last executing test programs: 7.241734521s ago: executing program 2 (id=647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001480)=""/265, 0x109, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty=0x1c, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 7.059209056s ago: executing program 2 (id=649): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65) socket$xdp(0x2c, 0x3, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) 5.718735729s ago: executing program 0 (id=655): openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4.759229313s ago: executing program 1 (id=657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001480)=""/265, 0x109, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty=0x1c, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 4.355872503s ago: executing program 3 (id=658): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d40)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x4, 0x64, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x3fb, 0xbfe}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.262804875s ago: executing program 0 (id=659): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f00000001c0)='./file0\x00', 0x7) close(0x3) 4.170739977s ago: executing program 3 (id=660): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socket$kcm(0xa, 0x2, 0x0) 4.094644439s ago: executing program 1 (id=661): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.05439347s ago: executing program 0 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3.762840377s ago: executing program 1 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1', 0x1) 2.958352637s ago: executing program 3 (id=664): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, 0x0) 2.935983178s ago: executing program 0 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 2.934708428s ago: executing program 2 (id=666): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='wusb3801 0x4a', 0xd) 2.874684469s ago: executing program 1 (id=667): openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.826371431s ago: executing program 2 (id=668): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d40)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x4, 0x64, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x3fb, 0xbfe}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.812306481s ago: executing program 3 (id=669): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001480)=""/265, 0x109, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty=0x1c, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 1.286723689s ago: executing program 1 (id=670): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f00000001c0)='./file0\x00', 0x7) close(0x3) 1.192906591s ago: executing program 0 (id=671): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.160620352s ago: executing program 2 (id=672): fsopen(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setreuid(0xee01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xfffc}}}}}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x1c, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[@fragment={0xd7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x68}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.125940373s ago: executing program 3 (id=673): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003140000002cbd7000ffdbdf25060009000801000092b244af"], 0xa0}, 0x1, 0x7}, 0x0) 408.07176ms ago: executing program 1 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setreuid(0xffffffffffffffff, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 65.952248ms ago: executing program 0 (id=675): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65) socket$xdp(0x2c, 0x3, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) 205.57µs ago: executing program 2 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000e10000000000ffff00000000080008000903"], 0x34}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040800) 0s ago: executing program 3 (id=677): mkdirat(0xffffffffffffffff, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r1, 0x100000000) kernel console output (not intermixed with test programs): 75.845047][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.856271][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.891326][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.906962][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.916672][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.920894][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.935500][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.938056][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.952078][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.054285][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.080969][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.094386][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.110739][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.130949][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.144244][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.164310][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.181862][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.194819][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.210730][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.223600][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.236740][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.251213][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.265146][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.349487][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.358228][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.393027][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.402891][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447449][ T5842] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 76.490923][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.507285][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.582337][ T5844] syz.3.8[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.614012][ T5844] loop3: detected capacity change from 0 to 1024 [ 76.704751][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.722146][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.805883][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.853909][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.935031][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.954867][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.078683][ T5781] Bluetooth: hci0: command tx timeout [ 78.080819][ T5778] Bluetooth: hci1: command tx timeout [ 78.089919][ T5091] Bluetooth: hci3: command tx timeout [ 78.095323][ T5091] Bluetooth: hci2: command tx timeout [ 78.355012][ T9] cfg80211: failed to load regulatory.db [ 78.692310][ T5862] loop0: detected capacity change from 0 to 40427 [ 78.704911][ T5862] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 78.713535][ T5862] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 78.729236][ T5862] F2FS-fs (loop0): invalid crc value [ 78.907869][ T5862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.987293][ T5862] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 78.994735][ T5862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.404972][ T5876] loop2: detected capacity change from 0 to 512 [ 79.420607][ T5876] ======================================================= [ 79.420607][ T5876] WARNING: The mand mount option has been deprecated and [ 79.420607][ T5876] and is ignored by this kernel. Remove the mand [ 79.420607][ T5876] option from the mount to silence this warning. [ 79.420607][ T5876] ======================================================= [ 79.623426][ T5880] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 80.171972][ T5781] Bluetooth: hci0: command tx timeout [ 80.177456][ T5781] Bluetooth: hci2: command tx timeout [ 80.183082][ T5091] Bluetooth: hci1: command tx timeout [ 80.188691][ T5091] Bluetooth: hci3: command tx timeout [ 81.657725][ T28] audit: type=1326 audit(1786351531.673:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 81.736991][ T5891] loop2: detected capacity change from 0 to 32768 [ 81.767708][ T28] audit: type=1326 audit(1786351531.673:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 81.831456][ T28] audit: type=1326 audit(1786351531.713:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 81.836511][ T5891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (5891) [ 82.013990][ T28] audit: type=1326 audit(1786351531.713:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 82.478787][ T5891] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.498577][ T28] audit: type=1326 audit(1786351531.713:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 82.598748][ T5891] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.607569][ T5891] BTRFS info (device loop2): setting nodatasum [ 82.618573][ T28] audit: type=1326 audit(1786351531.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 82.648586][ T5891] BTRFS info (device loop2): force zlib compression, level 3 [ 82.656277][ T5891] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.706156][ T5891] BTRFS info (device loop2): use lzo compression, level 0 [ 82.728608][ T28] audit: type=1326 audit(1786351531.713:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 82.766870][ T5891] BTRFS info (device loop2): turning on flush-on-commit [ 82.780868][ T5918] loop1: detected capacity change from 0 to 2048 [ 82.805514][ T28] audit: type=1326 audit(1786351531.713:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 82.809181][ T5891] BTRFS info (device loop2): enabling auto defrag [ 82.896243][ T5891] BTRFS info (device loop2): max_inline at 0 [ 82.908916][ T5924] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.923363][ T28] audit: type=1326 audit(1786351531.713:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.16" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa96f9e0d9 code=0x7ffc0000 [ 82.930219][ T5891] BTRFS info (device loop2): using free space tree [ 83.054924][ T5918] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 83.101898][ T5918] Remounting filesystem read-only [ 83.200369][ T5931] loop3: detected capacity change from 0 to 8 [ 83.249387][ T5918] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 83.287989][ T5918] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 83.351714][ T5891] BTRFS info (device loop2): enabling ssd optimizations [ 83.378110][ T5930] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 83.395070][ T5768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.582028][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.191728][ T5921] loop0: detected capacity change from 0 to 32768 [ 84.236231][ T5765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5765) [ 84.646517][ T5958] loop3: detected capacity change from 0 to 64 [ 84.671727][ T5779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.912178][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 84.942077][ T5779] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 85.114061][ T5779] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.282017][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.486229][ T5779] usb 2-1: Product: syz [ 85.598859][ T5779] usb 2-1: Manufacturer: syz [ 85.604441][ T5779] usb 2-1: SerialNumber: syz [ 85.625962][ T5779] r8152-cfgselector 2-1: config 0 descriptor?? [ 85.732957][ T5966] loop2: detected capacity change from 0 to 512 [ 85.797824][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.876713][ T5966] loop2: detected capacity change from 0 to 2048 [ 85.887890][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.893774][ T5779] r8152-cfgselector 2-1: Unknown version 0x0000 [ 85.914014][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.918187][ T5779] r8152-cfgselector 2-1: bad CDC descriptors [ 85.930619][ T5966] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 85.949552][ T5765] Buffer I/O error on dev loop2, logical block 0, async page read [ 86.165681][ T5779] r8152-cfgselector 2-1: Unknown version 0x0000 [ 86.184117][ T5779] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 86.882085][ T5975] Zero length message leads to an empty skb [ 87.681677][ T56] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 87.955191][ T56] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x74, skipping [ 88.020138][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.050947][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.068564][ T56] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.092497][ T56] usb 3-1: Product: syz [ 88.096726][ T56] usb 3-1: Manufacturer: syz [ 88.123419][ T56] usb 3-1: SerialNumber: syz [ 88.159855][ T56] usb 3-1: config 0 descriptor?? [ 88.189005][ T5966] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 88.275799][ T5987] loop1: detected capacity change from 0 to 32768 [ 88.477643][ T5987] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.480888][ T56] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 88.683104][ T5987] XFS (loop1): Ending clean mount [ 88.705893][ T5987] XFS (loop1): Quotacheck needed: Please wait. [ 89.165006][ T5987] XFS (loop1): Quotacheck: Done. [ 89.296143][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.631854][ T56] usb 3-1: USB disconnect, device number 2 [ 89.816780][ T6012] loop0: detected capacity change from 0 to 512 [ 89.928298][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.024625][ T6012] EXT4-fs (loop0): Test dummy encryption mode enabled [ 90.060665][ T6012] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.0.52: corrupted xattr block 95: invalid header [ 90.124886][ T6012] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 90.140729][ T6012] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.52: bg 0: block 7: invalid block bitmap [ 90.175844][ T6012] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 90.217031][ T6012] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #11: comm syz.0.52: corrupted xattr block 95: invalid header [ 90.273567][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.282429][ T6012] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 90.303775][ T6012] EXT4-fs (loop0): 1 orphan inode deleted [ 90.316021][ T6012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.386636][ T6012] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 90.422380][ T6012] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 90.462665][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 90.484560][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.502713][ T27] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 90.535271][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 90.554881][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.603459][ T27] usb 4-1: Product: syz [ 90.607668][ T27] usb 4-1: Manufacturer: syz [ 90.661809][ T27] usb 4-1: SerialNumber: syz [ 90.707037][ T27] r8152-cfgselector 4-1: config 0 descriptor?? [ 90.747016][ T6028] netlink: 'syz.1.57': attribute type 12 has an invalid length. [ 90.808139][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'. [ 90.956389][ T27] r8152-cfgselector 4-1: Unknown version 0x0020 [ 90.963039][ T27] r8152-cfgselector 4-1: bad CDC descriptors [ 91.823605][ T27] r8152-cfgselector 4-1: Unknown version 0x0000 [ 91.886556][ T27] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 93.709139][ T6051] loop3: detected capacity change from 0 to 128 [ 94.335008][ T5765] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.229663][ T6059] loop2: detected capacity change from 0 to 32768 [ 96.330854][ T6059] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.340193][ T6059] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.370241][ T6059] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 96.384935][ T5914] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.401319][ T5914] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.499329][ T5914] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 98ms [ 96.510189][ T5914] gfs2: fsid=syz:syz.0: jid=0: Done [ 96.516528][ T6059] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 96.865531][ T6059] gfs2: fsid=syz:syz.0: found 1 quota changes [ 96.919627][ T6059] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 96.928038][ T6059] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 96.937226][ T6059] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 96.946245][ T6059] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 96.957256][ T6059] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 96.974385][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 96.989968][ T6059] netlink: 240 bytes leftover after parsing attributes in process `syz.2.67'. [ 98.255527][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 98.391952][ T5776] CPU: 1 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 98.399568][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.409652][ T5776] Call Trace: [ 98.412949][ T5776] [ 98.415892][ T5776] dump_stack_lvl+0x18c/0x250 [ 98.420612][ T5776] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 98.426275][ T5776] ? show_regs_print_info+0x20/0x20 [ 98.431502][ T5776] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 98.437163][ T5776] ? gfs2_assert_warn_i+0x17c/0x2c0 [ 98.442387][ T5776] gfs2_assert_warn_i+0x18b/0x2c0 [ 98.447440][ T5776] gfs2_qd_dispose+0x488/0x580 [ 98.452236][ T5776] gfs2_quota_cleanup+0x40d/0x720 [ 98.457280][ T5776] ? gfs2_make_fs_ro+0x17e/0x320 [ 98.462234][ T5776] ? spin_lock_bucket+0x150/0x150 [ 98.467281][ T5776] ? __might_sleep+0xe0/0xe0 [ 98.471883][ T5776] ? down_write+0x16e/0x200 [ 98.476402][ T5776] ? down_read_killable+0x340/0x340 [ 98.481620][ T5776] ? gfs2_quota_sync+0x595/0x5a0 [ 98.486593][ T5776] gfs2_make_fs_ro+0x2aa/0x320 [ 98.491377][ T5776] ? gfs2_put_super+0x1db/0x930 [ 98.496271][ T5776] ? gfs2_dinode_out+0xb10/0xb10 [ 98.501219][ T5776] ? do_raw_spin_lock+0x11f/0x2b0 [ 98.506266][ T5776] ? __rwlock_init+0x150/0x150 [ 98.511057][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 98.516298][ T5776] gfs2_put_super+0x224/0x930 [ 98.521003][ T5776] ? gfs2_evict_inode+0x13c0/0x13c0 [ 98.526219][ T5776] generic_shutdown_super+0x134/0x2b0 [ 98.531612][ T5776] kill_block_super+0x44/0x90 [ 98.536316][ T5776] deactivate_locked_super+0x97/0x100 [ 98.541707][ T5776] cleanup_mnt+0x3d7/0x460 [ 98.546148][ T5776] task_work_run+0x1d4/0x260 [ 98.550762][ T5776] ? task_work_cancel+0x220/0x220 [ 98.555810][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 98.561292][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 98.566597][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 98.572161][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 98.577643][ T5776] do_syscall_64+0x61/0xb0 [ 98.582076][ T5776] ? clear_bhb_loop+0x40/0x90 [ 98.586766][ T5776] ? clear_bhb_loop+0x40/0x90 [ 98.591462][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.597370][ T5776] RIP: 0033:0x7fdfe0b9f317 [ 98.601811][ T5776] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.621433][ T5776] RSP: 002b:00007fff96831678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.629863][ T5776] RAX: 0000000000000000 RBX: 00007fdfe0c34474 RCX: 00007fdfe0b9f317 [ 98.637844][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff96831730 [ 98.645827][ T5776] RBP: 00007fff96831730 R08: 00007fff96832730 R09: 00000000ffffffff [ 98.653849][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff968327c0 [ 98.661835][ T5776] R13: 00007fdfe0c34474 R14: 0000000000017b09 R15: 00007fff96832800 [ 98.669836][ T5776] [ 101.588088][ T6100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.82'. [ 101.736709][ T6106] loop2: detected capacity change from 0 to 512 [ 101.775038][ T6106] EXT4-fs: Ignoring removed bh option [ 101.816364][ T6106] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 101.829821][ T6106] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 101.844520][ T6106] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.78: Corrupt directory, running e2fsck is recommended [ 101.905074][ T6106] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 102.111922][ T6106] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.78: corrupted in-inode xattr: e_name out of bounds [ 102.162121][ T788] hid-generic 0000:0002:20000.0001: unknown main item tag 0x0 [ 102.309513][ T788] hid-generic 0000:0002:20000.0001: unknown main item tag 0x0 [ 102.367065][ T6106] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.78: couldn't read orphan inode 15 (err -117) [ 102.711843][ T788] hid-generic 0000:0002:20000.0001: hidraw0: HID v500.00 Device [syz1] on syz0 [ 102.737124][ T6106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.449992][ T6119] loop1: detected capacity change from 0 to 40427 [ 103.938684][ T6111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 104.537863][ T6119] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 104.545782][ T6119] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.565028][ T6119] F2FS-fs (loop1): invalid crc value [ 104.601742][ T6119] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.692517][ T6119] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 104.693863][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.699749][ T6119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.845775][ T6121] fido_id[6121]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.322573][ T6151] loop3: detected capacity change from 0 to 32768 [ 108.343810][ T6151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.100 (6151) [ 108.370739][ T6151] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.381037][ T6151] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 108.389786][ T6151] BTRFS info (device loop3): use zlib compression, level 3 [ 108.397024][ T6151] BTRFS info (device loop3): turning on sync discard [ 108.404678][ T6151] BTRFS info (device loop3): using free space tree [ 108.550694][ T6151] BTRFS info (device loop3): enabling ssd optimizations [ 108.624805][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 108.803119][ T6174] virt_wifi0: entered promiscuous mode [ 108.838167][ T6174] virt_wifi0: entered allmulticast mode [ 109.253993][ T6183] IPv4: Oversized IP packet from 127.202.26.0 [ 109.814239][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.811452][ T6218] loop2: detected capacity change from 0 to 40427 [ 114.843430][ T6218] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 114.851386][ T6218] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 114.862598][ T6218] F2FS-fs (loop2): invalid crc value [ 114.912751][ T6218] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.988979][ T6218] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.996085][ T6218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.052655][ T6224] loop3: detected capacity change from 0 to 32768 [ 115.076563][ T6224] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.084853][ T6224] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.211577][ T6224] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 115.233882][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.281343][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 116.352539][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1071ms [ 116.432401][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done [ 116.437741][ T6224] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 116.839318][ T6224] gfs2: fsid=syz:syz.0: found 1 quota changes [ 119.363310][ T6224] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 119.375009][ T6224] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 119.386510][ T6224] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 119.398050][ T6224] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 119.408698][ T6224] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 119.565150][ T5774] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 119.634723][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 119.642340][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.652518][ T5774] Call Trace: [ 119.655813][ T5774] [ 119.658757][ T5774] dump_stack_lvl+0x18c/0x250 [ 119.663482][ T5774] ? show_regs_print_info+0x20/0x20 [ 119.668712][ T5774] ? load_image+0x420/0x420 [ 119.673258][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 119.678488][ T5774] gfs2_assert_warn_i+0x18b/0x2c0 [ 119.683544][ T5774] gfs2_qd_dispose+0x488/0x580 [ 119.688355][ T5774] gfs2_quota_cleanup+0x40d/0x720 [ 119.693416][ T5774] ? gfs2_make_fs_ro+0x17e/0x320 [ 119.698394][ T5774] ? spin_lock_bucket+0x150/0x150 [ 119.703446][ T5774] ? __might_sleep+0xe0/0xe0 [ 119.708056][ T5774] ? down_write+0x16e/0x200 [ 119.712621][ T5774] ? down_read_killable+0x340/0x340 [ 119.717812][ T5774] ? gfs2_quota_sync+0x595/0x5a0 [ 119.722769][ T5774] gfs2_make_fs_ro+0x2aa/0x320 [ 119.727565][ T5774] ? gfs2_put_super+0x1db/0x930 [ 119.732458][ T5774] ? gfs2_dinode_out+0xb10/0xb10 [ 119.737420][ T5774] ? do_raw_spin_lock+0x11f/0x2b0 [ 119.742480][ T5774] ? __rwlock_init+0x150/0x150 [ 119.747274][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 119.752522][ T5774] gfs2_put_super+0x224/0x930 [ 119.757252][ T5774] ? gfs2_evict_inode+0x13c0/0x13c0 [ 119.762498][ T5774] generic_shutdown_super+0x134/0x2b0 [ 119.767916][ T5774] kill_block_super+0x44/0x90 [ 119.772629][ T5774] deactivate_locked_super+0x97/0x100 [ 119.778053][ T5774] cleanup_mnt+0x3d7/0x460 [ 119.782511][ T5774] task_work_run+0x1d4/0x260 [ 119.787142][ T5774] ? task_work_cancel+0x220/0x220 [ 119.792208][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 119.797699][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 119.803010][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 119.808585][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 119.814065][ T5774] do_syscall_64+0x61/0xb0 [ 119.818510][ T5774] ? clear_bhb_loop+0x40/0x90 [ 119.823217][ T5774] ? clear_bhb_loop+0x40/0x90 [ 119.827924][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.833863][ T5774] RIP: 0033:0x7f94ab99f317 [ 119.838302][ T5774] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 119.857952][ T5774] RSP: 002b:00007ffe00e9b668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 119.866399][ T5774] RAX: 0000000000000000 RBX: 00007f94aba34474 RCX: 00007f94ab99f317 [ 119.874393][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe00e9b720 [ 119.882385][ T5774] RBP: 00007ffe00e9b720 R08: 00007ffe00e9c720 R09: 00000000ffffffff [ 119.890394][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe00e9c7b0 [ 119.898389][ T5774] R13: 00007f94aba34474 R14: 000000000001d2a2 R15: 00007ffe00e9c7f0 [ 119.906396][ T5774] [ 120.013789][ T6255] loop1: detected capacity change from 0 to 32768 [ 120.056128][ T6255] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.841279][ T6255] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 121.946231][ T6255] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 122.019697][ T6255] XFS (loop1): Ending clean mount [ 122.294052][ T6274] loop0: detected capacity change from 0 to 32768 [ 122.359679][ T6255] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x1803 dinode [ 122.393768][ T6274] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.407152][ T6255] XFS (loop1): Unmount and run xfs_repair [ 122.416957][ T6255] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 122.428120][ T6255] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 122.437636][ T6255] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.447543][ T6255] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 122.456709][ T6255] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 122.465790][ T6255] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.479974][ T6274] XFS (loop0): Ending clean mount [ 122.491170][ T6274] XFS (loop0): Quotacheck needed: Please wait. [ 122.518941][ T6255] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 122.610791][ T6274] XFS (loop0): Quotacheck: Done. [ 122.814588][ T6255] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 122.823821][ T6255] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 123.198690][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.387885][ T5775] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.891022][ T6303] 0x000000000007-0x000000020000 : "" [ 123.975616][ T6303] ftl_cs: FTL header corrupt! [ 124.698626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 128.911771][ T6318] loop3: detected capacity change from 0 to 32768 [ 128.940303][ T6318] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.053906][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 129.092924][ T6318] XFS (loop3): Ending clean mount [ 129.104978][ T6318] XFS (loop3): Quotacheck needed: Please wait. [ 129.281479][ T6318] XFS (loop3): Quotacheck: Done. [ 130.056605][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.074802][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 133.601287][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.608292][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.757526][ T6370] loop0: detected capacity change from 0 to 512 [ 133.977826][ T6372] loop1: detected capacity change from 0 to 32768 [ 133.991408][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.050781][ T6372] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.086549][ T6379] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 134.154110][ T6372] XFS (loop1): Ending clean mount [ 134.164722][ T6372] XFS (loop1): Quotacheck needed: Please wait. [ 134.233384][ T6372] XFS (loop1): Quotacheck: Done. [ 134.840387][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.987286][ T6370] loop0: detected capacity change from 0 to 32768 [ 135.369332][ T6370] ialloc: diAlloc returned -28! [ 135.787477][ T6402] loop3: detected capacity change from 0 to 2048 [ 136.309545][ T6406] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.665848][ T6402] syz.3.168: attempt to access beyond end of device [ 136.665848][ T6402] loop3: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 136.683713][ T6402] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 137.082150][ T6408] loop1: detected capacity change from 0 to 32768 [ 137.115559][ T6408] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.631975][ T6408] XFS (loop1): Ending clean mount [ 137.651597][ T6408] XFS (loop1): Quotacheck needed: Please wait. [ 137.842160][ T6408] XFS (loop1): Quotacheck: Done. [ 138.778139][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.828614][ T6455] loop3: detected capacity change from 0 to 40427 [ 143.844966][ T6455] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 143.853262][ T6455] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.885863][ T6455] F2FS-fs (loop3): invalid crc value [ 143.928285][ T6455] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.995143][ T6455] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.002302][ T6455] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.378793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 148.753199][ T6496] loop2: detected capacity change from 0 to 40427 [ 148.788509][ T6496] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 148.796339][ T6496] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.806969][ T6496] F2FS-fs (loop2): invalid crc value [ 148.833189][ T6496] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.885957][ T6496] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.893207][ T6496] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.914444][ T6498] loop3: detected capacity change from 0 to 4096 [ 148.951248][ T6504] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 154.367037][ T6540] loop1: detected capacity change from 0 to 4096 [ 158.174136][ T6560] loop1: detected capacity change from 0 to 4096 [ 159.106333][ T6572] loop0: detected capacity change from 0 to 4096 [ 159.121691][ T6572] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 159.538690][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.048787][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 160.067340][ T6580] loop3: detected capacity change from 0 to 40427 [ 160.075335][ T5914] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 16 [ 160.103972][ T5914] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 64 [ 160.120856][ T6580] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 160.144775][ T5914] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.198377][ T5914] usb 3-1: config 1 interface 0 has no altsetting 0 [ 160.212772][ T5765] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.236431][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.304108][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.467926][ T5914] usb 3-1: Product: syz [ 160.546186][ T5914] usb 3-1: Manufacturer: syz [ 160.622523][ T5914] usb 3-1: SerialNumber: syz [ 160.846160][ T6582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.888657][ T6582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.932538][ T6595] loop1: detected capacity change from 0 to 4096 [ 161.160924][ T5914] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 161.205969][ T5914] usb 3-1: USB disconnect, device number 3 [ 161.316643][ T6604] loop1: detected capacity change from 0 to 512 [ 161.335624][ T6604] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.424310][ T6604] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.238: bad orphan inode 13 [ 161.464824][ T6604] ext4_test_bit(bit=12, block=18) = 1 [ 161.495051][ T6604] is_bad_inode(inode)=0 [ 161.527484][ T6604] NEXT_ORPHAN(inode)=0 [ 161.546962][ T6604] max_ino=32 [ 161.551590][ T6604] i_nlink=1 [ 161.556974][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 161.650743][ T6604] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 161.721818][ T6604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.238: bg 0: block 248: padding at end of block bitmap is not set [ 161.752397][ T6604] Quota error (device loop1): write_blk: dquota write failed [ 161.802615][ T6604] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 161.833091][ T6604] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.238: Failed to acquire dquot type 1 [ 161.887123][ T28] audit: type=1800 audit(1786351611.903:11): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.238" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.570819][ T6604] syz.1.238 (6604) used greatest stack depth: 20488 bytes left [ 162.595861][ T6613] loop0: detected capacity change from 0 to 32768 [ 162.612081][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 162.633702][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 162.665427][ T6613] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 162.676884][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 162.908532][ T5765] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 163.033334][ T6637] loop0: detected capacity change from 0 to 1024 [ 163.109738][ T6637] EXT4-fs: Ignoring removed bh option [ 164.050535][ T6637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.289275][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.665003][ T6656] loop3: detected capacity change from 0 to 32768 [ 165.921569][ T6656] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 165.929981][ T6656] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 165.971426][ T6656] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 165.982177][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.199319][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 166.791170][ T6664] program syz.0.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.932876][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2733ms [ 168.942611][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 168.947886][ T6656] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 168.964939][ T6656] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 169.294661][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 169.343191][ T6680] loop3: detected capacity change from 0 to 2048 [ 169.395291][ T6680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.456245][ T6688] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 169.474649][ T6688] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 169.522226][ T6680] EXT4-fs (loop3): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 169.699570][ T6690] loop0: detected capacity change from 0 to 40427 [ 169.724679][ T6690] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 169.732496][ T6690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.752684][ T6690] F2FS-fs (loop0): invalid crc value [ 169.762501][ T6680] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.264: Abort forced by user [ 169.778275][ T6690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.816762][ T6680] EXT4-fs (loop3): Remounting filesystem read-only [ 169.850848][ T6690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.858574][ T6690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.879321][ T6680] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.930211][ T6699] program syz.1.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.143865][ T6701] loop2: detected capacity change from 0 to 32768 [ 171.331580][ T6701] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 171.339894][ T6701] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 171.356355][ T6701] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 171.366097][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 171.501808][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 173.052576][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1550ms [ 173.063936][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.109209][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done [ 173.148716][ T6701] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 173.158129][ T6701] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 173.385221][ T6712] loop1: detected capacity change from 0 to 1024 [ 173.401470][ T6712] EXT4-fs: Ignoring removed bh option [ 173.480177][ T6712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.765662][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.087924][ T6727] loop3: detected capacity change from 0 to 2048 [ 174.159876][ T6725] loop0: detected capacity change from 0 to 40427 [ 174.173300][ T6725] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 174.181099][ T6725] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.190469][ T6725] F2FS-fs (loop0): invalid crc value [ 174.272637][ T6725] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.315769][ T6732] program syz.2.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.375827][ T6725] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.382949][ T6725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.654286][ T6727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.559491][ T6727] EXT4-fs (loop3): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 177.233006][ T6727] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.280: Abort forced by user [ 177.317168][ T6727] EXT4-fs (loop3): Remounting filesystem read-only [ 177.348482][ T6727] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.590065][ T6748] loop1: detected capacity change from 0 to 32768 [ 177.602934][ T6748] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 177.611301][ T6748] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 177.637410][ T6748] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 177.652473][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 177.672161][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.695719][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 177.909278][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 213ms [ 177.936767][ T6760] loop3: detected capacity change from 0 to 1024 [ 177.949827][ T6760] EXT4-fs: Ignoring removed bh option [ 177.964003][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 177.972485][ T6748] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 178.034994][ T6760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.228364][ T6748] gfs2: fsid=syz:syz.0: found 1 quota changes [ 178.261070][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.349731][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 178.360982][ T6770] netlink: 240 bytes leftover after parsing attributes in process `syz.1.282'. [ 178.642005][ T6773] program syz.3.291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.359235][ T5777] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0 [ 180.375427][ T5777] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 180.384750][ T5777] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 180.398604][ T5777] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 180.410179][ T5777] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 180.428610][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 180.445791][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 180.453379][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.463451][ T5777] Call Trace: [ 180.466747][ T5777] [ 180.469693][ T5777] dump_stack_lvl+0x18c/0x250 [ 180.474410][ T5777] ? show_regs_print_info+0x20/0x20 [ 180.479638][ T5777] ? load_image+0x420/0x420 [ 180.484174][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 180.489404][ T5777] gfs2_assert_warn_i+0x18b/0x2c0 [ 180.494454][ T5777] gfs2_qd_dispose+0x488/0x580 [ 180.499249][ T5777] gfs2_quota_cleanup+0x40d/0x720 [ 180.504300][ T5777] ? gfs2_make_fs_ro+0x17e/0x320 [ 180.509257][ T5777] ? spin_lock_bucket+0x150/0x150 [ 180.514305][ T5777] ? __might_sleep+0xe0/0xe0 [ 180.518913][ T5777] ? down_write+0x16e/0x200 [ 180.523438][ T5777] ? down_read_killable+0x340/0x340 [ 180.528665][ T5777] ? gfs2_quota_sync+0x595/0x5a0 [ 180.533636][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 180.538416][ T5777] ? gfs2_put_super+0x1db/0x930 [ 180.543273][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 180.548210][ T5777] ? do_raw_spin_lock+0x11f/0x2b0 [ 180.553233][ T5777] ? __rwlock_init+0x150/0x150 [ 180.557995][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 180.563188][ T5777] gfs2_put_super+0x224/0x930 [ 180.567861][ T5777] ? gfs2_evict_inode+0x13c0/0x13c0 [ 180.573070][ T5777] generic_shutdown_super+0x134/0x2b0 [ 180.578441][ T5777] kill_block_super+0x44/0x90 [ 180.583125][ T5777] deactivate_locked_super+0x97/0x100 [ 180.588492][ T5777] cleanup_mnt+0x3d7/0x460 [ 180.592930][ T5777] task_work_run+0x1d4/0x260 [ 180.597517][ T5777] ? task_work_cancel+0x220/0x220 [ 180.602560][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 180.608016][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 180.613297][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 180.618875][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 180.624339][ T5777] do_syscall_64+0x61/0xb0 [ 180.628749][ T5777] ? clear_bhb_loop+0x40/0x90 [ 180.633417][ T5777] ? clear_bhb_loop+0x40/0x90 [ 180.638084][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.643973][ T5777] RIP: 0033:0x7ff0d779f317 [ 180.648378][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 180.667975][ T5777] RSP: 002b:00007ffe999d7288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 180.676384][ T5777] RAX: 0000000000000000 RBX: 00007ff0d7834474 RCX: 00007ff0d779f317 [ 180.684349][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe999d7340 [ 180.692312][ T5777] RBP: 00007ffe999d7340 R08: 00007ffe999d8340 R09: 00000000ffffffff [ 180.700273][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe999d83d0 [ 180.708232][ T5777] R13: 00007ff0d7834474 R14: 000000000002b92b R15: 00007ffe999d8410 [ 180.716207][ T5777] [ 180.744759][ T6779] loop2: detected capacity change from 0 to 2048 [ 180.852897][ T6779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.990210][ T6779] EXT4-fs (loop2): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 181.070442][ T6779] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.294: Abort forced by user [ 181.122964][ T6779] EXT4-fs (loop2): Remounting filesystem read-only [ 181.140350][ T6779] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 181.241433][ T6795] loop3: detected capacity change from 0 to 1024 [ 181.258492][ T6795] EXT4-fs: Ignoring removed bh option [ 181.319555][ T6795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.354161][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.515391][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.653090][ T6800] loop1: detected capacity change from 0 to 32768 [ 181.679156][ T6800] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.687380][ T6800] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.739051][ T6800] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 181.748225][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 181.786676][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 181.974261][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 187ms [ 182.008875][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done [ 182.014177][ T6800] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 182.302201][ T6820] program syz.0.