last executing test programs: 58.275820482s ago: executing program 1 (id=11): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6416, r1, &(0x7f0000000400)="abcb83b585bab528", 0x8, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 58.074316819s ago: executing program 1 (id=14): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 56.693478611s ago: executing program 1 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1c4, 0x0, 0x3}]}) 56.22060681s ago: executing program 1 (id=26): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0xcc, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 54.35070744s ago: executing program 1 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x6, 0x40f, 0x80, 0x0, 0xd, 0xfff]}}]}]}]}, 0x38}}, 0x0) 51.754875675s ago: executing program 1 (id=54): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 51.027463421s ago: executing program 32 (id=54): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.926560111s ago: executing program 2 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 3.767588721s ago: executing program 2 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xd3d0, 0x1, 0x0, r2, 0x4}) 3.546591136s ago: executing program 2 (id=397): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x1, 0x551d, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setuid(0xee00) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xf507, 0x0) 3.525062365s ago: executing program 0 (id=398): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x2, {0x2, 0x35}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={'sha384\x00'}}) 2.996355696s ago: executing program 5 (id=405): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000440)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 2.758842453s ago: executing program 0 (id=407): syz_mount_image$msdos(&(0x7f0000001000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000001040)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000002b) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 2.537294941s ago: executing program 5 (id=409): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x3, 0x0) 2.450823445s ago: executing program 0 (id=410): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000000c0)={[{@nodecompose}, {}, {@barrier}, {@uid}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'cp863'}}]}, 0x1, 0x640, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.398670593s ago: executing program 4 (id=411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.273911491s ago: executing program 3 (id=412): writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="dc91", 0x2}], 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 2.162981335s ago: executing program 4 (id=413): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x80000000}) 2.003679114s ago: executing program 2 (id=414): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x9, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 2.001990536s ago: executing program 5 (id=415): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x7}, {0x12, 0x2, 0x3, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x1f, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 1.952724555s ago: executing program 4 (id=416): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000200) 1.931295249s ago: executing program 0 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.930808363s ago: executing program 3 (id=418): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) syz_clone3(&(0x7f0000000280)={0x8000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.703401207s ago: executing program 5 (id=419): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x2, 0x0, &(0x7f0000000380)=[{0xfffffffffffffffe, 0xffffffffffffffff}, {0x8000000, 0x4000000000000e8}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000000d40)='L', 0x1, 0x56149216}) 1.638766489s ago: executing program 3 (id=420): r0 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.638422247s ago: executing program 0 (id=421): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000ec0)=[{&(0x7f00000001c0)=""/146, 0x92}], 0x1, 0x2, 0x0) 1.429598624s ago: executing program 5 (id=422): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x200800, &(0x7f0000000080)={[{@lazytime}, {@gquota}, {@filestreams}, {@lazytime}, {@discard}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x28) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) fallocate(r0, 0x8, 0x4000, 0x4000) 1.421666821s ago: executing program 3 (id=423): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.118753217s ago: executing program 0 (id=424): socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 874.292226ms ago: executing program 2 (id=425): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000000240)='LLL', 0x3, 0x1c}) 766.79204ms ago: executing program 2 (id=426): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2004, @fd_index, 0x8456, 0x0, 0x0, 0x14, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 683.527707ms ago: executing program 4 (id=427): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) 501.19417ms ago: executing program 4 (id=428): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) 314.768319ms ago: executing program 3 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) unshare(0x2c020400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r1, r0, 0x0, r0}, 0x10) 206.417398ms ago: executing program 4 (id=430): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 37.337741ms ago: executing program 5 (id=431): r0 = inotify_init1(0x80000) creat(&(0x7f0000000080)='./file0\x00', 0xc7) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 3 (id=432): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x6}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b32, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 84.759846][ T5811] cgroup: Unknown subsys name 'net' [ 84.868562][ T5811] cgroup: Unknown subsys name 'cpuset' [ 84.877805][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.582859][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.021092][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.031140][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.040682][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.048301][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.056936][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.058795][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.064220][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.079473][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.081463][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.094878][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.102489][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.104802][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.117776][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.128707][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.135410][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.146615][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.146613][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.161910][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.173381][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.181734][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.207466][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.226515][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.235024][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.245917][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.255064][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.909567][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.022381][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.075954][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 90.208722][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.220092][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.227687][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.236014][ T5821] bridge_slave_0: entered allmulticast mode [ 90.243523][ T5821] bridge_slave_0: entered promiscuous mode [ 90.252716][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 90.293255][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.300571][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.307935][ T5821] bridge_slave_1: entered allmulticast mode [ 90.315653][ T5821] bridge_slave_1: entered promiscuous mode [ 90.461342][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.521220][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.537007][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.544186][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.551784][ T5823] bridge_slave_0: entered allmulticast mode [ 90.559382][ T5823] bridge_slave_0: entered promiscuous mode [ 90.566866][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.574057][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.581921][ T5829] bridge_slave_0: entered allmulticast mode [ 90.589453][ T5829] bridge_slave_0: entered promiscuous mode [ 90.630058][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.637457][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.644758][ T5823] bridge_slave_1: entered allmulticast mode [ 90.652389][ T5823] bridge_slave_1: entered promiscuous mode [ 90.660658][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.668074][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.675381][ T5829] bridge_slave_1: entered allmulticast mode [ 90.682753][ T5829] bridge_slave_1: entered promiscuous mode [ 90.689977][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.697201][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.704528][ T5838] bridge_slave_0: entered allmulticast mode [ 90.711930][ T5838] bridge_slave_0: entered promiscuous mode [ 90.772405][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.779727][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.787100][ T5838] bridge_slave_1: entered allmulticast mode [ 90.795335][ T5838] bridge_slave_1: entered promiscuous mode [ 90.805504][ T5821] team0: Port device team_slave_0 added [ 90.868581][ T5821] team0: Port device team_slave_1 added [ 90.889402][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.896706][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.903890][ T5822] bridge_slave_0: entered allmulticast mode [ 90.911623][ T5822] bridge_slave_0: entered promiscuous mode [ 90.922453][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.935229][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.961254][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.971457][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.978870][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.987779][ T5822] bridge_slave_1: entered allmulticast mode [ 90.995360][ T5822] bridge_slave_1: entered promiscuous mode [ 91.005683][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.017979][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.042501][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.096476][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.103643][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.130131][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.135559][ T5835] Bluetooth: hci0: command tx timeout [ 91.145834][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.153236][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.179566][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.214745][ T5835] Bluetooth: hci2: command tx timeout [ 91.220919][ T5837] Bluetooth: hci3: command tx timeout [ 91.226746][ T5830] Bluetooth: hci1: command tx timeout [ 91.286542][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.296088][ T5835] Bluetooth: hci4: command tx timeout [ 91.301204][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.313417][ T5823] team0: Port device team_slave_0 added [ 91.321812][ T5829] team0: Port device team_slave_0 added [ 91.330951][ T5829] team0: Port device team_slave_1 added [ 91.338916][ T5838] team0: Port device team_slave_0 added [ 91.361021][ T5823] team0: Port device team_slave_1 added [ 91.398243][ T5838] team0: Port device team_slave_1 added [ 91.443103][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.450219][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.477052][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.508610][ T5822] team0: Port device team_slave_0 added [ 91.542539][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.551158][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.577358][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.603707][ T5822] team0: Port device team_slave_1 added [ 91.623593][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.630700][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.656754][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.674168][ T5821] hsr_slave_0: entered promiscuous mode [ 91.680951][ T5821] hsr_slave_1: entered promiscuous mode [ 91.695561][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.702527][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.728728][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.754197][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.761337][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.787391][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.814792][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.821895][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.848496][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.871046][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.878110][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.904761][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.923380][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.930414][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.956410][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.072183][ T5838] hsr_slave_0: entered promiscuous mode [ 92.079040][ T5838] hsr_slave_1: entered promiscuous mode [ 92.085620][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 92.091445][ T5838] Cannot create hsr debugfs directory [ 92.107014][ T9] cfg80211: failed to load regulatory.db [ 92.133370][ T5829] hsr_slave_0: entered promiscuous mode [ 92.140115][ T5829] hsr_slave_1: entered promiscuous mode [ 92.147773][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 92.153529][ T5829] Cannot create hsr debugfs directory [ 92.179605][ T5823] hsr_slave_0: entered promiscuous mode [ 92.186442][ T5823] hsr_slave_1: entered promiscuous mode [ 92.192836][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 92.198849][ T5823] Cannot create hsr debugfs directory [ 92.288999][ T5822] hsr_slave_0: entered promiscuous mode [ 92.297504][ T5822] hsr_slave_1: entered promiscuous mode [ 92.303756][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 