last executing test programs: 14.964033455s ago: executing program 0 (id=612): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="0100230100003402000002000000", @ANYRES32=0x0, @ANYBLOB="7f10a06879833a784eb143effb115d773230c19c5b4f4bdf4934f7dfe839888d2ca8e1acb0a09e25f1ecbc087359fbb14b6611482b56295a4411a38d6bf06891159c10180c49606c0d7dc2ddac9b19ac02e103a12700292aec7023dcc3e401807e112fcd975bb8b90e539d7bb86e7f581979fa0717d077ded8e165bab8958c"], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 14.847264265s ago: executing program 3 (id=613): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.482651423s ago: executing program 3 (id=615): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) mknod$loop(&(0x7f0000000100)='./file1\x00', 0x802f4fddddd122b6, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 13.06140137s ago: executing program 1 (id=617): creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='umask=00000000000000000000201,umask=00000000000000000000007,nls=macgreek,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00aa5e10d7f5ca0f41a0d909ba565558470e706ba7ba3586"], 0x1d, 0x6e5, &(0x7f0000000f40)="$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") 12.998128749s ago: executing program 4 (id=619): syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r4, &(0x7f0000000140)=""/194, 0xc2) 10.601759762s ago: executing program 4 (id=621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) 10.425107491s ago: executing program 5 (id=622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x1, 0x10002}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0xd5fa, 0x0, "8700865187b8c601d54af6a637903184033c67"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xa6) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 9.742747834s ago: executing program 1 (id=623): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r7, 0x0, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x6ee, &(0x7f0000001e80)="$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") syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file0\x00', 0x1030480, &(0x7f0000000640)=ANY=[], 0x1, 0x19b, &(0x7f0000000000)="$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") 9.253325266s ago: executing program 3 (id=624): socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.328508963s ago: executing program 5 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) 7.881100798s ago: executing program 4 (id=627): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 7.879960556s ago: executing program 1 (id=628): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001c80)=[{0x0, 0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000240)={0xe, 0x1, 0x0, "f85a03008d0020f100000000f5ffffff00000010001300", 0x30323953}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x1214480, &(0x7f0000000900)=ANY=[@ANYBLOB="636f6465706167653d6d61636761656c69632c71756965742c736d61636b66736465663da9fc92bc382c646f6e745f61707072616973652c7065726d69745f646972656374696f2c7569643c", @ANYRESDEC=r3, @ANYBLOB="2c646566636f6e746578743d73797361646d5f752c657569643ca1bf0bd825080b33aed791ed04661d0f8256bf286b00000056ba0c64910a17b870a0c3371776740fff5c36610f737cfb4f58482c68dd1f3a9ef73c303dbe1aaf546cfa832fc05fa0a48c0ae1e888071f4518945c5d9ca5e4409e77fbebdd8ca02c0bbf3e0a030747484b0fbc394b5e349e65768ab38469aea5dded9aa18eaff1d2cec2ecd66a5aaccce607e20b19e9095bbf1dcf95b592fdca835449954a843e7055076b4b149f406ce1f4aa6e8289873a426f73b03f0e36b173bcd88388851f854dbb186a4f40428d9d92159d3b5252c1d0f22660f18ef0e05cc0f3c4208155df6ef2587e727904aea55741e7fa9751b97a16d9a3175b798cb56f7119844966d2734d48cf7817b9cb28ad2982380756c280221f3ac268ba5912d9662d055f5bd9263f56b31c6fbaf2e7", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d6c93a4214308a96b22b516c8dd021ff7e4287f7fc337a0ead7382c6f626a5f747970653d7375626a5f757365722c6d61736b3d5e4d41595f455845432c7375626a5f757365723d2a3a21292ce827282d5c2c61707072616973655f747970653d696d617369672c6f626a5f747970653d5e292c00"], 0x3, 0x32f, &(0x7f00000005c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) mmap$snddsp_control(&(0x7f0000002000/0x3000)=nil, 0x1000, 0x2, 0x80010, 0xffffffffffffffff, 0x83000000) 7.793349788s ago: executing program 5 (id=629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 7.793023646s ago: executing program 0 (id=630): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 7.505743343s ago: executing program 2 (id=631): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) tkill(0x0, 0x13) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000080), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 6.932131512s ago: executing program 5 (id=632): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 6.726412322s ago: executing program 4 (id=633): set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) 6.722830163s ago: executing program 1 (id=634): syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r4, &(0x7f0000000140)=""/194, 0xc2) 6.493456869s ago: executing program 2 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) 6.434011417s ago: executing program 0 (id=636): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) 6.413207657s ago: executing program 3 (id=637): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 6.133251078s ago: executing program 4 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/204, 0xcc}], 0x1, 0xa2, 0x0) 5.144460452s ago: executing program 1 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.923731641s ago: executing program 3 (id=640): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 4.873363894s ago: executing program 2 (id=641): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) 4.813305098s ago: executing program 0 (id=642): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r7, 