last executing test programs: 21.771488528s ago: executing program 1 (id=59): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) 20.278676675s ago: executing program 1 (id=67): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@discard}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 19.398040127s ago: executing program 1 (id=73): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) 18.882979789s ago: executing program 1 (id=78): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 17.465365243s ago: executing program 1 (id=87): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f003) truncate(&(0x7f0000000180)='./file1\x00', 0x400000f001) 14.68414677s ago: executing program 1 (id=114): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 14.032654104s ago: executing program 32 (id=114): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 11.357812283s ago: executing program 5 (id=147): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@discard_unit_block}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfdffff}}]}, 0x1, 0x5517, &(0x7f0000005880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 8.473163571s ago: executing program 5 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) 7.678718405s ago: executing program 0 (id=170): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 6.103119945s ago: executing program 0 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 5.668304813s ago: executing program 0 (id=174): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5.228360748s ago: executing program 0 (id=176): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 4.78325826s ago: executing program 5 (id=180): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000019080)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noblock_validity}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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") 4.680040588s ago: executing program 3 (id=181): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000440)={0x0, 0xaf1f, 0x80, 0x44, 0x1a8}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 4.107093569s ago: executing program 5 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 3.792012895s ago: executing program 3 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x6}, {0x9, 0x6}, {0x7}, {0x20, 0x2}, {0x4, 0x5}, {0x0, 0x5}], "d4b6230d6ac98cc9"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2.710707946s ago: executing program 4 (id=189): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000002280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d39a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e192401bec01a9dbeba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62057c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000040)='./file1\x00', 0x181042, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 2.524051182s ago: executing program 2 (id=190): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.438756418s ago: executing program 3 (id=191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.431865717s ago: executing program 0 (id=192): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) 2.280457018s ago: executing program 0 (id=193): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 2.215958303s ago: executing program 5 (id=194): unshare(0x28000600) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, &(0x7f0000003700)) 2.174422923s ago: executing program 4 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x9c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{}, {0xdde}, @broadcast}, 0x7, @default, 0x4482, @val, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0xffff}}, @val={0x6, 0x2, 0x1}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x3, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x3, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0x5, 0x21, 0xb}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.078415105s ago: executing program 2 (id=196): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.920648128s ago: executing program 5 (id=197): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 1.699719342s ago: executing program 4 (id=198): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 1.657022256s ago: executing program 3 (id=199): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x7000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 1.405952438s ago: executing program 4 (id=200): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) timer_settime(0x0, 0x0, 0x0, 0x0) 1.357654774s ago: executing program 2 (id=201): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) fchmod(r1, 0x42) 1.294969629s ago: executing program 3 (id=202): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 851.601609ms ago: executing program 2 (id=203): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x11) 599.401249ms ago: executing program 2 (id=204): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x10, '\x00', @auto="02b1b2d0a4f9e08aaf63dccc604bcddf"}) 481.816675ms ago: executing program 4 (id=205): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) 197.143536ms ago: executing program 4 (id=206): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x38}}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 95.994528ms ago: executing program 3 (id=207): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x6, 0x0, 0x4, 0x12, 0x4f, 0x1b, 0x2}}]}}]}, 0x148}}, 0x4c000) 0s ago: executing program 2 (id=208): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 85.210649][ T5845] cgroup: Unknown subsys name 'net' [ 85.377324][ T5845] cgroup: Unknown subsys name 'cpuset' [ 85.387288][ T5845] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.073643][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.983069][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.991597][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.999597][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.007881][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.023486][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.031183][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.082534][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.090638][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.098936][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.106726][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.126296][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.137999][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.146692][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.162331][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.170349][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.188229][ T5178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.197174][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.206275][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.219236][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.232155][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.240435][ T5178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.253564][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.272144][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.285277][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.293721][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.303160][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.310351][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.319231][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.350677][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.363864][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.938230][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 91.125931][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 91.138847][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 91.248575][ T24] cfg80211: failed to load regulatory.db [ 91.345944][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.355479][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.362988][ T5860] bridge_slave_0: entered allmulticast mode [ 91.370702][ T5860] bridge_slave_0: entered promiscuous mode [ 91.451089][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.458586][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.466693][ T5860] bridge_slave_1: entered allmulticast mode [ 91.474876][ T5860] bridge_slave_1: entered promiscuous mode [ 91.517809][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 91.705735][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.713044][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.720268][ T5867] bridge_slave_0: entered allmulticast mode [ 91.728453][ T5867] bridge_slave_0: entered promiscuous mode [ 91.736376][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.743752][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.750999][ T5864] bridge_slave_0: entered allmulticast mode [ 91.759087][ T5864] bridge_slave_0: entered promiscuous mode [ 91.770924][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.784717][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.809037][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 91.821348][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.829132][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.836693][ T5867] bridge_slave_1: entered allmulticast mode [ 91.845925][ T5867] bridge_slave_1: entered promiscuous mode [ 91.852825][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.859974][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.867939][ T5864] bridge_slave_1: entered allmulticast mode [ 91.875673][ T5864] bridge_slave_1: entered promiscuous mode [ 91.961626][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 91.978783][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.991867][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.032709][ T5860] team0: Port device team_slave_0 added [ 92.066559][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.106910][ T5860] team0: Port device team_slave_1 added [ 92.123112][ T5178] Bluetooth: hci0: command tx timeout [ 92.148365][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.202167][ T5178] Bluetooth: hci2: command tx timeout [ 92.203506][ T5863] Bluetooth: hci1: command tx timeout [ 92.217116][ T5864] team0: Port device team_slave_0 added [ 92.282615][ T5863] Bluetooth: hci3: command tx timeout [ 92.297435][ T5864] team0: Port device team_slave_1 added [ 92.319242][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.326778][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.352831][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.363522][ T5863] Bluetooth: hci4: command tx timeout [ 92.386515][ T5867] team0: Port device team_slave_0 added [ 92.407731][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.415208][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.422593][ T5856] bridge_slave_0: entered allmulticast mode [ 92.430942][ T5856] bridge_slave_0: entered promiscuous mode [ 92.439143][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.446355][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.473018][ T5863] Bluetooth: hci5: command tx timeout [ 92.478808][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.513441][ T5867] team0: Port device team_slave_1 added [ 92.535910][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.543065][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.569356][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.580599][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.588743][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.596296][ T5856] bridge_slave_1: entered allmulticast mode [ 92.605044][ T5856] bridge_slave_1: entered promiscuous mode [ 92.671393][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.678709][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.705057][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.780687][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.788257][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.814524][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.828765][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.835933][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.862059][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.911510][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.921391][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.929662][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.937636][ T5866] bridge_slave_0: entered allmulticast mode [ 92.945317][ T5866] bridge_slave_0: entered promiscuous mode [ 92.989888][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.999675][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.007508][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.015151][ T5866] bridge_slave_1: entered allmulticast mode [ 93.022760][ T5866] bridge_slave_1: entered promiscuous mode [ 93.044851][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.052445][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.059746][ T5872] bridge_slave_0: entered allmulticast mode [ 93.067509][ T5872] bridge_slave_0: entered promiscuous mode [ 93.098168][ T5860] hsr_slave_0: entered promiscuous mode [ 93.105414][ T5860] hsr_slave_1: entered promiscuous mode [ 93.164575][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.171874][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.180111][ T5872] bridge_slave_1: entered allmulticast mode [ 93.193873][ T5872] bridge_slave_1: entered promiscuous mode [ 93.236137][ T5864] hsr_slave_0: entered promiscuous mode [ 93.243912][ T5864] hsr_slave_1: entered promiscuous mode [ 93.250285][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 93.256359][ T5864] Cannot create hsr debugfs directory [ 93.280996][ T5856] team0: Port device team_slave_0 added [ 93.318166][ T5867] hsr_slave_0: entered promiscuous mode [ 93.326782][ T5867] hsr_slave_1: entered promiscuous mode [ 93.334048][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 93.339829][ T5867] Cannot create hsr debugfs directory [ 93.380506][ T5856] team0: Port device team_slave_1 added [ 93.406891][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.420164][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.458571][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.557164][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.591263][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.598567][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.625731][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.655679][ T5866] team0: Port device team_slave_0 added [ 93.695185][ T5872] team0: Port device team_slave_0 added [ 93.717099][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.724687][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.751694][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.764956][ T5866] team0: Port device team_slave_1 added [ 93.810788][ T5872] team0: Port device team_slave_1 added [ 93.863923][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.870939][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.897021][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.979225][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.987268][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.013885][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.048546][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.055806][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.081994][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.191116][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.198781][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.224909][ T5863] Bluetooth: hci0: command tx timeout [ 94.231544][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.257148][ T5856] hsr_slave_0: entered promiscuous mode [ 94.264169][ T5856] hsr_slave_1: entered promiscuous mode [ 94.270503][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 94.276491][ T5856] Cannot create hsr debugfs directory [ 94.282452][ T5863] Bluetooth: hci1: command tx timeout [ 94.292571][ T5863] Bluetooth: hci2: command tx timeout [ 94.362414][ T5863] Bluetooth: hci3: command tx timeout [ 94.442120][ T5863] Bluetooth: hci4: command tx timeout [ 94.479781][ T5866] hsr_slave_0: entered promiscuous mode [ 94.488218][ T5866] hsr_slave_1: entered promiscuous mode [ 94.494574][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 94.500313][ T5866] Cannot create hsr debugfs directory [ 94.522132][ T5863] Bluetooth: hci5: command tx timeout [ 94.583457][ T5872] hsr_slave_0: entered promiscuous mode [ 94.590368][ T5872] hsr_slave_1: entered promiscuous mode [ 94.597365][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 94.603974][ T5872] Cannot create hsr debugfs directory [ 94.868950][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.926862][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.940378][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.985274][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.136492][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.156658][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.168709][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.197510][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.279578][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.290937][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.336001][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.349384][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.442822][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.476697][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.491565][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.505268][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.632103][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.646107][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.661638][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.693050][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.708066][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.730175][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.800488][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.866797][ T5866] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.880196][ T5866] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.894617][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.902063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.924932][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.939550][ T5866] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.957415][ T5866] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.980700][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.987973][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.998761][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.006178][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.027080][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.034315][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.112863][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.218975][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.246425][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.253671][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.283050][ T5863] Bluetooth: hci0: command tx timeout [ 96.300829][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.308155][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.331803][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.362551][ T5178] Bluetooth: hci1: command tx timeout [ 96.368083][ T5863] Bluetooth: hci2: command tx timeout [ 96.440519][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.447477][ T5863] Bluetooth: hci3: command tx timeout [ 96.523300][ T5863] Bluetooth: hci4: command tx timeout [ 96.602532][ T5863] Bluetooth: hci5: command tx timeout [ 96.656425][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.690687][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.741170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.748382][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.779011][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.821667][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.848277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.855449][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.927567][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.934768][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.978914][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.996114][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.003345][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.029106][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.051168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.058416][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.133894][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.141069][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.170166][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.213795][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.460983][ T5864] veth0_vlan: entered promiscuous mode [ 97.489451][ T5860] veth0_vlan: entered promiscuous mode [ 97.507197][ T5864] veth1_vlan: entered promiscuous mode [ 97.585837][ T5860] veth1_vlan: entered promiscuous mode [ 97.787762][ T5860] veth0_macvtap: entered promiscuous mode [ 97.817270][ T5864] veth0_macvtap: entered promiscuous mode [ 97.851638][ T5860] veth1_macvtap: entered promiscuous mode [ 97.887439][ T5864] veth1_macvtap: entered promiscuous mode [ 97.977209][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.031489][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.062792][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.096199][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.121314][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.171346][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.181856][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.216513][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.226326][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.236326][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.291216][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.324085][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.331685][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.341811][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.362884][ T5863] Bluetooth: hci0: command tx timeout [ 98.455736][ T5863] Bluetooth: hci2: command tx timeout [ 98.461567][ T5863] Bluetooth: hci1: command tx timeout [ 98.468561][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.491497][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.514366][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.532950][ T5863] Bluetooth: hci3: command tx timeout [ 98.612415][ T5863] Bluetooth: hci4: command tx timeout [ 98.682137][ T5863] Bluetooth: hci5: command tx timeout [ 98.696577][ T5872] veth0_vlan: entered promiscuous mode [ 98.715178][ T5867] veth0_vlan: entered promiscuous mode [ 98.749421][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.773512][ T5856] veth0_vlan: entered promiscuous mode [ 98.788531][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.816887][ T5856] veth1_vlan: entered promiscuous mode [ 98.835033][ T5872] veth1_vlan: entered promiscuous mode [ 98.862435][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.884142][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.903685][ T5867] veth1_vlan: entered promiscuous mode [ 98.927611][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.999886][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.034323][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.071869][ T5866] veth0_vlan: entered promiscuous mode [ 99.084888][ T5856] veth0_macvtap: entered promiscuous mode [ 99.158953][ T5866] veth1_vlan: entered promiscuous mode [ 99.190429][ T5856] veth1_macvtap: entered promiscuous mode [ 99.208890][ T5867] veth0_macvtap: entered promiscuous mode [ 99.250712][ T5872] veth0_macvtap: entered promiscuous mode [ 99.291277][ T5867] veth1_macvtap: entered promiscuous mode [ 99.327770][ T5872] veth1_macvtap: entered promiscuous mode [ 99.347951][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.413725][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.466158][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.526014][ T1095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.546748][ T1095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.584906][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.608506][ T1095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.631227][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.653913][ T1095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.682880][ T1095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.691691][ T1095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.718552][ T5866] veth0_macvtap: entered promiscuous mode [ 99.741660][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.769977][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.813562][ T5866] veth1_macvtap: entered promiscuous mode [ 99.830881][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.876476][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.891515][ T5998] loop2: detected capacity change from 0 to 32768 [ 99.964036][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.989405][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.049881][ T6007] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.088624][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.270700][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.287458][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.330080][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.395939][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.418329][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.426574][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.431805][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.462226][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.512105][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.537111][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.561744][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.574750][ T6012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.614334][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.738147][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.760871][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.858314][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.923014][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.101155][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.133652][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.252447][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.292950][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.356475][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.407258][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.846071][ T6029] loop2: detected capacity change from 0 to 512 [ 101.957085][ T6018] loop1: detected capacity change from 0 to 32768 [ 101.975675][ T6018] XFS: attr2 mount option is deprecated. [ 102.078098][ T6018] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 102.151358][ T6029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.201823][ T6018] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.236912][ T6029] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.376092][ T30] audit: type=1800 audit(1754701971.948:2): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 102.416507][ T6018] XFS (loop1): Ending clean mount [ 102.462934][ T6018] XFS (loop1): Quotacheck needed: Please wait. [ 102.478993][ T30] audit: type=1800 audit(1754701971.958:3): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 102.616246][ T6018] XFS (loop1): Quotacheck: Done. [ 102.634811][ T5972] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 102.649058][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.852516][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.867285][ T5972] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 102.902704][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.928735][ T5972] usb 6-1: config 0 descriptor?? [ 102.994574][ T6024] loop4: detected capacity change from 0 to 32768 [ 103.029452][ T6024] ======================================================= [ 103.029452][ T6024] WARNING: The mand mount option has been deprecated and [ 103.029452][ T6024] and is ignored by this kernel. Remove the mand [ 103.029452][ T6024] option from the mount to silence this warning. [ 103.029452][ T6024] ======================================================= [ 103.109910][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.224778][ T6027] loop3: detected capacity change from 0 to 32768 [ 103.372807][ T6027] JBD2: Ignoring recovery information on journal [ 103.437601][ T5972] nintendo 0003:057E:200E.0001: unbalanced delimiter at end of report description [ 103.451145][ T5972] nintendo 0003:057E:200E.0001: HID parse failed [ 103.467458][ T5972] nintendo 0003:057E:200E.0001: probe - fail = -22 [ 103.477459][ T5972] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -22 [ 103.697884][ T5959] usb 6-1: USB disconnect, device number 2 [ 103.763433][ T6027] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.938143][ T6027] capability: warning: `syz.3.15' uses 32-bit capabilities (legacy support in use) [ 103.966420][ T6024] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 103.966451][ T6024] allowing incompatible features above 0.0: (unknown version) [ 103.966466][ T6024] features: atomic_nlink [ 104.098241][ T6024] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 104.133024][ T6024] bcachefs (loop4): initializing new filesystem [ 104.148525][ T6024] bcachefs (loop4): going read-write [ 104.288070][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.342209][ T6054] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.488674][ T6024] bcachefs (loop4): marking superblocks [ 104.529962][ T6054] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 104.544141][ T6054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.555219][ T6054] usb 3-1: config 0 descriptor?? [ 104.560780][ T6024] bcachefs (loop4): initializing freespace [ 104.574037][ T6054] gspca_main: spca505-2.14.0 probing 0733:0430 [ 104.600074][ T5860] ocfs2: Unmounting device (7,3) on (node local) [ 104.643682][ T6024] bcachefs (loop4): done initializing freespace [ 104.673297][ T30] audit: type=1326 audit(1754701974.238:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 104.733049][ T30] audit: type=1326 audit(1754701974.248:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 104.753146][ T6024] bcachefs (loop4): reading snapshots table [ 104.812733][ T6024] bcachefs (loop4): reading snapshots done [ 104.829953][ T30] audit: type=1326 audit(1754701974.248:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 104.893154][ T30] audit: type=1326 audit(1754701974.248:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 104.915723][ T30] audit: type=1326 audit(1754701974.248:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 104.943708][ T30] audit: type=1326 audit(1754701974.248:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 104.968579][ T30] audit: type=1326 audit(1754701974.248:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 105.000136][ T6054] gspca_spca505: reg write: error -71 [ 105.021134][ T6024] bcachefs (loop4): done starting filesystem [ 105.029249][ T6054] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 105.049828][ T30] audit: type=1326 audit(1754701974.248:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ded8ebe9 code=0x7ffc0000 [ 105.090914][ T6054] usb 3-1: USB disconnect, device number 2 [ 105.215770][ T6024] syz.4.5 (6024) used greatest stack depth: 17448 bytes left [ 105.256719][ T5867] bcachefs (loop4): shutting down [ 105.283563][ T5867] bcachefs (loop4): going read-only [ 105.321742][ T5867] bcachefs (loop4): finished waiting for writes to stop [ 105.393335][ T5867] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 105.437611][ T6100] loop3: detected capacity change from 0 to 512 [ 105.449827][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 105.463987][ T6098] loop0: detected capacity change from 0 to 1024 [ 105.514038][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.527581][ T6100] EXT4-fs (loop3): 1 truncate cleaned up [ 105.571238][ T6100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.589788][ T5867] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 105.643399][ T6086] loop5: detected capacity change from 0 to 32768 [ 105.659858][ T5867] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 105.699435][ T6086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.29 (6086) [ 105.699903][ T5867] bcachefs (loop4): marking filesystem clean [ 105.786319][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.019328][ T5867] bcachefs (loop4): shutdown complete [ 106.259438][ T6105] loop2: detected capacity change from 0 to 32768 [ 106.318076][ T6086] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.360896][ T6086] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 106.384861][ T6105] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.393669][ T6105] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.437897][ T6112] loop0: detected capacity change from 0 to 512 [ 106.452221][ T6086] BTRFS info (device loop5): using free-space-tree [ 106.466681][ T6105] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 106.480210][ T5931] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.501498][ T5931] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.527699][ T6112] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.559338][ T6112] EXT4-fs (loop0): invalid journal inode [ 106.605098][ T6112] EXT4-fs (loop0): can't get journal size [ 106.680447][ T6112] EXT4-fs (loop0): 1 truncate cleaned up [ 106.721082][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.831091][ T6114] loop3: detected capacity change from 0 to 4096 [ 106.935831][ T6114] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.017953][ T6114] EXT4-fs (loop3): Test dummy encryption mode enabled [ 107.109970][ T5872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.130011][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.151142][ T5931] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 649ms [ 107.233479][ T5931] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.240005][ T6105] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.448178][ T6137] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 107.706580][ T6141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.42'. [ 107.726606][ T5866] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.777903][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.147605][ T6148] netlink: 'syz.0.47': attribute type 3 has an invalid length. [ 108.194166][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 108.746031][ T5931] IPVS: starting estimator thread 0... [ 108.882408][ T6162] IPVS: using max 26 ests per chain, 62400 per kthread [ 109.037448][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.53'. [ 109.102116][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.53'. [ 109.213745][ T6140] loop1: detected capacity change from 0 to 32768 [ 109.244224][ T6054] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.336619][ T6140] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.401167][ T6174] pimreg0: tun_chr_ioctl cmd 1074812117 [ 109.432163][ T6054] usb 1-1: Using ep0 maxpacket: 32 [ 109.449436][ T6054] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 109.471649][ T6054] usb 1-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 109.492337][ T6054] usb 1-1: Manufacturer: syz [ 109.503670][ T6054] usb 1-1: config 0 descriptor?? [ 109.520411][ T6140] XFS (loop1): Ending clean mount [ 109.549752][ T6140] XFS (loop1): Quotacheck needed: Please wait. [ 109.644693][ T6182] loop5: detected capacity change from 0 to 128 [ 109.680165][ T6140] XFS (loop1): Quotacheck: Done. [ 109.689436][ T6147] loop2: detected capacity change from 0 to 40427 [ 109.729630][ T6054] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 109.757371][ T6147] F2FS-fs (loop2): invalid crc value [ 109.796749][ T6054] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.860202][ T6054] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 109.932029][ T6054] usb 1-1: media controller created [ 109.999365][ T5856] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.043476][ T6054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.140981][ T6054] az6027: usb out operation failed. (-71) [ 110.154401][ T6147] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.215515][ T6054] az6027: usb out operation failed. (-71) [ 110.262031][ T6054] stb0899_attach: Driver disabled