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.390229][ T6800] gfs2: fsid=syz:syz.0: found 1 quota changes [ 183.578532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 184.113943][ T6800] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 184.122288][ T6800] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 184.131270][ T6800] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 184.140241][ T6800] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 184.150458][ T6800] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 184.246403][ T6823] loop2: detected capacity change from 0 to 2048 [ 184.246562][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 184.293114][ T5777] CPU: 1 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 184.300728][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.310809][ T5777] Call Trace: [ 184.314111][ T5777] [ 184.317058][ T5777] dump_stack_lvl+0x18c/0x250 [ 184.321773][ T5777] ? show_regs_print_info+0x20/0x20 [ 184.326999][ T5777] ? load_image+0x420/0x420 [ 184.331540][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 184.336792][ T5777] gfs2_assert_warn_i+0x18b/0x2c0 [ 184.341855][ T5777] gfs2_qd_dispose+0x488/0x580 [ 184.346656][ T5777] gfs2_quota_cleanup+0x40d/0x720 [ 184.351716][ T5777] ? gfs2_make_fs_ro+0x17e/0x320 [ 184.356668][ T5777] ? spin_lock_bucket+0x150/0x150 [ 184.361697][ T5777] ? __might_sleep+0xe0/0xe0 [ 184.366285][ T5777] ? down_write+0x16e/0x200 [ 184.370796][ T5777] ? down_read_killable+0x340/0x340 [ 184.375989][ T5777] ? gfs2_quota_sync+0x595/0x5a0 [ 184.380929][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 184.385684][ T5777] ? gfs2_put_super+0x1db/0x930 [ 184.390527][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 184.395452][ T5777] ? do_raw_spin_lock+0x11f/0x2b0 [ 184.400496][ T5777] ? __rwlock_init+0x150/0x150 [ 184.405269][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 184.410474][ T5777] gfs2_put_super+0x224/0x930 [ 184.415158][ T5777] ? gfs2_evict_inode+0x13c0/0x13c0 [ 184.420356][ T5777] generic_shutdown_super+0x134/0x2b0 [ 184.425725][ T5777] kill_block_super+0x44/0x90 [ 184.430396][ T5777] deactivate_locked_super+0x97/0x100 [ 184.435763][ T5777] cleanup_mnt+0x3d7/0x460 [ 184.440177][ T5777] task_work_run+0x1d4/0x260 [ 184.444766][ T5777] ? task_work_cancel+0x220/0x220 [ 184.449798][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 184.455257][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 184.460540][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 184.466089][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 184.471546][ T5777] do_syscall_64+0x61/0xb0 [ 184.475951][ T5777] ? clear_bhb_loop+0x40/0x90 [ 184.480619][ T5777] ? clear_bhb_loop+0x40/0x90 [ 184.485290][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.491176][ T5777] RIP: 0033:0x7ff0d779f317 [ 184.495584][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 184.515186][ T5777] RSP: 002b:00007ffe999d7288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.523594][ T5777] RAX: 0000000000000000 RBX: 00007ff0d7834474 RCX: 00007ff0d779f317 [ 184.531558][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe999d7340 [ 184.539517][ T5777] RBP: 00007ffe999d7340 R08: 00007ffe999d8340 R09: 00000000ffffffff [ 184.547475][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe999d83d0 [ 184.555433][ T5777] R13: 00007ff0d7834474 R14: 000000000002cf57 R15: 00007ffe999d8410 [ 184.563407][ T5777] [ 184.588021][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.652103][ T6823] EXT4-fs (loop2): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 184.665458][ T6823] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.311: Abort forced by user [ 184.685697][ T6823] EXT4-fs (loop2): Remounting filesystem read-only [ 184.708877][ T6823] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 185.000272][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.004953][ T6840] loop1: detected capacity change from 0 to 1024 [ 185.027420][ T6840] EXT4-fs: Ignoring removed bh option [ 185.092759][ T6840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.219871][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.603601][ T6848] loop2: detected capacity change from 0 to 32768 [ 185.620596][ T6848] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 185.629665][ T6848] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 185.713146][ T6848] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 185.722905][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 185.763815][ T6856] program syz.3.324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.847078][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.454261][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 188.230765][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2383ms [ 188.384031][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done [ 188.473686][ T6848] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 188.485420][ T6848] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 188.703522][ T5765] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.766965][ T6870] loop3: detected capacity change from 0 to 1024 [ 188.791773][ T6870] EXT4-fs: Ignoring removed bh option [ 188.816804][ T6866] loop1: detected capacity change from 0 to 2048 [ 188.864354][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.930183][ T6866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.035539][ T6866] EXT4-fs (loop1): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 189.058294][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.102182][ T6866] EXT4-fs error (device loop1): __ext4_remount:6756: comm syz.1.326: Abort forced by user [ 189.172541][ T6866] EXT4-fs (loop1): Remounting filesystem read-only [ 189.185914][ T6866] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 189.244374][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 189.345211][ T6890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'. [ 189.490101][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.872008][ T6893] loop3: detected capacity change from 0 to 32768 [ 189.880618][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.891847][ T6893] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 189.900118][ T6893] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 189.914067][ T6893] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 189.924753][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 189.936491][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 190.069197][ T5814] usb 1-1: device descriptor read/64, error -71 [ 190.196204][ T6899] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.744734][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1808ms [ 192.166821][ T5814] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 193.058646][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done [ 193.064979][ T6893] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 193.109649][ T6893] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 193.312912][ T27] hid-generic 0000:0002:20000.0002: unknown main item tag 0x0 [ 193.460080][ T27] hid-generic 0000:0002:20000.0002: unknown main item tag 0x0 [ 193.680707][ T27] hid-generic 0000:0002:20000.0002: hidraw0: HID v500.00 Device [syz1] on syz0 [ 194.076553][ T6914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.344'. [ 194.204059][ T6916] loop2: detected capacity change from 0 to 2048 [ 194.258344][ T6911] fido_id[6911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.331022][ T6916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.370763][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 194.505864][ T6916] tipc: Started in network mode [ 194.514458][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.520949][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.553016][ T6916] tipc: Node identity 4, cluster identity 4711 [ 194.579797][ T6916] tipc: Node number set to 4 [ 195.322827][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.759080][ T6936] loop3: detected capacity change from 0 to 32768 [ 195.830698][ T6936] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 195.838998][ T6936] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 195.868666][ T5815] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 195.877454][ T6936] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 195.886568][ T5814] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 195.919625][ T6937] program syz.1.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.932142][ T5814] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 196.574016][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.578623][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 196.580184][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.586652][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 197.218781][ T5814] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1286ms [ 197.296639][ T5814] gfs2: fsid=syz:syz.0: jid=0: Done [ 197.375266][ T6936] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 197.973938][ T6936] gfs2: fsid=syz:syz.0: found 1 quota changes [ 198.220772][ T5815] usb 3-1: device descriptor read/64, error -71 [ 198.733940][ T6946] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 198.743413][ T6946] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 198.752678][ T6946] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 198.791562][ T6946] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 198.802076][ T6946] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 199.040963][ T5815] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.164426][ T5774] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 199.288014][ T27] hid-generic 0000:0002:20000.0003: unknown main item tag 0x0 [ 199.386803][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 [ 199.394429][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.404498][ T5774] Call Trace: [ 199.407790][ T5774] [ 199.410728][ T5774] dump_stack_lvl+0x18c/0x250 [ 199.415427][ T5774] ? show_regs_print_info+0x20/0x20 [ 199.420639][ T5774] ? load_image+0x420/0x420 [ 199.425163][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 199.430380][ T5774] gfs2_assert_warn_i+0x18b/0x2c0 [ 199.435426][ T5774] gfs2_qd_dispose+0x488/0x580 [ 199.440211][ T5774] gfs2_quota_cleanup+0x40d/0x720 [ 199.445249][ T5774] ? gfs2_make_fs_ro+0x17e/0x320 [ 199.450200][ T5774] ? spin_lock_bucket+0x150/0x150 [ 199.455251][ T5774] ? __might_sleep+0xe0/0xe0 [ 199.459861][ T5774] ? down_write+0x16e/0x200 [ 199.464377][ T5774] ? down_read_killable+0x340/0x340 [ 199.469938][ T5774] ? gfs2_quota_sync+0x595/0x5a0 [ 199.474904][ T5774] gfs2_make_fs_ro+0x2aa/0x320 [ 199.479679][ T5774] ? gfs2_put_super+0x1db/0x930 [ 199.484546][ T5774] ? gfs2_dinode_out+0xb10/0xb10 [ 199.489495][ T5774] ? do_raw_spin_lock+0x11f/0x2b0 [ 199.494540][ T5774] ? __rwlock_init+0x150/0x150 [ 199.499318][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 199.504536][ T5774] gfs2_put_super+0x224/0x930 [ 199.509231][ T5774] ? gfs2_evict_inode+0x13c0/0x13c0 [ 199.514444][ T5774] generic_shutdown_super+0x134/0x2b0 [ 199.519831][ T5774] kill_block_super+0x44/0x90 [ 199.524523][ T5774] deactivate_locked_super+0x97/0x100 [ 199.529909][ T5774] cleanup_mnt+0x3d7/0x460 [ 199.534341][ T5774] task_work_run+0x1d4/0x260 [ 199.538953][ T5774] ? task_work_cancel+0x220/0x220 [ 199.543998][ T5774] ? exit_to_user_mode_loop+0x3b/0x110 [ 199.549475][ T5774] exit_to_user_mode_loop+0xe6/0x110 [ 199.554783][ T5774] exit_to_user_mode_prepare+0xee/0x180 [ 199.560349][ T5774] syscall_exit_to_user_mode+0x1a/0x50 [ 199.565823][ T5774] do_syscall_64+0x61/0xb0 [ 199.570261][ T5774] ? clear_bhb_loop+0x40/0x90 [ 199.574950][ T5774] ? clear_bhb_loop+0x40/0x90 [ 199.579638][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.585542][ T5774] RIP: 0033:0x7f94ab99f317 [ 199.589968][ T5774] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 199.609583][ T5774] RSP: 002b:00007ffe00e9b668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.618010][ T5774] RAX: 0000000000000000 RBX: 00007f94aba34474 RCX: 00007f94ab99f317 [ 199.625987][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe00e9b720 [ 199.633964][ T5774] RBP: 00007ffe00e9b720 R08: 00007ffe00e9c720 R09: 00000000ffffffff [ 199.641948][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe00e9c7b0 [ 199.649943][ T5774] R13: 00007f94aba34474 R14: 00000000000308ee R15: 00007ffe00e9c7f0 [ 199.657944][ T5774] [ 199.701917][ T27] hid-generic 0000:0002:20000.0003: unknown main item tag 0x0 [ 200.040572][ T27] hid-generic 0000:0002:20000.0003: hidraw0: HID v500.00 Device [syz1] on syz0 [ 200.323206][ T6955] fido_id[6955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.643925][ T6961] loop1: detected capacity change from 0 to 2048 [ 200.788132][ T6961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.913303][ T6971] netlink: 36 bytes leftover after parsing attributes in process `syz.3.354'. [ 201.038866][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 201.447580][ T6961] tipc: Started in network mode [ 201.476571][ T6961] tipc: Node identity 4, cluster identity 4711 [ 201.538829][ T6961] tipc: Node number set to 4 [ 201.729701][ T6980] program syz.3.360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.148887][ T5815] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.389614][ T5815] usb 1-1: device descriptor read/64, error -71 [ 202.515160][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.862396][ T6983] loop2: detected capacity change from 0 to 32768 [ 202.930059][ T6983] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 202.938700][ T6983] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 202.949452][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.967864][ T6983] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 203.031717][ T5914] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 203.101639][ T5914] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 203.188661][ T5815] usb 1-1: device descriptor read/64, error -71 [ 203.381923][ T5815] usb usb1-port1: attempt power cycle [ 203.880106][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 204.011567][ T5815] usb 1-1: device descriptor read/8, error -71 [ 204.233239][ T5914] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1131ms [ 204.352616][ T5914] gfs2: fsid=syz:syz.0: jid=0: Done [ 204.398098][ T5815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.444514][ T6983] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 204.572813][ T5815] usb 1-1: device descriptor read/8, error -71 [ 204.721670][ T5815] usb usb1-port1: unable to enumerate USB device [ 204.748812][ T6983] gfs2: fsid=syz:syz.0: found 1 quota changes [ 204.844684][ T6989] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 204.853098][ T6989] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 204.862657][ T6989] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 204.871800][ T6989] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 204.883342][ T6989] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 205.312047][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 205.398471][ T5776] CPU: 1 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 205.406089][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.416165][ T5776] Call Trace: [ 205.419455][ T5776] [ 205.422389][ T5776] dump_stack_lvl+0x18c/0x250 [ 205.427064][ T5776] ? show_regs_print_info+0x20/0x20 [ 205.432264][ T5776] ? load_image+0x420/0x420 [ 205.436769][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 205.441968][ T5776] gfs2_assert_warn_i+0x18b/0x2c0 [ 205.446993][ T5776] gfs2_qd_dispose+0x488/0x580 [ 205.451756][ T5776] gfs2_quota_cleanup+0x40d/0x720 [ 205.456777][ T5776] ? gfs2_make_fs_ro+0x17e/0x320 [ 205.461706][ T5776] ? spin_lock_bucket+0x150/0x150 [ 205.466726][ T5776] ? __might_sleep+0xe0/0xe0 [ 205.471314][ T5776] ? down_write+0x16e/0x200 [ 205.475811][ T5776] ? down_read_killable+0x340/0x340 [ 205.481002][ T5776] ? gfs2_quota_sync+0x595/0x5a0 [ 205.485942][ T5776] gfs2_make_fs_ro+0x2aa/0x320 [ 205.490698][ T5776] ? gfs2_put_super+0x1db/0x930 [ 205.495545][ T5776] ? gfs2_dinode_out+0xb10/0xb10 [ 205.500474][ T5776] ? do_raw_spin_lock+0x11f/0x2b0 [ 205.505497][ T5776] ? __rwlock_init+0x150/0x150 [ 205.510256][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 205.515454][ T5776] gfs2_put_super+0x224/0x930 [ 205.520128][ T5776] ? gfs2_evict_inode+0x13c0/0x13c0 [ 205.525328][ T5776] generic_shutdown_super+0x134/0x2b0 [ 205.530693][ T5776] kill_block_super+0x44/0x90 [ 205.535363][ T5776] deactivate_locked_super+0x97/0x100 [ 205.540730][ T5776] cleanup_mnt+0x3d7/0x460 [ 205.545145][ T5776] task_work_run+0x1d4/0x260 [ 205.549734][ T5776] ? task_work_cancel+0x220/0x220 [ 205.554755][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 205.560211][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 205.565501][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 205.571044][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 205.576499][ T5776] do_syscall_64+0x61/0xb0 [ 205.580906][ T5776] ? clear_bhb_loop+0x40/0x90 [ 205.585572][ T5776] ? clear_bhb_loop+0x40/0x90 [ 205.590241][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.596129][ T5776] RIP: 0033:0x7fdfe0b9f317 [ 205.600537][ T5776] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 205.620135][ T5776] RSP: 002b:00007fff96831678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 205.628544][ T5776] RAX: 0000000000000000 RBX: 