0x0, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x6ee, &(0x7f0000001e80)="$eJzs3UtsHGcdAPD/rNdrr5FSp82joEpdNVJBWCR2rBTChYAQ8qFCFRw4W4nTWNk4le0iJ0LU5XHnwIlTOfhWcUDlHgnOVJUQVx8rIfXCyTejmZ0Zz77txK+W38+a+b75XvPNNzuvXVkTwP+tpbmoP4sklube3kqXd3cW2xM7i1N5djsiGhFRi6h3gkjWIs2dKJv4epqYx5PBaykK737eCev5lJWvDa83UKM/aTufopWvrNWdP90JJoe0+Env6rvau9vf3hEl5RbeiYhreRjxpxdqFV7Yfp/tMu/jf2XzUdWPctwC51RSvaJXzEbM5BfQ7J4gPzvUTrd3x2/7rDsAAAAAR9U8epWX9mIvtuLCSXQHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqq63v+/nb3fP0mnViTF+/8beVrk8XNo/IsQP5vqhM9OvjMAAAAAAAAAcOJe34u92IoLxfJ+kv3m/0blN/6vxfuxESuxHtdjK5ZjMzZjPRYiYrbSUGNreXNzfSGrGXFpRM2b8emAmjeH9/HOMW8zAAAAAAAAAJxz02PyH072p/0mlg5+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPMgiZjoBNl0qYjPRq0eEdMR0UjLbUd8WsS/JJJBic9Ovx8AAADwQqa7F5PpQ9R56YPYi624UCzvJ9kz/5XseXk63o+12IzV2Ix2rMS9/Bk6feqv7e4stnd3Fh+lU3+7P/ziSF3PWozOdw+D1/xqVqIZ92M1S7kedyOJ/Uwtb+XV3Z3FNHxU7dfBY/+HaZ+SH+RG9GaiEr+Xzq5+ksX/0P0tQv1Im/icakNzZrPcyXJE5vO+pTUuFiMweA+N3Tv1kWtaiFr5zc+l0WsaPOYfjl77TE+pgd/cnInekbgZtXIPXRk9EhHf/NvHv3jQXnv44P7G3PnZpIE+GFuidyQWKyNx9Ss0EuPNZyNxuVxeip/Ez2Muvph6J9ZjNX4Zy7EZK60ifzn/PKfz2dEj9dlMdemdcT1Jj8lWef4a1KdWdPUpWvHjLLYcb2T79EKsRhKPI2Il3sr+bsZCeTY42MOXB/e7OClkR33tEGfaimvfyoJymKI5vOxfDtfkcUk362JlXKvn3NksL0/ZTlMORunlgaNUXOsOfz2qqH8jj6Qt/Hbk9eG0dY1EfpUoevfKsM95Z0j/vJ/ON9prD9cfLL93yPW9mYfpcfT7c3WVSPfwyzGdb9zFbJ5kx9R8lvdKeYXtHq9G/otLR60v73JZr3Ok/jQex72uI/W7cau8DbySlZ7su2KlLV0tW+o+h6d56Z1Wvfxhp3q/9TjanfshAM63mW/PNJr/af6z+VHzd80HzbenfzT1vanXGjH5j8nv1+cn3qy9lvw1PopfHzz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/jydOHy+32yvrgSG1wVjK61nJ7v3iR2OAy0ZeS5K/KGdOfNJJsPHm6P6ZMbyR6Uqby7h2y+klGitf2jC/cOsFuJNu9+2t6/L4o3vKUp4zaiqRvwNPKz93nYs0HKZPnYFf2RlrH12Dxga0eREf+9Da791cnayIiBh4yo00cw8kHOFM3Nh+9d2PjydPvrD5afnfl3ZW1yVu3bs/fvvXW4o37q+2V+c68UuFUXn4LnIbq7USpERGvj6874kWtAAAAAAAAAAAAwAk6jf+FOOttBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7cluai/iySWJi/Pj+Vp+3uLLarYUc9ImoRkfwqIvl7xJ3oTDFbaS4Ztp4/rt7+2b//u/v5QVv1onwtYntovcPZzqdoRcREHpZ2hlecPUR7d3vb69c4iE4NyE7KkUkH7FoxcHDW/hcAAP//dxHlfA==") syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file0\x00', 0x1030480, &(0x7f0000000640)=ANY=[], 0x1, 0x19b, &(0x7f0000000000)="$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") 4.608462234s ago: executing program 3 (id=643): userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000080)=0x2) 3.388406804s ago: executing program 4 (id=644): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x10, r0, 0x6f4ee000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40080c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2.713500438s ago: executing program 2 (id=645): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2.67400995s ago: executing program 0 (id=646): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0x1011}, {&(0x7f0000000140)=""/165, 0xa5}], 0x2}, 0x40012022) 2.409812391s ago: executing program 5 (id=647): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r7, 0x0, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file0\x00', 0x1030480, &(0x7f0000000640)=ANY=[], 0x1, 0x19b, &(0x7f0000000000)="$eJzskbFrFEEUxn9vZnO3V0S9KBYneAcG1z0iub2ohdVhFeEWLCwNuiRrLrgRkr3ChFhKQE79F7QQLVXQSkTBWiwEG88mnXhFsBALWdnd0X/C+cHux/tg3nvzzSDdSFvA7/2dZXoUaA7wEcEBmlJ6SpX6ytTfjM6UwgVTj4w+NdpIt7ZvREkSu63zLerw66+xmY/9UXj/rPQ5RxU1oYd83t9ZjuRaSNZjXa2E1Pu076GX2PDv03CmOXIVTeaNuKjQ4vXh4PzQZT7d2j69th6txqvxzW534VznTEefzfdP4s5LxL8riodU8EOqITX/NlNL3HGBOUH8gRpraU8Yw4MP+tSJuUlx+wzhrTeh+kUPWuoyJ3Gv5Msvclh4hA6Z7VNTOFxfS3RnEbmkXkjgfHJ+TqlamcYhVnazKlSe9OS7K8EeeAHddsBCHRrM8I7dMbMmbPa+0pTX+ZSRsZzi/8yke4zjPK5wKxoON4MKvBcvpJt/dZgu2qmQZj/v8CY/45rGZLp4VSwWi8VisVgsFovF8n/wJwAA///hDlj3") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) 1.121013044s ago: executing program 2 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x40}}, 0x0) 521.16646ms ago: executing program 5 (id=649): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r4, &(0x7f0000000140)=""/194, 0xc2) kernel console output (not intermixed with test programs): 0 [ 179.698747][ T5835] cleanup_mnt+0x225/0x450 [ 179.698792][ T5835] task_work_run+0x150/0x240 [ 179.698833][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 179.698869][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 179.698918][ T5835] ? __pfx___x64_sys_umount+0x10/0x10 [ 179.698975][ T5835] exit_to_user_mode_loop+0xeb/0x110 [ 179.699019][ T5835] do_syscall_64+0x3f6/0x4c0 [ 179.699061][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.699100][ T5835] RIP: 0033:0x7feb4138fc57 [ 179.699130][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 179.699167][ T5835] RSP: 002b:00007ffd5336d3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.699202][ T5835] RAX: 0000000000000000 RBX: 00007feb41410925 RCX: 00007feb4138fc57 [ 179.699227][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5336d480 [ 179.699250][ T5835] RBP: 00007ffd5336d480 R08: 0000000000000000 R09: 0000000000000000 [ 179.699273][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5336e510 [ 179.699297][ T5835] R13: 00007feb41410925 R14: 000000000002bb2b R15: 00007ffd5336e550 [ 179.699347][ T5835] [ 180.308013][ T5835] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 180.359735][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 180.688958][ T12] hfsplus: b-tree write err: -5, ino 4 [ 180.785167][ T6506] IPv6: Can't replace route, no match found [ 181.570044][ T6510] loop3: detected capacity change from 0 to 256 [ 181.577636][ T6510] vfat: Unknown parameter '18446744073709551615' [ 182.069589][ T6518] loop4: detected capacity change from 0 to 128 [ 183.885900][ T6518] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 184.419728][ T6517] FAT-fs (loop4): FAT read failed (blocknr 128) [ 185.630289][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 185.691949][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 185.731831][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 185.873323][ T6530] loop0: detected capacity change from 0 to 256 [ 186.826028][ T6530] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.847768][ T6530] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 186.902698][ T6527] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.912099][ T6527] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.920894][ T6527] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.929999][ T6527] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.999068][ T6530] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.650737][ T6543] loop2: detected capacity change from 0 to 32768 [ 187.666513][ T6527] Zero length message leads to an empty skb [ 187.672781][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 187.721781][ T6544] loop5: detected capacity change from 0 to 8 [ 187.746408][ T6544] SQUASHFS error: zstd decompression error: 10 [ 187.752750][ T6544] SQUASHFS error: zstd decompression failed, data probably corrupt [ 187.760777][ T6544] SQUASHFS error: Failed to read block 0x4ec: -5 [ 187.768317][ T6544] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 187.776004][ T6544] SQUASHFS error: Unable to read inode 0x2011f [ 187.818000][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 188.126297][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 188.170325][ T6543] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 188.854015][ T6534] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.027283][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 189.133316][ T6534] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.537727][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 189.638287][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 189.686799][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 189.793885][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 189.873792][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 189.921157][ T6534] wlan0 speed is unknown, defaulting to 1000 [ 190.779417][ T6570] loop2: detected capacity change from 0 to 32768 [ 191.168005][ T6570] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 191.911763][ T5845] Bluetooth: hci3: connection err: -111 [ 192.005585][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 192.514480][ T6584] loop3: detected capacity change from 0 to 512 [ 192.573725][ T6584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.667616][ T6584] EXT4-fs error (device loop3): __ext4_iget:5379: inode #2: block 3072: comm syz.3.184: invalid block [ 192.795283][ T6584] EXT4-fs (loop3): get root inode failed [ 192.803563][ T6586] loop4: detected capacity change from 0 to 8 [ 192.814801][ T6586] SQUASHFS error: zstd decompression error: 10 [ 192.821050][ T6586] SQUASHFS error: zstd decompression failed, data probably corrupt [ 192.829145][ T6586] SQUASHFS error: Failed to read block 0x4ec: -5 [ 192.835713][ T6586] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 192.843126][ T6586] SQUASHFS error: Unable to read inode 0x2011f [ 192.931563][ T6584] EXT4-fs (loop3): mount failed [ 193.832038][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'. [ 194.308133][ T6595] loop3: detected capacity change from 0 to 64 [ 194.315719][ T6595] hfs: Unknown parameter 'Pid' [ 194.449300][ T6594] loop0: detected capacity change from 0 to 32768 [ 194.559389][ T6594] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 196.132006][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 196.316547][ T6613] loop2: detected capacity change from 0 to 512 [ 196.490131][ T6613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.771023][ T6613] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 196.796148][ T6613] EXT4-fs (loop2): 1 truncate cleaned up [ 196.813569][ T6613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.680705][ T6624] loop1: detected capacity change from 0 to 40427 [ 198.688700][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.694941][ T6624] F2FS-fs (loop1): invalid crc value [ 198.747528][ T6629] loop0: detected capacity change from 0 to 256 [ 198.776225][ T6629] vfat: Unknown parameter '18446744073709551615' [ 199.765703][ T6624] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.333343][ T6631] loop5: detected capacity change from 0 to 32768 [ 201.352066][ T5836] syz-executor: attempt to access beyond end of device [ 201.352066][ T5836] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.387120][ T6631] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 201.387848][ T6631] (syz.5.196,6631,0):ocfs2_initialize_super:2229 ERROR: status = -12 [ 201.405866][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 201.405918][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.405939][ T5836] Call Trace: [ 201.405951][ T5836] [ 201.405965][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 201.406032][ T5836] f2fs_handle_critical_error+0x621/0x9f0 [ 201.406078][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.406122][ T5836] ? f2fs_build_fault_attr+0x53/0x1f0 [ 201.406169][ T5836] f2fs_write_end_io+0x785/0xc20 [ 201.406219][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 201.406272][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.406325][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 201.406370][ T5836] bio_endio+0x70d/0x850 [ 201.406417][ T5836] submit_bio_noacct+0x56d/0x1eb0 [ 201.406476][ T5836] __submit_merged_bio+0x33c/0x770 [ 201.406520][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.406569][ T5836] f2fs_submit_page_write+0x744/0x2980 [ 201.406641][ T5836] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 201.406696][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.406743][ T5836] ? __folio_start_writeback+0x3ac/0xbc0 [ 201.406802][ T5836] do_write_page+0x349/0xd20 [ 201.406852][ T5836] f2fs_outplace_write_data+0x1b1/0x270 [ 201.406894][ T5836] ? __pfx_f2fs_outplace_write_data+0x10/0x10 [ 201.406937][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.406979][ T5836] ? f2fs_encrypt_one_page+0x123/0x960 [ 201.407041][ T5836] f2fs_do_write_data_page+0xcc5/0x1de0 [ 201.407104][ T5836] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 201.407158][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.407218][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.407260][ T5836] ? __lock_acquire+0x622/0x1c90 [ 201.407324][ T5836] f2fs_write_single_data_page+0x1138/0x17a0 [ 201.407394][ T5836] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 201.407478][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.407521][ T5836] ? folio_clear_dirty_for_io+0x112/0x810 [ 201.407580][ T5836] f2fs_write_cache_pages+0xd85/0x2570 [ 201.407664][ T5836] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 201.407726][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.407769][ T5836] ? __lock_acquire+0x622/0x1c90 [ 201.407834][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.407896][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.407960][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.408002][ T5836] ? __lock_acquire+0xb8a/0x1c90 [ 201.408094][ T5836] ? finish_task_switch.isra.0+0x221/0xc10 [ 201.408138][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.408188][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.408239][ T5836] f2fs_write_data_pages+0x4ad/0xd90 [ 