1] RAX: 0000000000000000 RBX: ffff88810acad000 RCX: ffffffff85a00e37 [ 351.299612][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 351.307580][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.316176][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.324168][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.333638][ C1] ? native_iret+0x7/0x7 [ 351.338005][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 351.343562][ C1] irqentry_exit+0x2a/0x40 [ 351.347996][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 351.353463][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 351.358586][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 351.378290][ C1] RSP: 0018:ffffc9000624fdf0 EFLAGS: 00000283 [ 351.384355][ C1] RAX: 0f87e9df97493d00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 351.392348][ C1] RDX: ffffc90003249000 RSI: 0000000000013d9d RDI: 0000000000013d9e [ 351.400316][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 000188810acad3cf [ 351.408288][ C1] R10: 0001ffffffffffff R11: ffff88810acad000 R12: ffffffff8779af68 [ 351.416254][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 351.424223][ C1] ? dump_stack+0x15e/0x19d [ 351.430293][ C1] should_fail+0x23c/0x250 [ 351.434725][ C1] __should_failslab+0x81/0x90 [ 351.439487][ C1] ? __se_sys_memfd_create+0xfb/0x390 [ 351.444852][ C1] should_failslab+0x5/0x20 [ 351.449382][ C1] __kmalloc+0x66/0x380 [ 351.453552][ C1] ? strnlen_user+0x137/0x1c0 [ 351.458229][ C1] __se_sys_memfd_create+0xfb/0x390 [ 351.463446][ C1] __x64_sys_memfd_create+0x2d/0x40 [ 351.468635][ C1] do_syscall_64+0x39/0x80 [ 351.473049][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 351.479330][ C1] RIP: 0033:0x466459 [ 351.483238][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 351.502954][ C1] RSP: 002b:00007fb39b7eef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 351.511392][ C1] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 351.519639][ C1] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 00000000004beba8 19:39:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB="b6643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) signalfd(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000006680)='./file0/file0\x00', &(0x7f0000008a80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r7, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0xee00) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="a50f46e0922fb41b3609350e4a8d19fe61576783514ccc103d56cf10840d97bbb151eb308c792479021dcae672702c97fb2d1182da62c73b2fd14f61113e59ff7e00b90a2092f95d72e21574a0661db92e46792fe0216e6569ab308cc16c7aedf2ef4f16037892c2d2924a382435a12f3e42a0873b71e92b549905a98f40da181447b2fb88b144287e9aaad0e31c4e486ba58eb3a3608f57a5c3860acc144cd1a89daadf14e4428b346d9570201f31f102bfcc3d73003dee300ce53e89a6409c9b1b7aaa08b1d02b1743710da48b319657becc6c6ccc7f711fc77f7f5062bbcfed24fbc9912a15381d6d706798b485cb561d15a89e82384e0830dad603fb7d6ac624a9f0dad61a4ad7654fd69b37d6346f18d3d0d1e0f1022cdbeefa12d31e14c3c33741eed52277278e216191a9593e2bde3abae89bb01d730a277bc2f7dc8ac2b96e5b813a064035da10836a4d6493c6c8fe22054f9f774401085cf4c7a652205940fbe32d23693320228190dc1711d6b82507016d65f638a2b7f4ceec9ef82f683750da85a0a68a12a24abf709cc98622f4b244cce6d9769462dfeeb4ce8092277cb356fc5125e29ae4cebd73742bedf45581696deddf7b61a215f151132c7c9b1057762d8e819ac3bc4fdec5b7a3d912e9db42b9bd65055cb00b44d3e16facc72d33c0eec1ee8ebe91ab95d04ac562a380c2d7b5fcbd07dd12b1fe30d143ec349b359ee1035c107be17616f5c6c48a3a25527b0d9fda1f170ab0a5279da477af9025c4a03ebe3a356dadc058fe32c314897318e9c5e39f2476fb309b710d894a1131b464183136a7fd0849463eaeab5f1f9f0389a0705a6fed48b9d17009a20ca89052b96bd681790f52e90dc607aa87dd9247af3d61bf0330a78e2898c963c1e8b28026e7671402892965fa84992640eb11b3a1c1cf78da74b389186f1aca402d14443d2959bc8c0902460c6efdc60b575dd5c561bad11227a53a3761671a3c0b59fafc2fbf72c699c64b9381516f1c224bc95f58e31aa06c4c8fb9decbeb8b0e718c87e23cffaf2d9327931c4c153a7bd0944f4567b114c95dbfe1a2f3630c8295a71940302a9d4e33d02f21d303b9710f35dbcf3468f6b96b1d569161df04e42d034b38b71d9124af3cd6bef562431bfdf243115d86b9b5bd0f7c28eb57bfdd1b9d2e21e351108c0eb0b567c72a9ff3afb4ecb22161107e0103c7b105d2544ffa751ed478d5a94688808f06df2276dd7a7043bc97b16f742126082289cbe1c8cc686a2664f0e164c250e866c3a79d7bd14d31435b723c7e4b2141844653949c6c4cb9e2f6aa895dde01edac36e3c8633364e4b56d5ac5e8fdcaec5e8e5607073a8af82e95daf493b8815248381f40440dc65ff3676229bb68b2e98bb1baa66dfdd16906e3f5bcea2cbc2b8265eedf3d523d726059d0618f1b48f613ae7492edd2cce575270296e286d1340d8fe8b98eec0295f9bc92ccb23f85e45c9d6f1411e83cc45c6af725459731d4fa6a74c8df26e7c1b13e14cd9c69831d466abd9077dcebb432a01c17654a8e5a418a8ed882b4d199eb28c064c18a3f81f953fcc6d59191b748c29c438794f6c98b3b3ff8a6ca0715f8f490e05aebb01e337d8eb29ba11aaf02f6cd1f1c357a243ae59e5455e1b52d4ec68966dc955ec2f5f00eb9cf2f3566637a036f44c7925ff030a57234a0f6ed293c6697d116b071f74f428c59b5eccfba37e66a17d10a90f4081533994eeac75aee980b9c21e01a1cacf907f2c533aec7086aeb5320623683b2f2a5b7209f93397fbd697074442c464ca51cf4829067cb1de5d964d528b6f3dabaccefc2972ea04739293b1dbd339b28ccf41289e931556b832c92fdd20635cbba925fda4895a8760a6372d55010a0e5f5823a6caecafdb1ed4161c3fda06a5ba438600b2b301be4b4e575242c304ea497116d29ce11ca15c50e9792ba6155fd0d6dd50b6d61ebb1b956afa5ea872b6a3f2426aa1640cd1585b59096c26e1396c0aab08ee52c0d88b082dc2cb1a20f91a57c70f20fd7109fd615758c4bc58a20900169831ce887c58a8170488f4364c385f56daabeca66fee6ac2051a6b65019c52006caf9a8676ca65b8b3ed92c1abfeade0001b8112c4acffdceec0a47ddc34a75d93ff7770a3944e8377462e77dd6468e1104d98189e3081b487161f1632a15084f586645d526e2cdd62ec286454ae2c10779bbc6c37b3bcce2bd70066bba691002d9e8dc99b7943e9445e75db7ef72288f31444e789d33f5902f00d3758ec433d478df0e23ce137c5da9ba104fdeed920a2df0a1581e7a976b475839c0365d26fd6fbec7cd5ce2784d1d7617ffc4111e5611d0c9cbe2d7feede079e5f2a0331f4b0e6bc77ee1e3211f13b408d8d02637869b4217cc29a015cc6b87f32c9e6a2731418cfa00d00497a0b50d441986e66593fa3b65ab2408121566111a7ea4bb2cc074bfb6bef6de4098d16fda34dfcc61c22179fb9f348bc39005621412b8143fbfb52f06d7b5b1ab922daf0037eb7d19a50ea65af10da888b0c9d4521823497a2e07f103bef07bd932f8e25940a6b66ebe3b28217cbb90fa9fe1bfb68f5b7e7b10f14016b45b86d7eec2d78cb365c25bd53687b0e404a2e85ff77c6a0fa9942a482ec47dce3607a36ad45c471f1baab9b565e0aa2c08a777518560aeeb0aaadc55a25b91e89147b5b4297af3628c2a70afe6a11332518875751f23abe3ba5671f99ea77840d64649d33ef019cae8226e8bf9d868796b2245e51cb41f637d088743b2cc5efb800e163af89cd597c3afd750ff525610c5df9c2a5a16624226f3bc71005b2617647ab7b700ee3d85bec8e2d6d6b48dcc44ac6fd75a3f8270f58a7defa84d868450b668ef41a872a6b7358431cf8c3fa6aeca2637ddf33920c8ede69cc2f62d207c8e19d03f0c38159d18b624ecd25702a49d9c2bd8af337305c6bc38b8e48f8d23161b38780ed97679397e7dc8026d61845955c4f909b450fdda9b9bccad92e928edd95cc1dff9415638a62e22af4e61d6515014ccc5bf713424f9121caab5d00fd67ea6130ca6f8cdcbb15611681f0c245e29732530e5aecb9c2d4997c33bcac78f1dba5c7ddb9b55e2e5a23eed1f1673ccd678d41166a88f1bf7e76a07fc368ce780ef9f2d03fd511013b53453247c76187a5d93325c0cf5e9ad470fc620b3f33e2cb9a0721626544549ce41c92709ee62689831e5e0ddb9dd13f1429e326eb065cb828c621853972d101932c019af246683d37734d41010de66c5beca8d0faa456bdb45220cbf072e80e1d728a152298fa480e25a8bdcd0c9d82be4a3914ee1e5356d9bb2e3133f6789ddb1b384c318e6a7219b8d20928ab8f933accfda23122feb8274f941a0cd1680a941279f9f92b19da33013f71d8bd166ae1f256e3eddb08348f725066527a3e3353a3d27706009756065ca9b017749dca397271d7a93fc4dec4ab1e34a70277263d047a7406dafef1437c78d85307f2b1467bcbb561d1736abd41c31815248d15cc7153405de043905504e190da82d65b610c53cb6c42bcda4d88794e937669993e922f9723c68b34cdd4c55d07dc53fe875b90afd503736a7894bb0c90028680ccaab179e91f54ae836abc6965b1e70c3e590bb9abe3ba17c704ccc98c0e82f651815da53ef4670c5f2a86533b3c49f803cfe3f05cce146a56e1fe049a5b3a0aedf7170d5fa50bc8fad1e23d89dbd56312b3738d57a80d6e8c90e33d8c70eeac8c0ec7688ed3967c975ad1a0a8db4b343a06f471b2eab82ddb06928943542f65380762712db7adb5cf82b980c2be4db9b1acacb4a877c42ee6e3f40143bf5c7a5a60489a1d4e8c147f5ff02e0250bc33f106331d02d470cb0f33108e4bdd6ad4dc4b51d91a86e2c0271948d65a64c5bed077ce643db5daa4d12f646e6d95a83761e30d16015ee9ef2d4be35608664af305625edc002592310cab8e7abb363687dd595cf7dc927b00bb8eff43fe5f80fd314c6e1a38611e4ea153aa917a66fd3a4160a0d31b3389935afcc58c2826d2f3e2c39c8ce911b00103808cfb979fd92e04a64082e683579788b4ffd9926b8a4e24d12e0213ac5d249f2c571ba06add689f145e75c3cfe544d1d9e1e44b72ed4a9924efc21ce5915adec826c22380e958b6b41c170aad22c64373b46f95e0d6ddbf712c508f710e7770fdc3ed873b4c18d4f9f8ee3312e9ede7c8ed2cbcd3529747580279bd1bf6b354137a0cff7a6b50466af02c382caea3dc3eb4e93b52385cd7232f3fb412cb6242877f9b5098982952b2fed474d51bd1017adf8bd30b5fd1a9e3bab645c63dae9a3b809a687f8c78078fe655b70f16d5ad7573e172ade77d03990ebed9500d38527e9714788b655d6e948cbc0a8bf1735382e4751450b25e46952c1d15d80dc71bd43b590281b01196125ab04364468dd5c8dd94c7fb9e5079a546159659edc02c43b19fdc18fc56e8d64b0711785ad09f4b95bcdd87670bc19addfa598dd7bc49ae936df2ce693edbe6da1eb683e1e085551b61fe6d88fd289ab478e51f1789a841785ebacfebc4c4d67e7bf58b4a0959632b5dc96cae6ecc587740964081768ecaf6699dab8fdea60eb0815d53889e0e25b412e83aae95674adcb306f04a89aa7eb7f83d5ac7706449a45cf751d88af4fc1832599e4249c60f67975c48f402b5058c234b3f75aa31f27dd7f4d1eaad0e9a6992eb24a37d8e3a9cf92a27ca1618cdf3cfbeed82c3b855722935bc1024419b54f1893e3a45c52cf8ca71e520c292b7f1521acc98244143bb3d7bffc72b12ff2a43bf4d74c583e4fe6ad5d5954329644388dafe736bb9d69d22b8116aa95f2b87afef5d063d9356f083683fc70c3449dd1023dac1a87c726df93de31132a90f3acb94c5b25c026863b3207684e5611240a2f1d78b9d93692d9afc4cb6a03ea81b1aca451e0095f2d8922852bfd935b07ecbb8a6c53d731ace4b007b85634060af31dc7ae6190385c0dd76eebe675634f7d7a3c19355497361e76039b69dfd6ede5de9143876e1809a33ce05d95978b8e99f6d95b72743beedaaba4626dbcba22239069dc6ccf2447c2ae3eb853eb08897590d4674f9d87e56d515d8dba644cda73f21f73a59f6d795364bf12e52abc126b58a11579cf8b3f17d9f8db6324d6243d45d6a9e42080bf9f103a9ae6166939992b34bb58c456a4aa569ecbb42c8ad45c636b26b7704b8857672c549cd17e64ff03b44ba74c220030b0f69b31a8f28cee170d639084da89f83c13bba2d06e4683d4d44d7587e6d28a72766f45abe4ea7089e80280532e98ec3f4ea0cd2e3e037f733b69c06e6e0f9fa0a83335f14db7d5c531fb286c8411527c8e837cf01e3dea1f045b9b20fdd94775158df33bc6196f6452cbebbfffdfc46f687b36edf75cd991dc4d8fd5d600c9fbf180f32bca406a2fc1bf4737fbb0f73eb3bbcb596c21bbfd4866c7ccbb2d5c98e7c799364749b8f93bbebdc34b5316dd5505276150cc5e499e9779ea39b248c88248c134ec4037043dc6b2d9c605b5db693907b37d9958f03d314d03475d3eed2ee56bcfbc03674b756c933b6e26364dd33f2c400cc6d04b3c98623dc76e1cb2292e99b587ce7c93e659a7fa1caea84e0303c45c2807ad9ae08fa7a5bf8d60b839856cd2c3128277ac20a5b3d7cc7fe8cccba2dcf01c7720711fbd1ebd01c46d55f835c0e7b80175449f43f5dd7746239c18f7798f1eb912724c82f09363a431ada2ad0de4caf6367b2a1bc2a6390b4ede64e40460d1498cdd0ba52152d88f893ad27e216fa8087ee3bd57ee025f224e27ef144e33b7fbf49c149779e4e061fff609f0d2645f3f83acaaf6ff28c804cb83cd3dfc85c5c3f412701255f969ca1a79bfe5fe4f35abef8c260592f3dcef292617e04cc385371160af3aedc8a0b1593ed7f5c2d5a129c1cda901714a0a0c7da581d1735932933cb3c50a1b21dc7794da8da4791a7fb9f0bee237cfb61bd2dcc50e5956c8f2261ea96029333a3387a02967289b80654d8444c5af28655f9d9b521f9cd60b5c3eb73304e4fc5782221eb380f72cb14c80e347299009a71569f0c2f1cab424e7bbb6c0ebec65f60d283dbecdc1e9067e35c67503d05d798ca0b8ec50721c54679fca84f0b1019431ab82be2410c8eed15b328f5e5fd4ba3e17dd290801bd24ee1c44e7a42bc5fea200ca825de16105097d2defc5811b8b375cef8273fa0e0f4e7f44df48caf4d9703e1a5876080316f52916c0fd301235bed93296b0acdc5a28c7873d1cfbdc92bcd8e1a91943aa8d2eb5f8d1a8e7369ebfdf64140a3161e4919e72289476bc9fa7a2f3453eb718bc112bcefa7188556f38b9cd9902eef54679c9578738cc7082ffe354248643459600f763e55c39ef39ef0ff1da311aa534d9568ab592c8f785a34ccb80bdef58d973a7b423c63f53238ecff55ee0c103f38197bc7ba9675777c3c8921f5ca75282a17ba20f68e508139e5b2b40822ae9f0b31916561da890ead944da3d5922352ed7df4ceb2aa489ce141a774d600000e566f1cc524c7c1cd67eab6dd65fc8e975266460e32a99083c45c59ce279d77080be1cef7972b5157f2f680a923081dfd90685fb6efa0a712de4bf1c7e3d7a68d45f810621661f82ebc447130415d11c8563a7ab44940bfe3cb40b00d0be6876618922520c6821cb16ffbfd56e05dc95c124154b1c1e949e85a37326c0823a3ddd80063d3f0dc782bf3952338c7f013d2af168567e8dcabf4d72280a6c04d306cbcd1257131f490190ea484ec8cff4f0465e9a2434b70413019121f24d5130498a6db05b792de2612f9a23a983025adc83ac72569eb2791d724a9f8da179b27044a9bf2402399c1f3c9b3f8592681eab4f3e375edb06450def887497fada2f2e926c8e1350d027fc0bf032cef8458db14c664a38f6e2562331406f6e5fa114edd031dd244bcf9090156582846aa462ddeeb68591f24acf2ea11fe7545a044cd64779d00aec20fc9fa3d8677d408e05693930921165803bd9c003a2711c05d2f50ba1a78e4f6f5a0aa03c7f8d5db11f6d80deb612178d84ac0373ef42496914ebe44168f493e7136d0fc4bdcb9cc98651330796c73b6f20fc40986be9e3395c5b66f279a5737a6a5c7c2553d224b0af613581c5e3fffa56e8c16f4f5d58f931d882e5d0c2b9aa74a3bba4856730056aed5bb63cabcc01835199e968bdac72f7a1554d04f98e6a23fb1d569fc414e4bf48703c0da4803c29d50e4b8c19b7ad0e5284a6c8edf0a4fdcbb13c54f555ea3209a23920b2da90234a8bdae690afb9498033e422c5e25d3acde6f9d38eca06f3978f4bd4ed8d31d8a32e7190c307958d539007ccdbaf9adaba07e6fa25ae7d3a7bad27c5bc3591aacab3bd50b5de418febd02bfce45de19d12586c7078d1e5ef481c6f028bb9e978964f66d962073422a02b9cce3085cca303dc6b7d8172cb49edf16a3dd7ef9d594052cfe03c0817315bb1b40eb82d5af20bc088ac70feb456e1be0d9dbd397e78a611872524908c2710ea58d3d24c21c66ce78145be62348ff3fc9730ede14d49fa472eca45ea6b43486d61f47bb99383438bec1cf53cadaf2292bda38387592a706e46610cc8e7eb8a15829320c4ca3eb9c0579a55e8ab9e55b01fcafda4f5b8fe5dd32ea1478633bd7752959ae0bcf153e5ae846a920995cc2da53ac1785b7bad18868774077c7637404e70d6262951143e6df7232c2540dd91c865a7e1f5a8ca427c7ef400deaccce83c3a158c5c8eb5bbe58b48fa6bf2dc511a64f3c7b304cf52c7dad019e5d2bf7af9944e5a49798efbd2ea440669111156b12ec07a54fa4423c4c0d785bfa19067c27529f8eb3cfc19ba4d21cb0e816b8b43c673386934b30e62f9c876d1aa6183669cec2d938819e3901583d6b0faa7efa16aeb60d0cdc9dfd6c38f2877207434658bc3d4f4bb59be04fa670e70bc764f04282febd990c4dbf6d5ff2f980916140c6316fdf1b6a696c11886bc7749210cdb66931a1ab200280fb4f24e1a83203a81e184a7199873a3e23a5fa7b1738e74b3fe619b640e8b3c4e6c31dc8aaaeb19329ec92b9b579904b74a9b59c6c4e7744df3f1134fff6060cb87aed13a78c5835ab6564cdec059079671d3de33e84e0609ef14a6afa7198fa2763a0243ec25c074e046510181ebc82655a5d60d7d620b4ee6227f33eda8ff8c95f2d994bda218228cdd5b540e022b1dea6e55c03b4eb72c7eaabba2b6f0b9696f2b625af9529788282354d67b8d1f7edbcbad6519c6d186f156d5a52ad880bcf31cb7f8502643bed1efb703d4aa345d57365a716512df713c7a612e340d289f40037f40cc6d2b5ebc568adde4504c8866d4b3857ac823b1ca9d957698c72dbce6a912e3883379e0adb2b4e1879a816ece1727de0d80b76b6ec3d1f113dfa26d2725caeafae1f0682fb7f51fa799775943a8de8bac3da9bdb52623560cc5df65c313834551da69076db8bc5108bfb7fa2070596f9029e44e575a4b04dd1d2d3538b95912f05fa19ba3cfd198038cc8140c084498101acafb3559a2ccae99724f9b5d214d44bdb17c250d4bd0472c16f6b0c1171a714e6b7eca6ed2041f517ea912ea4c018c248bf1420a07495772d645b26a9755364b6cfb7befd759a5ce54fa4ef5b1802493c066d44c9f4f3426aa6b01f986c909a6d7717e4b44b148f76ef534ddf6fb01ccd5549b34669e2a4ec775c00c1100ac57b1f1d1f5c0bf91f2b34651dca55ee7fe2ec09ef7301e8f7b584240bc5a0c8a78d4e3cb0d8382aa677044fdf68f475242e5432e43b78d4ad1e49cd5369587604ae618981a9085e383904c597341e8a2c14a0cd4b218d9fca387f7eb7f8bcc665eb5d09b88d36f5131cf6ced6f8adc8fcbaac6d2ff73e47880006795df6bcda065129ffd3f33df2340db3445e893ef832a4c69c561f5f965b251bdeaf524e635b90aa46e385c4b31a8f89da481fc8fdff4a921d5164d935e26e8f07cf01d344f932d7a06e8baaf62e7144c80b5ae837af7bf4d42cdf159456ef5aaa025022ee330e2a788537f8df734b33f5dda8d436c22c9634fdaa053b473155964899d314ab9f854ff56d71d8ee4b837a123660b5343e0d91426cc3c4cb0718f11ff41be24b9842016749d5bf610384b5ff7b5ab32cd36a5d38210572cdfc4c77b5768f45a31b421be9071ec9b7370259f547662f58ba8a36f22f874d6300bf6210df8bbb0c67214a96928b0a12a606da1fe6214ffdf3e6382506a5b09d3a09d84144d985c47361989a4f186c41aee278c60c965af90cd4156f25edb799a991edd2474402d2de7018fe9b701be451814d06d3b75c19fc1785c2b8a650ae8a2180dfef08cb9c443007b201a2ab18b5c20aad6030e94f02fd14ad781bd3c2bfc2154c44dbe9d45f2f4a6e49aa0f2b7bd9007c17347eb94ad07b4d424c7b90d2a630175f4ff92d7a193d122debfa4321c2843b08a2955d5ab3a5f06a02e8f64296aa138789d56bf3f5cc9ec80710aa0abc084c2806652e51f586cb6c3d182a07b3945e5c1be52093fb5f11834584f9bd4f9a471536ac02f855056242e9b3a62e93131b15523baa67c7a982fe289678a765cd3c66be0badf86100bda87b82cf96da02afc0bed8cd3c3097006d314c27a189d94135ca0da418b645c41313b58a9b7c35e22e729af95a9655ce678425e09e7f2921e0c17017739bbb4a7c2b3a5453d04945c39a2d4776f5c01309bdc97d9558f8898da8057648b1500ef0592abb1f3f1ff15a3a373a68f2c107eb7a4fd175f410ae8b3d1e8e9aeb8559bdd00534374a8852ca8a900f6381b40111f556fb1abcfe5fd05d4f33bf876aa1eb53ce68d23991960e5dabd8350b1231ab60216a4b0a92050bbf394160d8129bb45c5df004b4be686f06396348da8acec43bb0536e0d914d3292de11b6d8e8f916be8cc65f4388341a39d23b88485a62d42bd80f29a8a5498bda8669a8091a0646b2e3ad819875c158590993eff9d84a9367ec96445cc98dfa73dbac279978c815d00f4874293f5fc07b6d18e6349f5cd2dccafc8ce5718d485ddb558381988545b4e726a0009ff8bd9bcdd738be325dd5864de05b3de02f670398112daf2ad6b8ba5af3777d9a4d63037c78e7d15b9f176c9ad9ad97f51c97a533441e8e61f6f59313f97363c657f28e0fed0eb3ea10d9d9c456b584516c1a26948c16f9546cb772a3e11cab8cdd58abe99363c7497c44966c842adcd701c6f7acaec549a89a4d7f22e12c6056e6d0e5938870ab466c35b387d9d90530d5acddbf7433c427cd1b3fdc93099e14e09d2bb0482af3fb06e51101be88d38e90e6bf972cef3e38b475cd222aa5d3bc2cd351468a6f64a7e21d676cfe6989d4adc7bd875b9976c53487bb81e459e8bb2599ef947f9776aafc1daad9bc881e6054866c7e657deb96e2369682f98fa00086df83f8332d2d1486adec2d8e9c6d4cf6b6b939b638497bdad96845e4ba5ddda0de3fc0d451c4bf880804d1fc7d50ced00760a7953f3d956ea2dce73645e37a239f32ae8dea645cc97b1b73a278ac85b72962958378b9fe664c043e1826feca2506376e0b71e70c5e1a70e0494a15350a856e222254c3d649c57f518bb34ade314bfe3215a1865184148d5098d54d0ee213ff743e73f604f43c3ae7cf246167fb503cdd22f5f7d539c2722ae74007edf53ddc6f7fdf9595e66ab379d3f82a699cfe8297dc28016fd42497276d3537d8c7ec0ca2a76282005c3e6b5761b317f233a3f120d02614358970381eeff1eb35edb877f15b58807fc1ba9a61290010528a9e68a806adc85e7b0e1ea5ac9224f98c6165fd904c37336b499189bf17122e955fb05d29b000941f32b5fe9a3173dbd824b9ebf87dda8cd558074d5615bcb09f4b74898dd9ce8a784b7dd9741bb760c2716a88321f72f9928e524213b308953342e739de31bb17d3fc89e48956072e31389e588bbaacbdc508757467b6d462981e01d709f3a052fda660490f13b85765e67f424094038d47272886d3fcaba5016023dc72e26e16deddf081ad4385cd7211f4b8f41c5a649cbc66634792dce546a1177fc3371901ea8cc737a4b0df2c20849b315d25d0abad53478853dd8c2eb9ad7f951352a8ee361fc6353076e3fd9f11636564944de150c94ccb288e06dbc30978b02c4f438754d2cc58f9fc8eb1394a35959734e68cc43830394b805e51cceda7e05d04e42940c2a69fe338fbbff642d71be69075451bcac4aa5882fc9975b7b939836f18d69a7031b3d574860146fbc9d9f77960a0c11ece6759241c4e404679ada56f23f9a78ebbe0de80f00f5bec8cad7217bd85e13c326eaee733b80c710972aa407a24b5d9ea61e1c885b46a08b5a70647991f05ca9d968ee29debf6a884fd2ca4e0dcf862aadaff707252ce6405b7553ce0d452e30c18b8ac1daad3a970003adb28a88f0dacafad6cc7e77aa4c349c4971d52d759de52faef8f00682eb6a0d2e37764b03aa3d06d90ec7e42a921be191967ad1a70f7856991deef5dcbfe866b5c7987a3c2f4341b207c0c09af78e88fb1e539e2185", 0x2000, &(0x7f0000008e80)={&(0x7f0000002000)={0x50, 0x0, 0x6, {0x7, 0x21, 0x1f, 0x0, 0xe000, 0x7f, 0x9, 0x6}}, &(0x7f0000002140)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffa}, &(0x7f0000002180)={0x18, 0x0, 0x6, {0x19b}}, &(0x7f0000004280)={0x18, 0xfffffffffffffff5, 0x7fff, {0x7}}, &(0x7f0000006380)={0x18, 0x0, 0x9, {0x3}}, &(0x7f00000063c0)={0x28, 0xfffffffffffffff5, 0x10000, {{0x8, 0xffffffffffffffff, 0x2}}}, &(0x7f0000006400)={0x60, 0xffffffffffffffda, 0x51bf2ff4, {{0x20, 0x2, 0x4, 0x7fffffff, 0x4, 0x1, 0xe02, 0x8001}}}, &(0x7f0000006480)={0x18, 0x0, 0x16b, {0x8000}}, &(0x7f00000064c0)={0x15, 0x0, 0x6, {'fuse\x00'}}, &(0x7f0000006500)={0x20, 0x0, 0x82, {0x0, 0x7}}, &(0x7f0000006600)={0x78, 0x0, 0x1, {0x10000, 0x4, 0x0, {0x6, 0x6, 0x9, 0x8, 0x1000, 0x6, 0x4, 0x80000000, 0x4, 0x2000, 0x9, 0x0, 0x0, 0x7, 0x3}}}, &(0x7f0000006780)={0x90, 0x0, 0x400, {0x2, 0x3, 0xfff, 0x80000001, 0x6, 0x9, {0x2, 0x0, 0x943, 0x1, 0x8000, 0x10000, 0x8d, 0x1, 0x8, 0xa000, 0x5, 0x0, 0x0, 0xffffffff, 0x101}}}, &(0x7f0000006840)={0x120, 0x0, 0x3ff, [{0x5, 0x6, 0xa, 0x81, '/dev/fuse\x00'}, {0x4, 0xe8, 0x4, 0x4, '/@]-'}, {0x3, 0x1ff, 0x2, 0x787e4453, '.:'}, {0x4, 0x9, 0x0, 0x65}, {0x0, 0x100, 0x5, 0x8, 'fuse\x00'}, {0x4, 0x7ff, 0xa, 0x4, '/dev/fuse\x00'}, {0x1, 0x7ff, 0xc, 0x8001, '%)\xb8.\\(g\xaa}[c('}, {0x2, 0x6, 0x5, 0x7, 'fuse\x00'}]}, &(0x7f0000008b00)={0x2a8, 0x0, 0x7, [{{0x2, 0x1, 0x5, 0x7, 0xc1e5, 0x0, {0x6, 0x7c, 0x6, 0xae9, 0x3, 0x7f, 0x5, 0x8, 0x8, 0x6000, 0x1ff, r2, 0xffffffffffffffff, 0xfffffff9, 0x10001}}, {0x6, 0x80000000, 0xa, 0x5, '/dev/fuse\x00'}}, {{0x1, 0x0, 0x3, 0xc32, 0x8, 0x6, {0x1, 0x37cb, 0x5, 0x6, 0x7f, 0x3, 0x1f, 0x6, 0x6, 0x4000, 0x1, r2, r3, 0x5f61, 0x9}}, {0x5, 0x0, 0xa, 0x1000, '/dev/fuse\x00'}}, {{0x4, 0x0, 0x401, 0x4, 0x4, 0x8, {0x0, 0x80, 0x8, 0x6, 0x145, 0x8a, 0x6, 0x43, 0x1, 0x6000, 0x4, r4, r3, 0x8, 0x6}}, {0x6, 0x800, 0xa, 0xd5, '/dev/fuse\x00'}}, {{0x0, 0x0, 0x401, 0x200, 0x2, 0x1, {0x6, 0x50, 0x1000, 0x2, 0x4, 0xdd, 0x20, 0x5, 0x6577, 0x6000, 0x0, r5, r7, 0xbd4, 0x653}}, {0x0, 0x2b3ae116, 0x2, 0x7, '[\''}}]}, &(0x7f0000008dc0)={0xa0, 0x0, 0x8e, {{0x0, 0x1, 0x6, 0x6, 0x1, 0x1, {0x0, 0x6, 0x4, 0x5, 0x4, 0x5, 0x7f, 0x1, 0x3, 0x4000, 0x9, r9, r3, 0x6, 0x3f}}, {0x0, 0x10}}}, &(0x7f0000006980)={0x20, 0x0, 0xcc1, {0x1, 0x4, 0x0, 0x1}}}) r10 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r10, 0x1261, 0x0) 19:39:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 351.527620][ C1] RBP: 0000000000000002 R08: 0000000000200000 R09: ffffffffffffffff [ 351.535592][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 351.543670][ C1] R13: 0000000020000100 R14: 0000000000400000 R15: 00000000200000c0 [ 351.551687][ C1] ---[ end trace 215dd0f65ef481ad ]--- [ 351.582109][T26519] fuse: Unknown parameter '¶d' 19:39:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:03 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 351.657513][ C1] ------------[ cut here ]------------ [ 351.663018][ C1] WARNING: CPU: 1 PID: 26520 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 351.674745][ C1] Modules linked in: [ 351.678651][ C1] CPU: 1 PID: 26520 Comm: syz-executor.0 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 351.688807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.698855][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 19:39:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000040000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000300)={[{@dioread_nolock='dioread_nolock'}]}) [ 351.704838][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 351.724480][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 351.730664][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000024 RCX: ffff88810a8a3000 [ 351.738654][ C1] RDX: 0000000000010001 RSI: 0000000000000024 RDI: 0000000000000001 [ 351.746636][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 351.754702][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 351.762665][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 351.770630][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 351.779568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.786141][ C1] CR2: 0000000000970000 CR3: 0000000109530000 CR4: 00000000001506e0 [ 351.794110][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.802071][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.810121][ C1] Call Trace: [ 351.813392][ C1] [ 351.816226][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 351.822041][ C1] __run_hrtimer+0x163/0x460 [ 351.826638][ C1] hrtimer_interrupt+0x380/0xaf0 [ 351.831598][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 351.837536][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 351.843177][ C1] [ 351.846117][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 351.854546][ C1] RIP: 0010:__tsan_read8+0x12/0x180 [ 351.859745][ C1] Code: 00 be 04 00 00 00 ba 03 00 00 00 e9 18 27 00 00 0f 1f 84 00 00 00 00 00 48 b9 ff ff ff ff ff ff 01 00 89 f8 c1 e8 0c 83 e0 3f <48> 89 fa 48 21 ca 4c 8d 4a 07 4c 8b 04 c5 30 1f f3 88 49 83 f8 02 [ 351.879347][ C1] RSP: 0018:ffffc9000636b828 EFLAGS: 00000206 [ 351.885426][ C1] RAX: 000000000000002b RBX: 000000000000000e RCX: 0001ffffffffffff [ 351.893419][ C1] RDX: 0000000000000000 RSI: ffffea0000254200 RDI: ffffc9000636baf8 [ 351.901390][ C1] RBP: ffffc9000636b960 R08: ffffffff81649445 R09: 000188810a8a33cf [ 351.909363][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffc9000636bad0 [ 351.917337][ C1] R13: ffff888076518a80 R14: ffff88810abce1e0 R15: ffffc9000636baf8 [ 351.925313][ C1] ? zap_pte_range+0x645/0x13f0 [ 351.930184][ C1] __tlb_remove_page_size+0x24/0x180 [ 351.935480][ C1] zap_pte_range+0x669/0x13f0 [ 351.940174][ C1] ? __down_write_common+0x45/0x870 [ 351.945374][ C1] unmap_page_range+0x540/0x650 [ 351.950235][ C1] unmap_single_vma+0x157/0x210 [ 351.955115][ C1] unmap_vmas+0xc0/0x170 [ 351.959390][ C1] exit_mmap+0x1be/0x400 [ 351.963628][ C1] __mmput+0xa2/0x220 [ 351.967615][ C1] mmput+0x3d/0x50 [ 351.971338][ C1] exit_mm+0x344/0x430 [ 351.975508][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 351.981324][ C1] ? taskstats_exit+0x334/0x730 [ 351.986184][ C1] ? acct_collect+0x3a4/0x400 [ 351.990858][ C1] do_exit+0x3fc/0x15e0 [ 351.995041][ C1] ? do_futex+0x1080/0x1cd0 [ 351.999545][ C1] do_group_exit+0xce/0x180 [ 352.004065][ C1] get_signal+0xf93/0x1510 [ 352.008483][ C1] ? do_preadv+0x1f0/0x230 [ 352.012897][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 352.018459][ C1] ? __se_sys_futex+0x2a8/0x390 [ 352.023320][ C1] ? __fpregs_load_activate+0x103/0x1f0 [ 352.029047][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 352.034702][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 352.040170][ C1] do_syscall_64+0x45/0x80 [ 352.044588][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.050477][ C1] RIP: 0033:0x466459 [ 352.054363][ C1] Code: Unable to access opcode bytes at RIP 0x46642f. [ 352.061194][ C1] RSP: 002b:00007f8d7198c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 352.069614][ C1] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000466459 [ 352.077669][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 352.085647][ C1] RBP: 000000000056bf60 R08: 000000000000000e R09: 0000000000000000 [ 352.093734][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 352.101702][ C1] R13: 00007fff9a58f76f R14: 00007f8d7198c300 R15: 0000000000022000 [ 352.109691][ C1] ---[ end trace 215dd0f65ef481ae ]--- [ 352.115502][ C1] ------------[ cut here ]------------ [ 352.120961][ C1] WARNING: CPU: 1 PID: 26520 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 352.131815][ C1] Modules linked in: [ 352.135701][ C1] CPU: 1 PID: 26520 Comm: syz-executor.0 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 352.145880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.155934][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 352.161927][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 352.181563][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 352.187629][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff88810a8a3000 [ 352.195603][ C1] RDX: 0000000000010001 RSI: 000000000000001b RDI: 0000000000000001 [ 352.203565][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 352.211527][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 352.219497][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 352.227484][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 352.236410][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.242986][ C1] CR2: 0000000000970000 CR3: 0000000109530000 CR4: 00000000001506e0 [ 352.250961][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.258940][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.266920][ C1] Call Trace: [ 352.270205][ C1] [ 352.273127][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 352.278945][ C1] __run_hrtimer+0x163/0x460 [ 352.284499][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 352.290321][ C1] hrtimer_interrupt+0x380/0xaf0 [ 352.295276][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 352.301169][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 352.307052][ C1] [ 352.309971][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 352.315945][ C1] RIP: 0010:__tsan_read8+0x12/0x180 [ 352.321158][ C1] Code: 00 be 04 00 00 00 ba 03 00 00 00 e9 18 27 00 00 0f 1f 84 00 00 00 00 00 48 b9 ff ff ff ff ff ff 01 00 89 f8 c1 e8 0c 83 e0 3f <48> 89 fa 48 21 ca 4c 8d 4a 07 4c 8b 04 c5 30 1f f3 88 49 83 f8 02 [ 352.341227][ C1] RSP: 0018:ffffc9000636b828 EFLAGS: 00000206 [ 352.347395][ C1] RAX: 000000000000002b RBX: 000000000000000e RCX: 0001ffffffffffff [ 352.355356][ C1] RDX: 0000000000000000 RSI: ffffea0000254200 RDI: ffffc9000636baf8 [ 352.363333][ C1] RBP: ffffc9000636b960 R08: ffffffff81649445 R09: 000188810a8a33cf [ 352.371295][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffc9000636bad0 [ 352.379270][ C1] R13: ffff888076518a80 R14: ffff88810abce1e0 R15: ffffc9000636baf8 [ 352.387232][ C1] ? zap_pte_range+0x645/0x13f0 [ 352.392092][ C1] __tlb_remove_page_size+0x24/0x180 [ 352.397373][ C1] zap_pte_range+0x669/0x13f0 [ 352.402047][ C1] ? __down_write_common+0x45/0x870 [ 352.407241][ C1] unmap_page_range+0x540/0x650 [ 352.412087][ C1] unmap_single_vma+0x157/0x210 [ 352.416930][ C1] unmap_vmas+0xc0/0x170 [ 352.421167][ C1] exit_mmap+0x1be/0x400 [ 352.425423][ C1] __mmput+0xa2/0x220 [ 352.429429][ C1] mmput+0x3d/0x50 [ 352.433145][ C1] exit_mm+0x344/0x430 [ 352.437212][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 352.443034][ C1] ? taskstats_exit+0x334/0x730 [ 352.447884][ C1] ? acct_collect+0x3a4/0x400 [ 352.452561][ C1] do_exit+0x3fc/0x15e0 [ 352.456706][ C1] ? do_futex+0x1080/0x1cd0 [ 352.461218][ C1] do_group_exit+0xce/0x180 [ 352.465731][ C1] get_signal+0xf93/0x1510 [ 352.470230][ C1] ? do_preadv+0x1f0/0x230 [ 352.474638][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 352.480206][ C1] ? __se_sys_futex+0x2a8/0x390 [ 352.485056][ C1] ? __fpregs_load_activate+0x103/0x1f0 [ 352.490623][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 352.496258][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 352.501736][ C1] do_syscall_64+0x45/0x80 [ 352.506143][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.512053][ C1] RIP: 0033:0x466459 [ 352.515934][ C1] Code: Unable to access opcode bytes at RIP 0x46642f. [ 352.522854][ C1] RSP: 002b:00007f8d7198c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 352.531324][ C1] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000466459 [ 352.539296][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 352.547258][ C1] RBP: 000000000056bf60 R08: 000000000000000e R09: 0000000000000000 [ 352.555220][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 352.563193][ C1] R13: 00007fff9a58f76f R14: 00007f8d7198c300 R15: 0000000000022000 [ 352.571183][ C1] ---[ end trace 215dd0f65ef481af ]--- [ 352.577040][ C1] ------------[ cut here ]------------ [ 352.582504][ C1] WARNING: CPU: 1 PID: 26520 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 352.593363][ C1] Modules linked in: [ 352.597263][ C1] CPU: 1 PID: 26520 Comm: syz-executor.0 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 352.607513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.617594][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 352.623608][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 352.643254][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 352.649333][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001c RCX: ffff88810a8a3000 [ 352.657312][ C1] RDX: 0000000000010001 RSI: 000000000000001c RDI: 0000000000000001 [ 352.665279][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 352.673297][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 352.681259][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 352.689310][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 352.698234][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.704812][ C1] CR2: 0000000000970000 CR3: 0000000109530000 CR4: 00000000001506e0 [ 352.712779][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.720745][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.728733][ C1] Call Trace: [ 352.732004][ C1] [ 352.734868][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 352.740686][ C1] __run_hrtimer+0x163/0x460 [ 352.745278][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 352.751086][ C1] hrtimer_interrupt+0x380/0xaf0 [ 352.756036][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 352.761945][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 352.767582][ C1] [ 352.770765][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 352.776750][ C1] RIP: 0010:__tsan_read8+0x12/0x180 [ 352.781968][ C1] Code: 00 be 04 00 00 00 ba 03 00 00 00 e9 18 27 00 00 0f 1f 84 00 00 00 00 00 48 b9 ff ff ff ff ff ff 01 00 89 f8 c1 e8 0c 83 e0 3f <48> 89 fa 48 21 ca 4c 8d 4a 07 4c 8b 04 c5 30 1f f3 88 49 83 f8 02 [ 352.801588][ C1] RSP: 0018:ffffc9000636b828 EFLAGS: 00000206 [ 352.808345][ C1] RAX: 000000000000002b RBX: 000000000000000e RCX: 0001ffffffffffff [ 352.816311][ C1] RDX: 0000000000000000 RSI: ffffea0000254200 RDI: ffffc9000636baf8 [ 352.824287][ C1] RBP: ffffc9000636b960 R08: ffffffff81649445 R09: 000188810a8a33cf [ 352.832259][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffc9000636bad0 [ 352.840228][ C1] R13: ffff888076518a80 R14: ffff88810abce1e0 R15: ffffc9000636baf8 [ 352.848304][ C1] ? zap_pte_range+0x645/0x13f0 [ 352.853160][ C1] __tlb_remove_page_size+0x24/0x180 [ 352.858456][ C1] zap_pte_range+0x669/0x13f0 [ 352.863915][ C1] ? __down_write_common+0x45/0x870 [ 352.869121][ C1] unmap_page_range+0x540/0x650 [ 352.873976][ C1] unmap_single_vma+0x157/0x210 [ 352.878955][ C1] unmap_vmas+0xc0/0x170 [ 352.883199][ C1] exit_mmap+0x1be/0x400 [ 352.887446][ C1] __mmput+0xa2/0x220 [ 352.891466][ C1] mmput+0x3d/0x50 [ 352.895183][ C1] exit_mm+0x344/0x430 [ 352.899259][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 352.905102][ C1] ? taskstats_exit+0x334/0x730 [ 352.909945][ C1] ? acct_collect+0x3a4/0x400 [ 352.914619][ C1] do_exit+0x3fc/0x15e0 [ 352.918772][ C1] ? do_futex+0x1080/0x1cd0 [ 352.923281][ C1] do_group_exit+0xce/0x180 [ 352.927801][ C1] get_signal+0xf93/0x1510 [ 352.932236][ C1] ? do_preadv+0x1f0/0x230 [ 352.936660][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 352.942239][ C1] ? __se_sys_futex+0x2a8/0x390 [ 352.947113][ C1] ? __fpregs_load_activate+0x103/0x1f0 [ 352.954421][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 352.960055][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 352.965540][ C1] do_syscall_64+0x45/0x80 [ 352.969961][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.975866][ C1] RIP: 0033:0x466459 [ 352.979760][ C1] Code: Unable to access opcode bytes at RIP 0x46642f. [ 352.986588][ C1] RSP: 002b:00007f8d7198c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 352.994988][ C1] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000466459 [ 353.003036][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 353.010995][ C1] RBP: 000000000056bf60 R08: 000000000000000e R09: 0000000000000000 [ 353.018957][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 353.026920][ C1] R13: 00007fff9a58f76f R14: 00007f8d7198c300 R15: 0000000000022000 [ 353.034902][ C1] ---[ end trace 215dd0f65ef481b0 ]--- [ 353.050755][T26528] loop1: detected capacity change from 0 to 8192 19:39:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 353.080684][T26528] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 353.087621][T26528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 353.096271][T26528] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 353.104096][T26528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 353.140739][ C1] ------------[ cut here ]------------ [ 353.146216][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 353.157015][ C1] Modules linked in: [ 353.160926][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 353.170926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.183071][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 353.189157][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 353.208876][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 353.214943][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000022 RCX: ffff888105e93000 [ 353.222916][ C1] RDX: 0000000000010000 RSI: 0000000000000022 RDI: 0000000000000001 [ 353.230886][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 353.238854][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 353.246827][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 353.254891][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 353.263918][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.270515][ C1] CR2: 000055c33a2a0b50 CR3: 0000000107abb000 CR4: 00000000001526e0 [ 353.278483][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.286445][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.294413][ C1] Call Trace: [ 353.297780][ C1] [ 353.300619][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 353.306543][ C1] __run_hrtimer+0x163/0x460 [ 353.311130][ C1] hrtimer_interrupt+0x380/0xaf0 [ 353.316066][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 353.321978][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 353.327615][ C1] [ 353.330538][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 353.336628][ C1] RIP: 0010:__tsan_read1+0x116/0x180 [ 353.341920][ C1] Code: a9 00 01 ff 00 74 11 48 c7 c0 f8 70 02 00 65 48 03 05 e6 50 aa 7e eb 0f 65 48 8b 04 25 00 6d 01 00 48 05 c8 0a 00 00 8b 48 04 <85> c9 7e 16 65 8b 15 77 a8 aa 7e f7 c2 00 00 0e 00 75 28 ff c9 89 [ 353.361638][ C1] RSP: 0018:ffffc90000d83b40 EFLAGS: 00000282 [ 353.368147][ C1] RAX: ffff888105e93ac8 RBX: ffffc90000d83bd0 RCX: 0000000000000000 [ 353.376117][ C1] RDX: 0001888107994018 RSI: 00000000ce719fd5 RDI: ffff888107994018 [ 353.384090][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001c90000d83bf7 [ 353.392050][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: ffff888107994000 [ 353.400021][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888107abd610 [ 353.408000][ C1] tomoyo_check_acl+0x6a/0x220 [ 353.412761][ C1] ? tomoyo_execute_permission+0x190/0x190 [ 353.418738][ C1] tomoyo_path_perm+0x22f/0x330 [ 353.423602][ C1] tomoyo_inode_getattr+0x18/0x20 [ 353.428653][ C1] security_inode_getattr+0x7f/0xd0 [ 353.433879][ C1] vfs_statx+0xf8/0x290 [ 353.438049][ C1] __se_sys_newlstat+0x46/0x250 [ 353.442916][ C1] ? __secure_computing+0x12e/0x1c0 [ 353.448121][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 353.453751][ C1] __x64_sys_newlstat+0x2d/0x40 [ 353.458615][ C1] do_syscall_64+0x39/0x80 [ 353.463026][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 353.468935][ C1] RIP: 0033:0x7fe430595335 [ 353.473517][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 353.493316][ C1] RSP: 002b:00007ffff4256ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 353.501739][ C1] RAX: ffffffffffffffda RBX: 000055c33a29d9b0 RCX: 00007fe430595335 [ 353.509715][ C1] RDX: 00007ffff4256b10 RSI: 00007ffff4256b10 RDI: 000055c33a29c9b0 [ 353.517716][ C1] RBP: 00007ffff4256bd0 R08: 00007fe4308541b8 R09: 0000000000001010 [ 353.525719][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33a29c9b0 [ 353.533710][ C1] R13: 000055c33a29c9ca R14: 000055c33a29f175 R15: 000055c33a29f17a [ 353.541734][ C1] ---[ end trace 215dd0f65ef481b1 ]--- [ 353.547584][ C1] ------------[ cut here ]------------ [ 353.553030][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 353.563798][ C1] Modules linked in: [ 353.567685][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 353.577702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.587755][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 353.593747][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 353.613444][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 353.619517][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000018 RCX: ffff888105e93000 [ 353.627482][ C1] RDX: 0000000000010000 RSI: 0000000000000018 RDI: 0000000000000001 [ 353.635473][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 353.643442][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 353.651408][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 353.659383][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 353.668303][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.674878][ C1] CR2: 000055c33a2a0b50 CR3: 0000000107abb000 CR4: 00000000001526e0 [ 353.682942][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.690908][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.698874][ C1] Call Trace: [ 353.702158][ C1] [ 353.704992][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 353.710798][ C1] __run_hrtimer+0x163/0x460 [ 353.715396][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 353.721209][ C1] hrtimer_interrupt+0x380/0xaf0 [ 353.726142][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 353.732042][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 353.737682][ C1] [ 353.740604][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 353.746581][ C1] RIP: 0010:__tsan_read1+0x116/0x180 [ 353.751902][ C1] Code: a9 00 01 ff 00 74 11 48 c7 c0 f8 70 02 00 65 48 03 05 e6 50 aa 7e eb 0f 65 48 8b 04 25 00 6d 01 00 48 05 c8 0a 00 00 8b 48 04 <85> c9 7e 16 65 8b 15 77 a8 aa 7e f7 c2 00 00 0e 00 75 28 ff c9 89 [ 353.771504][ C1] RSP: 0018:ffffc90000d83b40 EFLAGS: 00000282 [ 353.777569][ C1] RAX: ffff888105e93ac8 RBX: ffffc90000d83bd0 RCX: 0000000000000000 [ 353.785545][ C1] RDX: 0001888107994018 RSI: 00000000ce719fd5 RDI: ffff888107994018 [ 353.793509][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001c90000d83bf7 [ 353.801483][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: ffff888107994000 [ 353.810142][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888107abd610 [ 353.818108][ C1] tomoyo_check_acl+0x6a/0x220 [ 353.822877][ C1] ? tomoyo_execute_permission+0x190/0x190 [ 353.828700][ C1] tomoyo_path_perm+0x22f/0x330 [ 353.833560][ C1] tomoyo_inode_getattr+0x18/0x20 [ 353.838580][ C1] security_inode_getattr+0x7f/0xd0 [ 353.843781][ C1] vfs_statx+0xf8/0x290 [ 353.847934][ C1] __se_sys_newlstat+0x46/0x250 [ 353.852798][ C1] ? __secure_computing+0x12e/0x1c0 [ 353.857993][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 353.863274][ C1] __x64_sys_newlstat+0x2d/0x40 [ 353.868132][ C1] do_syscall_64+0x39/0x80 [ 353.872568][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 353.878473][ C1] RIP: 0033:0x7fe430595335 [ 353.882883][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 353.902485][ C1] RSP: 002b:00007ffff4256ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 353.910905][ C1] RAX: ffffffffffffffda RBX: 000055c33a29d9b0 RCX: 00007fe430595335 [ 353.918869][ C1] RDX: 00007ffff4256b10 RSI: 00007ffff4256b10 RDI: 000055c33a29c9b0 [ 353.926845][ C1] RBP: 00007ffff4256bd0 R08: 00007fe4308541b8 R09: 0000000000001010 [ 353.934831][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33a29c9b0 [ 353.942818][ C1] R13: 000055c33a29c9ca R14: 000055c33a29f175 R15: 000055c33a29f17a [ 353.950969][ C1] ---[ end trace 215dd0f65ef481b2 ]--- [ 353.956798][ C1] ------------[ cut here ]------------ [ 353.962423][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 353.973191][ C1] Modules linked in: [ 353.977084][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 353.987065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.997305][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 354.003313][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 354.022928][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 354.029001][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff888105e93000 [ 354.036993][ C1] RDX: 0000000000010000 RSI: 0000000000000019 RDI: 0000000000000001 [ 354.045065][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 354.053407][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: ffff88813bd1da58 [ 354.061395][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 354.069375][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 354.078312][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.084922][ C1] CR2: 000055c33a2a0b50 CR3: 0000000107abb000 CR4: 00000000001526e0 [ 354.092935][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.100915][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.108888][ C1] Call Trace: [ 354.112165][ C1] [ 354.115021][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 354.120851][ C1] __run_hrtimer+0x163/0x460 [ 354.125440][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 354.131244][ C1] hrtimer_interrupt+0x380/0xaf0 [ 354.136216][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 354.142133][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 354.147780][ C1] [ 354.150705][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 354.156697][ C1] RIP: 0010:__tsan_read1+0x116/0x180 [ 354.161993][ C1] Code: a9 00 01 ff 00 74 11 48 c7 c0 f8 70 02 00 65 48 03 05 e6 50 aa 7e eb 0f 65 48 8b 04 25 00 6d 01 00 48 05 c8 0a 00 00 8b 48 04 <85> c9 7e 16 65 8b 15 77 a8 aa 7e f7 c2 00 00 0e 00 75 28 ff c9 89 [ 354.181596][ C1] RSP: 0018:ffffc90000d83b40 EFLAGS: 00000282 [ 354.187685][ C1] RAX: ffff888105e93ac8 RBX: ffffc90000d83bd0 RCX: 0000000000000000 [ 354.195657][ C1] RDX: 0001888107994018 RSI: 00000000ce719fd5 RDI: ffff888107994018 [ 354.203636][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0001c90000d83bf7 [ 354.211607][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: ffff888107994000 [ 354.219573][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888107abd610 [ 354.227542][ C1] tomoyo_check_acl+0x6a/0x220 [ 354.232317][ C1] ? tomoyo_execute_permission+0x190/0x190 [ 354.238123][ C1] tomoyo_path_perm+0x22f/0x330 [ 354.242996][ C1] tomoyo_inode_getattr+0x18/0x20 [ 354.248020][ C1] security_inode_getattr+0x7f/0xd0 [ 354.253236][ C1] vfs_statx+0xf8/0x290 [ 354.257402][ C1] __se_sys_newlstat+0x46/0x250 [ 354.262279][ C1] ? __secure_computing+0x12e/0x1c0 [ 354.267494][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 354.272777][ C1] __x64_sys_newlstat+0x2d/0x40 [ 354.277720][ C1] do_syscall_64+0x39/0x80 [ 354.282136][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 354.288049][ C1] RIP: 0033:0x7fe430595335 [ 354.292472][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 354.312363][ C1] RSP: 002b:00007ffff4256ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 354.320802][ C1] RAX: ffffffffffffffda RBX: 000055c33a29d9b0 RCX: 00007fe430595335 [ 354.328802][ C1] RDX: 00007ffff4256b10 RSI: 00007ffff4256b10 RDI: 000055c33a29c9b0 [ 354.336804][ C1] RBP: 00007ffff4256bd0 R08: 00007fe4308541b8 R09: 0000000000001010 19:39:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc0045878, &(0x7f0000000080)) 19:39:06 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 354.345215][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33a29c9b0 [ 354.353207][ C1] R13: 000055c33a29c9ca R14: 000055c33a29f175 R15: 000055c33a29f17a [ 354.361374][ C1] ---[ end trace 215dd0f65ef481b3 ]--- 19:39:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:06 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x515) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') [ 354.467314][ C1] ------------[ cut here ]------------ [ 354.472796][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 354.484268][ C1] Modules linked in: [ 354.488157][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 354.497972][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.508555][ C1] Workqueue: rcu_gp process_srcu 19:39:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 354.513509][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 354.519502][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 354.540596][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 354.547137][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001e RCX: ffff88801d33e000 [ 354.555561][ C1] RDX: 0000000080010001 RSI: 000000000000001e RDI: 0000000000000001 19:39:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 354.563723][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 354.571751][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 354.579734][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 354.587707][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 354.596639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.603239][ C1] CR2: 000055c33a2a0b50 CR3: 000000010df4d000 CR4: 00000000001506e0 [ 354.611307][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.619287][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.627255][ C1] Call Trace: [ 354.630537][ C1] [ 354.633362][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 354.639155][ C1] __run_hrtimer+0x163/0x460 [ 354.643743][ C1] hrtimer_interrupt+0x380/0xaf0 [ 354.648669][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 354.654651][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 354.660373][ C1] [ 354.663459][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 354.669506][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 354.674339][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 354.693938][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000282 [ 354.700002][ C1] RAX: 0000000063cfd801 RBX: 0000000000000001 RCX: 0000000000000001 [ 354.708055][ C1] RDX: 00000000000000a8 RSI: 0000000000000001 RDI: 0000000000002ced [ 354.716008][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000bf63cfd857 [ 354.723958][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffc9000abc5ba0 [ 354.731909][ C1] R13: 0000000000000000 R14: ffffc9000abc5b90 R15: 0000000000000001 [ 354.739888][ C1] try_check_zero+0x1e6/0x200 [ 354.744559][ C1] process_srcu+0x13d/0x760 [ 354.749053][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 354.754417][ C1] ? strscpy+0x12f/0x160 [ 354.758650][ C1] process_one_work+0x3e1/0x950 [ 354.763598][ C1] worker_thread+0x616/0xa70 [ 354.768164][ C1] ? finish_task_switch+0xc0/0x2a0 [ 354.773271][ C1] ? process_one_work+0x950/0x950 [ 354.778272][ C1] kthread+0x20b/0x230 [ 354.782327][ C1] ? process_one_work+0x950/0x950 [ 354.787329][ C1] ? kthread_blkcg+0x80/0x80 [ 354.791909][ C1] ret_from_fork+0x1f/0x30 [ 354.796339][ C1] ---[ end trace 215dd0f65ef481b4 ]--- [ 354.802163][ C1] ------------[ cut here ]------------ [ 354.807631][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 354.818400][ C1] Modules linked in: [ 354.822299][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 354.832185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.842232][ C1] Workqueue: rcu_gp process_srcu [ 354.847154][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 354.853131][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 354.872815][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 354.878955][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000014 RCX: ffff88801d33e000 [ 354.886932][ C1] RDX: 0000000080010001 RSI: 0000000000000014 RDI: 0000000000000001 [ 354.894906][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 354.903218][ C1] R10: 0001ffffffffffff R11: ffff88801d33e000 R12: ffff88813bd1da58 [ 354.912138][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 354.920110][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 354.929045][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.935625][ C1] CR2: 000055c33a2a0b50 CR3: 000000010df4d000 CR4: 00000000001506e0 [ 354.943574][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.951531][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.959478][ C1] Call Trace: [ 354.962731][ C1] [ 354.965551][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 354.971338][ C1] __run_hrtimer+0x163/0x460 [ 354.975918][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 354.981701][ C1] hrtimer_interrupt+0x380/0xaf0 [ 354.986629][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 354.992502][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 354.998118][ C1] [ 355.002155][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 355.008110][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 355.012943][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 355.033421][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000282 [ 355.039466][ C1] RAX: 0000000063cfd801 RBX: 0000000000000001 RCX: 0000000000000001 [ 355.047433][ C1] RDX: 00000000000000a8 RSI: 0000000000000001 RDI: 0000000000002ced [ 355.055407][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000bf63cfd857 [ 355.063374][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffc9000abc5ba0 [ 355.071331][ C1] R13: 0000000000000000 R14: ffffc9000abc5b90 R15: 0000000000000001 [ 355.079291][ C1] try_check_zero+0x1e6/0x200 [ 355.083970][ C1] process_srcu+0x13d/0x760 [ 355.088494][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 355.093851][ C1] ? strscpy+0x12f/0x160 [ 355.098092][ C1] process_one_work+0x3e1/0x950 [ 355.103178][ C1] worker_thread+0x616/0xa70 [ 355.107746][ C1] ? finish_task_switch+0xc0/0x2a0 [ 355.112839][ C1] ? process_one_work+0x950/0x950 [ 355.117836][ C1] kthread+0x20b/0x230 [ 355.121884][ C1] ? process_one_work+0x950/0x950 [ 355.126896][ C1] ? kthread_blkcg+0x80/0x80 [ 355.131486][ C1] ret_from_fork+0x1f/0x30 [ 355.135890][ C1] ---[ end trace 215dd0f65ef481b5 ]--- [ 355.141516][ C1] ------------[ cut here ]------------ [ 355.146955][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 355.157707][ C1] Modules linked in: [ 355.161591][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 355.171374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.181417][ C1] Workqueue: rcu_gp process_srcu [ 355.186352][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 355.192338][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 355.211923][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 355.218055][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801d33e000 [ 355.226093][ C1] RDX: 0000000080010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 355.234045][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 355.242009][ C1] R10: 0001ffffffffffff R11: ffff88801d33e000 R12: ffff88813bd1da58 [ 355.249975][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 355.260028][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 355.268951][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.275525][ C1] CR2: 000055c33a2a0b50 CR3: 000000010df4d000 CR4: 00000000001506e0 [ 355.283480][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.292075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.300028][ C1] Call Trace: [ 355.303310][ C1] [ 355.306161][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 355.311948][ C1] __run_hrtimer+0x163/0x460 [ 355.316547][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 355.322365][ C1] hrtimer_interrupt+0x380/0xaf0 [ 355.327283][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 355.333217][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 355.338839][ C1] [ 355.341767][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 355.347727][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 355.352568][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 355.372370][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000282 [ 355.378527][ C1] RAX: 0000000063cfd801 RBX: 0000000000000001 RCX: 0000000000000001 [ 355.386482][ C1] RDX: 00000000000000a8 RSI: 0000000000000001 RDI: 0000000000002ced [ 355.394432][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000bf63cfd857 [ 355.402386][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffc9000abc5ba0 [ 355.410338][ C1] R13: 0000000000000000 R14: ffffc9000abc5b90 R15: 0000000000000001 [ 355.418293][ C1] try_check_zero+0x1e6/0x200 [ 355.422962][ C1] process_srcu+0x13d/0x760 [ 355.427614][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 355.433052][ C1] ? strscpy+0x12f/0x160 [ 355.437288][ C1] process_one_work+0x3e1/0x950 [ 355.442132][ C1] worker_thread+0x616/0xa70 [ 355.446708][ C1] ? finish_task_switch+0xc0/0x2a0 [ 355.451798][ C1] ? process_one_work+0x950/0x950 [ 355.456807][ C1] kthread+0x20b/0x230 [ 355.460868][ C1] ? process_one_work+0x950/0x950 [ 355.465875][ C1] ? kthread_blkcg+0x80/0x80 19:39:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 355.470443][ C1] ret_from_fork+0x1f/0x30 [ 355.474840][ C1] ---[ end trace 215dd0f65ef481b6 ]--- [ 355.580609][ C1] ------------[ cut here ]------------ [ 355.586165][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 355.596652][ C1] Modules linked in: [ 355.600553][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 355.609921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.620458][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 355.627196][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 355.647508][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 355.653576][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff888100c2d000 [ 355.661620][ C1] RDX: 0000000080010001 RSI: 000000000000001a RDI: 0000000000000001 [ 355.671210][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 355.681250][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff88813bd1da58 [ 355.692284][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 355.704237][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 355.714204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.722010][ C1] CR2: 00007ffd1e10bff8 CR3: 0000000013f19000 CR4: 00000000001506e0 [ 355.732889][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.741025][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.749098][ C1] Call Trace: [ 355.752383][ C1] [ 355.755219][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 355.761372][ C1] __run_hrtimer+0x163/0x460 [ 355.765955][ C1] hrtimer_interrupt+0x380/0xaf0 [ 355.770877][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 355.776762][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 355.782408][ C1] [ 355.785338][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 355.791325][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 355.797038][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 355.818139][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 355.824817][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 355.833513][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.841989][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 355.849957][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 355.857929][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 355.866268][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 355.871210][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 355.876169][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 355.881203][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 355.886298][ C1] cpuidle_enter+0x3c/0x60 [ 355.890781][ C1] do_idle+0x193/0x230 [ 355.894891][ C1] cpu_startup_entry+0x15/0x20 [ 355.899636][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 355.905534][ C1] ---[ end trace 215dd0f65ef481b7 ]--- [ 355.911484][ C1] ------------[ cut here ]------------ [ 355.916959][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 355.928162][ C1] Modules linked in: [ 355.932033][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 355.941381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.951452][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 355.957455][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 355.977170][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 355.983230][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000014 RCX: ffff888100c2d000 [ 355.991193][ C1] RDX: 0000000080010001 RSI: 0000000000000014 RDI: 0000000000000001 [ 355.999157][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 356.007129][ C1] R10: 0001ffffffffffff R11: ffff888100c2d000 R12: ffff88813bd1da58 [ 356.015075][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 356.023042][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 356.031956][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.038532][ C1] CR2: 00007ffd1e10bff8 CR3: 0000000013f19000 CR4: 00000000001506e0 [ 356.046581][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.055590][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.063561][ C1] Call Trace: [ 356.066833][ C1] [ 356.069659][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 356.075507][ C1] __run_hrtimer+0x163/0x460 [ 356.080089][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 356.085895][ C1] hrtimer_interrupt+0x380/0xaf0 [ 356.090908][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 356.096935][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 356.103178][ C1] [ 356.106093][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 356.112087][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 356.117616][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 356.137347][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 356.143423][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 356.152156][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.160856][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 356.168830][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 356.176800][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 356.184778][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 356.189704][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 356.194724][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 356.199746][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 356.205836][ C1] cpuidle_enter+0x3c/0x60 [ 356.210259][ C1] do_idle+0x193/0x230 [ 356.214342][ C1] cpu_startup_entry+0x15/0x20 [ 356.219089][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 356.224979][ C1] ---[ end trace 215dd0f65ef481b8 ]--- [ 356.230783][ C1] ------------[ cut here ]------------ [ 356.236275][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 356.246809][ C1] Modules linked in: [ 356.250800][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 356.260157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.270345][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 356.276644][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 356.296811][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 356.303789][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 356.311764][ C1] RDX: 0000000080010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 356.320286][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 356.328253][ C1] R10: 0001ffffffffffff R11: 0000000000000368 R12: ffff88813bd1da58 [ 356.336834][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 356.344813][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 356.353728][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.360298][ C1] CR2: 00007ffd1e10bff8 CR3: 0000000013f19000 CR4: 00000000001506e0 [ 356.368256][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.376229][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.384182][ C1] Call Trace: [ 356.387440][ C1] [ 356.390280][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 356.396167][ C1] __run_hrtimer+0x163/0x460 [ 356.400748][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 356.406543][ C1] hrtimer_interrupt+0x380/0xaf0 [ 356.411477][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 356.417593][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 356.423228][ C1] [ 356.426144][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 356.432121][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 356.438026][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 356.457981][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 356.464042][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 356.472004][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.480938][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 356.488986][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 356.496941][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 356.504891][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 356.509836][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 356.515628][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 356.520551][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 356.525655][ C1] cpuidle_enter+0x3c/0x60 [ 356.530068][ C1] do_idle+0x193/0x230 [ 356.534137][ C1] cpu_startup_entry+0x15/0x20 [ 356.538883][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 356.545017][ C1] ---[ end trace 215dd0f65ef481b9 ]--- 19:39:08 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:08 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 356.650933][ C1] ------------[ cut here ]------------ [ 356.656433][ C1] WARNING: CPU: 1 PID: 26557 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 356.667328][ C1] Modules linked in: [ 356.671232][ C1] CPU: 1 PID: 26557 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 356.681385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.691460][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 356.697497][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 356.717206][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 356.723277][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff88810acad000 [ 356.731248][ C1] RDX: 0000000080010000 RSI: 0000000000000019 RDI: 0000000000000001 [ 356.739938][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 356.747910][ C1] R10: 0001ffffffffffff R11: 0000000000000202 R12: ffff88813bd1da58 [ 356.755887][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 356.763867][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 356.772898][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.779484][ C1] CR2: 0000000000970004 CR3: 000000010a718000 CR4: 00000000001506e0 [ 356.787830][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.796180][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.804243][ C1] Call Trace: [ 356.807693][ C1] [ 356.810528][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 356.816445][ C1] __run_hrtimer+0x163/0x460 [ 356.821037][ C1] hrtimer_interrupt+0x380/0xaf0 [ 356.825993][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 356.831972][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 356.837614][ C1] [ 356.840531][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 356.846526][ C1] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 356.853199][ C1] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 356.872802][ C1] RSP: 0018:ffffc9000ac1bbe0 EFLAGS: 00000246 [ 356.878873][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 001188801f399ec0 [ 356.886837][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.894828][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.902806][ C1] R10: ffffffff88f32000 R11: 0000000000000200 R12: 000000000000001a [ 356.910787][ C1] R13: ffff88810aa3d000 R14: ffff88801f399ec0 R15: 0000000000000008 [ 356.918766][ C1] tomoyo_check_path_number_acl+0x5c/0x160 [ 356.924589][ C1] tomoyo_check_acl+0xcc/0x220 [ 356.929369][ C1] ? tomoyo_path_number_perm+0x2d0/0x2d0 [ 356.934995][ C1] tomoyo_path_number_perm+0x1af/0x2d0 [ 356.940452][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 356.945472][ C1] tomoyo_file_ioctl+0x1c/0x20 [ 356.950268][ C1] security_file_ioctl+0x45/0x90 [ 356.955232][ C1] __se_sys_ioctl+0x48/0x140 [ 356.959816][ C1] __x64_sys_ioctl+0x3f/0x50 [ 356.964399][ C1] do_syscall_64+0x39/0x80 [ 356.968808][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.974711][ C1] RIP: 0033:0x466217 [ 356.978604][ C1] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 356.998214][ C1] RSP: 002b:00007f145af211e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.006626][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000466217 [ 357.014588][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000e8 [ 357.022816][ C1] RBP: 0000000000000000 R08: 00007f145af21700 R09: 