00007fdfe0c34474 RCX: 00007fdfe0b9f317 [ 205.636505][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff96831730 [ 205.644466][ T5776] RBP: 00007fff96831730 R08: 00007fff96832730 R09: 00000000ffffffff [ 205.652430][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff968327c0 [ 205.660391][ T5776] R13: 00007fdfe0c34474 R14: 0000000000032186 R15: 00007fff96832800 [ 205.668367][ T5776] [ 205.938097][ T5814] hid-generic 0000:0002:20000.0004: unknown main item tag 0x0 [ 205.950457][ T5814] hid-generic 0000:0002:20000.0004: unknown main item tag 0x0 [ 206.757696][ T5814] hid-generic 0000:0002:20000.0004: hidraw0: HID v500.00 Device [syz1] on syz0 [ 207.034142][ T7005] fido_id[7005]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.270093][ T7009] loop3: detected capacity change from 0 to 2048 [ 207.320308][ T7009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.392155][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.373'. [ 207.403631][ T7018] netlink: 240 bytes leftover after parsing attributes in process `syz.0.373'. [ 207.663752][ T7009] tipc: Started in network mode [ 207.734275][ T7009] tipc: Node identity 4, cluster identity 4711 [ 207.897540][ T7009] tipc: Node number set to 4 [ 208.157580][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'. [ 208.416997][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.659644][ T7031] loop2: detected capacity change from 0 to 1024 [ 208.684475][ T7031] EXT4-fs: Ignoring removed bh option [ 208.756620][ T7031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.970873][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.315431][ T7027] loop0: detected capacity change from 0 to 131072 [ 209.360613][ T7027] F2FS-fs (loop0): invalid crc value [ 209.409459][ T7027] F2FS-fs (loop0): Found nat_bits in checkpoint [ 209.457329][ T7027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 209.503247][ T28] audit: type=1804 audit(1786351659.513:12): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.374" name="/newroot/90/file1/file1" dev="loop0" ino=7 res=1 errno=0 [ 209.780810][ T7043] loop3: detected capacity change from 0 to 40427 [ 209.820260][ T7043] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 209.828035][ T7043] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 209.839237][ T7043] F2FS-fs (loop3): invalid crc value [ 209.857989][ T7043] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.934268][ T7043] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 209.941502][ T7043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.023330][ T7061] loop1: detected capacity change from 0 to 32768 [ 212.084307][ T7061] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 212.092683][ T7061] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 212.123493][ T7061] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 212.142912][ T7063] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.172685][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 214.002896][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 214.886563][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 883ms [ 214.905634][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done [ 214.923733][ T7061] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 214.943184][ T7061] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 215.156013][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 215.167970][ T7069] netlink: 240 bytes leftover after parsing attributes in process `syz.2.387'. [ 216.163176][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 216.384210][ T7077] loop2: detected capacity change from 0 to 2048 [ 216.659292][ T7077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.510699][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.493505][ T7093] loop2: detected capacity change from 0 to 40427 [ 218.514992][ T7093] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 218.523112][ T7093] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 218.580881][ T7093] F2FS-fs (loop2): invalid crc value [ 218.623451][ T7098] program syz.1.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.755099][ T7093] F2FS-fs (loop2): Found nat_bits in checkpoint [ 218.841936][ T7093] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 218.849123][ T7093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.581406][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.398'. [ 221.593395][ T7110] netlink: 240 bytes leftover after parsing attributes in process `syz.3.398'. [ 222.549597][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.401'. [ 223.566827][ T7123] loop1: detected capacity change from 0 to 2048 [ 223.654793][ T7123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.054992][ T7134] loop3: detected capacity change from 0 to 40427 [ 224.236959][ T7134] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 224.244884][ T7134] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 224.255162][ T7134] F2FS-fs (loop3): invalid crc value [ 224.300714][ T7134] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.363792][ T7134] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 224.371024][ T7134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.389325][ T7147] program syz.0.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.407711][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.591148][ T7149] loop2: detected capacity change from 0 to 32768 [ 227.698745][ T7149] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 227.706959][ T7149] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 227.758149][ T7149] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 227.898225][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 228.024043][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 228.361213][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 337ms [ 228.389211][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 228.410218][ T7149] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 229.198485][ T7149] gfs2: fsid=syz:syz.0: found 1 quota changes [ 229.658541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 229.760199][ T7163] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 229.769448][ T7163] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 229.778660][ T7163] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 229.787690][ T7163] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 229.797976][ T7163] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 230.056038][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.412'. [ 230.178873][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 230.268356][ T5776] CPU: 1 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 230.275975][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.286088][ T5776] Call Trace: [ 230.289378][ T5776] [ 230.292311][ T5776] dump_stack_lvl+0x18c/0x250 [ 230.296997][ T5776] ? show_regs_print_info+0x20/0x20 [ 230.302198][ T5776] ? load_image+0x420/0x420 [ 230.306708][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 230.311907][ T5776] gfs2_assert_warn_i+0x18b/0x2c0 [ 230.316950][ T5776] gfs2_qd_dispose+0x488/0x580 [ 230.321719][ T5776] gfs2_quota_cleanup+0x40d/0x720 [ 230.326748][ T5776] ? gfs2_make_fs_ro+0x17e/0x320 [ 230.331687][ T5776] ? spin_lock_bucket+0x150/0x150 [ 230.336711][ T5776] ? __might_sleep+0xe0/0xe0 [ 230.341293][ T5776] ? down_write+0x16e/0x200 [ 230.345794][ T5776] ? down_read_killable+0x340/0x340 [ 230.351018][ T5776] ? gfs2_quota_sync+0x595/0x5a0 [ 230.355971][ T5776] gfs2_make_fs_ro+0x2aa/0x320 [ 230.360738][ T5776] ? gfs2_put_super+0x1db/0x930 [ 230.365590][ T5776] ? gfs2_dinode_out+0xb10/0xb10 [ 230.370530][ T5776] ? do_raw_spin_lock+0x11f/0x2b0 [ 230.375558][ T5776] ? __rwlock_init+0x150/0x150 [ 230.380321][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 230.385516][ T5776] gfs2_put_super+0x224/0x930 [ 230.390217][ T5776] ? gfs2_evict_inode+0x13c0/0x13c0 [ 230.395404][ T5776] generic_shutdown_super+0x134/0x2b0 [ 230.400770][ T5776] kill_block_super+0x44/0x90 [ 230.405450][ T5776] deactivate_locked_super+0x97/0x100 [ 230.410819][ T5776] cleanup_mnt+0x3d7/0x460 [ 230.415232][ T5776] task_work_run+0x1d4/0x260 [ 230.419858][ T5776] ? task_work_cancel+0x220/0x220 [ 230.424881][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 230.430339][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 230.435651][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 230.441219][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 230.446692][ T5776] do_syscall_64+0x61/0xb0 [ 230.451104][ T5776] ? clear_bhb_loop+0x40/0x90 [ 230.455773][ T5776] ? clear_bhb_loop+0x40/0x90 [ 230.460453][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.466340][ T5776] RIP: 0033:0x7fdfe0b9f317 [ 230.470749][ T5776] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 230.490370][ T5776] RSP: 002b:00007fff96831678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 230.498784][ T5776] RAX: 0000000000000000 RBX: 00007fdfe0c34474 RCX: 00007fdfe0b9f317 [ 230.506749][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff96831730 [ 230.514711][ T5776] RBP: 00007fff96831730 R08: 00007fff96832730 R09: 00000000ffffffff [ 230.522678][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff968327c0 [ 230.530644][ T5776] R13: 00007fdfe0c34474 R14: 000000000003823b R15: 00007fff96832800 [ 230.538629][ T5776] [ 231.053242][ T7177] loop1: detected capacity change from 0 to 40427 [ 231.223920][ T7177] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 231.231753][ T7177] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 231.242501][ T7177] F2FS-fs (loop1): invalid crc value [ 231.256811][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 231.269223][ T7177] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.289284][ T7180] netlink: 240 bytes leftover after parsing attributes in process `syz.3.408'. [ 231.371158][ T7177] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 231.378260][ T7177] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.694570][ T7195] program syz.3.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.312891][ T7202] loop2: detected capacity change from 0 to 32768 [ 234.362867][ T7202] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 234.371937][ T7202] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 234.421799][ T7202] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 234.477584][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 234.511871][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 234.754872][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 243ms [ 234.798808][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done [ 234.817554][ T7202] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 235.837717][ T7202] gfs2: fsid=syz:syz.0: found 1 quota changes [ 235.938621][ T7209] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 235.946920][ T7209] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 235.956168][ T7209] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 235.965296][ T7209] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 235.975539][ T7209] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 236.171617][ T7211] loop1: detected capacity change from 0 to 512 [ 236.196741][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 236.208578][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 236.223572][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 236.231150][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.241241][ T5776] Call Trace: [ 236.244532][ T5776] [ 236.247481][ T5776] dump_stack_lvl+0x18c/0x250 [ 236.252192][ T5776] ? show_regs_print_info+0x20/0x20 [ 236.257415][ T5776] ? load_image+0x420/0x420 [ 236.261965][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 236.267203][ T5776] gfs2_assert_warn_i+0x18b/0x2c0 [ 236.272259][ T5776] gfs2_qd_dispose+0x488/0x580 [ 236.277056][ T5776] gfs2_quota_cleanup+0x40d/0x720 [ 236.282114][ T5776] ? gfs2_make_fs_ro+0x17e/0x320 [ 236.287081][ T5776] ? spin_lock_bucket+0x150/0x150 [ 236.292127][ T5776] ? __might_sleep+0xe0/0xe0 [ 236.296718][ T5776] ? down_write+0x16e/0x200 [ 236.301220][ T5776] ? down_read_killable+0x340/0x340 [ 236.306414][ T5776] ? gfs2_quota_sync+0x595/0x5a0 [ 236.311358][ T5776] gfs2_make_fs_ro+0x2aa/0x320 [ 236.316120][ T5776] ? gfs2_put_super+0x1db/0x930 [ 236.320968][ T5776] ? gfs2_dinode_out+0xb10/0xb10 [ 236.325897][ T5776] ? do_raw_spin_lock+0x11f/0x2b0 [ 236.330924][ T5776] ? __rwlock_init+0x150/0x150 [ 236.335689][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 236.340884][ T5776] gfs2_put_super+0x224/0x930 [ 236.345555][ T5776] ? gfs2_evict_inode+0x13c0/0x13c0 [ 236.350745][ T5776] generic_shutdown_super+0x134/0x2b0 [ 236.356108][ T5776] kill_block_super+0x44/0x90 [ 236.360783][ T5776] deactivate_locked_super+0x97/0x100 [ 236.366149][ T5776] cleanup_mnt+0x3d7/0x460 [ 236.370563][ T5776] task_work_run+0x1d4/0x260 [ 236.375150][ T5776] ? task_work_cancel+0x220/0x220 [ 236.380172][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 236.385631][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 236.390913][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 236.396459][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 236.401917][ T5776] do_syscall_64+0x61/0xb0 [ 236.406323][ T5776] ? clear_bhb_loop+0x40/0x90 [ 236.410990][ T5776] ? clear_bhb_loop+0x40/0x90 [ 236.415659][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.421546][ T5776] RIP: 0033:0x7fdfe0b9f317 [ 236.425955][ T5776] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 236.445555][ T5776] RSP: 002b:00007fff96831678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 236.453966][ T5776] RAX: 0000000000000000 RBX: 00007fdfe0c34474 RCX: 00007fdfe0b9f317 [ 236.461929][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff96831730 [ 236.469891][ T5776] RBP: 00007fff96831730 R08: 00007fff96832730 R09: 00000000ffffffff [ 236.477857][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff968327c0 [ 236.485820][ T5776] R13: 00007fdfe0c34474 R14: 0000000000039972 R15: 00007fff96832800 [ 236.493795][ T5776] [ 236.508744][ T7211] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.420: Unrecognised inode hash code 255 [ 236.521454][ T7211] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.420: Corrupt directory, running e2fsck is recommended [ 236.534979][ T7211] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 236.543962][ T7211] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.420: corrupted in-inode xattr: invalid ea_ino [ 236.571106][ T7211] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.420: couldn't read orphan inode 15 (err -117) [ 236.591177][ T7211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.721981][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.427'. [ 236.733968][ T7222] netlink: 240 bytes leftover after parsing attributes in process `syz.0.427'. [ 237.554994][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.879201][ T7227] loop0: detected capacity change from 0 to 40427 [ 237.908503][ T7227] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 237.916302][ T7227] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.929486][ T7227] F2FS-fs (loop0): invalid crc value [ 237.972433][ T7227] F2FS-fs (loop0): Found nat_bits in checkpoint [ 238.030929][ T7227] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 238.038040][ T7227] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 239.199924][ T7247] program syz.1.