201.408302][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.408354][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.408412][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.408460][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.408518][ T5836] do_writepages+0x27a/0x600 [ 201.408580][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 201.408633][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 201.408672][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.408715][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 201.408774][ T5836] filemap_fdatawrite_wbc+0x104/0x160 [ 201.408836][ T5836] __filemap_fdatawrite_range+0xb2/0xf0 [ 201.408881][ T5836] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 201.408980][ T5836] ? find_held_lock+0x2b/0x80 [ 201.409025][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409069][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 201.409108][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409157][ T5836] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 201.409234][ T5836] block_operations+0x2a3/0xfd0 [ 201.409288][ T5836] ? __pfx_stack_trace_save+0x10/0x10 [ 201.409342][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409391][ T5836] ? __pfx_block_operations+0x10/0x10 [ 201.409506][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409548][ T5836] ? down_write+0x14d/0x200 [ 201.409586][ T5836] ? __pfx_down_write+0x10/0x10 [ 201.409627][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409669][ T5836] ? rcu_is_watching+0x12/0xc0 [ 201.409720][ T5836] f2fs_write_checkpoint+0x2b8/0x4c60 [ 201.409784][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409826][ T5836] ? kfree+0x2b4/0x4d0 [ 201.409879][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.409921][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.409977][ T5836] ? f2fs_stop_gc_thread+0x79/0xd0 [ 201.410013][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.410067][ T5836] kill_f2fs_super+0x3c2/0x470 [ 201.410126][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 201.410185][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.410261][ T5836] deactivate_locked_super+0xc1/0x1a0 [ 201.410301][ T5836] deactivate_super+0xde/0x100 [ 201.410339][ T5836] cleanup_mnt+0x225/0x450 [ 201.410381][ T5836] task_work_run+0x150/0x240 [ 201.410425][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 201.410458][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.410504][ T5836] ? __pfx___x64_sys_umount+0x10/0x10 [ 201.410559][ T5836] exit_to_user_mode_loop+0xeb/0x110 [ 201.410600][ T5836] do_syscall_64+0x3f6/0x4c0 [ 201.410639][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.410675][ T5836] RIP: 0033:0x7f845118fc57 [ 201.410703][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 201.410737][ T5836] RSP: 002b:00007ffd71cff2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 201.410770][ T5836] RAX: 0000000000000000 RBX: 00007f8451210925 RCX: 00007f845118fc57 [ 201.410793][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd71cff390 [ 201.410815][ T5836] RBP: 00007ffd71cff390 R08: 0000000000000000 R09: 0000000000000000 [ 201.410837][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd71d00420 [ 201.410860][ T5836] R13: 00007f8451210925 R14: 0000000000030fed R15: 00007ffd71d00460 [ 201.410908][ T5836] [ 201.410921][ T5836] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 201.418951][ T6631] (syz.5.196,6631,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 202.120428][ T5836] syz-executor: attempt to access beyond end of device [ 202.120428][ T5836] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 202.210402][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 202.210464][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.210486][ T5836] Call Trace: [ 202.210497][ T5836] [ 202.210511][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 202.210579][ T5836] f2fs_handle_critical_error+0x621/0x9f0 [ 202.210627][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.210672][ T5836] ? f2fs_build_fault_attr+0x53/0x1f0 [ 202.210719][ T5836] f2fs_write_end_io+0x785/0xc20 [ 202.210770][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 202.210825][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.210879][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 202.210926][ T5836] bio_endio+0x70d/0x850 [ 202.210968][ T5836] submit_bio_noacct+0x56d/0x1eb0 [ 202.211028][ T5836] __submit_merged_bio+0x33c/0x770 [ 202.211082][ T5836] __submit_merged_write_cond+0x319/0x3f0 [ 202.211143][ T5836] f2fs_write_single_data_page+0x13b0/0x17a0 [ 202.211216][ T5836] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 202.211297][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.211341][ T5836] ? folio_clear_dirty_for_io+0x112/0x810 [ 202.211405][ T5836] f2fs_write_cache_pages+0xd85/0x2570 [ 202.211500][ T5836] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 202.211563][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.211606][ T5836] ? __lock_acquire+0x622/0x1c90 [ 202.211674][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.211738][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.211802][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.211846][ T5836] ? __lock_acquire+0xb8a/0x1c90 [ 202.211937][ T5836] ? finish_task_switch.isra.0+0x221/0xc10 [ 202.211984][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.212034][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.212085][ T5836] f2fs_write_data_pages+0x4ad/0xd90 [ 202.212148][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 202.212201][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.212257][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.212305][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 202.212364][ T5836] do_writepages+0x27a/0x600 [ 202.212428][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 202.212491][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 202.212531][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.212574][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 202.212634][ T5836] filemap_fdatawrite_wbc+0x104/0x160 [ 202.212697][ T5836] __filemap_fdatawrite_range+0xb2/0xf0 [ 202.212743][ T5836] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 202.212844][ T5836] ? find_held_lock+0x2b/0x80 [ 202.212890][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.212935][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 