last executing test programs: 3m1.999966906s ago: executing program 2 (id=460): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006e40), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 3m0.930715618s ago: executing program 2 (id=470): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x25, 0x0, &(0x7f0000000140)) 2m59.456027773s ago: executing program 2 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) 2m59.262720781s ago: executing program 2 (id=481): syz_mount_image$minix(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2m58.871621673s ago: executing program 2 (id=485): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 2m58.100607377s ago: executing program 2 (id=490): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) 2m57.459503022s ago: executing program 32 (id=490): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) 2m43.04873925s ago: executing program 5 (id=575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x4, 0x4) 2m42.855148726s ago: executing program 5 (id=577): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x49) flock(r0, 0x1) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 2m41.404940791s ago: executing program 5 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/20, 0x14) 2m40.276996393s ago: executing program 5 (id=597): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdir(0x0, 0xb6) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x12424d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m39.702726578s ago: executing program 5 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x487, 0x0, 0x78000000}]}) 2m39.010732268s ago: executing program 5 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 2m38.640942743s ago: executing program 33 (id=607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 2m28.706635166s ago: executing program 4 (id=675): r0 = fanotify_init(0x20, 0x40400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) setreuid(0xee01, 0xee01) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) 2m28.482653376s ago: executing program 4 (id=678): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x62108d1, &(0x7f0000000040)=ANY=[], 0xfa, 0x6231, &(0x7f0000012ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) getdents64(r0, 0xfffffffffffffffe, 0x29) 2m26.947432532s ago: executing program 4 (id=688): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x26) write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) close(r0) 2m24.646335913s ago: executing program 4 (id=700): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$eJzs3U9sHFf9APA3639p7Mbrtr9f3ZYmoaWkDeAEJ4dyS6UIpKqqeuHeKo2TCDdEpBxaJYrLKUgcClEvRRyKmhtSOCDRCglFSEj86YEzpwouIBSkSLkQKTay8956/eJh12N71t79fKSv3755s/P9jjdyZmZn3wZgYDVWfh4/Pl2E8MGn105+68rir5eXHWitcXDlZxF7zRDCSFu/yLb3eVxw7/alU8vtYtYWYXblZxoPr95qPXc8hLAQDoaboRkOHG7euTr0ytz1Dz87dPnCy2e3afcBAGCg3PjT/F9f+Mcfvzp198b+E2GstTwdnzdjfzwe9x+Nx/fpuL8R1vaLtmg3mq03FKORrTeUrTec5RkuyTeSbWekZL3RDvmG2patt58AAACwG6Xz2mYoGjNr+o3GzMz98/5ln0+OFjPnz83PXexRoQAAAEBld66s3HQrhBBCCCGEEEKIPo6lyV5fgQAAAAAGTZp3oDU/WG4hn1lgc1pba3aX/9ZLjfWfD1ug7n//8u+u/B+/5y8OAADV9evRZNqvdByd5jHI5xEcyp630eP/Rrad4Q3WWTav4G6Zb7Cszvz3ulOV1b/R17FXyurP58Pcqcrqz+fp3KnK6h+ruY6qyurfU3MdVZXV/1DNdVRVVv/emuuoqqz+8ZrrqKqs/oma66iqrP6Ha66jqrL699VcR1Vl9e+W22rL6m/WXEdVZfVP1VxHVWX1P1JzHVWV1f9ozXVUVVb/YzXX0StPxzb9HvZn4+3nz/k53W45xwMAAIBB9x/z/4ltias7oIatjZX3dHdAHUIIIYQQQghRJa70+gIEAAAA0HPpcwHpU+9LURof6jA+3GF8pMP4aIfxsQ7jAAAAQAi/uTr3xPvF6uf8NzsfXpo3Ks2/tNF5jPL5CDeaf7Pznm02/26ZtwwAAIDBUnzz5uLhkx+9PXX3xv4TbWe/i/F8N80DOhyvDXwS++m+gImsX6Rz6BNr8zRK1suvDzxctr3XNrmjAAAAMMAm4h36zVA0ZtrOu5uh0ZiZWT0fnw4jxdy5+dNHYz99P8sfJkfGlpd/vfbKAQAAgG6tnu+vf/6fvsd3OowWM+fPzc9dvN+faC0fabRfF5hcXV60XxdoZstnS5Yfi/30/Z1nJx9aWT5z6rvzb271zgMAAMCAuPjOu995Y37+9Pc88MADD1oPev2XCQAA2GrX/37tz98/NvHb+5//X53/Ln3+/2DsN+Pcfn+JK6T7BNLnAB74vP7ra/NMlq13Ye16zWy9oRhjWd172rYT2uYbTM+bKsvXXLud0ZJ841m+iSxfPk/BcLZ+yrcvW57PT5jWm8yW5/MwDmc5iiz/MwEAAADKHXn7rQtHLr7z7tfOvfXGmdNnTp8/dnT2G7Mvzs4enz2ycl//kfa7+wEAAIDdaPWm315XAgAAAAAAAAAAAAAAAAAAAIOrjq8T6/U+AgAAwKD795UQwoIQQgghhOh17A29r0GInsal4d7XIEQfx9JS/k3zAAAAANvr3u1Lp9rbBywUW5qvtbXm/WYx5k3t75/72XPLkVa79dLa6yV7t7QaBl3d//7l3135P35va/PvSQ+6/vvXWLuBE9XyfvnH/3y+Pf+Tw13mz/f/tWr5D2X5D4Xu8i99lOV/vVr+57P8e7vM/8D+X6iW/4WYfzrV82y3+de+/mOxTfvxUJf5D2f7/2boNn+2/80uE2a+EvMDwCBq9LqAbZKOEtJx9Hjsp/2Nh5shv/tho8f/jWw7w5uufO1203HQ47GfjpcmsrzJRusfz7b3cMU6c7vlrpKy+rfqddxuZfWP1FxHVWX1j9ZcR1Vl9Y/VXEdVZfXvqbmOqsrq7/Y8tNfK6t8t15XL6h+vuY6qyuqfqLmOqsrq3+j/471SVv++muuoqqz+yZrrqKqs/oqX1WpXVv9UzXVUVVb/IzXXUVVZ/Y/WXEdVZfU/VnMdvfJUbMvOh9P552QcS/1m1h9b53fZr9cWAAAAYLf5V9v8fyvvGe6AOQmEEEIMXvxkB9QghNgpEd+Z6nkdQgjRX7G01OMLEPTU9n6aGYCdyt//web1H2xe/8Hm9ed/SffwF1k/GeowPtxhfKTD+Gg2nv97Hesw/mi23aUojT/WYfz/Oozv6zD++Lrjq59One7w/Cc6jD/ZYfypDuMAAAAMhv+PrfNDAAAA6F+Xf/HJj3516PXbU3dv7D8RRh+Yd/5o7I/F99avxn4+730yEt/z/0Hs/zy2v4vt37L13X8CAAAA2y99T4z3/wEAAKB/pe8pdf4PAAAA/Wsqts7/AQAAoH89Elvn/wAAANDHij3rL45tui7wTGy7ndcPANj5vhDbp2O7P7YHYvvF2KbjgGdj+6Wa6gMAts5Pv/3DF98vVuf7P5aN34vLU/uAhftXCorG2pn80zfc743tc13Wk38fQLf5k31d5tmu/JObzA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9I/Gys/jx6eLED749NrJycsnzywvO9Ba4+DKzyL2miGEkdbz0uhq/5dxxXu3L51abhdjuxTbIsyGIhSt8fDqrVam8RDCQjgYboZmOHC4eefq0Ctz1z/87NDlCy+f3cZfAQAAAPS9/wYAAP//6KMnVA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 2m23.54316807s ago: executing program 4 (id=709): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x12}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="61e9c4fd53a3739ea0f9c0d590e3", 0xe}], 0x1}}], 0x1, 0x0) 2m22.840121756s ago: executing program 4 (id=713): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)='\v', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local}, 0x14) 2m22.307408012s ago: executing program 34 (id=713): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)='\v', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local}, 0x14) 2m16.95333528s ago: executing program 1 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x802) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x8}]}) 2m16.210931374s ago: executing program 1 (id=749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x400000b3, 0x0, 0x2}]}) 2m15.797825922s ago: executing program 1 (id=752): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 2m15.296141389s ago: executing program 1 (id=754): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2020000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 2m15.073011939s ago: executing program 1 (id=757): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000000)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'iso8859-4'}}, {@creator={'creator', 0x3d, "32c9459b"}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x1, 0x30e, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/70, 0x46) getdents(r0, 0x0, 0x58) 2m14.45190433s ago: executing program 1 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000240)=0xad, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 2m13.800801134s ago: executing program 35 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000240)=0xad, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 4.013709264s ago: executing program 6 (id=1835): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0xfc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) 3.829059472s ago: executing program 6 (id=1838): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xc60e}], 0x1, 0x102, 0x0) 3.671954133s ago: executing program 6 (id=1839): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) landlock_restrict_self(r0, 0x8) 3.525865541s ago: executing program 8 (id=1841): r0 = syz_io_uring_setup(0xae1, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.092872797s ago: executing program 8 (id=1846): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.791356569s ago: executing program 8 (id=1850): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) pipe2$9p(&(0x7f0000001900), 0x80000) 2.54196195s ago: executing program 8 (id=1853): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xeffb, 0x9) 2.003346545s ago: executing program 3 (id=1857): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000340), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000180), 0x0}, 0x20) 1.775123032s ago: executing program 3 (id=1859): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.511196596s ago: executing program 3 (id=1862): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.438789974s ago: executing program 7 (id=1863): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x4}, 0x8) 1.283111445s ago: executing program 7 (id=1865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0x0) 1.24695563s ago: executing program 8 (id=1866): r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.216534645s ago: executing program 0 (id=1867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x1000000000000000) 1.054386194s ago: executing program 0 (id=1868): r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@hci={0x1f, 0x2}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 959.207865ms ago: executing program 0 (id=1869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) 790.387816ms ago: executing program 0 (id=1870): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x9) setresgid(r1, 0x0, r1) setresgid(0x0, r1, 0x0) 767.182463ms ago: executing program 7 (id=1871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x3, 0x3, 0x0, 0x0, @irqchip={0x0, 0x7}}]}) 719.026714ms ago: executing program 3 (id=1872): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00', {0x1, 0x0, 0x0, 0x5}, 0x4f, [0x0, 0xfffffffc, 0x2000000, 0x0, 0x20000, 0xfffffffe, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffa, 0x0, 0x0, 0x6b, 0x400, 0x4, 0x0, 0x3, 0x0, 0x84a1, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x6, 0xfffffff7, 0xfffffffe, 0x0, 0x0, 0xda2], [0x80000, 0x0, 0x5feb, 0x4ea, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x622, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x80000000, 0x0, 0x4000, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x80, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0xbaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9c2, 0x0, 0x2, 0xfffffffe, 0x0, 0x9, 0x0, 0x2, 0x1], [0x10003, 0x1000002, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 635.97231ms ago: executing program 0 (id=1873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000006c0)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0xa, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x2, 0x9, 0x0, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) 558.105029ms ago: executing program 6 (id=1874): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x4, "340b7849ceefd131b8e6498c25f58fad9987ffe93bbabd1922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) 477.939434ms ago: executing program 7 (id=1875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000004940)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)='d', 0x1}], 0x1}}], 0x2, 0x41) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x101}, 0x8) 371.153072ms ago: executing program 3 (id=1876): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000003c0)={0x4, 0x3}, 0x2) 356.451612ms ago: executing program 6 (id=1877): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) gettid() bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 256.904889ms ago: executing program 7 (id=1878): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001840)=""/203, 0xcb}], 0x1}, 0x1b3bc0b}], 0x1, 0x40000020, 0x0) 253.138809ms ago: executing program 0 (id=1879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x3c, r1, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) 185.382092ms ago: executing program 3 (id=1880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x38, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff343}]}]}, 0x38}}, 0x4044080) 175.726318ms ago: executing program 6 (id=1881): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000f00), 0x4) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) 124.121437ms ago: executing program 8 (id=1882): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x19) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 0s ago: executing program 7 (id=1883): r0 = epoll_create1(0x80000) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0)={0x60002001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000580)={0x40000005}) kernel console output (not intermixed with test programs): ta_pages+0x10/0x10 [ 243.193615][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 243.193654][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 243.193705][ T36] ? unwind_next_frame+0xa5/0x23c0 [ 243.193761][ T36] ? unwind_next_frame+0xa5/0x23c0 [ 243.193794][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 243.193817][ T36] do_writepages+0x32e/0x550 [ 243.193858][ T36] ? reacquire_held_locks+0x104/0x190 [ 243.193887][ T36] ? writeback_sb_inodes+0x477/0x1a20 [ 243.193924][ T36] __writeback_single_inode+0x133/0x11a0 [ 243.193955][ T36] ? do_raw_spin_unlock+0xf5/0x210 [ 243.193985][ T36] writeback_sb_inodes+0x992/0x1a20 [ 243.194052][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 243.194078][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 243.194178][ T36] ? rcu_is_watching+0x15/0xb0 [ 243.194221][ T36] wb_writeback+0x456/0xb70 [ 243.194254][ T36] ? queue_io+0x231/0x4a0 [ 243.194293][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 243.194319][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 243.194364][ T36] wb_workfn+0x414/0xf50 [ 243.194391][ T36] ? look_up_lock_class+0x57/0x110 [ 243.194439][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 243.194468][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 243.194495][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.194550][ T36] ? process_one_work+0x87c/0x1650 [ 243.194577][ T36] process_one_work+0x949/0x1650 [ 243.194636][ T36] ? __pfx_process_one_work+0x10/0x10 [ 243.194662][ T36] ? do_raw_spin_lock+0x26c/0x2f0 [ 243.194708][ T36] worker_thread+0xb46/0x1140 [ 243.194770][ T36] kthread+0x388/0x470 [ 243.194793][ T36] ? __pfx_worker_thread+0x10/0x10 [ 243.194821][ T36] ? __pfx_kthread+0x10/0x10 [ 243.194846][ T36] ret_from_fork+0x51e/0xb90 [ 243.194881][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 243.194908][ T36] ? __switch_to+0xc7d/0x1450 [ 243.194939][ T36] ? __pfx_kthread+0x10/0x10 [ 243.194963][ T36] ret_from_fork_asm+0x1a/0x30 [ 243.195006][ T36] [ 243.195016][ T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 243.409463][ T5907] rc_core: IR keymap rc-hauppauge not found [ 243.520912][T10378] loop8: detected capacity change from 0 to 512 [ 243.542991][T10378] EXT4-fs (loop8): Test dummy encryption mode enabled [ 243.553391][ T5907] Registered IR keymap rc-empty [ 243.559022][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.583060][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.591315][T10378] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #12: comm syz.8.1117: corrupted in-inode xattr: invalid ea_ino [ 243.609857][ T8990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.619438][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 243.626519][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input14 [ 243.682882][T10378] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 243.684539][T10378] EXT4-fs (loop8): Remounting filesystem read-only [ 243.694248][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 243.694277][ C1] EXT4-fs (loop8): initial error at time 2000000632: ext4_iget_extra_inode:5025: inode 12 [ 243.694314][ C1] EXT4-fs (loop8): last error at time 2000000632: ext4_iget_extra_inode:5025: inode 12 [ 243.805967][T10378] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.833629][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.913700][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 243.950958][T10391] loop6: detected capacity change from 0 to 32768 [ 243.970311][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.020643][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.034694][T10391] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.073181][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.114987][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.191632][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.272413][T10391] XFS (loop6): Ending clean mount [ 244.278690][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.314241][T10391] XFS (loop6): Quotacheck needed: Please wait. [ 244.331277][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.395859][ T5907] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 244.457994][ T5907] mceusb 9-1:0.0: Registered   with mce emulator interface version 1 [ 244.503276][ T5907] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.511745][T10391] XFS (loop6): Quotacheck: Done. [ 244.534282][ T5907] usb 9-1: USB disconnect, device number 2 [ 244.728035][ T8571] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.873874][ T9186] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 245.266874][T10452] kvm: kvm [10451]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xffffffffffffffff [ 245.612048][T10460] loop6: detected capacity change from 0 to 2048 [ 245.622628][T10438] loop0: detected capacity change from 0 to 32768 [ 245.675037][T10440] loop7: detected capacity change from 0 to 32768 [ 245.682291][T10460] NILFS (loop6): invalid segment: Inconsistency found [ 245.718944][T10440] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1131 (10440) [ 245.746814][T10438] read_mapping_page failed! [ 245.751807][T10438] ERROR: (device