last executing test programs: 6.510570468s ago: executing program 3 (id=182): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 6.121346039s ago: executing program 3 (id=184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x2}, &(0x7f0000000080)=0x8) 5.148910717s ago: executing program 3 (id=189): ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$eJzs3E1sG8UeAPD/Ok76Xr+S19f3oKVAoCAqPpI2LdADB0BC4lAkJDiUo0nSqtRtUBMkWkU0oKpckGgl7giJCxJnDpw4IeCExIUD3FGlCvVC4WS09tqsHbt1EqdO6t9Pcj2zO8nMf3dnd3anmwAG1nj6TxKxPSJ+iYjRiCi0Fhivfd28sTj9543F6SQqldd+T9Ifiz9uLE7XiybZ97Zapph+FS4l8XybeufPXzhdKpdnz2X5yYUzb0/On7/w1KkzpZOzJ2fPTh09euTwoWefmXq6J3H+J23r3vfm9u15+Y2rr0wfv/rm918muUbn4+iN4VjKbZNWj/a2sr7bkUsnxaZVM6PNRQt3pkV0Y0tEtaMOR8RIjMbQpZ2NdaPx0gd9bRywriqVSmWq8+qlCnAXS6LfLQD6o36hT+9/6587NPTYEK6/ULsBSuO+mX1qa4qNG9XhlvvbXlqMiONLf32afmJdnkMAADT7Jh3/PNlu/FeI/+fK7czmhsayuZRdEfHfiNgdEf+LqJa9JyLuXWH94y355eOfwrVVBdaldPz3XDa31Tz+a0xTjA1luR3V+IeTE6fKswezbXIghrek+UNtf3sS1Umg+OnjTvWP58Z/6Setvz4WzNpxrbil+WdmSgulNQeeuf5+xN5iu/izCbxsDmtPROxdZR2nHv9iX/OSoUbq9vHfQnGVDcqpfBbxWG3/L0VL/HXJrecnJ/8V5dmDk/WjYrkffrz8aqf61xR/D6T7f2vb478R/1iSn6+dX/YrRm5Xx+VfP+x4T7Pa438keb2p8ndLCwvnDkWMJMeWL8894E7z9aMvLZ/Gf2B/+/6/K/7ZEvdFRHoQ3x8RD0TEg1nbH4qIhyNif76BLTOc3734yFurj399pfEfW9H+X3li6PS3X3eqv7v9f6SaOpAt6eb8120D17LtAAAAYLMoRMT2SAoTjXShMDFR+z/8u2NroTw3v/DEibl3zs7U3hEYi+FC/UnXaJaP7PnnWO756FR11jziYpY/nD03/mTo39X8xPRceabfwcOA29ah/6d+G+p364B114N5NGCT0v9hcK2+/ztzwGZ3m17sDzbAXcxVHAZXu/5/sQ/tAO48138YXI3+f6WLwrnXvVpf3gQ2H9d/GFz6PwyktbzXvyES8XnErcskG6WpK0p8lF9SP0FvhIaVTtQOmyhsjA3VlIhIonOZQuSWlNqViSsbIYoOiWLXf9XifOViqVz++au1VNrnExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B0AAP//7mLcmg==") 4.560380255s ago: executing program 3 (id=193): syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@quota}, {@inode32}]}, 0x4, 0x969b, &(0x7f000001c300)="$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") chmod(&(0x7f0000000080)='./file0\x00', 0x154) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') 4.075638674s ago: executing program 0 (id=196): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='contention_end\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.617162225s ago: executing program 1 (id=199): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0xc5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.518461712s ago: executing program 0 (id=200): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x64) 3.450078076s ago: executing program 1 (id=202): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x0f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47b7, 0x8000, 0x0, 0x0, 0x0) 1.530329202s ago: executing program 2 (id=217): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14) recvfrom$packet(r0, 0x0, 0xfffffffffffffd85, 0x2000, 0x0, 0x0) 1.511726752s ago: executing program 1 (id=218): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.439829944s ago: executing program 0 (id=219): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000c80)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="0cbd5b5353912a879413ea41a5629122f6276e175b189b44b947b5ed8f34c9675196c7f420a9b4778c892a009b17763f4dbda6a421bf154a20ef7653d70337286d09a41d27fbb619ff647f585a8577dd9c318e307ee0e9c3328c5093134a7c98153b0d68aba22a65e8773fad07b59a0c5437e47d4255e1e8658b9b5a0cf45c27f88d87d58476713ea75cc39cdeb6036614e0b73cfbcd4f9243e2124d8ff5112db88857c7b69007b6ff5355f42dac04033a790725615a827b96542e64ad60984b7626cc74628d2d76b1f32df646d70aa036bc7d42fd", @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="d435d9afbeca2782ae19ed8bd41575ea7d9c9874c548e8a3b6d356a39d4518f41339a72ccd509df9e4d9d79abcc2f6da6768bd4f40d0beffba62fb5009c1e93fd4fe41778354a47dc025c852e30590bfb3cccdb6c83b0fdb27f16f03d72df1eac33d4948589efe30db71a5f7e31a303bf4ed9f3125c0a7aa0008ddaa", @ANYRESDEC], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0xa406, 0x8}}, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 1.438921989s ago: executing program 4 (id=220): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.307466222s ago: executing program 2 (id=221): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$eJzs3U2MW0fhAPCxd73JJuk/Tv8JXdLQJhTa8tFNs7uEjwiSKhESUVMhLpUiLlGalogQJIoEVJVIcuJGqypInPgQp16qgpDoBUU9calEI1VIPRUOHIiCqMQBAonReme89sTusze7fnb8+0mz43kzzzPP+/z8PmcCMLGqzb9LS3OVEC6/8cqxvz3819nlKYdbJerNv9NtqVoIoRLT09n7vTe1Et98/8XT3eJKWGj+Tenw1PXWvFtDCBfC3nAl1MPuy1dffmvhyRMXj1/a9/arh65tzNIDAMBk+eqVQ0u7/vzH+3fceO2BI2FTmrz8orl/Xo8TtsX9/iNxxz/t/1dDZ7rSFtrNZOWmY6jOdpab6lKuvZ5aVm66R/0zWf21HuU2hQ+uf6ptWrflhnGW1uN6qFTnO9LV6vz8yjF5aB7Xz1Tmz5899+zzJTUUWHf/fDCEsLctHL3UmR61cHgE2pCF5r5FH+UaI9DWsQxHhlfXjcaK0pd5SKGxvewtEMCK/HrhbS7kZxbuTOvdpvur//oT1e7zwzoY9vo/UP0zJdcf1P+ri7Y4rJ+7dW1Ky5W+R9tiOr+OkN+/1Pv7l1/p6JyaX4+o9dnOXtcRxuX6Qq92Tg25HWvVq/35enG3+mKM0+fwpSy//fuT/0/H5X8MdPev/Py/IAijHUJHunYn79UoefsDjK78vrlGuj4a5ff15fmbCvI3F+TPFuRvKcjfWpAPk+w33/1xeKmyepyfH9MPej48nWe7J8b/N2B78vORg9af3/c7qDutP7+fGEbZ7049feZzz5y8unL/f6W1/t+K63s63KjH79aVWCCdL8zPq7fu/a931lPtUe7erD33dCnffL2zs1xl5+r7hLbtzG3tmOucb3uvcns6y9WzcrMxbM7am++fbMnmS/sfabuaPq/pbHlr2XLMZO1I25UdMc7bAWuR1sde9/+n9XMu1CrPnj135vGYTuvpH6Zqm5anHxhyu4E71+/zP3Oh8/mfba3ptWr7dmH76vTKynbh9fh+ndMXWvV0Tl+M6fQ7942p2eb0+dPfPvfM+i8+TLTnf/DCN0+dO3fmO6W/WJwNYQSasYYXXx6NZgzyIh22jEp7vBi5FyVvmIANt/+HKzsBj5391qnnzjx35vziwYOLCwsHP7+4tL+5X7+/fe++3YUSWgusp9Uf/bJbAgAAAAAAAAAAAPTre8ePXX3nzc++u/L8/+rzf+n5/3Tnb3r+/0fZ8//5c/LpOfj0HOCOLvnNMlkHqzNZuVoM/5+1d2dWz65svg/FuDWOX3z+P1WX9+ua2nNfNr3WI5l1J3BbfykzWR8k+XiBH43xpRj/MkCJKrPdJ8e4qH/rtK6n/ina+qVo6B94fKT/W1obUj8m6fnvrv06tf2zdwyhjay/YTxOWPYyAt39faL6//7H6oKX3hahd5gebn0/ndx1otFzL73fEWwA1kfZ43+m854pPv/7r2xeDqnY9Sc6t5d5/6UwiD+905ke9fEnN7r+fNy+Yddf9vIPe/zP1vh3fW//shHz6mur998/u/ZuW7Vhd7/158uf+oHeOVj9N2L9aWkeCf3V3/hFVn9+QahP/8nq39Jn/bct/5611f/fWH/62B59qN/6V1pcqXa2Iz9vnK7/5eeNk5vZ8qe+PT+g/q+90G351zhQ461YP0yycRlndlDZfkRrp33t4/9GF9Z3/N9WY7PNWn4fxmdiOm2I030O+Xgng7Y/3V+Rfgd2Ze9fKfh9M/7vePtCjIu+D2n837Q+1uNPflu6+VmmdK3LZ3u3bmtgXL03Udf/1iGc3PA6Npe+jCMfjoxAG1qhMbWG+VrjxJXc/kajsbEntAqUWjmlf/5lHyeUXX/Zn3+RfPzffB8+H/83z8/H/83z8/F/8/zZ+B/qlZ+P/5t/nvn4v3n+fdn75uMDzxXkf7ggf3f3/NZh+/0F8+8pyP9IQf6+Vv7hjhIp/4GC+R8syL+3IP+hgvyPFeR/vCD/4YL8R9vy28eATvmfKJj/bpeeR5nU5YdJlj+f5/sPkyNd/+n1/d9ZkA+Mr5+8duDoyV9/vb7y/P9M63xIuo53JKZr8fjp+zGdX/cObenlvDdj+i9Z/qif74BJkvefkf++P1KQD4yvdJ+X7zdMoMrm7pNjXNRvVa/9fMbLJ2P8qRh/OsaPxXg+xvtjfCDGC0NqHxvj6Ou/PfRSZfV4f3uW3+/95PnzQB39RIUQFvtsT35+YND72fN+/AZ1p/Wv8XEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0lSbf5eW5iohXH7jlWNPnzi7f3nK4VaJevPvdFuq1povhMdjPBXjn8cXN99/8XR7fCvGlbAQKqHSmh6eut6qaWsI4ULYG66Eeth9+erLby08eeLi8Uv73n710LWN+wQAAADg7ve/AAAA//+NnAuo") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x5, 0x40000000000008]}}) 704.390512ms ago: executing program 2 (id=222): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0xb) 594.160335ms ago: executing program 0 (id=223): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}]}, &(0x7f0000000140)=0x10) listen(r0, 0xfff) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) 415.779961ms ago: executing program 4 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 196.923435ms ago: executing program 2 (id=225): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x1, 0x1c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc800) 170.089823ms ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x41) 0s ago: executing program 2 (id=227): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 83.763105][ T5818] cgroup: Unknown subsys name 'net' [ 83.955433][ T5818] cgroup: Unknown subsys name 'cpuset' [ 83.964791][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.720868][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.849482][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.857936][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.865987][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.874471][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.882331][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.990947][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.999087][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.006847][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.015014][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.022857][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.083556][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.095562][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.111126][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.146193][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.154054][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.171072][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.181241][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.202063][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.221631][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.230864][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.238816][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.247510][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.247711][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.263187][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.264319][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.758030][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.857473][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.138422][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.173373][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.181489][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.188983][ T5829] bridge_slave_0: entered allmulticast mode [ 91.198174][ T5829] bridge_slave_0: entered promiscuous mode [ 91.265424][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.272779][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.280027][ T5829] bridge_slave_1: entered allmulticast mode [ 91.288470][ T5829] bridge_slave_1: entered promiscuous mode [ 91.308929][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.350162][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.358820][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.366813][ T5833] bridge_slave_0: entered allmulticast mode [ 91.375260][ T5833] bridge_slave_0: entered promiscuous mode [ 