by Kconfig [ 110.268086][ T6054] az6027: no front-end attached [ 110.268086][ T6054] [ 110.280681][ T6147] F2FS-fs (loop2): Start checkpoint disabled! [ 110.334500][ T6054] az6027: usb out operation failed. (-71) [ 110.356828][ T6054] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 110.387881][ T6054] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 110.399833][ T6147] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 110.493797][ T6054] dvb-usb: schedule remote query interval to 400 msecs. [ 110.500779][ T6054] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 110.537981][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 110.538003][ T30] audit: type=1800 audit(1754701980.108:23): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.46" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 110.622368][ T6054] usb 1-1: USB disconnect, device number 2 [ 110.753203][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.62'. [ 110.765926][ T6195] loop4: detected capacity change from 0 to 256 [ 110.816837][ T13] kworker/u8:1: attempt to access beyond end of device [ 110.816837][ T13] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.890022][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 110.890056][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.890073][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 110.890108][ T13] Call Trace: [ 110.890117][ T13] [ 110.890127][ T13] dump_stack_lvl+0x189/0x250 [ 110.890164][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.890195][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 110.890220][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 110.890250][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.890292][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 110.890333][ T13] f2fs_write_end_io+0x886/0xb60 [ 110.890390][ T13] __submit_merged_bio+0x27a/0x6a0 [ 110.890428][ T13] __submit_merged_write_cond+0x255/0x530 [ 110.890467][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 110.890541][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.890593][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 110.890630][ T13] ? stack_trace_save+0x9c/0xe0 [ 110.890704][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 110.890751][ T13] ? trace_f2fs_writepages+0x7f/0x200 [ 110.890784][ T13] ? f2fs_write_node_pages+0x478/0x6e0 [ 110.890820][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 110.890857][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.890894][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.890930][ T13] do_writepages+0x32e/0x550 [ 110.890970][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.890998][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 110.891024][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 110.891067][ T13] __writeback_single_inode+0x145/0xff0 [ 110.891100][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891128][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 110.891165][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 110.891229][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 110.891310][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891338][ T13] ? rcu_is_watching+0x15/0xb0 [ 110.891362][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891401][ T13] wb_writeback+0x43b/0xaf0 [ 110.891442][ T13] ? queue_io+0x391/0x590 [ 110.891477][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 110.891518][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.891552][ T13] wb_workfn+0x409/0xef0 [ 110.891595][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 110.891627][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891655][ T13] ? __lock_acquire+0xab9/0xd20 [ 110.891710][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891742][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891775][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.891800][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 110.891824][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 110.891851][ T13] process_scheduled_works+0xae1/0x17b0 [ 110.891911][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.891948][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.891988][ T13] worker_thread+0x8a0/0xda0 [ 110.892045][ T13] kthread+0x711/0x8a0 [ 110.892080][ T13] ? __pfx_worker_thread+0x10/0x10 [ 110.892105][ T13] ? __pfx_kthread+0x10/0x10 [ 110.892132][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.892165][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.892191][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.892219][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.892248][ T13] ? __pfx_kthread+0x10/0x10 [ 110.892281][ T13] ret_from_fork+0x3fc/0x770 [ 110.892310][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 110.892344][ T13] ? __switch_to_asm+0x39/0x70 [ 110.892377][ T13] ? __switch_to_asm+0x33/0x70 [ 110.892408][ T13] ? __pfx_kthread+0x10/0x10 [ 110.892441][ T13] ret_from_fork_asm+0x1a/0x30 [ 110.892495][ T13] [ 110.934197][ T6195] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 111.106734][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 111.361463][ T6054] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 111.502216][ T5931] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.516370][ T6185] loop3: detected capacity change from 0 to 40427 [ 111.589271][ T6205] loop1: detected capacity change from 0 to 512 [ 111.615622][ T6185] F2FS-fs (loop3): invalid crc value [ 111.653956][ T6205] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.700940][ T5931] usb 6-1: unable to get BOS descriptor or descriptor too short [ 111.708105][ T6205] EXT4-fs error (device loop1): __ext4_iget:5464: inode #11: block 1: comm syz.1.67: invalid block [ 111.726117][ T5931] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 111.732996][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 111.743677][ T5931] usb 6-1: string descriptor 0 read error: -22 [ 111.761591][ T5931] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 111.774760][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.875841][ T6205] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.67: couldn't read orphan inode 11 (err -117) [ 111.948120][ T6185] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 111.969323][ T5931] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 111.980070][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.050556][ T6185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.109749][ T6205] EXT4-fs (loop1): shut down requested (1) [ 112.347272][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.405168][ T5860] syz-executor: attempt to access beyond end of device [ 112.405168][ T5860] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 112.486606][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 112.486645][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.486665][ T5860] Call Trace: [ 112.486674][ T5860] [ 112.486683][ T5860] dump_stack_lvl+0x189/0x250 [ 112.486721][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.486748][ T5860] ? __pfx_queue_work_on+0x10/0x10 [ 112.486770][ T5860] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 112.486796][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.486825][ T5860] ? f2fs_hw_is_readonly+0x39b/0x470 [ 112.486858][ T5860] f2fs_handle_critical_error+0x37c/0x540 [ 112.486892][ T5860] f2fs_write_end_io+0x886/0xb60 [ 112.486944][ T5860] __submit_merged_bio+0x27a/0x6a0 [ 112.486978][ T5860] f2fs_submit_page_write+0xe16/0x21b0 [ 112.487014][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.487052][ T5860] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 112.487090][ T5860] do_write_page+0x6a6/0x940 [ 112.487134][ T5860] f2fs_do_write_node_page+0x3b/0x60 [ 112.487171][ T5860] __write_node_folio+0x8c1/0x1550 [ 112.487193][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.487225][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.487260][ T5860] ? __pfx___write_node_folio+0x10/0x10 [ 112.487281][ T5860] ? folio_clear_dirty_for_io+0x6b5/0x8c0 [ 112.487329][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.487354][ T5860] ? f2fs_folio_wait_writeback+0xa9/0x240 [ 112.487380][ T5860] f2fs_sync_node_pages+0xe6e/0x15e0 [ 112.487427][ T5860] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 112.487483][ T5860] ? f2fs_write_checkpoint+0xe43/0x1df0 [ 112.487521][ T5860] ? up_write+0x1c4/0x420 [ 112.487543][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 112.487576][ T5860] f2fs_write_checkpoint+0xe6f/0x1df0 [ 112.487634][ T5860] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 112.487715][ T5860] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 112.487747][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.487771][ T5860] ? kfree+0x18e/0x440 [ 112.487800][ T5860] ? kill_f2fs_super+0x298/0x6c0 [ 112.487838][ T5860] kill_f2fs_super+0x2c3/0x6c0 [ 112.487878][ T5860] ? __pfx_kill_f2fs_super+0x10/0x10 [ 112.487908][ T5860] ? radix_tree_delete_item+0x2b6/0x400 [ 112.487940][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.487965][ T5860] ? shrinker_free+0x2ce/0x3e0 [ 112.487992][ T5860] deactivate_locked_super+0xbc/0x130 [ 112.488022][ T5860] cleanup_mnt+0x425/0x4c0 [ 112.488046][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.488071][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.488100][ T5860] task_work_run+0x1d4/0x260 [ 112.488135][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 112.488162][ T5860] ? __x64_sys_umount+0x122/0x160 [ 112.488198][ T5860] ? exit_to_user_mode_loop+0x40/0x110 [ 112.488234][ T5860] exit_to_user_mode_loop+0xec/0x110 [ 112.488267][ T5860] do_syscall_64+0x2bd/0x3b0 [ 112.488295][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.488321][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.488341][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.488365][ T5860] ? exc_page_fault+0x9f/0xf0 [ 112.488394][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.488415][ T5860] RIP: 0033:0x7fd4eb18ff17 [ 112.488435][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 112.488452][ T5860] RSP: 002b:00007ffc9eac8a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.488475][ T5860] RAX: 0000000000000000 RBX: 00007fd4eb211c05 RCX: 00007fd4eb18ff17 [ 112.488489][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9eac8ad0 [ 112.488503][ T5860] RBP: 00007ffc9eac8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 112.488516][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9eac9b60 [ 112.488530][ T5860] R13: 00007fd4eb211c05 R14: 000000000001b662 R15: 00007ffc9eac9ba0 [ 112.488564][ T5860] [ 112.488580][ T5860] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 112.943972][ T5860] syz-executor: attempt to access beyond end of device [ 112.943972][ T5860] loop3: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 112.959831][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 112.959870][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.959886][ T5860] Call Trace: [ 112.959896][ T5860] [ 112.959906][ T5860] dump_stack_lvl+0x189/0x250 [ 112.959948][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.959979][ T5860] ? __pfx_queue_work_on+0x10/0x10 [ 112.960004][ T5860] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 112.960034][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.960081][ T5860] f2fs_handle_critical_error+0x37c/0x540 [ 112.960126][ T5860] f2fs_write_end_io+0x886/0xb60 [ 112.960190][ T5860] __submit_merged_bio+0x27a/0x6a0 [ 112.960219][ T5860] ? up_write+0x1c4/0x420 [ 112.960256][ T5860] __submit_merged_write_cond+0x44c/0x530 [ 112.960288][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.960325][ T5860] __write_node_folio+0x10d2/0x1550 [ 112.960350][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.960387][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.960429][ T5860] ? __pfx___write_node_folio+0x10/0x10 [ 112.960453][ T5860] ? folio_clear_dirty_for_io+0x6b5/0x8c0 [ 112.960514][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.960541][ T5860] ? f2fs_folio_wait_writeback+0xa9/0x240 [ 112.960573][ T5860] f2fs_sync_node_pages+0xe6e/0x15e0 [ 112.960634][ T5860] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 112.960716][ T5860] ? f2fs_write_checkpoint+0xe43/0x1df0 [ 112.960761][ T5860] ? up_write+0x1c4/0x420 [ 112.960786][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 112.960825][ T5860] f2fs_write_checkpoint+0xe6f/0x1df0 [ 112.960900][ T5860] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 112.961000][ T5860] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 112.961037][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.961064][ T5860] ? kfree+0x18e/0x440 [ 112.961099][ T5860] ? kill_f2fs_super+0x298/0x6c0 [ 112.961144][ T5860] kill_f2fs_super+0x2c3/0x6c0 [ 112.961191][ T5860] ? __pfx_kill_f2fs_super+0x10/0x10 [ 112.961225][ T5860] ? radix_tree_delete_item+0x2b6/0x400 [ 112.961266][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.961294][ T5860] ? shrinker_free+0x2ce/0x3e0 [ 112.961327][ T5860] deactivate_locked_super+0xbc/0x130 [ 112.961361][ T5860] cleanup_mnt+0x425/0x4c0 [ 112.961390][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.961416][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.961451][ T5860] task_work_run+0x1d4/0x260 [ 112.961492][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 112.961523][ T5860] ? __x64_sys_umount+0x122/0x160 [ 112.961566][ T5860] ? exit_to_user_mode_loop+0x40/0x110 [ 112.961610][ T5860] exit_to_user_mode_loop+0xec/0x110 [ 112.961648][ T5860] do_syscall_64+0x2bd/0x3b0 [ 112.961684][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.961710][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.961730][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.961754][ T5860] ? exc_page_fault+0x9f/0xf0 [ 112.961784][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.961807][ T5860] RIP: 0033:0x7fd4eb18ff17 [ 112.961828][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 112.961848][ T5860] RSP: 002b:00007ffc9eac8a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.961872][ T5860] RAX: 0000000000000000 RBX: 00007fd4eb211c05 RCX: 00007fd4eb18ff17 [ 112.961888][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9eac8ad0 [ 112.961903][ T5860] RBP: 00007ffc9eac8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 112.961918][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9eac9b60 [ 112.961939][ T5860] R13: 00007fd4eb211c05 R14: 000000000001b662 R15: 00007ffc9eac9ba0 [ 112.961980][ T5860] [ 113.376640][ T5931] usb 6-1: device descriptor read/64, error -71 [ 113.391312][ T5860] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 113.468676][ T6235] loop1: detected capacity change from 0 to 512 [ 113.532922][ T6235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.646394][ T5931] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 113.658540][ T5931] usb 6-1: device reset changed ep0 maxpacket size! [ 113.670925][ T5931] usb 6-1: USB disconnect, device number 3 [ 113.692061][ T6235] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.802510][ T5931] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 113.817106][ T6235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.902763][ T6235] EXT4-fs (loop1): 1 truncate cleaned up [ 113.918673][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.012102][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 114.077251][ T5931] usb 6-1: unable to get BOS descriptor or descriptor too short [ 114.103717][ T5931] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 114.125438][ T6235] overlayfs: invalid origin (00000079001c1f2bae8ab57ef9f5ea9bedeabfa3f83b203bff7b5b5eff2bf10f26f5ebb5f39bafe3ea1f9fb79dd36cf5fadf95bcddb0efc3c985854be311bb92) [ 114.153352][ T5931] usb 6-1: can't read configurations, error -71 [ 114.188456][ T6252] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 114.222162][ T6252] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 114.266829][ T5856] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /11/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.276206][ T6252] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 114.349425][ T5856] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 114.423898][ T5856] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /11/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.491248][ T5856] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 114.569591][ T5856] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /11/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.626422][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 114.642581][ T5856] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 114.707603][ T5856] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /11/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.780070][ T6260] loop5: detected capacity change from 0 to 64 [ 114.803320][ T5856] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 114.902630][ T5856] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /11/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 114.990599][ T5856] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 115.026606][ T6264] loop0: detected capacity change from 0 to 1024 [ 115.199410][ T6268] loop4: detected capacity change from 0 to 256 [ 115.252757][ T6268] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.269049][ T6251] loop2: detected capacity change from 0 to 32768 [ 115.306806][ T6268] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 115.381707][ T6251] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.409238][ T6268] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 115.561521][ T6282] netlink: 'syz.3.97': attribute type 41 has an invalid length. [ 115.710232][ T6251] XFS (loop2): Ending clean mount [ 116.004001][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 116.060842][ T5864] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.189229][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.192110][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 116.213298][ T5931] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 116.238048][ T5931] usb 6-1: config 4 has no interface number 0 [ 116.277577][ T5931] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.292311][ T6292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.316137][ T5931] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.327161][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.369138][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.401889][ T5931] hub 6-1:4.128: USB hub found [ 116.488219][ T6293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.624850][ T5931] hub 6-1:4.128: 2 ports detected [ 116.629977][ T5931] hub 6-1:4.128: Using single TT (err -22) [ 116.833944][ T5931] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 116.840891][ T5931] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 116.884562][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.929015][ T5931] usb 6-1: USB disconnect, device number 6 [ 117.150332][ T1095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.167590][ T6320] loop0: detected capacity change from 0 to 256 [ 117.210167][ T6319] loop3: detected capacity change from 0 to 1024 [ 117.384273][ T1095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.548931][ T3562] hfsplus: b-tree write err: -5, ino 4 [ 117.665746][ T1095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.849971][ T30] audit: type=1326 audit(1754701987.418:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.4.120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6cb38ebe9 code=0x0 [ 117.894044][ T1095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.078813][ T6337] loop3: detected capacity change from 0 to 16 [ 118.144590][ T6337] erofs (device loop3): mounted with root inode @ nid 36. [ 118.414979][ T1095] bridge_slave_1: left allmulticast mode [ 118.447620][ T1095] bridge_slave_1: left promiscuous mode [ 118.479123][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.526384][ T1095] bridge_slave_0: left allmulticast mode [ 118.544203][ T1095] bridge_slave_0: left promiscuous mode [ 118.561726][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.787003][ T6348] loop0: detected capacity change from 0 to 2048 [ 118.847495][ T6348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.891096][ T5178] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.907837][ T5178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.917901][ T5178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.929614][ T5178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.938090][ T5178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.356167][ T6362] loop5: detected capacity change from 0 to 8 [ 119.430552][ T6362] SQUASHFS error: Failed to read block 0x4de: -5 [ 119.449033][ T6362] SQUASHFS error: Failed to read block 0x4de: -5 [ 119.496152][ T30] audit: type=1800 audit(1754701989.068:25): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.134" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 119.727884][ T6370] sctp: [Deprecated]: syz.5.136 (pid 6370) Use of int in maxseg socket option. [ 119.727884][ T6370] Use struct sctp_assoc_value instead [ 119.848635][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.870935][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.899527][ T1095] bond0 (unregistering): Released all slaves [ 120.085266][ T6360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.191815][ T6363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.314372][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.545704][ T6385] loop2: detected capacity change from 0 to 4096 [ 120.562286][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.587659][ T6393] loop0: detected capacity change from 0 to 512 [ 120.629307][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.672658][ T6385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.743570][ T6391] team0: Caught tx_queue_len zero misconfig [ 120.780608][ T6385] fs-verity (loop2, inode 16): Unsupported log_blocksize: 13 [ 120.873809][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 120.978857][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.002579][ T5863] Bluetooth: hci0: command tx timeout [ 121.353895][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.443107][ T5972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.532114][ T6054] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.602421][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.713882][ T6054] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 121.770842][ T6054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.828543][ T6054] usb 1-1: config 0 descriptor?? [ 121.872304][ T1095] hsr_slave_0: left promiscuous mode [ 121.973176][ T1095] hsr_slave_1: left promiscuous mode [ 121.999871][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.014889][ T6389] loop5: detected capacity change from 0 to 40427 [ 122.035918][ T6389] F2FS-fs (loop5): build fault injection rate: 25 [ 122.050733][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.076789][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.078086][ T6389] F2FS-fs (loop5): build fault injection type: 0x7698c [ 122.119480][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.143182][ T6389] F2FS-fs (loop5): invalid crc value [ 122.195723][ T6389] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970 [ 122.240529][ T6389] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 122.263727][ T1095] veth1_macvtap: left promiscuous mode [ 122.276073][ T1095] veth0_macvtap: left promiscuous mode [ 122.310453][ T1095] veth1_vlan: left promiscuous mode [ 122.344305][ T1095] veth0_vlan: left promiscuous mode [ 122.480769][ T6054] ath6kl: mismatched byte count 0 vs. expected 12 [ 122.528002][ T6054] ath6kl: Failed to init ath6kl core: -22 [ 122.581761][ T6054] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 122.673562][ T6389] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.726500][ T6054] usb 1-1: USB disconnect, device number 3 [ 122.792066][ T6389] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 122.955003][ T6389] syz.5.147: attempt to access beyond end of device [ 122.955003][ T6389] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 123.035419][ T6448] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_get_read_data_folio+0x3d2/0x7d0 [ 123.088876][ T5863] Bluetooth: hci0: command tx timeout [ 123.372548][ T5866] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4ef/0x21b0 [ 123.422043][ T5866] F2FS-fs (loop5): invalid blkaddr: 512, type: 10, run fsck to fix. [ 