loop0): txCommit: [ 245.751807][T10438] [ 245.768372][T10460] NILFS (loop6): trying rollback from an earlier position [ 245.817836][T10440] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.833848][T10460] NILFS (loop6): recovery complete [ 245.845265][T10440] BTRFS info (device loop7): using sha256 checksum algorithm [ 245.859007][T10469] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.095887][T10440] BTRFS info (device loop7): rebuilding free space tree [ 246.186555][T10440] BTRFS info (device loop7): disabling free space tree [ 246.223006][T10440] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.271553][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1141'. [ 246.282645][T10440] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.342967][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 246.362603][T10440] BTRFS info (device loop7): turning off barriers [ 246.380790][T10440] BTRFS info (device loop7): force clearing of disk cache [ 246.558364][ T30] audit: type=1800 audit(2000000634.924:88): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1131" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 246.672967][ T30] audit: type=1800 audit(2000000634.974:89): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1131" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 246.783979][ T8990] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.374782][T10465] loop3: detected capacity change from 0 to 40427 [ 247.435406][T10465] F2FS-fs (loop3): build fault injection rate: 771 [ 247.461015][T10487] loop8: detected capacity change from 0 to 32768 [ 247.469247][T10465] F2FS-fs (loop3): invalid crc value [ 247.480219][T10487] xfs: Deprecated parameter 'attr2' [ 247.529016][T10487] XFS: attr2 mount option is deprecated. [ 247.629683][T10487] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.724406][T10487] XFS (loop8): Ending clean mount [ 247.770818][T10487] XFS (loop8): Quotacheck needed: Please wait. [ 247.862975][ T804] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 247.902282][T10465] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 247.940954][T10487] XFS (loop8): Quotacheck: Done. [ 247.955287][T10465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.047794][ T804] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.063054][ T804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.076557][ T804] usb 8-1: config 0 descriptor?? [ 248.118330][ T9186] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 248.135105][ T804] cp210x 8-1:0.0: cp210x converter detected [ 248.264118][ T5828] syz-executor: attempt to access beyond end of device [ 248.264118][ T5828] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.290393][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 248.290423][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.290435][ T5828] Call Trace: [ 248.290444][ T5828] [ 248.290453][ T5828] dump_stack_lvl+0xe8/0x150 [ 248.290494][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 248.290534][ T5828] f2fs_write_end_io+0xcdb/0xff0 [ 248.290573][ T5828] __submit_merged_bio+0x256/0x700 [ 248.290610][ T5828] __submit_merged_write_cond+0x3c9/0x4e0 [ 248.290645][ T5828] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 248.290697][ T5828] f2fs_write_data_pages+0x2975/0x35e0 [ 248.290763][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 248.290831][ T5828] ? kernel_text_address+0xa5/0xe0 [ 248.290861][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 248.290905][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 248.290938][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.290974][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 248.290997][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 248.291019][ T5828] do_writepages+0x32e/0x550 [ 248.291061][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 248.291087][ T5828] filemap_fdatawrite+0x1e9/0x2f0 [ 248.291119][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 248.291197][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 248.291225][ T5828] f2fs_sync_dirty_inodes+0x30e/0x860 [ 248.291264][ T5828] f2fs_write_checkpoint+0x9df/0x26a0 [ 248.291321][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 248.291383][ T5828] ? kfree+0x1c1/0x630 [ 248.291401][ T5828] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 248.291434][ T5828] kill_f2fs_super+0x314/0x720 [ 248.291461][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 248.291494][ T5828] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.291537][ T5828] deactivate_locked_super+0xbc/0x130 [ 248.291570][ T5828] cleanup_mnt+0x437/0x4d0 [ 248.291592][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.291621][ T5828] task_work_run+0x1d9/0x270 [ 248.291647][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 248.291681][ T5828] exit_to_user_mode_loop+0xed/0x480 [ 248.291705][ T5828] ? rcu_is_watching+0x15/0xb0 [ 248.291747][ T5828] do_syscall_64+0x32d/0xf80 [ 248.291773][ T5828] ? trace_irq_disable+0x3b/0x150 [ 248.291791][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.291811][ T5828] ? clear_bhb_loop+0x40/0x90 [ 248.291838][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.291858][ T5828] RIP: 0033:0x7f3353f9d897 [ 248.291876][ T5828] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 248.291893][ T5828] RSP: 002b:00007ffd4cbc1c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 248.291915][ T5828] RAX: 0000000000000000 RBX: 00007f3354031ef0 RCX: 00007f3353f9d897 [ 248.291929][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4cbc1d40 [ 248.291941][ T5828] RBP: 00007ffd4cbc1d40 R08: 00007ffd4cbc2d40 R09: 00000000ffffffff [ 248.291954][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4cbc2dd0 [ 248.291967][ T5828] R13: 00007f3354031ef0 R14: 000000000003c901 R15: 00007ffd4cbc2e10 [ 248.292001][ T5828] [ 248.292041][ T5828] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 248.846515][ T804] usb 8-1: cp210x converter now attached to ttyUSB0 [ 248.939254][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1154'. [ 249.103732][ T5933] usb 8-1: USB disconnect, device number 2 [ 249.186303][ T5933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.226970][ T5933] cp210x 8-1:0.0: device disconnected [ 249.513976][ T5922] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 249.683888][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 249.708245][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.734233][ T5922] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 249.835283][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.878018][ T5922] usb 7-1: config 0 descriptor?? [ 250.013316][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 250.204038][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 250.228965][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.252992][ T29] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 250.280443][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.314286][ T29] usb 4-1: config 0 descriptor?? [ 250.402345][ T5922] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v0.03 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 250.779002][ T5922] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-71) [ 250.816461][ T29] sony 0003:054C:0374.000D: hiddev0,hidraw1: USB HID v0.06 Device [HID 054c:0374] on usb-dummy_hcd.3-1/input0 [ 250.852139][ T5922] corsair-psu 0003:1B1C:1C09.000C: probe with driver corsair-psu failed with error -71 [ 250.860207][ T29] sony 0003:054C:0374.000D: failed to claim input [ 250.945714][ T5922] usb 7-1: USB disconnect, device number 5 [ 250.980352][ T29] usb 4-1: USB disconnect, device number 12 [ 251.127937][T10596] fido_id[10596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 251.204862][T10575] loop8: detected capacity change from 0 to 32768 [ 251.292549][T10575] (syz.8.1160,10575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.365637][T10575] (syz.8.1160,10575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.459726][T10575] JBD2: Ignoring recovery information on journal [ 251.509958][T10593] loop0: detected capacity change from 0 to 32768 [ 251.577367][T10575] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 251.701107][T10615] loop3: detected capacity change from 0 to 64 [ 251.732597][T10615] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 252.089396][ T9186] ocfs2: Unmounting device (7,8) on (node local) [ 252.399136][T10627] loop7: detected capacity change from 0 to 1024 [ 252.412707][T10625] loop3: detected capacity change from 0 to 1024 [ 252.471671][T10627] EXT4-fs: Ignoring removed orlov option [ 252.584483][T10627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.601869][T10637] loop0: detected capacity change from 0 to 64 [ 252.655682][T10627] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.679021][ T30] audit: type=1800 audit(2000000641.064:90): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1175" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 252.704934][T10627] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.1175: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.885419][T10642] macvlan0: entered promiscuous mode [ 252.907134][T10642] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 252.939456][ T8990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.056400][T10646] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 253.318328][T10655] loop8: detected capacity change from 0 to 1024 [ 253.733555][T10659] loop3: detected capacity change from 0 to 4096 [ 253.819481][T10659] ntfs3(loop3): ino=b, mi_enum_attr [ 253.832734][T10659] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 253.871601][T10659] ntfs3(loop3): Failed to load $Extend (-22). [ 253.898514][T10659] ntfs3(loop3): Failed to initialize $Extend. [ 253.959478][ T30] audit: type=1800 audit(2000000642.344:91): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1186" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 253.994956][T10659] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex [ 254.020760][T10658] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex [ 254.032727][T10672] loop6: detected capacity change from 0 to 512 [ 254.042589][T10672] EXT4-fs (loop6): Test dummy encryption mode enabled [ 254.153810][T10672] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 254.185134][T10673] loop8: detected capacity change from 0 to 2048 [ 254.240478][T10672] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 254.259829][T10673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.316806][T10672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.388979][ T30] audit: type=1800 audit(2000000642.764:92): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1193" name="file3" dev="loop8" ino=1416 res=0 errno=0 [ 254.456397][T10679] input: syz0 as /devices/virtual/input/input15 [ 254.532459][ T8571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.745089][T10657] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 254.766453][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1198'. [ 254.791360][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1198'. [ 254.873594][T10657] XFS (loop0): Ending clean mount [ 254.956004][ T30] audit: type=1800 audit(2000000643.344:93): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1187" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 255.074281][T10698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.115679][T10698] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.187156][ T5827] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 255.253311][T10705] erofs (device loop6): mounted with root inode @ nid 36. [ 255.337069][ T8990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.532961][T10711] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 255.977531][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.984327][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.635084][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 256.660320][T10715] set_capacity_and_notify: 5 callbacks suppressed [ 256.660342][T10715] loop6: detected capacity change from 0 to 32768 [ 256.678223][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 256.713614][ T5922] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 256.746538][T10715] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1210 (10715) [ 256.842031][T10715] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 256.876062][T10715] BTRFS info (device loop6): using blake2b checksum algorithm [ 256.894093][ T5922] usb 9-1: Using ep0 maxpacket: 16 [ 256.907277][ T5922] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.930794][ T5922] usb 9-1: config 0 has no interface number 0 [ 256.952313][ T5922] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 256.963211][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.971391][ T5922] usb 9-1: Product: syz [ 256.976211][ T5922] usb 9-1: Manufacturer: syz [ 256.980851][ T5922] usb 9-1: SerialNumber: syz [ 256.989462][ T5922] usb 9-1: config 0 descriptor?? [ 257.021797][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 257.029657][ T5914] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 257.141827][T10715] BTRFS info (device loop6): enabling ssd optimizations [ 257.188258][T10715] BTRFS info (device loop6): turning on async discard [ 257.202942][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 257.217512][ T5914] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 257.231490][T10715] BTRFS info (device loop6): enabling free space tree [ 257.242150][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.263090][ T5914] usb 8-1: config 0 has no interface number 0 [ 257.280006][ T5914] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 257.297495][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.330977][ T5914] usb 8-1: config 0 descriptor?? [ 257.365893][ T5914] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 257.395228][ T5914] uvcvideo 8-1:0.64: No valid video chain found. [ 257.428431][T10776] fuse: Bad value for 'fd' [ 257.449053][ T8571] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 257.577441][ T5914] usb 8-1: USB disconnect, device number 3 [ 257.895749][ T5922] gspca_spca1528: reg_w err -71 [ 257.913873][ T5922] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 257.936989][ T5922] usb 9-1: USB disconnect, device number 3 [ 258.199644][T10795] loop6: detected capacity change from 0 to 64 [ 258.587731][T10803] loop3: detected capacity change from 0 to 512 [ 258.633229][T10803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.701575][T10803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2] [ 258.778973][T10803] System zones: 0-2, 18-18, 34-34 [ 258.824356][T10803] EXT4-fs (loop3): orphan cleanup on readonly fs [ 258.856445][T10803] EXT4-fs error (device loop3): ext4_quota_enable:7194: inode #15: comm syz.3.1243: iget: bad i_size value: 360287970189639690 [ 258.901464][T10803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.902004][T10803] EXT4-fs error (device loop3): ext4_quota_enable:7197: comm syz.3.1243: Bad quota inode: 15, type: 2 [ 258.911306][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 258.911330][ C0] EXT4-fs (loop3): last error at time 2000000647: ext4_quota_enable:7194: inode 15 [ 258.951671][T10803] loop3: lost filesystem error report for type 5 error -117 [ 258.952286][T10803] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 259.056553][T10803] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 259.087674][T10803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.179756][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.253929][T10804] loop8: detected capacity change from 0 to 40427 [ 259.282276][T10804] F2FS-fs (loop8): Image doesn't support compression [ 259.324585][T10804] F2FS-fs (loop8): build fault injection rate: 690 [ 259.372890][ T5933] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 259.385029][T10804] F2FS-fs (loop8): invalid crc value [ 259.420832][T10798] loop0: detected capacity change from 0 to 32768 [ 259.448123][T10798] BTRFS warning: excessive commit interval 34043, use with care [ 259.499475][T10798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1241 (10798) [ 259.562230][ T5933] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.596539][T10798] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.603008][ T5933] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.642909][T10798] BTRFS info (device loop0): using crc32c checksum algorithm [ 259.653240][ T5933] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.688805][T10804] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 259.698692][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.713911][T10804] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 259.717343][ T5933] usb 8-1: SerialNumber: syz [ 259.852255][T10804] F2FS-fs (loop8): Stopped filesystem due to reason: 0 [ 259.900140][T10798] BTRFS info (device loop0): rebuilding free space tree [ 259.928624][T10798] BTRFS info (device loop0): checking UUID tree [ 259.950301][T10798] BTRFS info (device loop0): setting nodatasum [ 259.973288][T10798] BTRFS info (device loop0): allowing degraded mounts [ 259.990536][T10798] BTRFS info (device loop0): setting nodatacow [ 260.017910][ T5933] usb 8-1: 0:2 : does not exist [ 260.027862][T10809] loop6: detected capacity change from 0 to 32768 [ 260.035877][ T5933] usb 8-1: unit 255 not found! [ 260.044006][T10798] BTRFS info (device loop0): enabling ssd optimizations [ 260.061347][T10798] BTRFS info (device loop0): using spread ssd allocation