91.428276][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.439671][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.447366][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.455008][ T5833] bridge_slave_1: entered allmulticast mode [ 91.463234][ T5833] bridge_slave_1: entered promiscuous mode [ 91.473374][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.517829][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.620039][ T5829] team0: Port device team_slave_0 added [ 91.663659][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.670936][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.678109][ T5835] bridge_slave_0: entered allmulticast mode [ 91.686455][ T5835] bridge_slave_0: entered promiscuous mode [ 91.700379][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.714102][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.737731][ T5829] team0: Port device team_slave_1 added [ 91.763194][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.771028][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.778327][ T5835] bridge_slave_1: entered allmulticast mode [ 91.785854][ T5835] bridge_slave_1: entered promiscuous mode [ 91.878029][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.885590][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.898273][ T5838] bridge_slave_0: entered allmulticast mode [ 91.906705][ T5838] bridge_slave_0: entered promiscuous mode [ 91.915957][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.922977][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.948968][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.962623][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.969622][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.996618][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.008683][ T5831] Bluetooth: hci0: command tx timeout [ 92.021625][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.034245][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.045312][ T5833] team0: Port device team_slave_0 added [ 92.051916][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.059143][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.060145][ T24] cfg80211: failed to load regulatory.db [ 92.068008][ T5838] bridge_slave_1: entered allmulticast mode [ 92.081257][ T5838] bridge_slave_1: entered promiscuous mode [ 92.130725][ T5831] Bluetooth: hci1: command tx timeout [ 92.159506][ T5833] team0: Port device team_slave_1 added [ 92.193794][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.203881][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.211506][ T5840] bridge_slave_0: entered allmulticast mode [ 92.218723][ T5840] bridge_slave_0: entered promiscuous mode [ 92.228897][ T5835] team0: Port device team_slave_0 added [ 92.267404][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.277018][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.284340][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.291583][ T5842] Bluetooth: hci4: command tx timeout [ 92.291849][ T5831] Bluetooth: hci3: command tx timeout [ 92.303428][ T5840] bridge_slave_1: entered allmulticast mode [ 92.310788][ T5840] bridge_slave_1: entered promiscuous mode [ 92.319602][ T5835] team0: Port device team_slave_1 added [ 92.359568][ T5829] hsr_slave_0: entered promiscuous mode [ 92.366178][ T5829] hsr_slave_1: entered promiscuous mode [ 92.376099][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.385682][ T5831] Bluetooth: hci2: command tx timeout [ 92.442502][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.449489][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.476255][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.489240][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.496521][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.522749][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.548403][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.595833][ T5838] team0: Port device team_slave_0 added [ 92.604780][ T5838] team0: Port device team_slave_1 added [ 92.613135][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.623626][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.630719][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.657014][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.717083][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.724217][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.750892][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.829513][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.837273][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.863627][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.876464][ T5840] team0: Port device team_slave_0 added [ 92.885292][ T5840] team0: Port device team_slave_1 added [ 92.926179][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.933407][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.960098][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.999796][ T5833] hsr_slave_0: entered promiscuous mode [ 93.006544][ T5833] hsr_slave_1: entered promiscuous mode [ 93.013717][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.021970][ T5833] Cannot create hsr debugfs directory [ 93.074211][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.081284][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.108101][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.148998][ T5835] hsr_slave_0: entered promiscuous mode [ 93.155691][ T5835] hsr_slave_1: entered promiscuous mode [ 93.162405][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.169985][ T5835] Cannot create hsr debugfs directory [ 93.176359][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.183434][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.209960][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.267331][ T5838] hsr_slave_0: entered promiscuous mode [ 93.274102][ T5838] hsr_slave_1: entered promiscuous mode [ 93.280254][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.287888][ T5838] Cannot create hsr debugfs directory [ 93.509848][ T5840] hsr_slave_0: entered promiscuous mode [ 93.517322][ T5840] hsr_slave_1: entered promiscuous mode [ 93.523854][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.532280][ T5840] Cannot create hsr debugfs directory [ 93.746525][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.791918][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.835100][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.866982][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.947243][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.984931][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.007785][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.018905][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.060612][ T5831] Bluetooth: hci0: command tx timeout [ 94.132341][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.150123][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.162307][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.190371][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.210753][ T5831] Bluetooth: hci1: command tx timeout [ 94.297435][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.306020][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.319396][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.344522][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.359249][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.372103][ T5831] Bluetooth: hci3: command tx timeout [ 94.374967][ T5842] Bluetooth: hci4: command tx timeout [ 94.445557][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.451472][ T5842] Bluetooth: hci2: command tx timeout [ 94.509476][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.516807][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.527884][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.535103][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.560334][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.577613][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.592487][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.603715][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.662915][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.741459][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.768723][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.779516][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.786720][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.829534][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.836754][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.949256][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.971678][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.978829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.999295][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.025041][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.032235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.119711][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.159578][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.167115][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.181940][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.189169][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.226863][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.318344][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.333187][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.387675][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.394872][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.466421][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.473672][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.699515][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.741192][ T5829] veth0_vlan: entered promiscuous mode [ 95.812079][ T5829] veth1_vlan: entered promiscuous mode [ 95.838576][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.859951][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.952445][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.959976][ T5829] veth0_macvtap: entered promiscuous