123.514640][ C1] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 123.525382][ C1] CPU: 1 UID: 0 PID: 6452 Comm: syz.4.167 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 123.525425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.525440][ C1] Call Trace: [ 123.525448][ C1] [ 123.525457][ C1] dump_stack_lvl+0x189/0x250 [ 123.525496][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.525525][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 123.525549][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 123.525578][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.525615][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 123.525653][ C1] f2fs_write_end_io+0x886/0xb60 [ 123.525706][ C1] blk_update_request+0x57e/0xe60 [ 123.525748][ C1] blk_mq_end_request+0x3e/0x70 [ 123.525773][ C1] blk_done_softirq+0x10a/0x160 [ 123.525812][ C1] handle_softirqs+0x286/0x870 [ 123.525841][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 123.525870][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 123.525891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.525917][ C1] ? irq_work_single+0x1ac/0x240 [ 123.525955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.525982][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 123.526017][ C1] __irq_exit_rcu+0xca/0x1f0 [ 123.526040][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 123.526069][ C1] ? rcu_is_watching+0x15/0xb0 [ 123.526097][ C1] irq_exit_rcu+0x9/0x30 [ 123.526118][ C1] sysvec_irq_work+0xa3/0xc0 [ 123.526141][ C1] [ 123.526148][ C1] [ 123.526158][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 123.526181][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 123.526214][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 8b df 9e ff cc f3 0f 1e fa 89 f6 31 d2 e9 c2 d9 8d 03 66 [ 123.526233][ C1] RSP: 0018:ffffc90004ed7b28 EFLAGS: 00000246 [ 123.526254][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 123.526269][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 123.526283][ C1] RBP: ffffc90004ed7c00 R08: ffffc90004ed7b87 R09: 1ffff920009daf70 [ 123.526301][ C1] R10: dffffc0000000000 R11: fffff520009daf71 R12: ffff8880b8731401 [ 123.526318][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b87314b0 [ 123.526353][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.526381][ C1] arch_irq_work_raise+0x6d/0x80 [ 123.526423][ C1] __irq_work_queue_local+0x1d7/0x550 [ 123.526456][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.526488][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 123.526525][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 123.526556][ C1] ? __pfx___free_object+0x10/0x10 [ 123.526587][ C1] irq_work_queue+0x99/0x140 [ 123.526623][ C1] bpf_send_signal_common+0x3b4/0x540 [ 123.526663][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 123.526707][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 123.526735][ C1] ? __lock_acquire+0xab9/0xd20 [ 123.526777][ C1] bpf_send_signal+0x1d/0x30 [ 123.526802][ C1] bpf_prog_8cc4ff36b5985b6a+0x1e/0x24 [ 123.526824][ C1] bpf_trace_run2+0x284/0x4b0 [ 123.526854][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.526882][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 123.526916][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 123.526954][ C1] ? __might_fault+0xb0/0x130 [ 123.526989][ C1] ? trace_sys_enter+0x74/0x100 [ 123.527028][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 123.527066][ C1] trace_sys_enter+0xb0/0x100 [ 123.527105][ C1] syscall_trace_enter+0xf9/0x160 [ 123.527145][ C1] do_syscall_64+0xd3/0x3b0 [ 123.527177][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.527206][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.527229][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.527257][ C1] ? exc_page_fault+0x9f/0xf0 [ 123.527288][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.527311][ C1] RIP: 0033:0x7fb6cb3c14a5 [ 123.527331][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 123.527350][ C1] RSP: 002b:00007ffd1d9bd210 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 123.527374][ C1] RAX: ffffffffffffffda RBX: 00007fb6cb5b5fa0 RCX: 00007fb6cb3c14a5 [ 123.527392][ C1] RDX: 00007ffd1d9bd250 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.527407][ C1] RBP: 00007fb6cb5b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 123.527432][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e4d1 [ 123.527447][ C1] R13: 00007fb6cb5b6090 R14: ffffffffffffffff R15: 00007ffd1d9bd390 [ 123.527485][ C1] [ 123.527494][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 123.985303][ C1] CPU: 1 UID: 0 PID: 6452 Comm: syz.4.167 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 123.985342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.985358][ C1] Call Trace: [ 123.985368][ C1] [ 123.985378][ C1] dump_stack_lvl+0x189/0x250 [ 123.985418][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.985446][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 123.985471][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 123.985501][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.985542][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 123.985578][ C1] f2fs_write_end_io+0x886/0xb60 [ 123.985631][ C1] blk_update_request+0x57e/0xe60 [ 123.985680][ C1] blk_mq_end_request+0x3e/0x70 [ 123.985707][ C1] blk_done_softirq+0x10a/0x160 [ 123.985749][ C1] handle_softirqs+0x286/0x870 [ 123.985776][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 123.985809][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 123.985832][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.985861][ C1] ? irq_work_single+0x1ac/0x240 [ 123.985900][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.985928][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 123.985965][ C1] __irq_exit_rcu+0xca/0x1f0 [ 123.985989][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 123.986018][ C1] ? rcu_is_watching+0x15/0xb0 [ 123.986046][ C1] irq_exit_rcu+0x9/0x30 [ 123.986068][ C1] sysvec_irq_work+0xa3/0xc0 [ 123.986092][ C1] [ 123.986101][ C1] [ 123.986111][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 123.986137][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 123.986172][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 8b df 9e ff cc f3 0f 1e fa 89 f6 31 d2 e9 c2 d9 8d 03 66 [ 123.986193][ C1] RSP: 0018:ffffc90004ed7b28 EFLAGS: 00000246 [ 123.986217][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 123.986233][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 123.986249][ C1] RBP: ffffc90004ed7c00 R08: ffffc90004ed7b87 R09: 1ffff920009daf70 [ 123.986268][ C1] R10: dffffc0000000000 R11: fffff520009daf71 R12: ffff8880b8731401 [ 123.986287][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b87314b0 [ 123.986329][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986362][ C1] arch_irq_work_raise+0x6d/0x80 [ 123.986403][ C1] __irq_work_queue_local+0x1d7/0x550 [ 123.986438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986472][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 123.986510][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 123.986544][ C1] ? __pfx___free_object+0x10/0x10 [ 123.986577][ C1] irq_work_queue+0x99/0x140 [ 123.986615][ C1] bpf_send_signal_common+0x3b4/0x540 [ 123.986657][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 123.986712][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 123.986745][ C1] ? __lock_acquire+0xab9/0xd20 [ 123.986790][ C1] bpf_send_signal+0x1d/0x30 [ 123.986817][ C1] bpf_prog_8cc4ff36b5985b6a+0x1e/0x24 [ 123.986840][ C1] bpf_trace_run2+0x284/0x4b0 [ 123.986874][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986902][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 123.986936][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 123.986976][ C1] ? __might_fault+0xb0/0x130 [ 123.987013][ C1] ? trace_sys_enter+0x74/0x100 [ 123.987056][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 123.987096][ C1] trace_sys_enter+0xb0/0x100 [ 123.987136][ C1] syscall_trace_enter+0xf9/0x160 [ 123.987179][ C1] do_syscall_64+0xd3/0x3b0 [ 123.987212][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.987244][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.987268][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987297][ C1] ? exc_page_fault+0x9f/0xf0 [ 123.987330][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.987354][ C1] RIP: 0033:0x7fb6cb3c14a5 [ 123.987376][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 123.987396][ C1] RSP: 002b:00007ffd1d9bd210 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 123.987421][ C1] RAX: ffffffffffffffda RBX: 00007fb6cb5b5fa0 RCX: 00007fb6cb3c14a5 [ 123.987440][ C1] RDX: 00007ffd1d9bd250 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.987456][ C1] RBP: 00007fb6cb5b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 123.987472][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e4d1 [ 123.987486][ C1] R13: 00007fb6cb5b6090 R14: ffffffffffffffff R15: 00007ffd1d9bd390 [ 123.987524][ C1] [ 123.987535][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 124.444872][ C1] CPU: 1 UID: 0 PID: 6452 Comm: syz.4.167 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 124.444909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.444926][ C1] Call Trace: [ 124.444936][ C1] [ 124.444946][ C1] dump_stack_lvl+0x189/0x250 [ 124.444990][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.445022][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 124.445050][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 124.445081][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 124.445124][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 124.445166][ C1] f2fs_write_end_io+0x886/0xb60 [ 124.445225][ C1] blk_update_request+0x57e/0xe60 [ 124.445271][ C1] blk_mq_end_request+0x3e/0x70 [ 124.445299][ C1] blk_done_softirq+0x10a/0x160 [ 124.445344][ C1] handle_softirqs+0x286/0x870 [ 124.445375][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 124.445408][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 124.445431][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.445461][ C1] ? irq_work_single+0x1ac/0x240 [ 124.445502][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.445531][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 124.445568][ C1] __irq_exit_rcu+0xca/0x1f0 [ 124.445594][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 124.445625][ C1] ? rcu_is_watching+0x15/0xb0 [ 124.445653][ C1] irq_exit_rcu+0x9/0x30 [ 124.445681][ C1] sysvec_irq_work+0xa3/0xc0 [ 124.445707][ C1] [ 124.445715][ C1] [ 124.445726][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 124.445751][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 124.445788][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 8b df 9e ff cc f3 0f 1e fa 89 f6 31 d2 e9 c2 d9 8d 03 66 [ 124.445808][ C1] RSP: 0018:ffffc90004ed7b28 EFLAGS: 00000246 [ 124.445832][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 124.445848][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 124.445864][ C1] RBP: ffffc90004ed7c00 R08: ffffc90004ed7b87 R09: 1ffff920009daf70 [ 124.445884][ C1] R10: dffffc0000000000 R11: fffff520009daf71 R12: ffff8880b8731401 [ 124.445903][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b87314b0 [ 124.445940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.445970][ C1] arch_irq_work_raise+0x6d/0x80 [ 124.446011][ C1] __irq_work_queue_local+0x1d7/0x550 [ 124.446047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.446080][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 124.446119][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 124.446152][ C1] ? __pfx___free_object+0x10/0x10 [ 124.446185][ C1] irq_work_queue+0x99/0x140 [ 124.446223][ C1] bpf_send_signal_common+0x3b4/0x540 [ 124.446266][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 124.446312][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 124.446341][ C1] ? __lock_acquire+0xab9/0xd20 [ 124.446387][ C1] bpf_send_signal+0x1d/0x30 [ 124.446413][ C1] bpf_prog_8cc4ff36b5985b6a+0x1e/0x24 [ 124.446436][ C1] bpf_trace_run2+0x284/0x4b0 [ 124.446469][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.446498][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 124.446534][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 124.446574][ C1] ? __might_fault+0xb0/0x130 [ 124.446612][ C1] ? trace_sys_enter+0x74/0x100 [ 124.446654][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 124.446700][ C1] trace_sys_enter+0xb0/0x100 [ 124.446741][ C1] syscall_trace_enter+0xf9/0x160 [ 124.446784][ C1] do_syscall_64+0xd3/0x3b0 [ 124.446817][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.446848][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.446873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.446902][ C1] ? exc_page_fault+0x9f/0xf0 [ 124.446936][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.446960][ C1] RIP: 0033:0x7fb6cb3c14a5 [ 124.446981][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 124.447002][ C1] RSP: 002b:00007ffd1d9bd210 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 124.447026][ C1] RAX: ffffffffffffffda RBX: 00007fb6cb5b5fa0 RCX: 00007fb6cb3c14a5 [ 124.447046][ C1] RDX: 00007ffd1d9bd250 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.447062][ C1] RBP: 00007fb6cb5b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 124.447080][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e4d1 [ 124.447096][ C1] R13: 00007fb6cb5b6090 R14: ffffffffffffffff R15: 00007ffd1d9bd390 [ 124.447135][ C1] [ 124.447145][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 124.601616][ T6439] loop3: detected capacity change from 0 to 32768 [ 124.605052][ C1] CPU: 1 UID: 0 PID: 6452 Comm: syz.4.167 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 124.605082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.605097][ C1] Call Trace: [ 124.605107][ C1] [ 124.605116][ C1] dump_stack_lvl+0x189/0x250 [ 124.605158][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.605189][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 124.605214][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 124.605245][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 124.605287][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 124.605327][ C1] f2fs_write_end_io+0x886/0xb60 [ 124.605384][ C1] blk_update_request+0x57e/0xe60 [ 124.605428][ C1] blk_mq_end_request+0x3e/0x70 [ 124.605455][ C1] blk_done_softirq+0x10a/0x160 [ 124.605498][ C1] handle_softirqs+0x286/0x870 [ 124.605529][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 124.605560][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 124.605583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.605612][ C1] ? irq_work_single+0x1ac/0x240 [ 124.605651][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.605684][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 124.605721][ C1] __irq_exit_rcu+0xca/0x1f0 [ 124.605748][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 124.605779][ C1] ? rcu_is_watching+0x15/0xb0 [ 124.605807][ C1] irq_exit_rcu+0x9/0x30 [ 124.605828][ C1] sysvec_irq_work+0xa3/0xc0 [ 124.605853][ C1] [ 124.605861][ C1] [ 124.605872][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 124.605899][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 124.605937][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 8b df 9e ff cc f3 0f 1e fa 89 f6 31 d2 e9 c2 d9 8d 03 66 [ 124.605957][ C1] RSP: 0018:ffffc90004ed7b28 EFLAGS: 00000246 [ 124.605980][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 124.605996][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 124.606011][ C1] RBP: ffffc90004ed7c00 R08: ffffc90004ed7b87 R09: 1ffff920009daf70 [ 124.606029][ C1] R10: dffffc0000000000 R11: fffff520009daf71 R12: ffff8880b8731401 [ 124.606048][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b87314b0 [ 124.606086][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.606114][ C1] arch_irq_work_raise+0x6d/0x80 [ 124.606153][ C1] __irq_work_queue_local+0x1d7/0x550 [ 124.606188][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.606220][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 124.606257][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 124.606290][ C1] ? __pfx___free_object+0x10/0x10 [ 124.606321][ C1] irq_work_queue+0x99/0x140 [ 124.606358][ C1] bpf_send_signal_common+0x3b4/0x540 [ 124.606399][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 124.606444][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 124.606473][ C1] ? __lock_acquire+0xab9/0xd20 [ 124.606516][ C1] bpf_send_signal+0x1d/0x30 [ 124.606542][ C1] bpf_prog_8cc4ff36b5985b6a+0x1e/0x24 [ 124.606566][ C1] bpf_trace_run2+0x284/0x4b0 [ 124.606598][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.606626][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 124.606668][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 124.606707][ C1] ? __might_fault+0xb0/0x130 [ 124.606743][ C1] ? trace_sys_enter+0x74/0x100 [ 124.606783][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 124.606822][ C1] trace_sys_enter+0xb0/0x100 [ 124.606862][ C1] syscall_trace_enter+0xf9/0x160 [ 124.606903][ C1] do_syscall_64+0xd3/0x3b0 [ 124.606935][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.606965][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.606988][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.607016][ C1] ? exc_page_fault+0x9f/0xf0 [ 124.607048][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.607072][ C1] RIP: 0033:0x7fb6cb3c14a5 [ 124.607093][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 124.607113][ C1] RSP: 002b:00007ffd1d9bd210 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 124.607136][ C1] RAX: ffffffffffffffda RBX: 00007fb6cb5b5fa0 RCX: 00007fb6cb3c14a5 [ 124.607155][ C1] RDX: 00007ffd1d9bd250 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.607170][ C1] RBP: 00007fb6cb5b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 124.607187][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e4d1 [ 124.607203][ C1] R13: 00007fb6cb5b6090 R14: ffffffffffffffff R15: 00007ffd1d9bd390 [ 124.607241][ C1] [ 124.607251][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 124.712957][ T6439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.163 (6439) [ 124.714343][ C1] CPU: 1 UID: 0 PID: 6452 Comm: syz.4.167 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 124.714371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.714386][ C1] Call Trace: [ 124.714397][ C1] [ 124.714408][ C1] dump_stack_lvl+0x189/0x250 [ 124.714448][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.714478][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 124.714504][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 124.714534][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 124.714576][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 124.714616][ C1] f2fs_write_end_io+0x886/0xb60 [ 124.714679][ C1] blk_update_request+0x57e/0xe60 [ 124.714724][ C1] blk_mq_end_request+0x3e/0x70 [ 124.714751][ C1] blk_done_softirq+0x10a/0x160 [ 124.714794][ C1] handle_softirqs+0x286/0x870 [ 124.714825][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 124.714857][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 124.714879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.714908][ C1] ? irq_work_single+0x1ac/0x240 [ 124.714948][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.714976][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 124.715012][ C1] __irq_exit_rcu+0xca/0x1f0 [ 124.715037][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 124.715067][ C1] ? rcu_is_watching+0x15/0xb0 [ 124.715095][ C1] irq_exit_rcu+0x9/0x30 [ 124.715117][ C1] sysvec_irq_work+0xa3/0xc0 [ 124.715142][ C1] [ 124.715150][ C1] [ 124.715161][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 124.715186][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 124.715220][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 8b df 9e ff cc f3 0f 1e fa 89 f6 31 d2 e9 c2 d9 8d 03 66 [ 124.715240][ C1] RSP: 0018:ffffc90004ed7b28 EFLAGS: 00000246 [ 124.715262][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 124.715278][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 124.715293][ C1] RBP: ffffc90004ed7c00 R08: ffffc90004ed7b87 R09: 1ffff920009daf70 [ 124.715311][ C1] R10: dffffc0000000000 R11: fffff520009daf71 R12: ffff8880b8731401 [ 124.715330][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b87314b0 [ 124.715367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.715395][ C1] arch_irq_work_raise+0x6d/0x80 [ 124.715433][ C1] __irq_work_queue_local+0x1d7/0x550 [ 124.715468][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.715500][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 124.715537][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 124.715569][ C1] ? __pfx___free_object+0x10/0x10 [ 124.715600][ C1] irq_work_queue+0x99/0x140 [ 124.715637][ C1] bpf_send_signal_common+0x3b4/0x540 [ 124.715684][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 124.715729][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 124.715757][ C1] ? __lock_acquire+0xab9/0xd20 [ 124.715800][ C1] bpf_send_signal+0x1d/0x30 [ 124.715827][ C1] bpf_prog_8cc4ff36b5985b6a+0x1e/0x24 [ 124.715850][ C1] bpf_trace_run2+0x284/0x4b0 [ 124.715881][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.715909][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 124.715944][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 124.715983][ C1] ? __might_fault+0xb0/0x130 [ 124.716019][ C1] ? trace_sys_enter+0x74/0x100 [ 124.716058][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 124.716097][ C1] trace_sys_enter+0xb0/0x100 [ 124.716136][ C1] syscall_trace_enter+0xf9/0x160 [ 124.716177][ C1] do_syscall_64+0xd3/0x3b0 [ 124.716209][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.716239][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.716262][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 124.716290][ C1] ? exc_page_fault+0x9f/0xf0 [ 124.716322][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.716346][ C1] RIP: 0033:0x7fb6cb3c14a5 [ 124.716367][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 124.716386][ C1] RSP: 002b:00007ffd1d9bd210 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 124.716410][ C1] RAX: ffffffffffffffda RBX: 00007fb6cb5b5fa0 RCX: 00007fb6cb3c14a5 [ 124.716427][ C1] RDX: 00007ffd1d9bd250 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.716443][ C1] RBP: 00007fb6cb5b7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 124.716460][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001e4d1 [ 124.716475][ C1] R13: 00007fb6cb5b6090 R14: ffffffffffffffff R15: 00007ffd1d9bd390 [ 124.716514][ C1] [ 124.716524][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 124.809046][ T6439] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.832705][ T5866] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 125.021794][ T6439] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 125.212863][ T5863] Bluetooth: hci0: command tx timeout [ 125.317667][ T6439] BTRFS info (device loop3): using free-space-tree [ 125.917494][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 125.918858][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 126.032437][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 126.094491][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 126.159958][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 126.170379][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 126.180874][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 126.190888][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 126.201608][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 126.212896][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 126.224166][ T6439] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 126.246313][ T6439] BTRFS error (device loop3): open_ctree failed: -12 [ 126.304815][ T6482] netlink: 'syz.4.173': attribute type 2 has an invalid length. [ 126.333061][ T6484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.174'. [ 126.334116][ T6482] netlink: 124 bytes leftover after parsing attributes in process `syz.4.173'. [ 126.373183][ T6484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.174'. [ 126.692779][ T6491] loop4: detected capacity change from 0 to 1024 [ 126.918775][ T13] hfsplus: b-tree write err: -5, ino 8 [ 127.208777][ T6499] loop5: detected capacity change from 0 to 2048 [ 127.305480][ T6499] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.374474][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 127.414487][ T5863] Bluetooth: hci0: command tx timeout [ 127.520160][ T6508] loop4: detected capacity change from 0 to 1024 [ 127.527761][ T6508] EXT4-fs: Ignoring removed nobh option [ 127.550025][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 127.555049][ T6508] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.643297][ T6508] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.183: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 127.692952][ T6508] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.183: couldn't read orphan inode 11 (err -117) [ 127.733515][ T6508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.798954][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 127.820572][ T6508] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.183: Invalid block bitmap block 0 in block_group 0 [ 127.858255][ T6508] Quota error (device loop4): write_blk: dquota write failed [ 127.866483][ T6508] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 127.878319][ T6508] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.183: Failed to acquire dquot type 0 [ 127.920580][ T6512] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.183: Invalid inode bitmap blk 137438953472 in block_group 0 [ 128.098444][ T36] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm kworker/u8:2: Invalid inode table block 8589934593 in block_group 0 [ 128.136066][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.404163][ T6516] loop4: detected capacity change from 0 to 4096 [ 128.491798][ T6516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.551898][ T6516] EXT4-fs (loop4): shut down requested (2) [ 128.641647][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.055942][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.192552][ T6525] loop4: detected capacity change from 0 to 2048 [ 129.261821][ T6525] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.872103][ T5938] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.930124][ T6353] chnl_net:caif_netlink_parms(): no params data found [ 129.943522][ T6549] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 130.079477][ T5938] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 130.108556][ T5938] usb 1-1: config 0 has no interface number 0 [ 130.133160][ T5938] usb 1-1: config 0 interface 98 has no altsetting 0 [ 130.158612][ T6549] team0: Port device geneve1 added [ 130.190664][ T5938] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 130.241572][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.257477][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.261496][ T5938] usb 1-1: Product: syz [ 130.290526][ T5938] usb 1-1: Manufacturer: syz [ 130.294483][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.314711][ T5938] usb 1-1: SerialNumber: syz [ 130.353586][ T5938] usb 1-1: config 0 descriptor?? [ 130.654070][ T5938] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 130.672321][ T5972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.705902][ T6566] loop3: detected capacity change from 0 to 1024 [ 130.729875][ T6566] EXT4-fs: Ignoring removed oldalloc option [ 130.769986][ T6566] EXT4-fs: Ignoring removed bh option [ 130.903166][ T6566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.039356][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.082323][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.118064][ T6353] bridge_slave_0: entered allmulticast mode [ 131.146652][ T5938] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 131.152294][ T6353] bridge_slave_0: entered promiscuous mode [ 131.201412][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.215576][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.239568][ T6353] bridge_slave_1: entered allmulticast mode [ 131.283896][ T6580] loop2: detected capacity change from 0 to 128 [ 131.291563][ T6353] bridge_slave_1: entered promiscuous mode [ 131.405348][ T6580] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.473142][ T6580] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.509660][ T6551] loop5: detected capacity change from 0 to 32768 [ 131.584077][ T6580] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 131.587991][ T5938] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 131.617629][ T6551] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 131.655795][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.681780][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.702304][ T6551] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 131.737615][ T5938] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 131.747871][ T2149] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 131.807400][ T5864] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.825938][ T2149] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 131.836838][ T5938] usb 1-1: USB disconnect, device number 4 [ 131.855839][ T2149] ------------[ cut here ]------------ [ 131.861446][ T2149] WARNING: CPU: 1 PID: 2149 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 131.869957][ T2149] Modules linked in: [ 131.874055][ T2149] CPU: 1 UID: 0 PID: 2149 Comm: kworker/1:2 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 131.887206][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.898210][ T2149] Workqueue: events request_firmware_work_func [ 131.904476][ T2149] RIP: 0010:kernfs_get+0x72/0x90 [ 131.908324][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.909430][ T2149] Code: e8 83 71 62 ff 48 89 df be 04 00 00 00 e8 b6 de c5 ff f0 ff 03 eb 05 e8 6c 71 62 ff 5b 5d e9 c0 06 b3 fe cc e8 5f 71 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 b5 [ 131.938321][ T2149] RSP: 0018:ffffc90004fa7620 EFLAGS: 00010293 [ 131.944480][ T2149] RAX: ffffffff825d3a51 RBX: ffff88802fc60a50 RCX: ffff888029399e00 [ 131.952555][ T2149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.960556][ T2149] RBP: 0000000000000000 R08: ffff88802fc60a53 R09: 1ffff11005f8c14a [ 131.968602][ T2149] R10: dffffc0000000000 R11: ffffed1005f8c14b R12: ffff88807bfb3030 [ 131.976728][ T2149] R13: 1ffff1100f7f6607 R14: ffff88807bfb3038 R15: 1ffff1100f7f6606 [ 131.985792][ T2149] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 131.995694][ T2149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.002435][ T2149] CR2: 00007f526a50c072 CR3: 0000000059687000 CR4: 0000000000350ef0 [ 132.010448][ T2149] Call Trace: [ 132.013806][ T2149] [ 132.016750][ T2149] kobject_add_internal+0x632/0xb40 [ 132.022045][ T2149] kobject_add+0x155/0x220 [ 132.026502][ T2149] ? __pfx_kobject_add+0x10/0x10 [ 132.031497][ T2149] ? __pfx_kobject_add+0x10/0x10 [ 132.036576][ T2149] ? kobject_put+0x43f/0x480 [ 132.041226][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.047009][ T2149] ? get_device_parent+0x366/0x3a0 [ 132.052394][ T2149] device_add+0x408/0xb50 [ 132.056804][ T2149] firmware_fallback_sysfs+0x2e4/0x9b0 [ 132.062572][ T2149] _request_firmware+0xf83/0x15b0 [ 132.067674][ T2149] ? __pfx__request_firmware+0x10/0x10 [ 132.073244][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.078920][ T2149] request_firmware_work_func+0xaf/0x1c0 [ 132.085650][ T2149] ? process_scheduled_works+0x9ef/0x17b0 [ 132.091405][ T2149] process_scheduled_works+0xae1/0x17b0 [ 132.098009][ T2149] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.104148][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.109857][ T2149] worker_thread+0x8a0/0xda0 [ 132.114604][ T2149] kthread+0x711/0x8a0 [ 132.118717][ T2149] ? __pfx_worker_thread+0x10/0x10 [ 132.124425][ T2149] ? __pfx_kthread+0x10/0x10 [ 132.129054][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.134768][ T2149] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.140002][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.145707][ T2149] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.150934][ T2149] ? __pfx_kthread+0x10/0x10 [ 132.155684][ T2149] ret_from_fork+0x3fc/0x770 [ 132.160305][ T2149] ? __pfx_ret_from_fork+0x10/0x10 [ 132.165571][ T2149] ? __switch_to_asm+0x39/0x70 [ 132.170376][ T2149] ? __switch_to_asm+0x33/0x70 [ 132.175287][ T2149] ? __pfx_kthread+0x10/0x10 [ 132.179915][ T2149] ret_from_fork_asm+0x1a/0x30 [ 132.185768][ T2149] [ 132.188816][ T2149] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.196107][ T2149] CPU: 1 UID: 0 PID: 2149 Comm: kworker/1:2 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 132.207840][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.217919][ T2149] Workqueue: events request_firmware_work_func [ 132.224138][ T2149] Call Trace: [ 132.227458][ T2149] [ 132.230414][ T2149] dump_stack_lvl+0x99/0x250 [ 132.235057][ T2149] ? __asan_memcpy+0x40/0x70 [ 132.239679][ T2149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.244902][ T2149] ? __pfx__printk+0x10/0x10 [ 132.249522][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.255170][ T2149] vpanic+0x281/0x750 [ 132.259171][ T2149] ? __pfx__printk+0x10/0x10 [ 132.263865][ T2149] ? __pfx_vpanic+0x10/0x10 [ 132.268380][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.274021][ T2149] ? is_bpf_text_address+0x26/0x2b0 [ 132.279234][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.284888][ T2149] panic+0xb9/0xc0 [ 132.288633][ T2149] ? __pfx_panic+0x10/0x10 [ 132.293082][ T2149] __warn+0x31b/0x4b0 [ 132.297073][ T2149] ? kernfs_get+0x72/0x90 [ 132.301407][ T2149] ? kernfs_get+0x72/0x90 [ 132.305748][ T2149] report_bug+0x2be/0x4f0 [ 132.310086][ T2149] ? kernfs_get+0x72/0x90 [ 132.314421][ T2149] ? kernfs_get+0x72/0x90 [ 132.318786][ T2149] ? kernfs_get+0x74/0x90 [ 132.323137][ T2149] handle_bug+0x84/0x160 [ 132.327418][ T2149] exc_invalid_op+0x1a/0x50 [ 132.331932][ T2149] asm_exc_invalid_op+0x1a/0x20 [ 132.336783][ T2149] RIP: 0010:kernfs_get+0x72/0x90 [ 132.341720][ T2149] Code: e8 83 71 62 ff 48 89 df be 04 00 00 00 e8 b6 de c5 ff f0 ff 03 eb 05 e8 6c 71 62 ff 5b 5d e9 c0 06 b3 fe cc e8 5f 71 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 b5 [ 132.361328][ T2149] RSP: 0018:ffffc90004fa7620 EFLAGS: 00010293 [ 132.367407][ T2149] RAX: ffffffff825d3a51 RBX: ffff88802fc60a50 RCX: ffff888029399e00 [ 132.375387][ T2149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.383355][ T2149] RBP: 0000000000000000 R08: ffff88802fc60a53 R09: 1ffff11005f8c14a [ 132.391322][ T2149] R10: dffffc0000000000 R11: ffffed1005f8c14b R12: ffff88807bfb3030 [ 132.399298][ T2149] R13: 1ffff1100f7f6607 R14: ffff88807bfb3038 R15: 1ffff1100f7f6606 [ 132.407285][ T2149] ? kernfs_get+0x71/0x90 [ 132.411630][ T2149] kobject_add_internal+0x632/0xb40 [ 132.416847][ T2149] kobject_add+0x155/0x220 [ 132.421269][ T2149] ? __pfx_kobject_add+0x10/0x10 [ 132.426213][ T2149] ? __pfx_kobject_add+0x10/0x10 [ 132.431152][ T2149] ? kobject_put+0x43f/0x480 [ 132.435748][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.441403][ T2149] ? get_device_parent+0x366/0x3a0 [ 132.446557][ T2149] device_add+0x408/0xb50 [ 132.450907][ T2149] firmware_fallback_sysfs+0x2e4/0x9b0 [ 132.456383][ T2149] _request_firmware+0xf83/0x15b0 [ 132.461433][ T2149] ? __pfx__request_firmware+0x10/0x10 [ 132.466900][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.472537][ T2149] request_firmware_work_func+0xaf/0x1c0 [ 132.478176][ T2149] ? process_scheduled_works+0x9ef/0x17b0 [ 132.483891][ T2149] process_scheduled_works+0xae1/0x17b0 [ 132.489462][ T2149] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.495445][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.501087][ T2149] worker_thread+0x8a0/0xda0 [ 132.505703][ T2149] kthread+0x711/0x8a0 [ 132.509929][ T2149] ? __pfx_worker_thread+0x10/0x10 [ 132.515111][ T2149] ? __pfx_kthread+0x10/0x10 [ 132.519729][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.525376][ T2149] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.530581][ T2149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.536215][ T2149] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.541419][ T2149] ? __pfx_kthread+0x10/0x10 [ 132.546019][ T2149] ret_from_fork+0x3fc/0x770 [ 132.550619][ T2149] ? __pfx_ret_from_fork+0x10/0x10 [ 132.555741][ T2149] ? __switch_to_asm+0x39/0x70 [ 132.560518][ T2149] ? __switch_to_asm+0x33/0x70 [ 132.565292][ T2149] ? __pfx_kthread+0x10/0x10 [ 132.569909][ T2149] ret_from_fork_asm+0x1a/0x30 [ 132.574711][ T2149] [ 132.577970][ T2149] Kernel Offset: disabled [ 132.582337][ T2149] Rebooting in 86400 seconds..