scheme [ 260.092935][T10798] BTRFS info (device loop0): disabling tree log [ 260.113845][T10798] BTRFS info (device loop0): enabling free space tree [ 260.141733][T10798] BTRFS info (device loop0): force clearing of disk cache [ 260.166845][ T30] audit: type=1800 audit(2000000648.554:94): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1246" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 260.190450][T10809] ERROR: (device loop6): diWrite: ixpxd invalid [ 260.190450][T10809] [ 260.210286][ T5933] usb 8-1: USB disconnect, device number 4 [ 260.240541][T10809] ERROR: (device loop6): remounting filesystem as read-only [ 260.269394][T10809] ERROR: (device loop6): txCommit: [ 260.269394][T10809] [ 260.371210][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.397672][T10840] ERROR: (device loop6): diWrite: ixpxd invalid [ 260.397672][T10840] [ 260.451275][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 260.501800][T10840] ERROR: (device loop6): txCommit: [ 260.501800][T10840] [ 260.552697][ T5827] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.824088][T10846] loop7: detected capacity change from 0 to 512 [ 260.868931][T10846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 260.902921][T10846] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2] [ 260.911616][T10846] System zones: 0-2, 18-18, 34-34 [ 261.053726][T10846] EXT4-fs (loop7): orphan cleanup on readonly fs [ 261.061203][T10846] EXT4-fs error (device loop7): ext4_quota_enable:7194: inode #15: comm syz.7.1258: iget: bad i_size value: 360287970189639690 [ 261.139451][T10846] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.139988][T10846] EXT4-fs error (device loop7): ext4_quota_enable:7197: comm syz.7.1258: Bad quota inode: 15, type: 2 [ 261.149371][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 261.149396][ C0] EXT4-fs (loop7): last error at time 2000000649: ext4_quota_enable:7194: inode 15 [ 261.205148][T10856] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1261'. [ 261.253770][T10846] loop7: lost filesystem error report for type 5 error -117 [ 261.256140][T10846] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 261.353804][T10846] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 261.362428][T10846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.538239][T10866] loop0: detected capacity change from 0 to 256 [ 261.547568][ T8990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.644769][T10866] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 261.763854][ T988] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 261.784898][ T30] audit: type=1800 audit(2000000650.174:95): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1265" name="bus" dev="loop0" ino=1048676 res=0 errno=0 [ 261.875210][T10876] loop7: detected capacity change from 0 to 128 [ 261.919448][T10876] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.942275][T10876] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.972965][ T988] usb 7-1: Using ep0 maxpacket: 8 [ 262.008800][ T988] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.062186][ T988] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.069211][T10876] fscrypt (loop7, inode 12): Mutually exclusive encryption flags (0x18) [ 262.108010][ T988] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.164964][ T988] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.208185][ T8990] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.220145][ T988] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.249871][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.499957][ T988] usb 7-1: GET_CAPABILITIES returned 0 [ 262.511053][ T988] usbtmc 7-1:16.0: can't read capabilities [ 262.526639][T10874] loop8: detected capacity change from 0 to 32768 [ 262.539043][T10874] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1268 (10874) [ 262.646567][T10874] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 262.672015][T10874] BTRFS info (device loop8): using blake2b checksum algorithm [ 262.722100][ T988] usb 7-1: USB disconnect, device number 6 [ 262.820225][T10874] BTRFS info (device loop8): enabling ssd optimizations [ 262.841158][T10874] BTRFS info (device loop8): turning on async discard [ 262.848374][T10874] BTRFS info (device loop8): enabling free space tree [ 262.855250][T10874] BTRFS info (device loop8): use zstd compression, level 3 [ 263.089013][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1277'. [ 263.166800][ T9186] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 263.233600][ T988] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.449379][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 263.473824][T10921] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1282'. [ 263.481285][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.517471][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 263.551119][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 263.589444][ T988] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 263.619053][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.637193][ T988] usb 1-1: Product: syz [ 263.662501][ T988] usb 1-1: Manufacturer: syz [ 263.671771][ T988] usb 1-1: SerialNumber: syz [ 263.698980][T10926] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 263.707145][T10926] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 263.714908][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 263.725621][ T988] usb 1-1: config 0 descriptor?? [ 263.764252][T10923] netlink: set zone limit has 4 unknown bytes [ 263.909596][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 263.933236][ T29] usb 8-1: no configurations [ 263.945637][ T29] usb 8-1: can't read configurations, error -22 [ 263.970632][ T988] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 264.193822][T10911] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 264.224930][ T988] usb 1-1: USB disconnect, device number 8 [ 264.372908][ T804] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 264.425703][T10948] loop3: detected capacity change from 0 to 4096 [ 264.456993][T10948] EXT4-fs: Ignoring removed oldalloc option [ 264.487752][T10948] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 264.528829][T10948] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a04ec018, mo2=0002] [ 264.543021][ T804] usb 9-1: Using ep0 maxpacket: 16 [ 264.545976][T10948] System zones: 0-5 [ 264.559746][ T804] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 264.582969][ T804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.591208][ T804] usb 9-1: Product: syz [ 264.602002][T10948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.605775][ T804] usb 9-1: Manufacturer: syz [ 264.619284][ T804] usb 9-1: SerialNumber: syz [ 264.683510][T10948] EXT4-fs (loop3): shut down requested (1) [ 264.858317][ T804] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 264.924909][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.941058][ T804] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.981243][ T804] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 264.998210][ T804] usb 9-1: media controller created [ 265.005080][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 265.026597][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.131226][ T804] zl10353_read_register: readreg error (reg=127, ret==-71) [ 265.165725][T10960] loop3: detected capacity change from 0 to 64 [ 265.281174][ T804] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 265.345721][ T804] usb 9-1: USB disconnect, device number 4 [ 265.696176][T10971] TCP: TCP_TX_DELAY enabled [ 266.370144][T10968] loop3: detected capacity change from 0 to 32768 [ 266.886531][T11002] loop8: detected capacity change from 0 to 64 [ 266.940862][T11002] hfs: unable to locate alternate MDB [ 266.960168][T11002] hfs: continuing without an alternate MDB [ 267.045711][ T30] audit: type=1800 audit(2000000655.434:96): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1320" name="bus" dev="loop8" ino=22 res=0 errno=0 [ 267.076638][T11002] hfs: walked past end of dir [ 267.405240][T10989] loop7: detected capacity change from 0 to 40427 [ 267.421981][T10989] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 267.442254][T10989] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 267.457193][T11018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1327'. [ 267.467659][T10989] F2FS-fs (loop7): invalid crc value [ 267.561550][T11023] loop6: detected capacity change from 0 to 128 [ 267.580023][T11023] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 267.583132][ T804] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 267.647224][T11023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.769277][T10989] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.787313][ T804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.820559][T10989] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 267.826214][ T804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.838017][T10989] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 267.881650][ T804] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 267.893116][ T804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.904487][ T30] audit: type=1800 audit(2000000656.294:97): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1314" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 267.935890][ T804] usb 9-1: config 0 descriptor?? [ 268.395052][ T804] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 268.567828][ T804] playstation 0003:054C:0DF2.000E: Invalid byte count transferred, expected 20 got 0 [ 268.594091][ T804] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -22 [ 268.632954][ T804] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 268.654441][ T804] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 268.687714][ T804] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 268.795411][ T5933] usb 9-1: USB disconnect, device number 5 [ 269.071673][T11037] loop0: detected capacity change from 0 to 40427 [ 269.100186][T11037] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 269.143120][T11037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 269.157029][T11035] loop3: detected capacity change from 0 to 32768 [ 269.171464][T11037] F2FS-fs (loop0): invalid crc value [ 269.200637][T11039] loop6: detected capacity change from 0 to 32768 [ 269.234184][T11035] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.414907][T11037] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 269.436102][T11035] XFS (loop3): Ending clean mount [ 269.468195][T11035] XFS (loop3): Quotacheck needed: Please wait. [ 269.481389][T11037] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 269.544544][T11037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.660082][T11035] XFS (loop3): Quotacheck: Done. [ 269.929775][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.114373][T11065] loop6: detected capacity change from 0 to 1024 [ 270.178290][T11065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.413059][T11056] loop7: detected capacity change from 0 to 32768 [ 270.505072][T11056] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 270.532501][T11056] JBD2: Ignoring recovery information on journal [ 270.669730][T11077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.677733][T11077] IPv6: NLM_F_CREATE should be set when creating new route [ 270.685253][T11077] IPv6: NLM_F_CREATE should be set when creating new route [ 270.692566][T11077] IPv6: NLM_F_CREATE should be set when creating new route [ 270.815362][T11056] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 270.849573][T11077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.866787][T11081] loop0: detected capacity change from 0 to 256 [ 271.245567][ T8990] ocfs2: Unmounting device (7,7) on (node local) [ 271.946720][T11115] loop0: detected capacity change from 0 to 1024 [ 272.000247][T11118] loop3: detected capacity change from 0 to 64 [ 272.083290][ T1315] hfsplus: b-tree write err: -5, ino 25 [ 272.089058][ T1315] hfsplus: b-tree write err: -5, ino 4 [ 272.131907][ T1315] hfsplus: b-tree write err: -5, ino 2 [ 272.289088][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1366'. [ 272.403547][T11124] loop3: detected capacity change from 0 to 64 [ 273.185459][ T804] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 273.378554][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.391475][T11126] loop6: detected capacity change from 0 to 32768 [ 273.400519][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.423089][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 273.436239][ T804] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 273.459853][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.487869][T11126] JBD2: Ignoring recovery information on journal [ 273.497966][ T804] usb 4-1: config 0 descriptor?? [ 273.560341][T11126] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 273.582966][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 273.597196][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.635550][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.657282][T11160] loop7: detected capacity change from 0 to 128 [ 273.675167][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.713000][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.733263][T11160] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.790936][T11160] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.793984][ T9] usb 1-1: config 0 descriptor?? [ 273.839144][ T8571] ocfs2: Unmounting device (7,6) on (node local) [ 273.853486][T11160] EXT4-fs (loop7): shut down requested (1) [ 273.862382][ T9] hub 1-1:0.0: USB hub found [ 273.936619][ T8990] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.950565][ T804] isku 0003:1E7D:319C.000F: collection stack underflow [ 273.968269][ T804] isku 0003:1E7D:319C.000F: item 0 1 0 12 parsing failed [ 273.995320][ T804] isku 0003:1E7D:319C.000F: parse failed [ 274.001165][ T804] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -22 [ 274.068572][ T9] hub 1-1:0.0: 1 port detected [ 274.161539][ T804] usb 4-1: USB disconnect, device number 13 [ 274.317220][T11173] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 274.480361][ T9] usb 1-1: USB disconnect, device number 9 [ 274.678817][T11176] loop6: detected capacity change from 0 to 32768 [ 274.709945][T11176] (syz.6.1390,11176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.755336][T11176] (syz.6.1390,11176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.834106][T11176] JBD2: Ignoring recovery information on journal [ 274.949120][T11176] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 275.058624][T11180] loop7: detected capacity change from 0 to 32768 [ 275.122755][T11180] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.383446][T11209] loop0: detected capacity change from 0 to 128 [ 275.394728][ T8571] ocfs2: Unmounting device (7,6) on (node local) [ 275.401613][T11209] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 275.431262][T11180] XFS (loop7): Ending clean mount [ 275.432443][T11209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.496946][T11180] XFS (loop7): Quotacheck needed: Please wait. [ 275.657564][T11213] loop8: detected capacity change from 0 to 256 [ 275.665672][T11180] XFS (loop7): Quotacheck: Done. [ 275.782543][T11213] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 275.826635][ T8990] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.259405][T11223] loop8: detected capacity change from 0 to 4096 [ 276.485987][T11231] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.188512][T11252] loop0: detected capacity change from 0 to 4096 [ 277.294675][T11262] loop7: detected capacity change from 0 to 512 [ 277.451812][T11262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.560466][T11262] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.692623][ T30] audit: type=1804 audit(2000000666.074:98): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1423" name="/newroot/106/file2/file2" dev="loop7" ino=16 res=1 errno=0 [ 277.866912][ T8990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.736683][ T5914] kernel read not supported for file /rfkill (pid: 5914 comm: kworker/0:6) [ 279.091961][T11302] loop0: detected capacity change from 0 to 4096 [ 279.143345][T11302] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 279.213263][T11302] ntfs3(loop0): ino=19, mi_enum_attr [ 279.220084][T11284] loop7: detected capacity change from 0 to 32768 [ 279.242262][T11302] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 279.290285][T11284] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 279.360553][T11302] ntfs3(loop0): failed to convert "c46c" to maccenteuro [ 279.371749][T11302] ntfs3(loop0): ino=20, mi_enum_attr [ 279.430565][T11284] XFS (loop7): Ending clean mount [ 279.681220][ T8990] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.047028][T11334] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 280.070717][T11335] loop6: detected capacity change from 0 to 512 [ 280.118744][T11335] EXT4-fs: Ignoring removed i_version option [ 280.170790][T11335] EXT4-fs: Ignoring removed oldalloc option [ 280.212681][T11335] EXT4-fs (loop6): Test dummy encryption mode enabled [ 280.304842][T11335] EXT4-fs (loop6): 1 truncate cleaned up [ 280.312349][T11335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.369429][T11338] loop8: detected capacity change from 0 to 1024 [ 280.464583][T11338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.506647][ T8571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.528673][T11338] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.657236][T11338] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.1452: lblock 0 mapped to illegal pblock 0 (length 6) [ 280.706711][T11344] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1452: bg 0: block 112: padding at end of block bitmap is not set [ 280.772149][T11338] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 280.787863][T11338] EXT4-fs (loop8): This should not happen!! Data will be lost [ 280.787863][T11338] [ 280.821920][T11344] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 4 with error 117 [ 280.873043][T11344] EXT4-fs (loop8): This should not happen!! Data will be lost [ 280.873043][T11344] [ 280.887753][T11331] loop0: detected capacity change from 0 to 32768 [ 280.963995][ T30] audit: type=1800 audit(2000000669.344:99): pid=11331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1448" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 281.015399][ T37] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 281.051420][T11348] loop6: detected capacity change from 0 to 256 [ 281.082350][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 281.122188][T11348] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.122985][ T37] EXT4-fs (loop8): This should not happen!! Data will be lost [ 281.122985][ T37] [ 281.188680][T11341] loop7: detected capacity change from 0 to 32768 [ 281.206322][ T9186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.217958][T11348] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.658090][T11356] loop8: detected capacity change from 0 to 2048 [ 281.706774][T11356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.824254][ T30] audit: type=1800 audit(2000000670.214:100): pid=11356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1455" name="file1" dev="loop8" ino=1367 res=0 errno=0 [ 282.123812][ T458] wlan1: Trigger new scan to find an IBSS to join [ 282.446984][T11382] block nbd6: NBD_DISCONNECT [ 282.646036][T11363] loop3: detected capacity change from 0 to 32768 [ 282.675113][T11363] BTRFS warning: excessive commit interval 2147483648, use with care [ 282.723313][T11363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1462 (11363) [ 282.791265][T11363] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.822928][T11363] BTRFS info (device loop3): using crc32c checksum algorithm [ 282.939558][ T458] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 282.975093][T11363] BTRFS error (device loop3): failed to load root extent [ 282.982288][T11363] BTRFS warning (device loop3): try to load backup roots slot 1 [ 282.998773][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 283.088158][T11363] BTRFS warning (device loop3): couldn't read tree root [ 283.112953][T11363] BTRFS warning (device loop3): try to load backup roots slot 2 [ 283.160161][ T37] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 283.191332][T11363] BTRFS warning (device loop3): couldn't read tree root [ 283.242007][T11363] BTRFS warning (device loop3): try to load backup roots slot 3 [ 283.353580][T11363] BTRFS info (device loop3): checking UUID tree [ 283.400925][T11363] BTRFS info (device loop3): enabling ssd optimizations [ 283.434319][T11363] BTRFS info (device loop3): using spread ssd allocation scheme [ 283.442046][T11363] BTRFS info (device loop3): turning on sync discard [ 283.460541][T11363] BTRFS info (device loop3): enabling free space tree [ 283.473150][T11363] BTRFS info (device loop3): enabling auto defrag [ 283.479661][T11363] BTRFS info (device loop3): trying to use backup root at mount time [ 283.699122][ T5828] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.013364][T11434] loop0: detected capacity change from 0 to 1764 [ 284.204748][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 284.348600][T11438] loop3: detected capacity change from 0 to 256 [ 284.841139][T11428] loop6: detected capacity change from 0 to 40427 [ 284.866451][T11428] F2FS-fs: heap/no_heap options were deprecated [ 284.931671][T11428] F2FS-fs (loop6): invalid crc value [ 284.998412][T11432] loop8: detected capacity change from 0 to 40427 [ 285.074100][T11432] F2FS-fs (loop8): invalid crc value [ 285.190832][T11450] loop3: detected capacity change from 0 to 4096 [ 285.225519][T11428] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.228740][T11436] loop7: detected capacity change from 0 to 40427 [ 285.273852][T11428] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 285.308664][T11450] ntfs3(loop3): ino=19, mi_enum_attr [ 285.324459][T11436] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 285.334082][T11450] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 285.369840][T11436] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 285.399465][T11432] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.409512][T11436] F2FS-fs (loop7): build fault injection rate: 2 [ 285.430825][T11436] F2FS-fs (loop7): build fault injection type: 0x1f8 [ 285.444723][T11432] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 285.456399][T11436] F2FS-fs (loop7): invalid crc value [ 285.583859][ T9186] syz-executor: attempt to access beyond end of device [ 285.583859][ T9186] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.633053][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 285.633087][ T9186] Tainted: [L]=SOFTLOCKUP [ 285.633095][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.633108][ T9186] Call Trace: [ 285.633117][ T9186] [ 285.633127][ T9186] dump_stack_lvl+0xe8/0x150 [ 285.633167][ T9186] f2fs_handle_critical_error+0x37c/0x540 [ 285.633205][ T9186] f2fs_write_end_io+0xcdb/0xff0 [ 285.633249][ T9186] __submit_merged_bio+0x256/0x700 [ 285.633279][ T9186] __submit_merged_write_cond+0x3c9/0x4e0 [ 285.633311][ T9186] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 285.633354][ T9186] f2fs_write_data_pages+0x2975/0x35e0 [ 285.633400][ T9186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 285.633428][ T9186] ? css_rstat_updated+0x23a/0x530 [ 285.633479][ T9186] ? rcu_is_watching+0x15/0xb0 [ 285.633504][ T9186] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 285.633533][ T9186] ? __lock_acquire+0x6b5/0x2cf0 [ 285.633568][ T9186] ? __lock_acquire+0x6b5/0x2cf0 [ 285.633594][ T9186] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.633621][ T9186] ? do_raw_spin_unlock+0xf5/0x210 [ 285.633640][ T9186] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 285.633658][ T9186] do_writepages+0x32e/0x550 [ 285.633691][ T9186] ? do_raw_spin_unlock+0xf5/0x210 [ 285.633713][ T9186] filemap_fdatawrite+0x1e9/0x2f0 [ 285.633741][ T9186] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 285.633803][ T9186] ? do_raw_spin_unlock+0xf5/0x210 [ 285.633825][ T9186] f2fs_sync_dirty_inodes+0x30e/0x860 [ 285.633855][ T9186] f2fs_write_checkpoint+0x9df/0x26a0 [ 285.633900][ T9186] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 285.633961][ T9186] kill_f2fs_super+0x314/0x720 [ 285.633985][ T9186] ? __pfx_kill_f2fs_super+0x10/0x10 [ 285.634013][ T9186] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.634048][ T9186] deactivate_locked_super+0xbc/0x130 [ 285.634076][ T9186] cleanup_mnt+0x437/0x4d0 [ 285.634095][ T9186] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.634125][ T9186] task_work_run+0x1d9/0x270 [ 285.634147][ T9186] ? __pfx_task_work_run+0x10/0x10 [ 285.634176][ T9186] exit_to_user_mode_loop+0xed/0x480 [ 285.634196][ T9186] ? rcu_is_watching+0x15/0xb0 [ 285.634231][ T9186] do_syscall_64+0x32d/0xf80 [ 285.634254][ T9186] ? trace_irq_disable+0x3b/0x150 [ 285.634270][ T9186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.634287][ T9186] ? clear_bhb_loop+0x40/0x90 [ 285.634309][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.634326][ T9186] RIP: 0033:0x7facb559d897 [ 285.634343][ T9186] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 285.634358][ T9186] RSP: 002b:00007fffd2170b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 285.634376][ T9186] RAX: 0000000000000000 RBX: 00007facb5631ef0 RCX: 00007facb559d897 [ 285.634388][ T9186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2170c10 [ 285.634398][ T9186] RBP: 00007fffd2170c10 R08: 00007fffd2171c10 R09: 00000000ffffffff [ 285.634409][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd2171ca0 [ 285.634420][ T9186] R13: 00007facb5631ef0 R14: 0000000000045b03 R15: 00007fffd2171ce0 [ 285.634447][ T9186] [ 285.634760][ T9186] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 285.636287][ T8571] syz-executor: attempt to access beyond end of device [ 285.636287][ T8571] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.981217][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 285.981251][ T8571] Tainted: [L]=SOFTLOCKUP [ 285.981259][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.981272][ T8571] Call Trace: [ 285.981280][ T8571] [ 285.981289][ T8571] dump_stack_lvl+0xe8/0x150 [ 285.981325][ T8571] f2fs_handle_critical_error+0x37c/0x540 [ 285.981364][ T8571] f2fs_write_end_io+0xcdb/0xff0 [ 285.981409][ T8571] __submit_merged_bio+0x256/0x700 [ 285.981451][ T8571] __submit_merged_write_cond+0x3c9/0x4e0 [ 285.981493][ T8571] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 285.981554][ T8571] f2fs_write_data_pages+0x2975/0x35e0 [ 285.981621][ T8571] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 285.981662][ T8571] ? css_rstat_updated+0x23a/0x530 [ 285.981720][ T8571] ? rcu_is_watching+0x15/0xb0 [ 285.981753][ T8571] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 285.981790][ T8571] ? __lock_acquire+0x6b5/0x2cf0 [ 285.981838][ T8571] ? __lock_acquire+0x6b5/0x2cf0 [ 285.981874][ T8571] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.981911][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 285.981946][ T8571] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 285.981970][ T8571] do_writepages+0x32e/0x550 [ 285.982015][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 285.982045][ T8571] filemap_fdatawrite+0x1e9/0x2f0 [ 285.982082][ T8571] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 285.982172][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 285.982202][ T8571] f2fs_sync_dirty_inodes+0x30e/0x860 [ 285.982245][ T8571] f2fs_write_checkpoint+0x9df/0x26a0 [ 285.982310][ T8571] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 285.982410][ T8571] kill_f2fs_super+0x314/0x720 [ 285.982442][ T8571] ? __pfx_kill_f2fs_super+0x10/0x10 [ 285.982481][ T8571] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.982528][ T8571] deactivate_locked_super+0xbc/0x130 [ 285.982565][ T8571] cleanup_mnt+0x437/0x4d0 [ 285.982588][ T8571] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.982621][ T8571] task_work_run+0x1d9/0x270 [ 285.982650][ T8571] ? __pfx_task_work_run+0x10/0x10 [ 285.982689][ T8571] exit_to_user_mode_loop+0xed/0x480 [ 285.982714][ T8571] ? rcu_is_watching+0x15/0xb0 [ 285.982751][ T8571] do_syscall_64+0x32d/0xf80 [ 285.982779][ T8571] ? trace_irq_disable+0x3b/0x150 [ 285.982800][ T8571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.982821][ T8571] ? clear_bhb_loop+0x40/0x90 [ 285.982847][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.982866][ T8571] RIP: 0033:0x7f7a6cd9d897 [ 285.982887][ T8571] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 285.982904][ T8571] RSP: 002b:00007ffd9941db58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 285.982925][ T8571] RAX: 0000000000000000 RBX: 00007f7a6ce31ef0 RCX: 00007f7a6cd9d897 [ 285.982951][ T8571] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9941dc10 [ 285.982963][ T8571] RBP: 00007ffd9941dc10 R08: 00007ffd9941ec10 R09: 00000000ffffffff [ 285.982977][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9941eca0 [ 285.982989][ T8571] R13: 00007f7a6ce31ef0 R14: 0000000000045b0d R15: 00007ffd9941ece0 [ 285.983025][ T8571] [ 286.399017][T11462] macvtap1: entered promiscuous mode [ 286.408229][T11462] dummy0: entered promiscuous mode [ 286.419395][T11462] team0: Device macvtap1 failed to register rx_handler [ 286.428298][T11462] dummy0: left promiscuous mode [ 286.478765][T11436] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 286.503914][ T8571] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 286.514139][T11436] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 286.524333][T11436] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 286.702877][T11436] F2FS-fs (loop7): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10f/0xff0 [ 286.733375][T11436] F2FS-fs (loop7): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10f/0xff0 [ 286.754873][T11436] F2FS-fs (loop7): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 287.096821][T11473] loop3: detected capacity change from 0 to 256 [ 287.165173][ T458] wlan1: Trigger new scan to find an IBSS to join [ 287.582983][ T804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 287.644115][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 287.743289][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 287.761669][ T804] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 287.772439][ T804] usb 4-1: config 0 has no interface number 0 [ 287.788143][ T804] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.813343][ T5914] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.833570][ T804] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.849534][ T5914] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.871078][ T804] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 287.883745][ T5914] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.903155][ T804] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 287.916972][ T5914] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 287.933874][ T804] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.953586][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.974760][ T804] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 287.984145][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.992201][ T804] usb 4-1: Product: syz [ 288.010504][T11481] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 288.031470][ T804] usb 4-1: Manufacturer: syz [ 288.054345][ T804] usb 4-1: SerialNumber: syz [ 288.081085][ T804] usb 4-1: config 0 descriptor?? [ 288.140536][ T12] wlan1: Creating new IBSS network, BSSID da:ce:b0:72:59:87 [ 288.253347][T11485] loop6: detected capacity change from 0 to 32768 [ 288.295644][T11485] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.327883][ T804] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 288.431813][T11485] XFS (loop6): Ending clean mount [ 288.462050][T11485] XFS (loop6): Quotacheck needed: Please wait. [ 288.546465][T11485] XFS (loop6): Quotacheck: Done. [ 288.558630][ T804] usb 4-1: USB disconnect, device number 14 [ 288.669712][ T8571] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.056552][T11508] loop7: detected capacity change from 0 to 32768 [ 289.068747][ T5914] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 289.103104][ T5914] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input16 [ 289.164857][T11508] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.273818][ T5914] usb 1-1: USB disconnect, device number 10 [ 289.279952][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 289.361068][T11508] XFS (loop7): Ending clean mount [ 289.370213][T11508] XFS (loop7): Quotacheck needed: Please wait. [ 289.485869][T11508] XFS (loop7): Quotacheck: Done. [ 289.676005][ T8990] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.965603][T11538] loop3: detected capacity change from 0 to 16 [ 290.013367][T11538] erofs (device loop3): mounted with root inode @ nid 36. [ 290.109113][T11538] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1523'. [ 290.140879][T11538] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 290.374590][T11520] loop6: detected capacity change from 0 to 32768 [ 290.455840][T11520] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.515485][T11520] XFS (loop6): Ending clean mount [ 290.551428][T11552] program syz.7.1526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.567267][T11520] XFS (loop6): Quotacheck needed: Please wait. [ 290.662966][T11520] XFS (loop6): Quotacheck: Done. [ 290.921853][ T8571] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.304491][T11563] loop0: detected capacity change from 0 to 4096 [ 291.431823][T11567] loop7: detected capacity change from 0 to 256 [ 291.477412][T11567] exfat: Deprecated parameter 'utf8' [ 291.491928][T11567] exfat: Deprecated parameter 'utf8' [ 291.554008][T11567] exfat: Deprecated parameter 'utf8' [ 291.627580][T11567] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 291.732286][ T30] audit: type=1800 audit(2000000680.114:101): pid=11567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1532" name="file1" dev="loop7" ino=1048681 res=0 errno=0 [ 292.323031][ T5914] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 292.514848][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 292.538912][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.557569][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.580690][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 292.622898][ T5914] usb 1-1: Product: syz [ 292.631767][ T5914] usb 1-1: Manufacturer: syz [ 292.649425][ T5914] usb 1-1: SerialNumber: syz [ 292.651482][T11605] loop3: detected capacity change from 0 to 1024 [ 292.677528][ T5914] usb 1-1: config 0 descriptor?? [ 292.704777][T11605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 292.706629][ T5914] usb 1-1: selecting invalid altsetting 0 [ 