mode [ 96.021443][ T5829] veth1_macvtap: entered promiscuous mode [ 96.084853][ T5833] veth0_vlan: entered promiscuous mode [ 96.126814][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.135794][ T5842] Bluetooth: hci0: command tx timeout [ 96.170187][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.181992][ T5835] veth0_vlan: entered promiscuous mode [ 96.196780][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.207047][ T5833] veth1_vlan: entered promiscuous mode [ 96.243159][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.275461][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.294286][ T5842] Bluetooth: hci1: command tx timeout [ 96.309160][ T5835] veth1_vlan: entered promiscuous mode [ 96.325898][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.344865][ T5838] veth0_vlan: entered promiscuous mode [ 96.363897][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.379147][ T5838] veth1_vlan: entered promiscuous mode [ 96.453360][ T5842] Bluetooth: hci4: command tx timeout [ 96.458892][ T5842] Bluetooth: hci3: command tx timeout [ 96.536055][ T5831] Bluetooth: hci2: command tx timeout [ 96.538719][ T5835] veth0_macvtap: entered promiscuous mode [ 96.596423][ T5838] veth0_macvtap: entered promiscuous mode [ 96.619007][ T5833] veth0_macvtap: entered promiscuous mode [ 96.629346][ T5835] veth1_macvtap: entered promiscuous mode [ 96.648008][ T5833] veth1_macvtap: entered promiscuous mode [ 96.654398][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.665039][ T5838] veth1_macvtap: entered promiscuous mode [ 96.668299][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.746218][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.764353][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.770353][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.783903][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.807856][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.822711][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.836369][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.872777][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.906193][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.911893][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.928938][ T5840] veth0_vlan: entered promiscuous mode [ 96.942492][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.978328][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002336][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.056341][ T5840] veth1_vlan: entered promiscuous mode [ 97.067385][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.133839][ T1027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.168190][ T1027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.185819][ T1027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.227368][ T1027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.255270][ T1027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.267201][ T1027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.326047][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.369405][ T5840] veth0_macvtap: entered promiscuous mode [ 97.386568][ T5840] veth1_macvtap: entered promiscuous mode [ 97.409250][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.419277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.440125][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.440889][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.458135][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.498968][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.510280][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.521462][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.564345][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.599425][ T5948] loop1: detected capacity change from 0 to 32768 [ 97.617050][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.634617][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.646074][ T5948] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5948) [ 97.667144][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.692325][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.692444][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.704979][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.709574][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.736425][ T5948] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 97.761197][ T5948] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 97.771907][ T5948] BTRFS info (device loop1): disk space caching is enabled [ 97.779300][ T5948] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 97.838567][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.921031][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.073575][ T5948] BTRFS info (device loop1): rebuilding free space tree [ 98.187405][ T5948] BTRFS info (device loop1): disabling free space tree [ 98.195825][ T5948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.212786][ T5831] Bluetooth: hci0: command tx timeout [ 98.218547][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.236623][ T5948] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.257981][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.371069][ T5831] Bluetooth: hci1: command tx timeout [ 98.396795][ T5948] BTRFS info (device loop1): balance: start -d -m [ 98.434935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.496638][ T5948] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 98.500671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.532114][ T5831] Bluetooth: hci3: command tx timeout [ 98.532462][ T5842] Bluetooth: hci4: command tx timeout [ 98.611255][ T5842] Bluetooth: hci2: command tx timeout [ 98.895238][ T5948] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 99.471178][ T5948] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 99.545278][ T5971] loop0: detected capacity change from 0 to 40427 [ 99.599823][ T5971] F2FS-fs (loop0): build fault injection rate: 690 [ 99.617255][ T5971] F2FS-fs (loop0): Image doesn't support compression [ 99.635036][ T5971] F2FS-fs (loop0): heap/no_heap options were deprecated [ 99.662240][ T5948] BTRFS info (device loop1): balance: canceled [ 99.692277][ T5971] F2FS-fs (loop0): Image doesn't support compression [ 99.760561][ T5971] F2FS-fs (loop0): invalid crc value [ 99.886355][ T5829] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 99.915213][ T5968] loop2: detected capacity change from 0 to 32768 [ 100.018222][ T5968] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 100.093398][ T5968] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.107697][ T5971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.117075][ T5976] loop4: detected capacity change from 0 to 32768 [ 100.323655][ T5968] XFS (loop2): Ending clean mount [ 100.458556][ T5835] syz-executor: attempt to access beyond end of device [ 100.458556][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 100.476012][ T5968] XFS (loop2): Quotacheck needed: Please wait. [ 100.526383][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 100.526418][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.526438][ T5835] Call Trace: [ 100.526447][ T5835] [ 100.526457][ T5835] dump_stack_lvl+0x189/0x250 [ 100.526506][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.526535][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 100.526565][ T5835] ? __pfx_queue_work_on+0x10/0x10 [ 100.526596][ T5835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.526624][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.526656][ T5835] ? f2fs_hw_is_readonly+0x39b/0x470 [ 100.526689][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 100.526724][ T5835] f2fs_write_end_io+0x495/0x810 [ 100.526752][ T5835] ? blkg_put+0x22/0x240 [ 100.526810][ T5835] __submit_merged_bio+0x27a/0x6a0 [ 100.526843][ T5835] __submit_merged_write_cond+0x255/0x530 [ 100.526894][ T5835] f2fs_write_data_pages+0x261d/0x3000 [ 100.526993][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.527112][ T5835] ? __lock_acquire+0xab9/0xd20 [ 100.527148][ T5835] ? do_raw_spin_lock+0x121/0x290 [ 100.527182][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 100.527202][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.527232][ T5835] do_writepages+0x32e/0x550 [ 100.527274][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 100.527303][ T5835] filemap_fdatawrite+0x199/0x240 [ 100.527334][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 100.527443][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 100.527470][ T5835] f2fs_sync_dirty_inodes+0x31f/0x830 [ 100.527521][ T5835] f2fs_write_checkpoint+0x95a/0x1df0 [ 100.527584][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 100.527665][ T5835] ? try_to_wake_up+0x7e5/0x1290 [ 100.527694][ T5835] ? kill_f2fs_super+0x298/0x6c0 [ 100.527732][ T5835] kill_f2fs_super+0x2c3/0x6c0 [ 100.527772][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 100.527799][ T5835] ? radix_tree_delete_item+0x2b6/0x400 [ 100.527839][ T5835] ? shrinker_free+0x2ce/0x3e0 [ 100.527868][ T5835] deactivate_locked_super+0xbc/0x130 [ 100.527899][ T5835] cleanup_mnt+0x425/0x4c0 [ 100.527925][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.527965][ T5835] task_work_run+0x1d1/0x260 [ 100.527992][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 100.528012][ T5835] ? __x64_sys_umount+0x122/0x160 [ 100.528049][ T5835] ? exit_to_user_mode_loop+0x40/0x110 [ 100.528081][ T5835] exit_to_user_mode_loop+0xec/0x110 [ 100.528107][ T5835] do_syscall_64+0x2bd/0x3b0 [ 100.528125][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.528155][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.528176][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 100.528202][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.528222][ T5835] RIP: 0033:0x7fd045b8fc57 [ 100.528247][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 100.528263][ T5835] RSP: 002b:00007ffc7af720a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.528286][ T5835] RAX: 0000000000000000 RBX: 00007fd045c10925 RCX: 00007fd045b8fc57 [ 