00007f145af21700 [ 357.031483][ C1] R10: 00007f145af219d0 R11: 0000000000000246 R12: 00007ffc3992575e [ 357.039456][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 357.047434][ C1] ---[ end trace 215dd0f65ef481ba ]--- [ 357.053298][ C1] ------------[ cut here ]------------ [ 357.058746][ C1] WARNING: CPU: 1 PID: 26557 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 357.069602][ C1] Modules linked in: [ 357.073508][ C1] CPU: 1 PID: 26557 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 357.083654][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.093721][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 357.100243][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 357.119871][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 357.125964][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000018 RCX: ffff88810acad000 [ 357.134037][ C1] RDX: 0000000080010000 RSI: 0000000000000018 RDI: 0000000000000001 [ 357.142009][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 357.149976][ C1] R10: 0001ffffffffffff R11: ffff88810acad000 R12: ffff88813bd1da58 [ 357.157949][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 357.165924][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 357.174871][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.182069][ C1] CR2: 0000000000970004 CR3: 000000010a718000 CR4: 00000000001506e0 [ 357.190043][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.198013][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.206086][ C1] Call Trace: [ 357.209361][ C1] [ 357.212198][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 357.218009][ C1] __run_hrtimer+0x163/0x460 [ 357.222595][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 357.229361][ C1] hrtimer_interrupt+0x380/0xaf0 [ 357.234296][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 357.240191][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 357.245838][ C1] [ 357.248760][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 357.254733][ C1] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 357.260977][ C1] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 357.280597][ C1] RSP: 0018:ffffc9000ac1bbe0 EFLAGS: 00000246 [ 357.286748][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 001188801f399ec0 [ 357.294807][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.302795][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.310761][ C1] R10: ffffffff88f32000 R11: 0000000000000200 R12: 000000000000001a [ 357.318815][ C1] R13: ffff88810aa3d000 R14: ffff88801f399ec0 R15: 0000000000000008 [ 357.326789][ C1] tomoyo_check_path_number_acl+0x5c/0x160 [ 357.332620][ C1] tomoyo_check_acl+0xcc/0x220 [ 357.337386][ C1] ? tomoyo_path_number_perm+0x2d0/0x2d0 [ 357.343017][ C1] tomoyo_path_number_perm+0x1af/0x2d0 [ 357.348562][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 357.353582][ C1] tomoyo_file_ioctl+0x1c/0x20 [ 357.358350][ C1] security_file_ioctl+0x45/0x90 [ 357.363281][ C1] __se_sys_ioctl+0x48/0x140 [ 357.367875][ C1] __x64_sys_ioctl+0x3f/0x50 [ 357.372470][ C1] do_syscall_64+0x39/0x80 [ 357.376894][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 357.382905][ C1] RIP: 0033:0x466217 [ 357.386790][ C1] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 357.406400][ C1] RSP: 002b:00007f145af211e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.414828][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000466217 [ 357.422882][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000e8 [ 357.430853][ C1] RBP: 0000000000000000 R08: 00007f145af21700 R09: 00007f145af21700 [ 357.438832][ C1] R10: 00007f145af219d0 R11: 0000000000000246 R12: 00007ffc3992575e [ 357.446814][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 357.454803][ C1] ---[ end trace 215dd0f65ef481bb ]--- [ 357.460614][ C1] ------------[ cut here ]------------ [ 357.466056][ C1] WARNING: CPU: 1 PID: 26557 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 357.476927][ C1] Modules linked in: [ 357.480838][ C1] CPU: 1 PID: 26557 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 357.491032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.501077][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 357.507052][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 357.526667][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 357.532750][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff88810acad000 [ 357.540720][ C1] RDX: 0000000080010000 RSI: 0000000000000019 RDI: 0000000000000001 [ 357.548692][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 357.556662][ C1] R10: 0001ffffffffffff R11: ffff88810acad000 R12: ffff88813bd1da58 [ 357.564657][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 357.572638][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 357.581563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.588140][ C1] CR2: 0000000000970004 CR3: 000000010a718000 CR4: 00000000001506e0 [ 357.596119][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.604094][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.612068][ C1] Call Trace: [ 357.615353][ C1] [ 357.618211][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 357.624043][ C1] __run_hrtimer+0x163/0x460 [ 357.628646][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 357.634447][ C1] hrtimer_interrupt+0x380/0xaf0 [ 357.639383][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 357.645286][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 357.650928][ C1] [ 357.653865][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 357.659853][ C1] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 357.666007][ C1] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 357.685726][ C1] RSP: 0018:ffffc9000ac1bbe0 EFLAGS: 00000246 [ 357.691788][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 001188801f399ec0 [ 357.700014][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.708063][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.716041][ C1] R10: ffffffff88f32000 R11: 0000000000000200 R12: 000000000000001a [ 357.724006][ C1] R13: ffff88810aa3d000 R14: ffff88801f399ec0 R15: 0000000000000008 [ 357.731976][ C1] tomoyo_check_path_number_acl+0x5c/0x160 [ 357.738936][ C1] tomoyo_check_acl+0xcc/0x220 [ 357.743701][ C1] ? tomoyo_path_number_perm+0x2d0/0x2d0 [ 357.749332][ C1] tomoyo_path_number_perm+0x1af/0x2d0 [ 357.754802][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 357.759829][ C1] tomoyo_file_ioctl+0x1c/0x20 [ 357.764612][ C1] security_file_ioctl+0x45/0x90 [ 357.769562][ C1] __se_sys_ioctl+0x48/0x140 [ 357.774147][ C1] __x64_sys_ioctl+0x3f/0x50 [ 357.778818][ C1] do_syscall_64+0x39/0x80 [ 357.783322][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 357.789222][ C1] RIP: 0033:0x466217 [ 357.793114][ C1] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 357.812725][ C1] RSP: 002b:00007f145af211e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.821138][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000466217 [ 357.829113][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000e8 [ 357.837188][ C1] RBP: 0000000000000000 R08: 00007f145af21700 R09: 00007f145af21700 [ 357.845176][ C1] R10: 00007f145af219d0 R11: 0000000000000246 R12: 00007ffc3992575e [ 357.853145][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 357.861128][ C1] ---[ end trace 215dd0f65ef481bc ]--- [ 357.923871][T26563] loop1: detected capacity change from 0 to 8192 [ 357.967540][ C1] ------------[ cut here ]------------ [ 357.973021][ C1] WARNING: CPU: 1 PID: 26512 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 357.983877][ C1] Modules linked in: [ 357.987803][ C1] CPU: 1 PID: 26512 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 357.997868][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.007930][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 358.013944][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 358.033919][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 358.039992][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001e RCX: ffff8880200dd000 [ 358.047965][ C1] RDX: 0000000080010001 RSI: 000000000000001e RDI: 0000000000000001 [ 358.055963][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 358.063940][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 358.071920][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 358.079919][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 358.088847][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.095443][ C1] CR2: 000000000056c000 CR3: 000000010e521000 CR4: 00000000001526e0 [ 358.103423][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.111410][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.119396][ C1] Call Trace: [ 358.122673][ C1] [ 358.125512][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 358.131324][ C1] __run_hrtimer+0x163/0x460 [ 358.136005][ C1] hrtimer_interrupt+0x380/0xaf0 [ 358.141071][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 358.147003][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 358.152656][ C1] [ 358.155581][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 358.161581][ C1] RIP: 0010:__tsan_read4+0x153/0x180 [ 358.166886][ C1] Code: 0e 00 75 28 ff c9 89 48 04 eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d b0 a3 ab 7e 48 ff c9 <78> 19 48 83 78 20 00 75 01 c3 e9 ae 2e 00 00 be 04 00 00 00 31 d2 [ 358.186487][ C1] RSP: 0018:ffffc9000ab23ad8 EFLAGS: 00000207 [ 358.192635][ C1] RAX: ffff8880200ddac8 RBX: 0000000000000000 RCX: 0000000000000472 [ 358.200596][ C1] RDX: 000188810cfdc034 RSI: ffff88810cfdc000 RDI: ffff88810cfdc034 [ 358.208578][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 000188810cfdc037 [ 358.216564][ C1] R10: 0001ffffffffffff R11: ffff8880200dd000 R12: 0000000000000000 [ 358.224528][ C1] R13: ffffffff877af590 R14: ffff88810cfdc048 R15: ffff88810cfdc034 [ 358.232497][ C1] mutex_spin_on_owner+0xab/0x180 [ 358.237534][ C1] __mutex_lock+0x18c/0x670 [ 358.242045][ C1] ? __lookup_mnt+0xe9/0xf0 [ 358.246670][ C1] ? step_into+0x205/0xec0 [ 358.251094][ C1] __mutex_lock_slowpath+0xa/0x10 [ 358.256119][ C1] mutex_lock+0x23/0x30 [ 358.260269][ C1] ? kernfs_evict_inode+0x40/0x40 [ 358.265299][ C1] kernfs_iop_permission+0x4d/0x180 [ 358.270531][ C1] ? kernfs_evict_inode+0x40/0x40 [ 358.275562][ C1] inode_permission+0x1c2/0x350 [ 358.280415][ C1] link_path_walk+0x1c2/0x780 [ 358.285100][ C1] path_lookupat+0x7b/0x570 [ 358.289627][ C1] filename_lookup+0xf2/0x380 [ 358.294307][ C1] ? bpf_lsm_cred_prepare+0x5/0x10 [ 358.299428][ C1] user_path_at_empty+0x3b/0x50 [ 358.304277][ C1] do_faccessat+0x260/0x510 [ 358.308971][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 358.314355][ C1] __x64_sys_access+0x33/0x40 [ 358.319408][ C1] do_syscall_64+0x39/0x80 [ 358.323853][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 358.329780][ C1] RIP: 0033:0x7fe4305959c7 [ 358.334215][ C1] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 358.354290][ C1] RSP: 002b:00007ffff4252048 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 358.362712][ C1] RAX: ffffffffffffffda RBX: 000055c33a2980e0 RCX: 00007fe4305959c7 [ 358.370713][ C1] RDX: 00746e657665752f RSI: 0000000000000000 RDI: 00007ffff4252050 [ 358.378690][ C1] RBP: 00007ffff42520b0 R08: 000055c33978f670 R09: 0000000000001010 [ 358.386764][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33978f856 [ 358.394742][ C1] R13: 000055c33a29aa30 R14: 00007ffff4252050 R15: 000055c33a289908 [ 358.403327][ C1] ---[ end trace 215dd0f65ef481bd ]--- [ 358.409145][ C1] ------------[ cut here ]------------ [ 358.414679][ C1] WARNING: CPU: 1 PID: 26512 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 358.425636][ C1] Modules linked in: [ 358.429523][ C1] CPU: 1 PID: 26512 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 358.439611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.449668][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 358.455686][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 358.475397][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 358.481465][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff8880200dd000 [ 358.489432][ C1] RDX: 0000000080010001 RSI: 000000000000001b RDI: 0000000000000001 [ 358.497433][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 358.505490][ C1] R10: 0001ffffffffffff R11: ffff8880200dd000 R12: ffff88813bd1da58 [ 358.513460][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 358.522473][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 358.531404][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.537989][ C1] CR2: 000000000056c000 CR3: 000000010e521000 CR4: 00000000001526e0 [ 358.545971][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.553949][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.561940][ C1] Call Trace: [ 358.565220][ C1] [ 358.568072][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 358.573898][ C1] __run_hrtimer+0x163/0x460 [ 358.578489][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 358.584302][ C1] hrtimer_interrupt+0x380/0xaf0 [ 358.589366][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 358.595308][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 358.600947][ C1] [ 358.603898][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 358.609904][ C1] RIP: 0010:__tsan_read4+0x153/0x180 [ 358.615457][ C1] Code: 0e 00 75 28 ff c9 89 48 04 eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d b0 a3 ab 7e 48 ff c9 <78> 19 48 83 78 20 00 75 01 c3 e9 ae 2e 00 00 be 04 00 00 00 31 d2 [ 358.635168][ C1] RSP: 0018:ffffc9000ab23ad8 EFLAGS: 00000207 [ 358.641250][ C1] RAX: ffff8880200ddac8 RBX: 0000000000000000 RCX: 0000000000000472 [ 358.649245][ C1] RDX: 000188810cfdc034 RSI: ffff88810cfdc000 RDI: ffff88810cfdc034 [ 358.657844][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 000188810cfdc037 [ 358.665819][ C1] R10: 0001ffffffffffff R11: ffff8880200dd000 R12: 0000000000000000 [ 358.673789][ C1] R13: ffffffff877af590 R14: ffff88810cfdc048 R15: ffff88810cfdc034 [ 358.681765][ C1] mutex_spin_on_owner+0xab/0x180 [ 358.686809][ C1] __mutex_lock+0x18c/0x670 [ 358.691304][ C1] ? __lookup_mnt+0xe9/0xf0 [ 358.695800][ C1] ? step_into+0x205/0xec0 [ 358.700208][ C1] __mutex_lock_slowpath+0xa/0x10 [ 358.705235][ C1] mutex_lock+0x23/0x30 [ 358.709393][ C1] ? kernfs_evict_inode+0x40/0x40 [ 358.714434][ C1] kernfs_iop_permission+0x4d/0x180 [ 358.719750][ C1] ? kernfs_evict_inode+0x40/0x40 [ 358.724791][ C1] inode_permission+0x1c2/0x350 [ 358.729635][ C1] link_path_walk+0x1c2/0x780 [ 358.734310][ C1] path_lookupat+0x7b/0x570 [ 358.738803][ C1] filename_lookup+0xf2/0x380 [ 358.743475][ C1] ? bpf_lsm_cred_prepare+0x5/0x10 [ 358.748591][ C1] user_path_at_empty+0x3b/0x50 [ 358.753438][ C1] do_faccessat+0x260/0x510 [ 358.757941][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 358.763231][ C1] __x64_sys_access+0x33/0x40 [ 358.767937][ C1] do_syscall_64+0x39/0x80 [ 358.772397][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 358.778321][ C1] RIP: 0033:0x7fe4305959c7 [ 358.782737][ C1] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 358.802339][ C1] RSP: 002b:00007ffff4252048 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 358.810851][ C1] RAX: ffffffffffffffda RBX: 000055c33a2980e0 RCX: 00007fe4305959c7 [ 358.818845][ C1] RDX: 00746e657665752f RSI: 0000000000000000 RDI: 00007ffff4252050 [ 358.826828][ C1] RBP: 00007ffff42520b0 R08: 000055c33978f670 R09: 0000000000001010 [ 358.834804][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33978f856 [ 358.842770][ C1] R13: 000055c33a29aa30 R14: 00007ffff4252050 R15: 000055c33a289908 [ 358.850735][ C1] ---[ end trace 215dd0f65ef481be ]--- [ 358.856532][ C1] ------------[ cut here ]------------ [ 358.861980][ C1] WARNING: CPU: 1 PID: 26512 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 358.873003][ C1] Modules linked in: [ 358.876894][ C1] CPU: 1 PID: 26512 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 358.886965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.897030][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 358.903039][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 358.922838][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 358.929107][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff8880200dd000 [ 358.937095][ C1] RDX: 0000000080010001 RSI: 000000000000001b RDI: 0000000000000001 [ 358.945152][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 358.953120][ C1] R10: 0001ffffffffffff R11: ffff8880200dd000 R12: ffff88813bd1da58 [ 358.961115][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 358.969098][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 358.978118][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.984719][ C1] CR2: 000000000056c000 CR3: 000000010e521000 CR4: 00000000001526e0 [ 358.992692][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.000657][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.008622][ C1] Call Trace: [ 359.011889][ C1] [ 359.014756][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 359.020564][ C1] __run_hrtimer+0x163/0x460 [ 359.025153][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 359.030960][ C1] hrtimer_interrupt+0x380/0xaf0 [ 359.035913][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 359.041820][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 359.047635][ C1] [ 359.051002][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 359.056997][ C1] RIP: 0010:__tsan_read4+0x153/0x180 [ 359.062372][ C1] Code: 0e 00 75 28 ff c9 89 48 04 eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d b0 a3 ab 7e 48 ff c9 <78> 19 48 83 78 20 00 75 01 c3 e9 ae 2e 00 00 be 04 00 00 00 31 d2 [ 359.081977][ C1] RSP: 0018:ffffc9000ab23ad8 EFLAGS: 00000207 [ 359.088056][ C1] RAX: ffff8880200ddac8 RBX: 0000000000000000 RCX: 0000000000000472 [ 359.096022][ C1] RDX: 000188810cfdc034 RSI: ffff88810cfdc000 RDI: ffff88810cfdc034 [ 359.104023][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 000188810cfdc037 [ 359.111987][ C1] R10: 0001ffffffffffff R11: ffff8880200dd000 R12: 0000000000000000 [ 359.120396][ C1] R13: ffffffff877af590 R14: ffff88810cfdc048 R15: ffff88810cfdc034 [ 359.128384][ C1] mutex_spin_on_owner+0xab/0x180 [ 359.133426][ C1] __mutex_lock+0x18c/0x670 [ 359.137935][ C1] ? __lookup_mnt+0xe9/0xf0 [ 359.142436][ C1] ? step_into+0x205/0xec0 [ 359.146891][ C1] __mutex_lock_slowpath+0xa/0x10 [ 359.151921][ C1] mutex_lock+0x23/0x30 [ 359.156075][ C1] ? kernfs_evict_inode+0x40/0x40 [ 359.161107][ C1] kernfs_iop_permission+0x4d/0x180 [ 359.166318][ C1] ? kernfs_evict_inode+0x40/0x40 [ 359.171351][ C1] inode_permission+0x1c2/0x350 [ 359.176209][ C1] link_path_walk+0x1c2/0x780 [ 359.180894][ C1] path_lookupat+0x7b/0x570 [ 359.185525][ C1] filename_lookup+0xf2/0x380 [ 359.190212][ C1] ? bpf_lsm_cred_prepare+0x5/0x10 [ 359.195364][ C1] user_path_at_empty+0x3b/0x50 [ 359.200226][ C1] do_faccessat+0x260/0x510 [ 359.204725][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 359.210025][ C1] __x64_sys_access+0x33/0x40 [ 359.214707][ C1] do_syscall_64+0x39/0x80 [ 359.219121][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 359.225010][ C1] RIP: 0033:0x7fe4305959c7 [ 359.229421][ C1] Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48 [ 359.249547][ C1] RSP: 002b:00007ffff4252048 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 359.257977][ C1] RAX: ffffffffffffffda RBX: 000055c33a2980e0 RCX: 00007fe4305959c7 [ 359.265945][ C1] RDX: 00746e657665752f RSI: 0000000000000000 RDI: 00007ffff4252050 19:39:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc0045878, &(0x7f0000000080)) 19:39:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x6, r0, &(0x7f0000000080)=0x8, 0x5, 0x1) unshare(0x44000000) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0xbe7fb000) 19:39:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) [ 359.273928][ C1] RBP: 00007ffff42520b0 R08: 000055c33978f670 R09: 0000000000001010 [ 359.281999][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33978f856 [ 359.289983][ C1] R13: 000055c33a29aa30 R14: 00007ffff4252050 R15: 000055c33a289908 [ 359.297997][ C1] ---[ end trace 215dd0f65ef481bf ]--- [ 359.404177][ C1] ------------[ cut here ]------------ [ 359.409884][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 359.421873][ C1] Modules linked in: [ 359.425779][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 359.435577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.444617][T26583] IPVS: ftp: loaded support on port[0] = 21 19:39:11 executing program 3: r0 = socket(0x0, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 359.446624][ C1] Workqueue: rcu_gp process_srcu [ 359.446649][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 359.463537][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 359.483152][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 359.489220][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000020 RCX: ffff88801d33e000 [ 359.497190][ C1] RDX: 0000000080010001 RSI: 0000000000000020 RDI: 0000000000000001 [ 359.505179][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 359.513154][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 359.521146][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 359.526208][T26590] IPVS: ftp: loaded support on port[0] = 21 [ 359.529135][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 359.529155][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 19:39:11 executing program 3: r0 = socket(0x0, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 359.550536][ C1] CR2: 000000000056c000 CR3: 000000010df60000 CR4: 00000000001526e0 [ 359.558508][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.566592][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.574565][ C1] Call Trace: [ 359.577839][ C1] [ 359.580676][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 359.586499][ C1] __run_hrtimer+0x163/0x460 [ 359.591149][ C1] hrtimer_interrupt+0x380/0xaf0 [ 359.596093][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 19:39:11 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x56, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4015, r0, 0x1) [ 359.602005][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 359.607666][ C1] [ 359.610592][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 359.616579][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 359.621472][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 359.641087][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000282 [ 359.647158][ C1] RAX: 0000000008996d01 RBX: 0000000000000001 RCX: 0000000000000001 [ 359.655212][ C1] RDX: 0000000000002c75 RSI: 0000000000000001 RDI: 0000000000002ced [ 359.664849][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000c208994146 [ 359.672818][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffffff8779a828 [ 359.680781][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 359.688757][ C1] try_check_zero+0x1e6/0x200 [ 359.693436][ C1] process_srcu+0x13d/0x760 [ 359.697956][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 359.703321][ C1] ? strscpy+0x12f/0x160 [ 359.707555][ C1] process_one_work+0x3e1/0x950 [ 359.712404][ C1] worker_thread+0x616/0xa70 [ 359.717040][ C1] ? finish_task_switch+0xc0/0x2a0 [ 359.722164][ C1] ? process_one_work+0x950/0x950 [ 359.727265][ C1] kthread+0x20b/0x230 [ 359.731341][ C1] ? process_one_work+0x950/0x950 [ 359.736358][ C1] ? kthread_blkcg+0x80/0x80 [ 359.740945][ C1] ret_from_fork+0x1f/0x30 [ 359.745357][ C1] ---[ end trace 215dd0f65ef481c0 ]--- [ 359.751163][ C1] ------------[ cut here ]------------ [ 359.756613][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 359.767400][ C1] Modules linked in: [ 359.771312][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 359.781211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.791278][ C1] Workqueue: rcu_gp process_srcu [ 359.796225][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 359.802219][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 359.821823][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 359.827887][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801d33e000 [ 359.835890][ C1] RDX: 0000000080010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 359.843856][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 359.851820][ C1] R10: 0001ffffffffffff R11: ffff88801d33e000 R12: ffff88813bd1da58 [ 359.859795][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 359.867775][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 359.876724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.883307][ C1] CR2: 000000000056c000 CR3: 000000010df60000 CR4: 00000000001526e0 [ 359.891287][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.899262][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.907252][ C1] Call Trace: [ 359.910521][ C1] [ 359.913360][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 359.919273][ C1] __run_hrtimer+0x163/0x460 [ 359.923876][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 359.929685][ C1] hrtimer_interrupt+0x380/0xaf0 [ 359.934630][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 359.940525][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 359.946169][ C1] [ 359.949092][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 359.955083][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 359.959931][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 359.979536][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000282 [ 359.985615][ C1] RAX: 0000000008996d01 RBX: 0000000000000001 RCX: 0000000000000001 [ 359.993689][ C1] RDX: 0000000000002c75 RSI: 0000000000000001 RDI: 0000000000002ced [ 360.001652][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000c208994146 [ 360.009621][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffffff8779a828 [ 360.017694][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 360.025671][ C1] try_check_zero+0x1e6/0x200 [ 360.030351][ C1] process_srcu+0x13d/0x760 [ 360.034850][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 360.040218][ C1] ? strscpy+0x12f/0x160 [ 360.044476][ C1] process_one_work+0x3e1/0x950 [ 360.049331][ C1] worker_thread+0x616/0xa70 [ 360.053911][ C1] ? finish_task_switch+0xc0/0x2a0 [ 360.059040][ C1] ? process_one_work+0x950/0x950 [ 360.064077][ C1] kthread+0x20b/0x230 [ 360.068253][ C1] ? process_one_work+0x950/0x950 [ 360.073273][ C1] ? kthread_blkcg+0x80/0x80 [ 360.077865][ C1] ret_from_fork+0x1f/0x30 [ 360.082296][ C1] ---[ end trace 215dd0f65ef481c1 ]--- [ 360.088108][ C1] ------------[ cut here ]------------ [ 360.093564][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 360.104340][ C1] Modules linked in: [ 360.108225][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 360.118022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.128073][ C1] Workqueue: rcu_gp process_srcu [ 360.133023][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 360.139022][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 360.158625][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 360.164708][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801d33e000 [ 360.172674][ C1] RDX: 0000000080010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 360.181614][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 360.189586][ C1] R10: 0001ffffffffffff R11: ffff88801d33e000 R12: ffff88813bd1da58 [ 360.197564][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 360.205556][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 360.214492][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.221082][ C1] CR2: 000000000056c000 CR3: 000000010df60000 CR4: 00000000001526e0 [ 360.229135][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.237108][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.245084][ C1] Call Trace: [ 360.248364][ C1] [ 360.251201][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 360.257008][ C1] __run_hrtimer+0x163/0x460 [ 360.261603][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 360.267414][ C1] hrtimer_interrupt+0x380/0xaf0 [ 360.272373][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 360.278479][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 360.284118][ C1] [ 360.287168][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 360.293151][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 360.297998][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 360.318134][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000282 [ 360.324321][ C1] RAX: 0000000008996d01 RBX: 0000000000000001 RCX: 0000000000000001 [ 360.332406][ C1] RDX: 0000000000002c75 RSI: 0000000000000001 RDI: 0000000000002ced [ 360.340370][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000c208994146 [ 360.348866][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffffff8779a828 [ 360.356849][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 360.364821][ C1] try_check_zero+0x1e6/0x200 [ 360.369619][ C1] process_srcu+0x13d/0x760 [ 360.374116][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 360.379480][ C1] ? strscpy+0x12f/0x160 [ 360.383716][ C1] process_one_work+0x3e1/0x950 [ 360.388578][ C1] worker_thread+0x616/0xa70 [ 360.393771][ C1] ? finish_task_switch+0xc0/0x2a0 [ 360.398963][ C1] ? process_one_work+0x950/0x950 [ 360.403978][ C1] kthread+0x20b/0x230 [ 360.408049][ C1] ? process_one_work+0x950/0x950 [ 360.413181][ C1] ? kthread_blkcg+0x80/0x80 [ 360.417785][ C1] ret_from_fork+0x1f/0x30 [ 360.422205][ C1] ---[ end trace 215dd0f65ef481c2 ]--- [ 360.458145][T26563] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 360.482428][T26563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 360.528118][ C1] ------------[ cut here ]------------ [ 360.533592][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 360.534290][T26563] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.544356][ C1] Modules linked in: [ 360.544366][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 360.544391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.544402][ C1] Workqueue: rcu_gp process_srcu [ 360.544421][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 360.544444][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 360.544460][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 360.544474][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff88801d33e000 [ 360.544496][ C1] RDX: 0000000080010001 RSI: 000000000000001a RDI: 0000000000000001 [ 360.544507][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 360.544520][ C1] R10: 0001ffffffffffff R11: 000000000000000c R12: ffff88813bd1da58 [ 360.596909][T26563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 360.607203][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 360.607222][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 360.607236][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.607249][ C1] CR2: 000000000056c000 CR3: 000000010df60000 CR4: 00000000001526e0 [ 360.684896][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.692875][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.700855][ C1] Call Trace: [ 360.704127][ C1] [ 360.706962][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 360.712768][ C1] __run_hrtimer+0x163/0x460 [ 360.717470][ C1] hrtimer_interrupt+0x380/0xaf0 [ 360.722468][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 360.728375][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 360.734037][ C1] [ 360.736980][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 360.742963][ C1] RIP: 0010:delay_tsc+0x62/0xa0 [ 360.747807][ C1] Code: 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 65 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 4c 29 ca 65 ff 0d 63 83 58 7d 0f 95 c0 [ 360.768017][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000246 [ 360.774435][ C1] RAX: 00000000a2ad974a RBX: 0000000000000001 RCX: 0000000000000001 [ 360.782401][ C1] RDX: 00000000000000c2 RSI: 0000000000000001 RDI: 0000000000002ced [ 360.790800][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000c2a2ad9553 [ 360.798866][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8779a828 [ 360.806848][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 360.814921][ C1] try_check_zero+0x1e6/0x200 [ 360.819618][ C1] process_srcu+0x13d/0x760 [ 360.824113][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 360.829666][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 360.835119][ C1] ? strscpy+0x12f/0x160 [ 360.839372][ C1] process_one_work+0x3e1/0x950 [ 360.844235][ C1] worker_thread+0x616/0xa70 [ 360.848918][ C1] ? finish_task_switch+0xc0/0x2a0 [ 360.854233][ C1] ? process_one_work+0x950/0x950 [ 360.859253][ C1] kthread+0x20b/0x230 [ 360.863497][ C1] ? process_one_work+0x950/0x950 [ 360.868552][ C1] ? kthread_blkcg+0x80/0x80 [ 360.873867][ C1] ret_from_fork+0x1f/0x30 [ 360.878288][ C1] ---[ end trace 215dd0f65ef481c3 ]--- [ 360.884548][ C1] ------------[ cut here ]------------ [ 360.890598][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 360.901381][ C1] Modules linked in: [ 360.905280][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 360.915088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.925146][ C1] Workqueue: rcu_gp process_srcu [ 360.930083][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 360.936074][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 360.955766][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 360.962132][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801d33e000 [ 360.970185][ C1] RDX: 0000000080010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 360.978165][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 360.986140][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 360.994113][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 361.003591][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 361.012603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.019199][ C1] CR2: 000000000056c000 CR3: 000000010df60000 CR4: 00000000001526e0 [ 361.027181][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.035706][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.043695][ C1] Call Trace: [ 361.047056][ C1] [ 361.049925][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 361.055748][ C1] __run_hrtimer+0x163/0x460 [ 361.060338][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 361.066691][ C1] hrtimer_interrupt+0x380/0xaf0 [ 361.071644][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 361.077657][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 361.083656][ C1] [ 361.086589][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 361.092585][ C1] RIP: 0010:delay_tsc+0x62/0xa0 [ 361.097438][ C1] Code: 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 65 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 4c 29 ca 65 ff 0d 63 83 58 7d 0f 95 c0 [ 361.117048][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000246 [ 361.123377][ C1] RAX: 00000000a2ad974a RBX: 0000000000000001 RCX: 0000000000000001 [ 361.131371][ C1] RDX: 00000000000000c2 RSI: 0000000000000001 RDI: 0000000000002ced [ 361.139337][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000c2a2ad9553 [ 361.147324][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8779a828 [ 361.155309][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 361.163279][ C1] try_check_zero+0x1e6/0x200 [ 361.167969][ C1] process_srcu+0x13d/0x760 [ 361.176132][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 361.181680][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 361.187049][ C1] ? strscpy+0x12f/0x160 [ 361.191302][ C1] process_one_work+0x3e1/0x950 [ 361.196162][ C1] worker_thread+0x616/0xa70 [ 361.200745][ C1] ? finish_task_switch+0xc0/0x2a0 [ 361.205868][ C1] ? process_one_work+0x950/0x950 [ 361.211239][ C1] kthread+0x20b/0x230 [ 361.215305][ C1] ? process_one_work+0x950/0x950 [ 361.220340][ C1] ? kthread_blkcg+0x80/0x80 [ 361.225201][ C1] ret_from_fork+0x1f/0x30 [ 361.229622][ C1] ---[ end trace 215dd0f65ef481c4 ]--- [ 361.235497][ C1] ------------[ cut here ]------------ [ 361.240956][ C1] WARNING: CPU: 1 PID: 9636 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 361.251748][ C1] Modules linked in: [ 361.255634][ C1] CPU: 1 PID: 9636 Comm: kworker/1:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 361.265797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.275869][ C1] Workqueue: rcu_gp process_srcu [ 361.280832][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 361.286829][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 361.306544][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 361.312613][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801d33e000 [ 361.320597][ C1] RDX: 0000000000010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 361.328580][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 361.337070][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 361.345043][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 361.353012][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 361.361986][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.368566][ C1] CR2: 000000000056c000 CR3: 000000010df60000 CR4: 00000000001526e0 [ 361.376725][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.384787][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.392762][ C1] Call Trace: [ 361.396030][ C1] [ 361.398870][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 361.404785][ C1] __run_hrtimer+0x163/0x460 [ 361.409369][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 361.415611][ C1] hrtimer_interrupt+0x380/0xaf0 [ 361.420551][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 361.426446][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 361.432095][ C1] [ 361.435013][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 361.441000][ C1] RIP: 0010:delay_tsc+0x62/0xa0 [ 361.445862][ C1] Code: 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 65 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 4c 29 ca 65 ff 0d 63 83 58 7d 0f 95 c0 [ 361.465471][ C1] RSP: 0018:ffffc900060ffcb8 EFLAGS: 00000246 [ 361.471533][ C1] RAX: 00000000a2ad974a RBX: 0000000000000001 RCX: 0000000000000001 [ 361.479521][ C1] RDX: 00000000000000c2 RSI: 0000000000000001 RDI: 0000000000002ced [ 361.487483][ C1] RBP: ffffc900060ffd10 R08: 0000000000000001 R09: 000000c2a2ad9553 [ 361.495468][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8779a828 [ 361.503437][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 361.511408][ C1] try_check_zero+0x1e6/0x200 [ 361.516083][ C1] process_srcu+0x13d/0x760 [ 361.520587][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 361.526477][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 361.531842][ C1] ? strscpy+0x12f/0x160 [ 361.536164][ C1] process_one_work+0x3e1/0x950 [ 361.541008][ C1] worker_thread+0x616/0xa70 [ 361.545614][ C1] ? finish_task_switch+0xc0/0x2a0 [ 361.550738][ C1] ? process_one_work+0x950/0x950 [ 361.555841][ C1] kthread+0x20b/0x230 [ 361.559931][ C1] ? process_one_work+0x950/0x950 [ 361.564958][ C1] ? kthread_blkcg+0x80/0x80 [ 361.569555][ C1] ret_from_fork+0x1f/0x30 [ 361.573966][ C1] ---[ end trace 215dd0f65ef481c5 ]--- [ 361.679787][ C1] ------------[ cut here ]------------ [ 361.685280][ C1] WARNING: CPU: 1 PID: 8882 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 361.696069][ C1] Modules linked in: [ 361.699958][ C1] CPU: 1 PID: 8882 Comm: kworker/1:3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 361.709756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.719834][ C1] Workqueue: rcu_gp process_srcu [ 361.724799][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 361.730799][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 361.750428][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 361.756678][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff88801df09000 [ 361.764654][ C1] RDX: 0000000080010001 RSI: 000000000000001b RDI: 0000000000000001 [ 361.772628][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 361.780597][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 361.788837][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 361.796889][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 361.805992][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.812689][ C1] CR2: 000000000056c000 CR3: 000000010a7c9000 CR4: 00000000001526e0 [ 361.820654][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.828632][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.836595][ C1] Call Trace: [ 361.839864][ C1] [ 361.842699][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 361.849378][ C1] __run_hrtimer+0x163/0x460 [ 361.854008][ C1] hrtimer_interrupt+0x380/0xaf0 [ 361.858955][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 361.864887][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 361.870526][ C1] [ 361.873467][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 361.879448][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 361.884307][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 361.905408][ C1] RSP: 0018:ffffc90001517cb8 EFLAGS: 00000282 [ 361.911485][ C1] RAX: 0000000040929701 RBX: 0000000000000001 RCX: 0000000000000001 [ 361.919547][ C1] RDX: 0000000000001db7 RSI: 0000000000000001 RDI: 0000000000002ced [ 361.927525][ C1] RBP: ffffc90001517d10 R08: 0000000000000001 R09: 000000c340927a08 [ 361.935586][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8779a828 [ 361.943559][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 361.951546][ C1] try_check_zero+0x1e6/0x200 [ 361.956227][ C1] process_srcu+0x13d/0x760 [ 361.960738][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 361.966118][ C1] ? strscpy+0x12f/0x160 [ 361.970355][ C1] process_one_work+0x3e1/0x950 [ 361.975198][ C1] worker_thread+0x616/0xa70 [ 361.979802][ C1] ? finish_task_switch+0xc0/0x2a0 [ 361.984910][ C1] ? process_one_work+0x950/0x950 [ 361.989940][ C1] kthread+0x20b/0x230 [ 361.994096][ C1] ? process_one_work+0x950/0x950 [ 361.999229][ C1] ? kthread_blkcg+0x80/0x80 [ 362.003823][ C1] ret_from_fork+0x1f/0x30 [ 362.008334][ C1] ---[ end trace 215dd0f65ef481c6 ]--- [ 362.018010][ C1] ------------[ cut here ]------------ [ 362.023564][ C1] WARNING: CPU: 1 PID: 8882 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 362.034662][ C1] Modules linked in: [ 362.038550][ C1] CPU: 1 PID: 8882 Comm: kworker/1:3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 362.048444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.058600][ C1] Workqueue: rcu_gp process_srcu [ 362.063547][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 362.069532][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 362.090287][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 362.096363][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000014 RCX: ffff88801df09000 [ 362.104451][ C1] RDX: 0000000080010001 RSI: 0000000000000014 RDI: 0000000000000001 [ 362.112436][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 362.120413][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 362.128386][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 362.136551][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 362.145479][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.152057][ C1] CR2: 000000000056c000 CR3: 000000010a7c9000 CR4: 00000000001526e0 [ 362.160038][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.168008][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.176061][ C1] Call Trace: [ 362.179334][ C1] [ 362.182172][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 362.187975][ C1] __run_hrtimer+0x163/0x460 [ 362.192563][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 362.198388][ C1] hrtimer_interrupt+0x380/0xaf0 [ 362.203321][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 362.209223][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 362.214954][ C1] [ 362.217980][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 362.223965][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 362.228809][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 362.248417][ C1] RSP: 0018:ffffc90001517cb8 EFLAGS: 00000282 [ 362.254485][ C1] RAX: 0000000040929701 RBX: 0000000000000001 RCX: 0000000000000001 [ 362.262457][ C1] RDX: 0000000000001db7 RSI: 0000000000000001 RDI: 0000000000002ced [ 362.270424][ C1] RBP: ffffc90001517d10 R08: 0000000000000001 R09: 000000c340927a08 [ 362.278419][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8779a828 [ 362.286490][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 362.294494][ C1] try_check_zero+0x1e6/0x200 [ 362.299266][ C1] process_srcu+0x13d/0x760 [ 362.303902][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 362.309280][ C1] ? strscpy+0x12f/0x160 [ 362.313632][ C1] process_one_work+0x3e1/0x950 [ 362.318828][ C1] worker_thread+0x616/0xa70 [ 362.323425][ C1] ? finish_task_switch+0xc0/0x2a0 [ 362.328534][ C1] ? process_one_work+0x950/0x950 [ 362.333551][ C1] kthread+0x20b/0x230 [ 362.337613][ C1] ? process_one_work+0x950/0x950 [ 362.342636][ C1] ? kthread_blkcg+0x80/0x80 [ 362.347230][ C1] ret_from_fork+0x1f/0x30 [ 362.351648][ C1] ---[ end trace 215dd0f65ef481c7 ]--- [ 362.357406][ C1] ------------[ cut here ]------------ [ 362.362850][ C1] WARNING: CPU: 1 PID: 8882 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 362.373632][ C1] Modules linked in: [ 362.377524][ C1] CPU: 1 PID: 8882 Comm: kworker/1:3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 362.387410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.397575][ C1] Workqueue: rcu_gp process_srcu [ 362.402550][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 362.408531][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 362.428150][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 362.434211][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801df09000 [ 362.442184][ C1] RDX: 0000000080010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 362.450149][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 362.458119][ C1] R10: 0001ffffffffffff R11: ffff88801df09000 R12: ffff88813bd1da58 [ 362.466254][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 362.474227][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 362.483152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.489813][ C1] CR2: 000000000056c000 CR3: 000000010a7c9000 CR4: 00000000001526e0 [ 362.497781][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.505758][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.513725][ C1] Call Trace: [ 362.517008][ C1] [ 362.519858][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 362.525670][ C1] __run_hrtimer+0x163/0x460 [ 362.530258][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 362.536093][ C1] hrtimer_interrupt+0x380/0xaf0 [ 362.541025][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 362.546924][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 362.552562][ C1] [ 362.555481][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 362.561460][ C1] RIP: 0010:delay_tsc+0x53/0xa0 [ 362.566307][ C1] Code: 09 c2 4c 29 ca 65 ff 0d a3 83 58 7d 0f 95 c0 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 <65> 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 66 90 48 c1 e2 20 48 [ 362.585928][ C1] RSP: 0018:ffffc90001517cb8 EFLAGS: 00000282 [ 362.592002][ C1] RAX: 0000000040929701 RBX: 0000000000000001 RCX: 0000000000000001 [ 362.599984][ C1] RDX: 0000000000001db7 RSI: 0000000000000001 RDI: 0000000000002ced [ 362.607955][ C1] RBP: ffffc90001517d10 R08: 0000000000000001 R09: 000000c340927a08 [ 362.615923][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8779a828 [ 362.624413][ C1] R13: 0000000000000001 R14: ffffffff8779a818 R15: 0000000000000321 [ 362.632418][ C1] try_check_zero+0x1e6/0x200 [ 362.637181][ C1] process_srcu+0x13d/0x760 [ 362.641689][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 362.647066][ C1] ? strscpy+0x12f/0x160 [ 362.651313][ C1] process_one_work+0x3e1/0x950 [ 362.656265][ C1] worker_thread+0x616/0xa70 [ 362.660851][ C1] ? finish_task_switch+0xc0/0x2a0 [ 362.665956][ C1] ? process_one_work+0x950/0x950 [ 362.670990][ C1] kthread+0x20b/0x230 [ 362.675056][ C1] ? process_one_work+0x950/0x950 [ 362.680070][ C1] ? kthread_blkcg+0x80/0x80 [ 362.684659][ C1] ret_from_fork+0x1f/0x30 [ 362.689082][ C1] ---[ end trace 215dd0f65ef481c8 ]--- 19:39:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.794896][ C1] ------------[ cut here ]------------ [ 362.800376][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 362.811262][ C1] Modules linked in: [ 362.815182][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 362.825164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.835234][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 362.841242][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 362.860852][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 362.866936][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff888105e93000 [ 362.874899][ C1] RDX: 0000000080010000 RSI: 000000000000001a RDI: 0000000000000001 [ 362.882872][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 362.890836][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 362.898825][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 362.906887][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 362.915839][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.922436][ C1] CR2: 000000000056c000 CR3: 0000000107abb000 CR4: 00000000001506e0 [ 362.930406][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.938380][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.946350][ C1] Call Trace: [ 362.949624][ C1] [ 362.952479][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 362.958285][ C1] __run_hrtimer+0x163/0x460 [ 362.962874][ C1] hrtimer_interrupt+0x380/0xaf0 [ 362.967906][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 362.973806][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 362.979481][ C1] [ 362.982403][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 362.988389][ C1] RIP: 0010:__tsan_read1+0x18/0x180 [ 362.993598][ C1] Code: 31 c0 e8 7b 9b d6 ff 0f 0b 5b 41 5e 41 5f c3 0f 1f 00 48 b9 ff ff ff ff ff ff 01 00 89 f8 c1 e8 0c 83 e0 3f 48 89 fa 48 21 ca <4c> 8b 04 c5 30 1f f3 88 49 83 f8 02 72 05 4d 85 c0 78 5b 4c 8b 04 [ 363.013198][ C1] RSP: 0018:ffffc90000d83b58 EFLAGS: 00000202 [ 363.019265][ C1] RAX: 0000000000000002 RBX: ffff888106342f58 RCX: 0001ffffffffffff [ 363.027253][ C1] RDX: 0001888106342f67 RSI: ffff888106342f58 RDI: ffff888106342f67 [ 363.035240][ C1] RBP: 0000000000000020 R08: 0000000000000000 R09: 0001888106342f65 [ 363.043209][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: 0000000000000005 [ 363.051186][ C1] R13: ffffc90000d83c48 R14: ffff888021bc8f80 R15: ffff888106342f68 [ 363.059166][ C1] tomoyo_path_matches_pattern+0x43/0x120 [ 363.064900][ C1] tomoyo_check_path_acl+0x9b/0xe0 [ 363.070014][ C1] tomoyo_check_acl+0xcc/0x220 [ 363.074786][ C1] ? tomoyo_execute_permission+0x190/0x190 [ 363.080618][ C1] tomoyo_path_perm+0x22f/0x330 [ 363.085498][ C1] tomoyo_inode_getattr+0x18/0x20 [ 363.090549][ C1] security_inode_getattr+0x7f/0xd0 [ 363.095794][ C1] __se_sys_newfstat+0x58/0x2c0 [ 363.100661][ C1] ? putname+0xa5/0xc0 [ 363.104736][ C1] ? kmem_cache_free+0x59/0x100 [ 363.109580][ C1] ? __secure_computing+0x12e/0x1c0 [ 363.114774][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 363.120063][ C1] __x64_sys_newfstat+0x2d/0x40 [ 363.124909][ C1] do_syscall_64+0x39/0x80 [ 363.129329][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 363.135234][ C1] RIP: 0033:0x7fe4305952e2 [ 363.139666][ C1] Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7 [ 363.159352][ C1] RSP: 002b:00007ffff4256bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 363.167770][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fe4305952e2 [ 363.175734][ C1] RDX: 00007ffff4256be0 RSI: 00007ffff4256be0 RDI: 000000000000000e [ 363.183701][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000110 [ 363.191664][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff4256e80 [ 363.199628][ C1] R13: 000055c33a27d120 R14: 0000000000000100 R15: 00007ffff4256d50 [ 363.207596][ C1] ---[ end trace 215dd0f65ef481c9 ]--- [ 363.213429][ C1] ------------[ cut here ]------------ [ 363.218905][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 363.230122][ C1] Modules linked in: [ 363.234164][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 363.244135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.254176][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 363.260164][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 363.279849][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 363.285897][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff888105e93000 [ 363.294645][ C1] RDX: 0000000080010000 RSI: 0000000000000019 RDI: 0000000000000001 [ 363.302605][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 363.310562][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: ffff88813bd1da58 [ 363.318522][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 363.326491][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 363.335396][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.341972][ C1] CR2: 000000000056c000 CR3: 0000000107abb000 CR4: 00000000001506e0 [ 363.349934][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.357887][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.365836][ C1] Call Trace: [ 363.369112][ C1] [ 363.371935][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 363.377721][ C1] __run_hrtimer+0x163/0x460 [ 363.382307][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 363.388196][ C1] hrtimer_interrupt+0x380/0xaf0 [ 363.393117][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 363.399047][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 363.404664][ C1] [ 363.407586][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 363.414090][ C1] RIP: 0010:__tsan_read1+0x18/0x180 [ 363.419271][ C1] Code: 31 c0 e8 7b 9b d6 ff 0f 0b 5b 41 5e 41 5f c3 0f 1f 00 48 b9 ff ff ff ff ff ff 01 00 89 f8 c1 e8 0c 83 e0 3f 48 89 fa 48 21 ca <4c> 8b 04 c5 30 1f f3 88 49 83 f8 02 72 05 4d 85 c0 78 5b 4c 8b 04 [ 363.438869][ C1] RSP: 0018:ffffc90000d83b58 EFLAGS: 00000202 [ 363.445003][ C1] RAX: 0000000000000002 RBX: ffff888106342f58 RCX: 0001ffffffffffff [ 363.452956][ C1] RDX: 0001888106342f67 RSI: ffff888106342f58 RDI: ffff888106342f67 [ 363.460908][ C1] RBP: 0000000000000020 R08: 0000000000000000 R09: 0001888106342f65 [ 363.468870][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: 0000000000000005 [ 363.476821][ C1] R13: ffffc90000d83c48 R14: ffff888021bc8f80 R15: ffff888106342f68 [ 363.484817][ C1] tomoyo_path_matches_pattern+0x43/0x120 [ 363.490518][ C1] tomoyo_check_path_acl+0x9b/0xe0 [ 363.495614][ C1] tomoyo_check_acl+0xcc/0x220 [ 363.500357][ C1] ? tomoyo_execute_permission+0x190/0x190 [ 363.506148][ C1] tomoyo_path_perm+0x22f/0x330 [ 363.510979][ C1] tomoyo_inode_getattr+0x18/0x20 [ 363.516031][ C1] security_inode_getattr+0x7f/0xd0 [ 363.521230][ C1] __se_sys_newfstat+0x58/0x2c0 [ 363.526065][ C1] ? putname+0xa5/0xc0 [ 363.530110][ C1] ? kmem_cache_free+0x59/0x100 [ 363.534945][ C1] ? __secure_computing+0x12e/0x1c0 [ 363.540129][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 363.545399][ C1] __x64_sys_newfstat+0x2d/0x40 [ 363.550242][ C1] do_syscall_64+0x39/0x80 [ 363.554646][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 363.560547][ C1] RIP: 0033:0x7fe4305952e2 [ 363.564951][ C1] Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7 [ 363.584552][ C1] RSP: 002b:00007ffff4256bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 363.592952][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fe4305952e2 [ 363.601517][ C1] RDX: 00007ffff4256be0 RSI: 00007ffff4256be0 RDI: 000000000000000e [ 363.609642][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000110 [ 363.619505][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff4256e80 [ 363.627459][ C1] R13: 000055c33a27d120 R14: 0000000000000100 R15: 00007ffff4256d50 [ 363.635415][ C1] ---[ end trace 215dd0f65ef481ca ]--- [ 363.641222][ C1] ------------[ cut here ]------------ [ 363.646706][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 363.657532][ C1] Modules linked in: [ 363.661746][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 363.671728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.681779][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 363.687750][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 363.707361][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 363.713409][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff888105e93000 [ 363.721391][ C1] RDX: 0000000080010000 RSI: 000000000000001a RDI: 0000000000000001 [ 363.729356][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 363.737402][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 363.745989][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 363.753991][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 363.762917][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.769483][ C1] CR2: 000000000056c000 CR3: 0000000107abb000 CR4: 00000000001506e0 [ 363.777439][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.785406][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.793384][ C1] Call Trace: [ 363.796721][ C1] [ 363.799556][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 363.805346][ C1] __run_hrtimer+0x163/0x460 [ 363.809931][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 363.815720][ C1] hrtimer_interrupt+0x380/0xaf0 [ 363.820635][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 363.826534][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 363.832160][ C1] [ 363.835081][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 363.841037][ C1] RIP: 0010:__tsan_read1+0x18/0x180 [ 363.846214][ C1] Code: 31 c0 e8 7b 9b d6 ff 0f 0b 5b 41 5e 41 5f c3 0f 1f 00 48 b9 ff ff ff ff ff ff 01 00 89 f8 c1 e8 0c 83 e0 3f 48 89 fa 48 21 ca <4c> 8b 04 c5 30 1f f3 88 49 83 f8 02 72 05 4d 85 c0 78 5b 4c 8b 04 [ 363.865818][ C1] RSP: 0018:ffffc90000d83b58 EFLAGS: 00000202 [ 363.871883][ C1] RAX: 0000000000000002 RBX: ffff888106342f58 RCX: 0001ffffffffffff [ 363.879838][ C1] RDX: 0001888106342f67 RSI: ffff888106342f58 RDI: ffff888106342f67 [ 363.887793][ C1] RBP: 0000000000000020 R08: 0000000000000000 R09: 0001888106342f65 [ 363.895855][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: 0000000000000005 [ 363.903811][ C1] R13: ffffc90000d83c48 R14: ffff888021bc8f80 R15: ffff888106342f68 [ 363.911820][ C1] tomoyo_path_matches_pattern+0x43/0x120 [ 363.917529][ C1] tomoyo_check_path_acl+0x9b/0xe0 [ 363.922623][ C1] tomoyo_check_acl+0xcc/0x220 [ 363.927484][ C1] ? tomoyo_execute_permission+0x190/0x190 [ 363.933304][ C1] tomoyo_path_perm+0x22f/0x330 [ 363.938708][ C1] tomoyo_inode_getattr+0x18/0x20 [ 363.943735][ C1] security_inode_getattr+0x7f/0xd0 [ 363.949020][ C1] __se_sys_newfstat+0x58/0x2c0 [ 363.953963][ C1] ? putname+0xa5/0xc0 [ 363.958055][ C1] ? kmem_cache_free+0x59/0x100 [ 363.962887][ C1] ? __secure_computing+0x12e/0x1c0 [ 363.968073][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 363.973433][ C1] __x64_sys_newfstat+0x2d/0x40 [ 363.978263][ C1] do_syscall_64+0x39/0x80 [ 363.982657][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 363.988551][ C1] RIP: 0033:0x7fe4305952e2 [ 363.992966][ C1] Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7 [ 364.012704][ C1] RSP: 002b:00007ffff4256bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 364.021122][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fe4305952e2 [ 364.029721][ C1] RDX: 00007ffff4256be0 RSI: 00007ffff4256be0 RDI: 000000000000000e [ 364.038146][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000110 [ 364.046106][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff4256e80 [ 364.054112][ C1] R13: 000055c33a27d120 R14: 0000000000000100 R15: 00007ffff4256d50 [ 364.062338][ C1] ---[ end trace 215dd0f65ef481cb ]--- [ 364.168228][ C1] ------------[ cut here ]------------ [ 364.174559][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 364.185297][ C1] Modules linked in: [ 364.189207][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 364.198859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.208913][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 364.214893][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 364.234484][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 364.240553][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001f RCX: ffff888100c2d000 [ 364.248531][ C1] RDX: 0000000000010001 RSI: 000000000000001f RDI: 0000000000000001 [ 364.256485][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 364.264786][ C1] R10: 0001ffffffffffff R11: 0000000000000214 R12: ffff88813bd1da58 [ 364.272746][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 364.280788][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 364.289815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.296499][ C1] CR2: 000000000056c000 CR3: 0000000105db5000 CR4: 00000000001506e0 [ 364.304512][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.312527][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.320571][ C1] Call Trace: [ 364.323931][ C1] [ 364.326770][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 364.332936][ C1] __run_hrtimer+0x163/0x460 [ 364.337514][ C1] hrtimer_interrupt+0x380/0xaf0 [ 364.342534][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 364.348430][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 364.354071][ C1] [ 364.357086][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 364.363134][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 364.368723][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 364.388412][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 364.394477][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 364.402444][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.410407][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 364.418538][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 364.426491][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 364.434750][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 364.439685][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 364.444615][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 364.449550][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 364.454642][ C1] cpuidle_enter+0x3c/0x60 [ 364.459053][ C1] do_idle+0x193/0x230 [ 364.463293][ C1] cpu_startup_entry+0x15/0x20 [ 364.468048][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 364.473936][ C1] ---[ end trace 215dd0f65ef481cc ]--- [ 364.479613][ C1] ------------[ cut here ]------------ [ 364.485045][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 364.496856][ C1] Modules linked in: [ 364.501781][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 364.511226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.521278][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 364.528388][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 364.549555][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 364.555787][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 364.563926][ C1] RDX: 0000000000010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 364.571883][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 364.579961][ C1] R10: 0001ffffffffffff R11: ffff888100c2d000 R12: ffff88813bd1da58 [ 364.588014][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 364.595967][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 364.605083][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.612456][ C1] CR2: 000000000056c000 CR3: 0000000105db5000 CR4: 00000000001506e0 [ 364.620678][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.628664][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.636960][ C1] Call Trace: [ 364.640359][ C1] [ 364.643206][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 364.648995][ C1] __run_hrtimer+0x163/0x460 [ 364.653663][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 364.659563][ C1] hrtimer_interrupt+0x380/0xaf0 [ 364.667573][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 364.673458][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 364.679508][ C1] [ 364.682432][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 364.689365][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 364.694902][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 364.715248][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 364.722037][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 364.730874][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.739438][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 364.747484][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 364.756754][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 364.765017][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 364.770316][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 364.775458][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 364.780376][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 364.785678][ C1] cpuidle_enter+0x3c/0x60 [ 364.790074][ C1] do_idle+0x193/0x230 [ 364.794251][ C1] cpu_startup_entry+0x15/0x20 [ 364.799132][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 364.805027][ C1] ---[ end trace 215dd0f65ef481cd ]--- [ 364.811062][ C1] ------------[ cut here ]------------ [ 364.818097][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 364.829440][ C1] Modules linked in: [ 364.833348][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 364.842710][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.852763][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 364.859856][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 364.879741][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 364.885792][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000014 RCX: ffff888100c2d000 [ 364.893753][ C1] RDX: 0000000000010001 RSI: 0000000000000014 RDI: 0000000000000001 [ 364.902835][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 364.910826][ C1] R10: 0001ffffffffffff R11: ffff888100c2d000 R12: ffff88813bd1da58 [ 364.918799][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 364.926765][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 364.935682][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.942339][ C1] CR2: 000000000056c000 CR3: 0000000105db5000 CR4: 00000000001506e0 [ 364.950394][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.958362][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.967788][ C1] Call Trace: [ 364.971067][ C1] [ 364.973927][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 364.979749][ C1] __run_hrtimer+0x163/0x460 [ 364.984353][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 364.990167][ C1] hrtimer_interrupt+0x380/0xaf0 [ 364.995094][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 365.000989][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 365.006691][ C1] [ 365.009617][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 365.015588][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 365.021120][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 365.041329][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 365.047390][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 365.055357][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 365.063339][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 365.071386][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 365.079347][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 365.087302][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 365.092254][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 