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.941412][ T7259] loop1: detected capacity change from 0 to 32768 [ 243.009430][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.437'. [ 243.020822][ T7264] netlink: 240 bytes leftover after parsing attributes in process `syz.2.437'. [ 243.118810][ T7259] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 243.127022][ T7259] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 243.154454][ T7259] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 243.169366][ T5779] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 243.307020][ T5779] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 243.801215][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 243.874724][ T7271] loop2: detected capacity change from 0 to 512 [ 243.928793][ T7271] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.439: Unrecognised inode hash code 255 [ 243.951574][ T5779] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 644ms [ 243.968653][ T5779] gfs2: fsid=syz:syz.0: jid=0: Done [ 243.973951][ T7259] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 243.986047][ T7271] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.439: Corrupt directory, running e2fsck is recommended [ 244.001920][ T7271] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 244.011807][ T7271] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.439: corrupted in-inode xattr: invalid ea_ino [ 244.032224][ T7271] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.439: couldn't read orphan inode 15 (err -117) [ 244.074478][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.290280][ T7259] gfs2: fsid=syz:syz.0: found 1 quota changes [ 244.433490][ T7279] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 244.445113][ T7279] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 244.454198][ T7279] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 244.463207][ T7279] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 244.473485][ T7279] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 244.645659][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.017179][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 245.041655][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 245.049264][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.059337][ T5777] Call Trace: [ 245.062632][ T5777] [ 245.065583][ T5777] dump_stack_lvl+0x18c/0x250 [ 245.070286][ T5777] ? show_regs_print_info+0x20/0x20 [ 245.075497][ T5777] ? load_image+0x420/0x420 [ 245.080032][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 245.085251][ T5777] gfs2_assert_warn_i+0x18b/0x2c0 [ 245.090317][ T5777] gfs2_qd_dispose+0x488/0x580 [ 245.095122][ T5777] gfs2_quota_cleanup+0x40d/0x720 [ 245.100181][ T5777] ? gfs2_make_fs_ro+0x17e/0x320 [ 245.105137][ T5777] ? spin_lock_bucket+0x150/0x150 [ 245.110224][ T5777] ? __might_sleep+0xe0/0xe0 [ 245.114832][ T5777] ? down_write+0x16e/0x200 [ 245.119352][ T5777] ? down_read_killable+0x340/0x340 [ 245.124573][ T5777] ? gfs2_quota_sync+0x595/0x5a0 [ 245.129544][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 245.134322][ T5777] ? gfs2_put_super+0x1db/0x930 [ 245.139187][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 245.144136][ T5777] ? do_raw_spin_lock+0x11f/0x2b0 [ 245.149180][ T5777] ? __rwlock_init+0x150/0x150 [ 245.153963][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 245.159186][ T5777] gfs2_put_super+0x224/0x930 [ 245.163885][ T5777] ? gfs2_evict_inode+0x13c0/0x13c0 [ 245.169095][ T5777] generic_shutdown_super+0x134/0x2b0 [ 245.172657][ T7288] loop3: detected capacity change from 0 to 40427 [ 245.174466][ T5777] kill_block_super+0x44/0x90 [ 245.185560][ T5777] deactivate_locked_super+0x97/0x100 [ 245.190957][ T5777] cleanup_mnt+0x3d7/0x460 [ 245.192657][ T7288] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 245.195387][ T5777] task_work_run+0x1d4/0x260 [ 245.203178][ T7288] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 245.207654][ T5777] ? task_work_cancel+0x220/0x220 [ 245.217133][ T7288] F2FS-fs (loop3): invalid crc value [ 245.220796][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 245.220829][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 245.236899][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 245.242492][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 245.247994][ T5777] do_syscall_64+0x61/0xb0 [ 245.252445][ T5777] ? clear_bhb_loop+0x40/0x90 [ 245.257146][ T5777] ? clear_bhb_loop+0x40/0x90 [ 245.261847][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.267760][ T5777] RIP: 0033:0x7ff0d779f317 [ 245.272193][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 245.290764][ T7288] F2FS-fs (loop3): Found nat_bits in checkpoint [ 245.291794][ T5777] RSP: 002b:00007ffe999d7288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 245.306475][ T5777] RAX: 0000000000000000 RBX: 00007ff0d7834474 RCX: 00007ff0d779f317 [ 245.314458][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe999d7340 [ 245.322435][ T5777] RBP: 00007ffe999d7340 R08: 00007ffe999d8340 R09: 00000000ffffffff [ 245.330423][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe999d83d0 [ 245.338413][ T5777] R13: 00007ff0d7834474 R14: 000000000003bb9d R15: 00007ffe999d8410 [ 245.346401][ T5777] [ 245.349170][ T7288] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 245.356541][ T7288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 247.056485][ T7298] syz.2.441 (7298) used greatest stack depth: 16824 bytes left [ 248.871625][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 248.876385][ T7308] program syz.1.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.893461][ T7306] netlink: 240 bytes leftover after parsing attributes in process `syz.2.446'. [ 250.991915][ T7314] loop0: detected capacity change from 0 to 8 [ 251.368601][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'. [ 251.544626][ T7312] loop2: detected capacity change from 0 to 32768 [ 251.602104][ T7324] loop0: detected capacity change from 0 to 512 [ 251.726106][ T7324] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.453: Unrecognised inode hash code 255 [ 251.788551][ T7324] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.453: Corrupt directory, running e2fsck is recommended [ 251.861386][ T7324] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 251.871981][ T7322] loop1: detected capacity change from 0 to 32768 [ 251.889845][ T7322] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 251.898053][ T7322] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 251.921705][ T7324] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.453: corrupted in-inode xattr: invalid ea_ino [ 251.945779][ T7322] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 251.971162][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 251.977977][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 252.026975][ T7324] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.453: couldn't read orphan inode 15 (err -117) [ 252.059723][ T7324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.079699][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms [ 252.088050][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 252.115527][ T7322] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 252.160469][ T7324] tipc: Started in network mode [ 252.191543][ T7324] tipc: Node identity 4, cluster identity 4711 [ 252.220357][ T7324] tipc: Node number set to 4 [ 252.363065][ T7322] gfs2: fsid=syz:syz.0: found 1 quota changes [ 252.399292][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.471773][ T7334] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 252.480227][ T7334] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 252.489439][ T7334] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 252.499183][ T7334] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 252.509683][ T7334] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 252.867435][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 252.938586][ T5777] CPU: 1 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 252.946292][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.956367][ T5777] Call Trace: [ 252.959661][ T5777] [ 252.962601][ T5777] dump_stack_lvl+0x18c/0x250 [ 252.967307][ T5777] ? show_regs_print_info+0x20/0x20 [ 252.972523][ T5777] ? load_image+0x420/0x420 [ 252.977054][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 252.982276][ T5777] gfs2_assert_warn_i+0x18b/0x2c0 [ 252.987326][ T5777] gfs2_qd_dispose+0x488/0x580 [ 252.992113][ T5777] gfs2_quota_cleanup+0x40d/0x720 [ 252.997158][ T5777] ? gfs2_make_fs_ro+0x17e/0x320 [ 253.002121][ T5777] ? spin_lock_bucket+0x150/0x150 [ 253.007174][ T5777] ? __might_sleep+0xe0/0xe0 [ 253.011785][ T5777] ? down_write+0x16e/0x200 [ 253.016307][ T5777] ? down_read_killable+0x340/0x340 [ 253.021535][ T5777] ? gfs2_quota_sync+0x595/0x5a0 [ 253.026511][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 253.031293][ T5777] ? gfs2_put_super+0x1db/0x930 [ 253.036066][ T7338] loop0: detected capacity change from 0 to 40427 [ 253.036139][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 253.047488][ T5777] ? do_raw_spin_lock+0x11f/0x2b0 [ 253.052518][ T5777] ? __rwlock_init+0x150/0x150 [ 253.057287][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 253.062484][ T5777] gfs2_put_super+0x224/0x930 [ 253.067170][ T5777] ? gfs2_evict_inode+0x13c0/0x13c0 [ 253.072363][ T5777] generic_shutdown_super+0x134/0x2b0 [ 253.077733][ T5777] kill_block_super+0x44/0x90 [ 253.082402][ T5777] deactivate_locked_super+0x97/0x100 [ 253.087788][ T5777] cleanup_mnt+0x3d7/0x460 [ 253.092219][ T5777] task_work_run+0x1d4/0x260 [ 253.096819][ T5777] ? task_work_cancel+0x220/0x220 [ 253.101854][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 253.107323][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 253.112623][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 253.118169][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 253.123651][ T5777] do_syscall_64+0x61/0xb0 [ 253.128061][ T5777] ? clear_bhb_loop+0x40/0x90 [ 253.132733][ T5777] ? clear_bhb_loop+0x40/0x90 [ 253.137402][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.143289][ T5777] RIP: 0033:0x7ff0d779f317 [ 253.147696][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 253.167297][ T5777] RSP: 002b:00007ffe999d7288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 253.175704][ T5777] RAX: 0000000000000000 RBX: 00007ff0d7834474 RCX: 00007ff0d779f317 [ 253.183669][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe999d7340 [ 253.191631][ T5777] RBP: 00007ffe999d7340 R08: 00007ffe999d8340 R09: 00000000ffffffff [ 253.199592][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe999d83d0 [ 253.207551][ T5777] R13: 00007ff0d7834474 R14: 000000000003d9f0 R15: 00007ffe999d8410 [ 253.215525][ T5777] [ 253.221308][ T7338] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 253.229224][ T7338] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 253.256704][ T7338] F2FS-fs (loop0): invalid crc value [ 253.430624][ T7338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 253.482211][ T7338] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 253.489353][ T7338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 254.645129][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 254.656413][ T7353] netlink: 240 bytes leftover after parsing attributes in process `syz.1.457'. [ 255.638933][ T7359] program syz.1.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.936196][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.956167][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.647044][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 258.785575][ T7370] loop3: detected capacity change from 0 to 512 [ 258.867478][ T7370] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.465: Unrecognised inode hash code 255 [ 258.909026][ T7370] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.465: Corrupt directory, running e2fsck is recommended [ 258.924089][ T7370] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 258.932448][ T7370] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.465: corrupted in-inode xattr: invalid ea_ino [ 259.001448][ T7370] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.465: couldn't read orphan inode 15 (err -117) [ 259.057984][ T7370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.227794][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 259.240181][ T7385] netlink: 240 bytes leftover after parsing attributes in process `syz.0.469'. [ 260.160686][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.269607][ T7397] program syz.0.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.734302][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 263.636581][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 263.648106][ T7415] netlink: 240 bytes leftover after parsing attributes in process `syz.3.481'. [ 264.465483][ T7422] loop2: detected capacity change from 0 to 1024 [ 264.507278][ T7422] EXT4-fs: Ignoring removed bh option [ 264.619103][ T7422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.816273][ T7434] program syz.3.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.414403][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.461920][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 268.474036][ T7450] netlink: 240 bytes leftover after parsing attributes in process `syz.2.492'. [ 269.272793][ T7457] loop1: detected capacity change from 0 to 1024 [ 269.290398][ T7457] EXT4-fs: Ignoring removed bh option [ 269.318974][ T7457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.500433][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.653998][ T7472] program syz.0.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.727633][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'. [ 272.739991][ T7486] netlink: 240 bytes leftover after parsing attributes in process `syz.0.505'. [ 273.754775][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 273.846308][ T7498] loop1: detected capacity change from 0 to 1024 [ 273.900776][ T7498] EXT4-fs: Ignoring removed bh option [ 274.357851][ T7509] program syz.0.