100.528300][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7af72160 [ 100.528312][ T5835] RBP: 00007ffc7af72160 R08: 0000000000000000 R09: 0000000000000000 [ 100.528325][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7af731f0 [ 100.528338][ T5835] R13: 00007fd045c10925 R14: 00000000000187aa R15: 00007ffc7af73230 [ 100.528375][ T5835] [ 100.528384][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.828318][ T5968] XFS (loop2): Quotacheck: Done. [ 100.863179][ T6001] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9'. [ 100.900968][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 100.901001][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.901015][ T5835] Call Trace: [ 100.901024][ T5835] [ 100.901034][ T5835] dump_stack_lvl+0x189/0x250 [ 100.901079][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.901109][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 100.901142][ T5835] ? __pfx_queue_work_on+0x10/0x10 [ 100.901176][ T5835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.901206][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.901258][ T5835] ? f2fs_hw_is_readonly+0x39b/0x470 [ 100.901292][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 100.901331][ T5835] f2fs_write_end_io+0x495/0x810 [ 100.901363][ T5835] ? blkg_put+0x22/0x240 [ 100.901411][ T5835] __submit_merged_bio+0x27a/0x6a0 [ 100.901449][ T5835] __submit_merged_write_cond+0x255/0x530 [ 100.901486][ T5835] f2fs_write_data_pages+0x261d/0x3000 [ 100.901561][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.901683][ T5835] ? __lock_acquire+0xab9/0xd20 [ 100.901722][ T5835] ? do_raw_spin_lock+0x121/0x290 [ 100.901757][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 100.901781][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.901813][ T5835] do_writepages+0x32e/0x550 [ 100.901859][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 100.901887][ T5835] filemap_fdatawrite+0x199/0x240 [ 100.901923][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 100.902011][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 100.902038][ T5835] f2fs_sync_dirty_inodes+0x31f/0x830 [ 100.902090][ T5835] f2fs_write_checkpoint+0x95a/0x1df0 [ 100.902152][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 100.902231][ T5835] ? try_to_wake_up+0x7e5/0x1290 [ 100.902261][ T5835] ? kill_f2fs_super+0x298/0x6c0 [ 100.902301][ T5835] kill_f2fs_super+0x2c3/0x6c0 [ 100.902343][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 100.902373][ T5835] ? radix_tree_delete_item+0x2b6/0x400 [ 100.902414][ T5835] ? shrinker_free+0x2ce/0x3e0 [ 100.902445][ T5835] deactivate_locked_super+0xbc/0x130 [ 100.902477][ T5835] cleanup_mnt+0x425/0x4c0 [ 100.902506][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.902543][ T5835] task_work_run+0x1d1/0x260 [ 100.902571][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 100.902592][ T5835] ? __x64_sys_umount+0x122/0x160 [ 100.902633][ T5835] ? exit_to_user_mode_loop+0x40/0x110 [ 100.902671][ T5835] exit_to_user_mode_loop+0xec/0x110 [ 100.902700][ T5835] do_syscall_64+0x2bd/0x3b0 [ 100.902721][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.902753][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.902776][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 100.902805][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.902826][ T5835] RIP: 0033:0x7fd045b8fc57 [ 100.902846][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 100.902865][ T5835] RSP: 002b:00007ffc7af720a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.902890][ T5835] RAX: 0000000000000000 RBX: 00007fd045c10925 RCX: 00007fd045b8fc57 [ 100.902905][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7af72160 [ 100.902918][ T5835] RBP: 00007ffc7af72160 R08: 0000000000000000 R09: 0000000000000000 [ 100.902932][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7af731f0 [ 100.902946][ T5835] R13: 00007fd045c10925 R14: 00000000000187aa R15: 00007ffc7af73230 [ 100.902978][ T5835] [ 100.917175][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.982768][ T5976] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 101.104735][ T6003] loop1: detected capacity change from 0 to 64 [ 101.303366][ T5976] allowing incompatible features above 0.0: (unknown version) [ 101.320127][ T5976] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.370417][ T5838] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.400795][ T5976] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 101.416903][ T5976] bcachefs (loop4): initializing new filesystem [ 101.497403][ T5976] bcachefs (loop4): going read-write [ 101.601067][ T5976] bcachefs (loop4): marking superblocks [ 101.681778][ T5976] bcachefs (loop4): initializing freespace [ 101.732129][ T5976] bcachefs (loop4): done initializing freespace [ 101.788716][ T5976] bcachefs (loop4): reading snapshots table [ 101.811811][ T5976] bcachefs (loop4): reading snapshots done [ 101.887753][ T5976] bcachefs (loop4): done starting filesystem [ 102.060728][ T5976] syz.4.5 (5976) used greatest stack depth: 17656 bytes left [ 102.138566][ T5840] bcachefs (loop4): shutting down [ 102.169742][ T5840] bcachefs (loop4): going read-only [ 102.186729][ T5840] bcachefs (loop4): finished waiting for writes to stop [ 102.224591][ T5840] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 102.345435][ T5840] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 102.415583][ T5840] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 102.436838][ T5840] bcachefs (loop4): marking filesystem clean [ 102.444233][ T5922] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.512325][ T6008] loop3: detected capacity change from 0 to 32768 [ 102.549932][ T5840] bcachefs (loop4): shutdown complete [ 102.643734][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 102.683155][ T5922] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 102.758875][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.806667][ T6008] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 102.806703][ T6008] allowing incompatible features above 0.0: (unknown version) [ 102.806717][ T6008] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 102.875530][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400 [ 102.875569][ T5922] pvrusb2: ********** [ 102.875578][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 102.875596][ T5922] pvrusb2: Important functionality might not be entirely working. [ 102.875607][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 102.875620][ T5922] pvrusb2: ********** [ 103.097206][ T2344] pvrusb2: Invalid write control endpoint [ 103.172420][ T6008] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 103.221274][ T6008] bcachefs (loop3): initializing new filesystem [ 103.244035][ T2344] pvrusb2: Invalid write control endpoint [ 103.270028][ T6008] bcachefs (loop3): going read-write [ 103.280961][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.303597][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.326064][ T6008] bcachefs (loop3): marking superblocks [ 103.334767][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.356869][ T6008] bcachefs (loop3): initializing freespace [ 103.374056][ T6008] bcachefs (loop3): done initializing freespace [ 103.384776][ T6008] bcachefs (loop3): reading snapshots table [ 103.392083][ T2344] pvrusb2: Device being rendered inoperable [ 103.395387][ T6015] loop0: detected capacity change from 0 to 32768 [ 103.400254][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 103.418753][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 103.434836][ T2344] pvrusb2: Attached sub-driver cx25840 [ 103.441415][ T6008] bcachefs (loop3): reading snapshots done [ 103.441550][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 103.482873][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 103.503580][ T6015] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.529884][ T6008] bcachefs (loop3): done starting filesystem [ 103.601027][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.674995][ T6015] XFS (loop0): Ending clean mount [ 103.737015][ T30] audit: type=1800 audit(1751275743.796:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="file1" dev="loop3" ino=4098 res=0 errno=0 [ 103.785566][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.836547][ T1099] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 103.877563][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.904701][ T5897] usb 3-1: USB disconnect, device number 2 [ 103.930689][ T1099] XFS (loop0): Unmount and run xfs_repair [ 103.950618][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.962500][ T1099] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 103.970103][ T1099] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 104.007132][ T6027] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 104.027983][ T1099] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 104.054608][ T1099] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 104.086411][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.099481][ T1099] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 104.145004][ T1099] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.180506][ T1099] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.189761][ T1099] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.217156][ T6008] syz.3.11 (6008) used greatest stack depth: 16216 bytes left [ 104.263705][ T1099] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.300904][ T1099] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 104.329283][ T5833] bcachefs (loop3): shutting down [ 104.335151][ T5833] bcachefs (loop3): going read-only [ 104.342954][ T1099] XFS (loop0): page discard on page ffffea0001b5d040, inode 0x2449, pos 0. [ 104.352427][ T5833] bcachefs (loop3): finished waiting for writes to stop [ 104.366965][ T1099] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 104.386488][ T5833] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7 [ 104.478470][ T1099] XFS (loop0): Unmount and run xfs_repair [ 104.485262][ T1099] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 104.494599][ T1099] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 