365.097175][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 365.102117][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 365.107235][ C1] cpuidle_enter+0x3c/0x60 [ 365.111638][ C1] do_idle+0x193/0x230 [ 365.115692][ C1] cpu_startup_entry+0x15/0x20 19:39:16 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:16 executing program 3: r0 = socket(0x0, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, 0x0, 0x0, 0x1ff, 0x10000) 19:39:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc0085504, &(0x7f0000000080)) 19:39:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/149, 0x95}], 0x2, 0x1ff, 0x10000) 19:39:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 365.120458][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 365.126338][ C1] ---[ end trace 215dd0f65ef481ce ]--- 19:39:16 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000001280)={0x5, 0x70, 0x8, 0x40, 0x6, 0xd5, 0x0, 0xf2b, 0x0, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1240, 0x0, 0x3ff, 0x4, 0x3, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c2000808830d3a6d627859301009a4b5a3f1e9a3ae12a4a1814d04bad32a339b23f2826400d09ef28b08762de6a29bac13e37d9a419729ac12ecd2505b593214fe89e845ff643b46a873c0a88b5065556b478791f190b6058659a0ee4b2f89f12ce7f8e3df8d28ca4e54c412196dc45e892d1c04988019b8d69f33156e2de93a8b215cc2f7ebbd212ee5da9d68556fbffe35ce9ee9f6671afc459dc5a70454188925d5b52a34d02c8793a8fb4f7eb74ebb5e6bf9f2826e3174fc9a6353a15c0f3f74b6c0fa87b", @ANYRES16=r1, @ANYBLOB="00022dbd7000fedbdf250300000008000400e00000"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x6, 0xee, 0x80, 0x53, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x44008, 0x2, 0x6, 0x2, 0x3, 0x0, 0x8001}, r2, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 19:39:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, 0x0, 0x0, 0x1ff, 0x10000) [ 365.232192][ C1] ------------[ cut here ]------------ [ 365.237739][ C1] WARNING: CPU: 1 PID: 26659 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 365.248618][ C1] Modules linked in: [ 365.252505][ C1] CPU: 1 PID: 26659 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 365.262653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.272728][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 365.278727][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 365.298338][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 365.304407][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff88801d8d5000 [ 365.312395][ C1] RDX: 0000000080010001 RSI: 0000000000000019 RDI: 0000000000000001 [ 365.320368][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 365.328339][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff88813bd1da58 [ 365.336324][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 365.344317][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 365.353247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.359850][ C1] CR2: 00007f0ac3386d70 CR3: 0000000007629000 CR4: 00000000001506e0 [ 365.367822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 365.375810][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 365.383786][ C1] Call Trace: [ 365.387061][ C1] [ 365.389930][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 365.395751][ C1] __run_hrtimer+0x163/0x460 [ 365.400370][ C1] hrtimer_interrupt+0x380/0xaf0 [ 365.405314][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 365.411227][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 365.416865][ C1] [ 365.419797][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 365.425872][ C1] RIP: 0010:__tsan_unaligned_write4+0x15a/0x190 [ 365.432146][ C1] Code: 75 28 ff c9 89 48 04 eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d 2b a2 ab 7e 48 ff c9 78 1c <48> 83 78 20 00 75 01 c3 e9 29 2d 00 00 be 04 00 00 00 ba 01 00 00 [ 365.451779][ C1] RSP: 0018:ffffc9000af1f7b8 EFLAGS: 00000246 [ 365.458838][ C1] RAX: ffff88801d8d5ac8 RBX: 0000000000000001 RCX: 00000000000000df [ 365.466815][ C1] RDX: 000188801d8d53cc RSI: 0000000000000000 RDI: ffff88801d8d53cc [ 365.474802][ C1] RBP: ffffc9000af1f7f8 R08: 0000000000000000 R09: 000188801d8d53cf [ 365.482779][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: dead000000000100 [ 365.490781][ C1] R13: ffffea00004cb248 R14: ffff88801d8d53cc R15: ffff88801d8d5000 [ 365.498766][ C1] __rcu_read_unlock+0x45/0x250 [ 365.503627][ C1] unlock_page_memcg+0xac/0xc0 [ 365.508393][ C1] page_remove_rmap+0x5a9/0x640 [ 365.513266][ C1] zap_pte_range+0x5b9/0x13f0 [ 365.517949][ C1] ? __list_add_valid+0x28/0x90 [ 365.522810][ C1] unmap_page_range+0x540/0x650 [ 365.527683][ C1] unmap_single_vma+0x157/0x210 [ 365.532575][ C1] unmap_vmas+0xc0/0x170 [ 365.536850][ C1] exit_mmap+0x1be/0x400 [ 365.541292][ C1] __mmput+0xa2/0x220 [ 365.545278][ C1] mmput+0x3d/0x50 [ 365.549002][ C1] exit_mm+0x344/0x430 [ 365.553064][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 365.558890][ C1] ? taskstats_exit+0x334/0x730 [ 365.563842][ C1] ? acct_collect+0x3a4/0x400 [ 365.568515][ C1] do_exit+0x3fc/0x15e0 [ 365.572665][ C1] ? do_futex+0x1062/0x1cd0 [ 365.577194][ C1] do_group_exit+0xce/0x180 [ 365.581710][ C1] get_signal+0xf93/0x1510 [ 365.586129][ C1] ? vcpu_put+0x51/0x60 [ 365.590293][ C1] ? kvm_arch_vcpu_ioctl_run+0x5c7/0x860 [ 365.595928][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 365.601472][ C1] ? __se_sys_futex+0x2a8/0x390 [ 365.606320][ C1] ? tomoyo_file_ioctl+0x1c/0x20 [ 365.611279][ C1] ? fput+0x2d/0x130 [ 365.615165][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 365.620800][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 365.626260][ C1] do_syscall_64+0x45/0x80 [ 365.630669][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 365.636584][ C1] RIP: 0033:0x466459 [ 365.640472][ C1] Code: Unable to access opcode bytes at RIP 0x46642f. [ 365.647301][ C1] RSP: 002b:00007fc406fd1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 365.656492][ C1] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000466459 [ 365.664457][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 365.672434][ C1] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 365.680395][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 365.688358][ C1] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 365.696327][ C1] ---[ end trace 215dd0f65ef481cf ]--- [ 365.702184][ C1] ------------[ cut here ]------------ [ 365.707636][ C1] WARNING: CPU: 1 PID: 26659 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 365.718570][ C1] Modules linked in: [ 365.722739][ C1] CPU: 1 PID: 26659 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 365.732904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.742965][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 365.748944][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 365.768574][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 365.774634][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001c RCX: ffff88801d8d5000 [ 365.782603][ C1] RDX: 0000000080010001 RSI: 000000000000001c RDI: 0000000000000001 [ 365.790563][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 365.798526][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 365.806506][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 365.815955][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 365.824925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.831507][ C1] CR2: 00007f0ac3386d70 CR3: 0000000007629000 CR4: 00000000001506e0 [ 365.839477][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 365.847451][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 365.855414][ C1] Call Trace: [ 365.858705][ C1] [ 365.861538][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 365.867347][ C1] __run_hrtimer+0x163/0x460 [ 365.871932][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 365.877734][ C1] hrtimer_interrupt+0x380/0xaf0 [ 365.882691][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 365.888586][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 365.894224][ C1] [ 365.897145][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 365.903297][ C1] RIP: 0010:__tsan_unaligned_write4+0x15a/0x190 [ 365.909579][ C1] Code: 75 28 ff c9 89 48 04 eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d 2b a2 ab 7e 48 ff c9 78 1c <48> 83 78 20 00 75 01 c3 e9 29 2d 00 00 be 04 00 00 00 ba 01 00 00 [ 365.929280][ C1] RSP: 0018:ffffc9000af1f7b8 EFLAGS: 00000246 [ 365.935958][ C1] RAX: ffff88801d8d5ac8 RBX: 0000000000000001 RCX: 00000000000000df [ 365.943946][ C1] RDX: 000188801d8d53cc RSI: 0000000000000000 RDI: ffff88801d8d53cc [ 365.952048][ C1] RBP: ffffc9000af1f7f8 R08: 0000000000000000 R09: 000188801d8d53cf [ 365.960020][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: dead000000000100 [ 365.967988][ C1] R13: ffffea00004cb248 R14: ffff88801d8d53cc R15: ffff88801d8d5000 [ 365.975964][ C1] __rcu_read_unlock+0x45/0x250 [ 365.980848][ C1] unlock_page_memcg+0xac/0xc0 [ 365.985611][ C1] page_remove_rmap+0x5a9/0x640 [ 365.990645][ C1] zap_pte_range+0x5b9/0x13f0 [ 365.995458][ C1] ? __list_add_valid+0x28/0x90 [ 366.000310][ C1] unmap_page_range+0x540/0x650 [ 366.005163][ C1] unmap_single_vma+0x157/0x210 [ 366.010025][ C1] unmap_vmas+0xc0/0x170 [ 366.014312][ C1] exit_mmap+0x1be/0x400 [ 366.018561][ C1] __mmput+0xa2/0x220 [ 366.022543][ C1] mmput+0x3d/0x50 [ 366.026267][ C1] exit_mm+0x344/0x430 [ 366.030854][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 366.037357][ C1] ? taskstats_exit+0x334/0x730 [ 366.042569][ C1] ? acct_collect+0x3a4/0x400 [ 366.047366][ C1] do_exit+0x3fc/0x15e0 [ 366.051519][ C1] ? do_futex+0x1062/0x1cd0 [ 366.056057][ C1] do_group_exit+0xce/0x180 [ 366.060559][ C1] get_signal+0xf93/0x1510 [ 366.065008][ C1] ? vcpu_put+0x51/0x60 [ 366.069174][ C1] ? kvm_arch_vcpu_ioctl_run+0x5c7/0x860 [ 366.075104][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 366.080831][ C1] ? __se_sys_futex+0x2a8/0x390 [ 366.085865][ C1] ? tomoyo_file_ioctl+0x1c/0x20 [ 366.090825][ C1] ? fput+0x2d/0x130 [ 366.094725][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 366.100365][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 366.105839][ C1] do_syscall_64+0x45/0x80 [ 366.110343][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 366.116355][ C1] RIP: 0033:0x466459 [ 366.120334][ C1] Code: Unable to access opcode bytes at RIP 0x46642f. [ 366.127265][ C1] RSP: 002b:00007fc406fd1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 366.135787][ C1] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000466459 [ 366.143750][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 366.152147][ C1] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 366.160112][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 366.168098][ C1] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 366.176079][ C1] ---[ end trace 215dd0f65ef481d0 ]--- [ 366.181861][ C1] ------------[ cut here ]------------ [ 366.187308][ C1] WARNING: CPU: 1 PID: 26659 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 366.198167][ C1] Modules linked in: [ 366.202053][ C1] CPU: 1 PID: 26659 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 366.212218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.222530][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 366.228515][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 366.248120][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 366.254209][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001d RCX: ffff88801d8d5000 [ 366.262215][ C1] RDX: 0000000080010001 RSI: 000000000000001d RDI: 0000000000000001 [ 366.270194][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 366.280532][ C1] R10: 0001ffffffffffff R11: ffff88801d8d5000 R12: ffff88813bd1da58 [ 366.288585][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 366.297732][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 366.306693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.313278][ C1] CR2: 00007f0ac3386d70 CR3: 0000000007629000 CR4: 00000000001506e0 [ 366.321446][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.329605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.338014][ C1] Call Trace: [ 366.341383][ C1] [ 366.344247][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 366.350069][ C1] __run_hrtimer+0x163/0x460 [ 366.354677][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 366.360507][ C1] hrtimer_interrupt+0x380/0xaf0 [ 366.365482][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 366.371577][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 366.377236][ C1] [ 366.380373][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 366.387064][ C1] RIP: 0010:__tsan_unaligned_write4+0x15a/0x190 [ 366.393331][ C1] Code: 75 28 ff c9 89 48 04 eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d 2b a2 ab 7e 48 ff c9 78 1c <48> 83 78 20 00 75 01 c3 e9 29 2d 00 00 be 04 00 00 00 ba 01 00 00 [ 366.412941][ C1] RSP: 0018:ffffc9000af1f7b8 EFLAGS: 00000246 [ 366.419038][ C1] RAX: ffff88801d8d5ac8 RBX: 0000000000000001 RCX: 00000000000000df [ 366.427359][ C1] RDX: 000188801d8d53cc RSI: 0000000000000000 RDI: ffff88801d8d53cc [ 366.435348][ C1] RBP: ffffc9000af1f7f8 R08: 0000000000000000 R09: 000188801d8d53cf [ 366.443324][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: dead000000000100 [ 366.451393][ C1] R13: ffffea00004cb248 R14: ffff88801d8d53cc R15: ffff88801d8d5000 [ 366.459742][ C1] __rcu_read_unlock+0x45/0x250 [ 366.464718][ C1] unlock_page_memcg+0xac/0xc0 [ 366.469592][ C1] page_remove_rmap+0x5a9/0x640 [ 366.474533][ C1] zap_pte_range+0x5b9/0x13f0 [ 366.479297][ C1] ? __list_add_valid+0x28/0x90 [ 366.484180][ C1] unmap_page_range+0x540/0x650 [ 366.489034][ C1] unmap_single_vma+0x157/0x210 [ 366.494060][ C1] unmap_vmas+0xc0/0x170 [ 366.498319][ C1] exit_mmap+0x1be/0x400 [ 366.502561][ C1] __mmput+0xa2/0x220 [ 366.506643][ C1] mmput+0x3d/0x50 [ 366.510428][ C1] exit_mm+0x344/0x430 [ 366.514511][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 366.520515][ C1] ? taskstats_exit+0x334/0x730 [ 366.525366][ C1] ? acct_collect+0x3a4/0x400 [ 366.530042][ C1] do_exit+0x3fc/0x15e0 [ 366.534204][ C1] ? do_futex+0x1062/0x1cd0 [ 366.538702][ C1] do_group_exit+0xce/0x180 [ 366.543226][ C1] get_signal+0xf93/0x1510 [ 366.547640][ C1] ? vcpu_put+0x51/0x60 [ 366.551802][ C1] ? kvm_arch_vcpu_ioctl_run+0x5c7/0x860 [ 366.557520][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 366.563063][ C1] ? __se_sys_futex+0x2a8/0x390 [ 366.567908][ C1] ? tomoyo_file_ioctl+0x1c/0x20 [ 366.572937][ C1] ? fput+0x2d/0x130 [ 366.576829][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 366.584470][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 366.589931][ C1] do_syscall_64+0x45/0x80 [ 366.594370][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 366.600269][ C1] RIP: 0033:0x466459 [ 366.604171][ C1] Code: Unable to access opcode bytes at RIP 0x46642f. [ 366.611005][ C1] RSP: 002b:00007fc406fd1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 366.619498][ C1] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000466459 [ 366.627599][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 366.635568][ C1] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 366.643739][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 366.651720][ C1] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 366.659702][ C1] ---[ end trace 215dd0f65ef481d1 ]--- 19:39:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 366.690116][ T36] audit: type=1326 audit(1617392358.410:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 366.713142][ T36] audit: type=1326 audit(1617392358.410:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x466459 code=0x7ffc0000 19:39:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, 0x0, 0x0, 0x1ff, 0x10000) [ 366.736069][ T36] audit: type=1326 audit(1617392358.410:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 366.758604][ T36] audit: type=1326 audit(1617392358.410:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 366.781501][ C1] ------------[ cut here ]------------ 19:39:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc0189436, &(0x7f0000000080)) [ 366.781518][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 366.781555][ C1] Modules linked in: [ 366.781564][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 366.781603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.781614][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 366.781637][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 366.781652][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 366.781667][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000024 RCX: ffff888100cd9000 [ 366.781678][ C1] RDX: 0000000080010001 RSI: 0000000000000024 RDI: 0000000000000001 [ 366.781689][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 366.781700][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 19:39:18 executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 366.781712][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 366.781725][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 366.781742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.781767][ C1] CR2: 000000000056c000 CR3: 0000000111599000 CR4: 00000000001506e0 [ 366.781783][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.781795][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.781807][ C1] Call Trace: [ 366.781814][ C1] [ 366.781821][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 366.781843][ C1] __run_hrtimer+0x163/0x460 [ 366.781863][ C1] hrtimer_interrupt+0x380/0xaf0 [ 366.781896][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 366.781920][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 366.781942][ C1] [ 366.781948][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 366.781979][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 366.782001][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 366.782031][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 366.782046][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 366.782057][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 366.782088][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 366.782101][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 366.782113][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.782126][ C1] ? console_unlock+0x8a3/0xb20 [ 366.782151][ C1] ? down_trylock+0x3a/0x50 [ 366.782171][ C1] ? __printk_safe_exit+0x5/0x10 [ 366.782199][ C1] vprintk_emit+0x131/0x3e0 [ 366.782218][ C1] vprintk_default+0x22/0x30 [ 366.782246][ C1] vprintk_func+0x11b/0x120 [ 366.782266][ C1] printk+0x62/0x82 [ 366.782286][ C1] kauditd_hold_skb+0x12d/0x140 [ 366.782314][ C1] ? kauditd_send_queue+0x290/0x290 [ 366.782335][ C1] ? auditd_conn_free+0xb0/0xb0 [ 366.782355][ C1] kauditd_send_queue+0x68/0x290 [ 366.782377][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 366.782399][ C1] kauditd_thread+0x3cd/0x6d0 [ 366.782438][ C1] ? init_wait_entry+0x30/0x30 [ 366.782460][ C1] ? audit_log+0xc0/0xc0 [ 366.782478][ C1] kthread+0x20b/0x230 [ 366.782497][ C1] ? audit_log+0xc0/0xc0 [ 366.782516][ C1] ? kthread_blkcg+0x80/0x80 [ 366.782536][ C1] ret_from_fork+0x1f/0x30 [ 366.782562][ C1] ---[ end trace 215dd0f65ef481d2 ]--- [ 367.005036][ C1] ------------[ cut here ]------------ [ 367.005045][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 367.005110][ C1] Modules linked in: [ 367.005121][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 367.005142][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.005152][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 367.005174][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 367.005190][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 367.005205][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 367.005225][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 367.005238][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 367.005257][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 367.005270][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 367.005283][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 367.005301][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.005315][ C1] CR2: 000000000056c000 CR3: 0000000111599000 CR4: 00000000001526e0 [ 367.005330][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.005341][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.005372][ C1] Call Trace: [ 367.005378][ C1] [ 367.005385][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 367.005407][ C1] __run_hrtimer+0x163/0x460 [ 367.005426][ C1] ? clockevents_program_event+0x195/0x1e0 [ 367.005447][ C1] hrtimer_interrupt+0x380/0xaf0 [ 367.005474][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 367.005498][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 367.005520][ C1] [ 367.005526][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 367.005546][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 367.005569][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 367.005583][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 367.005617][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 367.005630][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 367.005642][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 367.005653][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 367.005665][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.005677][ C1] ? console_unlock+0x8a3/0xb20 [ 367.005699][ C1] ? down_trylock+0x3a/0x50 [ 367.005717][ C1] ? __printk_safe_exit+0x5/0x10 [ 367.005739][ C1] vprintk_emit+0x131/0x3e0 [ 367.005777][ C1] vprintk_default+0x22/0x30 [ 367.005795][ C1] vprintk_func+0x11b/0x120 [ 367.005813][ C1] printk+0x62/0x82 [ 367.005851][ C1] kauditd_hold_skb+0x12d/0x140 [ 367.005871][ C1] ? kauditd_send_queue+0x290/0x290 [ 367.005892][ C1] ? auditd_conn_free+0xb0/0xb0 [ 367.005914][ C1] kauditd_send_queue+0x68/0x290 [ 367.005938][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 367.005959][ C1] kauditd_thread+0x3cd/0x6d0 [ 367.005991][ C1] ? init_wait_entry+0x30/0x30 [ 367.006014][ C1] ? audit_log+0xc0/0xc0 [ 367.006034][ C1] kthread+0x20b/0x230 [ 367.006053][ C1] ? audit_log+0xc0/0xc0 [ 367.006072][ C1] ? kthread_blkcg+0x80/0x80 [ 367.006110][ C1] ret_from_fork+0x1f/0x30 [ 367.006130][ C1] ---[ end trace 215dd0f65ef481d3 ]--- [ 367.509400][ T36] audit: type=1326 audit(1617392358.530:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=283 compat=0 ip=0x466459 code=0x7ffc0000 [ 367.533228][ T36] audit: type=1326 audit(1617392358.530:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 367.556312][ C1] ------------[ cut here ]------------ [ 367.556320][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 367.556353][ C1] Modules linked in: [ 367.556363][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 367.556385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.556394][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 367.556438][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 367.556453][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 367.556468][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 367.556479][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 367.556491][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 367.556504][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 367.556516][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 367.556530][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 367.556546][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.556566][ C1] CR2: 00007f636fc78048 CR3: 0000000107880000 CR4: 00000000001506e0 [ 367.556584][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.556596][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.556607][ C1] Call Trace: [ 367.556613][ C1] [ 367.556620][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 367.556660][ C1] __run_hrtimer+0x163/0x460 [ 367.556681][ C1] hrtimer_interrupt+0x380/0xaf0 [ 367.556702][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 367.556734][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 367.556756][ C1] [ 367.556761][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 367.556817][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 367.556841][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 367.556857][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 367.556873][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 367.556891][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 367.556902][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 367.556912][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 367.556923][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.556935][ C1] ? console_unlock+0x8a3/0xb20 [ 367.556976][ C1] ? down_trylock+0x3a/0x50 [ 367.556994][ C1] ? __printk_safe_exit+0x5/0x10 [ 367.557013][ C1] vprintk_emit+0x131/0x3e0 [ 367.557034][ C1] vprintk_default+0x22/0x30 [ 367.557054][ C1] vprintk_func+0x11b/0x120 [ 367.557089][ C1] printk+0x62/0x82 [ 367.557107][ C1] kauditd_hold_skb+0x12d/0x140 [ 367.557127][ C1] ? kauditd_send_queue+0x290/0x290 [ 367.557158][ C1] ? auditd_conn_free+0xb0/0xb0 [ 367.557177][ C1] kauditd_send_queue+0x68/0x290 [ 367.557196][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 367.557222][ C1] kauditd_thread+0x3cd/0x6d0 [ 367.557242][ C1] ? init_wait_entry+0x30/0x30 [ 367.557280][ C1] ? audit_log+0xc0/0xc0 [ 367.557297][ C1] kthread+0x20b/0x230 [ 367.557324][ C1] ? audit_log+0xc0/0xc0 [ 367.557341][ C1] ? kthread_blkcg+0x80/0x80 [ 367.557370][ C1] ret_from_fork+0x1f/0x30 [ 367.557392][ C1] ---[ end trace 215dd0f65ef481d4 ]--- [ 367.947820][ T36] audit: type=1326 audit(1617392358.530:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=40 compat=0 ip=0x466459 code=0x7ffc0000 [ 367.971226][ C1] ------------[ cut here ]------------ [ 367.971235][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 367.971277][ C1] Modules linked in: [ 367.971286][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 367.971327][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.971338][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 367.971380][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 367.971398][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 367.971413][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 367.971426][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 367.971439][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 367.971451][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 367.971463][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 367.971475][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 367.971489][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.971501][ C1] CR2: 00007f636fc78048 CR3: 0000000107880000 CR4: 00000000001506e0 [ 367.971517][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.971526][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.971554][ C1] Call Trace: [ 367.971559][ C1] [ 367.971567][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 367.971587][ C1] __run_hrtimer+0x163/0x460 [ 367.971605][ C1] hrtimer_interrupt+0x380/0xaf0 [ 367.971624][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 367.971647][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 367.971675][ C1] [ 367.971681][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 367.971700][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 367.971721][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 367.971737][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 367.971772][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 367.971784][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 367.971800][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 367.971821][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 367.971832][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.971845][ C1] ? console_unlock+0x8a3/0xb20 [ 367.971868][ C1] ? down_trylock+0x3a/0x50 [ 367.971888][ C1] ? __printk_safe_exit+0x5/0x10 [ 367.971909][ C1] vprintk_emit+0x131/0x3e0 [ 367.971943][ C1] vprintk_default+0x22/0x30 [ 367.971962][ C1] vprintk_func+0x11b/0x120 [ 367.971980][ C1] printk+0x62/0x82 [ 367.972018][ C1] kauditd_hold_skb+0x12d/0x140 [ 367.972050][ C1] ? kauditd_send_queue+0x290/0x290 [ 367.972070][ C1] ? auditd_conn_free+0xb0/0xb0 [ 367.972089][ C1] kauditd_send_queue+0x68/0x290 [ 367.972117][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 367.972137][ C1] kauditd_thread+0x3cd/0x6d0 [ 367.972166][ C1] ? init_wait_entry+0x30/0x30 [ 367.972213][ C1] ? audit_log+0xc0/0xc0 [ 367.972233][ C1] kthread+0x20b/0x230 [ 367.972252][ C1] ? audit_log+0xc0/0xc0 [ 367.972270][ C1] ? kthread_blkcg+0x80/0x80 [ 367.972289][ C1] ret_from_fork+0x1f/0x30 [ 367.972325][ C1] ---[ end trace 215dd0f65ef481d5 ]--- [ 368.040187][ C1] ------------[ cut here ]------------ [ 368.040198][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 368.040255][ C1] Modules linked in: [ 368.040266][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 368.040287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.040318][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 368.040341][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 368.040372][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 368.040388][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 368.040400][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 368.040411][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 368.040422][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 368.040434][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 368.040445][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 368.040460][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.040474][ C1] CR2: 00007f636fc78048 CR3: 0000000107880000 CR4: 00000000001506e0 [ 368.040491][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.040504][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.040516][ C1] Call Trace: [ 368.040523][ C1] [ 368.040531][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 368.040560][ C1] __run_hrtimer+0x163/0x460 [ 368.040577][ C1] ? clockevents_program_event+0x195/0x1e0 [ 368.040598][ C1] hrtimer_interrupt+0x380/0xaf0 [ 368.040617][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 368.040641][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 368.040669][ C1] [ 368.040675][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 368.040694][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 368.040715][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 368.040731][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 368.040746][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 368.040758][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 368.040769][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 368.040780][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 368.040791][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.040812][ C1] ? console_unlock+0x8a3/0xb20 [ 368.040847][ C1] ? down_trylock+0x3a/0x50 [ 368.040866][ C1] ? __printk_safe_exit+0x5/0x10 [ 368.040888][ C1] vprintk_emit+0x131/0x3e0 [ 368.040915][ C1] vprintk_default+0x22/0x30 [ 368.040934][ C1] vprintk_func+0x11b/0x120 [ 368.040955][ C1] printk+0x62/0x82 [ 368.040974][ C1] kauditd_hold_skb+0x12d/0x140 [ 368.040996][ C1] ? kauditd_send_queue+0x290/0x290 [ 368.041028][ C1] ? auditd_conn_free+0xb0/0xb0 [ 368.041048][ C1] kauditd_send_queue+0x68/0x290 [ 368.041071][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 368.041093][ C1] kauditd_thread+0x3cd/0x6d0 [ 368.041111][ C1] ? init_wait_entry+0x30/0x30 [ 368.041132][ C1] ? audit_log+0xc0/0xc0 [ 368.041150][ C1] kthread+0x20b/0x230 [ 368.041186][ C1] ? audit_log+0xc0/0xc0 [ 368.041219][ C1] ? kthread_blkcg+0x80/0x80 [ 368.041240][ C1] ret_from_fork+0x1f/0x30 [ 368.041263][ C1] ---[ end trace 215dd0f65ef481d6 ]--- [ 368.703034][ T36] audit: type=1326 audit(1617392358.530:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 368.725559][ C1] ------------[ cut here ]------------ [ 368.725566][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 368.725594][ C1] Modules linked in: [ 368.725600][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 368.725611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.725617][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 368.725630][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 368.725639][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 368.725647][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 368.725662][ C1] RDX: 0000000080010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 368.725668][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 368.725675][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 368.725696][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 368.725702][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 368.725718][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.725725][ C1] CR2: 00007f636fc78048 CR3: 0000000107880000 CR4: 00000000001506e0 [ 368.725734][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.725740][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.725747][ C1] Call Trace: [ 368.725750][ C1] [ 368.725755][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 368.725771][ C1] __run_hrtimer+0x163/0x460 [ 368.725783][ C1] hrtimer_interrupt+0x380/0xaf0 [ 368.725794][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 368.725809][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 368.725822][ C1] [ 368.725826][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 368.725836][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 368.725851][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 368.725860][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 368.725867][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 368.725874][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 368.725880][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 368.725886][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 368.725892][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.725899][ C1] ? console_unlock+0x8a3/0xb20 [ 368.725924][ C1] ? down_trylock+0x3a/0x50 [ 368.725935][ C1] ? __printk_safe_exit+0x5/0x10 [ 368.725946][ C1] vprintk_emit+0x131/0x3e0 [ 368.725970][ C1] vprintk_default+0x22/0x30 [ 368.725981][ C1] vprintk_func+0x11b/0x120 [ 368.725991][ C1] printk+0x62/0x82 [ 368.726002][ C1] kauditd_hold_skb+0x12d/0x140 [ 368.726014][ C1] ? kauditd_send_queue+0x290/0x290 [ 368.726029][ C1] ? auditd_conn_free+0xb0/0xb0 [ 368.726054][ C1] kauditd_send_queue+0x68/0x290 [ 368.726065][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 368.726081][ C1] kauditd_thread+0x3cd/0x6d0 [ 368.726092][ C1] ? init_wait_entry+0x30/0x30 [ 368.726104][ C1] ? audit_log+0xc0/0xc0 [ 368.726114][ C1] kthread+0x20b/0x230 [ 368.726135][ C1] ? audit_log+0xc0/0xc0 [ 368.726145][ C1] ? kthread_blkcg+0x80/0x80 [ 368.726156][ C1] ret_from_fork+0x1f/0x30 [ 368.726168][ C1] ---[ end trace 215dd0f65ef481d7 ]--- [ 369.089467][ T36] audit: type=1326 audit(1617392358.530:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x467ac7 code=0x7ffc0000 [ 369.112477][ T36] audit: type=1326 audit(1617392358.530:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26663 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=44 compat=0 ip=0x4193ec code=0x7ffc0000 [ 369.161627][T26695] loop1: detected capacity change from 0 to 8192 [ 369.171525][T26695] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 369.190614][T26695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.200708][T26695] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.208643][T26695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 369.282099][T26695] loop1: detected capacity change from 0 to 8192 [ 369.291643][T26695] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 369.310412][T26695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.320069][T26695] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:21 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x1ff, 0x10000) 19:39:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc020660b, &(0x7f0000000080)) 19:39:21 executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:21 executing program 4: io_setup(0x1, &(0x7f0000000040)) [ 369.329954][T26695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:21 executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0), 0x0, 0x1ff, 0x10000) 19:39:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464ce, &(0x7f0000000080)) 19:39:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:21 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x800, 0x0) bind$802154_raw(r1, &(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xffff}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x3}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x20, 0x6, 0x200, 0xfffffffb, 0x8, 0x80a, 0x2, 0x8}, 0x20) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="c91ec23f533a0e8be2b033a89282", 0xe}], 0x1, &(0x7f00000033c0)=ANY=[], 0x1078}}, {{&(0x7f00000011c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, 0x0}}], 0x2, 0x0) [ 369.501526][T26718] loop1: detected capacity change from 0 to 8192 19:39:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 369.563447][T26718] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 369.600369][T26718] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.615987][T26718] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.639312][T26718] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 369.686154][T26737] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.700116][T26737] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.714389][T26718] loop1: detected capacity change from 0 to 8192 [ 369.721438][T26718] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 369.725441][T26741] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.729147][T26718] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.743136][T26718] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 369.751039][T26718] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 369.760301][T26741] ieee802154 phy0 wpan0: encryption failed: -22 19:39:21 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0), 0x0, 0x1ff, 0x10000) 19:39:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)) 19:39:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:21 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 19:39:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 369.903659][T26754] loop1: detected capacity change from 0 to 8192 19:39:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0), 0x0, 0x1ff, 0x10000) 19:39:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2}) 19:39:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 369.972336][T26760] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value [ 369.986948][T26754] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.013503][T26754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 370.035951][T26754] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.079221][T26754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3}) [ 370.185020][T26754] loop1: detected capacity change from 0 to 8192 [ 370.201502][T26754] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 370.220625][T26754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 370.229096][T26754] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.239811][T26754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:22 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1ff, 0x10000) 19:39:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x4}) [ 370.431558][T26801] loop1: detected capacity change from 0 to 8192 [ 370.471260][T26801] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 370.503267][T26801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 370.518146][T26801] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.526136][T26801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 370.580974][T26801] loop1: detected capacity change from 0 to 8192 [ 370.588106][T26801] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 370.594926][T26801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 370.604614][T26801] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.613468][T26801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 370.767892][T26766] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value 19:39:22 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 19:39:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x5}) 19:39:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1ff, 0x10000) 19:39:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:22 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1ff, 0x10000) [ 370.991362][T26827] loop1: detected capacity change from 0 to 8192 [ 371.063053][T26836] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value [ 371.094534][T26827] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x6}) [ 371.169664][T26827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:39:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x10000) 19:39:23 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 19:39:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 371.229087][T26827] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.256964][T26827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x7}) [ 371.333339][T26827] loop1: detected capacity change from 0 to 8192 [ 371.341012][T26827] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 371.359471][T26827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 371.369290][T26827] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 371.386529][T26827] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x8}) 19:39:23 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 371.470969][T26860] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value 19:39:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:23 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 19:39:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:23 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 371.581229][T26875] loop1: detected capacity change from 0 to 8192 [ 371.618516][T26875] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x9}) [ 371.662353][T26875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 371.700844][T26885] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value 19:39:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:23 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 371.710438][T26875] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.734067][T26875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 371.817309][T26875] loop1: detected capacity change from 0 to 8192 [ 371.827132][T26875] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 371.842094][T26875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 371.859385][T26875] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xa}) [ 371.877815][T26897] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value [ 371.924067][T26875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 371.968743][ T3237] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.975312][ T3237] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.975618][T26903] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value 19:39:23 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xb}) 19:39:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:23 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000a00)='./file1\x00', 0x46) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f77657264691dc7e55a8784233b0e0c476d0e"]) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_file_open\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/62, 0x3e, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000bc0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1ff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x9}, 0x10, r1}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x1aa8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="075504000200000038150300040000000000000018220000000000000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000300000018000000040000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0xff, 0x2f, &(0x7f00000003c0)=""/47, 0x41000, 0x8, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8000, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x3, 0x7fff}, 0x10, r0}, 0x78) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xdb, 0x17, &(0x7f00000005c0)="e5b52f9a2a56d5caabcb1170d278d177f2459f572a8b80a06c2d5cf5ca10a14b22bf60eb93acc58f00a9b6490775c87f470d89085a9ed274ada6061d91cfeadb397e3acc27f9ad3fa5f16eaab81840b595ccb6a58fd376c9c3afb7a63ba34c706a8e2b0815a7d11002375787381d888adc445f7e2465daf8ddc97f8edb4623e6d6f0cb0acd80d2f8de8350128c4b7f2711c976730138f5a0a2c72cd357b3c6e0c6478fac73de63c0003d8a10ed943f133290d2c65d059821f3f591d696d8df5f78b890b96732f5c92e468d234dac63674953e9ad4afe2af748779b", &(0x7f00000006c0)=""/23, 0x8f3, 0x0, 0xf6, 0x53, &(0x7f0000000700)="2c98483ae5b88557f8597b124b1ca9e53a343c5e490a85cfcbcbcab392bf6571952bd298effcde0da630f0e1ba8e6a0b62659564da879b74db60d9a926a63dd895bad9059dad1c30a4bbe978f401c1b8de9c58c72c386b20ab336bbacd57e9993c6518ec913392972e8f75f9fc0ffa4c7780905226fe3e0c67b394a983b8ea7cf0e2bf3ffe6bb788f3179d8ce654cdcc4880ca01e841e3fdd7e03966a5c5cb6d09891d601ccfa3c349fbdbb10620998144fe2ba90def395e20445ea861d264b66efdfe8e5b9262e34678e7429740b90065ffaad03e52806eca436ccd98d6d8bd13c7a7572005fc0eca05147a301e2bc419dd38730348", &(0x7f0000000800)="791236f7bf8aa18067f2307e020ee411d5c8f0a7d41964b96fa3c1a56efa930298aca40b98a5d3d34b35f2411710e569763c3f778bff1fc4701615bacb82119070a12f779d90a7eaed227ea31858539edb4a01", 0x0, 0x1ff}, 0x48) openat(r3, &(0x7f0000002ec0)='./bus\x00', 0x1000c0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002e80)={&(0x7f0000001780)='sched_process_wait\x00', r2}, 0x10) write$P9_RREADLINK(r3, &(0x7f0000000900)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 19:39:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xc}) [ 372.218168][T26933] loop1: detected capacity change from 0 to 8192 [ 372.249574][T26933] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 372.258591][T26933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:39:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:24 executing program 4 (fault-call:4 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 372.276552][T26933] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.284643][T26933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 372.332335][T26933] loop1: detected capacity change from 0 to 8192 [ 372.335404][T26938] overlayfs: unrecognized mount option "lowerdiÇåZ‡„#; Gm" or missing value [ 372.339877][T26933] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 372.355135][T26933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 372.371426][T26933] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.378685][T26949] FAULT_INJECTION: forcing a failure. [ 372.378685][T26949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.394372][T26949] CPU: 1 PID: 26949 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 372.404544][T26949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.414638][T26949] Call Trace: [ 372.417919][T26949] dump_stack+0x137/0x19d [ 372.421254][T26933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 372.422251][T26949] should_fail+0x23c/0x250 [ 372.434803][T26949] should_fail_usercopy+0x16/0x20 [ 372.439846][T26949] _copy_from_user+0x1c/0xd0 [ 372.444436][T26949] iovec_from_user+0xc4/0x2d0 [ 372.449324][T26949] __import_iovec+0x49/0x270 [ 372.453932][T26949] ? __rcu_read_unlock+0x5c/0x250 [ 372.458966][T26949] ? fsnotify_perm+0x59/0x2e0 [ 372.463638][T26949] import_iovec+0xb8/0xd0 [ 372.467963][T26949] do_preadv+0x109/0x230 [ 372.472202][T26949] ? __fget_light+0x219/0x260 [ 372.476890][T26949] ? fput+0x2d/0x130 [ 372.480817][T26949] ? ksys_write+0x157/0x180 [ 372.485316][T26949] __x64_sys_preadv+0x54/0x60 [ 372.490008][T26949] do_syscall_64+0x39/0x80 [ 372.494419][T26949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 372.500400][T26949] RIP: 0033:0x466459 [ 372.504301][T26949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 372.523903][T26949] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 372.532312][T26949] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 372.540441][T26949] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 372.548402][T26949] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 372.556364][T26949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.564343][T26949] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 372.572796][ C1] ------------[ cut here ]------------ [ 372.578280][ C1] WARNING: CPU: 1 PID: 26949 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 372.589140][ C1] Modules linked in: [ 372.593033][ C1] CPU: 1 PID: 26949 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 372.603227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.613284][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 372.619281][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 372.638895][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 372.644978][ C1] RAX: ffffffff82eb5059 RBX: 000000000000000b RCX: ffff888022082000 [ 372.652973][ C1] RDX: 0000000000010000 RSI: 000000000000000b RDI: 0000000000000001 [ 372.661048][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 372.669020][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 372.677000][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 372.684969][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 372.693909][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.700486][ C1] CR2: 0000001b2fe22000 CR3: 0000000109728000 CR4: 00000000001526e0 [ 372.708457][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.716418][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.724384][ C1] Call Trace: [ 372.727653][ C1] [ 372.730575][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 372.736381][ C1] __run_hrtimer+0x163/0x460 [ 372.740992][ C1] hrtimer_interrupt+0x380/0xaf0 [ 372.745942][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 372.751837][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 372.757489][ C1] [ 372.760424][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 372.766400][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 372.771509][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 372.791203][ C1] RSP: 0018:ffffc90003a33c48 EFLAGS: 00000246 [ 372.797272][ C1] RAX: 74098806719aca00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 372.805246][ C1] RDX: ffffc900108d3000 RSI: 000000000003ffff RDI: 0000000000040000 [ 372.813210][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 00018880220823cf [ 372.821885][ C1] R10: 0001ffffffffffff R11: ffff888022082000 R12: ffffffff878d2788 [ 372.829942][ C1] R13: 0000000000000001 R14: ffffffff878d27a0 R15: 0000000000000200 [ 372.837905][ C1] ? dump_stack+0x15e/0x19d [ 372.842411][ C1] ? dump_stack+0x173/0x19d [ 372.846937][ C1] should_fail+0x23c/0x250 [ 372.851362][ C1] should_fail_usercopy+0x16/0x20 [ 372.856385][ C1] _copy_from_user+0x1c/0xd0 [ 372.860983][ C1] iovec_from_user+0xc4/0x2d0 [ 372.865752][ C1] __import_iovec+0x49/0x270 [ 372.870332][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 372.875373][ C1] ? fsnotify_perm+0x59/0x2e0 [ 372.880131][ C1] import_iovec+0xb8/0xd0 [ 372.884467][ C1] do_preadv+0x109/0x230 [ 372.888705][ C1] ? __fget_light+0x219/0x260 [ 372.893382][ C1] ? fput+0x2d/0x130 [ 372.897278][ C1] ? ksys_write+0x157/0x180 [ 372.901789][ C1] __x64_sys_preadv+0x54/0x60 [ 372.906477][ C1] do_syscall_64+0x39/0x80 [ 372.910897][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 372.916800][ C1] RIP: 0033:0x466459 [ 372.920694][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 372.940398][ C1] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 372.949195][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 372.958351][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 372.966535][ C1] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 372.974519][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.982492][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 372.990715][ C1] ---[ end trace 215dd0f65ef481d8 ]--- [ 372.996581][ C1] ------------[ cut here ]------------ [ 373.002220][ C1] WARNING: CPU: 1 PID: 26949 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 373.013084][ C1] Modules linked in: [ 373.016973][ C1] CPU: 1 PID: 26949 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 373.027220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.037281][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 373.043294][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 373.063009][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 373.069202][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff888022082000 [ 373.077290][ C1] RDX: 0000000000010000 RSI: 0000000000000019 RDI: 0000000000000001 [ 373.085380][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 373.093963][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 373.102019][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 373.110081][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 373.119183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.127544][ C1] CR2: 0000001b2fe22000 CR3: 0000000109728000 CR4: 00000000001526e0 [ 373.135552][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.143608][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.151580][ C1] Call Trace: [ 373.154940][ C1] [ 373.157795][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 373.163650][ C1] __run_hrtimer+0x163/0x460 [ 373.168246][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 373.174058][ C1] hrtimer_interrupt+0x380/0xaf0 [ 373.179019][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 373.184931][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 373.190568][ C1] [ 373.193524][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 373.199506][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 373.204621][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 373.228398][ C1] RSP: 0018:ffffc90003a33c48 EFLAGS: 00000246 [ 373.234489][ C1] RAX: 74098806719aca00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 373.242471][ C1] RDX: ffffc900108d3000 RSI: 000000000003ffff RDI: 0000000000040000 [ 373.253217][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 00018880220823cf [ 373.261188][ C1] R10: 0001ffffffffffff R11: ffff888022082000 R12: ffffffff878d2788 [ 373.269345][ C1] R13: 0000000000000001 R14: ffffffff878d27a0 R15: 0000000000000200 [ 373.277321][ C1] ? dump_stack+0x15e/0x19d [ 373.281849][ C1] ? dump_stack+0x173/0x19d [ 373.286461][ C1] should_fail+0x23c/0x250 [ 373.290883][ C1] should_fail_usercopy+0x16/0x20 [ 373.295908][ C1] _copy_from_user+0x1c/0xd0 [ 373.300533][ C1] iovec_from_user+0xc4/0x2d0 [ 373.305555][ C1] __import_iovec+0x49/0x270 [ 373.310161][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 373.315198][ C1] ? fsnotify_perm+0x59/0x2e0 [ 373.319890][ C1] import_iovec+0xb8/0xd0 [ 373.324234][ C1] do_preadv+0x109/0x230 [ 373.328559][ C1] ? __fget_light+0x219/0x260 [ 373.333253][ C1] ? fput+0x2d/0x130 [ 373.337150][ C1] ? ksys_write+0x157/0x180 [ 373.341655][ C1] __x64_sys_preadv+0x54/0x60 [ 373.346330][ C1] do_syscall_64+0x39/0x80 [ 373.350829][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 373.356734][ C1] RIP: 0033:0x466459 [ 373.360625][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 373.380246][ C1] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 373.388679][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 373.396828][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 373.404811][ C1] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.412784][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.420774][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 373.428750][ C1] ---[ end trace 215dd0f65ef481d9 ]--- [ 373.434559][ C1] ------------[ cut here ]------------ [ 373.440027][ C1] WARNING: CPU: 1 PID: 26949 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 373.450905][ C1] Modules linked in: [ 373.454804][ C1] CPU: 1 PID: 26949 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 373.465557][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.475610][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 373.481858][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 373.502192][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 373.508260][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff888022082000 [ 373.516233][ C1] RDX: 0000000000010000 RSI: 000000000000001a RDI: 0000000000000001 [ 373.524208][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 373.532180][ C1] R10: 0001ffffffffffff R11: ffff888022082000 R12: ffff88813bd1da58 [ 373.540148][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 373.548133][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 373.557072][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.563662][ C1] CR2: 0000001b2fe22000 CR3: 0000000109728000 CR4: 00000000001526e0 [ 373.571815][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.579796][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.588046][ C1] Call Trace: [ 373.591318][ C1] [ 373.594164][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 373.600079][ C1] __run_hrtimer+0x163/0x460 [ 373.604670][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 373.610477][ C1] hrtimer_interrupt+0x380/0xaf0 [ 373.615442][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 373.621340][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 373.626985][ C1] [ 373.629911][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 373.635897][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 373.641010][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 373.660702][ C1] RSP: 0018:ffffc90003a33c48 EFLAGS: 00000246 [ 373.666773][ C1] RAX: 74098806719aca00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 373.674763][ C1] RDX: ffffc900108d3000 RSI: 000000000003ffff RDI: 0000000000040000 [ 373.682737][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 00018880220823cf [ 373.690829][ C1] R10: 0001ffffffffffff R11: ffff888022082000 R12: ffffffff878d2788 [ 373.698798][ C1] R13: 0000000000000001 R14: ffffffff878d27a0 R15: 0000000000000200 [ 373.706789][ C1] ? dump_stack+0x15e/0x19d [ 373.711323][ C1] ? dump_stack+0x173/0x19d [ 373.716105][ C1] should_fail+0x23c/0x250 [ 373.720545][ C1] should_fail_usercopy+0x16/0x20 [ 373.725575][ C1] _copy_from_user+0x1c/0xd0 [ 373.730554][ C1] iovec_from_user+0xc4/0x2d0 [ 373.735358][ C1] __import_iovec+0x49/0x270 [ 373.739957][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 373.744978][ C1] ? fsnotify_perm+0x59/0x2e0 [ 373.750050][ C1] import_iovec+0xb8/0xd0 [ 373.754742][ C1] do_preadv+0x109/0x230 [ 373.759331][ C1] ? __fget_light+0x219/0x260 [ 373.764558][ C1] ? fput+0x2d/0x130 [ 373.768455][ C1] ? ksys_write+0x157/0x180 [ 373.772965][ C1] __x64_sys_preadv+0x54/0x60 [ 373.777857][ C1] do_syscall_64+0x39/0x80 [ 373.782405][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 373.788371][ C1] RIP: 0033:0x466459 [ 373.792458][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 373.812238][ C1] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 373.820653][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 373.828803][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 19:39:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xd}) [ 373.836776][ C1] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.844782][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.852774][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 373.860784][ C1] ---[ end trace 215dd0f65ef481da ]--- 19:39:25 executing program 4 (fault-call:4 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.966634][ C1] ------------[ cut here ]------------ [ 373.972108][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 373.982815][ C1] Modules linked in: [ 373.986709][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 373.996057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.006093][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 374.012079][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 374.031754][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 374.037817][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000020 RCX: ffff888100c2d000 [ 374.045776][ C1] RDX: 0000000080010001 RSI: 0000000000000020 RDI: 0000000000000001 [ 374.053844][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 374.061854][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 374.069819][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 374.077781][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 374.087046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.093630][ C1] CR2: 0000000000568008 CR3: 000000010b907000 CR4: 00000000001506e0 [ 374.101578][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 374.109625][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 374.117587][ C1] Call Trace: [ 374.120844][ C1] [ 374.123683][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 374.129491][ C1] __run_hrtimer+0x163/0x460 [ 374.134940][ C1] hrtimer_interrupt+0x380/0xaf0 [ 374.140208][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 374.146091][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 374.151717][ C1] [ 374.154625][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 374.160590][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 374.166115][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 374.185732][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 374.191778][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 374.199725][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.208208][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 374.216185][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 374.224153][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 374.232220][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 374.237152][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 374.242068][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 374.246997][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 374.252115][ C1] cpuidle_enter+0x3c/0x60 [ 374.256522][ C1] do_idle+0x193/0x230 [ 374.260583][ C1] cpu_startup_entry+0x15/0x20 [ 374.265353][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 374.271236][ C1] ---[ end trace 215dd0f65ef481db ]--- [ 374.277191][ C1] ------------[ cut here ]------------ [ 374.282648][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 374.293263][ C1] Modules linked in: [ 374.297175][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 374.306589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.316649][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 374.322653][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 374.342302][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 374.348471][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 374.356450][ C1] RDX: 0000000080010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 374.364559][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 374.372616][ C1] R10: 0001ffffffffffff R11: ffff888100c2d000 R12: ffff88813bd1da58 [ 374.380844][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 374.389353][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 374.398612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.405267][ C1] CR2: 0000000000568008 CR3: 000000010b907000 CR4: 00000000001506e0 [ 374.414025][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 374.422060][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 374.430132][ C1] Call Trace: [ 374.433955][ C1] [ 374.437243][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 374.443054][ C1] __run_hrtimer+0x163/0x460 [ 374.447693][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 374.456053][ C1] hrtimer_interrupt+0x380/0xaf0 [ 374.461000][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 374.466898][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 374.472564][ C1] [ 374.475622][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 374.481579][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 374.487107][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 374.507225][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 374.513296][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 374.521245][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.529291][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 374.537247][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 374.545288][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 374.553259][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 374.558186][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 374.563110][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 374.568054][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 374.573189][ C1] cpuidle_enter+0x3c/0x60 [ 374.577587][ C1] do_idle+0x193/0x230 [ 374.581756][ C1] cpu_startup_entry+0x15/0x20 [ 374.586503][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 374.592377][ C1] ---[ end trace 215dd0f65ef481dc ]--- [ 374.598240][ C1] ------------[ cut here ]------------ [ 374.603779][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 374.614288][ C1] Modules linked in: [ 374.618179][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 374.627699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.637752][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 374.643738][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 374.664025][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 374.670082][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 374.678099][ C1] RDX: 0000000080010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 374.686063][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 374.694126][ C1] R10: 0001ffffffffffff R11: 000000000000017e R12: ffff88813bd1da58 [ 374.702082][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 374.710062][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 374.719048][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.725609][ C1] CR2: 0000000000568008 CR3: 000000010b907000 CR4: 00000000001506e0 [ 374.733566][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 374.741612][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 374.749585][ C1] Call Trace: [ 374.752850][ C1] [ 374.755701][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 374.761500][ C1] __run_hrtimer+0x163/0x460 [ 374.766110][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 374.771908][ C1] hrtimer_interrupt+0x380/0xaf0 [ 374.776833][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 374.782710][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 374.788355][ C1] [ 374.791270][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 374.797252][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 374.802903][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 374.823308][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 374.829968][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 374.837922][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.845882][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 374.853902][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 374.861867][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 374.869836][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 374.874769][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 