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.461986][ T7498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.971223][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.195847][ T7515] loop1: detected capacity change from 0 to 32768 [ 277.225999][ T7515] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 277.234392][ T7515] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 277.311505][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 277.321184][ T7519] netlink: 240 bytes leftover after parsing attributes in process `syz.3.516'. [ 277.340059][ T7515] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 277.395797][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 277.516533][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 278.224235][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 278.254089][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 737ms [ 278.282477][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 278.309460][ T7515] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 278.547537][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 278.599424][ T7515] gfs2: fsid=syz:syz.0: found 1 quota changes [ 278.812757][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 278.825110][ T7537] netlink: 240 bytes leftover after parsing attributes in process `syz.1.515'. [ 279.102768][ T7535] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 279.112078][ T7535] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 279.132183][ T7535] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 279.141681][ T7535] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 279.152221][ T7535] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 279.235059][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 280.451141][ T5777] CPU: 1 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 280.458743][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.468857][ T5777] Call Trace: [ 280.472151][ T5777] [ 280.475100][ T5777] dump_stack_lvl+0x18c/0x250 [ 280.479806][ T5777] ? show_regs_print_info+0x20/0x20 [ 280.485022][ T5777] ? load_image+0x420/0x420 [ 280.489557][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 280.494776][ T5777] gfs2_assert_warn_i+0x18b/0x2c0 [ 280.499828][ T5777] gfs2_qd_dispose+0x488/0x580 [ 280.504622][ T5777] gfs2_quota_cleanup+0x40d/0x720 [ 280.509680][ T5777] ? gfs2_make_fs_ro+0x17e/0x320 [ 280.514635][ T5777] ? spin_lock_bucket+0x150/0x150 [ 280.519699][ T5777] ? __might_sleep+0xe0/0xe0 [ 280.524314][ T5777] ? down_write+0x16e/0x200 [ 280.528844][ T5777] ? down_read_killable+0x340/0x340 [ 280.534065][ T5777] ? gfs2_quota_sync+0x595/0x5a0 [ 280.539038][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 280.543824][ T5777] ? gfs2_put_super+0x1db/0x930 [ 280.548714][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 280.553679][ T5777] ? do_raw_spin_lock+0x11f/0x2b0 [ 280.558730][ T5777] ? __rwlock_init+0x150/0x150 [ 280.563952][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 280.569177][ T5777] gfs2_put_super+0x224/0x930 [ 280.573881][ T5777] ? gfs2_evict_inode+0x13c0/0x13c0 [ 280.579098][ T5777] generic_shutdown_super+0x134/0x2b0 [ 280.584491][ T5777] kill_block_super+0x44/0x90 [ 280.589189][ T5777] deactivate_locked_super+0x97/0x100 [ 280.594585][ T5777] cleanup_mnt+0x3d7/0x460 [ 280.599027][ T5777] task_work_run+0x1d4/0x260 [ 280.603643][ T5777] ? task_work_cancel+0x220/0x220 [ 280.608706][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 280.614194][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 280.619504][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 280.625073][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 280.630555][ T5777] do_syscall_64+0x61/0xb0 [ 280.634984][ T5777] ? clear_bhb_loop+0x40/0x90 [ 280.639683][ T5777] ? clear_bhb_loop+0x40/0x90 [ 280.644357][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.650251][ T5777] RIP: 0033:0x7ff0d779f317 [ 280.654665][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 280.674281][ T5777] RSP: 002b:00007ffe999d7288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 280.682692][ T5777] RAX: 0000000000000000 RBX: 00007ff0d7834474 RCX: 00007ff0d779f317 [ 280.690664][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe999d7340 [ 280.698625][ T5777] RBP: 00007ffe999d7340 R08: 00007ffe999d8340 R09: 00000000ffffffff [ 280.706588][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe999d83d0 [ 280.714551][ T5777] R13: 00007ff0d7834474 R14: 000000000004420a R15: 00007ffe999d8410 [ 280.722531][ T5777] [ 281.263786][ T7550] loop1: detected capacity change from 0 to 1024 [ 281.279427][ T7550] EXT4-fs: Ignoring removed bh option [ 281.316023][ T7550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.440644][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.546101][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 281.688362][ T27] hid-generic 0000:0002:20000.0005: unknown main item tag 0x0 [ 281.786992][ T27] hid-generic 0000:0002:20000.0005: unknown main item tag 0x0 [ 281.970535][ T27] hid-generic 0000:0002:20000.0005: hidraw0: HID v500.00 Device [syz1] on syz0 [ 282.569447][ T7564] program syz.0.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.427555][ T7563] fido_id[7563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.259869][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 287.325267][ T7590] loop3: detected capacity change from 0 to 1024 [ 287.348325][ T7590] EXT4-fs: Ignoring removed bh option [ 287.415925][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.683648][ T7596] program syz.0.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.736438][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.177794][ T7616] loop0: detected capacity change from 0 to 1024 [ 292.199571][ T7616] EXT4-fs: Ignoring removed bh option [ 292.321386][ T7616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.537721][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.649727][ T7629] program syz.1.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.004283][ T7647] loop1: detected capacity change from 0 to 4096 [ 297.323815][ T7651] loop1: detected capacity change from 0 to 256 [ 297.381494][ T28] audit: type=1804 audit(1786351747.403:13): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.565" name="/newroot/143/file0/bus" dev="loop1" ino=1048593 res=1 errno=0 [ 297.878790][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 298.150672][ T7661] loop1: detected capacity change from 0 to 40427 [ 298.162150][ T7661] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 298.170391][ T7661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 298.202443][ T7661] F2FS-fs (loop1): invalid crc value [ 298.289507][ T7661] F2FS-fs (loop1): Found nat_bits in checkpoint [ 298.335703][ T7664] program syz.0.570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.352163][ T7661] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 298.359572][ T7661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 298.367719][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 298.466456][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.744142][ T8] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 299.980834][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.104877][ T8] usb 4-1: Product: syz [ 300.112978][ T8] usb 4-1: Manufacturer: syz [ 300.118258][ T8] usb 4-1: SerialNumber: syz [ 300.247725][ T8] usb 4-1: config 0 descriptor?? [ 300.495228][ T8] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 301.032949][ T5418] usb 4-1: USB disconnect, device number 3 [ 301.040060][ T12] usb 4-1: Failed to submit usb control message: -71 [ 301.097355][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 301.138509][ T12] usb 4-1: unable to get target info from device [ 301.144911][ T12] usb 4-1: could not get target info (-71) [ 301.178751][ T12] usb 4-1: could not probe fw (-71) [ 302.331797][ T7683] loop0: detected capacity change from 0 to 4096 [ 302.822603][ T7700] loop3: detected capacity change from 0 to 128 [ 302.930128][ T7699] loop0: detected capacity change from 0 to 128 [ 303.112527][ T7700] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 303.123027][ T7700] FAT-fs (loop3): Filesystem has been set read-only [ 303.138866][ T28] audit: type=1800 audit(1786351753.123:14): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.579" name="file2" dev="loop3" ino=1048594 res=0 errno=0 [ 303.245490][ T7699] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.258296][ T7699] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.647031][ T28] audit: type=1800 audit(1786351753.473:15): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.580" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 303.715873][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.891387][ T7713] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 306.701582][ T7746] 0x000000000000-0x000000020000 : "" [ 306.721283][ T7746] ftl_cs: FTL header not found. [ 307.420604][ T7755] loop1: detected capacity change from 0 to 32768 [ 307.429496][ T7762] loop0: detected capacity change from 0 to 8 [ 307.460326][ T7755] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 307.466459][ T7762] SQUASHFS error: lzo decompression failed, data probably corrupt [ 307.468562][ T7755] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 307.491307][ T7755] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 307.500397][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 307.507193][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 307.579167][ T7762] SQUASHFS error: Failed to read block 0x91: -5 [ 307.586644][ T7762] SQUASHFS error: Unable to read metadata cache entry [8f] [ 307.635700][ T7762] SQUASHFS error: Unable to read inode 0x11f [ 307.648039][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 307.688826][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 307.694122][ T7755] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 308.019247][ T7755] gfs2: fsid=syz:syz.0: found 1 quota changes [ 308.191881][ T7776] loop2: detected capacity change from 0 to 40427 [ 308.270955][ T7776] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 308.278822][ T7776] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 308.292230][ T7779] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 308.300628][ T7779] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 308.310539][ T7779] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 308.325703][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'. [ 308.336237][ T7779] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 308.346544][ T7779] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 308.354767][ T7780] netlink: 240 bytes leftover after parsing attributes in process `syz.1.601'. [ 308.421010][ T7776] F2FS-fs (loop2): invalid crc value [ 308.535226][ T7776] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.640513][ T7776] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 308.647607][ T7776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 309.590819][ T5777] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 309.918400][ C1] sched: RT throttling activated [ 309.923217][ T5777] CPU: 1 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 309.935761][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.945827][ T5777] Call Trace: [ 309.949105][ T5777] [ 309.952029][ T5777] dump_stack_lvl+0x18c/0x250 [ 309.956705][ T5777] ? show_regs_print_info+0x20/0x20 [ 309.961898][ T5777] ? load_image+0x420/0x420 [ 309.966407][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 309.971604][ T5777] gfs2_assert_warn_i+0x18b/0x2c0 [ 309.976633][ T5777] gfs2_qd_dispose+0x488/0x580 [ 309.981396][ T5777] gfs2_quota_cleanup+0x40d/0x720 [ 309.986416][ T5777] ? gfs2_make_fs_ro+0x17e/0x320 [ 309.991346][ T5777] ? spin_lock_bucket+0x150/0x150 [ 309.996366][ T5777] ? __might_sleep+0xe0/0xe0 [ 310.000949][ T5777] ? down_write+0x16e/0x200 [ 310.005445][ T5777] ? down_read_killable+0x340/0x340 [ 310.010637][ T5777] ? gfs2_quota_sync+0x595/0x5a0 [ 310.015576][ T5777] gfs2_make_fs_ro+0x2aa/0x320 [ 310.020333][ T5777] ? gfs2_put_super+0x1db/0x930 [ 310.025178][ T5777] ? gfs2_dinode_out+0xb10/0xb10 [ 310.030106][ T5777] ? do_raw_spin_lock+0x11f/0x2b0 [ 310.035132][ T5777] ? __rwlock_init+0x150/0x150 [ 310.039894][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 310.045089][ T5777] gfs2_put_super+0x224/0x930 [ 310.049763][ T5777] ? gfs2_evict_inode+0x13c0/0x13c0 [ 310.054950][ T5777] generic_shutdown_super+0x134/0x2b0 [ 310.060314][ T5777] kill_block_super+0x44/0x90 [ 310.064981][ T5777] deactivate_locked_super+0x97/0x100 [ 310.070348][ T5777] cleanup_mnt+0x3d7/0x460 [ 310.074763][ T5777] task_work_run+0x1d4/0x260 [ 310.079351][ T5777] ? task_work_cancel+0x220/0x220 [ 310.084400][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 310.089856][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 310.095135][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 310.100675][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 310.106130][ T5777] do_syscall_64+0x61/0xb0 [ 310.110536][ T5777] ? clear_bhb_loop+0x40/0x90 [ 310.115201][ T5777] ? clear_bhb_loop+0x40/0x90 [ 310.119873][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.125759][ T5777] RIP: 0033:0x7ff0d779f317 [ 310.130167][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 310.149771][ T5777] RSP: 002b:00007ffe999d7288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 310.158185][ T5777] RAX: 0000000000000000 RBX: 00007ff0d7834474 RCX: 00007ff0d779f317 [ 310.166154][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe999d7340 [ 310.174115][ T5777] RBP: 00007ffe999d7340 R08: 00007ffe999d8340 R09: 00000000ffffffff [ 310.182077][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe999d83d0 [ 310.190040][ T5777] R13: 00007ff0d7834474 R14: 000000000004b4f7 R15: 00007ffe999d8410 [ 310.198015][ T5777] [ 310.346197][ T7788] loop0: detected capacity change from 0 to 131072 [ 310.412081][ T7788] F2FS-fs (loop0): invalid crc value [ 310.474931][ T7774] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 310.482653][ T7774] netlink: 17 bytes leftover after parsing attributes in process `syz.3.608'. [ 310.508220][ T7788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 310.552054][ T7788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 311.168990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 312.788729][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 313.022466][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.049491][ T23] usb 4-1: config 0 has no interfaces? [ 313.394373][ T7818] loop2: detected capacity change from 0 to 40427 [ 313.410823][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 313.428452][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.468025][ T23] usb 4-1: config 0 descriptor?? [ 313.486166][ T7818] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 313.494142][ T7818] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 313.522300][ T7818] F2FS-fs (loop2): invalid crc value [ 313.587149][ T7818] F2FS-fs (loop2): Found nat_bits in checkpoint [ 313.660104][ T7818] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 313.667265][ T7818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 313.960402][ T7817] loop0: detected capacity change from 0 to 131072 [ 313.987342][ T7817] F2FS-fs (loop0): invalid crc value [ 314.332142][ T7817] F2FS-fs (loop0): Found nat_bits in checkpoint [ 314.566664][ T7817] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 315.615231][ T8] usb 4-1: USB disconnect, device number 4 [ 316.438747][ T7860] loop1: detected capacity change from 0 to 40427 [ 316.539825][ T7860] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 316.547623][ T7860] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 316.561066][ T7860] F2FS-fs (loop1): invalid crc value [ 316.581161][ T7860] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.629907][ T7860] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 316.636996][ T7860] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 317.746079][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.763105][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.788508][ T28] audit: type=1326 audit(1786351768.723:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 318.929910][ T28] audit: type=1326 audit(1786351768.723:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 318.989587][ T7871] loop3: detected capacity change from 0 to 131072 [ 319.025964][ T7871] F2FS-fs (loop3): invalid crc value [ 319.041389][ T28] audit: type=1326 audit(1786351768.723:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 319.102671][ T28] audit: type=1326 audit(1786351768.733:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 319.114404][ T7871] F2FS-fs (loop3): Found nat_bits in checkpoint [ 319.183928][ T7871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 319.190366][ T28] audit: type=1326 audit(1786351768.733:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 319.241148][ T7879] loop2: detected capacity change from 0 to 4096 [ 319.307145][ T7879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.318704][ T28] audit: type=1326 audit(1786351768.733:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 319.437180][ T28] audit: type=1326 