92.310505][ T5822] Cannot create hsr debugfs directory [ 92.853605][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.870639][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.882028][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.902679][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.969285][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.996432][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.008855][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.032342][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.126850][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.144248][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.157249][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.170086][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.215067][ T5835] Bluetooth: hci0: command tx timeout [ 93.283636][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.295676][ T5835] Bluetooth: hci2: command tx timeout [ 93.297260][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.301131][ T5835] Bluetooth: hci3: command tx timeout [ 93.311479][ T5837] Bluetooth: hci1: command tx timeout [ 93.350785][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.361917][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.375843][ T5837] Bluetooth: hci4: command tx timeout [ 93.442868][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.478789][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.491146][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.502929][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.517624][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.558378][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.596713][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.633374][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.640730][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.667194][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.683179][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.690404][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.741924][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.751702][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.758897][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.776287][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.783555][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.843195][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.879619][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.886892][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.952625][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.962829][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.970180][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.082332][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.144093][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.164090][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.171345][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.232106][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.239397][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.335922][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.368761][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.409818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.417077][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.459600][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.466875][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.682252][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.693300][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.720587][ T5821] veth0_vlan: entered promiscuous mode [ 94.801397][ T5821] veth1_vlan: entered promiscuous mode [ 94.944746][ T5823] veth0_vlan: entered promiscuous mode [ 94.959318][ T5829] veth0_vlan: entered promiscuous mode [ 94.977778][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.008540][ T5821] veth0_macvtap: entered promiscuous mode [ 95.030420][ T5823] veth1_vlan: entered promiscuous mode [ 95.064038][ T5829] veth1_vlan: entered promiscuous mode [ 95.086263][ T5821] veth1_macvtap: entered promiscuous mode [ 95.153911][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.189481][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.212890][ T5823] veth0_macvtap: entered promiscuous mode [ 95.250563][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.262235][ T5829] veth0_macvtap: entered promiscuous mode [ 95.283452][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.292788][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.302112][ T5837] Bluetooth: hci0: command tx timeout [ 95.309306][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.322295][ T5823] veth1_macvtap: entered promiscuous mode [ 95.338745][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.373390][ T5829] veth1_macvtap: entered promiscuous mode [ 95.379651][ T5837] Bluetooth: hci1: command tx timeout [ 95.381706][ T5835] Bluetooth: hci3: command tx timeout [ 95.390612][ T5837] Bluetooth: hci2: command tx timeout [ 95.455229][ T5835] Bluetooth: hci4: command tx timeout [ 95.471098][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.512591][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.527860][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.565641][ T2970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.593612][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.603007][ T2970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613302][ T2970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.634147][ T5822] veth0_vlan: entered promiscuous mode [ 95.649223][ T2970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.659233][ T2970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.709529][ T2970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.719928][ T2970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.742790][ T5838] veth0_vlan: entered promiscuous mode [ 95.753316][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.759315][ T5838] veth1_vlan: entered promiscuous mode [ 95.767759][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.778102][ T2970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.798861][ T5822] veth1_vlan: entered promiscuous mode [ 95.858213][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.870769][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.951839][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.971366][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.991728][ T5838] veth0_macvtap: entered promiscuous mode [ 95.993685][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.008239][ T5838] veth1_macvtap: entered promiscuous mode [ 96.047138][ T5822] veth0_macvtap: entered promiscuous mode [ 96.132254][ T5822] veth1_macvtap: entered promiscuous mode [ 96.140719][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.158057][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.190694][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.216964][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.226594][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.236245][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.251870][ T3511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265452][ T3511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282745][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.291167][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.309900][ T3511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.319012][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.341865][ T2970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.380156][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.419139][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.430721][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482999][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.512937][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.747418][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.778539][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.827859][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.836384][ T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.856763][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.876590][ T5954] ======================================================= [ 96.876590][ T5954] WARNING: The mand mount option has been deprecated and [ 96.876590][ T5954] and is ignored by this kernel. Remove the mand [ 96.876590][ T5954] option from the mount to silence this warning. [ 96.876590][ T5954] ======================================================= [ 96.897565][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.940941][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.007264][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.015457][ T794] usb 1-1: Using ep0 maxpacket: 32 [ 97.024118][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.040610][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.070496][ T794] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 97.090464][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.115940][ T794] usb 1-1: Product: syz [ 97.120171][ T794] usb 1-1: Manufacturer: syz [ 97.165893][ T794] usb 1-1: SerialNumber: syz [ 97.206450][ T794] usb 1-1: config 0 descriptor?? [ 97.380195][ T5835] Bluetooth: hci0: command tx timeout [ 97.455484][ T5835] Bluetooth: hci3: command tx timeout [ 97.455564][ T5830] Bluetooth: hci2: command tx timeout [ 97.460999][ T5837] Bluetooth: hci1: command tx timeout [ 97.542028][ T5835] Bluetooth: hci4: command tx timeout [ 97.641172][ T5968] vivid-000: ================= START STATUS ================= [ 97.649217][ T5968] vivid-000: Test Pattern: 75% Colorbar [ 97.659955][ T5968] vivid-000: Fill Percentage of Frame: 100 [ 97.668053][ T5968] vivid-000: Horizontal Movement: No Movement [ 97.677271][ T5968] vivid-000: Vertical Movement: No Movement [ 97.685359][ T5968] vivid-000: OSD Text Mode: All [ 97.690457][ T5968] vivid-000: Show Border: false [ 97.708258][ T5968] vivid-000: Show Square: false [ 97.713912][ T794] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 97.721084][ T5968] vivid-000: Sensor Flipped Horizontally: false [ 97.728302][ T5968] vivid-000: Sensor Flipped Vertically: false [ 97.736379][ T5968] vivid-000: Insert SAV Code in Image: false [ 97.747760][ T5968] vivid-000: Insert EAV Code in Image: false [ 97.754085][ T5968] vivid-000: Insert Video Guard Band: false [ 97.761290][ T5968] vivid-000: Reduced Framerate: false [ 97.768962][ T5968] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 97.777811][ T5968] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 97.786941][ T5968] vivid-000: Enable Capture Cropping: true grabbed [ 97.793637][ T5968] vivid-000: Enable Capture Composing: true grabbed [ 97.801002][ T5968] vivid-000: Enable Capture Scaler: true grabbed [ 97.810155][ T5968] vivid-000: Timestamp Source: End of Frame [ 97.835451][ T5968] vivid-000: Colorspace: sRGB [ 97.856455][ T5968] vivid-000: Transfer Function: Default [ 97.895359][ T793] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.903392][ T5968] vivid-000: Y'CbCr Encoding: Default [ 97.944059][ T5968] vivid-000: HSV Encoding: Hue 0-179 [ 97.964306][ T5968] vivid-000: Quantization: Default [ 97.973487][ T5968] vivid-000: Apply Alpha To Red Only: false [ 97.981744][ T5968] vivid-000: Standard Aspect Ratio: 4x3 [ 97.987588][ T5968] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 97.996649][ T5968] vivid-000: DV Timings: 640x480p59 inactive [ 98.002720][ T5968] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 98.011856][ T5968] vivid-000: Maximum EDID Blocks: 2 [ 98.018950][ T5968] vivid-000: Limited RGB Range (16-235): false [ 98.048150][ T5968] vivid-000: Rx RGB Quantization Range: Automatic [ 98.062493][ T5968] vivid-000: Power Present: 0x00000001 [ 98.071733][ T5968] tpg source WxH: 320x240 (Y'CbCr) [ 98.078423][ T5968] tpg field: 1 [ 98.086770][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 98.092035][ T5968] tpg crop: (0,0)/320x240 [ 98.103850][ T5968] tpg compose: (0,0)/320x240 [ 98.109968][ T793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.129726][ T794] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 98.140400][ T5968] tpg colorspace: 8 [ 98.144359][ T793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.166572][ T5968] tpg transfer function: 0/2 [ 98.167086][ T794] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 98.171216][ T5968] tpg Y'CbCr encoding: 0/1 [ 98.171237][ T5968] tpg quantization: 0/2 [ 98.171250][ T5968] tpg RGB range: 0/2 [ 98.198309][ T5968] vivid-000: ================== END STATUS ================== [ 98.212592][ T793] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 98.232701][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.241722][ T793] usb 5-1: Product: syz [ 98.246546][ T793] usb 5-1: Manufacturer: syz [ 98.251199][ T793] usb 5-1: SerialNumber: syz [ 98.278304][ T794] usb 1-1: USB disconnect, device number 2 [ 98.298451][ T793] usb 5-1: config 0 descriptor?? [ 98.318180][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.552584][ T793] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 98.591810][ T5984] loop3: detected capacity change from 0 to 16 [ 98.617424][ T5984] erofs (device loop3): mounted with root inode @ nid 36. [ 98.650211][ T5984] syz.3.18: attempt to access beyond end of device [ 98.650211][ T5984] loop3: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 98.669826][ T5984] erofs (device loop3): read error -5 @ 87 of nid 36 [ 98.679095][ T5984] erofs (device loop3): failed to readdir of logical block 87 of nid 36 [ 98.974378][ T793] rc_core: IR keymap rc-imon-pad not found [ 98.980827][ T793] Registered IR keymap rc-empty [ 99.004621][ T793] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 99.056115][ T793] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 99.128477][ T793] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 99.149527][ T793] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 99.171349][ T5998] loop3: detected capacity change from 0 to 128 [ 99.183822][ T793] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:2> initialized [ 99.273006][ T5998] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 99.315601][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 99.316829][ T9] usb 5-1: USB disconnect, device number 2 [ 99.368686][ T5998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.440829][ T30] audit: type=1800 audit(1762772028.361:2): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22" name="file2" dev="loop3" ino=95 res=0 errno=0 [ 100.047330][ T6019] loop2: detected capacity change from 0 to 128 [ 100.086682][ T6019] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 100.118565][ T6019] hpfs: filesystem error: improperly stopped [ 100.136787][ T6019] hpfs: You really don't want any checks? You are crazy... [ 100.154808][ T6019] hpfs: hpfs_map_sector(): read error [ 100.174594][ T6019] hpfs: code page support is disabled [ 100.187878][ T6019] hpfs: hpfs_map_4sectors(): unaligned read [ 100.204315][ T6019] hpfs: hpfs_map_4sectors(): unaligned read [ 100.220579][ T6019] hpfs: filesystem error: unable to find root dir [ 100.445320][ T6002] loop1: detected capacity change from 0 to 40427 [ 100.501772][ T6002] F2FS-fs (loop1): invalid crc value [ 100.579236][ T6027] loop4: detected capacity change from 0 to 1024 [ 100.857391][ T6002] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 100.898213][ T6002] F2FS-fs (loop1): Start checkpoint disabled! [ 100.908070][ T36] hfsplus: b-tree write err: -5, ino 4 [ 100.911279][ T6015] loop0: detected capacity change from 0 to 32768 [ 100.956703][ T6002] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 100.997755][ T6002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 101.098351][ T9] kernel read not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 101.150390][ T6015] overlayfs: upper fs needs to support d_type. [ 101.187976][ T6015] overlayfs: upper fs does not support tmpfile. [ 101.212101][ T6015] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.251773][ T5821] syz-executor: attempt to access beyond end of device [ 101.251773][ T5821] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 101.257878][ T6015] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 101.257878][ T6015] [ 101.311338][ T6015] ERROR: (device loop0): remounting filesystem as read-only [ 101.336873][ T5821] syz-executor: attempt to access beyond end of device [ 101.336873][ T5821] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 101.357346][ T6015] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 101.379645][ T6044] netlink: 71 bytes leftover after parsing attributes in process `syz.3.43'. [ 101.413402][ T6042] bond1: option xmit_hash_policy: invalid value (9) [ 101.431906][ T6042] bond1 (unregistering): Released all slaves [ 101.452020][ T36] kworker/u8:2: attempt to access beyond end of device [ 101.452020][ T36] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 101.505997][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 101.506026][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.506040][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 101.506080][ T36] Call Trace: [ 101.506092][ T36] [ 101.506101][ T36] dump_stack_lvl+0x189/0x250 [ 101.506132][ T36] ? preempt_schedule_thunk+0x16/0x30 [ 101.506160][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.506191][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 101.506217][ T36] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 101.506246][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.506287][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 101.506326][ T36] f2fs_write_end_io+0x886/0xb60 [ 101.506369][ T36] __submit_merged_bio+0x27a/0x6a0 [ 101.506405][ T36] __submit_merged_write_cond+0x255/0x530 [ 101.506445][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 101.506503][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.506540][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 101.506611][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 101.506658][ T36] ? trace_f2fs_writepages+0x7f/0x200 [ 101.506690][ T36] ? f2fs_write_node_pages+0x478/0x6e0 [ 101.506726][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 101.506771][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.506794][ T36] do_writepages+0x32e/0x550 [ 101.506830][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 101.506858][ T36] ? writeback_sb_inodes+0x3bc/0x1950 [ 101.506892][ T36] __writeback_single_inode+0x143/0x12d0 [ 101.506920][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 101.506951][ T36] writeback_sb_inodes+0x984/0x1950 [ 101.507011][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 101.507084][ T36] ? rcu_is_watching+0x15/0xb0 [ 101.507126][ T36] wb_writeback+0x43b/0xaf0 [ 101.507160][ T36] ? queue_io+0x3c1/0x590 [ 101.507190][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 101.507226][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.507258][ T36] wb_workfn+0x409/0xef0 [ 101.507297][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 101.507325][ T36] ? __lock_acquire+0xab9/0xd20 [ 101.507363][ T36] ? process_one_work+0x868/0x15d0 [ 101.507395][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.507426][ T36] ? process_one_work+0x868/0x15d0 [ 101.507450][ T36] process_one_work+0x94a/0x15d0 [ 101.507474][ T36] ? __lock_acquire+0xab9/0xd20 [ 101.507523][ T36] ? __pfx_process_one_work+0x10/0x10 [ 101.507566][ T36] ? assign_work+0x3a1/0x410 [ 101.507598][ T36] worker_thread+0x9b0/0xee0 [ 101.507653][ T36] kthread+0x711/0x8a0 [ 101.507676][ T36] ? __pfx_worker_thread+0x10/0x10 [ 101.507702][ T36] ? __pfx_kthread+0x10/0x10 [ 101.507723][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.507750][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.507778][ T36] ? __pfx_kthread+0x10/0x10 [ 101.507798][ T36] ret_from_fork+0x599/0xb30 [ 101.507826][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 101.507863][ T36] ? __switch_to_asm+0x39/0x70 [ 101.507882][ T36] ? __switch_to_asm+0x33/0x70 [ 101.507900][ T36] ? __pfx_kthread+0x10/0x10 [ 101.507921][ T36] ret_from_fork_asm+0x1a/0x30 [ 101.507961][ T36] [ 101.513810][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 101.985009][ T6035] loop2: detected capacity change from 0 to 32768 [ 102.044550][ T6035] (syz.2.39,6035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.105232][ T6035] (syz.2.39,6035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.120010][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 102.120038][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.120051][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 102.120081][ T36] Call Trace: [ 102.120089][ T36] [ 102.120097][ T36] dump_stack_lvl+0x189/0x250 [ 102.120134][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.120165][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 102.120192][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.120221][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.120263][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 102.120303][ T36] f2fs_write_end_io+0x886/0xb60 [ 102.120345][ T36] __submit_merged_bio+0x27a/0x6a0 [ 102.120384][ T36] __submit_merged_write_cond+0x255/0x530 [ 102.120423][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 102.120482][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.120527][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 102.120590][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 102.120637][ T36] ? trace_f2fs_writepages+0x7f/0x200 [ 102.120669][ T36] ? f2fs_write_node_pages+0x478/0x6e0 [ 102.120705][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 102.120750][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.120773][ T36] do_writepages+0x32e/0x550 [ 102.120809][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 102.120839][ T36] ? writeback_sb_inodes+0x3bc/0x1950 [ 102.120874][ T36] __writeback_single_inode+0x143/0x12d0 [ 102.120903][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 102.120929][ T36] writeback_sb_inodes+0x984/0x1950 [ 102.120989][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 102.121062][ T36] ? rcu_is_watching+0x15/0xb0 [ 102.121103][ T36] wb_writeback+0x43b/0xaf0 [ 102.121138][ T36] ? queue_io+0x3c1/0x590 [ 102.121168][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 102.121204][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.121237][ T36] wb_workfn+0x409/0xef0 [ 102.121276][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 102.121304][ T36] ? __lock_acquire+0xab9/0xd20 [ 102.121342][ T36] ? process_one_work+0x868/0x15d0 [ 102.121374][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.121406][ T36] ? process_one_work+0x868/0x15d0 [ 102.121430][ T36] process_one_work+0x94a/0x15d0 [ 102.121454][ T36] ? __lock_acquire+0xab9/0xd20 [ 102.121503][ T36] ? __pfx_process_one_work+0x10/0x10 [ 102.121547][ T36] ? assign_work+0x3a1/0x410 [ 102.121578][ T36] worker_thread+0x9b0/0xee0 [ 102.121635][ T36] kthread+0x711/0x8a0 [ 102.121658][ T36] ? __pfx_worker_thread+0x10/0x10 [ 102.121685][ T36] ? __pfx_kthread+0x10/0x10 [ 102.121706][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.121733][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.121760][ T36] ? __pfx_kthread+0x10/0x10 [ 102.121780][ T36] ret_from_fork+0x599/0xb30 [ 102.121809][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 102.121846][ T36] ? __switch_to_asm+0x39/0x70 [ 102.121865][ T36] ? __switch_to_asm+0x33/0x70 [ 102.121884][ T36] ? __pfx_kthread+0x10/0x10 [ 102.121904][ T36] ret_from_fork_asm+0x1a/0x30 [ 102.121945][ T36] [ 102.123549][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 102.452087][ T6052] loop0: detected capacity change from 0 to 512 [ 102.461577][ T6052] EXT4-fs: Ignoring removed oldalloc option [ 102.534213][ T6035] JBD2: Ignoring recovery information on journal [ 102.563988][ T6052] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.44: Parent and EA inode have the same ino 15 [ 102.670494][ T6050] loop4: detected capacity change from 0 to 32768 [ 102.678302][ T6052] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.686783][ T6050] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.46 (6050) [ 102.732192][ T6035] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.763499][ T6052] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.44: Parent and EA inode have the same ino 15 [ 102.839014][ T6052] EXT4-fs (loop0): 1 orphan inode deleted [ 102.847988][ T6052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.872792][ T6050] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.891301][ T6050] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm [ 102.894590][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.964002][ T5829] ocfs2: Unmounting device (7,2) on (node local) [ 103.060390][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.086464][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 103.102676][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 103.124638][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 103.146525][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.161076][ T9] usb 4-1: config 220 has no interface number 2 [ 103.172632][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 103.186909][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 103.189409][ T6050] BTRFS info (device loop4): enabling ssd optimizations [ 103.202604][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 103.209904][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 103.246960][ T6050] BTRFS info (device loop4): turning on async discard [ 103.247209][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 103.253786][ T6050] BTRFS info (device loop4): enabling free space tree [ 103.322051][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.371631][ T9] usb 4-1: Product: syz [ 103.396218][ T9] usb 4-1: Manufacturer: syz [ 103.415498][ T9] usb 4-1: SerialNumber: syz [ 103.456890][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.622843][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.675696][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 103.719760][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 103.727543][ T5838] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 103.747090][ T9] usb 4-1: selecting invalid altsetting 0 [ 103.819794][ T9] usb 4-1: selecting invalid altsetting 0 [ 103.848198][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 103.895002][ T9] usb 4-1: USB disconnect, device number 2 [ 103.952305][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.306457][ T793] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.429233][ T36] bridge_slave_1: left allmulticast mode [ 104.458850][ T36] bridge_slave_1: left promiscuous mode [ 104.486323][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.499218][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 104.510861][ T793] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.532497][ T793] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.552854][ T793] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.569681][ T793] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 104.589711][ T36] bridge_slave_0: left allmulticast mode [ 104.605829][ T36] bridge_slave_0: left promiscuous mode [ 104.623807][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.635569][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.670632][ T793] usb 3-1: config 0 descriptor?? [ 105.022696][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.037930][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.052946][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.073128][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.082140][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.178948][ T793] chicony 0003:04F2:1236.0001: unknown main item tag 0x0 [ 105.240485][ T793] chicony 0003:04F2:1236.0001: unknown main item tag 0x0 [ 105.284579][ T793] chicony 0003:04F2:1236.0001: unknown main item tag 0x0 [ 105.309869][ T6082] loop0: detected capacity change from 0 to 32768 [ 105.326330][ T793] chicony 0003:04F2:1236.0001: unknown main item tag 0x0 [ 105.333821][ T793] chicony 0003:04F2:1236.0001: unknown main item tag 0x0 [ 105.373843][ T793] chicony 0003:04F2:1236.0001: unknown main item tag 0x0 [ 105.405435][ T793] chicony 0003:04F2:1236.0001: item fetching failed at offset 6/7 [ 105.446304][ T6082] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.456784][ T793] chicony 0003:04F2:1236.0001: Chicony hid parse failed: -22 [ 105.464274][ T793] chicony 0003:04F2:1236.0001: probe with driver chicony failed with error -22 [ 105.513498][ T793] usb 3-1: USB disconnect, device number 2 [ 105.610079][ T6112] loop3: detected capacity change from 0 to 4096 [ 105.687651][ T6082] XFS (loop0): Ending clean mount [ 105.770846][ T6082] XFS (loop0): Quotacheck needed: Please wait. [ 105.850808][ T6112] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 105.904921][ T6082] XFS (loop0): Quotacheck: Done. [ 105.936731][ T6082] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.968435][ T6112] ntfs3(loop3): Failed to load $Extend (-22). [ 105.999060][ T6112] ntfs3(loop3): Failed to initialize $Extend. [ 106.111514][ T6124] loop2: detected capacity change from 0 to 128 [ 106.228572][ T6097] loop4: detected capacity change from 0 to 32768 [ 106.315142][ T6097] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 106.329827][ T6097] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.467881][ T6097] XFS (loop4): Ending clean mount [ 106.527558][ T6097] XFS (loop4): Quotacheck needed: Please wait. [ 106.626136][ T6097] XFS (loop4): Quotacheck: Done. [ 106.742345][ T6138] mmap: syz.0.64 (6138) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.799180][ T5838] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.905447][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.995333][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.044391][ T36] bond0 (unregistering): Released all slaves [ 107.144595][ T5837] Bluetooth: hci0: command tx timeout [ 107.185094][ T6146] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.499203][ T6131] loop3: detected capacity change from 0 to 32768 [ 107.534683][ T6131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.62 (6131) [ 107.591558][ T6131] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.604020][ T6131] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 107.785666][ T6131] BTRFS info (device loop3): enabling ssd optimizations [ 107.805713][ T6131] BTRFS info (device loop3): turning on async discard [ 107.812550][ T6131] BTRFS info (device loop3): enabling free space tree [ 108.315156][ T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 108.434109][ T5822] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.624050][ T6148] loop4: detected capacity change from 0 to 40427 [ 108.694516][ T6148] F2FS-fs (loop4): Image doesn't support compression [ 108.701722][ T6148] F2FS-fs (loop4): build fault injection rate: 690 [ 108.797630][ T6148] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 108.882288][ T6148] F2FS-fs (loop4): invalid crc value [ 109.171309][ T6148] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.214280][ T6148] F2FS-fs (loop4): Start checkpoint disabled! [ 109.230855][ T5837] Bluetooth: hci0: command tx timeout [ 109.257022][ T6148] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 109.274462][ T6148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 109.349856][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.510148][ T6152] loop0: detected capacity change from 0 to 40427 [ 109.599870][ T6152] F2FS-fs (loop0): invalid crc value [ 109.898461][ T36] hsr_slave_0: left promiscuous mode [ 109.930360][ T36] hsr_slave_1: left promiscuous mode [ 109.948864][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.951867][ T3511] kworker/u8:6: attempt to access beyond end of device [ 109.951867][ T3511] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.974638][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.976813][ T6152] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.010671][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.038198][ T3511] CPU: 0 UID: 0 PID: 3511 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 110.038227][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.038240][ T3511] Workqueue: writeback wb_workfn (flush-7:4) [ 110.038271][ T3511] Call Trace: [ 110.038279][ T3511] [ 110.038287][ T3511] dump_stack_lvl+0x189/0x250 [ 110.038324][ T3511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.038355][ T3511] ? __pfx_queue_work_on+0x10/0x10 [ 110.038381][ T3511] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 110.038409][ T3511] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.038449][ T3511] f2fs_handle_critical_error+0x37c/0x540 [ 110.038488][ T3511] f2fs_write_end_io+0x886/0xb60 [ 110.038529][ T3511] __submit_merged_bio+0x27a/0x6a0 [ 110.038566][ T3511] __submit_merged_write_cond+0x255/0x530 [ 110.038602][ T3511] f2fs_write_data_pages+0x261d/0x3000 [ 110.038659][ T3511] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.038688][ T3511] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 110.038737][ T3511] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 110.038774][ T3511] ? trace_f2fs_writepages+0x7f/0x200 [ 110.038801][ T3511] ? f2fs_write_node_pages+0x478/0x6e0 [ 110.038830][ T3511] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 110.038866][ T3511] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.038884][ T3511] do_writepages+0x32e/0x550 [ 110.038914][ T3511] ? reacquire_held_locks+0x127/0x1d0 [ 110.038938][ T3511] ? writeback_sb_inodes+0x3bc/0x1950 [ 110.038966][ T3511] __writeback_single_inode+0x143/0x12d0 [ 110.038989][ T3511] ? do_raw_spin_unlock+0x122/0x240 [ 110.039010][ T3511] writeback_sb_inodes+0x984/0x1950 [ 110.039057][ T3511] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 110.039114][ T3511] ? rcu_is_watching+0x15/0xb0 [ 110.039154][ T3511] wb_writeback+0x43b/0xaf0 [ 110.039183][ T3511] ? queue_io+0x3c1/0x590 [ 110.039206][ T3511] ? __pfx_wb_writeback+0x10/0x10 [ 110.039235][ T3511] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.039261][ T3511] wb_workfn+0x409/0xef0 [ 110.039292][ T3511] ? __pfx_wb_workfn+0x10/0x10 [ 110.039314][ T3511] ? __lock_acquire+0xab9/0xd20 [ 110.039344][ T3511] ? process_one_work+0x868/0x15d0 [ 110.039370][ T3511] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.039395][ T3511] ? process_one_work+0x868/0x15d0 [ 110.039415][ T3511] process_one_work+0x94a/0x15d0 [ 110.039434][ T3511] ? __lock_acquire+0xab9/0xd20 [ 110.039472][ T3511] ? __pfx_process_one_work+0x10/0x10 [ 110.039501][ T3511] ? assign_work+0x3a1/0x410 [ 110.039528][ T3511] worker_thread+0x9b0/0xee0 [ 110.039573][ T3511] kthread+0x711/0x8a0 [ 110.039591][ T3511] ? __pfx_worker_thread+0x10/0x10 [ 110.039612][ T3511] ? __pfx_kthread+0x10/0x10 [ 110.039629][ T3511] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.039651][ T3511] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.039673][ T3511] ? __pfx_kthread+0x10/0x10 [ 110.039689][ T3511] ret_from_fork+0x599/0xb30 [ 110.039713][ T3511] ? __pfx_ret_from_fork+0x10/0x10 [ 110.039742][ T3511] ? __switch_to_asm+0x39/0x70 [ 110.039757][ T3511] ? __switch_to_asm+0x33/0x70 [ 110.039772][ T3511] ? __pfx_kthread+0x10/0x10 [ 110.039788][ T3511] ret_from_fork_asm+0x1a/0x30 [ 110.039820][ T3511] [ 110.039831][ T3511] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 110.054540][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.344772][ T6152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 110.391803][ T36] veth1_macvtap: left promiscuous mode [ 110.401979][ T36] veth0_macvtap: left promiscuous mode [ 110.434787][ T36] veth1_vlan: left promiscuous mode [ 110.442124][ T36] veth0_vlan: left promiscuous mode [ 110.531263][ T6202] netlink: 'syz.3.78': attribute type 3 has an invalid length. [ 110.556589][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 110.566943][ T5823] syz-executor: attempt to access beyond end of device [ 110.566943][ T5823] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.603121][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 110.603151][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.603164][ T5823] Call Trace: [ 110.603173][ T5823] [ 110.603182][ T5823] dump_stack_lvl+0x189/0x250 [ 110.603224][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.603256][ T5823] ? __pfx_queue_work_on+0x10/0x10 [ 110.603283][ T5823] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 110.603313][ T5823] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.603358][ T5823] f2fs_handle_critical_error+0x37c/0x540 [ 110.603400][ T5823] f2fs_write_end_io+0x886/0xb60 [ 110.603448][ T5823] __submit_merged_bio+0x27a/0x6a0 [ 110.603489][ T5823] __submit_merged_write_cond+0x255/0x530 [ 110.603531][ T5823] f2fs_write_data_pages+0x261d/0x3000 [ 110.603598][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.603722][ T5823] ? __lock_acquire+0xab9/0xd20 [ 110.603762][ T5823] ? do_raw_spin_lock+0x121/0x290 [ 110.603799][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 110.603830][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.603854][ T5823] do_writepages+0x32e/0x550 [ 110.603899][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 110.603927][ T5823] filemap_fdatawrite+0x199/0x240 [ 110.603958][ T5823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 110.604053][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 110.604081][ T5823] f2fs_sync_dirty_inodes+0x31f/0x830 [ 110.604125][ T5823] f2fs_write_checkpoint+0x93e/0x2440 [ 110.604149][ T5823] ? __lock_acquire+0xab9/0xd20 [ 110.604214][ T5823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 110.604314][ T5823] kill_f2fs_super+0x2cc/0x6d0 [ 110.604347][ T5823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 110.604395][ T5823] ? shrinker_free+0x2ce/0x3e0 [ 110.604424][ T5823] deactivate_locked_super+0xbc/0x130 [ 110.604450][ T5823] cleanup_mnt+0x425/0x4c0 [ 110.604471][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.604504][ T5823] task_work_run+0x1d4/0x260 [ 110.604531][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 110.604561][ T5823] ? exit_to_user_mode_loop+0x55/0x4f0 [ 110.604592][ T5823] exit_to_user_mode_loop+0xff/0x4f0 [ 110.604617][ T5823] ? rcu_is_watching+0x15/0xb0 [ 110.604653][ T5823] do_syscall_64+0x2e9/0xfa0 [ 110.604684][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.604704][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 110.604730][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.604749][ T5823] RIP: 0033:0x7fc42f3909f7 [ 110.604781][ T5823] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 110.604798][ T5823] RSP: 002b:00007ffe278e1928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 110.604827][ T5823] RAX: 0000000000000000 RBX: 00007fc42f411d7d RCX: 00007fc42f3909f7 [ 110.604841][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe278e19e0 [ 110.604853][ T5823] RBP: 00007ffe278e19e0 R08: 0000000000000000 R09: 0000000000000000 [ 110.604864][ T5823] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe278e2a70 [ 110.604877][ T5823] R13: 00007fc42f411d7d R14: 000000000001af98 R15: 00007ffe278e2ab0 [ 110.604918][ T5823] [ 110.922471][ T5823] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.984201][ T6206] loop3: detected capacity change from 0 to 2048 [ 111.078811][ T5832] loop3: p1 < > p4 [ 111.101069][ T5832] loop3: p4 start 42180 is beyond EOD, truncated [ 111.137352][ T6206] loop3: p1 < > p4 [ 111.170277][ T6206] loop3: p4 start 42180 is beyond EOD, truncated [ 111.223753][ T6208] loop4: detected capacity change from 0 to 64 [ 111.300616][ T5837] Bluetooth: hci0: command tx timeout [ 111.619243][ T6211] binder: 6210:6211 ioctl c0306201 200000000640 returned -22 [ 112.051474][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.4.88'. [ 112.093538][ T36] team0 (unregistering): Port device team_slave_1 removed [ 112.151567][ T6229] loop4: detected capacity change from 0 to 512 [ 112.166899][ T36] team0 (unregistering): Port device team_slave_0 removed [ 112.182692][ T6229] EXT4-fs (loop4): Test dummy encryption mode enabled [ 112.204482][ T6229] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.221734][ T6229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.240070][ T6229] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.89: corrupted xattr entries [ 112.269658][ T6229] EXT4-fs (loop4): 1 orphan inode deleted [ 112.277953][ T6229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.315215][ T6229] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 112.333466][ T30] audit: type=1800 audit(1762772041.261:3): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.89" name="file2" dev="loop4" ino=15 res=0 errno=0 [ 112.405946][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.106613][ T6249] loop6: detected capacity change from 0 to 524287999 [ 113.141455][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.260501][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.306608][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.321254][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 113.350049][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.374824][ T5837] Bluetooth: hci0: command tx timeout [ 113.380503][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.389027][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.397141][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.405249][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.415032][ T6249] ldm_validate_partition_table(): Disk read failed. [ 113.421956][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.443153][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.451789][ T6249] Dev loop6: unable to read RDB block 0 [ 113.475146][ T6249] loop6: unable to read partition table [ 113.501073][ T6249] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 113.521070][ T5832] ldm_validate_partition_table(): Disk read failed. [ 113.528694][ T6259] loop4: detected capacity change from 0 to 64 [ 113.541872][ T5832] Dev loop6: unable to read RDB block 0 [ 113.590476][ T5832] loop6: unable to read partition table [ 113.623648][ T6262] loop3: detected capacity change from 0 to 512 [ 113.626671][ T6252] ldm_validate_partition_table(): Disk read failed. [ 113.652705][ T6252] Dev loop6: unable to read RDB block 0 [ 113.667621][ T6252] loop6: unable to read partition table [ 113.673430][ T6262] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.684359][ T6252] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 113.739104][ T6262] EXT4-fs (loop3): 1 truncate cleaned up [ 113.803093][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.056447][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.451921][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.493558][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.533327][ T6102] bridge_slave_0: entered allmulticast mode [ 114.543496][ T6102] bridge_slave_0: entered promiscuous mode [ 114.575102][ T6283] tap0: tun_chr_ioctl cmd 1074025677 [ 114.580688][ T6283] tap0: linktype set to 270 [ 114.614983][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.622262][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.664767][ T6102] bridge_slave_1: entered allmulticast mode [ 114.672901][ T6102] bridge_slave_1: entered promiscuous mode [ 115.024172][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.077328][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.105578][ T6302] loop4: detected capacity change from 0 to 1024 [ 115.471956][ T6102] team0: Port device team_slave_0 added [ 115.497114][ T6102] team0: Port device team_slave_1 added [ 115.596361][ T6312] loop0: detected capacity change from 0 to 2048 [ 115.628788][ T6312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.715157][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.734895][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.775166][ T6317] netlink: 'syz.2.119': attribute type 64 has an invalid length. [ 115.783361][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.850962][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.915092][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.042675][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.069961][ T6320] loop4: detected capacity change from 0 to 4096 [ 116.236140][ T6320] ntfs3(loop4): ino=18, mi_enum_attr [ 116.251810][ T6320] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 116.269711][ T6320] ntfs3(loop4): ino=1a, mi_enum_attr [ 116.813453][ T6335] loop2: detected capacity change from 0 to 32768 [ 116.854619][ T6335] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.925590][ T6332] tun0: tun_chr_ioctl cmd 1074025675 [ 116.932211][ T6332] tun0: persist disabled [ 116.970894][ T6335] XFS (loop2): Ending clean mount [ 117.016918][ T6335] XFS (loop2): Quotacheck needed: Please wait. [ 117.066341][ T36] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 117.178680][ T6335] XFS (loop2): Quotacheck: Done. [ 117.343209][ T6102] hsr_slave_0: entered promiscuous mode [ 117.355006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 117.415271][ T6102] hsr_slave_1: entered promiscuous mode [ 117.499918][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.877210][ T6368] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 118.181702][ T6377] loop3: detected capacity change from 0 to 256 [ 118.602414][ T6102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.625487][ T6384] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 118.682991][ T6384] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.704782][ T6102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.729599][ T6102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.789665][ T6102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.832957][ T6366] loop4: detected capacity change from 0 to 32768 [ 118.865340][ T6366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.133 (6366) [ 118.962839][ T6366] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.004451][ T6366] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 119.161869][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.212131][ T6366] BTRFS info (device loop4): rebuilding free space tree [ 119.290637][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.302150][ T6366] BTRFS info (device loop4): disabling free space tree [ 119.330541][ T6366] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.367879][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.368807][ T6366] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.375182][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.419796][ T6366] BTRFS info (device loop4): enabling ssd optimizations [ 119.440970][ T6366] BTRFS info (device loop4): turning on async discard [ 119.455350][ T6378] loop0: detected capacity change from 0 to 40427 [ 119.456772][ T6381] loop2: detected capacity change from 0 to 32768 [ 119.468420][ T6366] BTRFS info (device loop4): force clearing of disk cache [ 119.468447][ T6366] BTRFS info (device loop4): enabling auto defrag [ 119.468475][ T6366] BTRFS info (device loop4): max_inline set to 4096 [ 119.490915][ T6378] F2FS-fs (loop0): invalid crc value [ 119.496945][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.504292][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.574967][ T6381] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 119.574967][ T6381] [ 119.650757][ T6381] ERROR: (device loop2): remounting filesystem as read-only [ 119.723410][ T6381] jfs_lookup: dtSearch returned -5 [ 119.731046][ T30] audit: type=1800 audit(1762772048.631:4): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.133" name="file1" dev="loop4" ino=263 res=0 errno=0 [ 119.785969][ T6413] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 119.785969][ T6413] [ 119.883978][ T6378] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 119.962635][ T6378] F2FS-fs (loop0): Start checkpoint disabled! [ 120.030967][ T5838] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.041408][ T6378] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 120.080937][ T6378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 120.213566][ T30] audit: type=1800 audit(1762772049.131:5): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 120.324517][ T30] audit: type=1800 audit(1762772049.171:6): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 120.365961][ T5942] kworker/u8:7: attempt to access beyond end of device [ 120.365961][ T5942] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.458244][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 120.458274][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.458287][ T5942] Workqueue: writeback wb_workfn (flush-7:0) [ 120.458324][ T5942] Call Trace: [ 120.458332][ T5942] [ 120.458341][ T5942] dump_stack_lvl+0x189/0x250 [ 120.458379][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.458410][ T5942] ? __pfx_queue_work_on+0x10/0x10 [ 120.458437][ T5942] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 120.458474][ T5942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.458515][ T5942] f2fs_handle_critical_error+0x37c/0x540 [ 120.458555][ T5942] f2fs_write_end_io+0x886/0xb60 [ 120.458597][ T5942] __submit_merged_bio+0x27a/0x6a0 [ 120.458636][ T5942] __submit_merged_write_cond+0x255/0x530 [ 120.458675][ T5942] f2fs_write_data_pages+0x261d/0x3000 [ 120.458734][ T5942] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.458771][ T5942] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 120.458834][ T5942] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 120.458866][ T5942] ? register_lock_class+0x51/0x320 [ 120.458902][ T5942] ? trace_f2fs_writepages+0x7f/0x200 [ 120.458935][ T5942] ? f2fs_write_node_pages+0x478/0x6e0 [ 120.458979][ T5942] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 120.459024][ T5942] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.459046][ T5942] do_writepages+0x32e/0x550 [ 120.459081][ T5942] ? reacquire_held_locks+0x127/0x1d0 [ 120.459108][ T5942] ? writeback_sb_inodes+0x3bc/0x1950 [ 120.459136][ T5942] __writeback_single_inode+0x143/0x12d0 [ 120.459160][ T5942] ? do_raw_spin_unlock+0x122/0x240 [ 120.459181][ T5942] writeback_sb_inodes+0x984/0x1950 [ 120.459231][ T5942] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 120.459289][ T5942] ? rcu_is_watching+0x15/0xb0 [ 120.459322][ T5942] wb_writeback+0x43b/0xaf0 [ 120.459351][ T5942] ? queue_io+0x3c1/0x590 [ 120.459374][ T5942] ? __pfx_wb_writeback+0x10/0x10 [ 120.459401][ T5942] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.459429][ T5942] wb_workfn+0x409/0xef0 [ 120.459474][ T5942] ? __pfx_wb_workfn+0x10/0x10 [ 120.459503][ T5942] ? __lock_acquire+0xab9/0xd20 [ 120.459541][ T5942] ? process_one_work+0x868/0x15d0 [ 120.459574][ T5942] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.459605][ T5942] ? process_one_work+0x868/0x15d0 [ 120.459629][ T5942] process_one_work+0x94a/0x15d0 [ 120.459654][ T5942] ? __lock_acquire+0xab9/0xd20 [ 120.459703][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 120.459739][ T5942] ? assign_work+0x3a1/0x410 [ 120.459771][ T5942] worker_thread+0x9b0/0xee0 [ 120.459827][ T5942] kthread+0x711/0x8a0 [ 120.459850][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 120.459876][ T5942] ? __pfx_kthread+0x10/0x10 [ 120.459897][ T5942] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.459924][ T5942] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.459952][ T5942] ? __pfx_kthread+0x10/0x10 [ 120.459973][ T5942] ret_from_fork+0x599/0xb30 [ 120.460001][ T5942] ? __pfx_ret_from_fork+0x10/0x10 [ 120.460038][ T5942] ? __switch_to_asm+0x39/0x70 [ 120.460057][ T5942] ? __switch_to_asm+0x33/0x70 [ 120.460074][ T5942] ? __pfx_kthread+0x10/0x10 [ 120.460092][ T5942] ret_from_fork_asm+0x1a/0x30 [ 120.460128][ T5942] [ 120.460136][ T5942] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 120.683641][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.954585][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.125169][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.145018][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 121.173193][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.229174][ T10] usb 3-1: config 0 descriptor?? [ 121.302554][ T6441] program syz.4.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.648576][ T6447] loop4: detected capacity change from 0 to 2048 [ 121.654619][ T6449] loop0: detected capacity change from 0 to 512 [ 121.687172][ T6447] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 121.701159][ T10] kone 0003:1E7D:2CED.0002: collection stack underflow [ 121.706999][ T6102] veth0_vlan: entered promiscuous mode [ 121.743205][ T6102] veth1_vlan: entered promiscuous mode [ 121.750856][ T10] kone 0003:1E7D:2CED.0002: item 0 4 0 12 parsing failed [ 121.762560][ T6447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.788875][ T6449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.804845][ T6102] veth0_macvtap: entered promiscuous mode [ 121.815450][ T10] kone 0003:1E7D:2CED.0002: parse failed [ 121.815906][ T6102] veth1_macvtap: entered promiscuous mode [ 121.821229][ T10] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -22 [ 121.846092][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.861944][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.884257][ T6449] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.939990][ T5942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.958756][ T6449] capability: warning: `syz.0.143' uses deprecated v2 capabilities in a way that may be insecure [ 121.983722][ T5942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.003472][ T10] usb 3-1: USB disconnect, device number 3 [ 122.051228][ T6455] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.143: bg 0: block 145: padding at end of block bitmap is not set [ 122.076445][ T5942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.115673][ T5942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.251331][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.298500][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.319927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.382812][ T6457] loop3: detected capacity change from 0 to 4096 [ 122.415534][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.436719][ T6457] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 122.446254][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.496792][ T30] audit: type=1800 audit(1762772051.421:7): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 123.042708][ T6478] loop2: detected capacity change from 0 to 256 [ 123.362361][ T6488] loop5: detected capacity change from 0 to 2048 [ 123.447982][ T6488] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00 [ 123.474500][ T6488] UDF-fs: warning (device loop5): udf_fill_super: No fileset found [ 123.981067][ T6511] loop4: detected capacity change from 0 to 128 [ 124.074488][ T30] audit: type=1800 audit(1762772052.981:8): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 124.434784][ T6520] loop4: detected capacity change from 0 to 64 [ 124.513231][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.061062][ T6513] loop0: detected capacity change from 0 to 32768 [ 125.076354][ T6513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.174 (6513) [ 125.102843][ T6513] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.124316][ T6513] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 125.300396][ T6513] BTRFS info (device loop0): enabling ssd optimizations [ 125.341436][ T6513] BTRFS info (device loop0): turning on async discard [ 125.382625][ T6513] BTRFS info (device loop0): enabling free space tree [ 125.504696][ T6553] Illegal XDP return value 6553 on prog (id 17) dev N/A, expect packet loss! [ 125.587781][ T5823] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.799669][ T6506] loop2: detected capacity change from 0 to 65536 [ 125.810517][ T6560] netlink: 44 bytes leftover after parsing attributes in process `syz.5.185'. [ 125.837697][ T6560] Zero length message leads to an empty skb [ 125.856100][ T6506] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 125.879327][ T6506] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 126.052386][ T6506] XFS (loop2): Ending clean mount [ 126.068654][ T6506] XFS (loop2): Quotacheck needed: Please wait. [ 126.129154][ T2970] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 126.173244][ T2970] XFS (loop2): Unmount and run xfs_repair [ 126.213520][ T2970] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 126.244016][ T2970] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 126.265574][ T2970] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 126.276915][ T2970] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 126.288130][ T2970] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 126.297842][ T2970] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 126.312558][ T2970] 00000050: 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ................ [ 126.324081][ T2970] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.333763][ T2970] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 126.374867][ T2970] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x4 len 2 error 74 [ 126.415955][ T6506] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 126.666569][ T5829] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 126.690256][ T6578] loop0: detected capacity change from 0 to 128 [ 126.708203][ T5829] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 126.725725][ T6578] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.779871][ T6555] loop4: detected capacity change from 0 to 32768 [ 126.786089][ T6578] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.734367][ T6570] loop5: detected capacity change from 0 to 40427 [ 127.763037][ T6570] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 127.774622][ T6570] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 127.801556][ T6600] program syz.2.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.828809][ T6570] F2FS-fs (loop5): invalid crc value [ 127.874340][ T6605] process 'syz.0.202' launched './file1' with NULL argv: empty string added [ 128.140959][ T6570] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.192722][ T6570] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 128.212696][ T6570] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 128.423581][ T6623] loop2: detected capacity change from 0 to 128 [ 128.828822][ T6634] loop0: detected capacity change from 0 to 512 [ 129.478306][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 129.501286][ T6609] loop4: detected capacity change from 0 to 40427 [ 129.542835][ T6609] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 129.567493][ T6609] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 129.615968][ T6609] F2FS-fs (loop4): invalid crc value [ 129.709009][ T6657] warning: `syz.5.