374.879687][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 374.884605][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 374.889784][ C1] cpuidle_enter+0x3c/0x60 [ 374.894305][ C1] do_idle+0x193/0x230 [ 374.898372][ C1] cpu_startup_entry+0x15/0x20 [ 374.903157][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 374.909082][ C1] ---[ end trace 215dd0f65ef481dd ]--- [ 375.014777][ C1] ------------[ cut here ]------------ [ 375.022880][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 375.033387][ C1] Modules linked in: [ 375.037279][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 375.046737][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.057418][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 375.063596][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 375.083507][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 375.089579][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff888100c2d000 [ 375.097543][ C1] RDX: 0000000080010001 RSI: 0000000000000019 RDI: 0000000000000001 [ 375.105520][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 375.113493][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 375.121458][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 375.129457][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 375.138380][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.145042][ C1] CR2: 0000000000568008 CR3: 0000000010cc1000 CR4: 00000000001506e0 [ 375.153082][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.161157][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.169132][ C1] Call Trace: [ 375.172388][ C1] [ 375.175223][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 375.181049][ C1] __run_hrtimer+0x163/0x460 [ 375.185640][ C1] hrtimer_interrupt+0x380/0xaf0 [ 375.190566][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 375.196642][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 375.202355][ C1] [ 375.205265][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 375.211318][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 375.216895][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 375.237100][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 375.243169][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.251403][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.259362][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 375.267339][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 375.275305][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 375.283272][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 375.288203][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 375.293136][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 375.298089][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 375.303192][ C1] cpuidle_enter+0x3c/0x60 [ 375.307587][ C1] do_idle+0x193/0x230 [ 375.311655][ C1] cpu_startup_entry+0x15/0x20 [ 375.316394][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 375.322288][ C1] ---[ end trace 215dd0f65ef481de ]--- [ 375.328237][ C1] ------------[ cut here ]------------ [ 375.333702][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 375.344317][ C1] Modules linked in: [ 375.348207][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 375.358974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.369144][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 375.375150][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 375.395368][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 375.401436][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 375.409399][ C1] RDX: 0000000080010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 375.417832][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 375.425834][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff88813bd1da58 [ 375.433818][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 375.441783][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 375.450802][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.457388][ C1] CR2: 0000000000568008 CR3: 0000000010cc1000 CR4: 00000000001506e0 [ 375.465364][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.473347][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.481324][ C1] Call Trace: [ 375.484596][ C1] [ 375.487429][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 375.493260][ C1] __run_hrtimer+0x163/0x460 [ 375.497847][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 375.503645][ C1] hrtimer_interrupt+0x380/0xaf0 [ 375.508606][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 375.514504][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 375.520145][ C1] [ 375.523077][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 375.529051][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 375.534591][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 375.554188][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 375.560260][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.568219][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.576186][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 375.584255][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 375.592233][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 375.600242][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 375.605183][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 375.610137][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 375.615068][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 375.620210][ C1] cpuidle_enter+0x3c/0x60 [ 375.624636][ C1] do_idle+0x193/0x230 [ 375.628715][ C1] cpu_startup_entry+0x15/0x20 [ 375.633495][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 375.639404][ C1] ---[ end trace 215dd0f65ef481df ]--- [ 375.645183][ C1] ------------[ cut here ]------------ [ 375.650648][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 375.661169][ C1] Modules linked in: [ 375.665060][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 375.674436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.684495][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 375.690489][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 375.710101][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 375.716164][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 375.724130][ C1] RDX: 0000000080010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 375.732090][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 375.740049][ C1] R10: 0001ffffffffffff R11: ffff888100c2d000 R12: ffff88813bd1da58 [ 375.748013][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 375.756004][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 375.764926][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.771499][ C1] CR2: 0000000000568008 CR3: 0000000010cc1000 CR4: 00000000001506e0 [ 375.779491][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.787454][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.795503][ C1] Call Trace: [ 375.798772][ C1] [ 375.801613][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 375.807421][ C1] __run_hrtimer+0x163/0x460 [ 375.812004][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 375.817804][ C1] hrtimer_interrupt+0x380/0xaf0 [ 375.822759][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 375.828737][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 375.834369][ C1] [ 375.837286][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 375.843258][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 375.848919][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 375.868694][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 375.874779][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.882742][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.890712][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 375.898688][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 375.906658][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 375.914626][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 375.919581][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 375.924537][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 375.929477][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 375.934674][ C1] cpuidle_enter+0x3c/0x60 [ 375.939092][ C1] do_idle+0x193/0x230 [ 375.943162][ C1] cpu_startup_entry+0x15/0x20 [ 375.947934][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 375.953848][ C1] ---[ end trace 215dd0f65ef481e0 ]--- [ 375.988208][T26964] FAULT_INJECTION: forcing a failure. [ 375.988208][T26964] name failslab, interval 1, probability 0, space 0, times 0 [ 376.000864][T26964] CPU: 1 PID: 26964 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 376.011080][T26964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.021136][T26964] Call Trace: [ 376.024598][T26964] dump_stack+0x137/0x19d [ 376.028943][T26964] should_fail+0x23c/0x250 [ 376.033361][T26964] __should_failslab+0x81/0x90 [ 376.038129][T26964] should_failslab+0x5/0x20 [ 376.042670][T26964] kmem_cache_alloc_node_trace+0x5b/0x310 [ 376.048482][T26964] ? mntput_no_expire+0x69/0x6a0 [ 376.053436][T26964] ? __kmalloc_node+0x30/0x40 [ 376.058317][T26964] __kmalloc_node+0x30/0x40 [ 376.062932][T26964] kvmalloc_node+0x81/0xf0 [ 376.067381][T26964] seq_read_iter+0x145/0x910 [ 376.072073][T26964] ? aa_file_perm+0x125/0xe60 [ 376.076797][T26964] ? path_openat+0x191f/0x21b0 [ 376.081696][T26964] seq_read+0x221/0x260 [ 376.085873][T26964] ? seq_open+0xf0/0xf0 [ 376.090080][T26964] proc_reg_read+0x119/0x1b0 [ 376.094771][T26964] do_iter_read+0x2be/0x4b0 [ 376.099283][T26964] do_preadv+0x13b/0x230 [ 376.103529][T26964] ? fput+0x2d/0x130 [ 376.107468][T26964] ? ksys_write+0x157/0x180 [ 376.111995][T26964] __x64_sys_preadv+0x54/0x60 [ 376.116798][T26964] do_syscall_64+0x39/0x80 [ 376.121269][T26964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.127192][T26964] RIP: 0033:0x466459 [ 376.131079][T26964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 376.150714][T26964] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 376.159126][T26964] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 376.167143][T26964] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 376.175739][T26964] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 376.183749][T26964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.191810][T26964] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 376.200133][ C1] ------------[ cut here ]------------ [ 376.205600][ C1] WARNING: CPU: 1 PID: 26964 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 376.216553][ C1] Modules linked in: [ 376.220440][ C1] CPU: 1 PID: 26964 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 376.230585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.240636][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 376.246726][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 376.266353][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 376.272421][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000021 RCX: ffff88807663f000 [ 376.280388][ C1] RDX: 0000000000010001 RSI: 0000000000000021 RDI: 0000000000000001 [ 376.288365][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 376.296360][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 376.304437][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 376.312425][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 376.321367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.327982][ C1] CR2: 0000001b2fe22000 CR3: 000000010f82b000 CR4: 00000000001506e0 [ 376.335973][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.343947][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.351917][ C1] Call Trace: [ 376.355188][ C1] [ 376.358032][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 376.363843][ C1] __run_hrtimer+0x163/0x460 [ 376.368440][ C1] hrtimer_interrupt+0x380/0xaf0 [ 376.373379][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 376.379294][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 376.384929][ C1] [ 376.387856][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 376.393925][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 376.399758][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 376.419450][ C1] RSP: 0018:ffffc900048139c8 EFLAGS: 00000202 [ 376.425520][ C1] RAX: 0000000000000000 RBX: ffff88807663f000 RCX: ffffffff85a00e37 [ 376.433488][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 376.441486][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.449465][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 376.457434][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.465415][ C1] ? native_iret+0x7/0x7 [ 376.469694][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 376.475245][ C1] irqentry_exit+0x2a/0x40 [ 376.479758][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 376.485235][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 376.490357][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 376.509967][ C1] RSP: 0018:ffffc90004813aa8 EFLAGS: 00000287 [ 376.516053][ C1] RAX: ab24524b5177e100 RBX: 00000000ffffffff RCX: 0000000000040000 [ 376.524131][ C1] RDX: ffffc900108d3000 RSI: 000000000001b587 RDI: 000000000001b588 [ 376.532104][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 000188807663f3cf [ 376.540088][ C1] R10: 0001ffffffffffff R11: ffff88807663f000 R12: ffffffff8779af68 [ 376.548149][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 376.556148][ C1] ? dump_stack+0x15e/0x19d [ 376.560673][ C1] ? dump_stack+0x173/0x19d [ 376.565192][ C1] should_fail+0x23c/0x250 [ 376.569650][ C1] __should_failslab+0x81/0x90 [ 376.574424][ C1] should_failslab+0x5/0x20 [ 376.578936][ C1] kmem_cache_alloc_node_trace+0x5b/0x310 [ 376.584657][ C1] ? mntput_no_expire+0x69/0x6a0 [ 376.589601][ C1] ? __kmalloc_node+0x30/0x40 [ 376.594298][ C1] __kmalloc_node+0x30/0x40 [ 376.598799][ C1] kvmalloc_node+0x81/0xf0 [ 376.603851][ C1] seq_read_iter+0x145/0x910 [ 376.608459][ C1] ? aa_file_perm+0x125/0xe60 [ 376.613137][ C1] ? path_openat+0x191f/0x21b0 [ 376.617949][ C1] seq_read+0x221/0x260 [ 376.622119][ C1] ? seq_open+0xf0/0xf0 [ 376.626302][ C1] proc_reg_read+0x119/0x1b0 [ 376.630915][ C1] do_iter_read+0x2be/0x4b0 [ 376.635452][ C1] do_preadv+0x13b/0x230 [ 376.639731][ C1] ? fput+0x2d/0x130 [ 376.643628][ C1] ? ksys_write+0x157/0x180 [ 376.648150][ C1] __x64_sys_preadv+0x54/0x60 [ 376.652842][ C1] do_syscall_64+0x39/0x80 [ 376.657259][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.663173][ C1] RIP: 0033:0x466459 [ 376.667082][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 376.686696][ C1] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 376.695122][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 376.703116][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 376.711098][ C1] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 376.719069][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.727039][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 376.735032][ C1] ---[ end trace 215dd0f65ef481e1 ]--- [ 376.740900][ C1] ------------[ cut here ]------------ [ 376.746445][ C1] WARNING: CPU: 1 PID: 26964 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 376.757524][ C1] Modules linked in: [ 376.761421][ C1] CPU: 1 PID: 26964 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 376.771596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.781750][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 376.787742][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 376.807445][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 376.813512][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000021 RCX: ffff88807663f000 [ 376.821483][ C1] RDX: 0000000000010001 RSI: 0000000000000021 RDI: 0000000000000001 [ 376.829449][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 376.837423][ C1] R10: 0001ffffffffffff R11: ffff88807663f000 R12: ffff88813bd1da58 [ 376.845489][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 376.853450][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 376.862370][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.868990][ C1] CR2: 0000001b2fe22000 CR3: 000000010f82b000 CR4: 00000000001506e0 [ 376.877061][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 376.885026][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 376.892995][ C1] Call Trace: [ 376.896282][ C1] [ 376.899152][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 376.904994][ C1] __run_hrtimer+0x163/0x460 [ 376.909586][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 376.915566][ C1] hrtimer_interrupt+0x380/0xaf0 [ 376.920506][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 376.926418][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 376.932082][ C1] [ 376.935012][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 376.940992][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 376.946800][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 376.966407][ C1] RSP: 0018:ffffc900048139c8 EFLAGS: 00000202 [ 376.972506][ C1] RAX: 0000000000000000 RBX: ffff88807663f000 RCX: ffffffff85a00e37 [ 376.981169][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 376.989160][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.997139][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 377.005124][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.013097][ C1] ? native_iret+0x7/0x7 [ 377.017335][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 377.022873][ C1] irqentry_exit+0x2a/0x40 [ 377.027324][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 377.032777][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 377.037885][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 377.057696][ C1] RSP: 0018:ffffc90004813aa8 EFLAGS: 00000287 [ 377.063761][ C1] RAX: ab24524b5177e100 RBX: 00000000ffffffff RCX: 0000000000040000 [ 377.071736][ C1] RDX: ffffc900108d3000 RSI: 000000000001b587 RDI: 000000000001b588 [ 377.079711][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 000188807663f3cf [ 377.087694][ C1] R10: 0001ffffffffffff R11: ffff88807663f000 R12: ffffffff8779af68 [ 377.095786][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 377.103764][ C1] ? dump_stack+0x15e/0x19d [ 377.108303][ C1] ? dump_stack+0x173/0x19d [ 377.112816][ C1] should_fail+0x23c/0x250 [ 377.117228][ C1] __should_failslab+0x81/0x90 [ 377.122336][ C1] should_failslab+0x5/0x20 [ 377.126835][ C1] kmem_cache_alloc_node_trace+0x5b/0x310 [ 377.132563][ C1] ? mntput_no_expire+0x69/0x6a0 [ 377.137494][ C1] ? __kmalloc_node+0x30/0x40 [ 377.142161][ C1] __kmalloc_node+0x30/0x40 [ 377.146663][ C1] kvmalloc_node+0x81/0xf0 [ 377.151102][ C1] seq_read_iter+0x145/0x910 [ 377.159242][ C1] ? aa_file_perm+0x125/0xe60 [ 377.163910][ C1] ? path_openat+0x191f/0x21b0 [ 377.168672][ C1] seq_read+0x221/0x260 [ 377.172843][ C1] ? seq_open+0xf0/0xf0 [ 377.176996][ C1] proc_reg_read+0x119/0x1b0 [ 377.181595][ C1] do_iter_read+0x2be/0x4b0 [ 377.186104][ C1] do_preadv+0x13b/0x230 [ 377.190345][ C1] ? fput+0x2d/0x130 [ 377.194259][ C1] ? ksys_write+0x157/0x180 [ 377.198767][ C1] __x64_sys_preadv+0x54/0x60 [ 377.203460][ C1] do_syscall_64+0x39/0x80 [ 377.207874][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.213766][ C1] RIP: 0033:0x466459 [ 377.217654][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.237265][ C1] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 377.245682][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 377.253646][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 377.261608][ C1] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.269575][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.277542][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 377.285730][ C1] ---[ end trace 215dd0f65ef481e2 ]--- [ 377.292103][ C1] ------------[ cut here ]------------ [ 377.297551][ C1] WARNING: CPU: 1 PID: 26964 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 377.308409][ C1] Modules linked in: [ 377.312294][ C1] CPU: 1 PID: 26964 Comm: syz-executor.4 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 377.322531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.332670][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 377.338657][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 377.358265][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 377.364335][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000021 RCX: ffff88807663f000 [ 377.372326][ C1] RDX: 0000000000010001 RSI: 0000000000000021 RDI: 0000000000000001 [ 377.380399][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 377.388385][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 377.396459][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 377.405227][ C1] FS: 00007f145af21700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 377.414163][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.420768][ C1] CR2: 0000001b2fe22000 CR3: 000000010f82b000 CR4: 00000000001506e0 [ 377.431361][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.439330][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.447298][ C1] Call Trace: [ 377.450574][ C1] [ 377.453419][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 377.459242][ C1] __run_hrtimer+0x163/0x460 [ 377.464011][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 377.470167][ C1] hrtimer_interrupt+0x380/0xaf0 [ 377.475129][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 377.481028][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 377.486757][ C1] [ 377.489679][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 377.495683][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 377.501492][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 377.521274][ C1] RSP: 0018:ffffc900048139c8 EFLAGS: 00000202 [ 377.527348][ C1] RAX: 0000000000000000 RBX: ffff88807663f000 RCX: ffffffff85a00e37 [ 377.535313][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 377.543536][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.551514][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 377.559490][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.567544][ C1] ? native_iret+0x7/0x7 [ 377.571783][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 377.577339][ C1] irqentry_exit+0x2a/0x40 [ 377.581838][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 377.587293][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 377.592399][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 377.615587][ C1] RSP: 0018:ffffc90004813aa8 EFLAGS: 00000287 [ 377.622105][ C1] RAX: ab24524b5177e100 RBX: 00000000ffffffff RCX: 0000000000040000 [ 377.630428][ C1] RDX: ffffc900108d3000 RSI: 000000000001b587 RDI: 000000000001b588 [ 377.638415][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 000188807663f3cf [ 377.646469][ C1] R10: 0001ffffffffffff R11: ffff88807663f000 R12: ffffffff8779af68 [ 377.654532][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 377.662521][ C1] ? dump_stack+0x15e/0x19d [ 377.667037][ C1] ? dump_stack+0x173/0x19d [ 377.671553][ C1] should_fail+0x23c/0x250 [ 377.675979][ C1] __should_failslab+0x81/0x90 [ 377.680736][ C1] should_failslab+0x5/0x20 [ 377.685242][ C1] kmem_cache_alloc_node_trace+0x5b/0x310 [ 377.691392][ C1] ? mntput_no_expire+0x69/0x6a0 [ 377.696379][ C1] ? __kmalloc_node+0x30/0x40 [ 377.702019][ C1] __kmalloc_node+0x30/0x40 [ 377.706530][ C1] kvmalloc_node+0x81/0xf0 [ 377.710952][ C1] seq_read_iter+0x145/0x910 [ 377.715535][ C1] ? aa_file_perm+0x125/0xe60 [ 377.720413][ C1] ? path_openat+0x191f/0x21b0 [ 377.725171][ C1] seq_read+0x221/0x260 [ 377.729350][ C1] ? seq_open+0xf0/0xf0 [ 377.736983][ C1] proc_reg_read+0x119/0x1b0 [ 377.741571][ C1] do_iter_read+0x2be/0x4b0 [ 377.746433][ C1] do_preadv+0x13b/0x230 [ 377.750841][ C1] ? fput+0x2d/0x130 [ 377.754727][ C1] ? ksys_write+0x157/0x180 [ 377.759423][ C1] __x64_sys_preadv+0x54/0x60 [ 377.764121][ C1] do_syscall_64+0x39/0x80 [ 377.768547][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.774705][ C1] RIP: 0033:0x466459 [ 377.778613][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 377.798236][ C1] RSP: 002b:00007f145af21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 377.806653][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 377.814626][ C1] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 377.822676][ C1] RBP: 00007f145af211d0 R08: 0000000000000000 R09: 0000000000000000 [ 377.830656][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:39:28 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0xa, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:28 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x3, 0x2, 'syz0\x00'}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x100000001, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000280)="4a8bd65695a8e7cd09421cd82957ae6cfa1d3a205def4560e3ae1f731ac0b9083d72f4afed216fac5d040fe6c3e35bdbb955116809bff1915c1ba4e005b271edefafc28e44632589735e423d7e5f90d40be48855d439b37d59f2f283a58dd8545d566e1ea76c42cf21534d790c405b54707604e401e42d932e3ee461f2375eacb190b731167d8fb2ff12146eb33919262903afd4f6b161fc0aeb3b44df01c421db18ccc96a4a7d458fba959f417706771ad8bc3164a16245e2e74f9f2f767f3337f340cba34554fe49be561c7e84b3bc2c24", 0xd2, 0xffffffff}], 0x48080, &(0x7f0000000380)={[{@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@noheap='noheap'}, {@data_flush='data_flush'}, {@background_gc_off='background_gc=off'}, {@usrquota={'usrquota'}}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@permit_directio='permit_directio'}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="a7f386dd4c8cefe91cc39b9d5f416cbacb07fa98565c39bc52d2ced12a46fd88abcf4c6a8bf70bc9c41c9ff0db32f64bf3ce82e61ee8eb0697c7ca2620647947ecf5224dbb9587da924fb7e7fdf8ed05d805f26c3f49882a3675e67592712ef88b13f798abeca76d9211f0246f4c2ae101dcc09acd9760139cf106f06785babc7220675c558edf61a24caa8b7121aaba1e70b995cc39ca7064450567bed7ae9253809579a9cb5a", 0xa7}, {&(0x7f0000000580)="c9481fd9d4a5c1778c853be66342712199a0b87620a93db12b6028fe576699aed22f608f3b40eea5b9f900fc2fd7e981bd6f9dafdb8fc420f11cea65c9a29d35550bca44e7a87560a3961bd9faa61a431436d6600045", 0x56}, {&(0x7f0000000600)="bc65761e9a4221113787cc170fa7", 0xe}, {&(0x7f0000000640)="7ce04f1ae8b8935dcc520807393b6724a35c86b14b7e45efee1c744856154ae3d1fc2d7117cd221c00f752f694c837cd50277f560c7028b491abf69c4dac95061dfba2c7490aad8d2b2033c3530715d885054cefca849301dafb0fb620470f6eae319742ef2277fc456a3e638450ef688298d000130b448f7ec15f1255646b8d3f5c321e165534620c0425a9323c13b483e64bec1ae24dcb2a810eb2ee32fb0bf93667910b859185bfd8546b9f34c0", 0xaf}, {&(0x7f0000000700)="459d6848f8b5f69cc141856933acd5c0a684df780fc242d81f51f47617a8012f13d77a80d9f9e012579225ee6bc5ca24e7f4fe17157168d3db0ab897353faf1c96a4163511dff3f4af7f228570a109c90e9a6de214231150acc493dcded062b6109ed6b4ca0b614f65f72b09c9fe8f7ad7ef6225e358bd3e9cbe8678ec8daaa57d8fb816defc2d19c4f878f9f5896f0be4b42d9b78a90f24539e8fd38ae1930de5be8ae4a80cce98dbffcb4ea06c35bec29ec19855be48d783bb866db29a65b9fb5b5f8f12522f3cb6323207360d506e9e68c8de3264f3f8094c0878b22723c637", 0xe1}], 0x5, &(0x7f0000000880)=[{0x1010, 0x88, 0x3, "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"}, {0x1010, 0x103, 0x7fff, "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"}, {0x28, 0x118, 0x4, "5707eae8b0f8ac9b922905dac759b2133d"}, {0x1010, 0x0, 0x2, "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"}, {0x20, 0x10c, 0x71, "924f72a2ac0454906e2902"}, {0x60, 0x10e, 0x9, "1a3b27e44aafb307772358b6c3df637ac631705b155ba7257026baf35d117f20fd52ffed4c016cb32fdcbdf327cdb0dd4a5f1b01c3eefe6d65681a1aea5fd8530b0b2880e6c006138f462e586db53d63"}], 0x30d8}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FICLONE(r3, 0x40049409, r4) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x6d0000, 0x2}, 0x18) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000480)={'veth0\x00', {0x2, 0x0, @initdev}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0xfd, 0x50000}]}) syz_read_part_table(0x0, 0x0, &(0x7f0000000000)) [ 377.838634][ C1] R13: 00007ffc3992575f R14: 00007f145af21300 R15: 0000000000022000 [ 377.846609][ C1] ---[ end trace 215dd0f65ef481e3 ]--- 19:39:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xe}) [ 377.895419][T26983] loop1: detected capacity change from 0 to 8192 [ 377.903669][T26983] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 377.910485][T26983] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 377.919118][T26983] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 377.927042][T26983] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 377.950016][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 377.950029][ T36] audit: type=1326 audit(1617392369.030:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 377.956681][ C1] ------------[ cut here ]------------ [ 377.956689][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 377.956724][ C1] Modules linked in: 19:39:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 377.956733][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 377.956753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.956764][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 377.956787][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 19:39:29 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0xb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 377.956803][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 377.956844][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000028 RCX: ffff888100cd9000 [ 377.956857][ C1] RDX: 0000000080010001 RSI: 0000000000000028 RDI: 0000000000000001 [ 377.956869][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 377.956882][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 377.956894][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 377.956906][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 377.956920][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.956933][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001526e0 [ 377.956947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.956957][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.956969][ C1] Call Trace: [ 377.956975][ C1] [ 377.956981][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 377.957003][ C1] __run_hrtimer+0x163/0x460 19:39:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x10}) [ 377.957033][ C1] hrtimer_interrupt+0x380/0xaf0 [ 377.957073][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 377.957097][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 377.957118][ C1] [ 377.957123][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 377.957141][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 377.957172][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 19:39:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x200000ca}], 0x1, 0x0, 0x0) 19:39:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 377.957187][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 377.957200][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 377.957211][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 377.957222][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 377.957231][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 377.957245][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.957258][ C1] ? console_unlock+0x8a3/0xb20 [ 377.957282][ C1] ? down_trylock+0x3a/0x50 [ 377.957314][ C1] ? __printk_safe_exit+0x5/0x10 [ 377.957333][ C1] vprintk_emit+0x131/0x3e0 [ 377.957350][ C1] vprintk_default+0x22/0x30 [ 377.957377][ C1] vprintk_func+0x11b/0x120 [ 377.957396][ C1] printk+0x62/0x82 [ 377.957415][ C1] kauditd_hold_skb+0x12d/0x140 [ 377.957450][ C1] ? kauditd_send_queue+0x290/0x290 [ 377.957469][ C1] ? auditd_conn_free+0xb0/0xb0 [ 377.957488][ C1] kauditd_send_queue+0x68/0x290 [ 377.957505][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 377.957529][ C1] kauditd_thread+0x3cd/0x6d0 [ 377.957547][ C1] ? init_wait_entry+0x30/0x30 [ 377.957564][ C1] ? audit_log+0xc0/0xc0 [ 377.957593][ C1] kthread+0x20b/0x230 [ 377.957613][ C1] ? audit_log+0xc0/0xc0 [ 377.957631][ C1] ? kthread_blkcg+0x80/0x80 [ 377.957651][ C1] ret_from_fork+0x1f/0x30 [ 377.957674][ C1] ---[ end trace 215dd0f65ef481e4 ]--- 19:39:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x11}) [ 378.344761][ T36] audit: type=1326 audit(1617392369.700:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 378.366939][ T36] audit: type=1326 audit(1617392369.700:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 378.389502][ C1] ------------[ cut here ]------------ 19:39:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 378.389519][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 378.389553][ C1] Modules linked in: [ 378.389563][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 378.389583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.389593][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 19:39:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x7ffff000}], 0x1, 0x0, 0x0) [ 378.389617][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 378.389633][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 378.389647][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 378.389660][ C1] RDX: 0000000080010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 378.389672][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 378.389692][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 378.389703][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 378.389715][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 378.389730][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.389742][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001526e0 [ 378.389758][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.389768][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.389781][ C1] Call Trace: [ 378.389795][ C1] [ 378.389802][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 378.389825][ C1] __run_hrtimer+0x163/0x460 [ 378.389848][ C1] hrtimer_interrupt+0x380/0xaf0 [ 378.389880][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 378.389905][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 378.389949][ C1] [ 378.389965][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 378.389984][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 378.390022][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 378.390037][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 378.390052][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 378.390064][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 378.390076][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 378.390088][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 378.390118][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.390131][ C1] ? console_unlock+0x8a3/0xb20 [ 378.390155][ C1] ? down_trylock+0x3a/0x50 [ 378.390195][ C1] ? __printk_safe_exit+0x5/0x10 [ 378.390215][ C1] vprintk_emit+0x131/0x3e0 [ 378.390233][ C1] vprintk_default+0x22/0x30 [ 378.390252][ C1] vprintk_func+0x11b/0x120 [ 378.390285][ C1] printk+0x62/0x82 [ 378.390322][ C1] kauditd_hold_skb+0x12d/0x140 [ 378.390354][ C1] ? kauditd_send_queue+0x290/0x290 [ 378.390387][ C1] ? auditd_conn_free+0xb0/0xb0 [ 378.390407][ C1] kauditd_send_queue+0x68/0x290 [ 378.390442][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 378.390468][ C1] kauditd_thread+0x3cd/0x6d0 [ 378.390488][ C1] ? init_wait_entry+0x30/0x30 [ 378.390511][ C1] ? audit_log+0xc0/0xc0 [ 378.390528][ C1] kthread+0x20b/0x230 [ 378.390565][ C1] ? audit_log+0xc0/0xc0 [ 378.390584][ C1] ? kthread_blkcg+0x80/0x80 [ 378.390604][ C1] ret_from_fork+0x1f/0x30 [ 378.390647][ C1] ---[ end trace 215dd0f65ef481e5 ]--- [ 378.456037][ C1] ------------[ cut here ]------------ [ 378.456047][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 378.456097][ C1] Modules linked in: [ 378.456107][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 378.456125][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.456136][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 378.456159][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 378.456206][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 378.456220][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 378.456232][ C1] RDX: 0000000080010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 378.456243][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 378.456255][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 378.456268][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 378.456280][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 378.456296][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.456309][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001526e0 [ 378.456326][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.456337][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.456350][ C1] Call Trace: [ 378.456356][ C1] [ 378.456363][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 378.456403][ C1] __run_hrtimer+0x163/0x460 [ 378.456422][ C1] ? clockevents_program_event+0x195/0x1e0 [ 378.456441][ C1] hrtimer_interrupt+0x380/0xaf0 [ 378.456474][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 378.456499][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 378.456523][ C1] [ 378.456528][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 378.456563][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 378.456583][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 378.456598][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 378.456611][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 378.456623][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 378.456636][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 378.456647][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 378.456658][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.456670][ C1] ? console_unlock+0x8a3/0xb20 [ 378.456711][ C1] ? down_trylock+0x3a/0x50 [ 378.456729][ C1] ? __printk_safe_exit+0x5/0x10 [ 378.456748][ C1] vprintk_emit+0x131/0x3e0 [ 378.456766][ C1] vprintk_default+0x22/0x30 [ 378.456804][ C1] vprintk_func+0x11b/0x120 [ 378.456823][ C1] printk+0x62/0x82 [ 378.456841][ C1] kauditd_hold_skb+0x12d/0x140 [ 378.456861][ C1] ? kauditd_send_queue+0x290/0x290 [ 378.456910][ C1] ? auditd_conn_free+0xb0/0xb0 [ 378.456929][ C1] kauditd_send_queue+0x68/0x290 [ 378.456957][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 378.456993][ C1] kauditd_thread+0x3cd/0x6d0 [ 378.457011][ C1] ? init_wait_entry+0x30/0x30 [ 378.457033][ C1] ? audit_log+0xc0/0xc0 [ 378.457052][ C1] kthread+0x20b/0x230 [ 378.457067][ C1] ? audit_log+0xc0/0xc0 [ 378.457081][ C1] ? kthread_blkcg+0x80/0x80 [ 378.457096][ C1] ret_from_fork+0x1f/0x30 [ 378.457113][ C1] ---[ end trace 215dd0f65ef481e6 ]--- [ 379.120609][ T36] audit: type=1326 audit(1617392369.700:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 379.142902][ T36] audit: type=1326 audit(1617392369.700:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 379.165474][ T36] audit: type=1326 audit(1617392369.700:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 379.188053][ C1] ------------[ cut here ]------------ [ 379.188061][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 379.188110][ C1] Modules linked in: [ 379.188121][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 379.188142][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.188154][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 379.188178][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 379.188196][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 379.188223][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 379.188235][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 379.188247][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 379.188259][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 379.188271][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 379.188284][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 379.188302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.188315][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001506e0 [ 379.188331][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.188342][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.188368][ C1] Call Trace: [ 379.188374][ C1] [ 379.188381][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 379.188402][ C1] __run_hrtimer+0x163/0x460 [ 379.188439][ C1] hrtimer_interrupt+0x380/0xaf0 [ 379.188461][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 379.188503][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 379.188528][ C1] [ 379.188534][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 379.188554][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 379.188575][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 379.188589][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 379.188602][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 379.188613][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 379.188645][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 379.188657][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 379.188670][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.188684][ C1] ? console_unlock+0x8a3/0xb20 [ 379.188718][ C1] ? down_trylock+0x3a/0x50 [ 379.188737][ C1] ? __printk_safe_exit+0x5/0x10 [ 379.188768][ C1] vprintk_emit+0x131/0x3e0 [ 379.188786][ C1] vprintk_default+0x22/0x30 [ 379.188806][ C1] vprintk_func+0x11b/0x120 [ 379.188835][ C1] printk+0x62/0x82 [ 379.188853][ C1] kauditd_hold_skb+0x12d/0x140 [ 379.188873][ C1] ? kauditd_send_queue+0x290/0x290 [ 379.188895][ C1] ? auditd_conn_free+0xb0/0xb0 [ 379.188933][ C1] kauditd_send_queue+0x68/0x290 [ 379.188953][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 379.188976][ C1] kauditd_thread+0x3cd/0x6d0 [ 379.188996][ C1] ? init_wait_entry+0x30/0x30 [ 379.189032][ C1] ? audit_log+0xc0/0xc0 [ 379.189052][ C1] kthread+0x20b/0x230 [ 379.189073][ C1] ? audit_log+0xc0/0xc0 [ 379.189114][ C1] ? kthread_blkcg+0x80/0x80 [ 379.189135][ C1] ret_from_fork+0x1f/0x30 [ 379.189168][ C1] ---[ end trace 215dd0f65ef481e7 ]--- [ 379.254781][ C1] ------------[ cut here ]------------ [ 379.254791][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 379.254844][ C1] Modules linked in: [ 379.254854][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 379.254881][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.254894][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 379.254915][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 379.254930][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 379.254943][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 379.254956][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 379.254969][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 379.254983][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 379.254995][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 379.255022][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 379.255038][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.255051][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001506e0 [ 379.255066][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.255078][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.255090][ C1] Call Trace: [ 379.255096][ C1] [ 379.255102][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 379.255122][ C1] __run_hrtimer+0x163/0x460 [ 379.255146][ C1] ? expire_timers+0x245/0x260 [ 379.255161][ C1] hrtimer_interrupt+0x380/0xaf0 [ 379.255202][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 379.255226][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 379.255251][ C1] [ 379.255256][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 379.255275][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 379.255322][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 379.255338][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 379.255357][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 379.255370][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 379.255380][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 379.255392][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 379.255402][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.255414][ C1] ? console_unlock+0x8a3/0xb20 [ 379.255436][ C1] ? down_trylock+0x3a/0x50 [ 379.255456][ C1] ? __printk_safe_exit+0x5/0x10 [ 379.255478][ C1] vprintk_emit+0x131/0x3e0 [ 379.255517][ C1] vprintk_default+0x22/0x30 [ 379.255536][ C1] vprintk_func+0x11b/0x120 [ 379.255557][ C1] printk+0x62/0x82 [ 379.255587][ C1] kauditd_hold_skb+0x12d/0x140 [ 379.255627][ C1] ? kauditd_send_queue+0x290/0x290 [ 379.255646][ C1] ? auditd_conn_free+0xb0/0xb0 [ 379.255666][ C1] kauditd_send_queue+0x68/0x290 [ 379.255687][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 379.255718][ C1] kauditd_thread+0x3cd/0x6d0 [ 379.255756][ C1] ? init_wait_entry+0x30/0x30 [ 379.255779][ C1] ? audit_log+0xc0/0xc0 [ 379.255797][ C1] kthread+0x20b/0x230 [ 379.255816][ C1] ? audit_log+0xc0/0xc0 [ 379.255845][ C1] ? kthread_blkcg+0x80/0x80 [ 379.255879][ C1] ret_from_fork+0x1f/0x30 [ 379.255902][ C1] ---[ end trace 215dd0f65ef481e8 ]--- [ 379.639157][ C1] ------------[ cut here ]------------ [ 379.639166][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 379.639218][ C1] Modules linked in: [ 379.639229][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 379.639266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.639276][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 379.639297][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 379.639313][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 379.639327][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 379.639338][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 379.639358][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 379.639370][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 379.639383][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 379.639402][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 379.639417][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.639430][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001506e0 [ 379.639447][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.639460][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.639473][ C1] Call Trace: [ 379.639480][ C1] [ 379.639488][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 379.639522][ C1] __run_hrtimer+0x163/0x460 [ 379.639540][ C1] ? clockevents_program_event+0x195/0x1e0 [ 379.639562][ C1] hrtimer_interrupt+0x380/0xaf0 [ 379.639594][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 379.639619][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 379.639641][ C1] [ 379.639646][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 379.639663][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 379.639683][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 379.639705][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 379.639720][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 379.639732][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 379.639742][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 379.639754][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 379.639767][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.639780][ C1] ? console_unlock+0x8a3/0xb20 [ 379.639824][ C1] ? down_trylock+0x3a/0x50 [ 379.639842][ C1] ? __printk_safe_exit+0x5/0x10 [ 379.639869][ C1] vprintk_emit+0x131/0x3e0 [ 379.639889][ C1] vprintk_default+0x22/0x30 [ 379.639908][ C1] vprintk_func+0x11b/0x120 [ 379.639935][ C1] printk+0x62/0x82 [ 379.639954][ C1] kauditd_hold_skb+0x12d/0x140 [ 379.639975][ C1] ? kauditd_send_queue+0x290/0x290 [ 379.639994][ C1] ? auditd_conn_free+0xb0/0xb0 [ 379.640014][ C1] kauditd_send_queue+0x68/0x290 [ 379.640039][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 379.640061][ C1] kauditd_thread+0x3cd/0x6d0 [ 379.640082][ C1] ? init_wait_entry+0x30/0x30 [ 379.640105][ C1] ? audit_log+0xc0/0xc0 [ 379.640141][ C1] kthread+0x20b/0x230 [ 379.640159][ C1] ? audit_log+0xc0/0xc0 [ 379.640176][ C1] ? kthread_blkcg+0x80/0x80 [ 379.640196][ C1] ret_from_fork+0x1f/0x30 [ 379.640219][ C1] ---[ end trace 215dd0f65ef481e9 ]--- [ 380.319948][ T36] audit: type=1326 audit(1617392369.700:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 380.342878][ T36] audit: type=1326 audit(1617392369.700:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 380.365019][ T36] audit: type=1326 audit(1617392369.700:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 [ 380.387801][ C1] ------------[ cut here ]------------ [ 380.387810][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 380.387843][ C1] Modules linked in: [ 380.387853][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 380.387872][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.387898][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 380.387921][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 380.387938][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 380.387952][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 380.387964][ C1] RDX: 0000000080010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 380.387975][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 380.388001][ C1] R10: 0001ffffffffffff R11: 00000000000002e3 R12: ffff88813bd1da58 [ 380.388013][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 380.388027][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 380.388039][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.388050][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001506e0 [ 380.388068][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.388081][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.388093][ C1] Call Trace: [ 380.388100][ C1] [ 380.388108][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 380.388131][ C1] __run_hrtimer+0x163/0x460 [ 380.388167][ C1] ? file_free_rcu+0x73/0x80 [ 380.388186][ C1] hrtimer_interrupt+0x380/0xaf0 [ 380.388205][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 380.388227][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 380.388258][ C1] [ 380.388264][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 380.388284][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 380.388309][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 380.388330][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 380.388346][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 380.388358][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 380.388370][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 380.388382][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 380.388395][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.388444][ C1] ? console_unlock+0x8a3/0xb20 [ 380.388467][ C1] ? down_trylock+0x3a/0x50 [ 380.388485][ C1] ? __printk_safe_exit+0x5/0x10 [ 380.388527][ C1] vprintk_emit+0x131/0x3e0 [ 380.388552][ C1] vprintk_default+0x22/0x30 [ 380.388571][ C1] vprintk_func+0x11b/0x120 [ 380.388600][ C1] printk+0x62/0x82 [ 380.388620][ C1] kauditd_hold_skb+0x12d/0x140 [ 380.388642][ C1] ? kauditd_send_queue+0x290/0x290 [ 380.388683][ C1] ? auditd_conn_free+0xb0/0xb0 [ 380.388712][ C1] kauditd_send_queue+0x68/0x290 [ 380.388733][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 380.388755][ C1] kauditd_thread+0x3cd/0x6d0 [ 380.388788][ C1] ? init_wait_entry+0x30/0x30 [ 380.388812][ C1] ? audit_log+0xc0/0xc0 [ 380.388832][ C1] kthread+0x20b/0x230 [ 380.388861][ C1] ? audit_log+0xc0/0xc0 [ 380.388879][ C1] ? kthread_blkcg+0x80/0x80 [ 380.388898][ C1] ret_from_fork+0x1f/0x30 [ 380.388921][ C1] ---[ end trace 215dd0f65ef481ea ]--- [ 380.455336][ C1] ------------[ cut here ]------------ [ 380.455343][ C1] WARNING: CPU: 1 PID: 36 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 380.455380][ C1] Modules linked in: [ 380.455386][ C1] CPU: 1 PID: 36 Comm: kauditd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 380.455396][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.455402][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 380.455415][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 380.455424][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 380.455431][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff888100cd9000 [ 380.455438][ C1] RDX: 0000000000010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 380.455444][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 380.455450][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 380.455476][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 380.455483][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 380.455491][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.455498][ C1] CR2: 0000000000568000 CR3: 0000000023130000 CR4: 00000000001506e0 [ 380.455507][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.455515][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.455525][ C1] Call Trace: [ 380.455529][ C1] [ 380.455533][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 380.455545][ C1] __run_hrtimer+0x163/0x460 [ 380.455555][ C1] ? clockevents_program_event+0x195/0x1e0 [ 380.455566][ C1] hrtimer_interrupt+0x380/0xaf0 [ 380.455583][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 380.455614][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 380.455627][ C1] [ 380.455636][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 380.455647][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 380.455658][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 380.455687][ C1] RSP: 0018:ffffc90000d77c10 EFLAGS: 00000293 [ 380.455694][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888100cd9000 [ 380.455700][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 380.455706][ C1] RBP: ffffc90000d77d10 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 380.455712][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 380.455718][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.455734][ C1] ? console_unlock+0x8a3/0xb20 [ 380.455772][ C1] ? down_trylock+0x3a/0x50 [ 380.455783][ C1] ? __printk_safe_exit+0x5/0x10 [ 380.455794][ C1] vprintk_emit+0x131/0x3e0 [ 380.455804][ C1] vprintk_default+0x22/0x30 [ 380.455814][ C1] vprintk_func+0x11b/0x120 [ 380.455824][ C1] printk+0x62/0x82 [ 380.455853][ C1] kauditd_hold_skb+0x12d/0x140 [ 380.455895][ C1] ? kauditd_send_queue+0x290/0x290 [ 380.455906][ C1] ? auditd_conn_free+0xb0/0xb0 [ 380.455916][ C1] kauditd_send_queue+0x68/0x290 [ 380.455927][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 380.455955][ C1] kauditd_thread+0x3cd/0x6d0 [ 380.455965][ C1] ? init_wait_entry+0x30/0x30 [ 380.455980][ C1] ? audit_log+0xc0/0xc0 [ 380.456006][ C1] kthread+0x20b/0x230 [ 380.456017][ C1] ? audit_log+0xc0/0xc0 [ 380.456026][ C1] ? kthread_blkcg+0x80/0x80 [ 380.456036][ C1] ret_from_fork+0x1f/0x30 19:39:32 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x12}) 19:39:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0xffffffffffffffff}], 0x1, 0x0, 0x0) 19:39:32 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0xc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 380.456054][ C1] ---[ end trace 215dd0f65ef481eb ]--- [ 381.121264][ T36] audit: type=1326 audit(1617392369.700:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26978 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x50000 19:39:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x25}) 19:39:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0, @rand_addr=' \x01\x00', @mcast1, 0x2, 0x9, 0x8, 0x600, 0x8, 0x8, r3}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r4, 0x5c919000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20) socketpair(0x1e, 0xa, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1b, &(0x7f0000000080)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x0, 0x7, 0xffffff36, 0x5, 0x2}, &(0x7f0000000200)=0x14) sendto$l2tp6(r5, &(0x7f0000000080)="0cb4b9a80b912777ec6977b4d1836191a7e442616f24beecc252e87445dc5b55c5273918ddb56b83f4acb4c62d4643cc227f64808c631e70", 0x38, 0x90, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000, 0x4}, 0x20) [ 381.230977][T27042] loop1: detected capacity change from 0 to 8192 19:39:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x5c}) [ 381.293747][T27042] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x8, 0x0, 0x0) [ 381.336653][T27042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:39:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000013feffff720af0fff8ffffff71a4f0ff000000002d040000000000001d400500000000004704000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcd536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a765dd0ef999e568bc64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90adb8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8062395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bda7a2ad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd421ec3ed8d22aa60ef469841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 19:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 381.415985][T27042] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x300}) [ 381.463248][T27042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 381.545663][T27042] loop1: detected capacity change from 0 to 8192 [ 381.554494][T27042] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 381.564540][T27042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 381.580120][T27042] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.588534][T27042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:33 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0xd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:33 executing program 0: getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x4, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r2, &(0x7f0000001280)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="11b992186bc8046faa472a8bdb0e6b2ef3c784250a69ee8e9292f488f6b735a0573c813929a81a8b857c392b55f9470fb6560989e5c10326648d15841dff077149978c8503e378e7d58384db37b1ed97272df1eb070352a65ee62ceb92649cd32317b6cda92b32d9b6f92d4550c82d971647ed62b8be277804aeb2871ec0b24f1fb3fc4a3f227606f911"], 0x1000001bd) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000100)="3b58341ae3ee34aa81d7c227c435aeae8fc5af29ddba22730f89896e20595d0e0c646e8a7eeeb77d3a3f4d030ae43bb569777ee3da22b964667e172a0634f09b1e2850a5bb4a5229fdb8d6688491f1de0266f33039a27d15b3ef73f902ea9f4d3aa8d736b97a95b8892f516ef5fa5d6596e4914b95b1d2643c3ea0c9f24671e41439dfa57c41e7ce4e2ccd0e653f01f8e8850690a74897dbb6ea4afa059a5119e7d591d7fa8cb1bdcdb21967967b168073f269e57a2a99c35844fda375865ac32257f1ea7d0c34b11983c644a3835928591e50bc617df5988b0f", 0xda) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="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", 0x1000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="2cbc99539ab858d4160a93fbfaf74085b7e78011cd8f3cb063624b3017d0660a30f4e95a419a5aca5e8b063a500810400089d2f5f893d7caf844db7d7d0e5647cbf7d037975d76ab6ae961b5ca14ed283ebe7f3a4d29efca2204ceb740f55ae7708d3e6e0ba31e96c3587dabbe4c0d5f0be5c9047c1edd8c", 0x78) 19:39:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x500}) 19:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x2, 0x0) 19:39:33 executing program 3: socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 381.749052][T27106] loop1: detected capacity change from 0 to 8192 [ 381.774842][T27106] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x600}) 19:39:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x1000000, 0x0) 19:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 381.800376][T27106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 381.809441][T27106] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.818172][T27106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:33 executing program 3: socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x2000000, 0x0) [ 381.871514][T27106] loop1: detected capacity change from 0 to 8192 [ 381.889227][T27106] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 381.928197][T27106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 381.949527][T27106] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.976964][T27106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:33 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0xe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 382.106616][T27141] loop1: detected capacity change from 0 to 8192 [ 382.118013][T27141] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 382.125079][T27141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 382.136321][T27141] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.148522][T27141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 382.198665][T27141] loop1: detected capacity change from 0 to 8192 [ 382.205744][T27141] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 382.214271][T27141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 382.223451][T27141] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.232148][T27141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x700}) 19:39:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:34 executing program 3: socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0xffffffff, 0x0) 19:39:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0xf, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 382.592297][T27159] loop1: detected capacity change from 0 to 8192 [ 382.610789][T27159] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 382.617897][T27159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 382.626458][T27159] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 382.635275][T27159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x900}) 19:39:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x10, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x2) 19:39:34 executing program 0: ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) clone(0x5a900900, 0x0, 0x0, 0x0, 0x0) clone(0x81018000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001140)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84400) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="5e8d45de555454b38751441e72109970ae085f9a14e57a3c1fff5bb69742e4059f18967f91aa43d66c73feb1c4beb21fbf9456c61bfb75a054cee268b1c19cfd2b05298641a2bd097f29", 0x4a}], 0x1, 0xa) 19:39:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 382.816722][T27188] loop1: detected capacity change from 0 to 8192 [ 382.828159][T27188] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xa00}) [ 382.857471][T27188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 382.870845][T27188] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x1000000) 19:39:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x11, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 382.914366][T27194] IPVS: ftp: loaded support on port[0] = 21 [ 382.930251][T27188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 19:39:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xb00}) 19:39:34 executing program 0: ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) clone(0x5a900900, 0x0, 0x0, 0x0, 0x0) clone(0x81018000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001140)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84400) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="5e8d45de555454b38751441e72109970ae085f9a14e57a3c1fff5bb69742e4059f18967f91aa43d66c73feb1c4beb21fbf9456c61bfb75a054cee268b1c19cfd2b05298641a2bd097f29", 0x4a}], 0x1, 0xa) [ 383.031168][T27194] IPVS: ftp: loaded support on port[0] = 21 [ 383.040552][T27237] loop1: detected capacity change from 0 to 8192 19:39:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) 19:39:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x2000000) [ 383.111274][T27237] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 383.119326][T27237] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 383.128076][T27237] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.135878][T27237] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 383.161862][T27270] IPVS: ftp: loaded support on port[0] = 21 19:39:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x22f3c7da3d5a27fc, 0x0) recvfrom$unix(r3, &(0x7f00000000c0)=""/28, 0x1c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000010000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32], 0x24}, 0x0) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x198, 0x0) 19:39:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:35 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x12, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xc00}) 19:39:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) 19:39:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0xffffffff) 19:39:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffe6c}}}]}, 0x58}}, 0x0) [ 383.336872][T27306] loop1: detected capacity change from 0 to 8192 [ 383.361164][T27306] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xd00}) 19:39:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) [ 383.441718][T27306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 383.460938][T27320] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 19:39:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 383.542313][T27306] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:35 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000440)='./file0\x00', 0xfffffffffffffffb, 0x5, &(0x7f0000000880)=[{&(0x7f0000000480)="d56e7ead5c814c2d37fd733a9798703d9be8f1b449a393bfa51db983d53cf656e69bb578e13ca3a15b8c9c2c6f866efc90d33b6d926540feab0fb606f778d3bdc07c3f80968c5ce1ad2a1de585dee16738170e1b01fcc553e8abbaa1a5aa94abfd9bdcf9ca9b94a967fb7e485db7e006b4ee53d4d59999c56a6b0c97f976f2cdb494ffb8c7a155df36f123dd51442d25e5aa9ea83067b007737116e938b2842e91428e6ee8fc83fd90a8c660209b08905bfc5bcf75ada86fe1d82d48f293e6ddd9c7f7322e3344eb8fe0af74d4d27f21634b1e5cd691710c5f1b7fd952febcc74dbe9c33", 0xe4, 0xffff}, {&(0x7f0000000580)="5e225fe1227b025f63c996aaabc5bfc81e5d57799806e2f48489118f23039f25842ee5adaa6311618249da907ca25a0821904de17e304aa84dd356ee7cda803ddcca58d77bfab1de8473746997fe4f7e2818e2f41dcb8f6b5ba5", 0x5a, 0x100000000}, {&(0x7f0000000600)="81a0930c1bfd608133ffa7accaa5275c3f1b1afc8b0e5ced33b703c825e0e6eadc6dbe72ab43e0be2cdf1bcde59cf9f55c5658d105600d139a06b708e484ef81d694385c4062f129bbea03966c325aed7ad27e7b69cb50c8ff068a36dbdc110e99adc8cf525250ea0d5f84844c1f8edb6dca4cf021d3668051d64ab2469413c8ad4d6da8da7d469453d40a5d58ac31891abf0d", 0x93, 0xf16d}, {&(0x7f00000006c0)="583919fea0d31379e5359fc4a0b8752fdd499e59a7db387a91643996b3f5559e153dfbdc3c509ee1c0da42caa41d67f6452a2c1598ee24a7535540603646f29a693a4a46f5d06ab74d79b970237bafa9a4f4b78216843485c9684fb1fd3666a3ed16fdb538fa4288d046bf80583d437458b501004df08e672b977fa63a3e443be2c34530cf639f1fce010aed3bd9051b37cc8592e69fae4ee53c4ac80c8b", 0x9e, 0x5}, {&(0x7f0000000780)="ea37465eb923500caf80b742b0fd1615cee89d439f53d8d088744d99930489ed7f782e1e3874b9a830e170880eaa76a7936ae7fbb7e58ba7e23b2d2642c9c19e228abb99d0ec5e6e44293862c75cac053549305d7c8677b25ba285d21734b9683dbd38d90606401807db60ccea7ca86d88d0977776dd6625c0537ec03946fa291c89e0e9723d66dfa5883c7cef05f30f6a84e2cd50baf13f78f0e617a9754b716f8095b3b370bf398844ae62b6f9e7798bef92a47af2b3bd7dd9d1098616328576e7fd", 0xc3, 0x101}], 0x1081098, &(0x7f0000000900)=ANY=[@ANYBLOB="690e6f636861727365743d69736f383835392d31342c756e686964652c6d61703d6f66662c666f776e6572", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fspick(r0, &(0x7f0000000980)='./file0\x00', 0x0) 19:39:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xe00}) 19:39:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x3f, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 