104.517137][ T5922] usb 5-1: USB disconnect, device number 2 [ 104.526492][ T1099] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 104.559475][ T1099] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 104.587411][ T5833] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 104.615826][ T1099] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 104.647457][ T1099] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.651658][ T5833] bcachefs (loop3): clean shutdown complete, journal seq 9 [ 104.667642][ T1099] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.679096][ T1099] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.708853][ T5833] bcachefs (loop3): marking filesystem clean [ 104.714666][ T1099] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 104.727327][ T1099] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 104.738467][ T1099] XFS (loop0): page discard on page ffffea0001b40c00, inode 0x2449, pos 49152. [ 104.753643][ T5835] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.765401][ T5835] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 104.803217][ T5833] bcachefs (loop3): shutdown complete [ 105.028477][ T6042] loop2: detected capacity change from 0 to 32768 [ 105.074187][ T6042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.16 (6042) [ 105.163657][ T6042] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.210601][ T6042] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 105.219237][ T6042] BTRFS info (device loop2): using free-space-tree [ 105.263738][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.431082][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 105.454487][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.475167][ T10] usb 2-1: config 0 has no interface number 0 [ 105.511314][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.547557][ T30] audit: type=1800 audit(1751275745.616:3): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file0" dev="loop2" ino=258 res=0 errno=0 [ 105.550101][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.576103][ T6042] fs-verity: sha256 using implementation "sha256-x86_64" [ 105.627986][ T6042] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 105.644808][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.677019][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.690613][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.710964][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.734241][ T10] usb 2-1: config 0 descriptor?? [ 105.754722][ T5838] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.767058][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 105.840688][ T5922] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.019175][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.064111][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.088116][ T10] usb 2-1: USB disconnect, device number 2 [ 106.108787][ T5922] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.126509][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 106.126509][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.126536][ T5922] usb 5-1: SerialNumber: syz [ 106.405731][ T5922] usb 5-1: 0:2 : does not exist [ 106.425886][ T5922] usb 5-1: usbmixer: too many channels (61) in unit 5 [ 106.481384][ T5922] usb 5-1: USB disconnect, device number 3 [ 106.594866][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.756971][ T6081] loop2: detected capacity change from 0 to 32768 [ 106.798855][ T6093] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 106.814496][ T6090] IPVS: stopping master sync thread 6093 ... [ 106.844326][ T6081] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.127682][ T6081] XFS (loop2): Ending clean mount [ 107.154182][ T6081] XFS (loop2): Quotacheck needed: Please wait. [ 107.188787][ T6087] loop0: detected capacity change from 0 to 32768 [ 107.256873][ T6081] XFS (loop2): Quotacheck: Done. [ 107.308196][ T30] audit: type=1800 audit(1751275747.376:4): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 107.411881][ T30] audit: type=1800 audit(1751275747.466:5): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 107.589464][ T5838] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.143036][ T6102] loop1: detected capacity change from 0 to 32768 [ 108.190187][ T6102] (syz.1.30,6102,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.226119][ T6102] (syz.1.30,6102,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.288563][ T6102] JBD2: Ignoring recovery information on journal [ 108.438031][ T6102] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.678017][ T30] audit: type=1800 audit(1751275748.746:6): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="file1" dev="loop1" ino=16980 res=0 errno=0 [ 108.835356][ T5829] ocfs2: Unmounting device (7,1) on (node local) [ 108.855261][ T6107] loop3: detected capacity change from 0 to 40427 [ 108.894077][ T6107] F2FS-fs (loop3): build fault injection rate: 690 [ 108.918209][ T6107] F2FS-fs (loop3): build fault injection type: 0x2 [ 108.925904][ T6107] F2FS-fs (loop3): Image doesn't support compression [ 108.933279][ T6107] F2FS-fs (loop3): Image doesn't support compression [ 108.966621][ T6107] F2FS-fs (loop3): invalid crc value [ 109.309813][ T6137] loop4: detected capacity change from 0 to 2048 [ 109.318873][ T6139] ======================================================= [ 109.318873][ T6139] WARNING: The mand mount option has been deprecated and [ 109.318873][ T6139] and is ignored by this kernel. Remove the mand [ 109.318873][ T6139] option from the mount to silence this warning. [ 109.318873][ T6139] ======================================================= [ 109.449381][ T6107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.457522][ T6141] loop1: detected capacity change from 0 to 1024 [ 109.508074][ T6137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.612460][ T6141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.717511][ T6141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 109.730324][ T6107] syz.3.18: attempt to access beyond end of device [ 109.730324][ T6107] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 109.734514][ T30] audit: type=1800 audit(1751275749.776:7): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 109.786686][ T6141] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 109.854152][ T6150] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 109.869261][ T6141] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.869261][ T6141] [ 109.911690][ T6150] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.911690][ T6150] [ 109.960602][ T6141] EXT4-fs (loop1): Total free blocks count 0 [ 109.966651][ T6141] EXT4-fs (loop1): Free/Dirty block details [ 109.979224][ T6150] EXT4-fs (loop1): Total free blocks count 0 [ 110.040843][ T6141] EXT4-fs (loop1): free_blocks=68451041280 [ 110.061014][ T6150] EXT4-fs (loop1): Free/Dirty block details [ 110.075820][ T6107] syz.3.18: attempt to access beyond end of device [ 110.075820][ T6107] loop3: rw=2049, sector=77824, nr_sectors = 2064 limit=40427 [ 110.216190][ T6107] syz.3.18: attempt to access beyond end of device [ 110.216190][ T6107] loop3: rw=2049, sector=79888, nr_sectors = 2064 limit=40427 [ 110.258354][ T6107] syz.3.18: attempt to access beyond end of device [ 110.258354][ T6107] loop3: rw=2049, sector=81952, nr_sectors = 720 limit=40427 [ 110.389144][ T5833] syz-executor: attempt to access beyond end of device [ 110.389144][ T5833] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 110.450162][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 110.450191][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.450203][ T5833] Call Trace: [ 110.450211][ T5833] [ 110.450220][ T5833] dump_stack_lvl+0x189/0x250 [ 110.450258][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.450286][ T5833] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 110.450315][ T5833] ? __pfx_queue_work_on+0x10/0x10 [ 110.450345][ T5833] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 110.450372][ T5833] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.450406][ T5833] ? f2fs_hw_is_readonly+0x39b/0x470 [ 110.450435][ T5833] f2fs_handle_critical_error+0x37c/0x540 [ 110.450467][ T5833] f2fs_write_end_io+0x495/0x810 [ 110.450493][ T5833] ? blkg_put+0x22/0x240 [ 110.450533][ T5833] __submit_merged_bio+0x27a/0x6a0 [ 110.450563][ T5833] __submit_merged_write_cond+0x255/0x530 [ 110.450594][ T5833] f2fs_write_data_pages+0x261d/0x3000 [ 110.450619][ T5833] ? __lock_acquire+0xab9/0xd20 [ 110.450672][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.450749][ T5833] ? stack_depot_save_flags+0x429/0x900 [ 110.450791][ T5833] ? kthread_stop+0x194/0x5f0 [ 110.450818][ T5833] ? kill_f2fs_super+0x137/0x6c0 [ 110.450851][ T5833] ? deactivate_locked_super+0xbc/0x130 [ 110.450886][ T5833] ? __lock_acquire+0xab9/0xd20 [ 110.450927][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.450955][ T5833] do_writepages+0x32e/0x550 [ 110.451001][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 110.451030][ T5833] filemap_fdatawrite+0x199/0x240 [ 110.451060][ T5833] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 110.451137][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 110.451160][ T5833] f2fs_sync_dirty_inodes+0x31f/0x830 [ 110.451205][ T5833] f2fs_write_checkpoint+0x95a/0x1df0 [ 110.451259][ T5833] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 110.451327][ T5833] ? try_to_wake_up+0x7e5/0x1290 [ 110.451349][ T5833] ? kill_f2fs_super+0x298/0x6c0 [ 110.451382][ T5833] kill_f2fs_super+0x2c3/0x6c0 [ 110.451418][ T5833] ? __pfx_kill_f2fs_super+0x10/0x10 [ 110.451442][ T5833] ? radix_tree_delete_item+0x2b6/0x400 [ 110.451479][ T5833] ? shrinker_free+0x2ce/0x3e0 [ 110.451505][ T5833] deactivate_locked_super+0xbc/0x130 [ 110.451533][ T5833] cleanup_mnt+0x425/0x4c0 [ 110.451557][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.451589][ T5833] task_work_run+0x1d1/0x260 [ 110.451613][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 110.451632][ T5833] ? __x64_sys_umount+0x122/0x160 [ 110.451666][ T5833] ? exit_to_user_mode_loop+0x40/0x110 [ 110.451694][ T5833] exit_to_user_mode_loop+0xec/0x110 [ 110.451718][ T5833] do_syscall_64+0x2bd/0x3b0 [ 110.451736][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.451764][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.451783][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 110.451807][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.451826][ T5833] RIP: 0033:0x7fb20238fc57 [ 110.451852][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 110.451868][ T5833] RSP: 002b:00007ffe82468cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 110.451888][ T5833] RAX: 0000000000000000 RBX: 00007fb202410925 RCX: 00007fb20238fc57 [ 110.451902][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe82468db0 [ 110.451914][ T5833] RBP: 00007ffe82468db0 R08: 0000000000000000 R09: 0000000000000000 [ 110.451925][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe82469e40 [ 110.451938][ T5833] R13: 00007fb202410925 R14: 000000000001ad90 R15: 00007ffe82469e80 [ 110.451969][ T5833] [ 110.843799][ T6131] loop2: detected capacity change from 0 to 40427 [ 110.853093][ T5833] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 110.884385][ T6159] loop0: detected capacity change from 0 to 2048 [ 110.895430][ T6163] sctp: [Deprecated]: syz.1.49 (pid 6163) Use of int in max_burst socket option deprecated. [ 110.895430][ T6163] Use struct sctp_assoc_value instead [ 110.939787][ T6131] F2FS-fs (loop2): invalid crc value [ 110.995547][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.412802][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.432716][ T6131] F2FS-fs (loop2): Start checkpoint disabled! [ 111.513930][ T6131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.538848][ T6175] loop1: detected capacity change from 0 to 1024 [ 111.659739][ T30] audit: type=1804 audit(1751275751.726:8): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.41" name="/newroot/6/file1/file0" dev="loop2" ino=10 res=1 errno=0 [ 111.730084][ T6179] loop0: detected capacity change from 0 to 1024 [ 111.791638][ T6179] EXT4-fs: Ignoring removed oldalloc option [ 111.797665][ T6179] EXT4-fs: Ignoring removed bh option [ 111.825214][ T36] kworker/u8:2: attempt to access beyond end of device [ 111.825214][ T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.825960][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 111.825986][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.826016][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 111.826050][ T36] Call Trace: [ 111.826059][ T36] [ 111.826068][ T36] dump_stack_lvl+0x189/0x250 [ 111.826105][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.826131][ T36] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 111.826160][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 111.826190][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 111.826218][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 111.826248][ T36] ? f2fs_hw_is_readonly+0x39b/0x470 [ 111.826280][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 111.826314][ T36] f2fs_write_end_io+0x495/0x810 [ 111.826341][ T36] ? blkg_put+0x22/0x240 [ 111.826385][ T36] __submit_merged_bio+0x27a/0x6a0 [ 111.826419][ T36] __submit_merged_write_cond+0x255/0x530 [ 111.826454][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 111.826525][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.826571][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 111.826648][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 111.826690][ T36] ? trace_f2fs_writepages+0x7f/0x200 [ 111.826718][ T36] ? f2fs_write_node_pages+0x478/0x6e0 [ 111.826748][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 111.826782][ T36] ? check_path+0x21/0x40 [ 111.826815][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.826844][ T36] do_writepages+0x32e/0x550 [ 111.826880][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 111.826907][ T36] ? writeback_sb_inodes+0x384/0x1010 [ 111.826946][ T36] __writeback_single_inode+0x145/0xff0 [ 111.826975][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 111.827007][ T36] writeback_sb_inodes+0x6c7/0x1010 [ 111.827070][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 111.827154][ T36] ? rcu_is_watching+0x15/0xb0 [ 111.827194][ T36] wb_writeback+0x43b/0xaf0 [ 111.827233][ T36] ? queue_io+0x3d1/0x590 [ 111.827265][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 111.827304][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.827339][ T36] wb_workfn+0x409/0xef0 [ 111.827403][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 111.827435][ T36] ? __lock_acquire+0xab9/0xd20 [ 111.827475][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 111.827511][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.827538][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 111.827563][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 111.827593][ T36] process_scheduled_works+0xae1/0x17b0 [ 111.827661][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.827713][ T36] worker_thread+0x8a0/0xda0 [ 111.827777][ T36] kthread+0x70e/0x8a0 [ 111.827803][ T36] ? __pfx_worker_thread+0x10/0x10 [ 111.827830][ T36] ? __pfx_kthread+0x10/0x10 [ 111.827853][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.827880][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.827909][ T36] ? __pfx_kthread+0x10/0x10 [ 111.827931][ T36] ret_from_fork+0x3fc/0x770 [ 111.827962][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 111.828006][ T36] ? __switch_to_asm+0x39/0x70 [ 111.828026][ T36] ? __switch_to_asm+0x33/0x70 [ 111.828044][ T36] ? __pfx_kthread+0x10/0x10 [ 111.828066][ T36] ret_from_fork_asm+0x1a/0x30 [ 111.828110][ T36] [ 111.828119][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 111.872414][ T6175] hfsplus: catalog searching failed [ 112.271013][ T6179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.422587][ T36] hfsplus: b-tree write err: -5, ino 3 [ 112.496324][ T5829] hfsplus: node 4:3 still has 1 user(s)! [ 112.625213][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.741487][ T6195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.887523][ T6201] loop2: detected capacity change from 0 to 256 [ 112.935720][ T6201] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.140831][ T6190] loop4: detected capacity change from 0 to 32768 [ 113.151384][ T6190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.60 (6190) [ 113.186558][ T6190] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.230620][ T6190] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 113.256217][ T6190] BTRFS info (device loop4): using free-space-tree [ 113.489160][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.541343][ T6225] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.575931][ T30] audit: type=1800 audit(1751275753.646:9): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.60" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 114.034072][ T5840] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.123891][ T6238] loop3: detected capacity change from 0 to 2048 [ 114.146177][ T6238] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 114.193948][ T6235] loop2: detected capacity change from 0 to 4096 [ 114.215663][ T6238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.618985][ T6250] loop1: detected capacity change from 0 to 512 [ 114.687740][ T30] audit: type=1800 audit(1751275754.756:10): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.70" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 114.765879][ T6250] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.778703][ T6250] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 114.804456][ T6250] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 114.869107][ T6250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 114.906759][ T6250] System zones: 0-2, 18-18, 34-34 [ 114.913033][ T6250] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.76: iget: bad i_size value: 360287970189639680 [ 114.936193][ T6250] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.76: couldn't read orphan inode 15 (err -117) [ 114.975553][ T6250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.071076][ T30] audit: type=1800 audit(1751275755.136:11): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 115.094438][ T6259] capability: warning: `syz.3.78' uses deprecated v2 capabilities in a way that may be insecure [ 115.241854][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.408592][ T6269] loop4: detected capacity change from 0 to 64 [ 115.454908][ T6270] loop1: detected capacity change from 0 to 256 [ 115.538859][ T6270] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.566953][ T6268] Trying to free block not in datazone [ 115.575133][ T6270] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 115.624700][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.634079][ T6270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 115.779782][ T30] audit: type=1800 audit(1751275755.846:12): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.81" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 115.846999][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.900600][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.927488][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.984606][ T5897] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.015934][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.065405][ T5897] usb 1-1: config 0 descriptor?? [ 116.514299][ T5897] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xe [ 116.552900][ T5897] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 116.614129][ T5897] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.811127][ T6304] loop3: detected capacity change from 0 to 1024 [ 116.826798][ T24] usb 1-1: USB disconnect, device number 2 [ 116.926650][ T30] audit: type=1800 audit(1751275756.996:13): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.97" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 117.017190][ T36] hfsplus: b-tree write err: -5, ino 4 [ 117.239706][ T6308] loop3: detected capacity change from 0 to 2048 [ 117.309758][ T6308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.588903][ T6291] loop2: detected capacity change from 0 to 40427 [ 117.594498][ T6314] openvswitch: netlink: IPv4 tun info is not correct [ 117.627151][ T6291] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.669828][ T6291] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.782163][ T6291] F2FS-fs (loop2): invalid crc value [ 118.220774][ T6291] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.228150][ T6291] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.357757][ T6291] syz.2.92: attempt to access beyond end of device [ 118.357757][ T6291] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 118.425411][ T6291] syz.2.92: attempt to access beyond end of device [ 118.425411][ T6291] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.509372][ T5838] syz-executor: attempt to access beyond end of device [ 118.509372][ T5838] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 118.541377][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 118.541404][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.541416][ T5838] Call Trace: [ 118.541424][ T5838] [ 118.541432][ T5838] dump_stack_lvl+0x189/0x250 [ 118.541483][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.541512][ T5838] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 118.541538][ T5838] ? __pfx_queue_work_on+0x10/0x10 [ 118.541573][ T5838] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 118.541602][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.541632][ T5838] ? f2fs_hw_is_readonly+0x39b/0x470 [ 118.541662][ T5838] f2fs_handle_critical_error+0x37c/0x540 [ 118.541695][ T5838] f2fs_write_end_io+0x495/0x810 [ 118.541722][ T5838] ? blkg_put+0x22/0x240 [ 118.541764][ T5838] __submit_merged_bio+0x27a/0x6a0 [ 118.541788][ T5838] ? up_write+0x1c4/0x420 [ 118.541821][ T5838] __submit_merged_write_cond+0x44c/0x530 [ 118.541851][ T5838] f2fs_sync_node_pages+0x1869/0x1a00 [ 118.541891][ T5838] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 118.541935][ T5838] ? f2fs_write_checkpoint+0xe43/0x1df0 [ 118.541965][ T5838] ? up_write+0x1c4/0x420 [ 118.541987][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 118.542008][ T5838] f2fs_write_checkpoint+0xe6f/0x1df0 [ 118.542053][ T5838] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 118.542118][ T5838] ? try_to_wake_up+0x7e5/0x1290 [ 118.542145][ T5838] ? kill_f2fs_super+0x298/0x6c0 [ 118.542186][ T5838] kill_f2fs_super+0x2c3/0x6c0 [ 118.542218][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 118.542242][ T5838] ? radix_tree_delete_item+0x2b6/0x400 [ 118.542276][ T5838] ? shrinker_free+0x2ce/0x3e0 [ 118.542299][ T5838] deactivate_locked_super+0xbc/0x130 [ 118.542325][ T5838] cleanup_mnt+0x425/0x4c0 [ 118.542349][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.542383][ T5838] task_work_run+0x1d1/0x260 [ 118.542408][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 118.542427][ T5838] ? __x64_sys_umount+0x122/0x160 [ 118.542461][ T5838] ? exit_to_user_mode_loop+0x40/0x110 [ 118.542491][ T5838] exit_to_user_mode_loop+0xec/0x110 [ 118.542516][ T5838] do_syscall_64+0x2bd/0x3b0 [ 118.542533][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.542562][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.542582][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 118.542608][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.542627][ T5838] RIP: 0033:0x7f8cb1d8fc57 [ 118.542652][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 118.542668][ T5838] RSP: 002b:00007ffca746f508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 118.542698][ T5838] RAX: 0000000000000000 RBX: 00007f8cb1e10925 RCX: 00007f8cb1d8fc57 [ 118.542712][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca746f5c0 [ 118.542724][ T5838] RBP: 00007ffca746f5c0 R08: 0000000000000000 R09: 0000000000000000 [ 118.542737][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca7470650 [ 118.542750][ T5838] R13: 00007f8cb1e10925 R14: 000000000001ce92 R15: 00007ffca7470690 [ 118.542784][ T5838] [ 118.542904][ T5838] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 119.210968][ T6382] hsr0: entered promiscuous mode [ 119.237901][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 119.305546][ T6382] hsr_slave_0: left promiscuous mode [ 119.338345][ T5897] IPVS: starting estimator thread 0... [ 119.351331][ T6382] hsr_slave_1: left promiscuous mode [ 119.405546][ T6382] hsr0 (unregistering): left promiscuous mode [ 119.440683][ T6388] IPVS: using max 26 ests per chain, 62400 per kthread [ 119.900875][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 119.908183][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.700592][ T30] audit: type=1326 audit(1751275760.766:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.0.129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd045b8e929 code=0x0 [ 120.808450][ T6423] loop1: detected capacity change from 0 to 64 [ 121.241772][ T6412] loop3: detected capacity change from 0 to 32768 [ 121.249233][ T6412] XFS: attr2 mount option is deprecated. [ 121.344900][ T6412] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.639200][ T6412] XFS (loop3): Ending clean mount [ 121.674628][ T6412] XFS (loop3): Quotacheck needed: Please wait. [ 121.820544][ T6412] XFS (loop3): Quotacheck: Done. [ 121.933991][ T6437] loop1: detected capacity change from 0 to 32768 [ 122.022029][ T5833] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.058416][ T6437] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 122.358495][ T5829] ocfs2: Unmounting device (7,1) on (node local) [ 123.314518][ T6450] loop4: detected capacity change from 0 to 32768 [ 123.384935][ T30] audit: type=1800 audit(1751275763.456:15): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 124.049678][ T6502] loop4: detected capacity change from 0 to 2048 [ 124.107141][ T6502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.131318][ T980] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.191617][ T6506] loop0: detected capacity change from 0 to 1024 [ 124.206303][ T6506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.274814][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.304324][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 124.331160][ T980] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 124.371541][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.379589][ T980] usb 3-1: Product: syz [ 124.440659][ T980] usb 3-1: Manufacturer: syz [ 124.445323][ T980] usb 3-1: SerialNumber: syz [ 124.491182][ T980] usb 3-1: config 0 descriptor?? [ 124.517700][ T980] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 124.548023][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.641864][ T5897] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 124.796218][ T5897] usb 2-1: config 0 has no interfaces? [ 124.801997][ T5897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.822438][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.843512][ T5897] usb 2-1: config 0 descriptor?? [ 125.023953][ T6518] loop0: detected capacity change from 0 to 40427 [ 125.045169][ T6518] F2FS-fs (loop0): heap/no_heap options were deprecated [ 125.052636][ T6518] F2FS-fs (loop0): build fault injection rate: 19 [ 125.059351][ T6518] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 125.071637][ T5922] usb 2-1: USB disconnect, device number 3 [ 125.075647][ T6518] F2FS-fs (loop0): invalid crc value [ 125.114066][ T6518] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 125.196184][ T6518] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 125.218122][ T6518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.254086][ T6518] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 125.283490][ T6518] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_setxattr+0x142/0x380 [ 125.364710][ T5835] syz-executor: attempt to access beyond end of device [ 125.364710][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.386955][ T5897] kernel write not supported for file /75/attr/exec (pid: 5897 comm: kworker/0:4) [ 125.390062][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 125.390101][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.390116][ T5835] Call Trace: [ 125.390126][ T5835] [ 125.390136][ T5835] dump_stack_lvl+0x189/0x250 [ 125.390185][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.390217][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 125.390251][ T5835] ? __pfx_queue_work_on+0x10/0x10 [ 125.390285][ T5835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 125.390318][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.390354][ T5835] ? f2fs_hw_is_readonly+0x39b/0x470 [ 125.390391][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 125.390432][ T5835] f2fs_write_end_io+0x495/0x810 [ 125.390463][ T5835] ? blkg_put+0x22/0x240 [ 125.390516][ T5835] __submit_merged_bio+0x27a/0x6a0 [ 125.390555][ T5835] __submit_merged_write_cond+0x255/0x530 [ 125.390604][ T5835] f2fs_write_data_pages+0x261d/0x3000 [ 125.390689][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.390851][ T5835] ? __lock_acquire+0xab9/0xd20 [ 125.390904][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.390937][ T5835] do_writepages+0x32e/0x550 [ 125.390989][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 125.391019][ T5835] filemap_fdatawrite+0x199/0x240 [ 125.391054][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 125.391160][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 125.391190][ T5835] f2fs_sync_dirty_inodes+0x31f/0x830 [ 125.391248][ T5835] f2fs_write_checkpoint+0x95a/0x1df0 [ 125.391319][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 125.391411][ T5835] ? try_to_wake_up+0x7e5/0x1290 [ 125.391446][ T5835] ? kill_f2fs_super+0x298/0x6c0 [ 125.391491][ T5835] kill_f2fs_super+0x2c3/0x6c0 [ 125.391535][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 125.391568][ T5835] ? radix_tree_delete_item+0x2b6/0x400 [ 125.391625][ T5835] ? shrinker_free+0x2ce/0x3e0 [ 125.391656][ T5835] deactivate_locked_super+0xbc/0x130 [ 125.391692][ T5835] cleanup_mnt+0x425/0x4c0 [ 125.391721][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.391761][ T5835] task_work_run+0x1d1/0x260 [ 125.391791][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 125.391814][ T5835] ? __x64_sys_umount+0x122/0x160 [ 125.391856][ T5835] ? exit_to_user_mode_loop+0x40/0x110 [ 125.391890][ T5835] exit_to_user_mode_loop+0xec/0x110 [ 125.391922][ T5835] do_syscall_64+0x2bd/0x3b0 [ 125.391942][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.391976][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.391999][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 125.392028][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.392051][ T5835] RIP: 0033:0x7fd045b8fc57 [ 125.392073][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 125.392092][ T5835] RSP: 002b:00007ffc7af720a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.392117][ T5835] RAX: 0000000000000000 RBX: 00007fd045c10925 RCX: 00007fd045b8fc57 [ 125.392132][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7af72160 [ 125.392147][ T5835] RBP: 00007ffc7af72160 R08: 0000000000000000 R09: 0000000000000000 [ 125.392160][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7af731f0 [ 125.392176][ T5835] R13: 00007fd045c10925 R14: 000000000001e949 R15: 00007ffc7af73230 [ 125.392217][ T5835] [ 125.405073][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 125.494656][ T6527] loop4: detected capacity change from 0 to 128 [ 125.530653][ T980] gspca_ov534_9: reg_w failed -71 [ 125.775408][ T6527] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.850686][ T6527] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.138385][ T5840] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.154447][ T980] gspca_ov534_9: Unknown sensor 0000 [ 126.154550][ T980] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 126.240715][ T980] usb 3-1: USB disconnect, device number 3 [ 126.558340][ T6539] loop2: detected capacity change from 0 to 4096 [ 127.290504][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.450698][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 127.458903][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.477121][ T5922] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 127.511716][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.612561][ T5922] usb 1-1: config 0 descriptor?? [ 127.658530][ T6569] loop1: detected capacity change from 0 to 128 [ 127.743214][ T6569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a856c019, mo2=0002] [ 127.762596][ T6569] System zones: 1-3, 19-19, 35-36 [ 127.781759][ T6569] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.838422][ T6569] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.946932][ T6569] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.183: No space for directory leaf checksum. Please run e2fsck -D. [ 127.980677][ T6569] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.183: Directory block failed checksum [ 128.107890][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.115512][ T6578] loop2: detected capacity change from 0 to 256 [ 128.124206][ T5922] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 128.222062][ T6578] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 128.359429][ T6558] loop4: detected capacity change from 0 to 32768 [ 128.441737][ T6558] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.481890][ T6558] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.647114][ T6588] loop3: detected capacity change from 0 to 512 [ 128.663805][ T6558] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 128.682567][ T6588] EXT4-fs: Ignoring removed i_version option [ 128.709429][ T980] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 128.755727][ T6588] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 128.779415][ T980] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 128.843520][ T5922] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -110 [ 128.870783][ T6588] EXT4-fs (loop3): 1 truncate cleaned up [ 128.902935][ T5922] usb 1-1: USB disconnect, device number 3 [ 128.954716][ T6588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.004835][ T980] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 225ms [ 129.022869][ T980] gfs2: fsid=syz:syz.0: jid=0: Done [ 129.060168][ T6558] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 129.168750][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.212897][ T6596] loop2: detected capacity change from 0 to 512 [ 129.318598][ T6558] gfs2: fsid=syz:syz.0: found 1 quota changes [ 129.361793][ T6596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.402346][ T6596] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.592531][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.602855][ T30] audit: type=1804 audit(1751275769.646:16): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.178" name="/newroot/42/file1/file0" dev="loop4" ino=2342 res=1 errno=0 [ 130.415721][ T6624] block nbd2: NBD_DISCONNECT [ 130.438687][ T6623] block nbd2: Disconnected due to user request. [ 130.467655][ T6623] block nbd2: shutting down sockets [ 130.476988][ T6602] loop3: detected capacity change from 0 to 32768 [ 130.576435][ T6602] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.705728][ T6637] netlink: 144 bytes leftover after parsing attributes in process `syz.2.204'. [ 130.769859][ T6602] XFS (loop3): Ending clean mount [ 130.799362][ T6602] XFS (loop3): Quotacheck needed: Please wait. [ 130.916090][ T6602] XFS (loop3): Quotacheck: Done. [ 131.053561][ T5833] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.744031][ T6660] loop1: detected capacity change from 0 to 1024 [ 131.846298][ T6664] loop0: detected capacity change from 0 to 512 [ 131.886009][ T6660] hfsplus: xattr searching failed [ 131.894865][ T6660] hfsplus: xattr searching failed [ 131.985263][ T6660] hfsplus: b-tree write err: -5, ino 3 [ 132.027253][ T6664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.091313][ T6664] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.226014][ T1162] hfsplus: bad catalog file entry [ 132.252969][ T1162] hfsplus: b-tree write err: -5, ino 3 [ 132.264934][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.549080][ T6681] loop0: detected capacity change from 0 to 4096 [ 132.600132][ T6681] NILFS (loop0): invalid segment: Checksum error in segment payload [ 132.610696][ T6684] loop2: detected capacity change from 0 to 2048 [ 132.628332][ T6681] NILFS (loop0): trying rollback from an earlier position [ 132.696264][ T6681] NILFS (loop0): recovery complete [ 132.722950][ T6685] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.733096][ T6686] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.756121][ T6659] loop3: detected capacity change from 0 to 32768 [ 132.787424][ T6659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.207 (6659) [ 132.838583][ T6659] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.906461][ T6659] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 132.984926][ T6659] BTRFS info (device loop3): using free-space-tree [ 133.017330][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.027955][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.075200][ T6686] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 133.091745][ T6686] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 133.113528][ T6686] Remounting filesystem read-only [ 133.121960][ T5838] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 133.546015][ T5833] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.673437][ T6682] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 133.721199][ T6682] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6682, name: syz.1.218 [ 133.813279][ T6682] preempt_count: 0, expected: 0 [ 133.839994][ T6682] RCU nest depth: 1, expected: 0 [ 133.850668][ T6682] 2 locks held by syz.1.218/6682: [ 133.860289][ T6682] #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 133.905221][ T6682] #1: ffff88805bce1e48 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 133.926695][ T6719] loop2: detected capacity change from 0 to 2048 [ 133.934784][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.1.218 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 133.934812][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.934825][ T6682] Call Trace: [ 133.934834][ T6682] [ 133.934843][ T6682] dump_stack_lvl+0x189/0x250 [ 133.934886][ T6682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.934928][ T6682] ? print_lock_name+0xde/0x100 [ 133.934957][ T6682] __might_resched+0x495/0x610 [ 133.934994][ T6682] ? __pfx___might_resched+0x10/0x10 [ 133.935036][ T6682] ? __kmalloc_noprof+0xa3/0x4f0 [ 133.935072][ T6682] __kmalloc_noprof+0xbc/0x4f0 [ 133.935101][ T6682] ? procfs_procmap_ioctl+0x877/0xd10 [ 133.935149][ T6682] procfs_procmap_ioctl+0x877/0xd10 [ 133.935189][ T6682] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 133.935236][ T6682] ? __fget_files+0x2a/0x420 [ 133.935260][ T6682] ? __fget_files+0x2a/0x420 [ 133.935279][ T6682] ? __fget_files+0x3a0/0x420 [ 133.935298][ T6682] ? __fget_files+0x2a/0x420 [ 133.935323][ T6682] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.935351][ T6682] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 133.935384][ T6682] __se_sys_ioctl+0xfc/0x170 [ 133.935416][ T6682] do_syscall_64+0xfa/0x3b0 [ 133.935438][ T6682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.935457][ T6682] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 133.935477][ T6682] ? clear_bhb_loop+0x60/0xb0 [ 133.935502][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.935522][ T6682] RIP: 0033:0x7fed0218e929 [ 133.935542][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.935560][ T6682] RSP: 002b:00007fed02f63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.935582][ T6682] RAX: ffffffffffffffda RBX: 00007fed023b5fa0 RCX: 00007fed0218e929 [ 133.935597][ T6682] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 133.935609][ T6682] RBP: 00007fed02210b39 R08: 0000000000000000 R09: 0000000000000000 [ 133.935621][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.935632][ T6682] R13: 0000000000000000 R14: 00007fed023b5fa0 R15: 00007ffe9d4dc898 [ 133.935665][ T6682] [ 134.328099][ T6719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)