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.896365][ T6609] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 129.928069][ T6664] loop2: detected capacity change from 0 to 2048 [ 129.935724][ T6609] F2FS-fs (loop4): Start checkpoint disabled! [ 129.971747][ T6609] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 129.999699][ T6664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.044963][ T6609] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 130.077829][ T6609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 130.210550][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.274538][ T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.327759][ T2970] kworker/u8:5: attempt to access beyond end of device [ 130.327759][ T2970] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.374935][ T2970] CPU: 1 UID: 0 PID: 2970 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 130.374965][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.374979][ T2970] Workqueue: writeback wb_workfn (flush-7:4) [ 130.375033][ T2970] Call Trace: [ 130.375041][ T2970] [ 130.375051][ T2970] dump_stack_lvl+0x189/0x250 [ 130.375091][ T2970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.375123][ T2970] ? __pfx_queue_work_on+0x10/0x10 [ 130.375154][ T2970] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.375182][ T2970] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 130.375228][ T2970] f2fs_handle_critical_error+0x37c/0x540 [ 130.375270][ T2970] f2fs_write_end_io+0x886/0xb60 [ 130.375318][ T2970] __submit_merged_bio+0x27a/0x6a0 [ 130.375359][ T2970] __submit_merged_write_cond+0x255/0x530 [ 130.375401][ T2970] f2fs_write_data_pages+0x261d/0x3000 [ 130.375470][ T2970] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 130.375511][ T2970] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 130.375584][ T2970] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 130.375622][ T2970] ? register_lock_class+0x51/0x320 [ 130.375662][ T2970] ? trace_f2fs_writepages+0x7f/0x200 [ 130.375715][ T2970] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 130.375765][ T2970] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 130.375789][ T2970] do_writepages+0x32e/0x550 [ 130.375827][ T2970] ? reacquire_held_locks+0x127/0x1d0 [ 130.375856][ T2970] ? writeback_sb_inodes+0x3bc/0x1950 [ 130.375895][ T2970] __writeback_single_inode+0x143/0x12d0 [ 130.375925][ T2970] ? do_raw_spin_unlock+0x122/0x240 [ 130.375960][ T2970] writeback_sb_inodes+0x984/0x1950 [ 130.376030][ T2970] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 130.376116][ T2970] ? rcu_is_watching+0x15/0xb0 [ 130.376160][ T2970] wb_writeback+0x43b/0xaf0 [ 130.376199][ T2970] ? queue_io+0x3c1/0x590 [ 130.376231][ T2970] ? __pfx_wb_writeback+0x10/0x10 [ 130.376271][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.376306][ T2970] wb_workfn+0x409/0xef0 [ 130.376351][ T2970] ? __pfx_wb_workfn+0x10/0x10 [ 130.376405][ T2970] ? __lock_acquire+0xab9/0xd20 [ 130.376447][ T2970] ? process_one_work+0x868/0x15d0 [ 130.376483][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.376516][ T2970] ? process_one_work+0x868/0x15d0 [ 130.376540][ T2970] process_one_work+0x94a/0x15d0 [ 130.376565][ T2970] ? __lock_acquire+0xab9/0xd20 [ 130.376620][ T2970] ? __pfx_process_one_work+0x10/0x10 [ 130.376660][ T2970] ? assign_work+0x3a1/0x410 [ 130.376701][ T2970] worker_thread+0x9b0/0xee0 [ 130.376766][ T2970] kthread+0x711/0x8a0 [ 130.376790][ T2970] ? __pfx_worker_thread+0x10/0x10 [ 130.376817][ T2970] ? __pfx_kthread+0x10/0x10 [ 130.376838][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.376864][ T2970] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.376892][ T2970] ? __pfx_kthread+0x10/0x10 [ 130.376914][ T2970] ret_from_fork+0x599/0xb30 [ 130.376944][ T2970] ? __pfx_ret_from_fork+0x10/0x10 [ 130.376985][ T2970] ? __switch_to_asm+0x39/0x70 [ 130.377004][ T2970] ? __switch_to_asm+0x33/0x70 [ 130.377023][ T2970] ? __pfx_kthread+0x10/0x10 [ 130.377044][ T2970] ret_from_fork_asm+0x1a/0x30 [ 130.377091][ T2970] [ 130.383345][ T2970] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 130.726217][ T793] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.734284][ T793] usb 1-1: config 0 has no interface number 0 [ 130.756821][ T793] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.772529][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.814880][ T793] usb 1-1: Product: syz [ 130.819735][ T793] usb 1-1: Manufacturer: syz [ 130.824363][ T793] usb 1-1: SerialNumber: syz [ 130.865574][ T793] usb 1-1: config 0 descriptor?? [ 131.013261][ T6690] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 131.080021][ T793] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 131.099376][ T6667] loop5: detected capacity change from 0 to 32768 [ 131.109007][ T793] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.132663][ T793] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 131.159945][ T793] usb 1-1: media controller created [ 131.184008][ T6667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.219 (6667) [ 131.209035][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.251711][ T6667] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.292315][ T6667] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 131.326353][ T793] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 131.555022][ T6667] BTRFS info (device loop5): enabling ssd optimizations [ 131.602202][ T793] usb 1-1: USB disconnect, device number 3 [ 131.614822][ T6667] BTRFS info (device loop5): turning on async discard [ 131.646812][ T6667] BTRFS info (device loop5): enabling free space tree [ 131.656526][ T6708] loop2: detected capacity change from 0 to 1024 [ 131.827953][ T6708] hfsplus: xattr searching failed [ 131.874981][ T6708] hfsplus: xattr searching failed [ 131.916570][ T6102] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.337892][ T6724] syz.4.230 (6724) used greatest stack depth: 17752 bytes left [ 132.491538][ T6741] batadv_slave_1: entered promiscuous mode [ 132.530023][ T6740] batadv_slave_1: left promiscuous mode [ 132.881512][ T6748] loop4: detected capacity change from 0 to 4096 [ 132.955045][ T6748] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.000230][ T6748] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 133.030177][ T6760] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.055155][ T6748] System zones: 0-5 [ 133.096832][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.234188][ T6748] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 133.523965][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.779051][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 133.829585][ T6779] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 134.051611][ T6788] loop4: detected capacity change from 0 to 512 [ 134.093398][ T6786] loop0: detected capacity change from 0 to 4096 [ 134.181966][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.213802][ T6788] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.396977][ T6788] overlayfs: invalid origin (0000) [ 134.404503][ T6801] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.521725][ T30] audit: type=1800 audit(1762772063.441:9): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.249" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 134.732371][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.531604][ T6824] bad cache= option: none : x962(ecdsa-nist-p384) [ 135.531604][ T6824] driver : x962(ecdsa-nist-p384-generic) [ 135.531604][ T6824] module : kernel [ 135.531604][ T6824] priority : 100 [ 135.531604][ T6824] refcnt : 1 [ 135.531604][ T6824] selftest : passed [ 135.531604][ T6824] internal : no [ 135.531604][ T6824] type : sig [ 135.531604][ T6824] [ 135.531604][ T6824] name : pcbc(fcrypt) [ 135.531604][ T6824] driver : pcbc(fcrypt-generic) [ 135.531604][ T6824] module : kernel [ 135.531604][ T6824] priority : 0 [ 135.531604][ T6824] refcnt : 2 [ 135.531604][ T6824] selftest : passed [ 135.531604][ T6824] internal : no [ 135.531604][ T6824] type : skcipher [ 135.531604][ T6824] async : no [ 135.531604][ T6824] blocksize : 8 [ 135.531604][ T6824] min keysize : 8 [ 135.531604][ T6824] max keysize : 8 [ 135.531604][ T6824] ivsize : 8 [ 135.531604][ T6824] chunksize : 8 [ 135.531604][ T6824] walksize : 8 [ 135.531604][ T6824] statesize : 0 [ 135.531604][ T6824] [ 135.531604][ T6824] name : ecrdsa [ 135.531604][ T6824] driver : ecrdsa-generic [ 135.531604][ T6824] module : kernel [ 135.531604][ T6824] priority : 100 [ 135.531604][ T6824] refcnt : 1 [ 135.531604][ T6824] selftest : passed [ 135.531604][ T6824] internal : no [ 135.531604][ T6824] type : sig [ 135.531604][ T6824] [ 135.531604][ T6824] name : ecdh-nist-p384 [ 135.531604][ T6824] driver : ecdh-nist-p384-generic [ 135.531604][ T6824] module : kernel [ 135.531604][ T6824] priority : 100 [ 135.531604][ T6824] refcnt : 1 [ 135.531604][ T6824] selftest : passed [ 135.531604][ T6824] internal : no [ 135.531604][ T6824] type : kpp [ 135.531604][ T6824] [ 135.531604][ T6824] name : ecdh-nist-p256 [ 135.531604][ T6824] driver : ecdh-nist-p256-generic [ 135.532037][ T6824] CIFS: VFS: bad cache= option: none : x962(ecdsa-nist-p384) [ 135.532037][ T6824] driver : x962(ecdsa-nist-p384-generic) [ 135.532037][ T6824] module : kernel [ 135.532037][ T6824] priority : 100 [ 135.532037][ T6824] refcnt : 1 [ 135.532037][ T6824] selftest : passed [ 135.532037][ T6824] internal : no [ 135.532037][ T6824] type : sig [ 135.532037][ T6824] [ 135.532037][ T6824] name : pcbc(fcrypt) [ 135.532037][ T6824] driver : pcbc(fcrypt-generic) [ 135.532037][ T6824] module : kernel [ 135.532037][ T6824] priority : 0 [ 135.532037][ T6824] refcnt : 2 [ 135.532037][ T6824] selftest : passed [ 135.532037][ T6824] internal : no [ 135.532037][ T6824] type : skcipher [ 135.532037][ T6824] async : no [ 135.532037][ T6824] blocksize : 8 [ 135.532037][ T6824] min keysize : 8 [ 135.532037][ T6824] max keysize : 8 [ 135.532037][ T6824] ivsize : 8 [ 135.532037][ T6824] chunksize : 8 [ 135.532037][ T6824] walksize : 8 [ 135.532037][ T6824] statesize : 0 [ 135.532037][ T6824] [ 135.532037][ T6824] name : ecrdsa [ 135.532037][ T6824] driver : ecrdsa-generic [ 135.532037][ T6824] module : kernel [ 135.532037][ T6824] priority : 100 [ 135.532037][ T6824] refcnt : 1 [ 135.532037][ T6824] selftest : passed [ 135.532037][ T6824] internal : no [ 135.532037][ T6824] type : sig [ 135.532037][ T6824] [ 135.532037][ T6824] name : ecdh-nist-p384 [ 135.532037][ T6824] driver : ecdh-nist-p384-generic [ 135.532037][ T6824] module : kernel [ 135.532037][ T6824] priority : 100 [ 135.532037][ T6824] refcnt : 1 [ 135.532037][ T6824] selftest : passed [ 135.532037][ T6824] internal : no [ 135.532037][ T6824] type : kpp [ 135.532037][ T6824] [ 135.532037][ T6824] name : ecdh-nist-p256 [ 135.532037][ T6824] driver : ecdh-nist-p256-generic [ 135.810019][ T6800] loop2: detected capacity change from 0 to 32768 [ 136.099749][ T6808] loop3: detected capacity change from 0 to 32768 [ 136.149632][ T6800] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.225282][ T6800] XFS (loop2): Ending clean mount [ 136.246080][ T6800] XFS (loop2): Quotacheck needed: Please wait. [ 136.398964][ T6800] XFS (loop2): Quotacheck: Done. [ 136.441121][ T6808] overlayfs: upper fs needs to support d_type. [ 136.472603][ T6808] overlayfs: upper fs does not support tmpfile. [ 136.502886][ T6808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.532112][ T6808] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 136.532112][ T6808] [ 136.577508][ T6808] ERROR: (device loop3): remounting filesystem as read-only [ 136.600437][ T6808] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 136.646974][ T5829] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.840035][ T6857] loop4: detected capacity change from 0 to 8192 [ 137.318720][ T6861] loop2: detected capacity change from 0 to 65 [ 137.336561][ T6863] loop0: detected capacity change from 0 to 164 [ 137.356188][ T6861] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 137.389782][ T6861] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 137.426806][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 137.947455][ T6855] loop5: detected capacity change from 0 to 32768 [ 137.972019][ T6873] loop3: detected capacity change from 0 to 2048 [ 138.026945][ T6855] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.077808][ T6873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.166095][ T6855] XFS (loop5): Ending clean mount [ 138.197173][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.204342][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.216470][ T6855] XFS (loop5): Quotacheck needed: Please wait. [ 138.302713][ T6859] loop4: detected capacity change from 0 to 32768 [ 138.363219][ T6855] XFS (loop5): Quotacheck: Done. [ 138.374094][ T6859] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.454240][ T6859] XFS (loop4): Ending clean mount [ 138.488092][ T6859] XFS (loop4): Quotacheck needed: Please wait. [ 138.535661][ T5912] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.582997][ T6102] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.606451][ T793] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.613028][ T6859] XFS (loop4): Quotacheck: Done. [ 138.723718][ T5912] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.734718][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.764124][ T5912] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.777032][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 138.795044][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.804321][ T5912] usb 1-1: Product: syz [ 138.810190][ T5838] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.819751][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.835056][ T5912] usb 1-1: Manufacturer: syz [ 138.839709][ T5912] usb 1-1: SerialNumber: syz [ 138.846383][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.863682][ T5912] usb 1-1: config 0 descriptor?? [ 138.869539][ T793] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.908287][ T5912] usb 1-1: selecting invalid altsetting 0 [ 138.916437][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.947876][ T793] usb 3-1: config 0 descriptor?? [ 138.979600][ T793] hub 3-1:0.0: USB hub found [ 139.161972][ T793] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 139.207117][ T5912] usb 1-1: USB disconnect, device number 4 [ 139.591129][ T793] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 139.607382][ T793] hid-generic 0003:046D:C31C.0003: probe with driver hid-generic failed with error -22 [ 139.914808][ T794] usb 3-1: USB disconnect, device number 4 [ 140.078758][ T6930] loop3: detected capacity change from 0 to 512 [ 140.106664][ T6930] EXT4-fs (loop3): Test dummy encryption mode enabled [ 140.118939][ T6934] netlink: 64 bytes leftover after parsing attributes in process `syz.5.299'. [ 140.123801][ T6930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.181055][ T6930] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.300: corrupted xattr entries [ 140.210260][ T6930] EXT4-fs (loop3): 1 orphan inode deleted [ 140.246396][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.381849][ T30] audit: type=1800 audit(1762772069.301:10): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.300" name="file2" dev="loop3" ino=15 res=0 errno=0 [ 140.499824][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.582632][ T6944] input: syz0 as /devices/virtual/input/input7 [ 140.944987][ T6954] netlink: 'syz.0.310': attribute type 11 has an invalid length. [ 140.963893][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'. [ 141.012540][ T6932] loop4: detected capacity change from 0 to 40427 [ 141.077058][ T6932] F2FS-fs (loop4): invalid crc value [ 141.274515][ T793] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.331221][ T6932] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 141.379398][ T6932] F2FS-fs (loop4): Start checkpoint disabled! [ 141.406313][ T6932] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 141.427227][ T6932] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 141.436277][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 141.443306][ T793] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 141.454602][ T793] usb 4-1: config 0 has no interface number 0 [ 141.474493][ T793] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 141.484079][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.499434][ T793] usb 4-1: Product: syz [ 141.499803][ T6970] bridge0: entered promiscuous mode [ 141.503655][ T793] usb 4-1: Manufacturer: syz [ 141.503673][ T793] usb 4-1: SerialNumber: syz [ 141.518776][ T30] audit: type=1800 audit(1762772070.441:11): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 141.544193][ T6970] macvlan2: entered promiscuous mode [ 141.545701][ T6932] binfmt_misc: register: failed to install interpreter file ./file1 [ 141.562086][ T793] usb 4-1: config 0 descriptor?? [ 141.583587][ T793] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 141.592415][ T793] dvb-usb: bulk message failed: -22 (2/0) [ 141.615893][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.657011][ T793] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 141.683197][ T2970] kworker/u8:5: attempt to access beyond end of device [ 141.683197][ T2970] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.689245][ T793] usb 4-1: media controller created [ 141.764549][ T2970] CPU: 0 UID: 0 PID: 2970 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 141.764578][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.764592][ T2970] Workqueue: writeback wb_workfn (flush-7:4) [ 141.764624][ T2970] Call Trace: [ 141.764632][ T2970] [ 141.764640][ T2970] dump_stack_lvl+0x189/0x250 [ 141.764676][ T2970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.764705][ T2970] ? __pfx_queue_work_on+0x10/0x10 [ 141.764729][ T2970] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 141.764756][ T2970] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 141.764795][ T2970] f2fs_handle_critical_error+0x37c/0x540 [ 141.764835][ T2970] f2fs_write_end_io+0x886/0xb60 [ 141.764875][ T2970] __submit_merged_bio+0x27a/0x6a0 [ 141.764914][ T2970] __submit_merged_write_cond+0x255/0x530 [ 141.764953][ T2970] f2fs_write_data_pages+0x261d/0x3000 [ 141.765013][ T2970] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.765050][ T2970] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 141.765114][ T2970] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 141.765146][ T2970] ? register_lock_class+0x51/0x320 [ 141.765183][ T2970] ? trace_f2fs_writepages+0x7f/0x200 [ 141.765216][ T2970] ? f2fs_write_node_pages+0x478/0x6e0 [ 141.765251][ T2970] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 141.765297][ T2970] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 141.765320][ T2970] do_writepages+0x32e/0x550 [ 141.765356][ T2970] ? reacquire_held_locks+0x127/0x1d0 [ 141.765384][ T2970] ? writeback_sb_inodes+0x3bc/0x1950 [ 141.765420][ T2970] __writeback_single_inode+0x143/0x12d0 [ 141.765449][ T2970] ? do_raw_spin_unlock+0x122/0x240 [ 141.765475][ T2970] writeback_sb_inodes+0x984/0x1950 [ 141.765542][ T2970] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 141.765617][ T2970] ? rcu_is_watching+0x15/0xb0 [ 141.765659][ T2970] wb_writeback+0x43b/0xaf0 [ 141.765695][ T2970] ? queue_io+0x3c1/0x590 [ 141.765725][ T2970] ? __pfx_wb_writeback+0x10/0x10 [ 141.765761][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.765796][ T2970] wb_workfn+0x409/0xef0 [ 141.765836][ T2970] ? __pfx_wb_workfn+0x10/0x10 [ 141.765864][ T2970] ? __lock_acquire+0xab9/0xd20 [ 141.765902][ T2970] ? process_one_work+0x868/0x15d0 [ 141.765936][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.765967][ T2970] ? process_one_work+0x868/0x15d0 [ 141.765991][ T2970] process_one_work+0x94a/0x15d0 [ 141.766015][ T2970] ? __lock_acquire+0xab9/0xd20 [ 141.766065][ T2970] ? __pfx_process_one_work+0x10/0x10 [ 141.766101][ T2970] ? assign_work+0x3a1/0x410 [ 141.766133][ T2970] worker_thread+0x9b0/0xee0 [ 141.766191][ T2970] kthread+0x711/0x8a0 [ 141.766214][ T2970] ? __pfx_worker_thread+0x10/0x10 [ 141.766240][ T2970] ? __pfx_kthread+0x10/0x10 [ 141.766261][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.766287][ T2970] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.766315][ T2970] ? __pfx_kthread+0x10/0x10 [ 141.766335][ T2970] ret_from_fork+0x599/0xb30 [ 141.766363][ T2970] ? __pfx_ret_from_fork+0x10/0x10 [ 141.766401][ T2970] ? __switch_to_asm+0x39/0x70 [ 141.766420][ T2970] ? __switch_to_asm+0x33/0x70 [ 141.766438][ T2970] ? __pfx_kthread+0x10/0x10 [ 141.766459][ T2970] ret_from_fork_asm+0x1a/0x30 [ 141.766500][ T2970] [ 141.766509][ T2970] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.769695][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.939537][ T6957] dvb-usb: bulk message failed: -22 (4/0) [ 142.112904][ T6957] cxusb: i2c read failed [ 142.193129][ T793] cxusb: set interface failed [ 142.199451][ T6980] loop5: detected capacity change from 0 to 512 [ 142.203092][ T793] dvb-usb: bulk message failed: -22 (1/0) [ 142.231412][ T6980] EXT4-fs error (device loop5): ext4_iget_extra_inode:5079: inode #15: comm syz.5.322: corrupted in-inode xattr: invalid ea_ino [ 142.344727][ T6980] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.322: couldn't read orphan inode 15 (err -117) [ 142.347677][ T6985] loop0: detected capacity change from 0 to 2048 [ 142.377083][ T793] DVB: Unable to find symbol lgdt330x_attach() [ 142.385516][ T793] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 142.412371][ T6980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.459770][ T6985] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.498403][ T6980] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6337: inode #18: comm syz.5.322: bad extra_isize 6 (inode size 256) [ 142.522570][ T6985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.574535][ T793] rc_core: IR keymap rc-dvico-portable not found [ 142.582692][ T793] Registered IR keymap rc-empty [ 142.603090][ T793] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 142.637652][ T6102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.665045][ T793] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 142.755426][ T793] dvb-usb: schedule remote query interval to 100 msecs. [ 142.762475][ T793] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 142.851158][ T793] usb 4-1: USB disconnect, device number 3 [ 143.082687][ T793] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 143.281142][ T7002] loop3: detected capacity change from 0 to 64 [ 143.293344][ T6978] loop2: detected capacity change from 0 to 40427 [ 143.306082][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.333709][ T6978] F2FS-fs (loop2): build fault injection rate: 771 [ 143.378961][ T6978] F2FS-fs (loop2): invalid crc value [ 143.496647][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.539830][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.583672][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.613658][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.636126][ T10] usb 5-1: SerialNumber: syz [ 143.646419][ T6978] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.697233][ T6978] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.909107][ T10] usb 5-1: 0:2 : does not exist [ 143.914156][ T10] usb 5-1: unit 255 not found! [ 143.920217][ T5829] syz-executor: attempt to access beyond end of device [ 143.920217][ T5829] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.956065][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 143.956093][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.956105][ T5829] Call Trace: [ 143.956114][ T5829] [ 143.956123][ T5829] dump_stack_lvl+0x189/0x250 [ 143.956166][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.956199][ T5829] ? __pfx_queue_work_on+0x10/0x10 [ 143.956225][ T5829] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 143.956255][ T5829] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.956299][ T5829] f2fs_handle_critical_error+0x37c/0x540 [ 143.956342][ T5829] f2fs_write_end_io+0x886/0xb60 [ 143.956390][ T5829] __submit_merged_bio+0x27a/0x6a0 [ 143.956431][ T5829] __submit_merged_write_cond+0x255/0x530 [ 143.956481][ T5829] f2fs_write_data_pages+0x261d/0x3000 [ 143.956550][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.956632][ T5829] ? __mod_zone_page_state+0xd7/0x140 [ 143.956679][ T5829] ? folios_put_refs+0x58b/0x670 [ 143.956724][ T5829] ? __lock_acquire+0xab9/0xd20 [ 143.956763][ T5829] ? do_raw_spin_lock+0x121/0x290 [ 143.956801][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 143.956823][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.956847][ T5829] do_writepages+0x32e/0x550 [ 143.956897][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 143.956925][ T5829] filemap_fdatawrite+0x199/0x240 [ 143.956957][ T5829] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 143.957052][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 143.957081][ T5829] f2fs_sync_dirty_inodes+0x31f/0x830 [ 143.957126][ T5829] f2fs_write_checkpoint+0x93e/0x2440 [ 143.957149][ T5829] ? stack_depot_save_flags+0x40/0x860 [ 143.957213][ T5829] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 143.957292][ T5829] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 143.957316][ T5829] ? kfree+0x19a/0x6e0 [ 143.957362][ T5829] kill_f2fs_super+0x2cc/0x6d0 [ 143.957395][ T5829] ? __pfx_kill_f2fs_super+0x10/0x10 [ 143.957443][ T5829] ? shrinker_free+0x2ce/0x3e0 [ 143.957482][ T5829] deactivate_locked_super+0xbc/0x130 [ 143.957509][ T5829] cleanup_mnt+0x425/0x4c0 [ 143.957532][ T5829] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.957567][ T5829] task_work_run+0x1d4/0x260 [ 143.957594][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 143.957624][ T5829] ? exit_to_user_mode_loop+0x55/0x4f0 [ 143.957657][ T5829] exit_to_user_mode_loop+0xff/0x4f0 [ 143.957683][ T5829] ? rcu_is_watching+0x15/0xb0 [ 143.957721][ T5829] do_syscall_64+0x2e9/0xfa0 [ 143.957754][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.957775][ T5829] ? clear_bhb_loop+0x60/0xb0 [ 143.957802][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.957822][ T5829] RIP: 0033:0x7f6a201909f7 [ 143.957855][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 143.957871][ T5829] RSP: 002b:00007fffa7e519c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 143.957894][ T5829] RAX: 0000000000000000 RBX: 00007f6a20211d7d RCX: 00007f6a201909f7 [ 143.957908][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa7e51a80 [ 143.957920][ T5829] RBP: 00007fffa7e51a80 R08: 0000000000000000 R09: 0000000000000000 [ 143.957933][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa7e52b10 [ 143.957946][ T5829] R13: 00007f6a20211d7d R14: 000000000002318a R15: 00007fffa7e52b50 [ 143.957987][ T5829] [ 143.959312][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 144.023569][ T10] usb 5-1: USB disconnect, device number 3 [ 144.045044][ T6994] loop5: detected capacity change from 0 to 32768 [ 144.183566][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.353380][ T6994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.324 (6994) [ 144.420277][ T6994] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.453393][ T6994] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 144.657222][ T6994] BTRFS info (device loop5): enabling ssd optimizations [ 144.674603][ T6994] BTRFS info (device loop5): turning on async discard [ 144.681482][ T6994] BTRFS info (device loop5): enabling free space tree [ 144.796010][ T6994] BTRFS info (device loop5): device stats zeroed by syz.5.324 (6994) [ 144.985287][ T6102] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.493567][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 145.603085][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.338'. [ 145.693164][ T7023] loop0: detected capacity change from 0 to 32768 [ 145.718029][ T7046] netlink: 'syz.5.338': attribute type 13 has an invalid length. [ 145.767108][ T7046] netlink: 'syz.5.338': attribute type 12 has an invalid length. [ 145.787631][ T7023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.334 (7023) [ 145.828929][ T7023] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.924634][ T7023] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 146.224893][ T7023] BTRFS info (device loop0): enabling ssd optimizations [ 146.269715][ T7023] BTRFS info (device loop0): turning on async discard [ 146.308025][ T7023] BTRFS info (device loop0): enabling free space tree [ 146.341672][ T7023] BTRFS info (device loop0): max_inline set to 4096 [ 146.364524][ T793] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.579623][ T793] usb 6-1: Using ep0 maxpacket: 16 [ 146.603667][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.643709][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.656687][ T5823] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.674528][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.715733][ T793] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.744923][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.801116][ T793] usb 6-1: config 0 descriptor?? [ 147.243804][ T793] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 147.286527][ T793] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 147.329466][ T793] microsoft 0003:045E:07DA.0004: implement() called with n (152) > 32! (kworker/1:2) [ 147.436333][ T7060] loop2: detected capacity change from 0 to 32768 [ 147.437438][ T793] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 147.508248][ T793] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 147.518935][ T7060] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.574517][ T793] microsoft 0003:045E:07DA.0004: no inputs found [ 147.612706][ T793] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 147.718820][ T7060] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 147.733200][ T793] usb 6-1: USB disconnect, device number 2 [ 147.823345][ T7060] XFS (loop2): Starting recovery (logdev: internal) [ 147.872730][ T7116] fido_id[7116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 147.941698][ T7060] XFS (loop2): Ending recovery (logdev: internal) [ 148.043526][ T7060] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 148.081210][ T7060] XFS (loop2): Unmount and run xfs_repair [ 148.131275][ T7119] loop4: detected capacity change from 0 to 4096 [ 148.189453][ T7119] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 148.235191][ T5829] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.269760][ T5829] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 148.394909][ T7119] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 148.445705][ T7119] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 148.620910][ T30] audit: type=1800 audit(1762772077.541:12): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.362" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 148.820738][ T7132] trusted_key: encrypted_key: keyword 'à¹w' not recognized [ 149.038761][ T7136] loop3: detected capacity change from 0 to 512 [ 149.090305][ T7136] EXT4-fs: Ignoring removed bh option [ 149.143916][ T7136] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 149.185085][ T7143] loop0: detected capacity change from 0 to 1024 [ 149.226338][ T7136] EXT4-fs (loop3): 1 truncate cleaned up [ 149.278025][ T7136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.367741][ T3511] hfsplus: b-tree write err: -5, ino 4 [ 149.397293][ T5912] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.544129][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.585267][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 149.602306][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.625458][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.664789][ T5912] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 149.704877][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.755422][ T5912] usb 6-1: config 0 descriptor?? [ 150.104552][ T793] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.182664][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.190677][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.199256][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.207114][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.215010][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.222520][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.230436][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.238913][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.246610][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.254221][ T5912] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 150.262140][ T5892] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.273951][ T793] usb 4-1: config 0 has an invalid interface number: 81 but max is 0 [ 150.293561][ T5912] logitech 0003:046D:C29C.0005: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 150.305311][ T793] usb 4-1: config 0 has no interface number 0 [ 150.314986][ T793] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=84.1a [ 150.325025][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.333146][ T793] usb 4-1: Product: syz [ 150.339581][ T793] usb 4-1: Manufacturer: syz [ 150.344594][ T793] usb 4-1: SerialNumber: syz [ 150.357757][ T793] usb 4-1: config 0 descriptor?? [ 150.434102][ T7142] loop4: detected capacity change from 0 to 65536 [ 150.447280][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.449111][ T7142] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 150.472221][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.485154][ T793] rtsx_usb 4-1:0.81: probe with driver rtsx_usb failed with error -22 [ 150.500201][ T5892] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 150.511261][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.523845][ T7142] XFS (loop4): Ending clean mount [ 150.525918][ T5892] usb 1-1: config 0 descriptor?? [ 150.585858][ T5912] logitech 0003:046D:C29C.0005: no inputs found [ 150.627259][ T793] usb 4-1: USB disconnect, device number 4 [ 150.657821][ T5912] usb 6-1: USB disconnect, device number 3 [ 150.674763][ T5838] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 150.861121][ T7174] netlink: 64 bytes leftover after parsing attributes in process `syz.2.383'. [ 150.970284][ T5892] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 151.069574][ T7176] loop4: detected capacity change from 0 to 4096 [ 151.106300][ T7176] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 151.154867][ T5892] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0 [ 151.194932][ T5892] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 151.253412][ T5892] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 151.269357][ T7176] ntfs3(loop4): Failed to load $Extend (-22). [ 151.295997][ T5892] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 151.302502][ T7176] ntfs3(loop4): Failed to initialize $Extend. [ 151.326380][ T5892] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 151.386206][ T5892] usb 1-1: USB disconnect, device number 5 [ 151.575250][ T793] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.736009][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 151.749743][ T793] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.770221][ T793] usb 4-1: config 0 has no interface number 0 [ 151.778730][ T793] usb 4-1: config 0 interface 184 has no altsetting 0 [ 151.809702][ T793] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 151.821935][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.831912][ T793] usb 4-1: Product: syz [ 151.837326][ T793] usb 4-1: Manufacturer: syz [ 151.848704][ T793] usb 4-1: SerialNumber: syz [ 151.864266][ T793] usb 4-1: config 0 descriptor?? [ 151.890874][ T793] smsc75xx v1.0.0 [ 152.698384][ T7222] loop5: detected capacity change from 0 to 512 [ 152.701560][ T793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 152.726998][ T793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 152.766979][ T793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 152.799638][ T793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 152.813065][ T7222] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 152.823125][ T793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 152.868764][ T793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 152.905037][ T793] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 152.909710][ T7228] loop0: detected capacity change from 0 to 256 [ 152.941127][ T7206] loop2: detected capacity change from 0 to 40427 [ 152.942281][ T793] usb 4-1: USB disconnect, device number 5 [ 153.007303][ T7206] F2FS-fs (loop2): invalid crc value [ 153.394854][ T7239] loop0: detected capacity change from 0 to 1024 [ 153.395618][ T7206] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.470834][ T7206] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.496084][ T7243] netlink: 165 bytes leftover after parsing attributes in process `syz.3.412'. [ 153.706568][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 153.788135][ T7248] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.834889][ T30] audit: type=1326 audit(1762772082.751:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 153.917996][ T30] audit: type=1326 audit(1762772082.751:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 153.991796][ T30] audit: type=1326 audit(1762772082.781:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 154.055097][ T30] audit: type=1326 audit(1762772082.791:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 154.144773][ T30] audit: type=1326 audit(1762772082.801:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 154.262999][ T30] audit: type=1326 audit(1762772082.801:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 154.340153][ T30] audit: type=1326 audit(1762772082.801:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefb0b86567 code=0x7ffc0000 [ 154.414071][ T30] audit: type=1326 audit(1762772082.801:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefb0b2b779 code=0x7ffc0000 [ 154.504606][ T30] audit: type=1326 audit(1762772082.801:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fefb0b8f6c9 code=0x7ffc0000 [ 154.572583][ T30] audit: type=1326 audit(1762772082.801:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.3.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefb0b86567 code=0x7ffc0000 [ 154.775238][ T5827] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.949602][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.975227][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.008694][ T5827] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.024203][ T7266] loop5: detected capacity change from 0 to 32768 [ 155.024670][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.070255][ T5827] usb 1-1: SerialNumber: syz [ 155.087955][ T7266] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.267714][ T7266] XFS (loop5): Ending clean mount [ 155.296810][ T7266] XFS (loop5): Quotacheck needed: Please wait. [ 155.331349][ T5827] usb 1-1: 0:2 : does not exist [ 155.345531][ T5827] usb 1-1: unit 255 not found! [ 155.410268][ T5827] usb 1-1: USB disconnect, device number 6 [ 155.436698][ T7266] XFS (loop5): Quotacheck: Done. [ 155.569738][ T6102] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.603572][ T95] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 155.615521][ T95] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 155.623960][ T95] CPU: 1 UID: 0 PID: 95 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 155.633257][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.643329][ T95] Workqueue: xfs-log/loop5 xlog_ioend_work [ 155.649157][ T95] RIP: 0010:bio_seg_gap+0x1c6/0x7d0 [ 155.654364][ T95] Code: fd 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 5c 24 20 49 89 de 49 c1 e6 04 48 89 44 24 08 4a 8d 2c 30 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 0c 33 b9 fd 48 ba 00 00 00 00 00 fc [ 155.673988][ T95] RSP: 0018:ffffc900025d6f40 EFLAGS: 00010246 [ 155.680073][ T95] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801c710000 [ 155.688063][ T95] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff8880799902b0 [ 155.696053][ T95] RBP: 0000000000000000 R08: ffff888025053137 R09: 1ffff11004a0a626 [ 155.704040][ T95] R10: dffffc0000000000 R11: ffffed1004a0a627 R12: 0000000000000800 [ 155.712028][ T95] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888079990280 [ 155.720011][ T95] FS: 0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 155.728948][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.735540][ T95] CR2: 00007fefb19156c0 CR3: 0000000032bb4000 CR4: 00000000003526f0 [ 155.743525][ T95] Call Trace: [ 155.746817][ T95] [ 155.749773][ T95] ? blk_add_trace_bio+0x1de/0x2f0 [ 155.754903][ T95] bio_attempt_back_merge+0x4ba/0x920 [ 155.760288][ T95] ? blk_attempt_bio_merge+0x273/0x4c0 [ 155.765761][ T95] blk_attempt_plug_merge+0x145/0x1d0 [ 155.771148][ T95] blk_mq_submit_bio+0x1abd/0x26d0 [ 155.776268][ T95] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 155.781746][ T95] ? blk_mq_submit_bio+0x46a/0x26d0 [ 155.786960][ T95] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 155.792439][ T95] ? __lock_acquire+0xab9/0xd20 [ 155.797317][ T95] ? __lock_acquire+0xab9/0xd20 [ 155.802184][ T95] __submit_bio+0x207/0x5a0 [ 155.806702][ T95] ? __pfx___submit_bio+0x10/0x10 [ 155.811837][ T95] ? blk_add_trace_bio+0x2e/0x2f0 [ 155.816912][ T95] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 155.822556][ T95] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 155.828733][ T95] ? submit_bio_noacct+0xe0c/0x1b80 [ 155.834038][ T95] xfs_discard_extents+0xa13/0xb00 [ 155.839170][ T95] ? __pfx_xfs_discard_extents+0x10/0x10 [ 155.844822][ T95] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.850043][ T95] ? xlog_cil_committed+0xf35/0x1040 [ 155.855336][ T95] ? kfree+0x19a/0x6e0 [ 155.859420][ T95] ? do_raw_spin_unlock+0x122/0x240 [ 155.864727][ T95] xlog_cil_committed+0xfb9/0x1040 [ 155.869860][ T95] ? __pfx_xlog_cil_committed+0x10/0x10 [ 155.875522][ T95] xlog_cil_process_committed+0x15c/0x1b0 [ 155.881265][ T95] ? xlog_ioend_work+0xc6/0x100 [ 155.886147][ T95] xlog_state_do_callback+0x55c/0xd40 [ 155.891534][ T95] ? __pfx_xlog_state_do_callback+0x10/0x10 [ 155.897440][ T95] ? _raw_spin_unlock+0x28/0x50 [ 155.902304][ T95] ? xlog_state_done_syncing+0x169/0x2f0 [ 155.907948][ T95] ? xlog_ioend_work+0xb6/0x100 [ 155.912814][ T95] xlog_ioend_work+0xc6/0x100 [ 155.917502][ T95] ? process_one_work+0x868/0x15d0 [ 155.922626][ T95] process_one_work+0x94a/0x15d0 [ 155.927591][ T95] ? __lock_acquire+0xab9/0xd20 [ 155.932481][ T95] ? __pfx_process_one_work+0x10/0x10 [ 155.937873][ T95] ? assign_work+0x3a1/0x410 [ 155.942480][ T95] worker_thread+0x9b0/0xee0 [ 155.947095][ T95] kthread+0x711/0x8a0 [ 155.951171][ T95] ? __pfx_worker_thread+0x10/0x10 [ 155.956316][ T95] ? __pfx_kthread+0x10/0x10 [ 155.960914][ T95] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.966213][ T95] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.971448][ T95] ? __pfx_kthread+0x10/0x10 [ 155.976046][ T95] ret_from_fork+0x599/0xb30 [ 155.980752][ T95] ? __pfx_ret_from_fork+0x10/0x10 [ 155.985893][ T95] ? __switch_to_asm+0x39/0x70 [ 155.990665][ T95] ? __switch_to_asm+0x33/0x70 [ 155.995523][ T95] ? __pfx_kthread+0x10/0x10 [ 156.000127][ T95] ret_from_fork_asm+0x1a/0x30 [ 156.004934][ T95] [ 156.008020][ T95] Modules linked in: [ 156.013039][ T95] ---[ end trace 0000000000000000 ]--- [ 156.022978][ T95] RIP: 0010:bio_seg_gap+0x1c6/0x7d0 [ 156.028294][ T95] Code: fd 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 5c 24 20 49 89 de 49 c1 e6 04 48 89 44 24 08 4a 8d 2c 30 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 0c 33 b9 fd 48 ba 00 00 00 00 00 fc [ 156.048141][ T95] RSP: 0018:ffffc900025d6f40 EFLAGS: 00010246 [ 156.054280][ T95] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801c710000 [ 156.062542][ T95] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff8880799902b0 [ 156.070635][ T95] RBP: 0000000000000000 R08: ffff888025053137 R09: 1ffff11004a0a626 [ 156.078844][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.086614][ T95] R10: dffffc0000000000 R11: ffffed1004a0a627 R12: 0000000000000800 [ 156.096438][ T95] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888079990280 [ 156.105156][ T95] FS: 0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 156.114690][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.126355][ T95] CR2: 00007fefb19156c0 CR3: 0000000024bf2000 CR4: 00000000003526f0 [ 156.134730][ T95] Kernel panic - not syncing: Fatal exception [ 156.141095][ T95] Kernel Offset: disabled [ 156.145431][ T95] Rebooting in 86400 seconds..