383.596110][T27306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 383.695580][T27306] loop1: detected capacity change from 0 to 8192 [ 383.710948][T27306] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 383.757281][T27306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 383.765960][T27306] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.786726][T27306] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:35 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x25, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x18, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1100}) 19:39:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x201, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x201, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7579}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001e80)={{{@in6=@ipv4={[], [], @private}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x201, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7579}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x201, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7579}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002240)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)=[{&(0x7f0000000180)={0x1c, 0x33, 0x4, 0x70bd27, 0x25dfdbfd, "", [@nested={0xc, 0x57, 0x0, 0x1, [@generic="0d01d90c9077f3e3"]}]}, 0x1c}, {&(0x7f0000000380)={0x46c, 0x35, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@generic="e8cb772125c44f97252170326983a0f940122bdde23fe816269de87bb49aba8d05d5c7433e926b33adb71ba8e0be0ebdf07961550ac70ac6656900f742eb54360e3fa7db2a0ee18774079d851af9533656c62d821b4a68f3ddc80fd30a3746e52ffeec2f2ca1601c225bc52b915f05784aee8a1300d17f7d2ea1823542e08e6ab7172381d37e99c0517c174cc49d81b198f6e09d1ed939c9d6105fef0a7d8325995cd6263f2b5188e84794e0f7620896a1bb87f0f0a38cade217bfec1b5c0cc9ebe152f183e454e70a0bc8b74e7163f1e3dcdbacf13712816b289077d6d733ad0027457593b4c15864", @generic="dc3ed7e1a6d7d867107d44269f052423eea2b5750689c04e99", @generic="5e9c6361d642a8e5194548fe98d720f21cf739a4ebd2c05d321a18321dfa46c377f387642321228b247c4ba5a96452beb26ef061a209da989edaec9fbcea6d9203e159", @generic="56d919dc9061cd6987d26d8bb112d08c68d3cc0a7a9e4255d3ada13f7e08ba83c23577d378dee2ea1f3aee2be1dc5e16d5ed7667629d297198d34129073139da0d0c3650788d45f3fc5a32aa8177b1d64df4", @nested={0x2c4, 0x71, 0x0, 0x1, [@generic="85f534980f18540cada407585c55dc603b272cb8650a5b39082e401919a4667f428c52a6ac33774d00c1784855cf194871a22e3a02537aa775d2401d15013e975c50c1821c7935ed1581d11fbed07782c591ae2d4cff6f686a0ac35cc388bd448146380dd5", @generic="0009955b17d5bff6de884021735daf87a5f6aeef8e44225720a4c86a33f325c394ee2ab0e6591fa99ae1feaba601200795d632a00b9bf4f58d55ca8700153527d610a72e070a9579873c3ea591fdb5261d00acf4ddbd1a957186a8e6f7e75dde2a6bfa4a8abb33a27411c70a3f17b7704d1dcdf10ad3c29a6dd4c666d8bc6d653337fd3d41214a1c8e101c4cdd2ca29b267a7062cf309c70050da3bbb75cce3f2812f962ac32ded8ab6b2432843f44f66dcac6631d87e63b65b4711b42790a2db9855de19c4fe6460ead436ac92e06f6e6c113f45fa293b7ca223a251aa07153e13ea8517c050cbc1a81ea1d5943b8613e9d", @generic="9fc7d98a5c336ab43df013f417edda1bafa41a504a32195fc7407c46e713a024ce243159d06c1cfc1f4ee79a2661d680061bf98acda4efb0a986d984ed5295ab00365e817c87d5840d129e4cbb7538c52e8a97ab035b53484eafebf3196e449169e1d8226d5683ed8f958d470f1da42d82a9ed56cfb8c2ff29055825eee3edd1efdf55c5ff354455e5c11bc30ccf3be26c76cc740572a052777958d2c63bde96470c9c72672af8dc3ff90c22f8e7fc13e20128d8", @generic="36559f2412d5b439e1b5ec629ae0e2f8ab63222e15a7b8f245f9e5fd10522ad87de0a27bc58cc687e9cd88c1531ae394e25673f9f241f4bd76d7546a04beac14d80f6090707adc08251e6a91b14f1af935ae4f650546f6c66e90ff0301b71498751077f8413530077e822fe7a6a3f0de4cd714413ebe3069703d1795d3880a6e7076c7c4b9da4477d8be9d774a4b50c168e6969b5a550d11662282fbef30a9d4d5f3757ca90f1838c183730bde", @typed={0x8, 0x8f, 0x0, 0x0, @fd}]}]}, 0x46c}, {&(0x7f0000000800)={0x1664, 0x3b, 0x800, 0x70bd29, 0x25dfdbfb, "", [@nested={0x37e, 0x5e, 0x0, 0x1, [@generic="addbd7d76104213f8d72b6879e4f687af543e92cc193d8b00dbbf59266170ccfecc5ba2e7872ae81bfd1949334ca900d203ef51458617362eb220f62d4704ce399c3c6079353d1d7b90395eb46d5b3c2ca08a834e917d26f67c1c084f19a7462a3c3ee12485978a87a6371a74f88a369dd893a04f616fcd6819e397aa4bc2fcca9134e55cb65b773d25711803d307e9e17cc5665c93d94ea0db90d53cdfb0251b3900b03f5e1b80eae240fe2caa803622bc07de47bb7f93469a9042147d539c56ec1b02efc0d57229b5e11c5066a9396ea34e8659dc45610fc70f9515c8797082a99553e82b98fcd808be83084b161e5cc7eb2044964", @generic="ea953cfd718799e549ca7d4f1af7", @generic="e958143912672e720a616e0c077d93d5c066739268d7bf86acca04e3002e34fa4a8a1fad262a731947631bce426644", @generic="eb59b873faf12ed46a1d61a9a74107d07e987c1b1e7b2f3dd3085844780c7a0e43189ceea06150b4d05b7ffc684400ba9014935c5eb6a6ef3a20325155b0b911cb625e58a3be3f276691f7dfce2d025ba9ba64e8bfee0d3453dcb8e14b5038b3fb02bd4525009adf271d58777eef0f814dbf3cf60f29675f6ef9a0642386346f733a23e06a51dfe7762c06132e9e5754864d1b2f8bdd51b031fd", @generic="106f88be489fc49d69b6174c446747ef49480d929a46c8719ad76dd456419a3cf001b0f43e8ba55ca43d4f7b93afe7f777d12cd758c694aa4c6c4d793e4ba1926f235fd4bd482aa0eff67e6d4cef18aea3b50116681bdd5ed9d70c8a65468ff7169761c5a2a325d65c69212caded7c53fae3e83432a9563d42e3c74fa0e20d85edb8f426708e2af7f5539041f448e6b62f93185eac9391318a8d1248a90c8cb85dd666d19de37f2118e51f62e9a2f122ea43eddb5c6f7e9698d397", @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x54, 0x0, 0x0, @uid}, @generic="fd3bafb9e6a11ac7952d84f816a40069a555d5fd720388b26718fb11b61ac542d9331d15e87097c4cd90acb93ce7b691f4cf8054e02e7401fc9d150995ecf9587d9ecc4e8d64efbf4bd2cc58f8a0b766d989b90774c71890fc981801111d35565a7a695ad161e6ffa3352ac96754325e88559442c45cec88a8f41289ad714577b3185ac51a32c61ae0461c12278770a38860b285c3e3fc67e836e159bbcb8ea008bf32e1465f7c3d6f45cd2d38d8bd9d0157c19d4872dbbb7795", @typed={0x8, 0x48, 0x0, 0x0, @uid=r1}, @typed={0x13, 0x31, 0x0, 0x0, @str='bridge_slave_1\x00'}]}, @typed={0x8, 0x21, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r3}, @generic="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", @generic="b3bab63dbbf3e59f7e1decfa0a8b2af856a9489da31683e478c9518b169e4e11063657fb873f25518f7e24d52f616e436a722265755ba81c47c05efcf7e312a3cb2a8acb477fbd8a2e4b8e302a2a6200d6d4eea5373492cf62c817c218c015cca60fc703d70ae8f1187baf42c10ca3897387cf833942e9d5ae7df59ba0925640231ebc7b3e87b9b74eafc170b53487b9ff68b8790445cb6e5c04fabf3765333a06d82996060a739c1e8f15f4db42d5214575aeda9a2d792d756fd1c5f2219637", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}, @generic="4f0a786807fc1a8fb460c34c9fd1d0709f37fdaba0b21fdaf441c735a43db54213951d20698747b6e6a66e2d7384aedb9a65fc1e5edd2221b0c482d236d9db0ff1c75cf6392651c6544e6a27925a3e1d47d51b7b94e2f5dd32f808f76a24cc865947a585ab3d099ad5b1cd47cbd860073962d8db1af5b9084989c043f401aff1724ae5dfaa8940a8977ac704243c0537527c698e2f712133b9c2534de257c36a92354efe21e43e60344032b7d691b6b747f2e887d41956597a1fcdae7e1becd6a50aab42bce6faaf70a84de39102a5e04a0a2631741ef12151baec7e8b8f994a19a0bc64c504e7847e4ad40bccd73183a291e0e9f010a030", @generic="57a09c9631446f1f32d240dd036122a715dfab37071f11230c1ae133b2d384451df0d6607c095384e19385afd8d75988e484c0e2028731d3e5", @typed={0x8, 0x74, 0x0, 0x0, @u32=0x7a}, @generic="029ea1035ddf7638eb3123ed81c87251bcba47b1015e444b006269cc01bb89a165fd5f7f81e6afbc23615569dce18b146234df879c6a11458bca24f290007d922fe04973fdaa3e6be457e963fc96844b34c2721ead6ddaa94dd660e25781fd37d208d35a8339524aa9b786de7d46b96ec2a2839d2af9f62c12f00e304733164d3d8dc298d809e733556395da8d4b1624d9d2a823b880a7dd15dcda88f98ce109e16686928d539371550191d5df7546a99121d347939c"]}, 0x1664}, {&(0x7f0000001f80)={0x298, 0x14, 0x2, 0x70bd25, 0x25dfdbfd, "", [@generic="7d97243b4ceb7f801014a16a1707bf4cf6196d66877cefa271a87a8b1bac7bce59329b7d30005e4954f3bca676249781f0fd61b148889e8e409762c7d9ff62c032a3d8c64363992aea9c5827b27f06e782d1cee383fe0d0a7f20957ee32d3303bc3628c2514181bef0249872bad062530c4a46abaa88e983cfb2212e56b2b3804dd9ba3033414e228a4e5dd9999ee90578eb8b217e6851f5c44d5e3030da003d7e50c0ac914f", @nested={0x5e, 0x10, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x74}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x25, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x36, 0x0, 0x0, @pid=r4}, @generic="a7d10c2b36529a06135c422407a1646df0da2d692585a87692b5c8fbd589b484ff67f59b56e149ef1dbc839bf70490cc7b7a"]}, @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @generic="04d552d1ae239c2688b582c76e9bc795c79729d5bd3c2e9317471ce7b5062ab36d9bbfa598236807fa3c349addfc6a80f219fe5daa357f5c489b1d19417bae906d914edf0c335620de55c9e21eac4e8d833675968dde573e6012e75c73137ad4efb4a2cf7ff6c8ec3b43773632", @generic="b9afbd0cc7114880a15edaac238b6e9b6e4d73cd62420f07987bc718c99097b7dfb06ee911f9f1bd371b", @nested={0x2c, 0x46, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x7f}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r5}]}, @generic="0c844f7693469c1708d4dbdf591e274971e6a9eff6fdfe42cd2f0c6651f573a35c252cebece7b5629508117c6bef5ceb2fa5095c80b51f1e4f5efb4672ec30533f5f0f65c70ede7af4084607812d6f1faf53e0aa517fe45cc0a74f276d565f518622764b369ea7fd599c9e164b9b8599aa35d51016397120c69d32a1819dddcbbc6c881b3e29b71014a8c469a571b84b1fcac67c8945484b2d50e2636873ef487071ca2423e709377a39"]}, 0x298}, {&(0x7f0000002340)={0x478, 0x22, 0x400, 0x70bd26, 0x25dfdbff, "", [@nested={0x30b, 0x58, 0x0, 0x1, [@typed={0xa6, 0x43, 0x0, 0x0, @binary="08a0d5ae09355ff55b2664800da25264bd2c33d743a91979438a02d4a8445c3ec8914e89e97b3e65527093ef4b7ed8255084460b26e9e2ed690e777883dbd85b8d8f263b037d189be190dc97c70929791fca127aae3898aafd8a99dbc7151f871ab0870e20b758c0b95a8d5ce8abba7430a8eb642f6fcb4a43efdce142b15da0e47b9d14cc74ff62e9d6c11aec10e56c98acf3ccb4c36326d9f4246ed2c52fb2db64"}, @typed={0x8c, 0x88, 0x0, 0x0, @binary="67e285e8a8ac504a667c12213fa731b14d4942a16610f1aa641e2771b109a291e74a6923df16045ddabf51d7587908e78c441b6b3789c27f32579dc85025d6b2d375693132bcd226f714c10e1babe37c28eb386a725ec64bc453aa64b8e311ace17cb4c4601ca5a3ac682889a78f143ace2cd6f5c46efb88cae82c9bfbc6657c7803e7387109e18e"}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}, @generic="181354ca6ece0c544b207ac280733f5d3557a028f9cb184d3fff4695fa432aa7fae3cd11f3679b8b6cd10f99cc80040fffe38532dfaf5012859e98d97c4f9aba83227d59ba317bc3d5bc3c16e6e50cd9ccbf192fdd1578fffee94057208953c4e10c24345a38c358cffc0ffe60f139308b486c631ce76329f7d4d8ff90aa76e1da301d2126ba9351c4cfd530a1fd45c979f0966562383672d77a3e688a7f500a8775ff7662842b5a6707bc226cb50768b402c1469c500516ebcf10888e9280300038d2bbf724ec55dddb2aa9e6", @typed={0x8, 0x27, 0x0, 0x0, @pid=r6}, @generic="b6c64a37c5477ae58e34997838c81efe58d2ebcb858ab2802416e04962b4", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@mcast1}, @generic="c3cfb44d229027d6661da9f4b8a0de70459d905822b94ff5223bf8785e97479cd2bd78297f3e7329ff7e9ddb429c8fe0c78e436c8b02e3175c8c6700fb886b702e77c232ee93e72a8b938f06dfcf6168ecb7bcd14ff09f7ae047324d78cd3b8ec3c713397274ef416c13e517cb4ca25d371cc2708a734aab1d4e9451ab46bf4573190f15b38727465cac3aec12898bf94f2887a11a996e98c3773794b84fb091b0b5ad01b009cc107f1f94ea2f2767f1"]}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@remote}, @typed={0x51, 0x1e, 0x0, 0x0, @binary="8c65bc1d373add6da698eb36b7910092b68c3db4ef62a943fba0f05897dc63a49b6b429bf5c66194ddea1503eba8715705f22b1ac7b3f5406edf4dae262bce6aade12fdab40e5348905dcf042f"}, @nested={0xef, 0x60, 0x0, 0x1, [@generic="90b5c6b8a6f8bb16fecbeb33ed1d91b39146a769e12a1bc7f76c38511548ecbddfc65f59b8d4018b8ad4d232c882e6c1a893f282a77d8867da58", @typed={0x8, 0x6e, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r8}, @generic="1e9011c2bfe35a73a25d0b7f357afb92197d1c88de55005e5bc33062c2c7e7e2721b8c8c286ece5c0a05f09bcab48c1369819bde6184caeda10e8eff32db91469be1926bc0b0432755ebd1ffa8b9e3e537d49214cef38dd52072244527da59c26709a16ce300eb5180add413b2b5492f434a2da381641f5df193f9b972b4828e4ebee7bb56dcf9ac021c32bce8b3198aef3bdc7828f6dc731798e953d1b7323ac0"]}, @typed={0x4, 0x4e}]}, 0x478}, {&(0x7f00000027c0)={0x19c, 0x10, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x74, 0xd, 0x0, 0x0, @binary="eacac8b3c59d015080e049a3a65e9d6eb99cfca8ddd3f2ea1f722534ae8ae5712a313b0a0b4630a8a4c35a7a64f185f1763828ca7222ec4028911b20a91ee86beb9ba604c28a55fa319de551c7588aa7a1018bcdbde03a495b5f8bfb2f91ae39b22d8c8f5d9aeec2d5b40399e4ee8e19"}, @nested={0x10d, 0x4, 0x0, 0x1, [@generic="6320509ebe5a02d4af15e4cbe60c475c62060415f7434ace1a722759765e5036eee20f3bdaf2cf023587ee1e7e66c5bab2527a6c099aebcaf6762628dae5e7079048b5cdb5fa6e13eec16227f44ef670a50c003fb585828d05a81e06d738c87a34aa66", @generic="8064abec7510623272e94c833a6ff12820a5b19a300288373bf0e5c1d8f8b4382d5b174839b3687cb9908d3580e95176c221ebdcecba838581843ff031d455c4206e2a21e4862f6bdbaaa36caff25160aa205c5d3e2d69b131df78b75b749ffbf8a1a2bad39f7ffb2d1dec783a3100081b74e040142f89e3620b1db8dd33944d5da74bcdea7aef9cbdee7409ad548b970e9315ea54ef311f22c2448f78fd", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x19c}, {&(0x7f0000002980)={0x314, 0x2a, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0x304, 0x53, 0x0, 0x1, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x7ff}, @generic="0e21c937f0a67122f277d5c46af2d2af3ef54187376cc4bff41f572e576826b45b6817c476644b3eab9be028f65208db7bf15ce3d4f091b8b030c15f35b93fb38a52fbbbaf6d818733e2e9cb8a1acedf8781543a047c407361aed2e1ef004bcf41947ccc57fa6f3df9cceaf7407df0b9172c75c2593e1d6e3322cd3153ef6092db28a0143388cf1eb7", @generic="4303e4c6a51dc460215dd23042ff7ad654d9db71204f916a4010ae9e26a35f9e3be85f96de3f3bbaadaf699511a7b4bbc7a0c8a72f6f029627ccd1e77676f1bdcd245f663a4cc8bad80e9e14da754f832d7f72e1677dc6050b43be6999784b9a5f95f58447e13a91cc70bfd8ff09ad4fb204bbded58ee1e373038f8fe0b5eb571b58917d5ebd37ad03d6b2b87e547dd9d962351d7d596869e0adca15f6e301676a315af6b790ef05e3f4cb11f85ded5a9500ecf3a57267830caed679bf4178772deab4aec678135de2a4bc78f8d8efea0a3f9f516c8c", @generic="dcb509ed965839ec729fcb33ec81f2ddb92ce227454f256732a6115ec9c6a6c4e276595e19e4a62a07278eedf371d9c79c0488af44800dbf9479a7e790f9b11a", @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @generic="480ab73b9d79e816609b75895f0f2f679bc149d129d536a7c7ff0462ef2ceece2c7bda1a8ddcea62f20020f72d2db6c1ccd089b24ab180fae07c580e81f8efea2c04175ccb8f81fe90e19a4499254de7103ea044239295b15b1c16b2e868b3bf08874be7f960fb50589e606081717ffde8799b2704212c1bb69427de150acd91dd4d6d73a95c2bd60546a5a69d", @typed={0x5, 0x11, 0x0, 0x0, @str='\x00'}, @generic="73c2cf90b0030353c6aeefce9d5addddeede47ae1361de059ba92845c5afa11227fb334bb0f75628f7d77d076e45776f0d2102bbac9b97569a27892079195f69bab2e0e9ae21474924386b99100a288e7400293ccbfd2e5b1844028763dfacf679df905c17c87060ad745633c1508c814660362dfdf6b8058494be42bbb2ff90f976eaeae65d5e05c57e4a9238322fd394d1989f7aae3abc9234009ace82069233ec201b1d8ac12e", @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @typed={0x8, 0x71, 0x0, 0x0, @fd}]}]}, 0x314}], 0x7, 0x0, 0x0, 0x20004002}, 0x4401) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x24000}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x34, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_COST={0x8, 0x3, 0x3}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x4}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x6c}}, 0x0) 19:39:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f00005ad000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x6d8bd000) r2 = fsmount(r0, 0x0, 0x2) sendto$rxrpc(r2, &(0x7f0000000200)="05d5a89d6c7c14f96d60e2fdd591f09a6668a85c0cb1e60472ec44210d8f1b5445789b73ee0c1d142a334489114b0d1ede94a6f11edc4bf1740816d37a9939d3b81eb667e547e1c0b5c3f65d99c50cb74d0452af9cf6fb47cb9d846050b09d0823b456824046ac2e15659ee429a54b946f634fce5d688f10621a77ce047074c17efc5432bbb609b49cfb450eb1be640c13f4d0cb67c770b28d84fbcd61bb4b2b4e2db655f361c87a5aa33c928ed696101fb858b4f81e99c2071a41b4c09164138e8ffdd43c698f97ce7cc14b959909c1d07b76154cdf6a2177c25553b7aa54946d4cb2a043aa74118a0c32d6beb37c2d923934", 0xf3, 0x0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r4, 0xffffffffffffffff, 0x0) fremovexattr(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="c16fd066fae3c0855686bb6994804832d4366858fbae3e489bc45b16c47ab5dac71473d0a52cf602403ec4d84be1e2abd9c47d4a35e010b22c544c7cffa047e0049c5888e534ea917d63b09a6d431f0885612487ae9de75432d74bac567b2d67c595982c8477e07b818195e129d828a69546230d2646bf3460ef1ea48cdf083d6eb80b17f397e2e51136b5cac08225a8d9ac215febfbd428d98c969c315f1ba1e4678544742c7e120f0a9e3a025ae562c49a9b96bed083e7a515357db42b12883015794b09699274246fe57ab093238349ecdfb0873915714bc2f60460d3e59f8ab6f1053773cc0101410eb4c8d4e8818162eac649d97d130f52210df03aad48adf86439cb385d"]) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:35 executing program 0: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x9107, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x9f00]}, 0x8) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0xff06ff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x8, 0x1, 0x24000000, 0x0, 0x81, 0x100, 0xf, 0x1}}) 19:39:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xd7d, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1200}) 19:39:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r0, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet_buf(r3, 0x0, 0x24, &(0x7f0000000180)="c1faeffb12e3169fd671347a79c98b0800e6292245900d35c10d33b5e051a0d2fb0889fe748059ef2644ad613cedd77d5edc594d03df6e85c243f042fce5f23345c2d08ce90a52d35c191f4d4a7dad054ce66c0360740ceb31f74288d513c7824b8df75c37c50280f6eb2b3beec8acca585e54507c6596a648259ee4ae6b145e26fbe66e8858389c1239", 0x8a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) preadv(r0, &(0x7f0000001180), 0x0, 0x0, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r4, 0xffffffffffffffff, 0x0) sendfile(r4, r2, &(0x7f0000000080)=0x40, 0x9) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)={'syz0', "9d142ac13ada527bf09b5ffa77e98139f37ce0e8778d7fcbd4676bfac07a68349019167fdc5d50f1594a9d540c4e9efc1c6c01ed3b184d8dfbeeff83aa05551d59cd9837094a40b974ea9192"}, 0x50) [ 384.018168][T27372] loop1: detected capacity change from 0 to 8192 19:39:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.072216][T27372] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 384.106971][T27372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:39:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) [ 384.115344][T27372] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.124435][T27372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 384.187242][T27372] loop1: detected capacity change from 0 to 8192 [ 384.199754][T27372] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 384.252823][T27372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.305666][T27372] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.314285][T27372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:36 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x48, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2500}) 19:39:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) set_mempolicy(0x1, &(0x7f0000000080)=0x9, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r1, &(0x7f0000006840)=[{{&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002640)=""/17, 0x11}, 0x339}, {{&(0x7f0000002680)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/98, 0x62}, {&(0x7f0000002780)=""/119, 0x77}, {&(0x7f0000002800)=""/110, 0x6e}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/100, 0x64}, {&(0x7f0000003900)=""/168, 0xa8}, {&(0x7f00000039c0)=""/5, 0x5}], 0x7, &(0x7f0000003a80)=""/183, 0xb7}, 0x13f}, {{&(0x7f0000003b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003bc0)=""/92, 0x5c}], 0x1, &(0x7f0000003c80)=""/178, 0xb2}, 0x38000}, {{&(0x7f0000003d40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000003dc0)=""/79, 0x4f}, {&(0x7f0000003e40)=""/15, 0xf}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x3}, 0x7}, {{&(0x7f0000004ec0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004f40)=""/92, 0x5c}, {&(0x7f0000004fc0)=""/98, 0x62}, {&(0x7f0000005040)=""/186, 0xba}, {&(0x7f0000005100)=""/20, 0x14}, {&(0x7f0000005140)=""/76, 0x4c}], 0x5, &(0x7f0000005240)=""/90, 0x5a}, 0x8f}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000052c0)=""/46, 0x2e}], 0x1, &(0x7f0000005340)=""/43, 0x2b}, 0x2}, {{&(0x7f0000005380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005400)=""/179, 0xb3}, {&(0x7f00000054c0)=""/127, 0x7f}, {&(0x7f0000005540)=""/189, 0xbd}, {&(0x7f0000005600)=""/31, 0x1f}, {&(0x7f0000005640)=""/169, 0xa9}, {&(0x7f0000005700)=""/124, 0x7c}, {&(0x7f0000005780)=""/20, 0x14}], 0x7, &(0x7f0000005840)=""/4096, 0x1000}, 0x6}], 0x7, 0x2041, &(0x7f0000006a00)={0x77359400}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x80010, r0, 0xc86e9000) 19:39:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/154, 0x9a}], 0x9, 0x10001, 0x80000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 19:39:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1, 0x8000, 0x7800, 0x7fffffff, 0x1}}) 19:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.490275][T27419] loop1: detected capacity change from 0 to 8192 [ 384.499617][T27419] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 384.506479][T27419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.524381][T27419] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x5c00}) [ 384.534258][T27419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1, 0x0, 0x7800, 0x7fffffff, 0x1}}) 19:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.592482][T27419] loop1: detected capacity change from 0 to 8192 [ 384.604620][T27419] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 384.626079][T27419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.672715][T27419] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.680828][T27419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:36 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x4c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) mmap(&(0x7f0000716000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x2a770000) 19:39:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xff00}) 19:39:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x40, 0x3f, 0x0, 0x0, 0x5, 0x80000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x8100, 0x1f, 0x3f, 0x3, 0xd6, 0x0, 0x5}, 0xffffffffffffffff, 0x2, r0, 0x8) sendfile(r1, r2, 0x0, 0x4000000000010046) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x5, 0x9622, 0x7}) r5 = inotify_init1(0x800) dup(r5) flock(r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r6, 0xffffffffffffffff, 0x0) connect$caif(r6, &(0x7f0000000300)=@util={0x25, "037c5a4cd710912c13047eb0ad60b053"}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r7, 0x0, 0x9, 0x6) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x70, 0x6, 0x6, 0x5, 0x0, 0x0, 0xb222, 0x38008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8000, 0xad80, 0x0, 0x0, 0xdb8b, 0x101, 0x3}, r8, 0x5, r3, 0x4) 19:39:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1, 0x0, 0x0, 0x7fffffff, 0x1}}) 19:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1, 0x0, 0x0, 0x0, 0x1}}) 19:39:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x110, r0, 0x9c867000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000200)=""/226, 0xe2}], 0x1, 0x7fffffff, 0x7fff) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) recvmsg$qrtr(r2, &(0x7f0000000740)={&(0x7f00000000c0), 0xc, &(0x7f0000001800)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/142, 0x8e}, {&(0x7f0000000680)=""/162, 0xa2}], 0x8, &(0x7f0000001880)=[{0x90, 0x0, 0x0, ""/121}, {0x58, 0x0, 0x0, ""/67}, {0x58, 0x0, 0x0, ""/67}, {0x48, 0x0, 0x0, ""/56}, {0x78, 0x0, 0x0, ""/102}, {0x50, 0x0, 0x0, ""/64}, {0x40, 0x0, 0x0, ""/41}], 0x290, 0x2100}, 0x38, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c726964676500000100"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffe}]}}]}, 0x40}}, 0x0) 19:39:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x1000000}) 19:39:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 384.916488][T27466] loop1: detected capacity change from 0 to 8192 [ 384.960273][T27466] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 384.967666][T27466] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.976100][T27466] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.984742][T27466] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 385.006154][T27480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:39:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 385.050948][T27483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:39:36 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x5c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = accept4$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80000) r4 = dup2(r2, r3) syncfs(r0) mmap(&(0x7f0000092000/0x4000)=nil, 0x4000, 0x3, 0x4000010, r4, 0x70978000) mmap(&(0x7f00007c0000/0x3000)=nil, 0x3000, 0x1000004, 0x4000010, r1, 0xd5683000) 19:39:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x9}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f74732cc817f8ec00cfde6a7d615adccc682c23a27f4ec5bcb2baaf632f83304787ad7f414b1c8f44b991cc43da27177e12f8cc7b9901d229fd53ed9881d1ee911037e8679e51612fe618d2f98af7457fbd98f3ea6d8d02f30cb4b47f8b95c7b2bb13cba0c8dc1548f5f54cb77e1104b35540639682082bda17c9480d"]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x40000, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x1, 0x9, 0xcd, 0x34, 0x7f}) 19:39:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2000000}) 19:39:36 executing program 3 (fault-call:4 fault-nth:0): r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 385.236398][T27498] loop1: detected capacity change from 0 to 8192 [ 385.251222][T27503] FAULT_INJECTION: forcing a failure. [ 385.251222][T27503] name failslab, interval 1, probability 0, space 0, times 0 [ 385.267279][T27498] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 385.274055][T27498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:39:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3000000}) 19:39:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x492a02, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x2}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x10001}}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61, 0x5f]}}, &(0x7f00000004c0)=""/143, 0x77, 0x8f, 0x1}, 0x20) setresuid(0x0, r3, 0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x14}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x10, 0x0}, 0x15) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x1, 0x3ff, {0xffffffffffffffff}, {0xee00}, 0x1, 0x9}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x50862, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x63}}, {@version_u='version=9p2000.u'}, {@fscache='fscache'}, {@fscache='fscache'}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@uid_gt={'uid>', r5}}, {@obj_role={'obj_role', 0x3d, '^!+([.!-:%'}}, {@subj_role={'subj_role', 0x3d, '#'}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'system_u'}}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) write(r7, &(0x7f0000000100)="4ce10f13f187c6bec39ec48a9201a8529857d828082e51138b116e091619e4dca6fc4087a5a622e9a8ded9c7ffa93902b873addd7a18db00cb933109e7d38a3f12d8b265d99bed59e1f17cb485fb98da13c870a3441a1186b7052c3abb8fee73b4", 0x61) [ 385.380284][T27503] CPU: 0 PID: 27503 Comm: syz-executor.3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 385.390532][T27503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.400591][T27503] Call Trace: [ 385.403888][T27503] dump_stack+0x137/0x19d [ 385.408236][T27503] should_fail+0x23c/0x250 [ 385.412660][T27503] __should_failslab+0x81/0x90 [ 385.417514][T27503] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 385.423304][T27503] should_failslab+0x5/0x20 [ 385.427822][T27503] __kmalloc+0x66/0x380 [ 385.432000][T27503] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 385.437631][T27503] ? __rcu_read_unlock+0x5c/0x250 [ 385.442662][T27503] tomoyo_realpath_from_path+0x98/0x3b0 [ 385.448298][T27503] tomoyo_path_number_perm+0xc1/0x2d0 [ 385.453716][T27503] ? __rcu_read_unlock+0x5c/0x250 [ 385.458757][T27503] tomoyo_file_ioctl+0x1c/0x20 [ 385.463570][T27503] security_file_ioctl+0x45/0x90 [ 385.468608][T27503] __se_sys_ioctl+0x48/0x140 [ 385.473214][T27503] __x64_sys_ioctl+0x3f/0x50 [ 385.477858][T27503] do_syscall_64+0x39/0x80 [ 385.482289][T27503] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 385.488232][T27503] RIP: 0033:0x466459 [ 385.492134][T27503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 385.511796][T27503] RSP: 002b:00007f4f346e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.520288][T27503] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 19:39:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 385.528257][T27503] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003 [ 385.536230][T27503] RBP: 00007f4f346e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 385.544200][T27503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.552185][T27503] R13: 00007ffe47e4e51f R14: 00007f4f346e7300 R15: 0000000000022000 [ 385.566994][T27498] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:37 executing program 4: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x5, @remote, 0x10000}, {0xa, 0x4e21, 0x100, @loopback, 0x5}, 0xfff, [0xfffffffc, 0x3, 0x8, 0x2, 0x7, 0x0, 0x1ff, 0x4]}, 0x5c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380)='nilfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x49, 0x2, &(0x7f0000000500)=[{&(0x7f0000000400)="a1fb7279a9ea438caad089d998eaf495740ccf93c79ecb66f68def0d934d82f118cfb7e3d2f3686bb439f6792d8d7c39af1a7408751360c4c4b03044149becff0b509823e28872a47224d8f8e6d819a6a49fceccd62a4105af87a07952f86c2d044b42dd7e2687daeeae16a08671ab96fdeeafa76de47bb103c9d6082f9cc8581cd50d299ee4a16c7ee244b29167f77932a95439ab5ca56a5a1976a61e87b0ec5efa97244f6205", 0xa7}, {&(0x7f00000004c0)="73a4590347", 0x5, 0xfffffffffffff800}], 0x204000, &(0x7f0000000540)={[{@nodiscard='nodiscard'}, {@order_strict='order=strict'}, {@order_strict='order=strict'}], [{@smackfshat={'smackfshat', 0x3d, 'net/icmp\x00'}}, {@smackfsfloor={'smackfsfloor'}}]}) mmap(&(0x7f0000409000/0x4000)=nil, 0x4000, 0xc, 0x810, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000002c0)) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="96869b539e1d5a6f7810c28ef2d40794a2092a13587d38283a8df5c793dbe81c0f4696d329bb1733e28d49a3355e0cbe722bed149d3b57e5c32329392ea47d43911738f4ade5eec9f45264da694e2a9b3be3570904c07ad77c790bd3e24759e64f2e2790356798b644f16d77ee4ca3f33d567ff3d851a70a3028cdbeb98f651f7daf22be9d7b79a1ed6b", 0x8a}, {&(0x7f0000000200)="b0d75be2efc2a31d2412e47e41aaccb7c677fd6ff4ab773059f5de9fffbf23f8", 0x20}, {&(0x7f0000000240)="9e9c69f46eaec4d7dddb52ef185972aa11dbbbf49d", 0x15}], 0x3) [ 385.575942][T27498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 385.638371][T27498] loop1: detected capacity change from 0 to 8192 [ 385.650599][T27503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.653444][T27498] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 385.711667][T27533] loop4: detected capacity change from 0 to 16376 [ 385.714259][T27498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 385.739349][T27498] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 385.747381][T27498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 385.756752][T27533] NILFS (loop4): couldn't find nilfs on the device 19:39:37 executing program 3 (fault-call:4 fault-nth:1): r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x4000000}) 19:39:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x9, 0x80, 0x35, 0x3, 0x0, 0x80, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5257, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x8000, 0x4, 0x7fff, 0x4, 0xc5aa9da, 0x1, 0x7}, 0xffffffffffffffff, 0x9, r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') link(&(0x7f0000000400)='./bus\x00', &(0x7f0000000480)='./bus\x00') fchown(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x2, 0x0, 0x1f, 0x2, 0x0, 0x2, 0x2010, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x1000, 0x2, 0x6, 0x1, 0x1, 0xffffffff, 0xcbb}, 0xffffffffffffffff, 0x9, r4, 0xa) r5 = dup(r3) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000ffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf255c00000008000300", @ANYRES32=0x0, @ANYBLOB="08dd6a00e0010040"], 0x24}}, 0x4008081) 19:39:37 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x60, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 385.836440][T27540] loop4: detected capacity change from 0 to 16376 [ 385.851743][T27548] FAULT_INJECTION: forcing a failure. [ 385.851743][T27548] name failslab, interval 1, probability 0, space 0, times 0 [ 385.861717][T27540] NILFS (loop4): couldn't find nilfs on the device [ 385.877009][T27548] CPU: 1 PID: 27548 Comm: syz-executor.3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 385.887198][T27548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.897776][T27548] Call Trace: [ 385.901110][T27548] dump_stack+0x137/0x19d [ 385.905453][T27548] should_fail+0x23c/0x250 [ 385.909879][T27548] __should_failslab+0x81/0x90 [ 385.914770][T27548] ? tomoyo_encode2+0x1d3/0x350 [ 385.919720][T27548] should_failslab+0x5/0x20 [ 385.924246][T27548] __kmalloc+0x66/0x380 [ 385.928534][T27548] tomoyo_encode2+0x1d3/0x350 [ 385.933248][T27548] ? sock_free_inode+0x30/0x30 [ 385.938038][T27548] tomoyo_realpath_from_path+0x35e/0x3b0 [ 385.943739][T27548] tomoyo_path_number_perm+0xc1/0x2d0 [ 385.949125][T27548] ? __rcu_read_unlock+0x5c/0x250 [ 385.954188][T27548] tomoyo_file_ioctl+0x1c/0x20 [ 385.958994][T27548] security_file_ioctl+0x45/0x90 [ 385.964043][T27548] __se_sys_ioctl+0x48/0x140 [ 385.968647][T27548] __x64_sys_ioctl+0x3f/0x50 [ 385.973303][T27548] do_syscall_64+0x39/0x80 [ 385.977839][T27548] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 385.983743][T27548] RIP: 0033:0x466459 [ 385.987646][T27548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 386.007253][T27548] RSP: 002b:00007f4f346e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.015774][T27548] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 386.023742][T27548] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003 [ 386.031809][T27548] RBP: 00007f4f346e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 386.040150][T27548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.048314][T27548] R13: 00007ffe47e4e51f R14: 00007f4f346e7300 R15: 0000000000022000 [ 386.056755][ C1] ------------[ cut here ]------------ [ 386.063462][ C1] WARNING: CPU: 1 PID: 27548 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 386.074337][ C1] Modules linked in: [ 386.078937][ C1] CPU: 1 PID: 27548 Comm: syz-executor.3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 386.089305][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.099362][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 386.105348][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 386.124966][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 386.131034][ C1] RAX: ffffffff82eb5059 RBX: 000000000000000b RCX: ffff8880220f1000 [ 386.139106][ C1] RDX: 0000000000010001 RSI: 000000000000000b RDI: 0000000000000001 [ 386.147083][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 386.155065][ C1] R10: 0001ffffffffffff R11: 0000000000000226 R12: ffff88813bd1da58 [ 386.163025][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 386.170989][ C1] FS: 00007f4f346e7700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 386.179941][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.186531][ C1] CR2: 00007f636fe19000 CR3: 000000010ae34000 CR4: 00000000001526e0 [ 386.194512][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.202481][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.210445][ C1] Call Trace: [ 386.213716][ C1] [ 386.216569][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 386.222371][ C1] __run_hrtimer+0x163/0x460 [ 386.226954][ C1] hrtimer_interrupt+0x380/0xaf0 [ 386.231886][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 386.237791][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 386.243425][ C1] [ 386.246371][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 386.252343][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 386.258147][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 386.277930][ C1] RSP: 0018:ffffc9000a883a58 EFLAGS: 00000202 [ 386.284084][ C1] RAX: 0000000000000000 RBX: ffff8880220f1000 RCX: ffffffff85a00e37 [ 386.292234][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 386.301020][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.309002][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 386.317142][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.325109][ C1] ? native_iret+0x7/0x7 [ 386.329443][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 386.335617][ C1] irqentry_exit+0x2a/0x40 [ 386.340053][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 386.345982][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 386.351286][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 386.371413][ C1] RSP: 0018:ffffc9000a883b30 EFLAGS: 00000283 [ 386.377494][ C1] RAX: 43aa7081addca300 RBX: 00000000ffffffff RCX: 0000000000040000 [ 386.385459][ C1] RDX: ffffc9000e6c2000 RSI: 0000000000018f66 RDI: 0000000000018f67 [ 386.393453][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 00018880220f13cf [ 386.401417][ C1] R10: 0001ffffffffffff R11: ffff8880220f1000 R12: ffffffff8779af68 [ 386.409390][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 386.417352][ C1] ? dump_stack+0x15e/0x19d [ 386.421866][ C1] should_fail+0x23c/0x250 [ 386.426274][ C1] __should_failslab+0x81/0x90 [ 386.431031][ C1] ? tomoyo_encode2+0x1d3/0x350 [ 386.435885][ C1] should_failslab+0x5/0x20 [ 386.440382][ C1] __kmalloc+0x66/0x380 [ 386.444553][ C1] tomoyo_encode2+0x1d3/0x350 [ 386.449225][ C1] ? sock_free_inode+0x30/0x30 [ 386.453996][ C1] tomoyo_realpath_from_path+0x35e/0x3b0 [ 386.459741][ C1] tomoyo_path_number_perm+0xc1/0x2d0 [ 386.465130][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 386.470240][ C1] tomoyo_file_ioctl+0x1c/0x20 [ 386.475023][ C1] security_file_ioctl+0x45/0x90 [ 386.479977][ C1] __se_sys_ioctl+0x48/0x140 [ 386.484564][ C1] __x64_sys_ioctl+0x3f/0x50 [ 386.489176][ C1] do_syscall_64+0x39/0x80 [ 386.494205][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 386.500113][ C1] RIP: 0033:0x466459 [ 386.504016][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 386.523795][ C1] RSP: 002b:00007f4f346e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.532217][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 386.540207][ C1] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003 [ 386.548190][ C1] RBP: 00007f4f346e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 386.556358][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.564322][ C1] R13: 00007ffe47e4e51f R14: 00007f4f346e7300 R15: 0000000000022000 [ 386.572315][ C1] ---[ end trace 215dd0f65ef481ec ]--- [ 386.578126][ C1] ------------[ cut here ]------------ [ 386.583581][ C1] WARNING: CPU: 1 PID: 27548 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 386.594438][ C1] Modules linked in: [ 386.598357][ C1] CPU: 1 PID: 27548 Comm: syz-executor.3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 386.608530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.619279][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 386.625383][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 386.645090][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 386.651159][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001f RCX: ffff8880220f1000 [ 386.659127][ C1] RDX: 0000000000010001 RSI: 000000000000001f RDI: 0000000000000001 [ 386.667115][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 386.675101][ C1] R10: 0001ffffffffffff R11: ffff8880220f1000 R12: ffff88813bd1da58 [ 386.683076][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 386.691054][ C1] FS: 00007f4f346e7700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 386.699999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.706592][ C1] CR2: 00007f636fe19000 CR3: 000000010ae34000 CR4: 00000000001526e0 [ 386.714565][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.722637][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.730617][ C1] Call Trace: [ 386.733887][ C1] [ 386.736722][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 386.742530][ C1] __run_hrtimer+0x163/0x460 [ 386.747122][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 386.752969][ C1] hrtimer_interrupt+0x380/0xaf0 [ 386.758357][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 386.764675][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 386.770335][ C1] [ 386.773364][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 386.779547][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 386.788397][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 386.808296][ C1] RSP: 0018:ffffc9000a883a58 EFLAGS: 00000202 [ 386.814645][ C1] RAX: 0000000000000000 RBX: ffff8880220f1000 RCX: ffffffff85a00e37 [ 386.823668][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 386.833561][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.841937][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 386.850003][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.858795][ C1] ? native_iret+0x7/0x7 [ 386.863840][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 386.869892][ C1] irqentry_exit+0x2a/0x40 [ 386.874321][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 386.879821][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 386.884934][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 386.904639][ C1] RSP: 0018:ffffc9000a883b30 EFLAGS: 00000283 [ 386.910798][ C1] RAX: 43aa7081addca300 RBX: 00000000ffffffff RCX: 0000000000040000 [ 386.918786][ C1] RDX: ffffc9000e6c2000 RSI: 0000000000018f66 RDI: 0000000000018f67 [ 386.926748][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 00018880220f13cf [ 386.934810][ C1] R10: 0001ffffffffffff R11: ffff8880220f1000 R12: ffffffff8779af68 [ 386.942772][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 386.950744][ C1] ? dump_stack+0x15e/0x19d [ 386.955268][ C1] should_fail+0x23c/0x250 [ 386.959674][ C1] __should_failslab+0x81/0x90 [ 386.964432][ C1] ? tomoyo_encode2+0x1d3/0x350 [ 386.969287][ C1] should_failslab+0x5/0x20 [ 386.973829][ C1] __kmalloc+0x66/0x380 [ 386.977977][ C1] tomoyo_encode2+0x1d3/0x350 [ 386.982663][ C1] ? sock_free_inode+0x30/0x30 [ 386.987415][ C1] tomoyo_realpath_from_path+0x35e/0x3b0 [ 386.993049][ C1] tomoyo_path_number_perm+0xc1/0x2d0 [ 386.998426][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 387.003451][ C1] tomoyo_file_ioctl+0x1c/0x20 [ 387.008229][ C1] security_file_ioctl+0x45/0x90 [ 387.013174][ C1] __se_sys_ioctl+0x48/0x140 [ 387.017758][ C1] __x64_sys_ioctl+0x3f/0x50 [ 387.022365][ C1] do_syscall_64+0x39/0x80 [ 387.026786][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 387.032690][ C1] RIP: 0033:0x466459 [ 387.036581][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 387.056197][ C1] RSP: 002b:00007f4f346e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.064626][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 387.072701][ C1] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003 [ 387.080756][ C1] RBP: 00007f4f346e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.088723][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.096687][ C1] R13: 00007ffe47e4e51f R14: 00007f4f346e7300 R15: 0000000000022000 [ 387.104667][ C1] ---[ end trace 215dd0f65ef481ed ]--- [ 387.110551][ C1] ------------[ cut here ]------------ [ 387.115994][ C1] WARNING: CPU: 1 PID: 27548 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 387.126846][ C1] Modules linked in: [ 387.130729][ C1] CPU: 1 PID: 27548 Comm: syz-executor.3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 387.141518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.151657][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 387.157644][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 387.177252][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 387.183319][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000020 RCX: ffff8880220f1000 [ 387.191284][ C1] RDX: 0000000000010001 RSI: 0000000000000020 RDI: 0000000000000001 [ 387.199252][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 387.207255][ C1] R10: 0001ffffffffffff R11: ffff8880220f1000 R12: ffff88813bd1da58 [ 387.215237][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 387.223244][ C1] FS: 00007f4f346e7700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 387.232183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.238776][ C1] CR2: 00007f636fe19000 CR3: 000000010ae34000 CR4: 00000000001526e0 [ 387.246751][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.255451][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.263510][ C1] Call Trace: [ 387.266789][ C1] [ 387.269633][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 387.275455][ C1] __run_hrtimer+0x163/0x460 [ 387.280055][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 387.286466][ C1] hrtimer_interrupt+0x380/0xaf0 [ 387.291427][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 387.297327][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 387.303075][ C1] [ 387.305994][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 387.312573][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 387.318404][ C1] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 387.338723][ C1] RSP: 0018:ffffc9000a883a58 EFLAGS: 00000202 [ 387.345860][ C1] RAX: 0000000000000000 RBX: ffff8880220f1000 RCX: ffffffff85a00e37 [ 387.354084][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 387.363019][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.371117][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 387.379191][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.388471][ C1] ? native_iret+0x7/0x7 [ 387.392885][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 387.398598][ C1] irqentry_exit+0x2a/0x40 [ 387.403022][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 387.408475][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 387.413841][ C1] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 387.434065][ C1] RSP: 0018:ffffc9000a883b30 EFLAGS: 00000283 [ 387.440142][ C1] RAX: 43aa7081addca300 RBX: 00000000ffffffff RCX: 0000000000040000 [ 387.448117][ C1] RDX: ffffc9000e6c2000 RSI: 0000000000018f66 RDI: 0000000000018f67 [ 387.456081][ C1] RBP: 0000000000000001 R08: ffffffff82a62411 R09: 00018880220f13cf [ 387.464060][ C1] R10: 0001ffffffffffff R11: ffff8880220f1000 R12: ffffffff8779af68 [ 387.472032][ C1] R13: 0000000000000001 R14: ffffffff8779af80 R15: 0000000000000200 [ 387.480027][ C1] ? dump_stack+0x15e/0x19d [ 387.484530][ C1] should_fail+0x23c/0x250 [ 387.488951][ C1] __should_failslab+0x81/0x90 [ 387.493722][ C1] ? tomoyo_encode2+0x1d3/0x350 [ 387.498571][ C1] should_failslab+0x5/0x20 [ 387.503082][ C1] __kmalloc+0x66/0x380 [ 387.507263][ C1] tomoyo_encode2+0x1d3/0x350 [ 387.511954][ C1] ? sock_free_inode+0x30/0x30 [ 387.517055][ C1] tomoyo_realpath_from_path+0x35e/0x3b0 [ 387.522780][ C1] tomoyo_path_number_perm+0xc1/0x2d0 [ 387.528158][ C1] ? __rcu_read_unlock+0x5c/0x250 [ 387.533178][ C1] tomoyo_file_ioctl+0x1c/0x20 [ 387.537941][ C1] security_file_ioctl+0x45/0x90 [ 387.542872][ C1] __se_sys_ioctl+0x48/0x140 [ 387.547455][ C1] __x64_sys_ioctl+0x3f/0x50 [ 387.552046][ C1] do_syscall_64+0x39/0x80 [ 387.556456][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 387.562343][ C1] RIP: 0033:0x466459 [ 387.566229][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 387.585842][ C1] RSP: 002b:00007f4f346e7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:39:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x5000000}) [ 387.594271][ C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 387.602338][ C1] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003 [ 387.610300][ C1] RBP: 00007f4f346e71d0 R08: 0000000000000000 R09: 0000000000000000 [ 387.618266][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.626253][ C1] R13: 00007ffe47e4e51f R14: 00007f4f346e7300 R15: 0000000000022000 [ 387.634242][ C1] ---[ end trace 215dd0f65ef481ee ]--- 19:39:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 387.740059][ C1] ------------[ cut here ]------------ [ 387.745545][ C1] WARNING: CPU: 1 PID: 8882 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 387.748678][T27548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.756313][ C1] Modules linked in: [ 387.756325][ C1] CPU: 1 PID: 8882 Comm: kworker/1:3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 387.756345][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.756356][ C1] Workqueue: rcu_gp process_srcu [ 387.756375][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 387.756398][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 387.756435][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 387.788903][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 387.788916][ T36] audit: type=1804 audit(1617392379.380:147): pid=27556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir043329543/syzkaller.CI2JPI/830/bus" dev="sda1" ino=14131 res=1 errno=0 [ 387.791722][ C1] [ 387.791727][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000026 RCX: ffff88801df09000 [ 387.791742][ C1] RDX: 0000000080010001 RSI: 0000000000000026 RDI: 0000000000000001 [ 387.822511][ T36] audit: type=1804 audit(1617392379.380:148): pid=27558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir043329543/syzkaller.CI2JPI/830/bus" dev="sda1" ino=14131 res=1 errno=0 [ 387.823845][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 387.823862][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 387.914775][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 387.922748][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 387.931694][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.938261][ C1] CR2: 0000000000000000 CR3: 0000000020464000 CR4: 00000000001526e0 [ 387.946227][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.954273][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.962226][ C1] Call Trace: [ 387.965755][ C1] [ 387.968680][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 387.974496][ C1] __run_hrtimer+0x163/0x460 [ 387.979098][ C1] hrtimer_interrupt+0x380/0xaf0 [ 387.984021][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 387.989931][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 387.995578][ C1] [ 387.998503][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 388.004461][ C1] RIP: 0010:delay_tsc+0x62/0xa0 [ 388.009291][ C1] Code: 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 65 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 4c 29 ca 65 ff 0d 63 83 58 7d 0f 95 c0 [ 388.028966][ C1] RSP: 0018:ffffc90001517cb8 EFLAGS: 00000246 [ 388.035028][ C1] RAX: 000000003532a187 RBX: 0000000000000001 RCX: 0000000000000001 [ 388.042986][ C1] RDX: 00000000000000d1 RSI: 0000000000000001 RDI: 0000000000002ced [ 388.051050][ C1] RBP: ffffc90001517d10 R08: 0000000000000001 R09: 000000d135328716 [ 388.059218][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffc9000a8961a0 [ 388.067214][ C1] R13: 0000000000000000 R14: ffffc9000a896190 R15: 0000000000000001 [ 388.077730][ C1] try_check_zero+0x1e6/0x200 [ 388.082747][ C1] process_srcu+0x13d/0x760 [ 388.087248][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 388.092801][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 388.098183][ C1] ? strscpy+0x12f/0x160 [ 388.102423][ C1] process_one_work+0x3e1/0x950 [ 388.107262][ C1] worker_thread+0x616/0xa70 [ 388.111855][ C1] ? finish_task_switch+0xc0/0x2a0 [ 388.116951][ C1] ? process_one_work+0x950/0x950 [ 388.121987][ C1] kthread+0x20b/0x230 [ 388.126058][ C1] ? process_one_work+0x950/0x950 [ 388.131082][ C1] ? kthread_blkcg+0x80/0x80 [ 388.135661][ C1] ret_from_fork+0x1f/0x30 [ 388.140068][ C1] ---[ end trace 215dd0f65ef481ef ]--- [ 388.145967][ C1] ------------[ cut here ]------------ [ 388.151443][ C1] WARNING: CPU: 1 PID: 8882 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 388.162743][ C1] Modules linked in: [ 388.166628][ C1] CPU: 1 PID: 8882 Comm: kworker/1:3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 388.176405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.186442][ C1] Workqueue: rcu_gp process_srcu [ 388.191363][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 388.197355][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 388.217054][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 388.223129][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000018 RCX: ffff88801df09000 [ 388.231077][ C1] RDX: 0000000080010001 RSI: 0000000000000018 RDI: 0000000000000001 [ 388.239048][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 388.247003][ C1] R10: 0001ffffffffffff R11: ffff88801df09000 R12: ffff88813bd1da58 [ 388.257233][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 388.265602][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 388.275058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.282008][ C1] CR2: 0000000000000000 CR3: 0000000020464000 CR4: 00000000001526e0 [ 388.290534][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.298604][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.306663][ C1] Call Trace: [ 388.309937][ C1] [ 388.312785][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 388.318713][ C1] __run_hrtimer+0x163/0x460 [ 388.323310][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 388.329099][ C1] hrtimer_interrupt+0x380/0xaf0 [ 388.334048][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 388.339933][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 388.345784][ C1] [ 388.348695][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 388.354679][ C1] RIP: 0010:delay_tsc+0x62/0xa0 [ 388.359539][ C1] Code: 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 65 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 4c 29 ca 65 ff 0d 63 83 58 7d 0f 95 c0 [ 388.379169][ C1] RSP: 0018:ffffc90001517cb8 EFLAGS: 00000246 [ 388.385239][ C1] RAX: 000000003532a187 RBX: 0000000000000001 RCX: 0000000000000001 [ 388.393205][ C1] RDX: 00000000000000d1 RSI: 0000000000000001 RDI: 0000000000002ced [ 388.401261][ C1] RBP: ffffc90001517d10 R08: 0000000000000001 R09: 000000d135328716 [ 388.409249][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffc9000a8961a0 [ 388.417227][ C1] R13: 0000000000000000 R14: ffffc9000a896190 R15: 0000000000000001 [ 388.425193][ C1] try_check_zero+0x1e6/0x200 [ 388.429873][ C1] process_srcu+0x13d/0x760 [ 388.434382][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 388.439949][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 [ 388.445315][ C1] ? strscpy+0x12f/0x160 [ 388.449571][ C1] process_one_work+0x3e1/0x950 [ 388.454455][ C1] worker_thread+0x616/0xa70 [ 388.460035][ C1] ? finish_task_switch+0xc0/0x2a0 [ 388.465160][ C1] ? process_one_work+0x950/0x950 [ 388.471060][ C1] kthread+0x20b/0x230 [ 388.475112][ C1] ? process_one_work+0x950/0x950 [ 388.480160][ C1] ? kthread_blkcg+0x80/0x80 [ 388.484753][ C1] ret_from_fork+0x1f/0x30 [ 388.489370][ C1] ---[ end trace 215dd0f65ef481f0 ]--- [ 388.495263][ C1] ------------[ cut here ]------------ [ 388.500757][ C1] WARNING: CPU: 1 PID: 8882 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 388.511629][ C1] Modules linked in: [ 388.515511][ C1] CPU: 1 PID: 8882 Comm: kworker/1:3 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 388.525304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.535353][ C1] Workqueue: rcu_gp process_srcu [ 388.540410][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 388.546494][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 388.566150][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 388.572741][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000015 RCX: ffff88801df09000 [ 388.580698][ C1] RDX: 0000000080010001 RSI: 0000000000000015 RDI: 0000000000000001 [ 388.588670][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 388.597151][ C1] R10: 0001ffffffffffff R11: 0000000000000251 R12: ffff88813bd1da58 [ 388.605157][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 388.613128][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 388.622058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.628919][ C1] CR2: 0000000000000000 CR3: 0000000020464000 CR4: 00000000001526e0 [ 388.636891][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.644877][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.652880][ C1] Call Trace: [ 388.656229][ C1] [ 388.659139][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 388.664979][ C1] __run_hrtimer+0x163/0x460 [ 388.669566][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 388.675448][ C1] hrtimer_interrupt+0x380/0xaf0 [ 388.680386][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 388.686279][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 388.691898][ C1] [ 388.694833][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 388.700794][ C1] RIP: 0010:delay_tsc+0x62/0xa0 [ 388.705636][ C1] Code: 48 39 fa 73 59 0f 1f 00 a8 01 75 05 e8 5e 45 57 fe f3 90 65 83 05 85 83 58 7d 01 65 8b 35 c6 2b 58 7d 41 39 f0 75 20 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 4c 29 ca 65 ff 0d 63 83 58 7d 0f 95 c0 [ 388.725229][ C1] RSP: 0018:ffffc90001517cb8 EFLAGS: 00000246 [ 388.731304][ C1] RAX: 000000003532a187 RBX: 0000000000000001 RCX: 0000000000000001 [ 388.739266][ C1] RDX: 00000000000000d1 RSI: 0000000000000001 RDI: 0000000000002ced [ 388.747233][ C1] RBP: ffffc90001517d10 R08: 0000000000000001 R09: 000000d135328716 [ 388.755201][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffc9000a8961a0 [ 388.763181][ C1] R13: 0000000000000000 R14: ffffc9000a896190 R15: 0000000000000001 [ 388.771234][ C1] try_check_zero+0x1e6/0x200 [ 388.775895][ C1] process_srcu+0x13d/0x760 [ 388.780397][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 388.786096][ C1] ? pwq_dec_nr_in_flight+0x318/0x560 19:39:40 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x68, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 388.791470][ C1] ? strscpy+0x12f/0x160 [ 388.795715][ C1] process_one_work+0x3e1/0x950 [ 388.800544][ C1] worker_thread+0x616/0xa70 [ 388.805110][ C1] ? finish_task_switch+0xc0/0x2a0 [ 388.810310][ C1] ? process_one_work+0x950/0x950 [ 388.815323][ C1] kthread+0x20b/0x230 [ 388.819378][ C1] ? process_one_work+0x950/0x950 [ 388.824396][ C1] ? kthread_blkcg+0x80/0x80 [ 388.828967][ C1] ret_from_fork+0x1f/0x30 [ 388.833380][ C1] ---[ end trace 215dd0f65ef481f1 ]--- [ 388.939260][ C1] ------------[ cut here ]------------ [ 388.944740][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 388.955233][ C1] Modules linked in: [ 388.959146][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 388.968502][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.978537][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 388.984516][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 389.004104][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 389.010154][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff888100c2d000 [ 389.018580][ C1] RDX: 0000000000010001 RSI: 000000000000001b RDI: 0000000000000001 [ 389.029914][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 389.039176][ C1] R10: 0001ffffffffffff R11: 000000000000001f R12: ffff88813bd1da58 [ 389.047232][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 389.056200][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 389.065385][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.071950][ C1] CR2: 0000000000000000 CR3: 0000000007629000 CR4: 00000000001506e0 [ 389.079908][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.087881][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.095841][ C1] Call Trace: [ 389.099461][ C1] [ 389.102285][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 389.108263][ C1] __run_hrtimer+0x163/0x460 [ 389.112846][ C1] hrtimer_interrupt+0x380/0xaf0 [ 389.117774][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 389.123860][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 389.129497][ C1] [ 389.132518][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 389.138481][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 389.144536][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 389.164240][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 389.170308][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 389.178272][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.186237][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 389.194204][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 389.202168][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 389.210128][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 389.215048][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 389.220070][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 389.224989][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 389.230089][ C1] cpuidle_enter+0x3c/0x60 [ 389.234500][ C1] do_idle+0x193/0x230 19:39:41 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x1e6, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) syz_usb_connect(0x6, 0xddd, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xfe, 0x15, 0xce, 0x8, 0x424, 0x9730, 0x4b1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdcb, 0x4, 0x7, 0x3, 0xb0, 0x2, [{{0x9, 0x4, 0x18, 0x69, 0x6, 0x5e, 0xbf, 0xe5, 0x3, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x4, 0x9d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0x0, 0x5, [@generic={0x6e, 0xb, "89230163758f85297e9cbfdbfbdf53eb9b0c5bc79fc4ca0666024cd8df7eec27c6e02419b13680e5d28e9e453616b80b3e258a6921b89ee2f218cd93bf2615ee158092c398cc9e8eeaef79150729f8ed09dd7c62c97efd6cfa5e915baeec6766237e5405dbb894ec5a54a740"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x1, 0x20, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x1, 0xfc00}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x3f, 0x4}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x1, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8001}]}}]}}, {{0x9, 0x4, 0xb3, 0xff, 0xa, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0xf0, 0x2}}, {{0x9, 0x5, 0xc, 0x3, 0x1cf, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe8, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x80}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x1c, 0x80, 0xff}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x28, 0x20, 0x40, [@generic={0x2f, 0xc, "f9dd4502bd0707ad80d8bcf244ab94a4b88ffb3047ce5efa6e3422e8e3ffb13a1e7c886cbed20944ec1399353e"}, @generic={0x2b, 0x0, "0a9a189a902bc7578867596e2cde45ff73aa62ef75a7ab030b8b7bd28c49f8c8c9ae525538516783a6"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x993}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0x6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x80}]}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x0, 0x8, 0x0, [@generic={0x56, 0x5, "cbf8484ee801894026a267bdf6c7b62305db19c49717bb632143420df289aee259e06203ad87f122bf9b53b73e3cde5f616f16ae98c25b5cb0c87f2b361a88525b052d9613c071d1407ada84e7a04ca2ae2d79a5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xff, 0x40, 0xbf, [@generic={0x57, 0x4, "91a3d2f2481e66b198da26c636fa5060e21abea6213e37dbb35f378e40d42c0551044284fe490838663b2f569f8133e46ce2a6012c56a6207cb023fdb07ee5bdcf831b81e4fdfb1dda1ccd028c6d334863f8948d58"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x8b, 0x5, 0x20, [@generic={0x9a, 0x6, "1d90de1418eb102290f544e6b2c709f90b176e27b034b16329e40df36ec59c60db99186dcdc0a9a4dbe871d3c7e970cf4857a45c9080f546e37a2f3880de91a876075e19b8d02dab0ed77a96069ad14fa2bba2190fd9d5f31cc33585aedfb3c3279a37691533199b004ace39c84b1a5c26f39528dcc9f8873ea744fd4b4590c8fad94cd2808de2873ca7de7ec3f1f2fa90a2f075895088b1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x15, 0xb81}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x3, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x2, 0x5, 0xe, 0x1e, 0x58, 0x87, 0x3, [], [{{0x9, 0x5, 0xb79693c5bf473222, 0x0, 0x8, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x81, 0x3, 0x1, [@generic={0x9f, 0xd, "e2918d95ca2f00bbc9e6ad7f8a3ee1fc8d24479c62d1eb073647af92ff3e6c30087ef069f879c835d4fa2e13165bab122cd3cb69d7ef3533b8c248fb7b4560f1eef9e694076ce2a06802a272de5583d3d8e3e24480ccd09ca940c8109f7276cb7f8abc7bac2326a249e3a3af9cccf8a24d49b2317c930834669d09b414f9de532456891452abc3fc108e02e4ab5a04b36b62e36a500d3829feeb4c9215"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xfe, 0x89, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5c, 0x18}, @generic={0x9f, 0x23, "7b47158a3ff669356b4202852cdfb5ed078e320359e3716728ec262d4f7f4d98e4c359d477005f03bf9409f45bdc73920c91c5ee8cc5047215e51dfbc81292f850573f507d7fd38f05f5d1ab581a726952bd2805ee8b6c94123939cdeea732b4f128a34bda525ffa74933a7b08187956779a5a7723f2307d82cc0dff80178f7396ade8553ae84f8fea460a9278322ff981b73337d63bd3526497f7893b"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x2, 0x26, 0x3, [@generic={0x4a, 0x21, "b23defcfd426c9a91a6d54f65237d270ee8759ed31331aeb8c7c4a35f09f51d7c207e0e4b7c687c5483e9ca3e61772e6d5663f0a7407f475231b76f9a72b966e882fee964f3f3330"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x1, 0x7f, 0x7, [@generic={0x8c, 0x4, "f4ac0f41df7c9d0c0ed2101a84021bbe54d4aea4e5f4e16ff9832e2deff653ea08591f170a8a37692c02a17a3a130e1061d72e80d3585a442c72941be5ddb432e36c646339664130493375436cdcd15501f002048c9cfdb9ceccc7431fc813c55b7d31e6a592aef69152cef397904d411777aec720bfd476fd045f0251828a5152fdbe14c2aa94b54410"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x8c, 0x7, 0x1, [@generic={0x42, 0xc, "8b37ce57ee5fb585fed77ad6ae5372f9feaee25fd28bf7d979966986f0bdbf9ecd09a0936391f36d839f2c195ab8cfcf305fc7387f8b7407fac778ff5f26727b"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x20, 0x2, 0x1c, [@generic={0x32, 0x23, "a453fb3cc9b73b4371838e31ae8a5dde643592a9171cfd57b9c8a5ec4ff82b0b29e9c17923af9994aaf268abead285dd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x10, 0x5, 0x9, [@generic={0x73, 0x22, "5b41988f3d3bb76cbdcb37ecae923cc994e3cb2fee0e4362c8ec1b4b413bf921903a87f54db87d321950b6fd88054af617949557c03b4e5f26d0368970597751e1384ec955cea20ba293bc1635de3d656a52faabff2b67091f4ee4c209bcd730c5ed8729a715abf545dd8b4c83313f46cc"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x3f, 0x0, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x3f, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x30, 0xd7, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x7, 0x3f, 0x8, [@generic={0xfc, 0x8, "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"}, @generic={0xda, 0x23, "50dae8beb3ac4c5d3aa89af1c8d4efd5362a0e32ccd146e1d5302fa6c207bda7ee5cc8dcf225b75271de13d4b41cce0bab36e71c319286462e904421c8ffbc5ecc4ce8881efcf478b9aae3ba44363633177113187245ffaf553ca9053f38b0ac6751b52a71b81a81f2b2a5bc9e9a3c5d02fa01e82551a18160e44093a151a381fd728297ff1db00c8808697bfd0951b4e6c3055bc1f5995291e1cb325256e87dbb25bf088dc5c90fc882e398cb542cf9cc65458831754af7d51d53fc19bba19d32924f24f85d59c09a2a821cc058dfa7513f3a715bfda8ef"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x220, 0x80, 0xff, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x4}]}}]}}, {{0x9, 0x4, 0x55, 0x7, 0xe, 0xc, 0x7b, 0x72, 0x0, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x59, 0x3, "fe", 'qf'}, @as_header={0x7, 0x24, 0x1, 0x40, 0x20, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x6, 0x8, "1b35", "bbe6"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x40, "", "dd"}]}, @hid_hid={0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7f4}}], [{{0x9, 0x5, 0x4, 0x9af63b2162909f76, 0x20, 0x1, 0x2, 0xff, [@generic={0xec, 