292.781589][T11605] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.911249][T11605] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.1549: lblock 0 mapped to illegal pblock 0 (length 6) [ 292.970969][ T1315] Bluetooth: hci5: Frame reassembly failed (-84) [ 292.988688][ T29] usb 1-1: USB disconnect, device number 11 [ 293.001932][T11605] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 293.061434][T11605] EXT4-fs (loop3): This should not happen!! Data will be lost [ 293.061434][T11605] [ 293.119097][T11612] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.1549: lblock 0 mapped to illegal pblock 0 (length 1) [ 293.177396][T11612] EXT4-fs error (device loop3): ext4_free_blocks:6726: comm syz.3.1549: Freeing blocks not in datazone - block = 1, count = 5 [ 293.273651][T11594] loop7: detected capacity change from 0 to 40427 [ 293.295472][ T36] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 293.328965][T11594] F2FS-fs (loop7): invalid crc value [ 293.337631][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 37 with max blocks 7 with error 28 [ 293.352421][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 293.352421][ T36] [ 293.384254][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 293.400605][ T36] EXT4-fs (loop3): Free/Dirty block details [ 293.410739][ T36] EXT4-fs (loop3): free_blocks=0 [ 293.431176][ T36] EXT4-fs (loop3): dirty_blocks=16 [ 293.441315][ T36] EXT4-fs (loop3): Block reservation details [ 293.467835][T11616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 293.524622][T11594] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 293.555230][T11594] F2FS-fs (loop7): Start checkpoint disabled! [ 293.580847][T11594] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 293.600822][T11594] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 293.705077][T11621] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 293.754660][ T1315] kworker/u8:8: attempt to access beyond end of device [ 293.754660][ T1315] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.785974][ T1315] CPU: 0 UID: 0 PID: 1315 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.786012][ T1315] Tainted: [L]=SOFTLOCKUP [ 293.786019][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.786032][ T1315] Workqueue: writeback wb_workfn (flush-7:7) [ 293.786084][ T1315] Call Trace: [ 293.786093][ T1315] [ 293.786103][ T1315] dump_stack_lvl+0xe8/0x150 [ 293.786137][ T1315] f2fs_handle_critical_error+0x37c/0x540 [ 293.786177][ T1315] f2fs_write_end_io+0xcdb/0xff0 [ 293.786221][ T1315] __submit_merged_bio+0x256/0x700 [ 293.786259][ T1315] __submit_merged_write_cond+0x3c9/0x4e0 [ 293.786300][ T1315] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 293.786359][ T1315] f2fs_write_data_pages+0x2975/0x35e0 [ 293.786439][ T1315] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 293.786479][ T1315] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 293.786545][ T1315] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 293.786604][ T1315] ? __lock_acquire+0x6b5/0x2cf0 [ 293.786654][ T1315] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 293.786677][ T1315] do_writepages+0x32e/0x550 [ 293.786716][ T1315] ? reacquire_held_locks+0x104/0x190 [ 293.786747][ T1315] ? writeback_sb_inodes+0x477/0x1a20 [ 293.786782][ T1315] __writeback_single_inode+0x133/0x11a0 [ 293.786812][ T1315] ? do_raw_spin_unlock+0xf5/0x210 [ 293.786841][ T1315] writeback_sb_inodes+0x992/0x1a20 [ 293.786893][ T1315] ? __lock_acquire+0x6b5/0x2cf0 [ 293.786929][ T1315] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 293.786959][ T1315] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.787033][ T1315] ? rcu_is_watching+0x15/0xb0 [ 293.787075][ T1315] wb_writeback+0x456/0xb70 [ 293.787107][ T1315] ? queue_io+0x231/0x4a0 [ 293.787144][ T1315] ? __pfx_wb_writeback+0x10/0x10 [ 293.787169][ T1315] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.787213][ T1315] wb_workfn+0x414/0xf50 [ 293.787239][ T1315] ? look_up_lock_class+0x57/0x110 [ 293.787284][ T1315] ? __pfx_wb_workfn+0x10/0x10 [ 293.787312][ T1315] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.787338][ T1315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.787388][ T1315] ? process_one_work+0x87c/0x1650 [ 293.787422][ T1315] process_one_work+0x949/0x1650 [ 293.787476][ T1315] ? __pfx_process_one_work+0x10/0x10 [ 293.787501][ T1315] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.787545][ T1315] worker_thread+0xb46/0x1140 [ 293.787586][ T1315] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.787631][ T1315] kthread+0x388/0x470 [ 293.787654][ T1315] ? __pfx_worker_thread+0x10/0x10 [ 293.787681][ T1315] ? __pfx_kthread+0x10/0x10 [ 293.787705][ T1315] ret_from_fork+0x51e/0xb90 [ 293.787738][ T1315] ? __pfx_ret_from_fork+0x10/0x10 [ 293.787765][ T1315] ? __switch_to+0xc7d/0x1450 [ 293.787795][ T1315] ? __pfx_kthread+0x10/0x10 [ 293.787818][ T1315] ret_from_fork_asm+0x1a/0x30 [ 293.787860][ T1315] [ 294.065838][ T1315] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 294.380155][T11632] tun0: tun_chr_ioctl cmd 1074025677 [ 294.386197][T11632] tun0: linktype set to 773 [ 294.812322][T11644] loop7: detected capacity change from 0 to 2048 [ 294.825265][T11644] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 294.855782][T11645] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.884168][T11644] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 294.908631][T11644] Remounting filesystem read-only [ 295.003728][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 295.010270][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 295.603438][T11661] loop8: detected capacity change from 0 to 512 [ 295.603765][T11663] loop6: detected capacity change from 0 to 256 [ 295.711415][T11647] loop7: detected capacity change from 0 to 32768 [ 295.739872][T11647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1563 (11647) [ 295.755482][ T30] audit: type=1800 audit(2000000684.124:102): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1570" name="bus" dev="loop6" ino=1048682 res=0 errno=0 [ 295.801342][T11647] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.823166][T11647] BTRFS info (device loop7): using crc32c checksum algorithm [ 295.840315][T11663] Invalid ELF header magic: != ELF [ 295.945345][T11647] BTRFS info (device loop7): allowing degraded mounts [ 295.953075][T11647] BTRFS info (device loop7): enabling ssd optimizations [ 295.977985][T11647] BTRFS info (device loop7): turning on async discard [ 296.043628][T11647] BTRFS info (device loop7): enabling free space tree [ 296.050579][T11647] BTRFS info (device loop7): enabling auto defrag [ 296.221630][ T30] audit: type=1800 audit(2000000684.604:103): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1563" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 296.289703][T11689] loop0: detected capacity change from 0 to 512 [ 296.405429][T11689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.467546][ T8990] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.599466][ T30] audit: type=1800 audit(2000000684.984:104): pid=11659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1569" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 296.615077][T11699] loop6: detected capacity change from 0 to 1024 [ 296.673956][T11699] EXT4-fs: Ignoring removed orlov option [ 296.697583][T11698] loop8: detected capacity change from 0 to 4096 [ 296.703535][ T5914] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 296.818969][T11699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.895088][ T5914] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 296.926853][ T5914] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 296.936592][ T5914] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 296.975432][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.002942][ T5914] usb 4-1: config 220 has no interface number 2 [ 297.009495][ T30] audit: type=1800 audit(2000000685.394:105): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1580" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 297.045079][ T5914] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 297.115101][ T5914] usb 4-1: config 220 interface 0 has no altsetting 0 [ 297.122060][ T5914] usb 4-1: config 220 interface 76 has no altsetting 0 [ 297.132919][ T30] audit: type=1800 audit(2000000685.424:106): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1580" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 297.182901][ T5914] usb 4-1: config 220 interface 1 has no altsetting 0 [ 297.218073][ T5914] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 297.228807][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.263956][ T5914] usb 4-1: Product: syz [ 297.268202][ T5914] usb 4-1: Manufacturer: syz [ 297.300391][ T5914] usb 4-1: SerialNumber: syz [ 297.358696][ T8571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.488798][T11708] loop8: detected capacity change from 0 to 1024 [ 297.564836][ T5914] usb 4-1: selecting invalid altsetting 0 [ 297.590464][ T5914] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 297.603234][T11708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 297.636740][ T5914] uvcvideo 4-1:220.0: No valid video chain found. [ 297.677793][T11708] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.711078][ T5914] usb 4-1: selecting invalid altsetting 0 [ 297.738888][ T5914] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 297.822611][T11708] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 3: comm syz.8.1582: lblock 3 mapped to illegal pblock 3 (length 3) [ 297.837893][ T5914] usb 4-1: USB disconnect, device number 15 [ 297.872040][T11717] loop7: detected capacity change from 0 to 4096 [ 297.888954][T11708] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 297.952753][T11723] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.954942][T11708] EXT4-fs (loop8): This should not happen!! Data will be lost [ 297.954942][T11708] [ 298.014179][T11722] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.1582: lblock 0 mapped to illegal pblock 0 (length 1) [ 298.036617][T11722] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 298.056450][T11722] EXT4-fs (loop8): This should not happen!! Data will be lost [ 298.056450][T11722] [ 298.059489][ T30] audit: type=1800 audit(2000000686.444:107): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1586" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 298.249336][ T1315] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 298.324012][ T1315] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 298.338112][ T1315] EXT4-fs (loop8): This should not happen!! Data will be lost [ 298.338112][ T1315] [ 298.385567][ T9186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 298.723705][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 298.905549][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 298.926512][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.972964][ T5914] usb 4-1: Product: syz [ 298.997745][ T5914] usb 4-1: Manufacturer: syz [ 299.002451][ T5914] usb 4-1: SerialNumber: syz [ 299.007329][ T5837] Bluetooth: hci2: command 0x0419 tx timeout [ 299.287067][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 299.366031][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 299.409077][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 299.481973][ T5914] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 299.547230][ T5914] usb 4-1: USB disconnect, device number 16 [ 299.596504][T11764] set_capacity_and_notify: 1 callbacks suppressed [ 299.596528][T11764] loop8: detected capacity change from 0 to 128 [ 299.640412][T11764] FAT-fs (loop8): bogus number of FAT sectors [ 299.674090][T11764] FAT-fs (loop8): Can't find a valid FAT filesystem [ 300.042088][T11773] loop0: detected capacity change from 0 to 2048 [ 300.091244][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 300.166984][T11773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.255849][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 300.281694][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.309484][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.337752][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.366359][ T9] usb 9-1: config 0 descriptor?? [ 300.618391][ T9] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 300.662919][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 300.721571][T11790] loop3: detected capacity change from 0 to 1024 [ 300.756733][T11790] hfsplus: b-tree write err: -5, ino 2 [ 300.766065][T11790] hfsplus: bad catalog entry type [ 300.827634][ T12] hfsplus: b-tree write err: -5, ino 25 [ 300.850080][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 300.860736][ T12] hfsplus: b-tree write err: -5, ino 4 [ 300.873781][ T12] hfsplus: b-tree write err: -5, ino 2 [ 300.879500][ T29] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 300.893104][ T12] hfsplus: b-tree write err: -5, ino 26 [ 300.898846][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.935945][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.962333][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.992898][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.026803][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.044835][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.282921][ T29] usb 1-1: GET_CAPABILITIES returned 0 [ 301.292966][ T29] usbtmc 1-1:16.0: can't read capabilities [ 301.497343][T11787] loop6: detected capacity change from 0 to 32768 [ 301.517958][T11787] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 301.540981][T11787] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.602753][T11787] XFS (loop6): Ending clean mount [ 301.634237][T11787] XFS (loop6): Quotacheck needed: Please wait. [ 301.754509][T11787] XFS (loop6): Quotacheck: Done. [ 301.897821][ T9] usb 1-1: USB disconnect, device number 12 [ 301.914608][ T988] usb 9-1: USB disconnect, device number 6 [ 301.982705][ T8571] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.749265][T11835] loop0: detected capacity change from 0 to 512 [ 302.785835][T11835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.880074][T11835] EXT4-fs (loop0): 1 truncate cleaned up [ 302.933153][T11826] loop7: detected capacity change from 0 to 32768 [ 302.937413][T11835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.981614][T11826] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1632 (11826) [ 303.009147][T11840] netlink: 'syz.8.1637': attribute type 1 has an invalid length. [ 303.020409][T11840] netlink: 'syz.8.1637': attribute type 2 has an invalid length. [ 303.028956][T11840] netlink: 'syz.8.1637': attribute type 1 has an invalid length. [ 303.067433][T11824] loop3: detected capacity change from 0 to 32768 [ 303.079790][T11826] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.144366][T11826] BTRFS info (device loop7): using sha256 checksum algorithm [ 303.215539][T11828] loop6: detected capacity change from 0 to 32768 [ 303.228425][T11824] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 303.313899][T11828] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 303.368808][T11826] BTRFS info (device loop7): rebuilding free space tree [ 303.378955][T11828] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.424263][T11826] BTRFS info (device loop7): disabling free space tree [ 303.433040][T11826] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 303.456614][T11824] XFS (loop3): Ending clean mount [ 303.486611][T11826] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 303.523025][ T5914] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 303.534217][T11828] XFS (loop6): Ending clean mount [ 303.581518][T11828] XFS (loop6): Quotacheck needed: Please wait. [ 303.601290][T11826] BTRFS info (device loop7): setting nodatasum [ 303.609642][T11826] BTRFS info (device loop7): setting nodatacow [ 303.629813][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.639828][T11826] BTRFS info (device loop7): turning off barriers [ 303.652574][T11826] BTRFS info (device loop7): force clearing of disk cache [ 303.704642][T11828] XFS (loop6): Quotacheck: Done. [ 303.734610][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.761083][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.792268][ T5914] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 303.806030][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.831465][ T5828] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 303.871422][ T5914] usb 9-1: config 0 descriptor?? [ 303.972310][ T8571] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.201188][ T8990] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.315595][ T5914] hid_parser_main: 1 callbacks suppressed [ 304.315620][ T5914] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 304.396223][ T5914] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 304.463872][ T5914] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 304.495897][T11879] loop0: detected capacity change from 0 to 4096 [ 304.559643][ C0] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 304.718224][T11879] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 304.764947][T11879] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 304.786764][ T9] usb 9-1: USB disconnect, device number 7 [ 304.829626][T11879] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 304.842644][T11878] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 304.995723][T11889] loop3: detected capacity change from 0 to 2048 [ 