audit(1786351768.733:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 319.543658][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.570047][ T28] audit: type=1326 audit(1786351768.733:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 319.695905][ T28] audit: type=1326 audit(1786351768.733:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdfe0b9e0d9 code=0x7ffc0000 [ 320.716686][ T7905] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 321.108177][ T7917] loop1: detected capacity change from 0 to 512 [ 321.227453][ T7917] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.650: inode has both inline data and extents flags [ 321.258823][ T7917] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.650: couldn't read orphan inode 15 (err -117) [ 321.276863][ T7917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.530686][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.666718][ T7916] loop3: detected capacity change from 0 to 32768 [ 322.568722][ T7924] loop1: detected capacity change from 0 to 131072 [ 322.592622][ T7924] F2FS-fs (loop1): invalid crc value [ 322.624062][ T7924] F2FS-fs (loop1): Found nat_bits in checkpoint [ 322.902937][ T7932] 0x000000000007-0x000000020000 : "" [ 322.921491][ T7932] ftl_cs: FTL header corrupt! [ 323.181331][ T7924] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 323.563452][ T7942] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 323.958240][ T7952] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 324.125004][ T7956] ip_tables: iptables: counters copy to user failed while replacing table [ 326.219411][ T7967] loop0: detected capacity change from 0 to 131072 [ 326.255605][ T7967] F2FS-fs (loop0): invalid crc value [ 326.592030][ T7967] F2FS-fs (loop0): Found nat_bits in checkpoint [ 326.654228][ T7967] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 327.104050][ T7989] loop2: detected capacity change from 0 to 2048 [ 327.240971][ T7989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.250130][ C1] [ 328.252526][ C1] ================================ [ 328.257644][ C1] WARNING: inconsistent lock state [ 328.262771][ C1] syzkaller #0 Not tainted [ 328.267190][ C1] -------------------------------- [ 328.272303][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 328.279159][ C1] syz.1.674/7992 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 328.285411][ C1] ffff888077f82130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 328.294761][ C1] {SOFTIRQ-ON-W} state was registered at: [ 328.300472][ C1] lock_acquire+0x19e/0x420 [ 328.305052][ C1] lock_sock_nested+0x48/0x100 [ 328.309890][ C1] x25_bind+0x20a/0x460 [ 328.314124][ C1] __sys_bind+0x2f0/0x3f0 [ 328.318527][ C1] __x64_sys_bind+0x7a/0x90 [ 328.323105][ C1] do_syscall_64+0x55/0xb0 [ 328.327595][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.333574][ C1] irq event stamp: 34488 [ 328.337793][ C1] hardirqs last enabled at (34488): [] __local_bh_enable_ip+0x13a/0x1c0 [ 328.347759][ C1] hardirqs last disabled at (34487): [] __local_bh_enable_ip+0xdb/0x1c0 [ 328.357634][ C1] softirqs last enabled at (32184): [] __irq_exit_rcu+0xd3/0x190 [ 328.366990][ C1] softirqs last disabled at (34101): [] __irq_exit_rcu+0xd3/0x190 [ 328.376349][ C1] [ 328.376349][ C1] other info that might help us debug this: [ 328.384389][ C1] Possible unsafe locking scenario: [ 328.384389][ C1] [ 328.391819][ C1] CPU0 [ 328.395082][ C1] ---- [ 328.398375][ C1] lock(sk_lock-AF_X25); [ 328.402694][ C1] [ 328.406129][ C1] lock(sk_lock-AF_X25); [ 328.410618][ C1] [ 328.410618][ C1] *** DEADLOCK *** [ 328.410618][ C1] [ 328.418749][ C1] 3 locks held by syz.1.674/7992: [ 328.423755][ C1] #0: ffff88807e7f14a0 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x183/0x390 [ 328.433150][ C1] #1: ffff8880b8f36c78 (lock#4){+.+.}-{2:2}, at: folio_add_lru+0x323/0xce0 [ 328.441846][ C1] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 328.451842][ C1] [ 328.451842][ C1] stack backtrace: [ 328.457713][ C1] CPU: 1 PID: 7992 Comm: syz.1.674 Not tainted syzkaller #0 [ 328.464982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.475025][ C1] Call Trace: [ 328.478290][ C1] [ 328.481123][ C1] dump_stack_lvl+0x18c/0x250 [ 328.485792][ C1] ? show_regs_print_info+0x20/0x20 [ 328.490983][ C1] ? __kernel_text_address+0xd/0x30 [ 328.496203][ C1] ? unwind_get_return_address+0x91/0xc0 [ 328.501825][ C1] valid_state+0x13b/0x1d0 [ 328.506231][ C1] mark_lock_irq+0xad/0x900 [ 328.510728][ C1] ? stack_trace_save+0xaa/0x100 [ 328.515656][ C1] ? save_trace+0xcd0/0xcd0 [ 328.520147][ C1] ? mark_lock+0x94/0x320 [ 328.524468][ C1] ? save_trace+0x5d/0xcd0 [ 328.528885][ C1] mark_lock+0x208/0x320 [ 328.533144][ C1] __lock_acquire+0xcfc/0x7d80 [ 328.537906][ C1] ? verify_lock_unused+0x140/0x140 [ 328.543098][ C1] ? verify_lock_unused+0x140/0x140 [ 328.548286][ C1] ? mark_lock+0x94/0x320 [ 328.552605][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 328.558582][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 328.563597][ C1] lock_acquire+0x19e/0x420 [ 328.568089][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 328.573197][ C1] ? read_lock_is_recursive+0x20/0x20 [ 328.578558][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 328.583924][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 328.589117][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 328.594473][ C1] ? _local_bh_enable+0xa0/0xa0 [ 328.599313][ C1] lock_sock_nested+0x48/0x100 [ 328.604062][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 328.609166][ C1] x25_kill_by_neigh+0x10d/0x250 [ 328.614097][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 328.619458][ C1] ? netif_receive_skb_core+0x34/0x230 [ 328.624908][ C1] ? netif_receive_skb_core+0x34/0x230 [ 328.630362][ C1] ? x25_device_event+0x280/0x280 [ 328.635369][ C1] netif_receive_skb_core+0x16a/0x230 [ 328.640737][ C1] lapbeth_napi_poll+0x42/0x80 [ 328.645491][ C1] __napi_poll+0xbb/0x460 [ 328.649811][ C1] net_rx_action+0x65f/0xcc0 [ 328.654394][ C1] ? net_tx_action+0x950/0x950 [ 328.659150][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 328.665131][ C1] ? lock_chain_count+0x20/0x20 [ 328.669973][ C1] handle_softirqs+0x27d/0x820 [ 328.674725][ C1] ? read_tsc+0x9/0x20 [ 328.678787][ C1] ? ktime_get+0x24b/0x280 [ 328.683205][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 328.687962][ C1] ? do_softirq+0x1a0/0x1a0 [ 328.692455][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 328.697646][ C1] __irq_exit_rcu+0xd3/0x190 [ 328.702222][ C1] ? irq_exit_rcu+0x20/0x20 [ 328.706722][ C1] irq_exit_rcu+0x9/0x20 [ 328.710950][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 328.716576][ C1] [ 328.719519][ C1] [ 328.722443][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.728415][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 328.734915][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b 28 c4 f6 65 8b 05 cc f6 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 328.754508][ C1] RSP: 0018:ffffc9000523f4c0 EFLAGS: 00000206 [ 328.760562][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: f9a6e1d121d66d00 [ 328.768522][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 328.776488][ C1] RBP: ffffc9000523f550 R08: ffffffff911ed547 R09: 1ffffffff223daa8 [ 328.784450][ C1] R10: dffffc0000000000 R11: fffffbfff223daa9 R12: dffffc0000000000 [ 328.792412][ C1] R13: dffffc0000000000 R14: ffff88807cdfa050 R15: 1ffff92000a47e98 [ 328.800381][ C1] ? _raw_spin_unlock+0x40/0x40 [ 328.805234][ C1] ? lru_add_fn+0xa86/0x17c0 [ 328.809816][ C1] folio_batch_move_lru+0x546/0x660 [ 328.815007][ C1] ? folio_add_lru+0xce0/0xce0 [ 328.819758][ C1] ? lru_add_drain_cpu+0x880/0x880 [ 328.824857][ C1] ? folio_batch_add_and_move+0x9a/0x2c0 [ 328.830486][ C1] ? folio_add_lru+0xce0/0xce0 [ 328.835238][ C1] ? folio_add_lru+0x323/0xce0 [ 328.839992][ C1] folio_add_lru+0x41c/0xce0 [ 328.844569][ C1] shmem_get_folio_gfp+0x1124/0x2b40 [ 328.849855][ C1] shmem_fault+0x1b8/0x820 [ 328.854268][ C1] ? zero_pipe_buf_get+0x10/0x10 [ 328.859196][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 328.864119][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 328.869135][ C1] __do_fault+0x13b/0x4d0 [ 328.873453][ C1] ? handle_mm_fault+0x3929/0x4a50 [ 328.878548][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 328.883476][ C1] handle_mm_fault+0x3945/0x4a50 [ 328.888416][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 328.893349][ C1] ? numa_migrate_prep+0x350/0x350 [ 328.898480][ C1] ? follow_page_pte+0x6dd/0x1ae0 [ 328.903517][ C1] ? pmd_lock+0x60/0x60 [ 328.907670][ C1] __get_user_pages+0x604/0x1580 [ 328.912616][ C1] ? populate_vma_page_range+0x380/0x380 [ 328.918255][ C1] populate_vma_page_range+0x2c1/0x380 [ 328.923715][ C1] ? fixup_user_fault+0x750/0x750 [ 328.928734][ C1] ? down_read+0x1ac/0x2e0 [ 328.933145][ C1] __mm_populate+0x260/0x390 [ 328.937731][ C1] ? faultin_page_range+0x8a0/0x8a0 [ 328.942927][ C1] ? up_write+0x1be/0x410 [ 328.947244][ C1] vm_mmap_pgoff+0x2da/0x3f0 [ 328.951827][ C1] ? account_locked_vm+0x200/0x200 [ 328.956931][ C1] ? ksys_mmap_pgoff+0xf3/0x720 [ 328.961775][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 328.966529][ C1] do_syscall_64+0x55/0xb0 [ 328.970933][ C1] ? clear_bhb_loop+0x40/0x90 [ 328.975598][ C1] ? clear_bhb_loop+0x40/0x90 [ 328.980263][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.986149][ C1] RIP: 0033:0x7ff0d779e0d9 [ 328.990566][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.010161][ C1] RSP: 002b:00007ff0d85e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 329.018564][ C1] RAX: ffffffffffffffda RBX: 00007ff0d7a25fa0 RCX: 00007ff0d779e0d9 [ 329.026523][ C1] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 329.034480][ C1] RBP: 00007ff0d7835024 R08: ffffffffffffffff R09: 0000000000000000 [ 329.042441][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 329.050399][ C1] R13: 00007ff0d7a26038 R14: 00007ff0d7a25fa0 R15: 00007ffe999d8018 [ 329.058392][ C1] [ 329.061488][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 329.070299][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7992, name: syz.1.674 [ 329.079279][ C1] preempt_count: 102, expected: 0 [ 329.084320][ C1] RCU nest depth: 1, expected: 0 [ 329.089292][ C1] INFO: lockdep is turned off. [ 329.094058][ C1] Preemption disabled at: [ 329.094069][ C1] [] folio_add_lru+0x2d0/0xce0 [ 329.104766][ C1] CPU: 1 PID: 7992 Comm: syz.1.674 Not tainted syzkaller #0 [ 329.112065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.122133][ C1] Call Trace: [ 329.125422][ C1] [ 329.128284][ C1] dump_stack_lvl+0x18c/0x250 [ 329.132984][ C1] ? show_regs_print_info+0x20/0x20 [ 329.138228][ C1] ? load_image+0x420/0x420 [ 329.142760][ C1] ? folio_add_lru+0x2d0/0xce0 [ 329.147539][ C1] __might_resched+0x48d/0x5f0 [ 329.152323][ C1] ? folio_add_lru+0x2d0/0xce0 [ 329.157101][ C1] ? __might_sleep+0xe0/0xe0 [ 329.161710][ C1] ? read_lock_is_recursive+0x20/0x20 [ 329.167095][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 329.172477][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 329.177698][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 329.183084][ C1] ? _local_bh_enable+0xa0/0xa0 [ 329.187951][ C1] lock_sock_nested+0x5d/0x100 [ 329.192729][ C1] x25_kill_by_neigh+0x10d/0x250 [ 329.197696][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 329.203087][ C1] ? netif_receive_skb_core+0x34/0x230 [ 329.208572][ C1] ? netif_receive_skb_core+0x34/0x230 [ 329.214047][ C1] ? x25_device_event+0x280/0x280 [ 329.219073][ C1] netif_receive_skb_core+0x16a/0x230 [ 329.224450][ C1] lapbeth_napi_poll+0x42/0x80 [ 329.229207][ C1] __napi_poll+0xbb/0x460 [ 329.233526][ C1] net_rx_action+0x65f/0xcc0 [ 329.238109][ C1] ? net_tx_action+0x950/0x950 [ 329.242861][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 329.248836][ C1] ? lock_chain_count+0x20/0x20 [ 329.253678][ C1] handle_softirqs+0x27d/0x820 [ 329.258438][ C1] ? read_tsc+0x9/0x20 [ 329.262502][ C1] ? ktime_get+0x24b/0x280 [ 329.266909][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 329.271664][ C1] ? do_softirq+0x1a0/0x1a0 [ 329.276154][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 329.281364][ C1] __irq_exit_rcu+0xd3/0x190 [ 329.285965][ C1] ? irq_exit_rcu+0x20/0x20 [ 329.290475][ C1] irq_exit_rcu+0x9/0x20 [ 329.294712][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 329.300341][ C1] [ 329.303259][ C1] [ 329.306180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.312150][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 329.318649][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b 28 c4 f6 65 8b 05 cc f6 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 329.338269][ C1] RSP: 0018:ffffc9000523f4c0 EFLAGS: 00000206 [ 329.344333][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: f9a6e1d121d66d00 [ 329.352313][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 329.360317][ C1] RBP: ffffc9000523f550 R08: ffffffff911ed547 R09: 1ffffffff223daa8 [ 329.368287][ C1] R10: dffffc0000000000 R11: fffffbfff223daa9 R12: dffffc0000000000 [ 329.376258][ C1] R13: dffffc0000000000 R14: ffff88807cdfa050 R15: 1ffff92000a47e98 [ 329.384319][ C1] ? _raw_spin_unlock+0x40/0x40 [ 329.389169][ C1] ? lru_add_fn+0xa86/0x17c0 [ 329.393750][ C1] folio_batch_move_lru+0x546/0x660 [ 329.398941][ C1] ? folio_add_lru+0xce0/0xce0 [ 329.403716][ C1] ? lru_add_drain_cpu+0x880/0x880 [ 329.408815][ C1] ? folio_batch_add_and_move+0x9a/0x2c0 [ 329.414455][ C1] ? folio_add_lru+0xce0/0xce0 [ 329.419225][ C1] ? folio_add_lru+0x323/0xce0 [ 329.423975][ C1] folio_add_lru+0x41c/0xce0 [ 329.428557][ C1] shmem_get_folio_gfp+0x1124/0x2b40 [ 329.433837][ C1] shmem_fault+0x1b8/0x820 [ 329.438246][ C1] ? zero_pipe_buf_get+0x10/0x10 [ 329.443172][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 329.448094][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 329.453108][ C1] __do_fault+0x13b/0x4d0 [ 329.457425][ C1] ? handle_mm_fault+0x3929/0x4a50 [ 329.462525][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 329.467452][ C1] handle_mm_fault+0x3945/0x4a50 [ 329.472380][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 329.477311][ C1] ? numa_migrate_prep+0x350/0x350 [ 329.482407][ C1] ? follow_page_pte+0x6dd/0x1ae0 [ 329.487426][ C1] ? pmd_lock+0x60/0x60 [ 329.491574][ C1] __get_user_pages+0x604/0x1580 [ 329.496510][ C1] ? populate_vma_page_range+0x380/0x380 [ 329.502137][ C1] populate_vma_page_range+0x2c1/0x380 [ 329.507592][ C1] ? fixup_user_fault+0x750/0x750 [ 329.512646][ C1] ? down_read+0x1ac/0x2e0 [ 329.517055][ C1] __mm_populate+0x260/0x390 [ 329.521640][ C1] ? faultin_page_range+0x8a0/0x8a0 [ 329.526859][ C1] ? up_write+0x1be/0x410 [ 329.531176][ C1] vm_mmap_pgoff+0x2da/0x3f0 [ 329.535760][ C1] ? account_locked_vm+0x200/0x200 [ 329.540864][ C1] ? ksys_mmap_pgoff+0xf3/0x720 [ 329.545704][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 329.550456][ C1] do_syscall_64+0x55/0xb0 [ 329.554860][ C1] ? clear_bhb_loop+0x40/0x90 [ 329.559534][ C1] ? clear_bhb_loop+0x40/0x90 [ 329.564200][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.570079][ C1] RIP: 0033:0x7ff0d779e0d9 [ 329.574487][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.594080][ C1] RSP: 002b:00007ff0d85e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 329.602487][ C1] RAX: ffffffffffffffda RBX: 00007ff0d7a25fa0 RCX: 00007ff0d779e0d9 [ 329.610448][ C1] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 329.618407][ C1] RBP: 00007ff0d7835024 R08: ffffffffffffffff R09: 0000000000000000 [ 329.626366][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 329.634322][ C1] R13: 00007ff0d7a26038 R14: 00007ff0d7a25fa0 R15: 00007ffe999d8018 [ 329.642291][ C1]