0x11, "760ecae7507453ad6824b6b3778d7b75380406fac19c1cf6cf2f86e0daab06ac8392170c796b3d47cd6f9d31422ac1a4fea914c43ce51297cb0bcd8efee6aef226cb2bd56fdbd350a034703f13782bd995572490e1f5db76a027148ffab0d12f62864e1b943f45156825f2c80c39505710b9ad6c7f02aeb847fcded27eebd8985e2d016938c98c734c360dbded113bcea13445e6ba0aecff619eac290f78dc7eb51d9c1f3388d103b78cd9eba45781f99d80efd275f109bcc59d03519badd101152d5fb20d93218b635e1586d9adf3cc26d09b3eafff694f2e12eb8073d6dd5a000dfd7d38fe004fd74a"}]}}, {{0x9, 0x5, 0xc, 0x1b, 0x3ff, 0x9, 0x3, 0x40, [@generic={0x3a, 0x4, "1acf394c17849ab2f4ef8e6da07416740575afd8ce98361333b52562b875b97a1cfc10ddf886b0ca5d5af1875b3f6f8d504e4796c8ba7ba1"}, @generic={0xa9, 0x21, "c6c823253433e04ab47845e50482b738140404b0f1e1bef4bdc0759e7ead6385f0182e464e8d640ddccad2caf535076a7d01d4c6fd170d9cd76288ef3b53ad4020f53d03277cfebd82e0f51e60b6daae16cf7079e07a084c15dd9e8219df80bb1108486acc9d921e80732c27c2a51756395aa179c58f7db162987a744b147f771bc1d23bd929deec2455921610b6cac87a7e7e9194c82f60e5fbb6440420c13ea0817b3971c05c"}]}}, {{0x9, 0x5, 0x0, 0xec16b92d8f7ac1b3, 0x3ff, 0x9, 0x3, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x6, 0xe, 0x6, [@generic={0x84, 0x9, "8269a4c97f99397f1198a9d1d8b9f62d0e73af1db7056501b8832979b57e58379fbce976239f5893e76f1686591fb1c08ac0412b0210d09553f0ebb0054a50217d70ed38af2e91ee039f6022ac0c9ab4551358e65870da6bc8b879e85bd3955371b09a4db8410d1676011b15e80465b0d733de9d1c26d212daa5f0901960fd3264b0"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x7f, 0x20, 0x2, [@generic={0xd4, 0x22, "20868cb01ab5b4bc027cdc28d88b7c994d650bf28e6ce76499b106629780bb39d1a00dc6febd412e73f66c432e86fa4885e82c292faade42bb9a67956c5f7896a7373724c40e3702689940e34f9f77cc7ca091cd7a18061ffc4c93883f5ec8ed7c3d1eb3b1f242bcb3e7295ecec860fd46f1beac704a20f905df727b023f5add97a433c5d81f34f79e1cf981f20a4fc96a075497e48d73eeea0da245dbddf7ff5f02f36401250bc000fa4b08244ce2e4b751bb14199dc808aa914e9a09b1b6caccf224f8e876ac21dde9396a15ef98b0efb1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0xb3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7c, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3df, 0xc0, 0x3, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x48, 0x4, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x7f}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x3f, 0x56, 0xe7, [@generic={0xf8, 0xd, "72fd29c344e0d82af25143e718db3242699e1587be8561f54ffa8cedd293f5171e406b510f16b7834f1c9ead66cee4c099d2b08eb5482b975fc70f7b55716f574817376ad0b966f208e38f2df2194fe372d18e40ac7b8ef254dc8a32439093a8aa1cbd30ed6c2c228896cfa9da5ad3b9dc03dd3b55e2ca8e482ad7c862bf85812de440754d682038345d55db2e3ab51c85d387639a247383b1282bdd81224cd1c2f648ee644a595f8cac06d486de86cb4f3c99d2c6dce1979dcc9d0159f82c75b1cc4bf53dd512316a853fb47fa72c36a4f079db74d91664b18840fbb51e06bba32f8670b55b8095a9c84efd3c950f49350f2dcd0c19"}, @generic={0x27, 0xd, "b1b779fa6c0a5e9f821d1528a285952608d418fb3d888b325c1648a503362ad48e1a6cc86c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x81, 0xd4, 0x7f}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xd3, 0xe, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1, 0x1, 0x5, [@generic={0x14, 0x21, "d27b166b6097772f485b8d95a32947ec8018"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x1}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x1f, 0x2, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x2, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x2, 0x81, 0x2}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x81, 0x56, 0x3, 0x8, 0x3}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x1, 0xfffb}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b45f848682da3a56c9bcf06359666295"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x436}}, {0x86, &(0x7f0000000140)=@string={0x86, 0x3, "d190a3d6ce16ff9e324325e7b609e7869172c5ff73e2aede88fba789f8385976af69ff58feed937c2dcd756aa1b2507d632c65cb6048dddfa30d16838f262987e7f3380da5524f6b6c1c30468bb85c8420155a7f404924d398db4d0881b7ed5202135088f682e5906492497b511c16d058d9c89c691fd0825dda464f91b26840c88143fd"}}, {0x8e, &(0x7f00000010c0)=@string={0x8e, 0x3, "ee10ebeb9481d5c72275d9f97fe05d699b0e133f8d455068862e5028b7e2b487a79983cf12ceaab0aaf9c639db5a2ae234c00594543a05d023c3c63adf1054f36359fea775b8b80f7e8a2f603843771836fddd1cd8b24be1c9b8aadc6a525043b0be607fd21e85624b5522ec702bd73a7e4511659556c5edf2a90c412232fbf29f30a21043803a76ec555db4"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001300)={0x2c, &(0x7f0000001180)={0x0, 0x9, 0xb8, {0xb8, 0x24, "3ceaf4e16c1114f485c41a64c28c805bd67b9cf16b3825d62678f34ca34c273947c9378f12a55fbd589b9bd1b383c54b620e461809c2ee86b2eed11656dc94e45f5596ee8b4b760a85198de28cc135694dd22676944ecea8b2295eafcd3d5cac876a5c3e94e60ace80affb440e55580a33c7ddf5f653078c0ee2f33a34fd8c37594676f5e3f6369c4801557d95772c4071a9cacab2286edf9af8b8ced5fc81a9964942d6043b2130695be6206f16a577a9f4c5e164a8"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000001240)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0xa, 0x7ff}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x8, 0xf0f, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "2c66750b5238917ed9a56b8ba4efc472"}]}}, &(0x7f0000001280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x94, 0x7f, "cee7a54c", "06d330b8"}}, &(0x7f00000012c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0xab, 0x7, 0x0, 0x0, 0x2, 0x1f}}}, &(0x7f0000001740)={0x84, &(0x7f0000001340)={0x0, 0x10, 0xf, "a1f4548935703b8704ce30a5a54c5a"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x8, 0x1}}, &(0x7f0000001480)={0x40, 0x7, 0x2}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0xc5}, &(0x7f0000001500)={0x40, 0xb, 0x2, "9376"}, &(0x7f0000001800)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001580)={0x40, 0x13, 0x6}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001600)={0x40, 0x19, 0x2, "f14d"}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x4}}) [ 389.238655][ C1] cpu_startup_entry+0x15/0x20 [ 389.243424][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 389.249328][ C1] ---[ end trace 215dd0f65ef481f2 ]--- [ 389.255162][ C1] ------------[ cut here ]------------ [ 389.260649][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 389.271163][ C1] Modules linked in: [ 389.275069][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 389.284454][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.294543][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 389.300642][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 389.320342][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 389.326404][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 389.334353][ C1] RDX: 0000000000010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 389.342319][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 389.350289][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff88813bd1da58 [ 389.358364][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 389.366325][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 389.375248][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.381830][ C1] CR2: 0000000000000000 CR3: 0000000007629000 CR4: 00000000001506e0 [ 389.389884][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.397860][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.405814][ C1] Call Trace: [ 389.409089][ C1] [ 389.411915][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 389.417720][ C1] __run_hrtimer+0x163/0x460 [ 389.422288][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 389.428102][ C1] hrtimer_interrupt+0x380/0xaf0 [ 389.433039][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 389.438917][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 389.444544][ C1] [ 389.447466][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 389.453432][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 389.458969][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 389.478843][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 389.484897][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 389.492857][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.500816][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 389.508766][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 389.516726][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 389.524681][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 389.529616][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 389.534556][ C1] ? acpi_idle_enter+0x242/0x2e0 19:39:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 389.539676][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 389.544884][ C1] cpuidle_enter+0x3c/0x60 [ 389.549773][ C1] do_idle+0x193/0x230 [ 389.553827][ C1] cpu_startup_entry+0x15/0x20 [ 389.558598][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 389.564477][ C1] ---[ end trace 215dd0f65ef481f3 ]--- [ 389.570291][ C1] ------------[ cut here ]------------ [ 389.575744][ C1] WARNING: CPU: 1 PID: 0 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 389.586372][ C1] Modules linked in: [ 389.590271][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 389.599632][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.610052][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 389.616050][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 389.635795][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 389.641861][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000013 RCX: ffff888100c2d000 [ 389.649849][ C1] RDX: 0000000000010001 RSI: 0000000000000013 RDI: 0000000000000001 [ 389.657841][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 389.665905][ C1] R10: 0001ffffffffffff R11: 000000000000037d R12: ffff88813bd1da58 [ 389.673880][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 389.681896][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 389.690906][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.697489][ C1] CR2: 0000000000000000 CR3: 0000000007629000 CR4: 00000000001506e0 [ 389.705470][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.713447][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.721414][ C1] Call Trace: [ 389.724681][ C1] [ 389.727528][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 389.734028][ C1] __run_hrtimer+0x163/0x460 [ 389.738613][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 389.744415][ C1] hrtimer_interrupt+0x380/0xaf0 [ 389.749350][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 389.755264][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 389.760907][ C1] [ 389.763826][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 389.769801][ C1] RIP: 0010:acpi_idle_enter+0x25b/0x2e0 [ 389.775342][ C1] Code: 48 8b 1b 48 89 de 48 83 e6 08 31 ff e8 ce b3 85 fe 48 83 e3 08 75 63 e9 0c 00 00 00 e8 0e af 85 fe 0f 00 2d 51 d3 3e 03 fb f4 eb 59 49 8d 7c 24 04 e8 28 45 96 fe 41 8b 54 24 04 ec 48 c7 c7 [ 389.794947][ C1] RSP: 0018:ffffc90000ce3e08 EFLAGS: 00000246 [ 389.801022][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 389.809009][ C1] RDX: ffff888100c2d000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.816977][ C1] RBP: 0000000000000001 R08: ffffffff82c086d2 R09: ffffffff82c08693 [ 389.824961][ C1] R10: 0000000000000002 R11: ffff888100c2d000 R12: ffff8881012d9464 [ 389.832944][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88813bd00000 [ 389.840941][ C1] ? acpi_idle_enter+0x203/0x2e0 [ 389.845882][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 389.850978][ C1] ? acpi_idle_enter+0x242/0x2e0 [ 389.855911][ C1] cpuidle_enter_state+0x2b6/0x7c0 [ 389.861044][ C1] cpuidle_enter+0x3c/0x60 [ 389.865475][ C1] do_idle+0x193/0x230 [ 389.869559][ C1] cpu_startup_entry+0x15/0x20 [ 389.877018][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 389.882910][ C1] ---[ end trace 215dd0f65ef481f4 ]--- 19:39:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setneightbl={0x38, 0x43, 0x2, 0x70bd2b, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0x7, 0x1, '%.\x00'}, @NDTA_THRESH2={0x8, 0x3, 0x401}, @NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xdb3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000081) [ 389.967080][T27576] loop1: detected capacity change from 0 to 8192 [ 389.988931][ C1] ------------[ cut here ]------------ [ 389.994477][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 390.005261][ C1] Modules linked in: [ 390.009170][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 390.019153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.029203][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 390.035204][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 390.054845][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 390.060926][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000019 RCX: ffff888105e93000 [ 390.068888][ C1] RDX: 0000000000010000 RSI: 0000000000000019 RDI: 0000000000000001 [ 390.076873][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 390.084865][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 390.092950][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 390.100926][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 390.109861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.116442][ C1] CR2: 000055c33a2cfc88 CR3: 0000000107abb000 CR4: 00000000001526e0 [ 390.124425][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.132393][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.140368][ C1] Call Trace: [ 390.143642][ C1] [ 390.146487][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 390.152311][ C1] __run_hrtimer+0x163/0x460 [ 390.156911][ C1] hrtimer_interrupt+0x380/0xaf0 [ 390.161851][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 390.167782][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 390.173433][ C1] [ 390.176353][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 390.182339][ C1] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 390.188500][ C1] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 390.208107][ C1] RSP: 0018:ffffc90000d839b8 EFLAGS: 00000246 [ 390.214183][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0009888105e933cc [ 390.222232][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.230718][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.238685][ C1] R10: ffffffff88f31fd0 R11: 0000000000000200 R12: 0000000000000014 [ 390.246678][ C1] R13: ffffffff81769aa4 R14: ffff888105e933cc R15: 0000000000000004 [ 390.254655][ C1] ? dput+0x384/0x430 [ 390.258663][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 390.264253][ C1] ? dput+0x384/0x430 [ 390.268263][ C1] __rcu_read_unlock+0x36/0x250 [ 390.273139][ C1] dput+0x384/0x430 [ 390.276967][ C1] step_into+0x1ab/0xec0 [ 390.281208][ C1] ? kernfs_dop_revalidate+0x1bc/0x1d0 [ 390.287205][ C1] walk_component+0x190/0x350 [ 390.291902][ C1] path_lookupat+0x12d/0x570 [ 390.297057][ C1] filename_lookup+0xf2/0x380 [ 390.301748][ C1] ? strncpy_from_user+0x178/0x250 [ 390.306871][ C1] user_path_at_empty+0x3b/0x50 [ 390.312184][ C1] vfs_statx+0x98/0x290 [ 390.316354][ C1] ? __seccomp_filter+0x4d4/0xe90 [ 390.321415][ C1] __se_sys_newlstat+0x46/0x250 [ 390.326270][ C1] ? __secure_computing+0x12e/0x1c0 [ 390.331464][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 390.336762][ C1] __x64_sys_newlstat+0x2d/0x40 [ 390.341629][ C1] do_syscall_64+0x39/0x80 [ 390.346304][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 390.352210][ C1] RIP: 0033:0x7fe430595335 [ 390.356628][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 390.376410][ C1] RSP: 002b:00007ffff4256ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 390.384827][ C1] RAX: ffffffffffffffda RBX: 000055c33a2b8d60 RCX: 00007fe430595335 [ 390.392795][ C1] RDX: 00007ffff4256b10 RSI: 00007ffff4256b10 RDI: 000055c33a2b7d60 [ 390.400794][ C1] RBP: 00007ffff4256bd0 R08: 00007fe4308542e8 R09: 0000000000001010 [ 390.409916][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33a2b7d60 [ 390.418166][ C1] R13: 000055c33a2b7d7a R14: 000055c33a2af925 R15: 000055c33a2af92a [ 390.426155][ C1] ---[ end trace 215dd0f65ef481f5 ]--- [ 390.431974][ C1] ------------[ cut here ]------------ [ 390.437419][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 390.448187][ C1] Modules linked in: [ 390.452076][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 390.462045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.472292][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 390.478282][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 390.497982][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 390.504049][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff888105e93000 [ 390.512014][ C1] RDX: 0000000000010000 RSI: 000000000000001a RDI: 0000000000000001 [ 390.520416][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 390.528422][ C1] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bd1da58 [ 390.536853][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 390.544934][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 390.553877][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.560890][ C1] CR2: 000055c33a2cfc88 CR3: 0000000107abb000 CR4: 00000000001526e0 [ 390.568857][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.576914][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.587666][ C1] Call Trace: [ 390.590948][ C1] [ 390.593821][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 390.599630][ C1] __run_hrtimer+0x163/0x460 [ 390.604362][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 390.610978][ C1] hrtimer_interrupt+0x380/0xaf0 [ 390.615919][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 390.621996][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 390.627730][ C1] [ 390.630662][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 390.636646][ C1] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 390.642799][ C1] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 390.662405][ C1] RSP: 0018:ffffc90000d839b8 EFLAGS: 00000246 [ 390.668466][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0009888105e933cc [ 390.676457][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.684419][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.692383][ C1] R10: ffffffff88f31fd0 R11: 0000000000000200 R12: 0000000000000014 [ 390.700346][ C1] R13: ffffffff81769aa4 R14: ffff888105e933cc R15: 0000000000000004 [ 390.708313][ C1] ? dput+0x384/0x430 [ 390.712334][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 390.718396][ C1] ? dput+0x384/0x430 [ 390.722377][ C1] __rcu_read_unlock+0x36/0x250 [ 390.727226][ C1] dput+0x384/0x430 [ 390.731037][ C1] step_into+0x1ab/0xec0 [ 390.735274][ C1] ? kernfs_dop_revalidate+0x1bc/0x1d0 [ 390.740755][ C1] walk_component+0x190/0x350 [ 390.745444][ C1] path_lookupat+0x12d/0x570 [ 390.751760][ C1] filename_lookup+0xf2/0x380 [ 390.756445][ C1] ? strncpy_from_user+0x178/0x250 [ 390.761743][ C1] user_path_at_empty+0x3b/0x50 [ 390.766595][ C1] vfs_statx+0x98/0x290 [ 390.770748][ C1] ? __seccomp_filter+0x4d4/0xe90 [ 390.775773][ C1] __se_sys_newlstat+0x46/0x250 [ 390.780640][ C1] ? __secure_computing+0x12e/0x1c0 [ 390.785829][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 390.791108][ C1] __x64_sys_newlstat+0x2d/0x40 [ 390.795957][ C1] do_syscall_64+0x39/0x80 [ 390.800375][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 390.806267][ C1] RIP: 0033:0x7fe430595335 [ 390.810703][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 390.830999][ C1] RSP: 002b:00007ffff4256ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 390.839445][ C1] RAX: ffffffffffffffda RBX: 000055c33a2b8d60 RCX: 00007fe430595335 [ 390.847433][ C1] RDX: 00007ffff4256b10 RSI: 00007ffff4256b10 RDI: 000055c33a2b7d60 [ 390.855406][ C1] RBP: 00007ffff4256bd0 R08: 00007fe4308542e8 R09: 0000000000001010 [ 390.863388][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33a2b7d60 [ 390.871374][ C1] R13: 000055c33a2b7d7a R14: 000055c33a2af925 R15: 000055c33a2af92a [ 390.879363][ C1] ---[ end trace 215dd0f65ef481f6 ]--- [ 390.885138][ C1] ------------[ cut here ]------------ [ 390.890582][ C1] WARNING: CPU: 1 PID: 4831 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 390.901367][ C1] Modules linked in: [ 390.905252][ C1] CPU: 1 PID: 4831 Comm: systemd-udevd Tainted: G W 5.12.0-rc5-syzkaller #0 [ 390.915233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.925301][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 390.931914][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 390.953265][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 390.959352][ C1] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff888105e93000 [ 390.967316][ C1] RDX: 0000000000010000 RSI: 000000000000001b RDI: 0000000000000001 [ 390.975282][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 390.983251][ C1] R10: 0001ffffffffffff R11: ffff888105e93000 R12: ffff88813bd1da58 [ 390.991214][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 390.999174][ C1] FS: 00007fe4317238c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 391.008182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.014755][ C1] CR2: 000055c33a2cfc88 CR3: 0000000107abb000 CR4: 00000000001526e0 [ 391.022734][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.030701][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.038771][ C1] Call Trace: [ 391.042058][ C1] [ 391.044895][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 391.050705][ C1] __run_hrtimer+0x163/0x460 [ 391.055301][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 391.061117][ C1] hrtimer_interrupt+0x380/0xaf0 [ 391.066091][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 391.072001][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 391.077661][ C1] [ 391.080595][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 391.086581][ C1] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 391.092733][ C1] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 391.112344][ C1] RSP: 0018:ffffc90000d839b8 EFLAGS: 00000246 [ 391.118417][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0009888105e933cc [ 391.126477][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.134530][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.142521][ C1] R10: ffffffff88f31fd0 R11: 0000000000000200 R12: 0000000000000014 [ 391.150504][ C1] R13: ffffffff81769aa4 R14: ffff888105e933cc R15: 0000000000000004 [ 391.158475][ C1] ? dput+0x384/0x430 [ 391.162459][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 391.167999][ C1] ? dput+0x384/0x430 [ 391.172000][ C1] __rcu_read_unlock+0x36/0x250 [ 391.176851][ C1] dput+0x384/0x430 [ 391.180670][ C1] step_into+0x1ab/0xec0 [ 391.184935][ C1] ? kernfs_dop_revalidate+0x1bc/0x1d0 [ 391.190393][ C1] walk_component+0x190/0x350 [ 391.195072][ C1] path_lookupat+0x12d/0x570 [ 391.199662][ C1] filename_lookup+0xf2/0x380 [ 391.204333][ C1] ? strncpy_from_user+0x178/0x250 [ 391.209485][ C1] user_path_at_empty+0x3b/0x50 [ 391.214327][ C1] vfs_statx+0x98/0x290 [ 391.218478][ C1] ? __seccomp_filter+0x4d4/0xe90 [ 391.223500][ C1] __se_sys_newlstat+0x46/0x250 [ 391.228348][ C1] ? __secure_computing+0x12e/0x1c0 [ 391.233565][ C1] ? syscall_trace_enter+0x153/0x2b0 [ 391.238842][ C1] __x64_sys_newlstat+0x2d/0x40 [ 391.243692][ C1] do_syscall_64+0x39/0x80 [ 391.248143][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 391.254065][ C1] RIP: 0033:0x7fe430595335 [ 391.258563][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 391.278255][ C1] RSP: 002b:00007ffff4256ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 391.287733][ C1] RAX: ffffffffffffffda RBX: 000055c33a2b8d60 RCX: 00007fe430595335 [ 391.295709][ C1] RDX: 00007ffff4256b10 RSI: 00007ffff4256b10 RDI: 000055c33a2b7d60 [ 391.303681][ C1] RBP: 00007ffff4256bd0 R08: 00007fe4308542e8 R09: 0000000000001010 [ 391.311658][ C1] R10: 00007fe430853b58 R11: 0000000000000246 R12: 000055c33a2b7d60 [ 391.320964][ C1] R13: 000055c33a2b7d7a R14: 000055c33a2af925 R15: 000055c33a2af92a [ 391.328948][ C1] ---[ end trace 215dd0f65ef481f7 ]--- [ 391.370823][T27576] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 391.436979][ T4837] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 391.480970][T27576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 391.489490][T27576] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 391.497304][T27576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x6000000}) 19:39:43 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x6c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x41080, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x80000) accept4$alg(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) syz_mount_image$zonefs(&(0x7f00000000c0)='zonefs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000001280)=[{&(0x7f0000000140)="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", 0x1000, 0xfffffffffffffffe}, {&(0x7f0000001140)="abe85908829f300e05d336082f2c903bfd1b76364c5486c8511c16211bf1c5c28586d0fd896c04810071ae535014b3b600038705a837f7c425ca0e317f0a02f7420ec6a2f34f8d396f433866390956defc0c69adc3a8ba748670d4108a4271ced09e00de1dc217fd4ed0e385487683eb6bc89980bb3e5a713465dfcdd4eaf0002ae4d2fa62868e16aed60efaa2061e0e72116ce0b6b3328922ddf55c276521e1bfeec3cbd173ec97bd2e775a96a7720c7020b8", 0xb3}], 0x940094, &(0x7f0000001200)={[], [{@euid_gt={'euid>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffc3}}]}) preadv(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) 19:39:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4c00, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 391.647297][T27611] loop1: detected capacity change from 0 to 8192 [ 391.688623][ T4837] usb 1-1: device descriptor read/64, error 18 [ 391.694999][T27614] loop4: detected capacity change from 0 to 16383 [ 391.716092][T27611] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x7000000}) [ 391.733187][T27611] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 391.741532][T27611] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 391.749747][T27611] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 391.978805][ T4837] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 392.198925][ T4837] usb 1-1: device descriptor read/64, error 18 19:39:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) lseek(r1, 0x4, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c00018038000400200001001d00000000000000ff020000000000000000000000000001000000001400020002000000ffec9aff000000797a3000000000c8de780a7e474c50ea97f30cf78458fbfe1826b31a8a79520fb3a658785dfd1935523c17aef9e3ee8cc0ce37514bc2c3ad6d9015bcf08c4b"], 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x268, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x18000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xde, 0x3, "edf21b8d5314c7634be08fc73d351b9464cbf214a9aa4a2473ed18b8ac373190a689dd73a03022e2d038bfd1fdac584d74d8f4393b172c6c1d57b440e86bed1fd0268c0b95ad1e35fc4ea75b8d911abc113198ea8254a9eaf48d6bf27815a25e6069b65f07eeea03cdc02043b7d9a8faf29c03b3e3c2dd68b558063faf56935b0946934ee05305313562b36a3a1f3cc2529f1f6b84a03a3b8661a99d4be6bf75429aa3550b6effe16d4e35966b5484b6c72c1e621226c1f4cd7429c098866a5ddf36dec6977fd4f3fd353414e33d4b5898edf416de438cbd3694"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x884}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcad7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x681}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x53b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc353}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000045}, 0x4004911) 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)='overlay\x00', 0x40, &(0x7f00000023c0)=ANY=[@ANYBLOB='nfs_export=on,index=on,nfs_export=off,fowner<', @ANYRESDEC, @ANYBLOB="2c646f6e745f6d6561737572652c646566636f6e746578743d73797374656d5f752c66736d616769633d3078303030303030303037666666666666662c0027c6af1faaaed09a2519dfb37675d449916b65f6023c43b20a0a6bcbe25fec453377716a643777765de586eab978aa1bef15b2b7c08d98e01f0f8f5a8355ad03bde868f729e2f21b540fd1a4b62a62a2355931ac57101d9644f4b08308f5cc509c96"]) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, 0x0, {0x4, 0x3, 0x7, 0x8001, 0x4, 0x1f, {0x1, 0x6, 0x8000, 0x200, 0x7ff, 0x4, 0x7, 0x8, 0x6, 0xa000, 0x7fff, r2, 0x0, 0x200, 0x5}}}, 0x90) 19:39:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x74, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x8000000}) 19:39:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.323189][ T4837] usb usb1-port1: attempt power cycle 19:39:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.366707][T27655] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x9000000}) [ 392.435310][T27663] loop1: detected capacity change from 0 to 8192 [ 392.443837][T27663] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 392.451443][T27663] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 392.451876][T27660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.472807][T27663] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x7a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xa000000}) [ 392.480578][T27663] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/67, 0x43}], 0x1, 0x0, 0xfffffffd) 19:39:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00', 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830500000000000000", @ANYRES32=r2], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001a00010000000000007a00080013000001000008001b000800"/39], 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xfffffffffffffffc}, 0x4000) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xb000000}) [ 392.565818][T27675] loop1: detected capacity change from 0 to 8192 [ 392.574239][T27675] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 392.581052][T27675] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 392.589540][T27675] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.597360][T27675] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', r2, 0x4, 0x7, 0x2, 0x2, 0x10, @local, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x8000, 0x20, 0x1000}}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000003440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff037202000404000001007d60b6030000001000006a0a00fe39000000850000002b00000005000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c458000000000000e3a94b574d2eb38a548355f0b886713add64d526a951b2bd001362df1d4fdd860db5808922433e3e0f242a46b3009a54f4aabcfbffcee623c2ea78926a90077db0d4968a384b0559c7919b89bd9d5fdb68832e986440ff0a7edfa0cb231ccd00000000000000000000007777e27060493073807c4b7bbaed91f32fb382d91ae8e98c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a02fa0892728807982d90e116bba29bb744af70a4cd8f3ad2db58bdd0b424ac416e66af9ebcfea905d37cf226312cb81ec843bcea06e7fa5e5b3596301460142f83b465d9e57dfdb06dcf91fd2464cb130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ec7ecbd061772daa52a38539295d3fea7a7e669441e1ff041143edfa904fb43337f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cd7ce18b68bc37e061d33357d6a39d33c702576cc2a88816601000000000000002e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58ad888a114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a900000000000000000000000000faff0000009f1f5ab2e02739ccd50523d76032538f5cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a4b37032f1e8f6c673e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2818206ce5fba6fca8b270d76191b43ab4cbdd4dbcccdc644fe65e7bd90a5fc16387bcb5e3df18d7d2a33c78cb8fe48ddcf6adfc9417bd42909ee4307c4197b15797af17845fbc02846d2f8543f65594cb5e06d538eb067b21108dbaa58b19a52f3f12880128d08eb477ad349c2214bc7f8378b7e5b549f0952019e00c35f55c6b66beaf92e416313dfe58e88fbfa825114227c2f6cfd1448ca37902a5678af7277e6cde25737b058ba3ca60696bc1d4df56b6f544f57ddc35f3c1b5904def348912e1fefe8164c3341b91913718593085d2a9a260663c11f5484cad2de673f9a1fcac868ff6cb20122f76531881165f4d46e1a23ce0dc462ff47e7fb4a8e2a1fabe97ec9c78c9123068c839dc2d825b82749063a85bf6c1bcf4ccf798e4962562c024f000000000000f87a404ae3c5ea6f69f9ef670bbc41e8dfbbab635ec231377c7ef56f0ddb2277904d510531a32adc35385b4b3e2e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x78) exit(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.661725][T27675] loop1: detected capacity change from 0 to 8192 [ 392.668923][T27675] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 392.675709][T27675] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 392.689833][T27675] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.698002][T27675] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) statx(r0, &(0x7f0000001b40)='./file0\x00', 0x800, 0x800, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jffs2(&(0x7f00000017c0)='jffs2\x00', &(0x7f0000001a00)='./file0\x00', 0x9, 0x1, &(0x7f0000001b00)=[{&(0x7f0000001a40)="1c1fb6fa10fcf68b63201d7c37e562bc87834c48de05e8b17f1be78639f22696dc494389a2fa09706f2d4413e5fd0110061f183af38c79fb03ed4fff76ee35b7f5b09940b14c0cdbc69f988171165726dabaf4395cea9b8d4f03741cf48695efed971d98dd03a63c7f735dfc1ba54980e7667029a86ac242b2051105699cc8ab2b8ee01a6e6e5f71ea7df9309acb0f660fd0d2efcf959a9beeb06673a942d0556d70f1a8883903e427e04d81d91570462d73", 0xb2, 0x7}], 0x1091420, &(0x7f0000001c80)={[{@compr_lzo='compr=lzo'}, {@compr_lzo='compr=lzo'}], [{@dont_appraise='dont_appraise'}, {@obj_role={'obj_role'}}, {@smackfsdef={'smackfsdef', 0x3d, '.log\x00'}}, {@subj_user={'subj_user', 0x3d, 'net/icmp\x00'}}, {@uid_lt={'uid<', r1}}, {@audit='audit'}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000300), 0x0, 0x4000d9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r3 = openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x2000, 0x40) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000140)={&(0x7f0000000200)=""/242, 0xf2, 0xffffffff, 0x4}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001800)={&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000340)="34ffc63abbcd28743d6d81d8bdefd387b7c13679d71abe9c1142f0241a44248df68da9a14a19f1b076cbeb2edeae7851545dc72b9e67b053b913d63b743e61f7963f774ede37c7e7156f52addef2df6abb087f0454addb8046f9024a52bb10", 0x5f}, {&(0x7f00000003c0)="6495d8f57b41b4836d85d4a7ce7a67058643db058465c790051b54f859a40d2f436343c7ba645ead12b30c3f0ccbefb63c12ca93601420088e2ecc6f8b34d2ceced5ad2cf34b89dd606067f3b1183d0a6e1b4f04df518ee667d79abc1e70d067d68212e562b3d60aa144ffff9da67fdc06b740a1261d65e49e09b07b2ebe304dc506407acd9aa2ea686e79ffba43f4aa98c4c2d8f2f100b1a68b4c08f77d7f3e336e7f194d35247799d6b4ca5705dcb254499d10050f6f7b0e0cfb1d8c7dc40597", 0xc1}, {&(0x7f00000004c0)="3ab7788f6ed52af46bb8472f6533ec2709f7242d66a493f696d4b3e7d91b756d173d1831c8901d67d2b264dd034359c746", 0x31}, {&(0x7f0000000500)="eacd3cf9831a13215f7d9feb7e0834e1fc09adf61bd661c1cc3517befd8b1c54bfae928d3c83575015ebba8d2259feabdd7ce37aa7b3de8f5aad43abb64caba943660f1b2ee95860db28289c5070670893587803a74e947e2a78663b82c492840e11fce540f2b073d6b8b521196a947d688bbe7cd4e606f190cf54e779a7ce9c4843d8de6fe570ac3c2c4ea403633cad721cfc3863d53275b956680ec7cd2b729f68992dd2d4fd56d639954630d2be46ac34e4b2df519771ae6d39c8ede5844e273e04c2f23d83b0de7bbc68e785d94e1ce006b9bc8f540bc2d2f930960302a44fbfefdbcf310e31", 0xe8}, {&(0x7f0000000600)="9fad59b98c7fb8db1b7d866b887d4c11c46ffd9a43efa3a329c706b12a17be11823b8431c1c0a8bc10813adb499b36975d88904b2505164dd18311630b63164f086f745707829e5d0bde91e11f7cb4536ae1dc6dd5e652ba44713ef255dd39e40b92ccbcfd562258ef85eaf1d76530d5041c97696952e61388d1c60ff814036ee27c3747ff0ae2b9ca60a8f736b6b1be3a86e1fb9998bd831720e1164a54d3960e4cd755e1505482e5aa5e9badbe06", 0xaf}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="14b1c44980e7fabb2e5a38bd82fe7d60d342ad35c7ef5596658b219154da4d0dea3de274674dec6058e741e5ce6799fbf85e18c2ffa111f6a18c11428333392f8cd13c6e5eb67c1ed214c8444ac53866176ab8dacda8a47f29cef42c4aa97dd5d62171a8ac320af29d16c1d3cb6366b1c997", 0x72}], 0x7, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0xb6, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x5, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0x4c, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2e}}, {@remote, 0x40}, {@private=0xa010101, 0x7}]}, @end, @timestamp={0x44, 0xc, 0x34, 0x0, 0xc, [0x7, 0x4]}, @lsrr={0x83, 0x7, 0x6c, [@private=0xa010101]}]}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x4a, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010102, @private=0xa010100, @rand_addr=0x64010102, @remote, @local, @multicast1, @loopback]}, @rr={0x7, 0x17, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}]}, @cipso={0x86, 0x80, 0x0, [{0x2, 0x10, "77881f38269d3adc7766868b9a9b"}, {0x0, 0x9, "6d7c77c6d5d652"}, {0x7, 0x11, "9ad653a8fbf00b8e3c9a3876417cf5"}, {0x0, 0xa, "19a135ea36eba9ae"}, {0x7, 0x10, "5121f452356cb8e63ab3c68173e6"}, {0x0, 0xa, "8a92a51a1ca69c89"}, {0x7, 0xe, "a9823c2c77a472a62baccd30"}, {0x2, 0x11, "9b4984e16ca890201da0ee5c680dd0"}, {0x6, 0xd, "aa53e9f3654681ecbb07c7"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x170}, 0x20000000) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x10) 19:39:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x204, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xc000000}) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xd000000}) [ 392.849613][T27714] loop1: detected capacity change from 0 to 8192 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:39:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.891106][T27714] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 392.919289][T27714] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 392.931066][T27714] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 392.962204][T27714] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xe000000}) 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 393.057666][T27714] loop1: detected capacity change from 0 to 8192 [ 393.083042][T27714] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:39:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/107, 0x6b}], 0x4, &(0x7f0000000100)=""/166, 0xa6}, 0x12062) r0 = socket$isdn(0x22, 0x3, 0x25) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) unshare(0x64040600) [ 393.120799][T27714] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 393.177533][T27714] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 393.185359][T27714] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x284, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x10000000}) 19:39:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(r1, &(0x7f0000000080), 0x0, 0xd9f, 0x0) r2 = signalfd4(r0, &(0x7f0000000100)={[0x9]}, 0x8, 0x80000) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x80000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 393.261997][T27767] IPVS: ftp: loaded support on port[0] = 21 19:39:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x6364, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) 19:39:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x11000000}) 19:39:45 executing program 0: inotify_init1(0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}}, 0x0) write(r0, &(0x7f0000001240)="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", 0x4bd) [ 393.358719][T27802] loop1: detected capacity change from 0 to 8192 [ 393.375379][T27802] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 393.382784][T27802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 393.391293][T27802] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 393.399319][T27802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:45 executing program 2 (fault-call:12 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x12000000}) [ 393.447026][T27802] loop1: detected capacity change from 0 to 8192 [ 393.456367][T27802] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:39:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 393.501807][T27802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 393.510537][T27802] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 393.519709][T27802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x285, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{r1}, 0x5, &(0x7f0000000040)=[0x9, 0x9, 0x577, 0x66, 0x80000000], 0x9, 0x5, [0x1, 0x4, 0x4, 0x6]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x200) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000001, 0x10010, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0f746f0f", @ANYRES16=0x0, @ANYBLOB="000229b97000fedbdf25020000000c00030004000000000000000c0006000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x8015) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack_expect\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00006a6000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x919df000) pread64(r2, &(0x7f0000000140)=""/14, 0xe, 0x9d6753f) socket$packet(0x11, 0x2, 0x300) [ 393.565336][T27826] FAULT_INJECTION: forcing a failure. [ 393.565336][T27826] name failslab, interval 1, probability 0, space 0, times 0 [ 393.651586][T27826] CPU: 1 PID: 27826 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 393.662949][T27826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.673005][T27826] Call Trace: [ 393.676284][T27826] dump_stack+0x137/0x19d [ 393.680660][T27826] should_fail+0x23c/0x250 [ 393.685078][T27826] __should_failslab+0x81/0x90 [ 393.689841][T27826] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 393.695571][T27826] should_failslab+0x5/0x20 [ 393.700085][T27826] __kmalloc+0x66/0x380 [ 393.704246][T27826] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 393.709898][T27826] ? __rcu_read_unlock+0x5c/0x250 [ 393.714966][T27826] tomoyo_realpath_from_path+0x98/0x3b0 [ 393.720660][T27826] tomoyo_path_number_perm+0xc1/0x2d0 [ 393.726630][T27826] ? __rcu_read_unlock+0x5c/0x250 [ 393.731666][T27826] tomoyo_file_ioctl+0x1c/0x20 [ 393.736576][T27826] security_file_ioctl+0x45/0x90 [ 393.741532][T27826] __se_sys_ioctl+0x48/0x140 [ 393.746134][T27826] __x64_sys_ioctl+0x3f/0x50 [ 393.750727][T27826] do_syscall_64+0x39/0x80 [ 393.755218][T27826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.761180][T27826] RIP: 0033:0x466459 [ 393.765070][T27826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.784757][T27826] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.793174][T27826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 19:39:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003ba000/0x3000)=nil, 0x3000, 0x4, 0x810, r2, 0x19ddb000) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1, 0x0, 0x0) 19:39:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220000, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x1ff}, 0x4000000, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x1f4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x4, 0x7, 0x4e, 0x800}, {0x0, 0x2, 0x80, 0x5}]}, 0x10) setuid(r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005200010029bdd260b5f3df2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 393.801171][T27826] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 393.809157][T27826] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.817274][T27826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.825274][T27826] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 19:39:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x25000000}) [ 393.849178][T27841] loop1: detected capacity change from 0 to 8192 [ 393.887172][T27841] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 393.921315][T27841] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 393.965370][T27841] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 393.976349][T27826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.989340][T27861] device ip6tnl0 entered promiscuous mode [ 394.024429][T27826] kvm: pic: level sensitive irq not supported [ 394.025784][T27826] kvm: pic: single mode not supported [ 394.032023][T27826] kvm: pic: level sensitive irq not supported [ 394.055691][T27841] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:39:45 executing program 0: inotify_init1(0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}}, 0x0) write(r0, &(0x7f0000001240)="5d36ae76d53ada411bae8902e39bac93cb1bfd2f6a4c299f35cf95084c314fbb1706c4c1e98a19fae02e6c055f5502e1f4506eb2351f8e9ef5452d3c5ca35cd63938ae9f1763a1b43157b2968e7fb871baca9e6ab196f04600c076deea56fca09daa56719ebcdb2d51712dbc3d682598071b76f25ec9baecf582e92a149f773fe8433d8f2fd3b5360fdb24249bb71311016d1ee02f6c5fe4d8471afb0392964bae7cc436f965a8b526c8d93cc71ed7ba8c2b238af8dad6ad2a91d27bbea9a7b02969b4475affb4ed74384e735f3fd9ac97c3c0b70f70a3e543ac1fba2c1d6eeed07b9bf8222c204e43451d927d1a336bbedc951bf9fd08d4986f180a857a689a356013cfb5ddbd092aff920140ff74b7995c9662253c376b2339a6342051fa146ee5bc33ad63d2f8a8aef0ae9aa4e8486e5633de6c22ccec2dc1b36940e003314530d7d1eb4cd19668c6147f2e11653652fbd508507531ddcdff87119c29ad8ffa5e41366c5eb5b535ea7e8608d045994ccae363373e7061d49dba897765b5fd0c0c9448590f97a11a070ee50870d31907731b3cde55781468330064e3e4c300ef66ef4e2b123f086c044ecf5cfff9ca9106538257c1d0730bdd05bfd2a99744d6d832db3e9b77ca2ac2b16e8a904a60eaa8ff4aa12304a3032c7166cb99dfe9883087e7c0e9b845dbf8f61953f11aeb05f9910b77bced7d4e29365cf6e2507ceb2279ffd47ea46d4b89c7d3e318c57cb38ff2a8b7512c945865aa175fdf0f0f5a98b2c0e025fcde4211750f7e65130d3994b02b87934f508e67b5868c21aafff1c33cddd77584ab1525c535c07e2d4a98faf226ffa82503ffed97bfe65667c36c0172aa422ab74c8c56026bad49bd78abf88eab8295fdea84caf2cab7578c5da0118bcded5139518f41a21ade7946a94d7abfca68e7ad8ce648446a8965470d51b51233a0800aa96c1bca8ee39c557dcb8dd0a0e41b5840c8e3e23925589f9675e777f23f33ee21e538994327f7429e604ccb91a5f9886d4d14edc50d01cf33a327382f1e575a137f27500d1edeabe057a610b65320cd918df5f4f9abe93dc968c9308a71207113462765fd7bcd9ddda80fac71d9aa2bcefe1d04857c8ac9efe668d74ca76b3ea0cda6d80a56388ca6d21b50c131830a3f8b62cca12ded54e489d48cd257a7e19395acf932a1bf8d69db86df36dae04a1c1b2d304aaf281963aaaccaa803bdb24f0292eed8be5b0e001f036497e67a96db85338b22bca75d2c5e682c3b0e558ea69875798d6f9f9ffbb3d3f0f7f0ba3d661342aae3fae2ab8cda244baa16397e1553fbc8737bee9c990826be63a9d15ed8a9f42d67b8912c50dc0cc43dff99d18d2a4669ea0a6bf2eb60594aaf31b094c2bfa0c111a8ddf54eabf49424a03c9aa2745bfaf636e01bd6a7bf641685966cc3467f8c34f1e1df9b4746f43bc993293a96dcc450f8a5b4cecfbb4c884b42937cf04be738a7121273b5daebea0d51745691b08c8f16c7eab398e5b37970ab0e41cc3f0da3a4352114d65a0211aaeac9e538817b209247d859de1ae0048e442530bccc09f015f13c788b5585b3b47f4d96a5e200136375a5cdf39c5481f930510ab4ada94db7ce6a6899d2c444bde358d9edfb420a88d0b497c00f93b3cf5ea51c0d4dfb05af1a9e90bff0b1c76d7466528cd8786a62282c4487cd4b4b533b3c7e03ebbaaeca", 0x4bd) [ 394.095472][T27826] kvm: pic: single mode not supported [ 394.188703][T27841] loop1: detected capacity change from 0 to 8192 19:39:46 executing program 2 (fault-call:12 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x5c000000}) 19:39:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x109300, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x9, 0x2}, 0x0, 0x0, &(0x7f0000000400)={0x3, 0xd, 0x7fff, 0xfffffffe}, &(0x7f0000000440)=0x6d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x1}}, 0x10) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x400480, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf484cc14eca0be49, 0x6, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffe}, @call={0x85, 0x0, 0x0, 0x6e}], &(0x7f0000000180)='GPL\x00', 0x9, 0xc4, &(0x7f0000000200)=""/196, 0x41000, 0x8, [], 0x0, 0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x2, 0x8, 0x200}, 0x10, r3, r4}, 0x78) 19:39:46 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x286, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8917, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) signalfd(r1, &(0x7f0000000100)={[0xffffffffffffffe1]}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0xff000000}) 19:39:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 394.535737][T27884] FAULT_INJECTION: forcing a failure. [ 394.535737][T27884] name failslab, interval 1, probability 0, space 0, times 0 [ 394.570117][T27884] CPU: 1 PID: 27884 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 394.580431][T27884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.590487][T27884] Call Trace: [ 394.593763][T27884] dump_stack+0x137/0x19d [ 394.598098][T27884] should_fail+0x23c/0x250 [ 394.602551][T27884] __should_failslab+0x81/0x90 [ 394.607481][T27884] ? tomoyo_encode2+0x1d3/0x350 [ 394.612384][T27884] should_failslab+0x5/0x20 [ 394.616922][T27884] __kmalloc+0x66/0x380 [ 394.621192][T27884] tomoyo_encode2+0x1d3/0x350 [ 394.625936][T27884] ? anon_inodefs_init_fs_context+0x50/0x50 [ 394.631843][T27884] tomoyo_realpath_from_path+0x35e/0x3b0 [ 394.637609][T27884] tomoyo_path_number_perm+0xc1/0x2d0 [ 394.643196][T27884] ? __rcu_read_unlock+0x5c/0x250 [ 394.648244][T27884] tomoyo_file_ioctl+0x1c/0x20 [ 394.653018][T27884] security_file_ioctl+0x45/0x90 [ 394.657994][T27884] __se_sys_ioctl+0x48/0x140 [ 394.662616][T27884] __x64_sys_ioctl+0x3f/0x50 [ 394.667239][T27884] do_syscall_64+0x39/0x80 [ 394.671703][T27884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 394.677674][T27884] RIP: 0033:0x466459 [ 394.681801][T27884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 394.701447][T27884] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.706658][T27895] loop1: detected capacity change from 0 to 8192 [ 394.709882][T27884] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 394.709900][T27884] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 19:39:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)) 19:39:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x80, 0x1f, 0x4d, 0x7, 0x0, 0x2, 0xa6240, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x4860, 0x8, 0x3, 0x7, 0x800, 0x0, 0x800}, 0xffffffffffffffff, 0xd, r1, 0xa) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x401, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x3f, 0x6, 0xff, 0xe3, 0x0, 0x3, 0x8040, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1800, 0x2, @perf_config_ext={0x5, 0xc37e}, 0x100, 0x3900000, 0xff, 0x6, 0xffffffffffffffff, 0x9e4, 0x9}, r0, 0x1, r3, 0x0) fsetxattr(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6274c83f732e6e65bdd12f616d7000"], &(0x7f0000000240)='+^!-]^@}$\x00', 0xa, 0x3) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 394.709912][T27884] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 394.740114][T27884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.748089][T27884] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 394.762614][T27895] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 394.788335][T27895] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 394.806476][T27884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.818087][T27895] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.835793][T27895] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 394.855279][T27884] kvm: pic: level sensitive irq not supported [ 394.855488][T27884] kvm: pic: single mode not supported [ 394.861724][T27884] kvm: pic: level sensitive irq not supported [ 394.913864][T27884] kvm: pic: single mode not supported [ 395.430095][ T299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:39:47 executing program 0: inotify_init1(0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}}, 0x0) write(r0, &(0x7f0000001240)="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", 0x4bd) 19:39:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0xd9f, 0xffffff63) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x2}) 19:39:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:47 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x300, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:39:47 executing program 2 (fault-call:12 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:47 executing program 0: inotify_init1(0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="c8aaeeaaaaaaaaaaaaaaaaaaaa080045000024020000000000000000141400ac1414aa00e2b31f520190780048fd88003bfa3754000847eee3a1673afef02aece269998fd7cf1cba8206aadeb2ea26112810f400fc09a7a705392407092e028155789791e61e027999cb946ce9cb9dc3be1589fdd1eead183f3afd1e149af9260e6ca7192c4611ad8f8cd10d7a91448441bfd1033c7cee3477ee536171b8a2bf5b2c27a333f8632485155d2e99bb00b78a070eaff50a5597170d82617228c9bbc77637261079c8b95a9dd341a02d99109dd56a23f79df3b239507453004820cf794a8634abe93dc801a801c8479bd0ea6757824e6d5cf08d71a62fe50bb3c45f5ca22d02b62e8e943d46fda91e44680d3cf547f710b486394cb8891c24c907572350aa216e22ef3f493d1041d9020000000000000015ad3638cfe7bb808a97574450fccb036a3fa288f63b5f17a51498cf525f043bdd3414963d399eae792f53eb77a1bfd544bc523d45550f8c692a5c555ec2ecc7de3abfd6dd238ad5a98e23a77333d4621d92f0450536f836363412"], 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}}, 0x0) write(r0, &(0x7f0000001240)="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", 0x4bd) [ 395.862979][ T299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.876856][T27930] loop1: detected capacity change from 0 to 8192 [ 395.888767][T27930] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 395.895558][T27930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 395.904061][T27930] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:39:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x3}) [ 395.932161][T27934] FAULT_INJECTION: forcing a failure. [ 395.932161][T27934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.945998][T27934] CPU: 1 PID: 27934 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 395.956171][T27934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.966243][T27934] Call Trace: [ 395.969547][T27934] dump_stack+0x137/0x19d [ 395.973997][T27934] should_fail+0x23c/0x250 [ 395.978435][T27934] should_fail_usercopy+0x16/0x20 [ 395.983468][T27934] kvm_vcpu_read_guest_page+0x338/0x3c0 [ 395.987495][T27930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 395.989524][T27934] kvm_fetch_guest_virt+0xe6/0x130 [ 396.002787][T27934] ? emulator_write_std+0x190/0x190 [ 396.008011][T27934] __do_insn_fetch_bytes+0x1ad/0x3d0 [ 396.013478][T27934] x86_decode_insn+0x16f/0x2b80 [ 396.018430][T27934] ? make_nonleaf_spte+0xa4/0xe0 [ 396.023466][T27934] ? vmx_cache_reg+0xca/0x340 [ 396.028155][T27934] ? init_emulate_ctxt+0x220/0x250 [ 396.033399][T27934] x86_decode_emulated_instruction+0x127/0x900 [ 396.039649][T27934] x86_emulate_instruction+0x106/0x1d80 [ 396.045681][T27934] handle_ud+0x1db/0x2d0 [ 396.049957][T27934] ? vmx_vcpu_run+0x8a7/0xd70 [ 396.054908][T27934] handle_exception_nmi+0x163/0xbb0 [ 396.060116][T27934] ? sysvec_reschedule_ipi+0x2f/0x110 [ 396.065705][T27934] ? kvm_apic_accept_pic_intr+0x61/0xd0 [ 396.071263][T27934] ? crash_vmclear_local_loaded_vmcss+0x160/0x160 [ 396.078060][T27934] __vmx_handle_exit+0x35b/0x850 [ 396.083268][T27934] vmx_handle_exit+0x1a/0xd0 [ 396.087873][T27934] vcpu_enter_guest+0x1adf/0x2710 [ 396.092909][T27934] ? tomoyo_path_number_perm+0x286/0x2d0 [ 396.098552][T27934] ? vmx_vcpu_load_vmcs+0x39d/0x4e0 [ 396.103835][T27934] vcpu_run+0x24f/0x6a0 [ 396.108018][T27934] kvm_arch_vcpu_ioctl_run+0x476/0x860 [ 396.113479][T27934] kvm_vcpu_ioctl+0x562/0x8f0 [ 396.118170][T27934] ? tomoyo_file_ioctl+0x1c/0x20 [ 396.123120][T27934] ? kvm_vm_ioctl_get_dirty_log+0x3f0/0x3f0 [ 396.129063][T27934] __se_sys_ioctl+0xcb/0x140 [ 396.133659][T27934] __x64_sys_ioctl+0x3f/0x50 [ 396.138278][T27934] do_syscall_64+0x39/0x80 [ 396.142705][T27934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 396.148639][T27934] RIP: 0033:0x466459 [ 396.152529][T27934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.172330][T27934] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:39:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) tee(r0, r0, 0xa000000000000000, 0x6) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 396.180931][T27934] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 396.188900][T27934] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 396.196870][T27934] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.204943][T27934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.212912][T27934] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 396.231372][T27934] kvm: pic: level sensitive irq not supported [ 396.231693][T27934] kvm: pic: single mode not supported [ 396.237913][T27934] kvm: pic: level sensitive irq not supported 19:39:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x30041, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000200)={0x1, 0x4b0, 0x2, 0x4000, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000001c62968a76a3cac2000000018150000", @ANYRES32=r0, @ANYBLOB="00000000000000008ca5f8ff04000000183000000500"/32], &(0x7f00000002c0)='GPL\x00', 0x4, 0x81, &(0x7f0000000300)=""/129, 0x41100, 0x3, [], 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0x1, 0x401}, 0x10}, 0x78) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000640)='9p\x00', 0x2080040, &(0x7f0000000580)={'trans=unix,', {[{@version_9p2000='version=9p2000'}, {@cachetag={'cachetag', 0x3d, '*'}}, {@afid={'afid', 0x3d, 0x5}}, {@msize={'msize', 0x3d, 0x8}}, {@privport='privport'}, {@access_any='access=any'}, {@msize={'msize', 0x3d, 0x2bd}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, ',&'}}]}}) preadv(r2, &(0x7f00000004c0), 0x0, 0x0, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0xeb9, 0xa, 0xd, 0x9, "26b0f1fcf7ca1cf89c01ff0bf13af36f8cacc35b2f0f5a224857ebdf1699003dd77e86f50572cba7e1f3314fa468341d3409cc3d4b2ccaed8b3b772e7386a19c", "790932c98ce98a0e7c685f34a4b5ac5b1a4412563e48cdf32f2d78eddd2bc526", [0x4, 0x401]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:39:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8920, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:48 executing program 2 (fault-call:12 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:39:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x4}) 19:39:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x386, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 396.243614][T27934] kvm: pic: single mode not supported [ 396.351284][ T299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.426703][T27962] loop1: detected capacity change from 0 to 8192 [ 396.436111][T27961] FAULT_INJECTION: forcing a failure. [ 396.436111][T27961] name fail_usercopy, interval 1, probability 0, space 0, times 0 19:39:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:39:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x5}) [ 396.492523][T27961] CPU: 0 PID: 27961 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 396.502721][T27961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.512793][T27961] Call Trace: [ 396.516164][T27961] dump_stack+0x137/0x19d [ 396.520501][T27961] should_fail+0x23c/0x250 [ 396.523629][T27962] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 396.525059][T27961] should_fail_usercopy+0x16/0x20 [ 396.536839][T27961] kvm_vcpu_read_guest_page+0x338/0x3c0 [ 396.542399][T27961] kvm_fetch_guest_virt+0xe6/0x130 [ 396.547554][T27961] ? emulator_write_std+0x190/0x190 [ 396.552774][T27961] __do_insn_fetch_bytes+0x1ad/0x3d0 [ 396.558189][T27961] x86_decode_insn+0x16f/0x2b80 [ 396.563135][T27961] ? vmx_cache_reg+0xca/0x340 [ 396.567842][T27961] ? init_emulate_ctxt+0x220/0x250 [ 396.572954][T27961] x86_decode_emulated_instruction+0x127/0x900 [ 396.579130][T27961] x86_emulate_instruction+0x106/0x1d80 [ 396.584683][T27961] kvm_emulate_instruction+0x1d/0x20 19:39:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffd, 0x4002, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000008000000000000000300000000000000", @ANYRES32, @ANYBLOB="00000000818e240000002000"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB='\x00'/28]) preadv(r0, &(0x7f0000000180), 0x0, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 396.590004][T27961] ? handle_dr+0x4e0/0x4e0 [ 396.594498][T27961] handle_io+0x11b/0x130 [ 396.598756][T27961] __vmx_handle_exit+0x35b/0x850 [ 396.603753][T27961] vmx_handle_exit+0x1a/0xd0 [ 396.608439][T27961] vcpu_enter_guest+0x1adf/0x2710 [ 396.610422][T27962] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 396.613532][T27961] ? tomoyo_path_number_perm+0x286/0x2d0 [ 396.613571][T27961] ? vmx_vcpu_load_vmcs+0x39d/0x4e0 [ 396.613593][T27961] vcpu_run+0x24f/0x6a0 [ 396.613610][T27961] kvm_arch_vcpu_ioctl_run+0x476/0x860 [ 396.642187][T27961] kvm_vcpu_ioctl+0x562/0x8f0 [ 396.646908][T27961] ? tomoyo_file_ioctl+0x1c/0x20 [ 396.651877][T27961] ? kvm_vm_ioctl_get_dirty_log+0x3f0/0x3f0 [ 396.657780][T27961] __se_sys_ioctl+0xcb/0x140 [ 396.662373][T27961] __x64_sys_ioctl+0x3f/0x50 [ 396.666421][T27962] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 396.667082][T27961] do_syscall_64+0x39/0x80 [ 396.667107][T27961] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 396.685189][T27961] RIP: 0033:0x466459 [ 396.689112][T27961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.707465][T27962] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 396.708822][T27961] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.708847][T27961] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 396.733635][T27961] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 396.741731][T27961] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.749704][T27961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.757700][T27961] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 396.766035][ C0] ------------[ cut here ]------------ [ 396.771503][ C0] WARNING: CPU: 0 PID: 27961 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 396.782380][ C0] Modules linked in: [ 396.786272][ C0] CPU: 0 PID: 27961 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 396.796415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.806464][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 396.812447][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 396.832062][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 396.838140][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000011 RCX: ffff888076636000 [ 396.846459][ C0] RDX: 0000000000010001 RSI: 0000000000000011 RDI: 0000000000000001 [ 396.854426][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 396.862407][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 396.870373][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 396.879831][ C0] FS: 00007fc406fd1700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 396.889108][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.895984][ C0] CR2: 000055c33a27e208 CR3: 00000001026ff000 CR4: 00000000001526f0 [ 396.903959][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.911939][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.919926][ C0] Call Trace: [ 396.923195][ C0] [ 396.926031][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 396.932117][ C0] __run_hrtimer+0x163/0x460 [ 396.936704][ C0] ? clockevents_program_event+0x195/0x1e0 [ 396.942604][ C0] hrtimer_interrupt+0x380/0xaf0 [ 396.947550][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 396.953450][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 396.959106][ C0] [ 396.962120][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 396.968356][ C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 396.975342][ C0] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 396.995135][ C0] RSP: 0018:ffffc90015dbb7a8 EFLAGS: 00000202 [ 397.001214][ C0] RAX: 0000000000000000 RBX: ffff888076636000 RCX: ffffffff85a00e37 [ 397.009354][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 397.017667][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.025811][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 397.033781][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.041755][ C0] ? native_iret+0x7/0x7 [ 397.046002][ C0] irqentry_exit_cond_resched+0x30/0x40 [ 397.051549][ C0] irqentry_exit+0x2a/0x40 [ 397.055986][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 397.061459][ C0] RIP: 0010:dump_stack+0x17d/0x19d [ 397.066592][ C0] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 397.086203][ C0] RSP: 0018:ffffc90015dbb888 EFLAGS: 00000246 [ 397.092278][ C0] RAX: c5cba4fb069de300 RBX: 00000000ffffffff RCX: 0000000000040000 [ 397.100269][ C0] RDX: ffffc9000c4b1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 397.108258][ C0] RBP: 0000000000000000 R08: ffffffff82a62411 R09: 00018880766363cf [ 397.116248][ C0] R10: 0001ffffffffffff R11: ffff888076636000 R12: ffffffff878d2788 [ 397.124222][ C0] R13: 0000000000000001 R14: ffffffff878d27a0 R15: 0000000000000200 [ 397.132219][ C0] ? dump_stack+0x15e/0x19d [ 397.136775][ C0] ? dump_stack+0x173/0x19d [ 397.141292][ C0] should_fail+0x23c/0x250 [ 397.145728][ C0] should_fail_usercopy+0x16/0x20 [ 397.150784][ C0] kvm_vcpu_read_guest_page+0x338/0x3c0 [ 397.156358][ C0] kvm_fetch_guest_virt+0xe6/0x130 [ 397.162698][ C0] ? emulator_write_std+0x190/0x190 [ 397.168002][ C0] __do_insn_fetch_bytes+0x1ad/0x3d0 [ 397.173307][ C0] x86_decode_insn+0x16f/0x2b80 [ 397.178173][ C0] ? vmx_cache_reg+0xca/0x340 [ 397.182854][ C0] ? init_emulate_ctxt+0x220/0x250 [ 397.188058][ C0] x86_decode_emulated_instruction+0x127/0x900 [ 397.194350][ C0] x86_emulate_instruction+0x106/0x1d80 [ 397.199897][ C0] kvm_emulate_instruction+0x1d/0x20 [ 397.205207][ C0] ? handle_dr+0x4e0/0x4e0 [ 397.209628][ C0] handle_io+0x11b/0x130 [ 397.213882][ C0] __vmx_handle_exit+0x35b/0x850 [ 397.218835][ C0] vmx_handle_exit+0x1a/0xd0 [ 397.223423][ C0] vcpu_enter_guest+0x1adf/0x2710 [ 397.228470][ C0] ? tomoyo_path_number_perm+0x286/0x2d0 [ 397.234123][ C0] ? vmx_vcpu_load_vmcs+0x39d/0x4e0 [ 397.239351][ C0] vcpu_run+0x24f/0x6a0 [ 397.243500][ C0] kvm_arch_vcpu_ioctl_run+0x476/0x860 [ 397.248981][ C0] kvm_vcpu_ioctl+0x562/0x8f0 [ 397.253653][ C0] ? tomoyo_file_ioctl+0x1c/0x20 [ 397.258613][ C0] ? kvm_vm_ioctl_get_dirty_log+0x3f0/0x3f0 [ 397.264534][ C0] __se_sys_ioctl+0xcb/0x140 [ 397.269128][ C0] __x64_sys_ioctl+0x3f/0x50 [ 397.273817][ C0] do_syscall_64+0x39/0x80 [ 397.278261][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 397.284194][ C0] RIP: 0033:0x466459 [ 397.288083][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 397.307724][ C0] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.316151][ C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 397.324295][ C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 397.332268][ C0] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.340246][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.348301][ C0] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 397.356284][ C0] ---[ end trace 215dd0f65ef481f8 ]--- [ 397.362162][ C0] ------------[ cut here ]------------ [ 397.367623][ C0] WARNING: CPU: 0 PID: 27961 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 397.378494][ C0] Modules linked in: [ 397.382669][ C0] CPU: 0 PID: 27961 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 397.392833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.402902][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 397.409846][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 397.429542][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 397.435706][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000023 RCX: ffff888076636000 [ 397.443693][ C0] RDX: 0000000000010001 RSI: 0000000000000023 RDI: 0000000000000001 [ 397.451669][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 397.459728][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 397.467699][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 397.475775][ C0] FS: 00007fc406fd1700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 397.484827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.491430][ C0] CR2: 000055c33a27e208 CR3: 00000001026ff000 CR4: 00000000001526f0 [ 397.499426][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.507411][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 397.515400][ C0] Call Trace: [ 397.518692][ C0] [ 397.521528][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 397.527807][ C0] __run_hrtimer+0x163/0x460 [ 397.532403][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 397.538681][ C0] hrtimer_interrupt+0x380/0xaf0 [ 