305.137468][T11889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.226595][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1647'. [ 305.309941][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1647'. [ 305.339144][T11895] loop0: detected capacity change from 0 to 1024 [ 305.350131][T11893] macvlan0: entered allmulticast mode [ 305.384361][T11893] veth1_vlan: entered allmulticast mode [ 305.415912][T11895] EXT4-fs: Ignoring removed bh option [ 305.531745][T11895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 305.620506][T11895] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.706052][T11905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1652'. [ 305.757577][T11895] EXT4-fs (loop0): shut down requested (0) [ 305.861793][T11907] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1651'. [ 305.944600][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.967543][T11909] bond_slave_0: entered promiscuous mode [ 305.984089][T11909] bond_slave_1: entered promiscuous mode [ 306.029098][T11909] macvtap1: entered promiscuous mode [ 306.049019][T11909] bond0: entered promiscuous mode [ 306.076282][T11909] macvtap1: entered allmulticast mode [ 306.086430][T11887] loop6: detected capacity change from 0 to 40427 [ 306.096455][T11909] bond0: entered allmulticast mode [ 306.107355][T11909] bond_slave_0: entered allmulticast mode [ 306.123089][T11909] bond_slave_1: entered allmulticast mode [ 306.154274][T11909] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 306.172124][T11909] bond0: left allmulticast mode [ 306.180109][T11909] bond_slave_0: left allmulticast mode [ 306.195799][T11909] bond_slave_1: left allmulticast mode [ 306.201645][T11909] bond0: left promiscuous mode [ 306.209058][T11909] bond_slave_0: left promiscuous mode [ 306.214640][T11909] bond_slave_1: left promiscuous mode [ 306.253508][T11916] loop0: detected capacity change from 0 to 1024 [ 306.260263][T11887] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 306.280126][T11887] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 306.326544][T11916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.387634][T11915] netlink: 'syz.7.1656': attribute type 2 has an invalid length. [ 306.637207][T11924] loop8: detected capacity change from 0 to 1024 [ 306.646938][T11922] loop3: detected capacity change from 0 to 4096 [ 306.655033][T11922] EXT4-fs: inline encryption not supported [ 306.669178][T11887] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 306.678395][T11922] EXT4-fs (loop3): Test dummy encryption mode enabled [ 306.695017][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.711319][T11922] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 306.719841][T11926] loop7: detected capacity change from 0 to 512 [ 306.720843][T11887] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 306.740032][ T566] hfsplus: b-tree write err: -5, ino 25 [ 306.745800][T11922] System zones: 0-5 [ 306.746756][T11887] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 306.764835][T11922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.784531][ T566] hfsplus: b-tree write err: -5, ino 4 [ 306.819073][ T566] hfsplus: b-tree write err: -5, ino 2 [ 306.855991][ T30] audit: type=1800 audit(2000000695.244:108): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1641" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 306.938708][ T30] audit: type=1804 audit(2000000695.274:109): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1641" name="/newroot/193/file2/bus" dev="loop6" ino=10 res=1 errno=0 [ 306.992948][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.049952][ T8571] syz-executor: attempt to access beyond end of device [ 307.049952][ T8571] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 307.089800][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 307.089833][ T8571] Tainted: [L]=SOFTLOCKUP [ 307.089841][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.089855][ T8571] Call Trace: [ 307.089864][ T8571] [ 307.089873][ T8571] dump_stack_lvl+0xe8/0x150 [ 307.089910][ T8571] f2fs_handle_critical_error+0x37c/0x540 [ 307.089949][ T8571] f2fs_write_end_io+0xcdb/0xff0 [ 307.089991][ T8571] __submit_merged_bio+0x256/0x700 [ 307.090029][ T8571] __submit_merged_write_cond+0x3c9/0x4e0 [ 307.090069][ T8571] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 307.090125][ T8571] f2fs_write_data_pages+0x2975/0x35e0 [ 307.090185][ T8571] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 307.090223][ T8571] ? css_rstat_updated+0x23a/0x530 [ 307.090276][ T8571] ? rcu_is_watching+0x15/0xb0 [ 307.090308][ T8571] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 307.090342][ T8571] ? lru_gen_update_size+0x7c9/0xd10 [ 307.090388][ T8571] ? __lock_acquire+0x6b5/0x2cf0 [ 307.090441][ T8571] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 307.090463][ T8571] do_writepages+0x32e/0x550 [ 307.090513][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 307.090542][ T8571] filemap_fdatawrite+0x1e9/0x2f0 [ 307.090578][ T8571] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 307.090658][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 307.090686][ T8571] f2fs_sync_dirty_inodes+0x30e/0x860 [ 307.090733][ T8571] f2fs_write_checkpoint+0x9df/0x26a0 [ 307.090792][ T8571] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 307.090874][ T8571] kill_f2fs_super+0x314/0x720 [ 307.090903][ T8571] ? __pfx_kill_f2fs_super+0x10/0x10 [ 307.090939][ T8571] ? lockdep_hardirqs_on+0x7a/0x110 [ 307.090984][ T8571] deactivate_locked_super+0xbc/0x130 [ 307.091019][ T8571] cleanup_mnt+0x437/0x4d0 [ 307.091041][ T8571] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.091072][ T8571] task_work_run+0x1d9/0x270 [ 307.091100][ T8571] ? __pfx_task_work_run+0x10/0x10 [ 307.091137][ T8571] exit_to_user_mode_loop+0xed/0x480 [ 307.091162][ T8571] ? rcu_is_watching+0x15/0xb0 [ 307.091197][ T8571] do_syscall_64+0x32d/0xf80 [ 307.091225][ T8571] ? trace_irq_disable+0x3b/0x150 [ 307.091243][ T8571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.091266][ T8571] ? clear_bhb_loop+0x40/0x90 [ 307.091292][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.091317][ T8571] RIP: 0033:0x7f7a6cd9d897 [ 307.091338][ T8571] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 307.091355][ T8571] RSP: 002b:00007ffd9941db58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 307.091379][ T8571] RAX: 0000000000000000 RBX: 00007f7a6ce31ef0 RCX: 00007f7a6cd9d897 [ 307.091394][ T8571] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9941dc10 [ 307.091407][ T8571] RBP: 00007ffd9941dc10 R08: 00007ffd9941ec10 R09: 00000000ffffffff [ 307.091422][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9941eca0 [ 307.091435][ T8571] R13: 00007f7a6ce31ef0 R14: 000000000004aedb R15: 00007ffd9941ece0 [ 307.091470][ T8571] [ 307.413291][ T8571] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 307.524524][T11936] netlink: 'syz.0.1665': attribute type 25 has an invalid length. [ 307.547435][T11936] netlink: 'syz.0.1665': attribute type 7 has an invalid length. [ 307.605187][T11936] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 307.613619][T11936] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1665'. [ 307.650220][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.678400][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 307.731978][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 308.335103][T11957] loop8: detected capacity change from 0 to 1024 [ 308.379496][T11957] hfsplus: request for non-existent node 3 in B*Tree [ 308.430872][T11957] hfsplus: request for non-existent node 3 in B*Tree [ 308.537567][T11957] hfsplus: request for non-existent node 4 in B*Tree [ 308.544721][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 308.587056][T11957] hfsplus: request for non-existent node 4 in B*Tree [ 308.725338][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 308.757298][ T29] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 308.773888][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.848043][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 308.869236][ T29] pvrusb2: ********** [ 308.875870][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 308.922863][ T29] pvrusb2: Important functionality might not be entirely working. [ 308.966557][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 309.008508][ T29] pvrusb2: ********** [ 309.031200][T11949] loop3: detected capacity change from 0 to 32768 [ 309.062131][ T2351] pvrusb2: Invalid write control endpoint [ 309.091460][T11949] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.241922][ T2351] pvrusb2: Invalid write control endpoint [ 309.277875][T11949] XFS (loop3): Ending clean mount [ 309.312928][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 309.348728][T11949] XFS (loop3): Quotacheck needed: Please wait. [ 309.368099][T11988] loop6: detected capacity change from 0 to 1024 [ 309.381867][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 309.421736][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 309.432495][ T2351] pvrusb2: Device being rendered inoperable [ 309.464660][T11988] EXT4-fs: inline encryption not supported [ 309.510746][T11959] pvrusb2: Attempted to execute control transfer when device not ok [ 309.536091][T11949] XFS (loop3): Quotacheck: Done. [ 309.557514][ T29] usb 1-1: USB disconnect, device number 13 [ 309.571284][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 309.605372][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 309.639685][ T2351] pvrusb2: Attached sub-driver cx25840 [ 309.647128][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 309.657498][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 309.715843][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.802505][T11988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.302888][T12001] serio: Serial port ptm0 [ 310.448225][ T8571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.131271][T12037] loop8: detected capacity change from 0 to 512 [ 311.265756][T12037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.326418][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1706'. [ 311.344182][T12037] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.582727][ T9186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.933415][T12066] loop0: detected capacity change from 0 to 1024 [ 312.056659][T12066] hfsplus: xattr searching failed [ 312.102640][T12066] hfsplus: bad catalog file entry [ 312.197177][ T566] hfsplus: b-tree write err: -5, ino 3 [ 312.277438][T12074] loop0: detected capacity change from 0 to 8 [ 312.370534][T12074] SQUASHFS error: lzo decompression failed, data probably corrupt [ 312.422402][T12074] SQUASHFS error: Failed to read block 0x0: -5 [ 312.453578][T12074] SQUASHFS error: lzo decompression failed, data probably corrupt [ 312.472475][T12074] SQUASHFS error: Failed to read block 0x0: -5 [ 312.499613][T12079] loop3: detected capacity change from 0 to 2048 [ 312.509541][ T30] audit: type=1800 audit(2000000700.894:110): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1719" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 312.980542][T12068] loop6: detected capacity change from 0 to 40427 [ 313.006412][T12068] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 1) [ 313.023371][T12068] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 313.034784][T12068] F2FS-fs (loop6): invalid crc value [ 313.040521][T12068] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root and reserve_node [ 313.192555][ T988] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 313.223760][T12068] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 313.251245][T12068] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 313.265595][T12068] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 313.283002][T12070] loop8: detected capacity change from 0 to 32768 [ 313.313333][T12070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1717 (12070) [ 313.352977][ T988] usb 1-1: Using ep0 maxpacket: 16 [ 313.361075][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.391907][ T988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.436018][ T988] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.447581][T12070] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.464245][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.474865][ T8571] syz-executor: attempt to access beyond end of device [ 313.474865][ T8571] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 313.494081][T12070] BTRFS info (device loop8): using sha256 checksum algorithm [ 313.499594][ T988] usb 1-1: Product: syz [ 313.508032][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 313.508064][ T8571] Tainted: [L]=SOFTLOCKUP [ 313.508072][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.508085][ T8571] Call Trace: [ 313.508094][ T8571] [ 313.508102][ T8571] dump_stack_lvl+0xe8/0x150 [ 313.508137][ T8571] f2fs_handle_critical_error+0x37c/0x540 [ 313.508172][ T8571] f2fs_write_end_io+0xcdb/0xff0 [ 313.508207][ T8571] __submit_merged_bio+0x256/0x700 [ 313.508243][ T8571] __submit_merged_write_cond+0x3c9/0x4e0 [ 313.508280][ T8571] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 313.508332][ T8571] f2fs_write_data_pages+0x2975/0x35e0 [ 313.508390][ T8571] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 313.508436][ T8571] ? css_rstat_updated+0x23a/0x530 [ 313.508488][ T8571] ? rcu_is_watching+0x15/0xb0 [ 313.508520][ T8571] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 313.508554][ T8571] ? lru_gen_update_size+0x7c9/0xd10 [ 313.508600][ T8571] ? __lock_acquire+0x6b5/0x2cf0 [ 313.508650][ T8571] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 313.508674][ T8571] do_writepages+0x32e/0x550 [ 313.508715][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 313.508745][ T8571] filemap_fdatawrite+0x1e9/0x2f0 [ 313.508777][ T8571] ? look_up_lock_class+0x57/0x110 [ 313.508806][ T8571] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 313.508886][ T8571] ? do_raw_spin_unlock+0xf5/0x210 [ 313.508915][ T8571] f2fs_sync_dirty_inodes+0x30e/0x860 [ 313.508954][ T8571] f2fs_write_checkpoint+0x9df/0x26a0 [ 313.509020][ T8571] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 313.509099][ T8571] kill_f2fs_super+0x314/0x720 [ 313.509129][ T8571] ? __pfx_kill_f2fs_super+0x10/0x10 [ 313.509163][ T8571] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.509207][ T8571] deactivate_locked_super+0xbc/0x130 [ 313.509239][ T8571] cleanup_mnt+0x437/0x4d0 [ 313.509261][ T8571] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.509290][ T8571] task_work_run+0x1d9/0x270 [ 313.509318][ T8571] ? __pfx_task_work_run+0x10/0x10 [ 313.509350][ T8571] exit_to_user_mode_loop+0xed/0x480 [ 313.509375][ T8571] ? rcu_is_watching+0x15/0xb0 [ 313.509416][ T8571] do_syscall_64+0x32d/0xf80 [ 313.509444][ T8571] ? trace_irq_disable+0x3b/0x150 [ 313.509462][ T8571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.509484][ T8571] ? clear_bhb_loop+0x40/0x90 [ 313.509510][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.509530][ T8571] RIP: 0033:0x7f7a6cd9d897 [ 313.509551][ T8571] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 313.509570][ T8571] RSP: 002b:00007ffd9941db58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 313.509591][ T8571] RAX: 0000000000000000 RBX: 00007f7a6ce31ef0 RCX: 00007f7a6cd9d897 [ 313.509604][ T8571] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9941dc10 [ 313.509617][ T8571] RBP: 00007ffd9941dc10 R08: 00007ffd9941ec10 R09: 00000000ffffffff [ 313.509630][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9941eca0 [ 313.509643][ T8571] R13: 00007f7a6ce31ef0 R14: 000000000004c7f0 R15: 00007ffd9941ece0 [ 313.509676][ T8571] [ 313.510959][ T8571] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 313.835810][ T988] usb 1-1: Manufacturer: syz [ 313.841135][ T988] usb 1-1: SerialNumber: syz [ 314.147429][T12070] BTRFS info (device loop8): enabling ssd optimizations [ 314.225580][T12070] BTRFS info (device loop8): turning on async discard [ 314.271528][ T988] usb 1-1: 0:2 : does not exist [ 314.278967][T12070] BTRFS info (device loop8): enabling free space tree [ 314.366889][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 314.545685][ T9186] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.706022][ T988] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 314.835146][ T804] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 314.908724][ T988] usb 1-1: USB disconnect, device number 14 [ 315.021327][ T804] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.040549][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.075026][ T804] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.115614][ T804] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.153733][ T804] usb 4-1: Product: syz [ 315.172722][ T804] usb 4-1: Manufacturer: syz [ 315.204883][T11287] udevd[11287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.221016][ T804] usb 4-1: SerialNumber: syz [ 315.261201][ T804] usb 4-1: config 0 descriptor?? [ 315.281667][ T804] usb 4-1: selecting invalid altsetting 0 [ 315.536682][ T988] usb 4-1: USB disconnect, device number 17 [ 315.729499][T11282] udevd[11282]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.828777][T12144] loop6: detected capacity change from 0 to 4096 [ 315.889586][T12145] loop8: detected capacity change from 0 to 4096 [ 315.951662][T12145] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 315.972608][T12144] ntfs3(loop6): Failed to initialize $Secure (-22). [ 316.043130][T12144] pim6reg9: entered allmulticast