397.544052][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 397.550015][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 397.555659][ C0] [ 397.558586][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 397.564746][ C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 397.571530][ C0] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 397.593808][ C0] RSP: 0018:ffffc90015dbb7a8 EFLAGS: 00000202 [ 397.599906][ C0] RAX: 0000000000000000 RBX: ffff888076636000 RCX: ffffffff85a00e37 [ 397.608230][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 397.616321][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.624729][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 397.632963][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.641940][ C0] ? native_iret+0x7/0x7 [ 397.646203][ C0] irqentry_exit_cond_resched+0x30/0x40 [ 397.651920][ C0] irqentry_exit+0x2a/0x40 [ 397.660622][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 397.666078][ C0] RIP: 0010:dump_stack+0x17d/0x19d [ 397.671207][ C0] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 397.694134][ C0] RSP: 0018:ffffc90015dbb888 EFLAGS: 00000246 [ 397.700310][ C0] RAX: c5cba4fb069de300 RBX: 00000000ffffffff RCX: 0000000000040000 [ 397.708708][ C0] RDX: ffffc9000c4b1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 397.716680][ C0] RBP: 0000000000000000 R08: ffffffff82a62411 R09: 00018880766363cf [ 397.724731][ C0] R10: 0001ffffffffffff R11: ffff888076636000 R12: ffffffff878d2788 [ 397.732697][ C0] R13: 0000000000000001 R14: ffffffff878d27a0 R15: 0000000000000200 [ 397.741620][ C0] ? dump_stack+0x15e/0x19d [ 397.746142][ C0] ? dump_stack+0x173/0x19d [ 397.750664][ C0] should_fail+0x23c/0x250 [ 397.755089][ C0] should_fail_usercopy+0x16/0x20 [ 397.760211][ C0] kvm_vcpu_read_guest_page+0x338/0x3c0 [ 397.766546][ C0] kvm_fetch_guest_virt+0xe6/0x130 [ 397.775188][ C0] ? emulator_write_std+0x190/0x190 [ 397.781473][ C0] __do_insn_fetch_bytes+0x1ad/0x3d0 [ 397.787760][ C0] x86_decode_insn+0x16f/0x2b80 [ 397.793200][ C0] ? vmx_cache_reg+0xca/0x340 [ 397.799208][ C0] ? init_emulate_ctxt+0x220/0x250 [ 397.804432][ C0] x86_decode_emulated_instruction+0x127/0x900 [ 397.810591][ C0] x86_emulate_instruction+0x106/0x1d80 [ 397.816261][ C0] kvm_emulate_instruction+0x1d/0x20 [ 397.821745][ C0] ? handle_dr+0x4e0/0x4e0 [ 397.826251][ C0] handle_io+0x11b/0x130 [ 397.830758][ C0] __vmx_handle_exit+0x35b/0x850 [ 397.835731][ C0] vmx_handle_exit+0x1a/0xd0 [ 397.840352][ C0] vcpu_enter_guest+0x1adf/0x2710 [ 397.845392][ C0] ? tomoyo_path_number_perm+0x286/0x2d0 [ 397.851042][ C0] ? vmx_vcpu_load_vmcs+0x39d/0x4e0 [ 397.856239][ C0] vcpu_run+0x24f/0x6a0 [ 397.860562][ C0] kvm_arch_vcpu_ioctl_run+0x476/0x860 [ 397.866146][ C0] kvm_vcpu_ioctl+0x562/0x8f0 [ 397.871804][ C0] ? tomoyo_file_ioctl+0x1c/0x20 [ 397.877633][ C0] ? kvm_vm_ioctl_get_dirty_log+0x3f0/0x3f0 [ 397.884240][ C0] __se_sys_ioctl+0xcb/0x140 [ 397.888849][ C0] __x64_sys_ioctl+0x3f/0x50 [ 397.893549][ C0] do_syscall_64+0x39/0x80 [ 397.898339][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 397.904479][ C0] RIP: 0033:0x466459 [ 397.908378][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 397.928644][ C0] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.937344][ C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 397.945413][ C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 397.953565][ C0] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.962337][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.970395][ C0] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 397.978392][ C0] ---[ end trace 215dd0f65ef481f9 ]--- [ 397.984231][ C0] ------------[ cut here ]------------ [ 397.989774][ C0] WARNING: CPU: 0 PID: 27961 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 398.001495][ C0] Modules linked in: [ 398.005395][ C0] CPU: 0 PID: 27961 Comm: syz-executor.2 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 398.015625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.025674][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 398.031678][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 398.051287][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 398.057356][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000026 RCX: ffff888076636000 [ 398.065337][ C0] RDX: 0000000000010001 RSI: 0000000000000026 RDI: 0000000000000001 [ 398.073348][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 398.081357][ C0] R10: 0001ffffffffffff R11: ffff888076636000 R12: ffff88813bc1da58 [ 398.089341][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 398.097306][ C0] FS: 00007fc406fd1700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 398.106235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.112809][ C0] CR2: 000055c33a27e208 CR3: 00000001026ff000 CR4: 00000000001526f0 [ 398.120788][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.128747][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.136833][ C0] Call Trace: [ 398.140102][ C0] [ 398.142942][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 398.148748][ C0] __run_hrtimer+0x163/0x460 [ 398.153330][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 398.159143][ C0] hrtimer_interrupt+0x380/0xaf0 [ 398.164078][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 398.169985][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 398.175615][ C0] [ 398.178547][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 398.184558][ C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 398.190363][ C0] Code: 05 9f a0 79 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 a0 79 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c a0 79 7a ff 65 48 8b 04 25 00 6d 01 [ 398.210052][ C0] RSP: 0018:ffffc90015dbb7a8 EFLAGS: 00000202 [ 398.216125][ C0] RAX: 0000000000000000 RBX: ffff888076636000 RCX: ffffffff85a00e37 [ 398.224087][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 398.232056][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.240040][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 398.248022][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.255987][ C0] ? native_iret+0x7/0x7 [ 398.260237][ C0] irqentry_exit_cond_resched+0x30/0x40 [ 398.265787][ C0] irqentry_exit+0x2a/0x40 [ 398.270230][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 398.275700][ C0] RIP: 0010:dump_stack+0x17d/0x19d [ 398.280951][ C0] Code: 00 02 00 00 31 ff e8 8f 16 a0 fe 49 81 e7 00 02 00 00 75 07 e8 d1 11 a0 fe eb 06 e8 ca 11 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 d9 b8 e0 [ 398.301740][ C0] RSP: 0018:ffffc90015dbb888 EFLAGS: 00000246 [ 398.307985][ C0] RAX: c5cba4fb069de300 RBX: 00000000ffffffff RCX: 0000000000040000 [ 398.315954][ C0] RDX: ffffc9000c4b1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 398.324007][ C0] RBP: 0000000000000000 R08: ffffffff82a62411 R09: 00018880766363cf [ 398.331991][ C0] R10: 0001ffffffffffff R11: ffff888076636000 R12: ffffffff878d2788 [ 398.340570][ C0] R13: 0000000000000001 R14: ffffffff878d27a0 R15: 0000000000000200 [ 398.348641][ C0] ? dump_stack+0x15e/0x19d [ 398.353239][ C0] ? dump_stack+0x173/0x19d [ 398.357771][ C0] should_fail+0x23c/0x250 [ 398.362305][ C0] should_fail_usercopy+0x16/0x20 [ 398.367441][ C0] kvm_vcpu_read_guest_page+0x338/0x3c0 [ 398.375161][ C0] kvm_fetch_guest_virt+0xe6/0x130 [ 398.380366][ C0] ? emulator_write_std+0x190/0x190 [ 398.385671][ C0] __do_insn_fetch_bytes+0x1ad/0x3d0 [ 398.390971][ C0] x86_decode_insn+0x16f/0x2b80 [ 398.395852][ C0] ? vmx_cache_reg+0xca/0x340 [ 398.400536][ C0] ? init_emulate_ctxt+0x220/0x250 [ 398.405648][ C0] x86_decode_emulated_instruction+0x127/0x900 [ 398.411832][ C0] x86_emulate_instruction+0x106/0x1d80 [ 398.417374][ C0] kvm_emulate_instruction+0x1d/0x20 [ 398.422670][ C0] ? handle_dr+0x4e0/0x4e0 [ 398.427087][ C0] handle_io+0x11b/0x130 [ 398.431337][ C0] __vmx_handle_exit+0x35b/0x850 [ 398.436267][ C0] vmx_handle_exit+0x1a/0xd0 [ 398.440978][ C0] vcpu_enter_guest+0x1adf/0x2710 [ 398.446003][ C0] ? tomoyo_path_number_perm+0x286/0x2d0 [ 398.451929][ C0] ? vmx_vcpu_load_vmcs+0x39d/0x4e0 [ 398.457213][ C0] vcpu_run+0x24f/0x6a0 [ 398.461374][ C0] kvm_arch_vcpu_ioctl_run+0x476/0x860 [ 398.466829][ C0] kvm_vcpu_ioctl+0x562/0x8f0 [ 398.471515][ C0] ? tomoyo_file_ioctl+0x1c/0x20 [ 398.476482][ C0] ? kvm_vm_ioctl_get_dirty_log+0x3f0/0x3f0 [ 398.482399][ C0] __se_sys_ioctl+0xcb/0x140 [ 398.487000][ C0] __x64_sys_ioctl+0x3f/0x50 [ 398.491613][ C0] do_syscall_64+0x39/0x80 [ 398.496033][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 398.501947][ C0] RIP: 0033:0x466459 [ 398.505857][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 398.525464][ C0] RSP: 002b:00007fc406fd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.533945][ C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 398.541920][ C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 398.549895][ C0] RBP: 00007fc406fd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 398.557875][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.565934][ C0] R13: 00007ffd1e10cf6f R14: 00007fc406fd1300 R15: 0000000000022000 [ 398.574022][ C0] ---[ end trace 215dd0f65ef481fa ]--- [ 398.594155][ T299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.679846][ C0] ------------[ cut here ]------------ [ 398.685340][ C0] WARNING: CPU: 0 PID: 8345 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 398.696130][ C0] Modules linked in: [ 398.700030][ C0] CPU: 0 PID: 8345 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 398.709805][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.719859][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 398.725941][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 398.745639][ C0] RSP: 0000:ffffc90000d9fd60 EFLAGS: 00010046 [ 398.751728][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000029 RCX: ffff888105d1a000 [ 398.759700][ C0] RDX: 0000000080010000 RSI: 0000000000000029 RDI: 0000000000000001 [ 398.767965][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 398.775940][ C0] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff88813bc1da58 [ 398.783929][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 398.793233][ C0] FS: 000000000182e750(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 398.802205][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.808883][ C0] CR2: 000000c01a1c6b80 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 398.816945][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.824912][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.832971][ C0] Call Trace: [ 398.836254][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 398.842096][ C0] __run_hrtimer+0x163/0x460 [ 398.846691][ C0] hrtimer_interrupt+0x380/0xaf0 [ 398.851656][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 398.857870][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 398.863774][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 398.870286][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 398.876266][ C0] RIP: 0033:0x4204b9 [ 398.880272][ C0] Code: ce 80 ba b1 00 00 00 00 0f 84 4d 02 00 00 0f ba e7 00 0f 83 31 02 00 00 b9 01 00 00 00 84 c9 0f 85 16 02 00 00 48 89 74 24 30 <4c> 89 44 24 18 48 83 3d da f7 43 01 00 0f 84 d2 01 00 00 4c 8b 0b [ 398.900680][ C0] RSP: 002b:00007ffff6712788 EFLAGS: 00000246 [ 398.906749][ C0] RAX: 00000000008e1b60 RBX: 000000c00001fe98 RCX: 0000000000000000 [ 398.914824][ C0] RDX: 000000c000001980 RSI: 0000000000000000 RDI: 000000000000000b [ 398.922798][ C0] RBP: 00007ffff67127d0 R08: 0000000000003028 R09: 000000c000001980 [ 398.930783][ C0] R10: 000000c00001fe98 R11: 0000000000000020 R12: 000000c01711d0d0 [ 398.938760][ C0] R13: 000000000182e300 R14: 000000c016e9c3c0 R15: 0000000000000000 [ 398.946759][ C0] ---[ end trace 215dd0f65ef481fb ]--- [ 398.952580][ C0] ------------[ cut here ]------------ [ 398.958037][ C0] WARNING: CPU: 0 PID: 8345 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 398.968826][ C0] Modules linked in: [ 398.972730][ C0] CPU: 0 PID: 8345 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 398.982457][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.992507][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 398.998497][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 399.018208][ C0] RSP: 0000:ffffc90000d9fd60 EFLAGS: 00010046 [ 399.024281][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000011 RCX: ffff888105d1a000 [ 399.032251][ C0] RDX: 0000000080010000 RSI: 0000000000000011 RDI: 0000000000000001 [ 399.040246][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 399.048235][ C0] R10: 0001ffffffffffff R11: ffff888105d1a000 R12: ffff88813bc1da58 [ 399.056208][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 399.064276][ C0] FS: 000000000182e750(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 399.073240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.079827][ C0] CR2: 000000c01a1c6b80 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 399.087819][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.095799][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.103780][ C0] Call Trace: [ 399.107074][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 399.112888][ C0] __run_hrtimer+0x163/0x460 [ 399.117491][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 399.123297][ C0] hrtimer_interrupt+0x380/0xaf0 [ 399.128251][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 399.134337][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 399.140242][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 399.145882][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 399.151860][ C0] RIP: 0033:0x4204b9 [ 399.155775][ C0] Code: ce 80 ba b1 00 00 00 00 0f 84 4d 02 00 00 0f ba e7 00 0f 83 31 02 00 00 b9 01 00 00 00 84 c9 0f 85 16 02 00 00 48 89 74 24 30 <4c> 89 44 24 18 48 83 3d da f7 43 01 00 0f 84 d2 01 00 00 4c 8b 0b [ 399.175384][ C0] RSP: 002b:00007ffff6712788 EFLAGS: 00000246 [ 399.181797][ C0] RAX: 00000000008e1b60 RBX: 000000c00001fe98 RCX: 0000000000000000 [ 399.189773][ C0] RDX: 000000c000001980 RSI: 0000000000000000 RDI: 000000000000000b [ 399.197748][ C0] RBP: 00007ffff67127d0 R08: 0000000000003028 R09: 000000c000001980 [ 399.205712][ C0] R10: 000000c00001fe98 R11: 0000000000000020 R12: 000000c01711d0d0 [ 399.213682][ C0] R13: 000000000182e300 R14: 000000c016e9c3c0 R15: 0000000000000000 [ 399.221689][ C0] ---[ end trace 215dd0f65ef481fc ]--- [ 399.227537][ C0] ------------[ cut here ]------------ [ 399.233009][ C0] WARNING: CPU: 0 PID: 8345 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 399.243943][ C0] Modules linked in: [ 399.247828][ C0] CPU: 0 PID: 8345 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 399.257637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.267689][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 399.273695][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 399.293342][ C0] RSP: 0000:ffffc90000d9fd60 EFLAGS: 00010046 [ 399.299452][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000010 RCX: ffff888105d1a000 [ 399.307551][ C0] RDX: 0000000080010000 RSI: 0000000000000010 RDI: 0000000000000001 [ 399.315649][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 399.323714][ C0] R10: 0001ffffffffffff R11: 00000000000002c7 R12: ffff88813bc1da58 [ 399.331692][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 399.339687][ C0] FS: 000000000182e750(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 399.348617][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.355291][ C0] CR2: 000000c01a1c6b80 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 399.363358][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.371416][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.379403][ C0] Call Trace: [ 399.382684][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 399.389063][ C0] __run_hrtimer+0x163/0x460 [ 399.393685][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 399.399536][ C0] hrtimer_interrupt+0x380/0xaf0 [ 399.404499][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 399.410572][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 399.416475][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 399.422127][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 399.428714][ C0] RIP: 0033:0x4204b9 19:39:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 399.432610][ C0] Code: ce 80 ba b1 00 00 00 00 0f 84 4d 02 00 00 0f ba e7 00 0f 83 31 02 00 00 b9 01 00 00 00 84 c9 0f 85 16 02 00 00 48 89 74 24 30 <4c> 89 44 24 18 48 83 3d da f7 43 01 00 0f 84 d2 01 00 00 4c 8b 0b [ 399.452743][ C0] RSP: 002b:00007ffff6712788 EFLAGS: 00000246 [ 399.458827][ C0] RAX: 00000000008e1b60 RBX: 000000c00001fe98 RCX: 0000000000000000 [ 399.466971][ C0] RDX: 000000c000001980 RSI: 0000000000000000 RDI: 000000000000000b [ 399.474940][ C0] RBP: 00007ffff67127d0 R08: 0000000000003028 R09: 000000c000001980 [ 399.483037][ C0] R10: 000000c00001fe98 R11: 0000000000000020 R12: 000000c01711d0d0 [ 399.491095][ C0] R13: 000000000182e300 R14: 000000c016e9c3c0 R15: 0000000000000000 [ 399.499069][ C0] ---[ end trace 215dd0f65ef481fd ]--- [ 399.604898][ C0] ------------[ cut here ]------------ [ 399.610380][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 399.621187][ C0] Modules linked in: [ 399.625077][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 399.634805][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.644874][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 399.650866][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 399.670493][ C0] RSP: 0000:ffffc90000db7d60 EFLAGS: 00010046 [ 399.676558][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000017 RCX: ffff88810b8e2000 [ 399.684569][ C0] RDX: 0000000080010000 RSI: 0000000000000017 RDI: 0000000000000001 [ 399.692524][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 399.700838][ C0] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffff88813bc1da58 [ 399.708798][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 399.716849][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 399.725772][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.732336][ C0] CR2: 00007f5f3b81d008 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 399.740313][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.748381][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.756364][ C0] Call Trace: [ 399.759638][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 399.765452][ C0] __run_hrtimer+0x163/0x460 [ 399.770043][ C0] hrtimer_interrupt+0x380/0xaf0 [ 399.774999][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 399.781097][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 399.787012][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 399.792664][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 399.798658][ C0] RIP: 0033:0x424710 [ 399.802549][ C0] Code: 0d 5d 16 43 01 89 4c 24 20 48 8d 05 2a 15 42 01 48 89 04 24 e8 61 fb ff ff 48 8b 44 24 08 48 85 c0 0f 84 31 02 00 00 8a 48 63 <80> f9 01 74 1b 8b 40 58 8b 54 24 20 0f 1f 40 00 39 c2 74 cb 8d 5a [ 399.822413][ C0] RSP: 002b:000000c000435b38 EFLAGS: 00000206 [ 399.828479][ C0] RAX: 00007f5f3a8434b8 RBX: 000000000000007c RCX: 000000000182d801 [ 399.836448][ C0] RDX: 000000000000007c RSI: 00007f5f3a8434b8 RDI: 000004520000052c [ 399.844528][ C0] RBP: 000000c000435b90 R08: 00007ffff677d001 R09: 0000000000000010 [ 399.852499][ C0] R10: 00007ffff677d0b8 R11: 000000000001168a R12: 00000000000000ff [ 399.860472][ C0] R13: 0000000000000004 R14: 00007f5f3a364620 R15: 0000000000000010 [ 399.868451][ C0] ---[ end trace 215dd0f65ef481fe ]--- [ 399.874321][ C0] ------------[ cut here ]------------ [ 399.879780][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 399.890605][ C0] Modules linked in: [ 399.894848][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 399.904578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.914633][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 399.920621][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 399.940252][ C0] RSP: 0000:ffffc90000db7d60 EFLAGS: 00010046 [ 399.946321][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000010 RCX: ffff88810b8e2000 [ 399.954306][ C0] RDX: 0000000080010000 RSI: 0000000000000010 RDI: 0000000000000001 [ 399.962300][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 399.970276][ C0] R10: 0001ffffffffffff R11: ffff88810b8e2000 R12: ffff88813bc1da58 [ 399.978271][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 399.986241][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 399.995182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.001771][ C0] CR2: 00007f5f3b81d008 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 400.009868][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.017847][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.025812][ C0] Call Trace: [ 400.029107][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 400.034942][ C0] __run_hrtimer+0x163/0x460 [ 400.039529][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 400.045331][ C0] hrtimer_interrupt+0x380/0xaf0 [ 400.050271][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 400.056340][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 400.062233][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 400.067876][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.073852][ C0] RIP: 0033:0x424710 [ 400.077755][ C0] Code: 0d 5d 16 43 01 89 4c 24 20 48 8d 05 2a 15 42 01 48 89 04 24 e8 61 fb ff ff 48 8b 44 24 08 48 85 c0 0f 84 31 02 00 00 8a 48 63 <80> f9 01 74 1b 8b 40 58 8b 54 24 20 0f 1f 40 00 39 c2 74 cb 8d 5a [ 400.097363][ C0] RSP: 002b:000000c000435b38 EFLAGS: 00000206 [ 400.103454][ C0] RAX: 00007f5f3a8434b8 RBX: 000000000000007c RCX: 000000000182d801 [ 400.111419][ C0] RDX: 000000000000007c RSI: 00007f5f3a8434b8 RDI: 000004520000052c [ 400.119390][ C0] RBP: 000000c000435b90 R08: 00007ffff677d001 R09: 0000000000000010 [ 400.127367][ C0] R10: 00007ffff677d0b8 R11: 000000000001168a R12: 00000000000000ff [ 400.135457][ C0] R13: 0000000000000004 R14: 00007f5f3a364620 R15: 0000000000000010 [ 400.143449][ C0] ---[ end trace 215dd0f65ef481ff ]--- [ 400.149361][ C0] ------------[ cut here ]------------ [ 400.154806][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 400.165579][ C0] Modules linked in: [ 400.169474][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 400.179205][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.189264][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 400.195260][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 400.214948][ C0] RSP: 0000:ffffc90000db7d60 EFLAGS: 00010046 [ 400.221014][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000011 RCX: ffff88810b8e2000 [ 400.228990][ C0] RDX: 0000000080010000 RSI: 0000000000000011 RDI: 0000000000000001 [ 400.236957][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 400.244925][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 400.252914][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 400.261151][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 400.270096][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.276774][ C0] CR2: 00007f5f3b81d008 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 400.284761][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.292755][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.300739][ C0] Call Trace: [ 400.304011][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 400.309818][ C0] __run_hrtimer+0x163/0x460 [ 400.314426][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 400.320250][ C0] hrtimer_interrupt+0x380/0xaf0 [ 400.325202][ C0] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 400.331266][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 400.337159][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 400.342814][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.348787][ C0] RIP: 0033:0x424710 [ 400.352672][ C0] Code: 0d 5d 16 43 01 89 4c 24 20 48 8d 05 2a 15 42 01 48 89 04 24 e8 61 fb ff ff 48 8b 44 24 08 48 85 c0 0f 84 31 02 00 00 8a 48 63 <80> f9 01 74 1b 8b 40 58 8b 54 24 20 0f 1f 40 00 39 c2 74 cb 8d 5a [ 400.372274][ C0] RSP: 002b:000000c000435b38 EFLAGS: 00000206 [ 400.378355][ C0] RAX: 00007f5f3a8434b8 RBX: 000000000000007c RCX: 000000000182d801 [ 400.386318][ C0] RDX: 000000000000007c RSI: 00007f5f3a8434b8 RDI: 000004520000052c [ 400.394820][ C0] RBP: 000000c000435b90 R08: 00007ffff677d001 R09: 0000000000000010 [ 400.402782][ C0] R10: 00007ffff677d0b8 R11: 000000000001168a R12: 00000000000000ff [ 400.410742][ C0] R13: 0000000000000004 R14: 00007f5f3a364620 R15: 0000000000000010 [ 400.418721][ C0] ---[ end trace 215dd0f65ef48200 ]--- [ 400.524544][ C0] ------------[ cut here ]------------ [ 400.530112][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 400.540890][ C0] Modules linked in: [ 400.544773][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 400.554511][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.564568][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 400.570562][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 400.590190][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 400.596262][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000016 RCX: ffff88810b8e2000 [ 400.604255][ C0] RDX: 0000000080010001 RSI: 0000000000000016 RDI: 0000000000000001 [ 400.612230][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 400.620218][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 400.628203][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 400.636175][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 400.645103][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.651706][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 400.659684][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.667664][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.675638][ C0] Call Trace: [ 400.678908][ C0] [ 400.681755][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 400.687588][ C0] __run_hrtimer+0x163/0x460 [ 400.692183][ C0] hrtimer_interrupt+0x380/0xaf0 [ 400.697128][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 400.703034][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 400.708741][ C0] [ 400.711767][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 400.717753][ C0] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 400.724039][ C0] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 400.743659][ C0] RSP: 0018:ffffc90000db7568 EFLAGS: 00000246 [ 400.749758][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0011c90000db76c0 [ 400.757739][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.765709][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.773854][ C0] R10: ffffffff88f320f0 R11: 0000000000000200 R12: 0000000000000038 [ 400.781848][ C0] R13: ffff888100198400 R14: ffffc90000db76c0 R15: 0000000000000008 [ 400.789824][ C0] ? kcsan_setup_watchpoint+0x26e/0x470 [ 400.795518][ C0] page_vma_mapped_walk+0x32/0x1030 [ 400.800726][ C0] ? do_page_add_anon_rmap+0x225/0x320 [ 400.806202][ C0] remove_migration_pte+0x698/0x7b0 [ 400.811425][ C0] ? remove_migration_ptes+0x90/0x90 [ 400.816727][ C0] rmap_walk_anon+0x26b/0x5a0 [ 400.821424][ C0] rmap_walk_locked+0x86/0xa0 [ 400.826121][ C0] remove_migration_ptes+0x56/0x90 [ 400.831232][ C0] ? remove_migration_ptes+0x90/0x90 [ 400.836515][ C0] __split_huge_page+0xba7/0xec0 [ 400.841457][ C0] split_huge_page_to_list+0x852/0x9c0 [ 400.846949][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 400.852241][ C0] madvise_free_pte_range+0xdd/0xe70 [ 400.857530][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 400.864221][ C0] __walk_page_range+0xa61/0x13e0 [ 400.869261][ C0] ? release_pages+0xb30/0xb60 [ 400.874069][ C0] walk_page_range+0x111/0x2e0 [ 400.879137][ C0] madvise_dontneed_free+0x409/0x4b0 [ 400.884445][ C0] ? vmacache_find+0x309/0x320 [ 400.889213][ C0] do_madvise+0x4b6/0xe20 [ 400.893561][ C0] ? _copy_from_user+0x94/0xd0 [ 400.898328][ C0] ? kcsan_setup_watchpoint+0x26e/0x470 [ 400.903880][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 400.909963][ C0] __x64_sys_madvise+0x5d/0x70 [ 400.914726][ C0] do_syscall_64+0x39/0x80 [ 400.919141][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 400.925131][ C0] RIP: 0033:0x46e137 [ 400.929027][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 400.950601][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 400.959503][ C0] RAX: ffffffffffffffda RBX: 000000c017000000 RCX: 000000000046e137 [ 400.969147][ C0] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c016fc8000 [ 400.977827][ C0] RBP: 000000c000039e28 R08: 000000c016fca000 R09: 67fc05fbf8000000 [ 400.985813][ C0] R10: 0000800000000000 R11: 0000000000000246 R12: 0000000000000009 [ 400.993877][ C0] R13: 0000000000001018 R14: 000080c016800000 R15: 0000000000000010 [ 401.002331][ C0] ---[ end trace 215dd0f65ef48201 ]--- [ 401.009073][ C0] ------------[ cut here ]------------ [ 401.018275][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 401.030917][ C0] Modules linked in: [ 401.035567][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 401.045560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.055633][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 401.061634][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 401.083854][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 401.090640][ C0] RAX: ffffffff82eb5059 RBX: 000000000000001d RCX: ffff88810b8e2000 [ 401.098613][ C0] RDX: 0000000080010001 RSI: 000000000000001d RDI: 0000000000000001 [ 401.106687][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 401.115139][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 401.123108][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 401.131351][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 401.142883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.149472][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 401.157748][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.167058][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.175044][ C0] Call Trace: [ 401.178321][ C0] [ 401.181154][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 401.186964][ C0] __run_hrtimer+0x163/0x460 [ 401.191568][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 401.197380][ C0] hrtimer_interrupt+0x380/0xaf0 [ 401.202319][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 401.208309][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 401.213960][ C0] [ 401.216882][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.222867][ C0] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 401.229032][ C0] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 401.248634][ C0] RSP: 0018:ffffc90000db7568 EFLAGS: 00000246 [ 401.254699][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0011c90000db76c0 [ 401.262666][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.270735][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.278709][ C0] R10: ffffffff88f320f0 R11: 0000000000000200 R12: 0000000000000038 [ 401.286673][ C0] R13: ffff888100198400 R14: ffffc90000db76c0 R15: 0000000000000008 [ 401.295174][ C0] ? kcsan_setup_watchpoint+0x26e/0x470 [ 401.300728][ C0] page_vma_mapped_walk+0x32/0x1030 [ 401.305939][ C0] ? do_page_add_anon_rmap+0x225/0x320 [ 401.311402][ C0] remove_migration_pte+0x698/0x7b0 [ 401.316614][ C0] ? remove_migration_ptes+0x90/0x90 [ 401.321896][ C0] rmap_walk_anon+0x26b/0x5a0 [ 401.326607][ C0] rmap_walk_locked+0x86/0xa0 [ 401.331396][ C0] remove_migration_ptes+0x56/0x90 [ 401.336529][ C0] ? remove_migration_ptes+0x90/0x90 [ 401.342192][ C0] __split_huge_page+0xba7/0xec0 [ 401.347160][ C0] split_huge_page_to_list+0x852/0x9c0 [ 401.352620][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 401.357919][ C0] madvise_free_pte_range+0xdd/0xe70 [ 401.363225][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 401.369927][ C0] __walk_page_range+0xa61/0x13e0 [ 401.374961][ C0] ? release_pages+0xb30/0xb60 [ 401.379737][ C0] walk_page_range+0x111/0x2e0 [ 401.384512][ C0] madvise_dontneed_free+0x409/0x4b0 [ 401.389812][ C0] ? vmacache_find+0x309/0x320 [ 401.394575][ C0] do_madvise+0x4b6/0xe20 [ 401.398907][ C0] ? _copy_from_user+0x94/0xd0 [ 401.403665][ C0] ? kcsan_setup_watchpoint+0x26e/0x470 [ 401.409210][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 401.415303][ C0] __x64_sys_madvise+0x5d/0x70 [ 401.420412][ C0] do_syscall_64+0x39/0x80 [ 401.424839][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 401.430733][ C0] RIP: 0033:0x46e137 [ 401.434620][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 401.454245][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 401.462747][ C0] RAX: ffffffffffffffda RBX: 000000c017000000 RCX: 000000000046e137 [ 401.470720][ C0] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c016fc8000 [ 401.478681][ C0] RBP: 000000c000039e28 R08: 000000c016fca000 R09: 67fc05fbf8000000 [ 401.486646][ C0] R10: 0000800000000000 R11: 0000000000000246 R12: 0000000000000009 [ 401.494613][ C0] R13: 0000000000001018 R14: 000080c016800000 R15: 0000000000000010 [ 401.502582][ C0] ---[ end trace 215dd0f65ef48202 ]--- [ 401.508406][ C0] ------------[ cut here ]------------ [ 401.513860][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 401.524648][ C0] Modules linked in: [ 401.528538][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 401.538356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.548405][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 401.554389][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 401.574040][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 401.580124][ C0] RAX: ffffffff82eb5059 RBX: 000000000000001e RCX: ffff88810b8e2000 [ 401.588108][ C0] RDX: 0000000080010001 RSI: 000000000000001e RDI: 0000000000000001 [ 401.596076][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 401.604307][ C0] R10: 0001ffffffffffff R11: ffff88810b8e2000 R12: ffff88813bc1da58 [ 401.612364][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 401.620342][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 401.629272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.635853][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 401.643833][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.651800][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.659777][ C0] Call Trace: [ 401.663043][ C0] [ 401.665877][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 401.671721][ C0] __run_hrtimer+0x163/0x460 [ 401.676318][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 401.682134][ C0] hrtimer_interrupt+0x380/0xaf0 [ 401.687105][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 401.692998][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 401.699165][ C0] [ 401.702113][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 401.708089][ C0] RIP: 0010:kcsan_setup_watchpoint+0x436/0x470 [ 401.714783][ C0] Code: 89 da 4c 8b 5c 24 08 49 c7 02 00 00 00 00 f0 48 ff 0d 5e 25 9c 07 4d 85 db 74 0a 80 3d 34 23 9c 07 00 75 01 fb 4c 89 6c 24 38 <0f> 1f 44 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 d0 [ 401.734401][ C0] RSP: 0018:ffffc90000db7568 EFLAGS: 00000246 [ 401.740467][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0011c90000db76c0 [ 401.748448][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.756410][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.764385][ C0] R10: ffffffff88f320f0 R11: 0000000000000200 R12: 0000000000000038 [ 401.772347][ C0] R13: ffff888100198400 R14: ffffc90000db76c0 R15: 0000000000000008 [ 401.780324][ C0] ? kcsan_setup_watchpoint+0x26e/0x470 [ 401.785882][ C0] page_vma_mapped_walk+0x32/0x1030 [ 401.791078][ C0] ? do_page_add_anon_rmap+0x225/0x320 [ 401.796552][ C0] remove_migration_pte+0x698/0x7b0 [ 401.801763][ C0] ? remove_migration_ptes+0x90/0x90 [ 401.807068][ C0] rmap_walk_anon+0x26b/0x5a0 [ 401.811759][ C0] rmap_walk_locked+0x86/0xa0 [ 401.816437][ C0] remove_migration_ptes+0x56/0x90 [ 401.821630][ C0] ? remove_migration_ptes+0x90/0x90 [ 401.826919][ C0] __split_huge_page+0xba7/0xec0 [ 401.831872][ C0] split_huge_page_to_list+0x852/0x9c0 [ 401.837505][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 401.842790][ C0] madvise_free_pte_range+0xdd/0xe70 [ 401.848076][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 401.854772][ C0] __walk_page_range+0xa61/0x13e0 [ 401.859793][ C0] ? release_pages+0xb30/0xb60 [ 401.864574][ C0] walk_page_range+0x111/0x2e0 [ 401.869333][ C0] madvise_dontneed_free+0x409/0x4b0 [ 401.874645][ C0] ? vmacache_find+0x309/0x320 [ 401.879499][ C0] do_madvise+0x4b6/0xe20 [ 401.883842][ C0] ? _copy_from_user+0x94/0xd0 [ 401.888601][ C0] ? kcsan_setup_watchpoint+0x26e/0x470 [ 401.894143][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 401.900204][ C0] __x64_sys_madvise+0x5d/0x70 [ 401.904974][ C0] do_syscall_64+0x39/0x80 [ 401.909423][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 401.915338][ C0] RIP: 0033:0x46e137 [ 401.919224][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 401.938832][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 401.947702][ C0] RAX: ffffffffffffffda RBX: 000000c017000000 RCX: 000000000046e137 [ 401.955675][ C0] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c016fc8000 [ 401.963648][ C0] RBP: 000000c000039e28 R08: 000000c016fca000 R09: 67fc05fbf8000000 [ 401.971617][ C0] R10: 0000800000000000 R11: 0000000000000246 R12: 0000000000000009 [ 401.979577][ C0] R13: 0000000000001018 R14: 000080c016800000 R15: 0000000000000010 [ 401.987546][ C0] ---[ end trace 215dd0f65ef48203 ]--- [ 402.093470][ C0] ------------[ cut here ]------------ [ 402.098970][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 402.109765][ C0] Modules linked in: [ 402.113657][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 402.123387][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.133451][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 402.139417][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 402.159464][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 402.165609][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000023 RCX: ffff88810b8e2000 [ 402.173558][ C0] RDX: 0000000080010000 RSI: 0000000000000023 RDI: 0000000000000001 [ 402.181528][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 402.189484][ C0] R10: 0001ffffffffffff R11: ffffc90000003ff8 R12: ffff88813bc1da58 [ 402.197447][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 402.205464][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 402.214792][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.221358][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 402.229513][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 402.238090][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 402.246083][ C0] Call Trace: [ 402.249361][ C0] [ 402.252188][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 402.258002][ C0] __run_hrtimer+0x163/0x460 [ 402.262603][ C0] hrtimer_interrupt+0x380/0xaf0 [ 402.267523][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 402.273434][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 402.279657][ C0] [ 402.282588][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.289159][ C0] RIP: 0010:__split_huge_page+0xb5a/0xec0 [ 402.294896][ C0] Code: 00 04 00 00 48 21 de 31 ff e8 82 28 d7 ff 48 21 dd 4c 8b 64 24 08 0f 85 f3 02 00 00 e8 bf 23 d7 ff f0 41 ff 46 34 fb 4c 89 f7 f1 d0 e7 ff 4d 8b 3e bd 00 00 01 00 be 00 00 01 00 4c 21 fe 31 [ 402.314855][ C0] RSP: 0018:ffffc90000db7850 EFLAGS: 00000203 [ 402.321183][ C0] RAX: ffffffff816f1231 RBX: 011990000008001d RCX: ffff88810b8e2000 [ 402.329414][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0004900000 [ 402.337374][ C0] RBP: 0000000000000000 R08: ffffffff816f121e R09: 0001ea000490001f [ 402.345350][ C0] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000200 [ 402.353306][ C0] R13: ffffea0004900000 R14: ffffea0004900000 R15: ffffea0004900000 [ 402.361261][ C0] ? __split_huge_page+0xb3e/0xec0 [ 402.366359][ C0] ? __split_huge_page+0xb51/0xec0 [ 402.371466][ C0] split_huge_page_to_list+0x852/0x9c0 [ 402.376909][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 402.382214][ C0] madvise_free_pte_range+0xdd/0xe70 [ 402.387479][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 402.394149][ C0] __walk_page_range+0xa61/0x13e0 [ 402.399161][ C0] ? release_pages+0xb30/0xb60 [ 402.403925][ C0] walk_page_range+0x111/0x2e0 [ 402.408673][ C0] madvise_dontneed_free+0x409/0x4b0 [ 402.413951][ C0] ? vmacache_find+0x1e2/0x320 [ 402.418706][ C0] do_madvise+0x4b6/0xe20 [ 402.423043][ C0] ? _copy_from_user+0x94/0xd0 [ 402.427794][ C0] ? restore_altstack+0x1af/0x200 [ 402.433588][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 402.439657][ C0] __x64_sys_madvise+0x5d/0x70 [ 402.444761][ C0] do_syscall_64+0x39/0x80 [ 402.449706][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 402.455607][ C0] RIP: 0033:0x46e137 [ 402.459484][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 402.479163][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 402.487669][ C0] RAX: ffffffffffffffda RBX: 000000c012a00000 RCX: 000000000046e137 [ 402.495622][ C0] RDX: 0000000000000008 RSI: 0000000000006000 RDI: 000000c0129ee000 [ 402.503596][ C0] RBP: 000000c000039e28 R08: 000000c0129f4000 R09: 1f7c0ffea5effdc0 [ 402.511658][ C0] R10: 0007ffffffffe18f R11: 0000000000000246 R12: 0000000000000011 [ 402.519669][ C0] R13: 0000000000001018 R14: 000080c012000000 R15: 0000000000000010 [ 402.527632][ C0] ---[ end trace 215dd0f65ef48204 ]--- [ 402.533516][ C0] ------------[ cut here ]------------ [ 402.539092][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 402.549874][ C0] Modules linked in: [ 402.553755][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 402.563736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.573904][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 402.579889][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 402.599488][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 402.605537][ C0] RAX: ffffffff82eb5059 RBX: 000000000000001b RCX: ffff88810b8e2000 [ 402.613496][ C0] RDX: 0000000000010000 RSI: 000000000000001b RDI: 0000000000000001 [ 402.621468][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 402.629438][ C0] R10: 0001ffffffffffff R11: ffff88810b8e2000 R12: ffff88813bc1da58 [ 402.637411][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 402.645381][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 402.654294][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.660859][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 402.668842][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 402.676801][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 402.684759][ C0] Call Trace: [ 402.688036][ C0] [ 402.690873][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 402.696661][ C0] __run_hrtimer+0x163/0x460 [ 402.701418][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 402.707380][ C0] hrtimer_interrupt+0x380/0xaf0 [ 402.712308][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 402.718216][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 402.723872][ C0] [ 402.726906][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 402.733260][ C0] RIP: 0010:__split_huge_page+0xb5a/0xec0 [ 402.739373][ C0] Code: 00 04 00 00 48 21 de 31 ff e8 82 28 d7 ff 48 21 dd 4c 8b 64 24 08 0f 85 f3 02 00 00 e8 bf 23 d7 ff f0 41 ff 46 34 fb 4c 89 f7 f1 d0 e7 ff 4d 8b 3e bd 00 00 01 00 be 00 00 01 00 4c 21 fe 31 [ 402.758968][ C0] RSP: 0018:ffffc90000db7850 EFLAGS: 00000203 [ 402.765031][ C0] RAX: ffffffff816f1231 RBX: 011990000008001d RCX: ffff88810b8e2000 [ 402.772985][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0004900000 [ 402.780935][ C0] RBP: 0000000000000000 R08: ffffffff816f121e R09: 0001ea000490001f [ 402.788899][ C0] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000200 [ 402.796875][ C0] R13: ffffea0004900000 R14: ffffea0004900000 R15: ffffea0004900000 [ 402.804935][ C0] ? __split_huge_page+0xb3e/0xec0 [ 402.810172][ C0] ? __split_huge_page+0xb51/0xec0 [ 402.815276][ C0] split_huge_page_to_list+0x852/0x9c0 [ 402.820740][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 402.826023][ C0] madvise_free_pte_range+0xdd/0xe70 [ 402.831288][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 402.837946][ C0] __walk_page_range+0xa61/0x13e0 [ 402.843004][ C0] ? release_pages+0xb30/0xb60 [ 402.847763][ C0] walk_page_range+0x111/0x2e0 [ 402.852526][ C0] madvise_dontneed_free+0x409/0x4b0 [ 402.857795][ C0] ? vmacache_find+0x1e2/0x320 [ 402.862583][ C0] do_madvise+0x4b6/0xe20 [ 402.866890][ C0] ? _copy_from_user+0x94/0xd0 [ 402.871670][ C0] ? restore_altstack+0x1af/0x200 [ 402.876687][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 402.882737][ C0] __x64_sys_madvise+0x5d/0x70 [ 402.887511][ C0] do_syscall_64+0x39/0x80 [ 402.891947][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 402.898092][ C0] RIP: 0033:0x46e137 [ 402.902007][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 402.921615][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 402.930074][ C0] RAX: ffffffffffffffda RBX: 000000c012a00000 RCX: 000000000046e137 [ 402.938147][ C0] RDX: 0000000000000008 RSI: 0000000000006000 RDI: 000000c0129ee000 [ 402.946236][ C0] RBP: 000000c000039e28 R08: 000000c0129f4000 R09: 1f7c0ffea5effdc0 [ 402.954813][ C0] R10: 0007ffffffffe18f R11: 0000000000000246 R12: 0000000000000011 [ 402.962786][ C0] R13: 0000000000001018 R14: 000080c012000000 R15: 0000000000000010 [ 402.970744][ C0] ---[ end trace 215dd0f65ef48205 ]--- [ 402.976590][ C0] ------------[ cut here ]------------ [ 402.982093][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 402.993619][ C0] Modules linked in: [ 402.997514][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 403.007271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.017336][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 403.023490][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 403.044497][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 403.050669][ C0] RAX: ffffffff82eb5059 RBX: 000000000000001a RCX: ffff88810b8e2000 [ 403.058644][ C0] RDX: 0000000000010000 RSI: 000000000000001a RDI: 0000000000000001 [ 403.066629][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 403.074601][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 403.082839][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 403.090798][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 403.099835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.106406][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 403.115137][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 403.123088][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 403.131039][ C0] Call Trace: [ 403.134315][ C0] [ 403.137140][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 403.142981][ C0] __run_hrtimer+0x163/0x460 [ 403.147585][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 403.153389][ C0] hrtimer_interrupt+0x380/0xaf0 [ 403.158325][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 403.164230][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 403.169887][ C0] [ 403.172808][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 403.179050][ C0] RIP: 0010:__split_huge_page+0xb5a/0xec0 [ 403.184768][ C0] Code: 00 04 00 00 48 21 de 31 ff e8 82 28 d7 ff 48 21 dd 4c 8b 64 24 08 0f 85 f3 02 00 00 e8 bf 23 d7 ff f0 41 ff 46 34 fb 4c 89 f7 f1 d0 e7 ff 4d 8b 3e bd 00 00 01 00 be 00 00 01 00 4c 21 fe 31 [ 403.204728][ C0] RSP: 0018:ffffc90000db7850 EFLAGS: 00000203 [ 403.210873][ C0] RAX: ffffffff816f1231 RBX: 011990000008001d RCX: ffff88810b8e2000 [ 403.218931][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0004900000 [ 403.226891][ C0] RBP: 0000000000000000 R08: ffffffff816f121e R09: 0001ea000490001f [ 403.234892][ C0] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000200 [ 403.242871][ C0] R13: ffffea0004900000 R14: ffffea0004900000 R15: ffffea0004900000 [ 403.250831][ C0] ? __split_huge_page+0xb3e/0xec0 [ 403.255980][ C0] ? __split_huge_page+0xb51/0xec0 [ 403.261632][ C0] split_huge_page_to_list+0x852/0x9c0 [ 403.267092][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 403.272402][ C0] madvise_free_pte_range+0xdd/0xe70 [ 403.277672][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 403.284364][ C0] __walk_page_range+0xa61/0x13e0 [ 403.289371][ C0] ? release_pages+0xb30/0xb60 [ 403.294254][ C0] walk_page_range+0x111/0x2e0 [ 403.299016][ C0] madvise_dontneed_free+0x409/0x4b0 [ 403.304282][ C0] ? vmacache_find+0x1e2/0x320 [ 403.309063][ C0] do_madvise+0x4b6/0xe20 [ 403.313390][ C0] ? _copy_from_user+0x94/0xd0 [ 403.318135][ C0] ? restore_altstack+0x1af/0x200 [ 403.324032][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 403.330099][ C0] __x64_sys_madvise+0x5d/0x70 [ 403.334863][ C0] do_syscall_64+0x39/0x80 [ 403.339271][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 403.345154][ C0] RIP: 0033:0x46e137 [ 403.349293][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 403.369792][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 403.378273][ C0] RAX: ffffffffffffffda RBX: 000000c012a00000 RCX: 000000000046e137 [ 403.386221][ C0] RDX: 0000000000000008 RSI: 0000000000006000 RDI: 000000c0129ee000 [ 403.394188][ C0] RBP: 000000c000039e28 R08: 000000c0129f4000 R09: 1f7c0ffea5effdc0 [ 403.402153][ C0] R10: 0007ffffffffe18f R11: 0000000000000246 R12: 0000000000000011 [ 403.410217][ C0] R13: 0000000000001018 R14: 000080c012000000 R15: 0000000000000010 [ 403.418194][ C0] ---[ end trace 215dd0f65ef48206 ]--- [ 403.523916][ C0] ------------[ cut here ]------------ [ 403.529477][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 403.540221][ C0] Modules linked in: [ 403.544093][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 403.553784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.563844][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 403.570142][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 403.592000][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 403.598280][ C0] RAX: ffffffff82eb5059 RBX: 0000000000000021 RCX: ffff88810b8e2000 [ 403.607112][ C0] RDX: 0000000080010001 RSI: 0000000000000021 RDI: 0000000000000001 [ 403.615100][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 403.623102][ C0] R10: 0001ffffffffffff R11: 00000000000000a1 R12: ffff88813bc1da58 [ 403.631271][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 403.639515][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 403.648433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.656015][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 403.664177][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 403.672577][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 403.680536][ C0] Call Trace: [ 403.683834][ C0] [ 403.686660][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 403.692459][ C0] __run_hrtimer+0x163/0x460 [ 403.697057][ C0] hrtimer_interrupt+0x380/0xaf0 [ 403.702001][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 403.707936][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 403.713672][ C0] [ 403.716759][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 403.722722][ C0] RIP: 0010:__tsan_unaligned_volatile_read8+0x166/0x190 [ 403.730710][ C0] Code: eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d 96 8c ab 7e 48 ff c9 78 19 48 83 78 20 00 75 01 e9 94 17 00 00 be 08 00 00 00 31 d2 e9 08 12 00 00 be 08 00 00 [ 403.750676][ C0] RSP: 0018:ffffc90000db75e8 EFLAGS: 00000246 [ 403.756760][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88810b8e2000 [ 403.764711][ C0] RDX: ffff88810b8e2000 RSI: 0000000000000000 RDI: ffffea0000abed88 [ 403.772660][ C0] RBP: 0000000000000000 R08: ffffffff8166d5e1 R09: 0001ea0000abed9f [ 403.780617][ C0] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffea0000abed80 [ 403.788570][ C0] R13: ffffea0000abed88 R14: 000000c00e9b6000 R15: ffff88810af96af0 [ 403.796544][ C0] ? do_page_add_anon_rmap+0x31/0x320 [ 403.801908][ C0] do_page_add_anon_rmap+0x3e/0x320 [ 403.807091][ C0] page_add_anon_rmap+0x29/0x40 [ 403.811946][ C0] remove_migration_pte+0x531/0x7b0 [ 403.817137][ C0] ? remove_migration_ptes+0x90/0x90 [ 403.822447][ C0] rmap_walk_anon+0x26b/0x5a0 [ 403.827124][ C0] rmap_walk_locked+0x86/0xa0 [ 403.832062][ C0] remove_migration_ptes+0x56/0x90 [ 403.837162][ C0] ? remove_migration_ptes+0x90/0x90 [ 403.842443][ C0] __split_huge_page+0xba7/0xec0 [ 403.847368][ C0] split_huge_page_to_list+0x852/0x9c0 [ 403.852819][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 403.858093][ C0] madvise_free_pte_range+0xdd/0xe70 [ 403.863404][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 403.870088][ C0] __walk_page_range+0xa61/0x13e0 [ 403.875105][ C0] ? release_pages+0xb30/0xb60 [ 403.879930][ C0] walk_page_range+0x111/0x2e0 [ 403.884675][ C0] madvise_dontneed_free+0x409/0x4b0 [ 403.889971][ C0] ? vmacache_find+0x157/0x320 [ 403.894712][ C0] do_madvise+0x4b6/0xe20 [ 403.899039][ C0] ? _copy_from_user+0x94/0xd0 [ 403.903798][ C0] ? restore_altstack+0x1af/0x200 [ 403.908805][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 403.914860][ C0] __x64_sys_madvise+0x5d/0x70 [ 403.919604][ C0] do_syscall_64+0x39/0x80 [ 403.924004][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 403.929879][ C0] RIP: 0033:0x46e137 [ 403.933765][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 403.953355][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 403.961785][ C0] RAX: ffffffffffffffda RBX: 000000c00ea00000 RCX: 000000000046e137 [ 403.969748][ C0] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c00e9e8000 [ 403.977715][ C0] RBP: 000000c000039e28 R08: 000000c00e9ea000 R09: 7fef0ffffffc3800 [ 403.985700][ C0] R10: 0007ffffffffdd5a R11: 0000000000000246 R12: 0000000000000007 [ 403.993649][ C0] R13: 0000000000001018 R14: 000080c00e400000 R15: 0000000000000010 [ 404.001607][ C0] ---[ end trace 215dd0f65ef48207 ]--- [ 404.007422][ C0] ------------[ cut here ]------------ [ 404.012977][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 404.023750][ C0] Modules linked in: [ 404.027663][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 404.038078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.048149][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 404.054132][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 404.073730][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 404.079814][ C0] RAX: ffffffff82eb5059 RBX: 000000000000001d RCX: ffff88810b8e2000 [ 404.087836][ C0] RDX: 0000000000010001 RSI: 000000000000001d RDI: 0000000000000001 [ 404.095817][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 404.103794][ C0] R10: 0001ffffffffffff R11: 00000000000000ad R12: ffff88813bc1da58 [ 404.111761][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 404.119723][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 404.128769][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.135351][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 404.143506][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.151459][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.159428][ C0] Call Trace: [ 404.162694][ C0] [ 404.165575][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 404.171384][ C0] __run_hrtimer+0x163/0x460 [ 404.175973][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 404.181787][ C0] hrtimer_interrupt+0x380/0xaf0 [ 404.186739][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 404.192688][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 404.198333][ C0] [ 404.201269][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 404.207262][ C0] RIP: 0010:__tsan_unaligned_volatile_read8+0x166/0x190 [ 404.214259][ C0] Code: eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d 96 8c ab 7e 48 ff c9 78 19 48 83 78 20 00 75 01 e9 94 17 00 00 be 08 00 00 00 31 d2 e9 08 12 00 00 be 08 00 00 [ 404.233958][ C0] RSP: 0018:ffffc90000db75e8 EFLAGS: 00000246 [ 404.240013][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88810b8e2000 [ 404.248114][ C0] RDX: ffff88810b8e2000 RSI: 0000000000000000 RDI: ffffea0000abed88 [ 404.256075][ C0] RBP: 0000000000000000 R08: ffffffff8166d5e1 R09: 0001ea0000abed9f [ 404.264175][ C0] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffea0000abed80 [ 404.272146][ C0] R13: ffffea0000abed88 R14: 000000c00e9b6000 R15: ffff88810af96af0 [ 404.280112][ C0] ? do_page_add_anon_rmap+0x31/0x320 [ 404.285484][ C0] do_page_add_anon_rmap+0x3e/0x320 [ 404.290714][ C0] page_add_anon_rmap+0x29/0x40 [ 404.295852][ C0] remove_migration_pte+0x531/0x7b0 [ 404.301222][ C0] ? remove_migration_ptes+0x90/0x90 [ 404.306510][ C0] rmap_walk_anon+0x26b/0x5a0 [ 404.311190][ C0] rmap_walk_locked+0x86/0xa0 [ 404.316041][ C0] remove_migration_ptes+0x56/0x90 [ 404.321140][ C0] ? remove_migration_ptes+0x90/0x90 [ 404.326412][ C0] __split_huge_page+0xba7/0xec0 [ 404.331369][ C0] split_huge_page_to_list+0x852/0x9c0 [ 404.337163][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 404.342466][ C0] madvise_free_pte_range+0xdd/0xe70 [ 404.347836][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 404.354541][ C0] __walk_page_range+0xa61/0x13e0 [ 404.359562][ C0] ? release_pages+0xb30/0xb60 [ 404.364314][ C0] walk_page_range+0x111/0x2e0 [ 404.369062][ C0] madvise_dontneed_free+0x409/0x4b0 [ 404.374357][ C0] ? vmacache_find+0x157/0x320 [ 404.379102][ C0] do_madvise+0x4b6/0xe20 [ 404.383432][ C0] ? _copy_from_user+0x94/0xd0 [ 404.388186][ C0] ? restore_altstack+0x1af/0x200 [ 404.393190][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 404.399241][ C0] __x64_sys_madvise+0x5d/0x70 [ 404.403984][ C0] do_syscall_64+0x39/0x80 [ 404.408399][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 404.414279][ C0] RIP: 0033:0x46e137 [ 404.418155][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 404.437951][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 404.446374][ C0] RAX: ffffffffffffffda RBX: 000000c00ea00000 RCX: 000000000046e137 [ 404.454340][ C0] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c00e9e8000 [ 404.462393][ C0] RBP: 000000c000039e28 R08: 000000c00e9ea000 R09: 7fef0ffffffc3800 [ 404.470347][ C0] R10: 0007ffffffffdd5a R11: 0000000000000246 R12: 0000000000000007 [ 404.478741][ C0] R13: 0000000000001018 R14: 000080c00e400000 R15: 0000000000000010 [ 404.486720][ C0] ---[ end trace 215dd0f65ef48208 ]--- [ 404.492387][ C0] ------------[ cut here ]------------ [ 404.497827][ C0] WARNING: CPU: 0 PID: 8348 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 404.508728][ C0] Modules linked in: [ 404.512637][ C0] CPU: 0 PID: 8348 Comm: syz-fuzzer Tainted: G W 5.12.0-rc5-syzkaller #0 [ 404.522424][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.532472][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 404.538789][ C0] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 404.558407][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 404.564469][ C0] RAX: ffffffff82eb5059 RBX: 000000000000001d RCX: ffff88810b8e2000 [ 404.572509][ C0] RDX: 0000000000010001 RSI: 000000000000001d RDI: 0000000000000001 [ 404.580472][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 404.588424][ C0] R10: 0001ffffffffffff R11: ffff88810b8e2000 R12: ffff88813bc1da58 [ 404.596388][ C0] R13: ffff88813bc1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 404.604531][ C0] FS: 000000c00002e890(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 404.613459][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.620056][ C0] CR2: 00007f636fe99380 CR3: 0000000105ef4000 CR4: 00000000001506f0 [ 404.628213][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.636195][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.644336][ C0] Call Trace: [ 404.647618][ C0] [ 404.650469][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 404.656256][ C0] __run_hrtimer+0x163/0x460 [ 404.660834][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 404.666714][ C0] hrtimer_interrupt+0x380/0xaf0 [ 404.671651][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 404.677527][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 404.683253][ C0] [ 404.686165][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 404.692139][ C0] RIP: 0010:__tsan_unaligned_volatile_read8+0x166/0x190 [ 404.699270][ C0] Code: eb 21 83 78 08 00 7f 1b 80 78 0c 00 75 15 48 c7 c1 ff ff ff ff 65 48 0f c1 0d 96 8c ab 7e 48 ff c9 78 19 48 83 78 20 00 75 01 e9 94 17 00 00 be 08 00 00 00 31 d2 e9 08 12 00 00 be 08 00 00 [ 404.718945][ C0] RSP: 0018:ffffc90000db75e8 EFLAGS: 00000246 [ 404.724996][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88810b8e2000 [ 404.733992][ C0] RDX: ffff88810b8e2000 RSI: 0000000000000000 RDI: ffffea0000abed88 [ 404.741961][ C0] RBP: 0000000000000000 R08: ffffffff8166d5e1 R09: 0001ea0000abed9f [ 404.749948][ C0] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffea0000abed80 [ 404.758112][ C0] R13: ffffea0000abed88 R14: 000000c00e9b6000 R15: ffff88810af96af0 [ 404.766114][ C0] ? do_page_add_anon_rmap+0x31/0x320 [ 404.771577][ C0] do_page_add_anon_rmap+0x3e/0x320 [ 404.776781][ C0] page_add_anon_rmap+0x29/0x40 [ 404.781647][ C0] remove_migration_pte+0x531/0x7b0 [ 404.786838][ C0] ? remove_migration_ptes+0x90/0x90 [ 404.793950][ C0] rmap_walk_anon+0x26b/0x5a0 [ 404.798625][ C0] rmap_walk_locked+0x86/0xa0 [ 404.803285][ C0] remove_migration_ptes+0x56/0x90 [ 404.808381][ C0] ? remove_migration_ptes+0x90/0x90 [ 404.813671][ C0] __split_huge_page+0xba7/0xec0 [ 404.818607][ C0] split_huge_page_to_list+0x852/0x9c0 [ 404.824311][ C0] madvise_free_huge_pmd+0x405/0x6d0 [ 404.829579][ C0] madvise_free_pte_range+0xdd/0xe70 [ 404.834847][ C0] ? madvise_cold_or_pageout_pte_range+0x1270/0x1270 [ 404.841522][ C0] __walk_page_range+0xa61/0x13e0 [ 404.846549][ C0] ? release_pages+0xb30/0xb60 [ 404.851297][ C0] walk_page_range+0x111/0x2e0 [ 404.856066][ C0] madvise_dontneed_free+0x409/0x4b0 [ 404.861334][ C0] ? vmacache_find+0x157/0x320 [ 404.866077][ C0] do_madvise+0x4b6/0xe20 [ 404.870431][ C0] ? _copy_from_user+0x94/0xd0 [ 404.875174][ C0] ? restore_altstack+0x1af/0x200 [ 404.880183][ C0] ? fpregs_assert_state_consistent+0x7d/0x90 [ 404.886357][ C0] __x64_sys_madvise+0x5d/0x70 [ 404.891108][ C0] do_syscall_64+0x39/0x80 [ 404.895521][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 404.901399][ C0] RIP: 0033:0x46e137 [ 404.905278][ C0] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 404.925018][ C0] RSP: 002b:000000c000039de8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 404.933434][ C0] RAX: ffffffffffffffda RBX: 000000c00ea00000 RCX: 000000000046e137 [ 404.941391][ C0] RDX: 0000000000000008 RSI: 0000000000002000 RDI: 000000c00e9e8000 [ 404.949342][ C0] RBP: 000000c000039e28 R08: 000000c00e9ea000 R09: 7fef0ffffffc3800 [ 404.957406][ C0] R10: 0007ffffffffdd5a R11: 0000000000000246 R12: 0000000000000007 [ 404.965381][ C0] R13: 0000000000001018 R14: 000080c00e400000 R15: 0000000000000010 [ 404.973346][ C0] ---[ end trace 215dd0f65ef48209 ]--- [ 405.900040][ T299] device hsr_slave_0 left promiscuous mode [ 405.906498][ T299] device hsr_slave_1 left promiscuous mode [ 405.912901][ T299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.920444][ T299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.928043][ T299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.935473][ T299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.943221][ T299] device bridge_slave_1 left promiscuous mode [ 405.949435][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.957144][ T299] device bridge_slave_0 left promiscuous mode [ 405.963291][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.972084][ T299] device veth1_macvtap left promiscuous mode [ 405.978301][ T299] device veth0_macvtap left promiscuous mode [ 405.984298][ T299] device veth1_vlan left promiscuous mode [ 405.990076][ T299] device veth0_vlan left promiscuous mode [ 406.702259][ T299] team0 (unregistering): Port device team_slave_1 removed [ 406.711917][ T299] team0 (unregistering): Port device team_slave_0 removed [ 406.721114][ T299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.731854][ T299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.757945][ T299] bond0 (unregistering): Released all slaves [ 407.429958][T28034] IPVS: ftp: loaded support on port[0] = 21 [ 407.480307][T28034] chnl_net:caif_netlink_parms(): no params data found [ 407.509404][T28034] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.516548][T28034] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.525649][T28034] device bridge_slave_0 entered promiscuous mode [ 407.533664][T28034] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.540963][T28034] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.548558][T28034] device bridge_slave_1 entered promiscuous mode [ 407.562937][T28034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.573749][T28034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.589882][T28034] team0: Port device team_slave_0 added [ 407.596740][T28034] team0: Port device team_slave_1 added [ 407.609848][T28034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.616979][T28034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.643006][T28034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.654710][T28034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.661979][T28034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.688117][T28034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.708769][T28034] device hsr_slave_0 entered promiscuous mode [ 407.715271][T28034] device hsr_slave_1 entered promiscuous mode [ 407.760192][T28034] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.767253][T28034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.774465][T28034] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.781504][T28034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.811268][T28034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.823269][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.832088][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.839892][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.852530][T28034] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.861210][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.870846][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.879586][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.886638][ T9216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.907637][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.916186][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.925052][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.932101][ T9216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.940002][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.948788][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.957482][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.965815][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.974726][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.983269][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.991618][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.999956][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.008126][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.016267][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.024684][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.035161][T28034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.049358][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.056778][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.070009][T28034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.108898][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.117747][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.130848][T28034] device