mode [ 316.287763][T12145] ntfs3(loop8): ino=19, mi_enum_attr [ 316.386321][T12145] ntfs3(loop8): failed to convert "c46c" to iso8859-3 [ 316.436041][T12145] ntfs3(loop8): ino=20, mi_enum_attr [ 316.524961][T12141] loop0: detected capacity change from 0 to 32768 [ 316.581696][T12141] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 316.634892][T12141] JBD2: Ignoring recovery information on journal [ 316.738618][T12150] loop7: detected capacity change from 0 to 32768 [ 316.812225][T12141] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 316.913020][T12165] vivid-007: disconnect [ 316.926697][T12150] JBD2: Ignoring recovery information on journal [ 316.977062][T12164] vivid-007: reconnect [ 317.052717][T12150] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 317.119924][T12141] (syz.0.1738,12141,1):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume. [ 317.199762][T12141] (syz.0.1738,12141,1):ocfs2_group_add:511 ERROR: status = -22 [ 317.326070][ T8990] ocfs2: Unmounting device (7,7) on (node local) [ 317.409865][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.419648][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444785][ T5827] ocfs2: Unmounting device (7,0) on (node local) [ 318.012892][ T804] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 318.159617][ T1315] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.203059][ T804] usb 7-1: Using ep0 maxpacket: 16 [ 318.213448][ T804] usb 7-1: config 0 interface 0 has no altsetting 0 [ 318.220977][ T804] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 318.232936][ T5914] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 318.262241][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.301977][ T804] usb 7-1: config 0 descriptor?? [ 318.445600][ T5914] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.454826][ T5914] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.471882][ T5914] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.481888][ T5914] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 318.500717][ T5914] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 318.522333][ T5914] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.542290][ T5914] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.561274][ T5914] usb 9-1: Product: syz [ 318.565720][ T5914] usb 9-1: Manufacturer: syz [ 318.587251][ T5914] cdc_wdm 9-1:1.0: skipping garbage [ 318.592894][ T5914] cdc_wdm 9-1:1.0: skipping garbage [ 318.642561][ T5914] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 318.677569][ T5914] cdc_wdm 9-1:1.0: Unknown control protocol [ 318.835517][T12199] loop7: detected capacity change from 0 to 32768 [ 318.854596][T12199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1764 (12199) [ 318.872008][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 318.872702][ T5907] usb 9-1: USB disconnect, device number 8 [ 318.879517][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 318.890783][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 318.923400][T12199] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 318.964080][ T804] usb 7-1: USB disconnect, device number 7 [ 318.982200][T12199] BTRFS info (device loop7): using sha256 checksum algorithm [ 319.049364][T12220] program syz.0.1767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.074225][T12199] BTRFS info (device loop7): rebuilding free space tree [ 319.115307][T12199] BTRFS info (device loop7): enabling ssd optimizations [ 319.134058][T12199] BTRFS info (device loop7): turning on async discard [ 319.150377][T12199] BTRFS info (device loop7): enabling free space tree [ 319.172934][T12199] BTRFS info (device loop7): force clearing of disk cache [ 319.200607][T12199] BTRFS info (device loop7): enabling auto defrag [ 319.231160][T12199] BTRFS info (device loop7): force lzo compression, level 1 [ 319.248397][T12199] BTRFS info (device loop7): max_inline set to 0 [ 319.340461][ T8990] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.038069][T12240] input: syz1 as /devices/virtual/input/input17 [ 320.287764][T12249] loop6: detected capacity change from 0 to 256 [ 320.288172][T12228] loop0: detected capacity change from 0 to 40427 [ 320.344950][T12228] F2FS-fs: heap/no_heap options were deprecated [ 320.385754][T12228] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 320.412559][T12228] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 320.455023][T12228] F2FS-fs (loop0): invalid crc value [ 320.724967][T12234] loop8: detected capacity change from 0 to 32768 [ 320.732528][T12234] btrfs: Deprecated parameter 'usebackuproot' [ 320.791568][T12234] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 320.832558][T12228] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 320.855855][T12234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1773 (12234) [ 320.894586][T12228] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 320.919180][T12228] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 320.978342][T12234] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.033122][T12234] BTRFS info (device loop8): using crc32c checksum algorithm [ 321.058904][T12228] syz.0.1769: attempt to access beyond end of device [ 321.058904][T12228] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 321.104778][T12228] syz.0.1769: attempt to access beyond end of device [ 321.104778][T12228] loop0: rw=2049, sector=77840, nr_sectors = 24 limit=40427 [ 321.149450][T12228] syz.0.1769: attempt to access beyond end of device [ 321.149450][T12228] loop0: rw=2049, sector=77896, nr_sectors = 8 limit=40427 [ 321.177485][T12228] syz.0.1769: attempt to access beyond end of device [ 321.177485][T12228] loop0: rw=2049, sector=77936, nr_sectors = 8 limit=40427 [ 321.286527][T12234] BTRFS info (device loop8): rebuilding free space tree [ 321.367258][ T5827] syz-executor: attempt to access beyond end of device [ 321.367258][ T5827] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 321.423874][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 321.423909][ T5827] Tainted: [L]=SOFTLOCKUP [ 321.423918][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.423930][ T5827] Call Trace: [ 321.423939][ T5827] [ 321.423947][ T5827] dump_stack_lvl+0xe8/0x150 [ 321.423984][ T5827] f2fs_handle_critical_error+0x37c/0x540 [ 321.424023][ T5827] f2fs_write_end_io+0xcdb/0xff0 [ 321.424065][ T5827] __submit_merged_bio+0x256/0x700 [ 321.424103][ T5827] __submit_merged_write_cond+0x3c9/0x4e0 [ 321.424142][ T5827] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 321.424198][ T5827] f2fs_write_data_pages+0x2975/0x35e0 [ 321.424258][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 321.424295][ T5827] ? css_rstat_updated+0x23a/0x530 [ 321.424348][ T5827] ? rcu_is_watching+0x15/0xb0 [ 321.424380][ T5827] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 321.424414][ T5827] ? lru_gen_update_size+0x7c9/0xd10 [ 321.424461][ T5827] ? __lock_acquire+0x6b5/0x2cf0 [ 321.424514][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 321.424537][ T5827] do_writepages+0x32e/0x550 [ 321.424586][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 321.424615][ T5827] filemap_fdatawrite+0x1e9/0x2f0 [ 321.424651][ T5827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 321.424730][ T5827] ? do_raw_spin_unlock+0xf5/0x210 [ 321.424758][ T5827] f2fs_sync_dirty_inodes+0x30e/0x860 [ 321.424798][ T5827] f2fs_write_checkpoint+0x9df/0x26a0 [ 321.424857][ T5827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 321.424939][ T5827] kill_f2fs_super+0x314/0x720 [ 321.424968][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 321.425006][ T5827] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.425049][ T5827] deactivate_locked_super+0xbc/0x130 [ 321.425085][ T5827] cleanup_mnt+0x437/0x4d0 [ 321.425108][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.425138][ T5827] task_work_run+0x1d9/0x270 [ 321.425166][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 321.425202][ T5827] exit_to_user_mode_loop+0xed/0x480 [ 321.425227][ T5827] ? rcu_is_watching+0x15/0xb0 [ 321.425263][ T5827] do_syscall_64+0x32d/0xf80 [ 321.425290][ T5827] ? trace_irq_disable+0x3b/0x150 [ 321.425307][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.425328][ T5827] ? clear_bhb_loop+0x40/0x90 [ 321.425355][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.425377][ T5827] RIP: 0033:0x7fd11059d897 [ 321.425397][ T5827] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 321.425416][ T5827] RSP: 002b:00007fff1d057458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 321.425438][ T5827] RAX: 0000000000000000 RBX: 00007fd110631ef0 RCX: 00007fd11059d897 [ 321.425451][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1d057510 [ 321.425464][ T5827] RBP: 00007fff1d057510 R08: 00007fff1d058510 R09: 00000000ffffffff [ 321.425479][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1d0585a0 [ 321.425491][ T5827] R13: 00007fd110631ef0 R14: 000000000004e6b0 R15: 00007fff1d0585e0 [ 321.425526][ T5827] [ 321.425536][ T5827] F2FS-fs (loop0): Remounting filesystem read-only [ 321.483802][T12234] BTRFS info (device loop8): allowing degraded mounts [ 321.772953][T12234] BTRFS info (device loop8): enabling ssd optimizations [ 321.810635][T12234] BTRFS info (device loop8): turning on flush-on-commit [ 321.841078][T12234] BTRFS info (device loop8): enabling free space tree [ 321.892903][T12234] BTRFS info (device loop8): force clearing of disk cache [ 321.900136][T12234] BTRFS info (device loop8): trying to use backup root at mount time [ 321.917453][T12234] BTRFS info (device loop8): use zstd compression, level 3 [ 322.169391][ T9186] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.284767][T12274] loop3: detected capacity change from 0 to 32768 [ 322.351910][T12274] JBD2: Ignoring recovery information on journal [ 322.550606][T12302] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 322.586140][T12302] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 322.618247][T12274] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 323.091480][ T5828] ocfs2: Unmounting device (7,3) on (node local) [ 323.470714][T12323] loop7: detected capacity change from 0 to 128 [ 324.208550][T12345] input: syz0 as /devices/virtual/input/input18 [ 324.276764][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1814'. [ 324.469699][T12327] loop8: detected capacity change from 0 to 32768 [ 324.504070][T12327] xfs: Deprecated parameter 'attr2' [ 324.524135][T12327] XFS: attr2 mount option is deprecated. [ 324.556467][T12327] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 324.660480][T12327] XFS (loop8): Ending clean mount [ 324.719614][T12327] XFS (loop8): Quotacheck needed: Please wait. [ 324.749613][T12331] loop0: detected capacity change from 0 to 40427 [ 324.806298][T12331] F2FS-fs (loop0): build fault injection rate: 174 [ 324.824583][T12327] XFS (loop8): Quotacheck: Done. [ 324.846283][T12331] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 324.893713][T12331] F2FS-fs (loop0): invalid crc value [ 325.004724][ T9186] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 325.111883][T12331] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 325.133284][T12339] loop6: detected capacity change from 0 to 32768 [ 325.160216][T12331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 325.222591][T12339] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/fowuo6ot [ 325.281297][T12339] gfs2: fsid=fowuo6ota: Trying to join cluster "lock_nolock", "fowuo6ota" [ 325.354485][T12339] gfs2: fsid=fowuo6ota: Now mounting FS (format 1801)... [ 325.543718][T12339] gfs2: fsid=fowuo6ota.s: journal 0 mapped with 5 extents in 0ms [ 325.667865][T12339] gfs2: fsid=fowuo6ota.s: first mount done, others may mount [ 325.703635][ T988] IPVS: starting estimator thread 0... [ 325.808440][T12373] IPVS: using max 29 ests per chain, 69600 per kthread [ 326.063812][T12377] loop3: detected capacity change from 0 to 4096 [ 326.079946][T12377] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 326.646315][T12393] loop8: detected capacity change from 0 to 128 [ 326.692075][T12393] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.745054][T12393] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.840546][T12393] fscrypt (loop8, inode 12): Direct key flag not allowed with different contents and filenames modes [ 326.945922][ T9186] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.074627][T12403] loop6: detected capacity change from 0 to 64 [ 327.190890][T12405] batman_adv: batadv0: Adding interface: vlan2 [ 327.205153][T12405] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.246356][T12405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.267389][T12405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.290301][T12405] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 327.321002][T12407] : renamed from vlan0 (while UP) [ 327.365198][T12410] IPv6: NLM_F_REPLACE set, but no existing node found! [ 327.557387][T12416] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 327.617353][T12416] dummy0: entered promiscuous mode [ 327.654539][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.035794][T12431] netlink: 'syz.0.1843': attribute type 10 has an invalid length. [ 328.115849][T12431] hsr_slave_0: left promiscuous mode [ 328.127782][T12431] hsr_slave_1: left promiscuous mode [ 328.391548][T12441] loop7: detected capacity change from 0 to 512 [ 328.415285][T12441] EXT4-fs: Ignoring removed bh option [ 328.431106][T12441] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.450782][T12441] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 328.516392][T12441] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 328.568473][T12441] EXT4-fs (loop7): orphan cleanup on readonly fs [ 328.636850][T12441] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 328.702662][T12441] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 328.772044][T12441] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.1847: Failed to acquire dquot type 1 [ 328.804545][T12441] loop7: lost filesystem error report for type 5 error -5 [ 328.812835][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 328.826782][ C1] EXT4-fs (loop7): last error at time 2000000717: ext4_acquire_dquot:7003 [ 328.854118][T12441] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1847: Invalid block bitmap block 0 in block_group 0 [ 328.908781][T12457] loop3: detected capacity change from 0 to 1024 [ 328.934639][T12441] loop7: lost filesystem error report for type 5 error -117 [ 328.942692][T12457] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.964066][T12441] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1847: Invalid block bitmap block 0 in block_group 0 [ 328.979146][T12441] loop7: lost filesystem error report for type 5 error -117 [ 328.983271][T12441] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1847: Invalid block bitmap block 0 in block_group 0 [ 329.006424][T12441] loop7: lost filesystem error report for type 5 error -117 [ 329.015044][T12441] Quota error (device loop7): write_blk: dquota write failed [ 329.052670][T12457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.095913][T12441] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 329.129878][T12441] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.1847: Failed to acquire dquot type 1 [ 329.182488][T12441] loop7: lost filesystem error report for type 5 error -28 [ 329.186039][T12441] Quota error (device loop7): write_blk: dquota write failed [ 329.232226][T12441] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 329.246363][T12441] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.1847: Failed to acquire dquot type 1 [ 329.269807][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.281066][T12441] loop7: lost filesystem error report for type 5 error -28 [ 329.287931][T12441] EXT4-fs (loop7): 1 orphan inode deleted [ 329.319563][T12441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.417650][ T8990] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.463282][T12455] loop8: detected capacity change from 0 to 32768 [ 329.514958][T12455] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 329.549102][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'. [ 329.558672][T12469] netlink: 'syz.3.1859': attribute type 30 has an invalid length. [ 329.588627][T12455] JBD2: Ignoring recovery information on journal [ 329.634848][ T9] kernel read not supported for file /input/mouse0 (pid: 9 comm: kworker/0:0) [ 329.690262][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.725002][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.777527][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.798293][T12455] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 329.812869][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.479236][ T9186] ocfs2: Unmounting device (7,8) on (node local) [ 330.714562][T12500] input: syz0 as /devices/virtual/input/input19 [ 331.304904][ C1] [ 331.307330][ C1] ================================ [ 331.312469][ C1] WARNING: inconsistent lock state [ 331.317719][ C1] syzkaller #0 Tainted: G L [ 331.323740][ C1] -------------------------------- [ 331.328868][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 331.335901][ C1] kworker/u8:6/458 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 331.342330][ C1] ffff888058c6df20 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 331.351753][ C1] {SOFTIRQ-ON-W} state was registered at: [ 331.357494][ C1] lock_acquire+0xf0/0x2e0 [ 331.362111][ C1] lock_sock_nested+0x48/0x100 [ 331.366964][ C1] tcp_sock_set_nodelay+0x2a/0x180 [ 331.372188][ C1] rds_tcp_listen_init+0x168/0x410 [ 331.377668][ C1] rds_tcp_init_net+0x154/0x380 [ 331.382643][ C1] ops_init+0x35c/0x5c0 [ 331.386984][ C1] register_pernet_operations+0x343/0x830 [ 331.392899][ C1] register_pernet_device+0x2a/0x80 [ 331.398317][ C1] rds_tcp_init+0xcf/0x170 [ 331.402947][ C1] do_one_initcall+0x250/0x8d0 [ 331.407910][ C1] do_initcall_level+0x104/0x190 [ 331.412952][ C1] do_initcalls+0x59/0xa0 [ 331.417412][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 331.422723][ C1] kernel_init+0x1d/0x1d0 [ 331.427248][ C1] ret_from_fork+0x51e/0xb90 [ 331.431946][ C1] ret_from_fork_asm+0x1a/0x30 [ 331.437000][ C1] irq event stamp: 1877602 [ 331.441429][ C1] hardirqs last enabled at (1877602): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.452215][ C1] hardirqs last disabled at (1877601): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 331.462483][ C1] softirqs last enabled at (1877532): [] __dev_queue_xmit+0x274/0x38a0 [ 331.472486][ C1] softirqs last disabled at (1877533): [] do_softirq+0x76/0xd0 [ 331.481705][ C1] [ 331.481705][ C1] other info that might help us debug this: [ 331.489786][ C1] Possible unsafe locking scenario: [ 331.489786][ C1] [ 331.497256][ C1] CPU0 [ 331.500559][ C1] ---- [ 331.503861][ C1] lock(k-sk_lock-AF_INET6); [ 331.508586][ C1] [ 331.512047][ C1] lock(k-sk_lock-AF_INET6); [ 331.516910][ C1] [ 331.516910][ C1] *** DEADLOCK *** [ 331.516910][ C1] [ 331.525198][ C1] 10 locks held by kworker/u8:6/458: [ 331.530662][ C1] #0: ffff888056580148 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 331.541730][ C1] #1: ffffc90003677c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 331.553925][ C1] #2: ffff888058c68fa0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 331.563965][ C1] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 331.573401][ C1] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 331.582562][ C1] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 331.591617][ C1] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 331.601333][ C1] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 331.610325][ C1] #8: ffff888058c6dea0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 331.620156][ C1] #9: ffff888058c6e0c8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 331.630197][ C1] [ 331.630197][ C1] stack backtrace: [ 331.636126][ C1] CPU: 1 UID: 0 PID: 458 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.636175][ C1] Tainted: [L]=SOFTLOCKUP [ 331.636181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.636192][ C1] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 331.636217][ C1] Call Trace: [ 331.636227][ C1] [ 331.636235][ C1] dump_stack_lvl+0xe8/0x150 [ 331.636259][ C1] print_usage_bug+0x28b/0x2e0 [ 331.636283][ C1] mark_lock_irq+0x410/0x420 [ 331.636307][ C1] mark_lock+0x115/0x190 [ 331.636329][ C1] __lock_acquire+0x689/0x2cf0 [ 331.636350][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 331.636376][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 331.636401][ C1] lock_acquire+0xf0/0x2e0 [ 331.636420][ C1] ? inet6_getname+0x15d/0x650 [ 331.636446][ C1] lock_sock_nested+0x48/0x100 [ 331.636459][ C1] ? inet6_getname+0x15d/0x650 [ 331.636481][ C1] inet6_getname+0x15d/0x650 [ 331.636503][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.636520][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 331.636546][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 331.636575][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.636595][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 331.636618][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 331.636634][ C1] ? NF_HOOK+0x336/0x3c0 [ 331.636652][ C1] ? ip6_input+0x16a/0x270 [ 331.636670][ C1] ? NF_HOOK+0x336/0x3c0 [ 331.636689][ C1] ? rds_recv_hs_exthdrs+0xe1/0x7c0 [ 331.636705][ C1] ? tcp_write_xmit+0x16e8/0x6980 [ 331.636721][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 331.636738][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 331.636754][ C1] ? process_one_work+0x949/0x1650 [ 331.636774][ C1] ? kthread+0x388/0x470 [ 331.636788][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 331.636805][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 331.636824][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 331.636839][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 331.636871][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 331.636894][ C1] __tcp_read_sock+0x196/0x970 [ 331.636918][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 331.636934][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 331.636957][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 331.636980][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 331.637004][ C1] ? tcp_grow_window+0x4fc/0xc50 [ 331.637021][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 331.637055][ C1] ? tcp_urg+0x106/0x410 [ 331.637074][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 331.637093][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 331.637110][ C1] ? ktime_get+0x45/0x200 [ 331.637123][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 331.637144][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 331.637165][ C1] tcp_rcv_established+0xf45/0x2740 [ 331.637190][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 331.637209][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 331.637224][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 331.637237][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 331.637252][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 331.637296][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 331.637330][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 331.637349][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 331.637364][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 331.637375][ C1] ? raw6_local_deliver+0x116/0x950 [ 331.637396][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 331.637416][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 331.637445][ C1] ip6_input_finish+0x191/0x370 [ 331.637466][ C1] NF_HOOK+0x336/0x3c0 [ 331.637483][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 331.637498][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 331.637516][ C1] ? NF_HOOK+0x9e/0x3c0 [ 331.637533][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 331.637552][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 331.637575][ C1] ip6_input+0x16a/0x270 [ 331.637593][ C1] ? ip6_input+0x23/0x270 [ 331.637612][ C1] NF_HOOK+0x336/0x3c0 [ 331.637629][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 331.637642][ C1] ? skb_orphan+0x4f/0xd0 [ 331.637661][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 331.637678][ C1] ? NF_HOOK+0x9e/0x3c0 [ 331.637696][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 331.637714][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 331.637736][ C1] ? process_backlog+0x3eb/0x1950 [ 331.637752][ C1] process_backlog+0x7dd/0x1950 [ 331.637775][ C1] __napi_poll+0xae/0x340 [ 331.637788][ C1] ? skb_defer_free_flush+0x233/0x260 [ 331.637803][ C1] net_rx_action+0x627/0xf70 [ 331.637818][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 331.637840][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 331.637858][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 331.637886][ C1] handle_softirqs+0x22a/0x870 [ 331.637908][ C1] ? do_softirq+0x76/0xd0 [ 331.637928][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 331.637949][ C1] do_softirq+0x76/0xd0 [ 331.637967][ C1] [ 331.637972][ C1] [ 331.637977][ C1] __local_bh_enable_ip+0xf8/0x130 [ 331.637996][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 331.638015][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 331.638039][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 331.638063][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 331.638085][ C1] ? ip6_output+0x340/0x550 [ 331.638101][ C1] ? ip6_finish_output2+0xb38/0x13e0 [ 331.638119][ C1] ? __asan_memcpy+0x40/0x70 [ 331.638138][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 331.638159][ C1] ? ip6_output+0x126/0x550 [ 331.638174][ C1] ip6_output+0x340/0x550 [ 331.638191][ C1] ip6_xmit+0x1149/0x1980 [ 331.638209][ C1] ? ip6_xmit+0x283/0x1980 [ 331.638225][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 331.638244][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 331.638261][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 331.638282][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 331.638302][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 331.638321][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 331.638348][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 331.638370][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 331.638388][ C1] tcp_write_xmit+0x16e8/0x6980 [ 331.638421][ C1] __tcp_push_pending_frames+0x97/0x380 [ 331.638439][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 331.638460][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 331.638475][ C1] rds_send_xmit+0x207e/0x28d0 [ 331.638504][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 331.638522][ C1] ? process_one_work+0x87c/0x1650 [ 331.638540][ C1] rds_send_worker+0x7d/0x2e0 [ 331.638558][ C1] ? process_one_work+0x87c/0x1650 [ 331.638575][ C1] process_one_work+0x949/0x1650 [ 331.638602][ C1] ? __pfx_process_one_work+0x10/0x10 [ 331.638620][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.638640][ C1] worker_thread+0xb46/0x1140 [ 331.638669][ C1] kthread+0x388/0x470 [ 331.638683][ C1] ? __pfx_worker_thread+0x10/0x10 [ 331.638702][ C1] ? __pfx_kthread+0x10/0x10 [ 331.638716][ C1] ret_from_fork+0x51e/0xb90 [ 331.638737][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 331.638756][ C1] ? __switch_to+0xc7d/0x1450 [ 331.638773][ C1] ? __pfx_kthread+0x10/0x10 [ 331.638787][ C1] ret_from_fork_asm+0x1a/0x30 [ 331.638806][ C1] [ 332.320891][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 332.329662][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 458, name: kworker/u8:6 [ 332.338798][ C1] preempt_count: 303, expected: 0 [ 332.343882][ C1] RCU nest depth: 5, expected: 0 [ 332.348823][ C1] INFO: lockdep is turned off. [ 332.353601][ C1] Preemption disabled at: [ 332.353610][ C1] [] __dev_queue_xmit+0x281/0x38a0 [ 332.364938][ C1] CPU: 1 UID: 0 PID: 458 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.364962][ C1] Tainted: [L]=SOFTLOCKUP [ 332.364968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.364979][ C1] Workqueue: krds_cp_wq#3/0 rds_send_worker [ 332.365004][ C1] Call Trace: [ 332.365013][ C1] [ 332.365021][ C1] dump_stack_lvl+0xe8/0x150 [ 332.365044][ C1] __might_resched+0x378/0x4d0 [ 332.365067][ C1] ? __dev_queue_xmit+0x281/0x38a0 [ 332.365091][ C1] lock_sock_nested+0x5d/0x100 [ 332.365107][ C1] inet6_getname+0x15d/0x650 [ 332.365130][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 332.365148][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 332.365174][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 332.365203][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.365223][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 332.365246][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 332.365262][ C1] ? NF_HOOK+0x336/0x3c0 [ 332.365280][ C1] ? ip6_input+0x16a/0x270 [ 332.365299][ C1] ? NF_HOOK+0x336/0x3c0 [ 332.365317][ C1] ? rds_recv_hs_exthdrs+0xe1/0x7c0 [ 332.365333][ C1] ? tcp_write_xmit+0x16e8/0x6980 [ 332.365349][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 332.365366][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 332.365381][ C1] ? process_one_work+0x949/0x1650 [ 332.365400][ C1] ? kthread+0x388/0x470 [ 332.365414][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 332.365431][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 332.365450][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 332.365466][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 332.365486][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 332.365507][ C1] __tcp_read_sock+0x196/0x970 [ 332.365531][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 332.365547][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 332.365570][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 332.365593][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 332.365617][ C1] ? tcp_grow_window+0x4fc/0xc50 [ 332.365634][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 332.365661][ C1] ? tcp_urg+0x106/0x410 [ 332.365680][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 332.365699][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 332.365717][ C1] ? ktime_get+0x45/0x200 [ 332.365731][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 332.365747][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 332.365769][ C1] tcp_rcv_established+0xf45/0x2740 [ 332.365795][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 332.365815][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 332.365829][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 332.365850][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 332.365865][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 332.365891][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 332.365924][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 332.365945][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 332.365960][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 332.365972][ C1] ? raw6_local_deliver+0x116/0x950 [ 332.365993][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 332.366015][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 332.366044][ C1] ip6_input_finish+0x191/0x370 [ 332.366066][ C1] NF_HOOK+0x336/0x3c0 [ 332.366085][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 332.366102][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 332.366121][ C1] ? NF_HOOK+0x9e/0x3c0 [ 332.366139][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 332.366158][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 332.366188][ C1] ip6_input+0x16a/0x270 [ 332.366207][ C1] ? ip6_input+0x23/0x270 [ 332.366226][ C1] NF_HOOK+0x336/0x3c0 [ 332.366243][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 332.366256][ C1] ? skb_orphan+0x4f/0xd0 [ 332.366274][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 332.366292][ C1] ? NF_HOOK+0x9e/0x3c0 [ 332.366310][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 332.366328][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 332.366350][ C1] ? process_backlog+0x3eb/0x1950 [ 332.366366][ C1] process_backlog+0x7dd/0x1950 [ 332.366388][ C1] __napi_poll+0xae/0x340 [ 332.366401][ C1] ? skb_defer_free_flush+0x233/0x260 [ 332.366416][ C1] net_rx_action+0x627/0xf70 [ 332.366431][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 332.366454][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 332.366472][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 332.366499][ C1] handle_softirqs+0x22a/0x870 [ 332.366521][ C1] ? do_softirq+0x76/0xd0 [ 332.366541][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 332.366561][ C1] do_softirq+0x76/0xd0 [ 332.366579][ C1] [ 332.366584][ C1] [ 332.366590][ C1] __local_bh_enable_ip+0xf8/0x130 [ 332.366609][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 332.366628][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 332.366652][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 332.366675][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 332.366698][ C1] ? ip6_output+0x340/0x550 [ 332.366714][ C1] ? ip6_finish_output2+0xb38/0x13e0 [ 332.366733][ C1] ? __asan_memcpy+0x40/0x70 [ 332.366746][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 332.366767][ C1] ? ip6_output+0x126/0x550 [ 332.366782][ C1] ip6_output+0x340/0x550 [ 332.366799][ C1] ip6_xmit+0x1149/0x1980 [ 332.366817][ C1] ? ip6_xmit+0x283/0x1980 [ 332.366838][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 332.366858][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 332.366874][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 332.366896][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 332.366916][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 332.366936][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 332.366963][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 332.366986][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 332.367003][ C1] tcp_write_xmit+0x16e8/0x6980 [ 332.367036][ C1] __tcp_push_pending_frames+0x97/0x380 [ 332.367054][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 332.367075][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 332.367093][ C1] rds_send_xmit+0x207e/0x28d0 [ 332.367122][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 332.367141][ C1] ? process_one_work+0x87c/0x1650 [ 332.367158][ C1] rds_send_worker+0x7d/0x2e0 [ 332.367176][ C1] ? process_one_work+0x87c/0x1650 [ 332.367194][ C1] process_one_work+0x949/0x1650 [ 332.367220][ C1] ? __pfx_process_one_work+0x10/0x10 [ 332.367238][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 332.367259][ C1] worker_thread+0xb46/0x1140 [ 332.367288][ C1] kthread+0x388/0x470 [ 332.367302][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.367321][ C1] ? __pfx_kthread+0x10/0x10 [ 332.367335][ C1] ret_from_fork+0x51e/0xb90 [ 332.367372][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 332.367396][ C1] ? __switch_to+0xc7d/0x1450 [ 332.367415][ C1] ? __pfx_kthread+0x10/0x10 [ 332.367429][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.367449][ C1]