veth0_vlan entered promiscuous mode [ 408.137929][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.145953][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.155858][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.163873][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.174309][T28034] device veth1_vlan entered promiscuous mode [ 408.190581][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.198980][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.206951][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.215189][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.225117][T28034] device veth0_macvtap entered promiscuous mode [ 408.234554][T28034] device veth1_macvtap entered promiscuous mode [ 408.247602][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.258625][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.268906][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.279489][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.289366][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.299822][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.309648][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.320223][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.330063][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.340726][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.351579][T28034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.360030][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.368299][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.376361][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.385624][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.401160][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.411736][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.421578][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.432054][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.442179][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.452625][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.462468][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.472978][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.483368][T28034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.493987][T28034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.504549][T28034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.514405][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.523021][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.545517][ T9216] ================================================================== [ 408.553623][ T9216] BUG: KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll [ 408.561952][ T9216] [ 408.564288][ T9216] write to 0xffff88810a756088 of 8 bytes by interrupt on cpu 1: [ 408.571942][ T9216] wg_packet_rx_poll+0x406/0x11b0 [ 408.576978][ T9216] __napi_poll+0x65/0x3e0 [ 408.581311][ T9216] net_rx_action+0x29f/0x680 [ 408.585903][ T9216] __do_softirq+0x13c/0x2c3 [ 408.590427][ T9216] do_softirq+0x73/0xa0 [ 408.594592][ T9216] __local_bh_enable_ip+0x5a/0x60 [ 408.599619][ T9216] _raw_spin_unlock_bh+0x33/0x40 [ 408.604562][ T9216] wg_packet_decrypt_worker+0x732/0x770 [ 408.610525][ T9216] process_one_work+0x3e1/0x950 [ 408.615377][ T9216] worker_thread+0x616/0xa70 [ 408.619973][ T9216] kthread+0x20b/0x230 [ 408.623166][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.624061][ T9216] ret_from_fork+0x1f/0x30 [ 408.634159][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.636264][ T9216] [ 408.636271][ T9216] read to 0xffff88810a756088 of 8 bytes by task 9216 on cpu 0: [ 408.644120][T25678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.645848][ T9216] wg_packet_decrypt_worker+0x219/0x770 [ 408.666358][T25678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.666680][ T9216] process_one_work+0x3e1/0x950 [ 408.678872][ T9216] worker_thread+0x616/0xa70 [ 408.682318][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 408.683466][ T9216] kthread+0x20b/0x230 [ 408.694708][ T9216] ret_from_fork+0x1f/0x30 [ 408.699132][ T9216] [ 408.699946][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.701457][ T9216] Reported by Kernel Concurrency Sanitizer on: [ 408.701466][ T9216] CPU: 0 PID: 9216 Comm: kworker/0:5 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 408.724731][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.734790][ T9216] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 408.741300][ T9216] ================================================================== 19:40:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x5}) 19:40:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9a, 0x3, 0x8, 0x26, 0x10001, 0x3, 0x3e, 0x4a0, 0x2fd, 0x40, 0x264, 0x2, 0xff, 0x38, 0x2, 0x7, 0x4, 0x8}, [{0x70000007, 0x7f, 0xc0aa, 0x5, 0x1, 0x5, 0x9, 0x8}, {0x6, 0x9, 0x1, 0x4, 0x8000, 0x36b8, 0x7, 0x5}], "06e40bc3dbf7d004ca1b9b491c08790dbd143e5c2c87dac8a8d214e8906d2c46a338705a6d413281e3c84b1a773f9b578598f349135071ac228d9d2fb75b6adeb98de33e8e7e01ea4fa6cc7a60e2497a451d28d8615890fb32752f5f541c89f683732f46055f8e1fe15aac624d13cf7f7e1360d206dc813cd6376c4dfb9bcb1b4723aafef121138ca7a2e64b2804d59857a7ac5f2e4e9328d4118385470c891cb2a2255587713169b1824f262aba20cea10097abdc3bcbf533253db26a6094a1dafe642f1e539bb6288a4f8be4", [[], [], []]}, 0x47d) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) fallocate(r1, 0x44, 0x2, 0x5) 19:40:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x6}) 19:40:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:40:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3c5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 408.892475][T28282] loop1: detected capacity change from 0 to 8192 [ 408.936938][T28282] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 408.944447][T28282] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 408.962947][T28282] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.971263][T28282] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 408.980104][T28285] ip6tnl0: mtu greater than device maximum 19:40:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3c6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x5}) [ 408.995195][T28294] ip6tnl0: mtu greater than device maximum 19:40:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x7}) 19:40:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0xee00) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x7, &(0x7f0000001600)=[{&(0x7f0000000200)="2a993e64fc1f7b4bd5f039116d0adc9709b5b4cbaf0ad976c5433db7f24927e46b3acdbdd6581786336700468d188914186806b7de68904476ee2e0faa6280b6430073cbdec2bb0a68427bb0eae09067c5fff3cf8e2cef0cb2f8f820419d18a9435014c912db9cd13072fddc80f2e7f4db040895bb5058ea4e655b74ba7365b8919972de97ffcdca7b9da152a04d47b0c6d21c6306ee13581c9a3eafe53ba227f20d5ebd70b6a48d0ddd6a20963403fba55401fb4192d4e1eff20b2b9228fdbeef1216541e7bbf9edfb7399d16b0169b7021a23fac15551f008dc98432a2fcb4f93259a9", 0xe4, 0x2ba}, {&(0x7f0000000300)="73916cafa29dbacf50111caa30711269072ad8773d1cca4ee545df84594585731756b3a12ca874437509506dd6e270b831d590c9ca408c4ffb2d21f72c831c15e11bd1c73ce805933ed01688def0cd037e04bad946ea3437ebf586997b20a71b98c6b84a597f49027986716c1d2b12c056aabcbd239dec9934b77227d9dd356b1f8e4e14efc1e3e066edcbbb19e5f9ffa5081a61341d951800bd634eece1e6ba09f102f3df1fca80b093c6b718913ca4cd48ba1c30b3789b35e5bac9f50b4f195cb4d64bed3c71a0f434d958ca03e0ae4919ce2d6254d18e07561e525f48", 0xde, 0x874c}, {&(0x7f0000000400)="f98b1986b0e63094aed1f4a81b2d512c566ddac420febd43d7a4314aca88da4118320bf50b2cab361a3ecbddf031e3a46195a1f13cfb2e1ba9502efeae4e33ff679506af1465531517ed5e7d677369779a4602d737771192303abfe81ddc4277867cacdb9e744bc13e4abb1ee29ffeb457633b75691be33cceb6abd3b9ff1f86db0739c4dfda8c4631041c4679fb95d76ac082d92808aaca0b5e886c2e76635e", 0xa0, 0x5}, {&(0x7f0000000180)="d65a5c0cea47d96a14cded1249316e0e180d0fd13f9caeda8fee", 0x1a, 0x8}, {&(0x7f00000004c0)="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", 0xfe, 0x21e9a8d1}, {&(0x7f00000005c0)="886692a06af963b654be4d1ba4555b595f2ca2b4b9", 0x15, 0xffffffff}, {&(0x7f0000000600)="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", 0x1000, 0x3fb}], 0x190040, &(0x7f00000017c0)=ANY=[@ANYBLOB='extent_cache,user_xattr,lazytime,data_flush,whint_mode=off,norecovery,quota,nodiscard,measure,smackfshat=net/icmp\x00,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=user_u,fscontext=root,dont_measure,uid>', @ANYRESDEC=r3, @ANYBLOB="40c31ec331efef7190d500"]) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:40:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x201, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7579}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x21) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000280)) 19:40:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x5}) 19:40:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 409.120781][T28302] loop1: detected capacity change from 0 to 8192 [ 409.131488][T28302] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 409.138400][T28302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 409.151882][T28302] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.159872][T28302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x8}) [ 409.238908][T28302] loop1: detected capacity change from 0 to 8192 [ 409.265540][T28312] kvm: pic: level sensitive irq not supported [ 409.265878][T28312] kvm: pic: single mode not supported [ 409.266497][T28302] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 409.272044][T28312] kvm: pic: level sensitive irq not supported [ 409.284330][T28312] kvm: pic: single mode not supported [ 409.341409][T28302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 409.367322][T28302] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.375077][T28302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3c7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) [ 409.406904][T28324] À: renamed from ip6tnl0 19:40:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0xf2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:40:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x9}) 19:40:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="f30f2c3cba420066b84300000066ef0f0010643e3e0f080fc75b0065660f388112f4660f35660f380027670f7807", 0x2e}], 0x1, 0x71, &(0x7f00000002c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 409.582036][T28343] loop1: detected capacity change from 0 to 8192 [ 409.600671][T28343] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 409.607554][T28343] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 409.615989][T28343] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.626093][T28343] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x408042, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x7, 0x7, 0x1, 0x41, 0x0, 0x6, 0x44140, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000100), 0x3}, 0x8400, 0x101, 0x9, 0x8, 0x9, 0x5, 0x7ff}, 0xffffffffffffffff, 0x2, r0, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)={0x1, 0x0, [0x0]}) 19:40:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xa}) [ 409.676996][T28343] loop1: detected capacity change from 0 to 8192 [ 409.684110][T28343] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 409.707056][T28343] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 409.715469][T28343] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.732570][T28343] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3c8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xb}) [ 410.018127][T28378] loop1: detected capacity change from 0 to 8192 [ 410.038721][T28378] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 410.066740][T28378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 410.092685][T28378] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 410.116829][T28378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 410.176987][T28378] loop1: detected capacity change from 0 to 8192 [ 410.184057][T28378] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 410.195987][T28378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 410.205636][T28378] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 410.214216][T28378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 410.319917][ T8] device hsr_slave_0 left promiscuous mode [ 410.347378][ T8] device hsr_slave_1 left promiscuous mode [ 410.357401][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.364885][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.425297][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.437083][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.455745][ T8] device bridge_slave_1 left promiscuous mode [ 410.468425][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.486317][ T8] device bridge_slave_0 left promiscuous mode [ 410.506105][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.525271][ T8] device veth1_macvtap left promiscuous mode [ 410.546705][ T8] device veth0_macvtap left promiscuous mode [ 410.567016][ T8] device veth1_vlan left promiscuous mode [ 410.572773][ T8] device veth0_vlan left promiscuous mode [ 411.380209][ T8] team0 (unregistering): Port device team_slave_1 removed [ 411.389509][ T8] team0 (unregistering): Port device team_slave_0 removed [ 411.400278][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.411786][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.437155][ T8] bond0 (unregistering): Released all slaves [ 412.863641][T28402] IPVS: ftp: loaded support on port[0] = 21 [ 412.921251][T28402] chnl_net:caif_netlink_parms(): no params data found [ 412.950776][T28402] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.959515][T28402] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.967146][T28402] device bridge_slave_0 entered promiscuous mode [ 412.974835][T28402] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.982067][T28402] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.989578][T28402] device bridge_slave_1 entered promiscuous mode [ 413.004625][T28402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.015347][T28402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.032013][T28402] team0: Port device team_slave_0 added [ 413.038985][T28402] team0: Port device team_slave_1 added [ 413.051814][T28402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.058795][T28402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.084803][T28402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.096694][T28402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.104251][T28402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.131533][ C1] ------------[ cut here ]------------ [ 413.131542][ C1] WARNING: CPU: 1 PID: 28402 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 413.131591][ C1] Modules linked in: [ 413.131601][ C1] CPU: 1 PID: 28402 Comm: syz-executor.0 Tainted: G W 5.12.0-rc5-syzkaller #0 [ 413.131621][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.131631][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 413.131652][ C1] Code: 00 00 00 48 c7 c6 00 24 92 86 31 c0 e8 20 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 e5 5a fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 413.131667][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 413.131680][ C1] RAX: ffffffff82eb5059 RBX: 0000000000000002 RCX: ffff88801fbfb000 [ 413.131691][ C1] RDX: 0000000080010001 RSI: 0000000000000002 RDI: 0000000000000001 [ 413.131702][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb4eae R09: 0001888141e634bf [ 413.131715][ C1] R10: 0001ffffffffffff R11: 0000000000000064 R12: ffff88813bd1da58 [ 413.131728][ C1] R13: ffff88813bd1da40 R14: ffff888141e62628 R15: 0000000000fe4c00 [ 413.131752][ C1] FS: 00000000019d4400(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 413.131765][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.131776][ C1] CR2: 000055c33a295398 CR3: 000000000c4dd000 CR4: 00000000001506e0 [ 413.131790][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.131803][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.131815][ C1] Call Trace: [ 413.131822][ C1] [ 413.131829][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 413.131852][ C1] __run_hrtimer+0x163/0x460 [ 413.131873][ C1] hrtimer_interrupt+0x380/0xaf0 [ 413.131897][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 413.131925][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 413.131949][ C1] [ 413.131969][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 413.131986][ C1] RIP: 0010:console_unlock+0x8c9/0xb20 [ 413.132007][ C1] Code: fd 53 0e 00 48 81 e3 00 02 00 00 75 14 e8 3f 4f 0e 00 eb 13 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 2b 4f 0e 00 fb 44 89 f0 <0a> 44 24 0f a8 01 74 1f 41 0f b6 de e8 16 4f 0e 00 85 db 74 26 e9 [ 413.132024][ C1] RSP: 0018:ffffc90002e3b190 EFLAGS: 00000293 [ 413.132047][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88801fbfb000 [ 413.132060][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 413.132072][ C1] RBP: ffffc90002e3b290 R08: ffffffff8137e6a3 R09: 0001ffff8766677f [ 413.132084][ C1] R10: 0001ffffffffffff R11: 0000000000000000 R12: ffffffff8793aa98 [ 413.132097][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.132111][ C1] ? console_unlock+0x8a3/0xb20 [ 413.132140][ C1] ? down_trylock+0x3a/0x50 [ 413.132161][ C1] ? __printk_safe_exit+0x5/0x10 [ 413.132182][ C1] vprintk_emit+0x131/0x3e0 [ 413.132212][ C1] vprintk_default+0x22/0x30 [ 413.132232][ C1] vprintk_func+0x11b/0x120 [ 413.132251][ C1] printk+0x62/0x82 [ 413.132271][ C1] batadv_hardif_enable_interface+0x747/0x7c0 [ 413.132312][ C1] batadv_softif_slave_add+0x74/0xf0 [ 413.132332][ C1] do_setlink+0x87d/0x2280 [ 413.132352][ C1] ? __nla_validate_parse+0x10ed/0x17f0 [ 413.132391][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 413.132412][ C1] ? validate_linkmsg+0x261/0x2d0 [ 413.132432][ C1] rtnl_newlink+0xe7e/0x1310 [ 413.132465][ C1] ? try_to_wake_up+0x298/0x440 [ 413.132484][ C1] ? wake_up_q+0x46/0x80 [ 413.132516][ C1] ? __mutex_unlock_slowpath+0x106/0x130 [ 413.132538][ C1] ? aa_get_newest_label+0x74/0x250 [ 413.132565][ C1] ? apparmor_capable+0xfe/0x160 [ 413.132587][ C1] ? bpf_lsm_capable+0x5/0x10 [ 413.132608][ C1] ? security_capable+0x91/0xa0 [ 413.132631][ C1] ? ns_capable+0x86/0xb0 [ 413.132648][ C1] ? rtnl_setlink+0x280/0x280 [ 413.132667][ C1] rtnetlink_rcv_msg+0x728/0x7c0 [ 413.132686][ C1] ? put_dec_trunc8+0x10e/0x130 [ 413.132723][ C1] ? put_dec+0xcd/0xe0 [ 413.132752][ C1] ? number+0xa03/0xb50 [ 413.132785][ C1] ? format_decode+0x1e3/0x8a0 [ 413.132805][ C1] ? widen_string+0x3a/0x280 [ 413.132831][ C1] ? format_decode+0x1e3/0x8a0 [ 413.132848][ C1] ? string+0x1f9/0x210 [ 413.132864][ C1] ? kcsan_setup_watchpoint+0x26e/0x470 [ 413.132882][ C1] ? truncate_inode_pages_range+0x51c/0xd60 [ 413.132899][ C1] ? tomoyo_profile+0x17/0x30 [ 413.132930][ C1] ? tomoyo_domain_quota_is_ok+0x29d/0x2f0 [ 413.132947][ C1] ? rhashtable_jhash2+0x13a/0x1a0 [ 413.132969][ C1] ? jhash+0x2b0/0x2b0 [ 413.132987][ C1] netlink_rcv_skb+0x13e/0x240 [ 413.133007][ C1] ? rtnetlink_bind+0x60/0x60 [ 413.133027][ C1] rtnetlink_rcv+0x18/0x20 [ 413.133054][ C1] netlink_unicast+0x5fc/0x6c0 [ 413.133072][ C1] netlink_sendmsg+0x6f8/0x7c0 [ 413.133093][ C1] __sys_sendto+0x2a8/0x370 [ 413.133121][ C1] ? __fput+0x446/0x4f0 [ 413.133139][ C1] ? mem_cgroup_handle_over_high+0x34/0x4d0 [ 413.133159][ C1] ? ____fput+0x11/0x20 [ 413.133194][ C1] __x64_sys_sendto+0x74/0x90 [ 413.133217][ C1] do_syscall_64+0x39/0x80 [ 413.133235][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 413.133276][ C1] RIP: 0033:0x4193ec [ 413.133291][ C1] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 413.133307][ C1] RSP: 002b:00007ffe4bce5350 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 413.133326][ C1] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 413.133339][ C1] RDX: 0000000000000028 RSI: 00000000014a4370 RDI: 0000000000000003 [ 413.133351][ C1] RBP: 0000000000000000 R08: 00007ffe4bce53a4 R09: 000000000000000c [ 413.133363][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 413.133374][ C1] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 413.133389][ C1] ---[ end trace 215dd0f65ef4820a ]--- [ 413.714399][T28402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.729921][T28402] device hsr_slave_0 entered promiscuous mode [ 413.736485][T28402] device hsr_slave_1 entered promiscuous mode [ 413.781740][T28402] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.788836][T28402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.796222][T28402] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.803282][T28402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.832605][T28402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.844460][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 413.852736][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.860929][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.869792][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 413.881206][T28402] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.891135][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 413.900386][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.907527][ T9216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.918258][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 413.926816][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 413.935484][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.942536][ T9216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.952473][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 413.963286][ T9216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 413.974227][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 413.984722][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 413.993572][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 414.008098][T28402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.018610][T28402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.030079][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.038712][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.047421][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 414.055635][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 414.064595][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 414.073007][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 414.082189][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 414.096285][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.104189][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.115286][T28402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.157109][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.165657][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.174635][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.182976][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.192033][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.199909][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.209951][T28402] device veth0_vlan entered promiscuous mode [ 414.220123][T28402] device veth1_vlan entered promiscuous mode [ 414.235768][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 414.243953][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 414.253940][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.262868][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.274335][T28402] device veth0_macvtap entered promiscuous mode [ 414.283230][T28402] device veth1_macvtap entered promiscuous mode [ 414.296428][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 414.308127][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.319155][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 414.329998][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.339871][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 414.350486][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.360391][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 414.370838][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.380934][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 414.391458][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.402333][T28402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.410234][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.418296][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.425928][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.435471][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.445820][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 414.456434][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.466673][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 414.477379][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.487288][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 414.497746][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.507914][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 414.518591][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.528526][T28402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 414.539164][T28402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.550103][T28402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.557916][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.566528][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.605672][T25678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.624141][T25678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.645445][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.653598][T25678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.661942][T25678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.671111][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:40:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005001}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 19:40:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x7, 0x5}, {0x3, 0xe}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) 19:40:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x4, 0x0, 0x0, r2}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:40:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xc}) 19:40:06 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3c9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xd}) [ 414.773883][T28641] loop1: detected capacity change from 0 to 8192 [ 414.790314][T28641] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 414.797348][T28641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:40:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x11, r0, 0x2000) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0xfffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:40:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x4010, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0xffffffffffffffff, 0x100000000004}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x0, 'ip6gretap0\x00'}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000008) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000003c0)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8180, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x103802, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="3e2220f40f01c90f323e64360f01d166b8080000000f23c00f21f86635020009000f23f8f30f090f78fc0f001c6782aa0800000047", 0x35}], 0x1, 0x64, &(0x7f00000002c0), 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x8000}, 0x0, [0x6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0) [ 414.837467][T28641] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.845364][T28641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xe}) [ 414.922808][T28641] loop1: detected capacity change from 0 to 8192 [ 414.932531][T28641] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 414.939378][T28641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 414.940559][ T9636] Bluetooth: hci0: command 0x0409 tx timeout [ 414.948172][T28641] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:40:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 414.964318][T28641] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchown(r3, 0xee01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:06 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3ca, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 415.058158][T28677] IPVS: ftp: loaded support on port[0] = 21 19:40:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x10}) [ 415.140789][T28695] loop1: detected capacity change from 0 to 8192 [ 415.180802][T28677] IPVS: ftp: loaded support on port[0] = 21 19:40:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 415.195224][T28695] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:40:07 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x403, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x5, {0x6, 0x3c, 0x3, 0x54, 0x0, 0x89c, 0x0, @in6=@private0, @in=@multicast2}}]}, 0xd8}}, 0x0) 19:40:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 415.230307][T28694] kvm: pic: level sensitive irq not supported [ 415.236973][T28695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.243404][T28694] kvm: pic: single mode not supported [ 415.251425][T28694] kvm: pic: level sensitive irq not supported [ 415.253183][T28695] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.275251][T28695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x11}) 19:40:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 415.285881][T28694] kvm: pic: single mode not supported [ 415.350167][T28695] loop1: detected capacity change from 0 to 8192 19:40:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x201, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7579}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000200)={0x2, 0x4, 0x800, 0x3, r4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 415.419977][T28695] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 415.431429][T28695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.444556][T28695] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.453116][T28695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3cb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x12}) 19:40:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8932, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x80000, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000100)=0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r2, 0x7}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x2) 19:40:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x25}) 19:40:07 executing program 0: set_mempolicy(0x3, &(0x7f0000000080)=0xe4e, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_mount_image$befs(&(0x7f00000002c0)='befs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xc20, 0x0, 0x0, 0x7], 0x4, 0x64bcd11837646974, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x88, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) [ 415.670171][T28806] loop1: detected capacity change from 0 to 8192 [ 415.685658][T28806] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 415.693422][T28806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.704796][T28806] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.713830][T28806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/wireless\x00') ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x4c8, 0xc, 0x4, 0x101, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x8}, [@nested={0xf8, 0x2a, 0x0, 0x1, [@generic="314d51a839987a4d94250c2f1a83e88c8d3fb87c090111a980daaac38c68755f7244368ee8b0d02dce8d1ac469cb478e05c6364cc243a5934d9ae4c77700cb1c0fcbb5e2505f78f251d0257427004667f782c60fd0afc308217a41c590aa9a85b578b710f2ae0bacb29fab9ced5b5a2f815dd08dfe9593228d2e695e722008ea4df931bd7ae87e8bbf254d48bbcd2b80ce943526bc4ea6b80b00819f5564af3c367463f27ed3ca530c87960bc77aea37a8e29515cad63fa9b3d1301611c27e8c23940fae016ad590a574e81e2a0d4da737afb8bc81dc806c723dcc77601788038e93af89a96a7961eee53dc1adaecd1e7b9a2c3e"]}, @generic="1a491fa8102d029650d8b5ffa97c821746d9a60109ac6ea08b9758490feb4fe98e02d9d17fde79eeca800a3e534eeeb2ce562db2603c5287c5aa64d3265cf95fce72f5eb3d7939d4c708503106ebfa3d2811902b7e8b2741362c79da2a01b2c63c067ea7e47bba5acf72175497579b661cebd6960e4a8d535220020db07573307b8c4cbf84ab234c0c52346920e5af1352d102167d8604c4444284bf63aa058882f867b16276a81328373c23e12994c9388b", @nested={0xc9, 0xc, 0x0, 0x1, [@generic="8860b432127c9e6af85fa435716e2e6f0ace31b1c1017ba07c7fff47131d8e0b0d3c76e36c2a64f4c8ea78f0a2d25899d92aa09d0508be3fcb74f445061ef321311aab54b9d6ba8f88a531603a4aa8f487ee1c4ab7ec3e202a557783e71f9d87a18e55b2928c3c640cb2224430e61298d420205b1c1c4b3c73eef1a194ab56454b4cabd4dbae5f71868442bb649c3d433e8efb45fa9d779aaae073183eb70ace73075e20b0d978ea70c5f327be26bff55689673472bb72d6d87328fd18", @typed={0x8, 0x67, 0x0, 0x0, @pid=r5}]}, @typed={0xe, 0x40, 0x0, 0x0, @str='}(\x94(&\xf8/]\\\x00'}, @typed={0xfd, 0x44, 0x0, 0x0, @binary="96750b55a2f7aae3bbe3b3704c2c688df2c7c29fd88ce22ad61cffbb33391a65fe8a06386ad7c7db67f6b100608ab1169131fba254f7ee3ed9ddd37a6bb0bd9f3f47518db5ffe9ac05e3fc9b6ccf5a5fe4da140c7abe06496da96d4bfbed22942b08285b07bbb1afdcfde94245f8e5e8328eb76eb389f8eca924e9b0ccd5e5de6752907ae817f3f919c94f76da9d790d138b1416b78662e69e284790ed5050a98aef9a55fde37474110a8f51641043bad5de76a8b5c1cf280845ad6085f2e117c777eccaff9c575bb4884907536e450ef72f34ddd101e9d0960d875e3962e9019cc5f7aba8a56bf5505a5ace89e6206ecbfe657bb6317c51dd"}, @generic="4e7f57c769c0c0655f44479a1954e66230a90be93cd12e446a686606ff7d9f61d2aed876d6f2a98ff8a75d20c30075bed9c8a8908fbb633e783d", @typed={0xdf, 0xc, 0x0, 0x0, @binary="df5a754f62ec22aab53b86f8f53eac4b3d5f9dde185f9b05642eff945648427b858d37fb2faae9eb786d21db3e25b76715f8279248284e370de35dd8d4610f078cb49989ae2ca8ef984ad9246e71849c1a329f4ed2a009066342aa6e4ed6bc0b3e757f31551486b017a5c72d710f37dc9f72ca27a497cbb571c265ff05c589408ae2f0832562f99cf9e1d3b95c22420f4ae802308f36a879daf288c95bcc7221108fe41590aafff9e3425d19da7c017a1badc9160033d3b9f9ac13968a2524710dbbe4854fe5468ba155634c97880d936a14b155c5d55efb8eb735"}, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, [], 0x2}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) 19:40:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 415.752202][T28806] loop1: detected capacity change from 0 to 8192 [ 415.761251][T28806] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 415.773424][T28806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.783326][T28806] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:40:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "96c6ceead5587329da09afd45df093cf0585352f9647a19884216306823b9951c5bf1dbd9d9e01f529e0e55d329894884447c0e72811dc3b3f356903e2de04210b5c644a0a21d9eaf15e629d146c29fbdebe2805690799a049c04cd57299358cc07401982899704376c5d2f2dc4db5d545c4ca99a012ee3103c64bf393edd715c1636731b28dbe1d4548cee4fbd80fee4311c0d482f3695e7aff296a78af7738e0e32700ee58f1dcb9"}, 0xad) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000206010200000000000000000000000105000400016d53835968ecb40000000500040001000000fd3f2920aa8bbeebdc01fc8c3f8bfe5180f1f7d63f2ad200000000e10455c3ad82700f2ebb63f833e73131586edd7956fdb2729dd2d93579e7d434551981505b63d90ad0b3194df3a03c78ce1f91b56224750c18ec6c197addd609c1d28e956a4c1cd96aac1e1c300afecba3b715b5502f397423fef7a2915f324e0df16b619079a3d1d39204880841863864c476fb8cd7e55a96d1b5c19f07acdefaf58acefe6eae69f8fb1b04aa96505a42c409413f883862bed52659d5f85566d77b789400"/248], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x73, "b657958e9b46d870a57a79b485f729eed095bbd5b07ec06e101e6db04f202ad43bf73fbcc583364a6ffc913b0ca87ed2cb8e9bfa6dbe8142b6858059bbd59ceb1bee6b0c9fee3e954d6039b978029444cd13dd7b58cc8c9e8a5934b2a87de147abe2a0bf48726284e220e26450bd4c4c6b1838"}, &(0x7f0000000600)=0x7b) sendmsg$NFT_BATCH(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000006440)=ANY=[@ANYBLOB="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"], 0x2468}}, 0x0) 19:40:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x5c}) [ 415.814207][T28806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3cc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) fstatfs(r0, &(0x7f0000001800)=""/217) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="8d20fbab75fe544a54da27642e9e68cf59efff71901d7411abccc06c40d54e5d4663591c9277eeed15d14163fefa", 0x2e}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="883870a6c4251eb74d8334a6", 0xc}, {&(0x7f0000000340)="58178f29331c70adf44e1a71920718e505cb9619eed2ce7ead5e6bd11d0eeab82c6e1424cf775a078bda95c418b18a", 0x2f}, {&(0x7f0000001700)="5ee78d619532d0c2b78a8667e6512b46f8026e22d2f939c382e7d330e5ae6701c91ef5faf1450f914ef9d408b5010047631e37feee69b55617f80c83afa038704c1ddcd151eb0b2377a2be97ee25ff64992b227b4f1ae288084bfda2b5c596adb7500d575b2e0a1ecdb487898a2d27ae6a45511c4c2f0e5f88d751e8190251072e0d546122b2bcc74772c77910dd1fc3fd0f4bed4cee3533d3b840a15dbaa3ea5033d07359381f46b5037f89b3fce4278619d68ae9fbcb086bea7489eb6aa6b5e6922997c7a5dc4cbc2588a44618640c98ed4c", 0xd3}, {&(0x7f00000003c0)="fd4bb533c88004c3b9884e19af7a3b52fa2ee00a29f55e058c59c239ae5a4c86a97967ffa56d579b2f8b20debb0e86076d1b4f8d4ee0f73ea2e3154b5e507d27537e175109b0657d6be797386c7af8cc3a33d5d63c306d7f454dafe3e2cdffcc8a2fcf74107efebd8e5b669d83165ad76938202131df6f3f41e0cc62005f33dc804d3dbce4b087c7fd892c2e48", 0x8d}, {&(0x7f0000000480)="a4bc26a546b3d9011077c8e18d123a9e99c5223b6efdb7056bc801cafd13d07ee272134f7ff8d569342a989a9f31686933f670bda322f115cb2d39bf1b347b842e9e00129fe68d2cfa96f87253407a4c76f7d886488a68f46b4bfa88a34391151f81fbe56f353c772d412f61c7bb8360dba5630ee59c61b64d81986fb1236470db42e0232d818efe787390b4364461f349321feb832631b4afd736e527c4791537703e978701e755dfb338e8008b09ad9856f333e4d2cb79555f86582cc340c9cbf13a5b07f7b63d213d87e91f05831f6039fdb1dded5d851eacb5c6069e54cc87c55280dd51c604b662", 0xea}, {&(0x7f0000000580)="2aff420c594b6eecf9e52af4701d7c6a4fe7a73303b1317e5a57db922d3407cccee0927538f35a6bdf73088f317274568b6685f274ec86690c66875e5ac7725a1a88e129ae327f8f544733af9784b52d171f567f0537d3bc9e584c1bd7e2454753a5224953bdb85f231b34ccf9c5508ae269ad68e6a5cdd562fcfafc8331ff543a5c7fe8eeffa943da075a8617fa5cd0dbdf52d735", 0x95}, {&(0x7f0000000640)="7a607967d795b9af0f0bf1d27175b1e5e40c14655fc4bbfa2e46d0151b2c59af050e04e595869de7f1e26e0f28b64e29d5fbbb5d95b4393063a941164eac0b2cf0567a198dcfd2cb6c513e14802503db0bbb70c5705637635b577e4d404427a73cf3eadfe0e663215324fe46efc5f8ed35edf590d740b9b91b326c5e5be79a4fe337870e0abb7bcce8773b264a54bae2e4d8c3c32a66a181c59a1ac64a0e2f8bd85eb9553e1555415658f1b4c2e8fc0567caf4e2c5f84b88b4f2f11a4ad0645fff9488137cfa851460f49fa4bdc21b84446656d548052b41e23e49de6ff9036c39242cab95da5362c48002728b2213cb8d6867c2fd4e2e1324b83ef1fb3e7fa119433b841eb2998e3945134848f35010da902ca7a096b1ee2b943990d3831497731106aa5ed117fc757abcc7eda175e417fa7950df1d29e0780602f00b0d2584654d28fc8df77cf4b4c384e6795c92a88da6a3fbb2fc80f62fdd2c80f5a352856a0a33e356258d7bc54ea1b06d2cc84ed8f0a2c215c60e279a685b6f85874cfad48acca9c8c04045c2c8cac2528fcc6d1a5d8ce79562e73f0db1422d60a55bb29821fa004a1386a705e4fb54c4fceb1ce95d7c650a051bf39623e0b60742c64ecb6c8056e0708d7687f7fe4b66b9bc5d442a88f830f864d5fc0827a355ee4076dc1ff983094fd2fa2175b482d2c964e2df41b35d1d0931dfc94973775f128b203114c6c28a6fa8499c05e2ed247aced3e84cf3d309d4dfb1ad90c519801cafef6926ac0489e6de04944dde8d4d8be237b3a7dd0070ae5bfa6523e3a36cbb77d8e012f6fd81df71633df8eef0efb451ff8cbfd440f6eac757d4069bba9367450d09070d7a916bab900121b09df5a68937917e6f92a81220bbc19563bddcc6dcce5cddd53748b2adff0a09778425d4b022f590e8615e02f0a4ee03df196f5dbbbcc3947619b6682d54904bc6c3526381676d09e66a578177e1ff83323c99eba3270fd43d5d4b6d266f179569cf7bff30fc3bc0fc58979a29a9a8f3565a330008a095cc3893b3acc54c4c372e71f70fd0244ea0e323e9aad097953c3cfe9001553c409897f273734a8737bafe35605c17f3ea25f68cbad5f85d3b8d1f2dbd89dacd6871606fcd8ee940a54d3482db9ca1f456c0fbf40ab527c143dd2c4d8651f71c5cdf5372dbc3111f7b68956fc58086044048d5f44bb0f3951c7ceae92e6f566a43c844f3f29078019de84fe4aee4781f9d36aeae11425ad7253bb283200a3efd489829cd64bf0e95367d5c515f51aaf4c8d62db555729326050df982914b58156f1d8d7659daf7a46873ea587601064963678f2916375e5c31bccbbc67a4e9eb71a1ec3d90e4fc3c2fa0339f6861397b18b29652235995c1d77305ef56c8f90586086ac518d7e0ec7273b6a9eaff6e23fd21b3cef59becd3fe8f658f1653c2694548a12d376f52d57c909000fa7c1e3e9abdfea2f78e67e0ab1771057826abe25f6b7cd7fc484b7f553ad885e67ae71ef8f16a91683163e549ccf18a701b127e144f430544dcaf4936f760fe17ea34d75d103c717c0ca3da69efdff58151a0b718070a5f63f4f98f9bff690e64fd433fb7369b4dc7d24126916201d0015ed3e2464a3a3895f047ee2403c8ff0f0342f2a526989a7cbfba74b81921c90cd6298b06bfd3af95c7d6d01ef3fee937e34ae5d5435d84602032cbab042e7ebfbb0e0f5071e12195c2c8607ee15ac162f1dc7b6ae134944fb0a0bed2935d1066452f9559eeeadf04d059a0ca4ef72bc307eaef956f6ac8c7097ccff0518c2507a5bc31b7743b6a3622ef7c1ec453b7f397bb2f722cb3f9afaf515159aecc29ec9da42d12d71a49101efd7e7614e7ed05a822e6a35bc3137226f1f373ab940b86ef1a7ceb31841d3d2e7eb01d783de89a4140611ef7732db01573458572f6f0ff6c277570f502afe4c694da9467243f5199448bdd0f93c5345b52351cbb2c27983ecaabb017a668dbb013e674c6e5dc6ca25229a2423e44eebdb18acc50504e51061f9ed1f899735d8ddf36dc4e88e64993da6ad3dcb31f5f885df24c08dd2d588d4e8ead19364f14d921cfb4fbe8dd6238daac45ff1ff363ef99ee9b30657acba1ee241393af98545e46d63c2ee4bd621139f86b86a3405197f75eaec4d189761c1c590c23e6c3a3beaee442daa903260dee1f98479d51a2947f2139ea81ba5cdc822dd05f6a43deaceb80f18c4e358b2519bce0a92a3ea3a6dfd5f27b043eb5ffaea9ef0d20dbeb5213636729557e0bf412189e9fff79b92a017c3f8207533c5cab86a9c024aa9d02ebefd51673f06d1eaac2326e98fa3e4ba73ff2066d9c66fc7ca3f65ae6900d80dba76ff54013a17f5dc29c1aa80e9a3f965cb2655056f87e206679e64783219d06e7822c4e673985de7daf0e69158000674925bc430a37e94bf271de3b17145917f8f2b617412a9ccc05c44867fd2256ffb332b5cbea3b351a20f67f38b5e3abddbdf16330747d0d93944aac2e2c580fd2fef05df7f1938c9c40b73f36390727681552acae096cc101f29d69a746e4d58a5ae9715869be351c3f907a6833136af5fd0393abe4ab3857ed0f05f4baf37e6abd134f9db47abbbb72abcb882f0efc47aa24e9a6c8459fee44195ad6e8e5682103b4f34e5c24c726ca8cd909359ca9a72041923afaebf88c1eb35db9d359ee53449ea23f5f8e114bbd9a4cb8a8183cca1d54daf3734589e320ffb96e59b7ff744e530401c703bcfb49f42038e63d19efb3d4f04eeb9738df3f5dec13f89894e38b5a781c4ed461fb4e73b2bd4edb15dbfcb149fc95a47b75280105a37073668e34b31eddaf80f5477d1d6ab143ae353d74791792378c8e5fbc6235c426729435aa0e42b2817b9dac658ce4208bb93845af4d794441846df66f1c6a5f95c1641ab41d2fd90797bb4faf0cd3b9bb2006a53e55d14ebba199e2613eb06ecc22ac59912e680e77859a5d6a81bf9d48183955a6ecf80cffc5b4b326f94e0bd9c6055bf56ff5731ce562f9fb67ff1d79a7934d64de5ef6756912e6bf122a2bacca1bcbe10ac24d96d66e255d7d1da0977f456f45d0ecd7cb85a7ce2c66c48a5b4ff711bc985918a873f333d32e20955aabcb62db78a8830cbb16d59ae8f39af2113f962e36db448b4743bf89ff8297b1fa8384b9a2ce69896c7e232dbc0bacfc998355ce021fe66392211f6b83e896b1f14e0dfe29f4327f2fddb8e397c6794c824491f0d9ca6d8ab6adf5d9a2aab8e5c4797cb8d65daaec07591a5c73f6f9a08c21826b6c91847c2bcf60684d588273efd95d0c6a357104a363c114f774d1db1220b9d8f321bb8af1bbb9d8e176655277006a4bf55edc8c85192ea717afebf658eb384604e4e9a08b61f46a662f8813012f1bada21dffe0dee75597650e46024e31ed36d537c7b5aa855176397b5d3f17bf19ce74b6a6f9cf2d5b356271d89416ea0383956da05286401a79f7eef3995896a135a63f215e4862374c2d04087ac2cdce17cfc604a7d3e1e06173f228369bb85fd7c170d62f83d36172e7b856f09f4ec7235be22df79bb83cbe7a74b4c43964a0aaa8f5922cec75411e25f1424eb0659d61022abb353c2a27ac04d0acb66572f766e027b505c395ec53c5b6a2517aa704d731f3ac7f4d02a78d0e3144d5b6681e33b5682728f8a0f8616df1c9f5da7e0d112b48e4f1f9eae1de7ea9b780114f9433ef8658481950771c0ea59cd7e6adaa788ea7e05829317ebb8c373aa52f9e9b86bf48266d0d82d111d5c5c549771ce339dd7c25969b2d96616b1eca6608f46f420824f2684e8ce79027a84780ec70504837832e2c932c98dcf400baf1ce6c91f07ba26d6606396713c803c8ba9fb38c102b195c07c1425d9f4c4a7eaf0d0f31ad75c63c6ebabaa0f28c9f9ef35266996a9a0f07ac9da931de908750d6350f94980f33adb29f69e5a28205d003bc4a203904c19e061f2048703ebb4bee19124015098637774b11c40f9f9ec2bdf6fba12e4224b2fd48821febd55c679dd4fe60a7a59a7d18fe71306499ba2dde580c3621529cccb94a170b7b4a04a2ba43e87c37055ec713cfb1ce79a4f8f53ac4a33f6dfe5d100ff50e291ac7c78a6050636681d63993e7b1448ef1b185d8c7c6b109071843c5513c6dea1e6a5839b423d5294d6e4e80c8fa5c418dd53cfadc87c1cc6364c4afe3230865c8068cfabf8156bb45a6140fb346c2d4b08be0f712dc07b295d46442f8c7fba4cd435016c9e9bb602f2e2af93aee16d9c2ad934ccde1fb4507e53c7be6f30c31da6deadeb5b26c350e214108d6daf8de9350681c66c039922a06b08533f2bae2dd91769f289a5e80c779261fe668576d767546350dbbe82a0fdc0e2e0a592c733801c8d55e7655d3629f185436d1aaf506a32b4d07ec9b22bb89d39218d13a2faad94d7f6642f9b6de16e5c8b92f8b35316c8c525220e1497f62c193043ef65dd34951af5bacbc092095b363d4a4e261efd069180408553b977482b8e1ea59d29c22f65a8f30e5e4bf703f6cbdf134cf580f344d143231e65595534079b3db3ac0378dbc0c2c1bf5bceabd0cc8349b24746da364e16d2ccf49ed866c39e5c47d60e8c68626b1778e72defad14f7b990d7a9308998ee6cdf43eab53c19568847744e178f955c1503e4e2cd8a5c973db9c5882b56aca2603b46d914f6d9b0373d4d3940b59ebd351290dcc73168c6d5aceaae059313fdb276face1d52de028c6f7b9c0f3f6431ded959fd6197ce8c5fa1fffd7a0bb27c50fc06d72a7c5f1df0289868ef4018316803431ef36863281b7dcb2b0a9513bb16333ba9fb5ece8d977fc73ecb87a6b6560f752059939df150306fc710c0fa5574eea4c4548b1ac57c4cd364c3707ed0368fce132f19bb6521abe6b5650d4b39b6606375b3cf8b6d4fdaf1a5cb2ee91fcae69ecb35d670f2b8254dfb82dc781af6c89f319facc02d75eb5eb3bf704b544d3ada682816e1e7d73b62fe5c08d4cd7bb7fa6b6a34c0ebd65b778d2cdbdbd630f1a628c2c1cbbf1a9124d80dc5581168eb4a212dcbbc9d2d9a3a3e47c75ec21e1495a82a102b35dd7245fb48b1e36f285e7fe710e6cde88122711faf6231afa3c569dd7da0f1bf70289a54c0dc0d73e63f47bdc510070f5f6d48de9b5556d94fb1de1af7a7ea0eabe96d9efab5ac2bca8aa3ae2756a79ec63946d284fd2ec99322aace0bf9c554046ed71ba22c536538f70d46033a4920c883c07c5476a85fa2bb18a64997e82564dca7162993ff388252485b5c4096df081c597b8d6b716ad51451d1d23f527420a2e1ca6ae040e72452ecbae4662a50688559e306889743db98d1ea77dcf71e4384e855554fb0c0a806a21283a6259774f0fd925404fbe31bc7aefe522613d428dbdc7ac1fe1f0ee4a64b0b6cca6cf972c6a49da3de8829c0c4a9f5f1fa4f064f64d1147485de218f02b36e1efdae878db380c263ab1cfae80f8c6f9435ee777968cbb1a948509e7ee7a02f1986f789f6e466b1d466282287db12153811b734b924e574354807b714868af301c158114bf922ae449962d14e6b677adf801d7d3ba0e74c75a8eae1309de0b820da0c51b3700ae65b165e323e92f46eddc1c698c2b8813a8806e3095bb9923312a8b5d85dfd35965641d5574bc5713bc3bf68b24cd3475410a11697ae00ce4d2090ccf9f3e7e1bd4211a6a6f69983365e72677a90c85c7aa400de0c32705d26658292635b26f9abd5d41fe7507619d12c3f1b47436bb6629faf4ea2438f4d52cddd9353bf2a719", 0x1000}], 0xa) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="d75b669cd82f53c04e813a83f775fd096d1d7af919faed7fb5b955a1ce833131a9eed8ed166551598d67a7ee4a11e46509df4fe7f3e56a9a828f8de196"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x2004c0d1) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:40:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x300}) [ 415.992137][T28835] kvm: pic: level sensitive irq not supported [ 415.992335][T28835] kvm: pic: single mode not supported [ 415.998731][T28835] kvm: pic: level sensitive irq not supported [ 416.002151][T28841] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 19:40:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8934, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 416.021371][T28835] kvm: pic: single mode not supported [ 416.054051][T28848] loop1: detected capacity change from 0 to 8192 19:40:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x101) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r3, 0xffffffffffffffff, 0x0) pwrite64(r3, &(0x7f0000001200)="cd5de244b861f655d892b8253b636a5b228408469735308166225efa07ba09b06f81557e5ded7de16e075a8236b44cd969c2733214d0c1b4852eab9d2e6929ec9b11cf67664432657bfc497263a8ab63a5557ff5c4bbe136c78e93ac57e953684d30a53db2b21a7111e93114e10249b9351d3dcf9d08757c9ca68183f7e23d298a8e1590673255f970bd239cdcad2b9af66e3bef9c5d85c64270ab8f3f91008bccccbcc1", 0xa4, 0x53) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x14) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000200)={{r1}, "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"}) 19:40:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x500}) [ 416.137591][T28848] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 416.176065][T28848] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:40:07 executing program 0: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=:/bus,workdir=.']) 19:40:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x18102, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000440)="0f30660f3acfae00808b919826d10a0f009d941a00000f01c83e260f18cf66baf80cb8b6834b82ef66bafc0c66ed650f01ca66baf80cb820024a8eef66bafc0cedb9800000c00f3235008000000f30", 0x4f}], 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0xd000, &(0x7f0000000280), 0x4, r1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x93, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0f\xc5XA\x81\xb8>\x1f\x14\xed\x05g882A\xb6l\x83\x93\xe2\xea\xb3\xa8XY\xdbOl\xb8i\xe8}wH\xc5\x13l_T\x92\xe5\xcf\x9d\x13Y^i\x0ff8\xad}\xf5\x0f\x04\x19U\x9b\x84\xf7\xa5\xa5\x9b\xc5\xbbH\f\t\x93\x8c\x1dZ\xcce\xcc\xc4\xd3\xcf\xe8~K\xea\xff\x061{`\xad\x9f\xf5\t\xff_\xcf<\x98\v\xdc@|\x01f,C\xd6\xbe\xc0\xdd\x88\xaa\xb0X\xa7\xff\xafU\x818\xf4Jx\xeb5\x84\xf6=\x9fhk\x9a\xbf\xe9+C'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 416.256034][T28848] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:40:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x600}) 19:40:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x3, 0x3, 0x80000001, 0x7fff, 0x5, 0x4, 0xffffffffffffffc1, 0x8000, 0x6, 0xb16c, 0x5, 0x2, 0x5, 0x8dae, 0x10000, 0x8], 0xd000, 0x3a000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8937, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 416.307772][T28848] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 416.395571][T28874] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 416.411416][T28848] loop1: detected capacity change from 0 to 8192 [ 416.424150][T28848] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 416.433416][T28848] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 19:40:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x700}) [ 416.442700][T28848] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.453443][T28848] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 416.467388][T28874] overlayfs: empty lowerdir 19:40:08 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3cd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000a40)=ANY=[@ANYBLOB="000000f6ff000000000000005245b2fbbc51b1eb0000000000"]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000a00)={0x0, @aes256, 0x0, @desc4}) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/65, 0x41}, {&(0x7f0000000840)=""/255, 0xff}], 0x7}, 0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000003c0)={0x1}) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x201, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7579}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000340)={0x0, r5}) mmap(&(0x7f0000556000/0xb000)=nil, 0xb000, 0x1000007, 0x40010, r3, 0x45d60000) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f0000000200)=""/218, 0xda}], 0x2, 0xd9f, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000a80)='ns/uts\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:40:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="97938bc3274e94c72b93b08defde11426bd5e57c7ebda265a0b32a7ae054bab0e19d517f2eb4ef424af0dd46806658d9b4f91076c1cefb63b91f0bc8362af140fd19d3499b8668b762c2cc329685de39762f9a1f9e4fd071df0866ce20f538d87cac649a8533419b526d9d898aea3179fc6d1ee47229173b0d6b4ce85ea396110dc6a12bd922db72c1a8d9c2c2606a1a885026e8a97b5f0b1a994ced", 0x9c, 0x7}], 0x10000, &(0x7f00000001c0)={[{@discard='discard'}, {@noinit_itable='noinit_itable'}, {@nomblk_io_submit='nomblk_io_submit'}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}], [{@smackfsdef={'smackfsdef', 0x3d, '\'$.-!){\x96#:'}}]}) r1 = openat(r0, &(0x7f0000000040)='/proc/self/exe\x00', 0xd75f055be1c1e676, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) lseek(r2, 0x0, 0x2) 19:40:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffec7, &(0x7f0000000200)='\xd1-ev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x1, 0x10000, 0x1000, &(0x7f0000ff1000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x900}) [ 416.622764][T28907] loop1: detected capacity change from 0 to 8192 [ 416.645836][T28907] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:40:08 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3ce, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x507000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 416.665494][T28907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 416.675345][T28907] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.684082][T28907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x400, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="66b892008ec00f01cf66baf80cb8f67b148aef66bafc0cec660f131f660f3a22e61b64f30f87e0320000c4c139e800660fdea30a0000003e263e0f01c20f06", 0x3f}], 0x1, 0x14, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 19:40:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xa00}) 19:40:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0x40000) mmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000000, 0x50, r3, 0xbba6c000) 19:40:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) ioctl$FIONCLEX(r0, 0x5450) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r2, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0xfffffffd) [ 416.884614][T28942] loop1: detected capacity change from 0 to 8192 [ 416.921108][T28942] F2FS-fs (loop1): Invalid log blocks per segment (0) 19:40:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xb00}) [ 416.929076][T28942] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 416.938076][T28942] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 416.945973][T28942] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xc00}) 19:40:08 executing program 0: syz_mount_image$tmpfs(&(0x7f00000034c0)='tmpfs\x00', &(0x7f0000003500)='./file0\x00', 0x0, 0x0, 0x0, 0x8a44, &(0x7f0000000040)=ANY=[@ANYBLOB="00001e570000370a00"]) [ 417.017022][ T19] Bluetooth: hci0: command 0x041b tx timeout [ 417.018767][T28946] kvm: pic: level sensitive irq not supported [ 417.029152][T28942] loop1: detected capacity change from 0 to 8192 [ 417.036228][T28946] kvm: pic: single mode not supported [ 417.042524][T28946] kvm: pic: level sensitive irq not supported 19:40:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000140)=""/68, 0x44}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/90, 0x5a}], 0x7, 0x8000, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) close_range(r1, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-control\x00', 0x40, 0x0) [ 417.049971][T28946] kvm: pic: single mode not supported [ 417.111581][T28942] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 417.172093][T28942] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 417.222358][T28942] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.244769][T28942] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3cf, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f00000000c0)) 19:40:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x2000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x1ff, 0x3, 0x8, 0xffffffffffffabc9, 0x10001, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0x8, 0x15fb, 0x4, 0xfffffffffffffbff, 0xfffffffffffffc5d, 0x5, 0x7], 0x1, 0x1000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:09 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) unshare(0x40000000) openat$null(0xffffffffffffff9c, 0x0, 0x709800, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffff8000, 0x20040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000140)="8019d2608869f6d2f4e0a35bac49090f25e458ffe5accfe1c92d1828c37ec1ac308da994a712f0e42f80d481ff2cf617df1dcc8e4b15a268673d04a3b08f9e464cd519f6140222602cf1939e8ee346a82b93c9778e744302f0f2f77e46b50c2702d9a6804a22cc5fd491ef66cbced346fcec7649f593ec8f2b37a218", 0x7c, r0}, 0x68) inotify_init() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000540)) 19:40:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xd00}) 19:40:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0xd9f, 0xffff0001) pipe(&(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000001280)=""/98, 0x62}], 0x1, 0x2, 0xffffffff) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000001200)='trusted.overlay.nlink\x00', &(0x7f0000001240)={'L-', 0x100000000}, 0x16, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) 19:40:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0xe00}) [ 417.435675][T28997] IPVS: ftp: loaded support on port[0] = 21 [ 417.474399][T29003] loop1: detected capacity change from 0 to 8192 [ 417.496317][T29000] kvm: pic: single mode not supported [ 417.496628][T29000] kvm: pic: single mode not supported [ 417.502161][T29000] kvm: pic: level sensitive irq not supported [ 417.516595][T29003] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 417.530727][T29003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 417.592351][T29003] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:40:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaacb7, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8a501, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)='\xb4\xb1\xde\xad\r\x96\',\xc7;A\xab\xe6X=\x00j\x04e\xa0\xce[[W\x84\xfbY@\xef\x80\x1b}\x98M\x81o\xec(ys\xdc\xa6\xd9\xad\xe1w\xe9\xb3\x81\x9f\xf4\xe8\x9c\xc9_\xdc\xd3\xed\xb4\xb6D6\xef\xff>\xbcM\x92\xd1\xccV\xfc*\xb8\x10\x8a=\x9a6\xe0\xfd\xdb.b\xe0\ro\x1dl}\x02\xe8Y1|\xa2_{wr\x94\x19\xfd\xbe\xf2\xcb\xb4\x80))\x02@X\xfc\x8a\xc3>\xf4*\xa6\xa1\xf5q\xfc\xc03\"\xda\xfeg'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000001c0)={0xffff, 0x6a4, 0xf3}) 19:40:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8948, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:40:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r1, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000034c0)=[{&(0x7f00000012c0)=""/145}, {&(0x7f0000001380)=""/102}, {&(0x7f0000001400)=""/133}, {&(0x7f0000003540)=""/4110}, {&(0x7f00000024c0)=""/4096}], 0x43, 0x9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x121a81, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') fchown(r4, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000140)={0x1, 0xe4545ad09920a410, 0x1000, 0x1000, &(0x7f00000014c0)="d26866397ffe60fe38e32c8ad84a1b8cedfe601863d2dc778815119f176405bda92e0737da0b7a9dcb41f9290511068a89ee308024e1cdd67a2482d75442ee237875d316459627f3ecb3525e21402bd0bfcd86e22b0c08ee1a926eef3591eb2892527383afaec4bab262f035c1b3e94a6340dd20464f1d75f794f892abae727901375d6cd85a4b0143e79a30138535d78b35aefc89a12f88162fbc95c47ba1db4a3b861c37508854336d6272f7bd753baed9b60d99f69192a95c2d194afcd20e1dd56c3cfabe44a21d99735b172ac0a6e63cdc4efb44539611486f3b0f7fd4785a99eaa771e43e52377fac3139754d07bf4f9a677f971611bca2b19dc321c2185668b494571e68f474a6fd0646519bf301700e28a5b7c5403a659b07c1e9275ad27cfaef87e1b428059ebe6503ac059431eb16ec462b27c677f180de3c10e8853b602fb7e5bafa9da1a8309ec73db54d2d184c0a79e46607b6f51c07b73254f9c39bbb8a864ce2832614fc0f24724d020be3058fa203fea931ccdd69661003f1c0a252f43e17dc969c3fdb3683d4efdc09d3c072825d26b52ef23d2926121c760c7c9e169d1e9498734547a082cd3fc01884df157df39fed0ca6743ee6163a9f6b7f23a000ffea1a682afc309ea245359a4bd43adbd7cb4ba8685f5b99c6ea14e81cf72658c88820a45820c251ada374282b6310dfa756b550c1452dca345112a7aee18a2bd6a278ac66ef8b817192047d0e395d17753fabec7f60ead5f2b3a2156b8ded5b54ec6489ef27db01f2e0b0fb36c8ba62627c020567aae72c37da8db73b903bc8b0a0115891e3e6cc44dda7ce5d03264f821571016d786e9ae6e987b69351cb08dae39feae380f552d3bf41f724b31e5c62c46b9837b413742a30f630121adf9a1ca1caeb2af5e27a6c9b8cdff02276d50bee57bb1f16307972f76852dce90609a951136981515e6a52e2db43935eca22a50daf2ae1347d326ef6d2128c088ec442ae514ffcdc35f2d0609ddf489f6af01e75e2ae61bda7df101c466cf7b8ad9527d90e33439973e1cf9e754a971880c887509e4f61ede53ef288eeafaf479a6067fb8923b3333ceb3f7000eb5dbb7a80bc694bd4da7f3a87537fb0dae94a331b5b175c4560da7715969899dff1ba8831aeebfdadf92a375ad66a3b49e6de399fa1b4b482b199e45d7a3f9add51a210d2dec15db30a2ea7078f5c331082f15a44b7778a18fe74bfc035d9eaf8c5bcf683ce1a1d0586eb42df792e91bdf2133a00118bca09579cb7bf7abe61e246ff610bc2e218bb6c0932f363f1d6ed0fa80730cfa98fffecbedd6d2ec025809ee663eb6fb0080886880891be4ba677ff1de517052933c327f159f07f7101b5171caa92c2ebdf1e2c664245f5c12140313ddd82ccb512218a97417bcfed25192d6a3b0bbcdc0801706dc085fd45abf1e9adb59e5c1fc4e4970170b37db3a1728ec5c58e0054073097f1195225dedb800ffebc7a6bd6d176d10a1dddcd881afcaf24260be7a7c0c4a5bb743effab81b6d6181351bacf8f56cdbb7ce4fe4a9366adf6bde0f5560475c8df6318af8ce748bedbcde675576ec3a395af199a93da4249df09cf8363630a78e94ab274d8ef5685b2184a7033a40d2d62ec35c02929c885ac769d7c139132b43fc8ef9a08769d7382c712abd43baa9f52d576d00bc034f035f78a4641abfc785b58c457b677b9d16aef3dce0f9beb897bdadc51ff43cb2a1e7a48db70c26a783a65832075a214d0f7b7c6338dd70a130ee1aee082a11262a812e97024703138ba10b373374002033373e45ccf458952cfd71268d9893f50b3d05bab0b4aa5181434dfa94fc52d7a1d89083c51a3040ccce3eab3c3be242079eedbef4d85333378e92ef914f511b45cb94de4f5da035e189d43dd75f518ce56e19ba2581ef043b3fa6f6decf942ae485725dc7e79b7a804cba388b0784504395c8a50c12b4843dd1d03984a6ec48d7dfb64e7dfa8c3e4f0fee04a0eb7e1110ee4c7356ee09d3864bdc29ffb730fa7bf4b1751319643cb989d422f34e5c83f8355a6d3098745d8465964d3041b42254a7aae01d05aa971371b8d9d42af3c76c8edbd58ec1422d6cc5b530ae2bd35de651e8bd4a57a1a062ffadf428258e814320279a94c494313460244a0b76fb0ba6ad9e293ff235def16283f7499b8dee8661ee39565d8cb115b61955e0f50885d36cad685decf72967204b350aa05dd4924af4cf31b6fd06a4e12d9acd403ef61fefbbb90026e10ca74f4b91c1f2d227bef67752aedf74a701e9e9a898967dec684f53dbb663db5f2b36677220e5f880774d65779e4ae11a9c257f08264308843c0b3c7602237fd5261baeb8bb2461de9b388e20ca7a44d7f592ffe8bccc48df9245f9e96c5c4ad59b448bb0c3262200665a0416d56a65e232fb14dcf167ca3a30c6acafd41cc2bdb885ff4f8ae4665212e1afd1165dad293bbe98f658d9934ee8e135df0fcf94184c3011b7d33ab43e255029b9f65d72e5acf1f95e7b81fcb6bdc44ae4de4f6e896e8bdd25060eb5fe5b2f41f243efc9bb847da80f5eb538a49d7a4edf231506147ec37b295a1da7ba7d87fa646474947adfcf52529f2bfd5d400ebe2d9cb2583df4bfdf35b4de6669874e76cdf0133a6cadb2868f15c213155efd4c44570764a1a4731077412c8b89297dfa049050b56ca26920fc7e83cd9a5917c12a91de9bbdd8dac0ab340895001319ca314e6556b753c90b4ff80c4fb7aa2016dd8e6aa02661c9c0c7381e593e3dac001f7b5b507605324b6a8067510695d8a7cc0e70e4f63eed23afe485c80dc0096ba8b298a1008f98bf83e6773d3e21c9301ddba29bfc3929c349e1c6eaa43d35549cbd09a31a54285a117f04352022e6c53cc35a8a3c7f8124fc9cd805f4ec08217b7d529ce2ff04d90d76ba311aa5f61f6f07ee86ed3d4d478c2a427c9533695fcd90754272ea340429552d7b9e0c564534bc1624f77a7dc37a781dbd308d779952e230f39c9e1909eaacafda1d071567b6c025e23bcf31a9c02a93b0a9874d26a291d3b88a67cdd8f16c59b26ee5c6d657f1978a2c8cedae3baccc585fe54de702e18ed5309f06758dfb730ea4efdec2ca583f720df6af6acd42da240ebe2182b5ad0311b2105b72696db60ab17d9187b67346aa8bbc7cb47c5078e7d8440b504616ef9b812bade559e2ed09f4190c7f7dcc326dd71c3e416ab85855c876bff9fa88108a918f290280162a968cfa272ec0e907ef3e6eefe92d37a1149b7a26fdaaa7394ccd27845e2664670246cb88b7f59840005568fe4463f1ed0c43fc45d725cca507c29bd643a055bd91657669486f9d348d8ea2fbfbd754096ba0ee36003b923f0bc1f973cc4efc74c46af4c85c779250ba52187b4e0ff962ae353c5917aba689e166a97731088553484e23c61c59b7a7f8374de2e7230f14042fe6e03b3acc861259fbdf303d57aa29986ea37b73b549ccc9f07e3c3a6c51dc85e366acc2dd92ac2fb08d3e709f55ff82fbfa65d9bd11a4b62520c2c395f93f242f77a6281738a35cf4ed7922f01e1330e01535e214a29d746bfc59295287fd2d1dd33dbde312e9c1a0178e3977081ffff88d8d78653846fc6b5ff03a9e6f58d438fa469a1c497df470aa5a698498b7ba7421f2fc2b8c2f7baa5b3432ac2c64d24037216a8e49409fee28823adb2f2b3e1d3c53a2d868a140ec6f1025673061ceaadaf60579404ee1b6fd0d6aeb89298e87a372d3962c6b7b432e6069170269b0631643d9ca3f33b956f178b4ca2a7d442b4bc81f8a2d671eb3f0f36b5b01e87ba77393bccefa1ad26b420c3c508aa210862c14e740f18d9cc7cf49b85b04dab71007f66db4a8d66ae30a58e8da366ee39b5b2d6ce8cfde7b515a5d59044fff76d022ad07bd759c0c740e123f1d585824faf5cf97cf9165203a931915ff487e088ec7181770f9e33c7ad17a44ac512ced0be0ad95ed5510d0610ae4c113ab06ce218b433a7b76ea6747ddc95df09920d665c0b0c9e0c6c53a612516aae27c610bb5c46809ebb70d5b299fa5272fa6108ddebfb4fd9cec106cde2f834a9330e791ee0736ebc352fa3069eeef36400dcd6bf5c99bef0d587eadd1902a451c0014a3b5855e1a0ce2e9930fa144c4c0294925391b0bec29da84aca7ab657a91d67e799a027184c491e002f4f7a14928ec775ed4ffd330e15c88bdde57195045bc2b90468667b7264cb38700940e463d2f7fdf7f7c7f98be6f0afed6210a424b886bab3cb2f6c3f6da3687e28262d2ac4c8e134cfc8c64afa5bcd9ef6b31215321883f0526309c2dd1eb610f7ad060c028e0ecabfa4acd514dc3d3aab70be6a688d71043a8a37b389974c16d9f7b7417032e02c88765004c203d1f881aa15f472fbd404e0be8c8028413ca17ea5816c905bd4110ebb67cbc892b694772b907af2cd33e511c7d980086bdb0845c690a42a330d02f7b8f9c141a4f55906a297d95a8e1f6664c63b8287b5cff582c09beddc3ba98c5b87179a63c5e83fe33e3e0f134fb996c6a859a257a7a62c529d64099cd048ba5fdb549ed65e2cc62152d18898abb1239daf54c71304e4fbaebc204e97f4ab343b96a0dd381c806a570fd255896dfd2e5c34649c7f21861f05ed5d47cb8dc96f704c280f16df8ea78d5fdbdd484c83596e0a95b6eca78282bfba781bc05320e6b2a1d818dbb7eb32059332b759adff0e4a267ff7637a8a6edf39fe61d156c727b61059c4b0704d62bbaf88fc4168a0e35759f1275e83cb11daa59bea7af44b8461da3b85977b45e5d2100575f471e3c18290337769fb5a64ac1c76558dc09df1efeb26afd21671ebb691d7ca55971525b72a60b130e71873359b81a06b67f57b71706447efda5ce247ec6ec2b4ecf705d2dc26d20a3878823935b139701b2da591158228635d7489258746971815ee292ecd9889cd7964cbb414b7d1656f6b0ebd5c9f2a4ffee1fdfd520de050e13003891d376e0bd24c7a7ea45cd4ea1cc08fdf1bf70245c9ec00d55c977aaeb2266a968898722d160ede22a2f169a4be3ad357a119ab7f788567f455bed4dd7958894c2d133ce41328f573eaf604ae57a5f6d643b166e71267ec7e845db7e88b0a9257234fc66718ee7688e8d94dc4239c6fab1da3eb822c22c1c4ecbace03fde59de86a9d19a44d8c3c93d81c0704023ca3662f664754a73605d56a86dee3fec5d77b279eaf471f2c4be36ed348fd35c49e9b072f23b401e09a1d4b90f39c406cd63afdf18d882b7bda88c859ff1d89fd05c13aa7ee65c1ccefaec9afa306a3013f6c6b968a933f65b94fb52b71ca2518e5e2288fd92ec3d36a6d4cee116084d5cfd4f8de27e01ff364bd9940e91cf96e8b8ba0b79a34f41130b9bdb36f24a3b3873739be4ea9ecf63f9d3966334af76d8545eb266ed05add2f30f32b8a1556e1d782ab692caf6373332414a355c989ad941fec0b4c59647d7f04453f8072ac85012b3be031886d316ddadbcb2944b2fa7adf803265a5f5c07bd563c62199487c0a7a40d3909304aee17b3d087a2223e4983ec08378d08f7f91d0c69076b4041086c9e627c9c1de15163ed3cc5834ab257ce8d4eb4f1f9581e7fb6b6a15b09d181bf78d2f8da67f12bb3fb9360be8e7c5cdb075838809cd114eea8d3e4d70014a7f96f4b211eabf26780c241f3c63a495f12a921a68a0052b1c4b27808008e04bcf1042d9bfc147370806efed5a7955004740383fcd023c013a512c5bf4d613ff4067b173c2d3ac764b666af6248b52", 0x8e, 0x0, &(0x7f0000001200)="53dd75f4e835269243e7c490f980649f3422718632f5f436f98c37b1565a171ea6dffc23611a299d333b651d223d25fb756e07c972567adc6a1c910377f2607cb4d4e21ec7cd6be0d31bd3ac93ec5208186ca2b63912e5f37aac30c651fd688cf884f37bc6cb3ecd59fbe7c97b4c0fdc29cb949a9c8ab4e33f3e7d9f379b53670d0b0acfd4b92f384d0000000000"}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/53, 0xfffffffa}], 0x1, 0x0, 0x0) [ 417.600572][T29000] kvm: pic: level sensitive irq not supported [ 417.672533][T29003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x0, 0x1100}) [ 417.750186][T29008] IPVS: ftp: loaded support on port[0] = 21 19:40:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xda1, 0x80001) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x0) [ 417.833725][T29003] loop1: detected capacity change from 0 to 8192 [ 417.844082][T29003] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 417.904059][T29003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 417.989661][T29003] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 418.009623][T29003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:40:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x3d0, 0x2, &(0x7f0000000200)=[{&(0x