202.212975][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213026][ T5836] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 202.213105][ T5836] block_operations+0x2a3/0xfd0 [ 202.213160][ T5836] ? __pfx_stack_trace_save+0x10/0x10 [ 202.213215][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213265][ T5836] ? __pfx_block_operations+0x10/0x10 [ 202.213377][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213421][ T5836] ? down_write+0x14d/0x200 [ 202.213466][ T5836] ? __pfx_down_write+0x10/0x10 [ 202.213508][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213551][ T5836] ? rcu_is_watching+0x12/0xc0 [ 202.213602][ T5836] f2fs_write_checkpoint+0x2b8/0x4c60 [ 202.213668][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213712][ T5836] ? kfree+0x2b4/0x4d0 [ 202.213766][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213809][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.213867][ T5836] ? f2fs_stop_gc_thread+0x79/0xd0 [ 202.213904][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.213959][ T5836] kill_f2fs_super+0x3c2/0x470 [ 202.214020][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 202.214078][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.214156][ T5836] deactivate_locked_super+0xc1/0x1a0 [ 202.214196][ T5836] deactivate_super+0xde/0x100 [ 202.214234][ T5836] cleanup_mnt+0x225/0x450 [ 202.214276][ T5836] task_work_run+0x150/0x240 [ 202.214316][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 202.214350][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.214420][ T5836] ? __pfx___x64_sys_umount+0x10/0x10 [ 202.214480][ T5836] exit_to_user_mode_loop+0xeb/0x110 [ 202.214522][ T5836] do_syscall_64+0x3f6/0x4c0 [ 202.214561][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.214599][ T5836] RIP: 0033:0x7f845118fc57 [ 202.214627][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 202.214662][ T5836] RSP: 002b:00007ffd71cff2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 202.214695][ T5836] RAX: 0000000000000000 RBX: 00007f8451210925 RCX: 00007f845118fc57 [ 202.214718][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd71cff390 [ 202.214741][ T5836] RBP: 00007ffd71cff390 R08: 0000000000000000 R09: 0000000000000000 [ 202.214764][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd71d00420 [ 202.214787][ T5836] R13: 00007f8451210925 R14: 0000000000030fed R15: 00007ffd71d00460 [ 202.214835][ T5836] [ 203.071141][ T6644] loop4: detected capacity change from 0 to 32768 [ 203.129493][ T5836] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 203.786591][ T6644] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.868486][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.876994][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.268052][ T6644] XFS (loop4): Ending clean mount [ 204.446415][ T6661] loop5: detected capacity change from 0 to 8 [ 204.460426][ T6661] SQUASHFS error: zstd decompression error: 10 [ 204.466836][ T6661] SQUASHFS error: zstd decompression failed, data probably corrupt [ 204.474819][ T6661] SQUASHFS error: Failed to read block 0x4ec: -5 [ 204.481166][ T6661] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 204.488566][ T6661] SQUASHFS error: Unable to read inode 0x2011f [ 204.987498][ T6667] loop0: detected capacity change from 0 to 32768 [ 205.084383][ T5839] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.211144][ T6667] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 205.375392][ T6669] loop5: detected capacity change from 0 to 40427 [ 205.390397][ T6669] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 205.398291][ T6669] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 205.472461][ T6669] F2FS-fs (loop5): invalid crc value [ 205.627966][ T6669] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 205.635159][ T6669] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.902140][ T6684] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 207.500252][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 207.984035][ T6693] loop4: detected capacity change from 0 to 256 [ 208.083182][ T6693] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.149377][ T6693] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 208.647844][ T6698] loop1: detected capacity change from 0 to 32768 [ 208.997797][ T6693] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.053746][ T6698] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 209.894447][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 210.523647][ T6712] loop2: detected capacity change from 0 to 8 [ 210.535869][ T6712] SQUASHFS error: zstd decompression error: 10 [ 210.542298][ T6712] SQUASHFS error: zstd decompression failed, data probably corrupt [ 210.550259][ T6712] SQUASHFS error: Failed to read block 0x4ec: -5 [ 210.556902][ T6712] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 210.564277][ T6712] SQUASHFS error: Unable to read inode 0x2011f [ 210.712022][ T6717] loop4: detected capacity change from 0 to 256 [ 210.752974][ T6717] vfat: Unknown parameter '18446744073709551615' [ 211.792105][ T6723] loop3: detected capacity change from 0 to 32768 [ 211.907280][ T6723] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 212.139392][ T6732] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 212.146421][ T6732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.159149][ T6733] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.220714][ T6732] vhci_hcd vhci_hcd.0: Device attached [ 212.228686][ T6736] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 212.235343][ T6736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.310975][ T6740] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 212.317685][ T6740] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.361089][ T6736] vhci_hcd vhci_hcd.0: Device attached [ 212.376737][ T6740] vhci_hcd vhci_hcd.0: Device attached [ 212.438290][ T6732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.645335][ T6732] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(18) [ 212.652041][ T6732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.758501][ T6732] vhci_hcd vhci_hcd.0: Device attached [ 212.787510][ T6736] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(24) [ 212.794261][ T6736] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 212.806170][ T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 212.865103][ T6736] vhci_hcd vhci_hcd.0: Device attached [ 212.917600][ T6732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.994368][ T6732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 213.036840][ T6749] vhci_hcd: connection closed [ 213.038336][ T6741] vhci_hcd: connection closed [ 213.038460][ T6738] vhci_hcd: connection closed [ 213.051667][ T6734] vhci_hcd: connection reset by peer [ 213.091641][ T6346] vhci_hcd: stop threads [ 213.097208][ T6346] vhci_hcd: release socket [ 213.104288][ T6751] vhci_hcd: connection closed [ 213.106250][ T6346] vhci_hcd: disconnect device [ 213.182560][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 213.354432][ T6346] vhci_hcd: stop threads [ 213.365631][ T6346] vhci_hcd: release socket [ 213.370880][ T6346] vhci_hcd: disconnect device [ 213.381810][ T6346] vhci_hcd: stop threads [ 213.387672][ T6346] vhci_hcd: release socket [ 213.398073][ T6346] vhci_hcd: disconnect device [ 213.405583][ T6346] vhci_hcd: stop threads [ 213.409987][ T6346] vhci_hcd: release socket [ 213.446932][ T6346] vhci_hcd: disconnect device [ 213.511833][ T6346] vhci_hcd: stop threads [ 213.531158][ T6346] vhci_hcd: release socket [ 213.570866][ T6346] vhci_hcd: disconnect device [ 214.943718][ T5845] Bluetooth: hci2: connection err: -111 [ 216.127372][ T6777] loop3: detected capacity change from 0 to 32768 [ 216.235221][ T6777] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 217.075747][ T6797] loop1: detected capacity change from 0 to 32768 [ 217.127350][ T6797] debugfs: Directory '0700000000000000B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 217.228550][ T6797] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 217.251888][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 218.017670][ T10] vhci_hcd: vhci_device speed not set [ 218.191849][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 220.579270][ T6826] [U]  [ 220.967492][ T6827] loop1: detected capacity change from 0 to 32768 [ 221.035839][ T6827] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 221.466015][ T5937] usb usb44-port1: attempt power cycle [ 221.828881][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 222.062980][ T5937] usb usb44-port1: unable to enumerate USB device [ 222.355479][ T6847] loop5: detected capacity change from 0 to 40427 [ 222.384493][ T6847] F2FS-fs (loop5): invalid crc value [ 222.490169][ T6847] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 223.092986][ T6852] loop0: detected capacity change from 0 to 40427 [ 223.556583][ T6852] F2FS-fs (loop0): invalid crc value [ 223.844012][ T6858] loop3: detected capacity change from 0 to 32768 [ 223.970041][ T6852] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.999995][ T6858] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 224.026523][ T5835] syz-executor: attempt to access beyond end of device [ 224.026523][ T5835] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.298184][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 224.298240][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.298262][ T5835] Call Trace: [ 224.298273][ T5835] [ 224.298286][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 224.298356][ T5835] f2fs_handle_critical_error+0x621/0x9f0 [ 224.298405][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.298458][ T5835] ? f2fs_build_fault_attr+0x53/0x1f0 [ 224.298512][ T5835] f2fs_write_end_io+0x785/0xc20 [ 224.298565][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 224.298619][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.298673][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 224.298720][ T5835] bio_endio+0x70d/0x850 [ 224.298761][ T5835] submit_bio_noacct+0x56d/0x1eb0 [ 224.298823][ T5835] __submit_merged_bio+0x33c/0x770 [ 224.298879][ T5835] __submit_merged_write_cond+0x319/0x3f0 [ 224.298939][ T5835] f2fs_write_cache_pages+0x2067/0x2570 [ 224.299029][ T5835] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 224.299096][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.299140][ T5835] ? __lock_acquire+0x622/0x1c90 [ 224.299206][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.299293][ T5835] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.299385][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.299437][ T5835] ? mod_memcg_lruvec_state+0x394/0x610 [ 224.299508][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.299564][ T5835] f2fs_write_data_pages+0x4ad/0xd90 [ 224.299630][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.299683][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.299738][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.299789][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.299849][ T5835] do_writepages+0x27a/0x600 [ 224.299914][ T5835] ? __pfx_do_writepages+0x10/0x10 [ 224.299970][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 224.300010][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.300054][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 224.300114][ T5835] filemap_fdatawrite_wbc+0x104/0x160 [ 224.300185][ T5835] __filemap_fdatawrite_range+0xb2/0xf0 [ 224.300231][ T5835] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 224.300331][ T5835] ? find_held_lock+0x2b/0x80 [ 224.300377][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.300421][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 224.300467][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.300518][ T5835] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 224.300599][ T5835] block_operations+0x2a3/0xfd0 [ 224.300656][ T5835] ? __pfx_stack_trace_save+0x10/0x10 [ 224.300709][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.300760][ T5835] ? __pfx_block_operations+0x10/0x10 [ 224.300871][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.300916][ T5835] ? down_write+0x14d/0x200 [ 224.300955][ T5835] ? __pfx_down_write+0x10/0x10 [ 224.300997][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.301041][ T5835] ? rcu_is_watching+0x12/0xc0 [ 224.301094][ T5835] f2fs_write_checkpoint+0x2b8/0x4c60 [ 224.301161][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.301206][ T5835] ? kfree+0x2b4/0x4d0 [ 224.301261][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.301305][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.301363][ T5835] ? f2fs_stop_gc_thread+0x79/0xd0 [ 224.301401][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.301469][ T5835] kill_f2fs_super+0x3c2/0x470 [ 224.301528][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 224.301584][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.301662][ T5835] deactivate_locked_super+0xc1/0x1a0 [ 224.301702][ T5835] deactivate_super+0xde/0x100 [ 224.301740][ T5835] cleanup_mnt+0x225/0x450 [ 224.301782][ T5835] task_work_run+0x150/0x240 [ 224.301821][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 224.301856][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.301904][ T5835] ? __pfx___x64_sys_umount+0x10/0x10 [ 224.301960][ T5835] exit_to_user_mode_loop+0xeb/0x110 [ 224.302003][ T5835] do_syscall_64+0x3f6/0x4c0 [ 224.302043][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.302082][ T5835] RIP: 0033:0x7feb4138fc57 [ 224.302111][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 224.302146][ T5835] RSP: 002b:00007ffd5336d3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 224.302180][ T5835] RAX: 0000000000000000 RBX: 00007feb41410925 RCX: 00007feb4138fc57 [ 224.302204][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5336d480 [ 224.302226][ T5835] RBP: 00007ffd5336d480 R08: 0000000000000000 R09: 0000000000000000 [ 224.302249][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5336e510 [ 224.302272][ T5835] R13: 00007feb41410925 R14: 00000000000368a9 R15: 00007ffd5336e550 [ 224.302321][ T5835] [ 224.962513][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 224.988561][ T5835] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 225.075329][ T5838] syz-executor: attempt to access beyond end of device [ 225.075329][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.221740][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 225.221796][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.221818][ T5838] Call Trace: [ 225.221831][ T5838] [ 225.221845][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 225.221917][ T5838] f2fs_handle_critical_error+0x621/0x9f0 [ 225.221967][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.222013][ T5838] ? f2fs_build_fault_attr+0x53/0x1f0 [ 225.222064][ T5838] f2fs_write_end_io+0x785/0xc20 [ 225.222119][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 225.222176][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.222235][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 225.222284][ T5838] bio_endio+0x70d/0x850 [ 225.222329][ T5838] submit_bio_noacct+0x56d/0x1eb0 [ 225.222393][ T5838] __submit_merged_bio+0x33c/0x770 [ 225.222441][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.222494][ T5838] f2fs_submit_page_write+0x744/0x2980 [ 225.222577][ T5838] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 225.222637][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.222693][ T5838] ? __folio_start_writeback+0x3ac/0xbc0 [ 225.222760][ T5838] do_write_page+0x349/0xd20 [ 225.222815][ T5838] f2fs_outplace_write_data+0x1b1/0x270 [ 225.222861][ T5838] ? __pfx_f2fs_outplace_write_data+0x10/0x10 [ 225.222907][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.222953][ T5838] ? f2fs_encrypt_one_page+0x123/0x960 [ 225.223021][ T5838] f2fs_do_write_data_page+0xcc5/0x1de0 [ 225.223090][ T5838] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 225.223149][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.223216][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.223261][ T5838] ? __lock_acquire+0x622/0x1c90 [ 225.223329][ T5838] f2fs_write_single_data_page+0x1138/0x17a0 [ 225.223409][ T5838] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 225.223497][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.223543][ T5838] ? folio_clear_dirty_for_io+0x112/0x810 [ 225.223610][ T5838] f2fs_write_cache_pages+0xd85/0x2570 [ 225.223711][ T5838] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 225.223781][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.223825][ T5838] ? __lock_acquire+0x622/0x1c90 [ 225.223897][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.224046][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.224101][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.224156][ T5838] f2fs_write_data_pages+0x4ad/0xd90 [ 225.224226][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 225.224281][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.224341][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.224394][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 225.224455][ T5838] do_writepages+0x27a/0x600 [ 225.224524][ T5838] ? __pfx_do_writepages+0x10/0x10 [ 225.224583][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 225.224624][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.224670][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 225.224739][ T5838] filemap_fdatawrite_wbc+0x104/0x160 [ 225.224807][ T5838] __filemap_fdatawrite_range+0xb2/0xf0 [ 225.224856][ T5838] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 225.224971][ T5838] ? find_held_lock+0x2b/0x80 [ 225.225020][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.225066][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 225.225108][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.225161][ T5838] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 225.225248][ T5838] block_operations+0x2a3/0xfd0 [ 225.225306][ T5838] ? __pfx_stack_trace_save+0x10/0x10 [ 225.225364][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.225417][ T5838] ? __pfx_block_operations+0x10/0x10 [ 225.225544][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.225590][ T5838] ? down_write+0x14d/0x200 [ 225.225631][ T5838] ? __pfx_down_write+0x10/0x10 [ 225.225685][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.225731][ T5838] ? rcu_is_watching+0x12/0xc0 [ 225.225787][ T5838] f2fs_write_checkpoint+0x2b8/0x4c60 [ 225.225857][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.225902][ T5838] ? kfree+0x2b4/0x4d0 [ 225.225959][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.226004][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.226064][ T5838] ? f2fs_stop_gc_thread+0x79/0xd0 [ 225.226104][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.226170][ T5838] kill_f2fs_super+0x3c2/0x470 [ 225.226234][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 225.226294][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.226379][ T5838] deactivate_locked_super+0xc1/0x1a0 [ 225.226422][ T5838] deactivate_super+0xde/0x100 [ 225.226462][ T5838] cleanup_mnt+0x225/0x450 [ 225.226509][ T5838] task_work_run+0x150/0x240 [ 225.226550][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 225.226586][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.226636][ T5838] ? __pfx___x64_sys_umount+0x10/0x10 [ 225.226703][ T5838] exit_to_user_mode_loop+0xeb/0x110 [ 225.226749][ T5838] do_syscall_64+0x3f6/0x4c0 [ 225.226791][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.226830][ T5838] RIP: 0033:0x7fe855b8fc57 [ 225.226860][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 225.226897][ T5838] RSP: 002b:00007fffec642da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 225.226932][ T5838] RAX: 0000000000000000 RBX: 00007fe855c10925 RCX: 00007fe855b8fc57 [ 225.226957][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffec642e60 [ 225.226980][ T5838] RBP: 00007fffec642e60 R08: 0000000000000000 R09: 0000000000000000 [ 225.227003][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffec643ef0 [ 225.227027][ T5838] R13: 00007fe855c10925 R14: 0000000000036e64 R15: 00007fffec643f30 [ 225.227082][ T5838] [ 225.227096][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 225.934045][ T5838] syz-executor: attempt to access beyond end of device [ 225.934045][ T5838] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 226.119024][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 226.119077][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.119099][ T5838] Call Trace: [ 226.119111][ T5838] [ 226.119124][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 226.119193][ T5838] f2fs_handle_critical_error+0x621/0x9f0 [ 226.119242][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.119288][ T5838] ? f2fs_build_fault_attr+0x53/0x1f0 [ 226.119336][ T5838] f2fs_write_end_io+0x785/0xc20 [ 226.119388][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 226.119443][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.119498][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 226.119545][ T5838] bio_endio+0x70d/0x850 [ 226.119587][ T5838] submit_bio_noacct+0x56d/0x1eb0 [ 226.119647][ T5838] __submit_merged_bio+0x33c/0x770 [ 226.119707][ T5838] __submit_merged_write_cond+0x319/0x3f0 [ 226.119768][ T5838] f2fs_write_single_data_page+0x13b0/0x17a0 [ 226.119841][ T5838] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 226.119923][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.119968][ T5838] ? folio_clear_dirty_for_io+0x112/0x810 [ 226.120031][ T5838] f2fs_write_cache_pages+0xd85/0x2570 [ 226.120119][ T5838] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 226.120184][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.120230][ T5838] ? __lock_acquire+0x622/0x1c90 [ 226.120300][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.120431][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.120483][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.120535][ T5838] f2fs_write_data_pages+0x4ad/0xd90 [ 226.120601][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.120654][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.120715][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.120766][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.120825][ T5838] do_writepages+0x27a/0x600 [ 226.120890][ T5838] ? __pfx_do_writepages+0x10/0x10 [ 226.120946][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 226.120987][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.121031][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 226.121092][ T5838] filemap_fdatawrite_wbc+0x104/0x160 [ 226.121158][ T5838] __filemap_fdatawrite_range+0xb2/0xf0 [ 226.121205][ T5838] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 226.121308][ T5838] ? find_held_lock+0x2b/0x80 [ 226.121355][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.121401][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 226.121441][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.121494][ T5838] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 226.121574][ T5838] block_operations+0x2a3/0xfd0 [ 226.121630][ T5838] ? __pfx_stack_trace_save+0x10/0x10 [ 226.121685][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.121740][ T5838] ? __pfx_block_operations+0x10/0x10 [ 226.121854][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.121898][ T5838] ? down_write+0x14d/0x200 [ 226.121937][ T5838] ? __pfx_down_write+0x10/0x10 [ 226.121980][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.122024][ T5838] ? rcu_is_watching+0x12/0xc0 [ 226.122077][ T5838] f2fs_write_checkpoint+0x2b8/0x4c60 [ 226.122144][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.122188][ T5838] ? kfree+0x2b4/0x4d0 [ 226.122244][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.122289][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.122347][ T5838] ? f2fs_stop_gc_thread+0x79/0xd0 [ 226.122385][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.122441][ T5838] kill_f2fs_super+0x3c2/0x470 [ 226.122502][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 226.122561][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.122640][ T5838] deactivate_locked_super+0xc1/0x1a0 [ 226.122680][ T5838] deactivate_super+0xde/0x100 [ 226.122723][ T5838] cleanup_mnt+0x225/0x450 [ 226.122767][ T5838] task_work_run+0x150/0x240 [ 226.122806][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 226.122841][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.122889][ T5838] ? __pfx___x64_sys_umount+0x10/0x10 [ 226.122946][ T5838] exit_to_user_mode_loop+0xeb/0x110 [ 226.122988][ T5838] do_syscall_64+0x3f6/0x4c0 [ 226.123028][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.123065][ T5838] RIP: 0033:0x7fe855b8fc57 [ 226.123094][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 226.123129][ T5838] RSP: 002b:00007fffec642da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.123164][ T5838] RAX: 0000000000000000 RBX: 00007fe855c10925 RCX: 00007fe855b8fc57 [ 226.123188][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffec642e60 [ 226.123211][ T5838] RBP: 00007fffec642e60 R08: 0000000000000000 R09: 0000000000000000 [ 226.123234][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffec643ef0 [ 226.123257][ T5838] R13: 00007fe855c10925 R14: 0000000000036e64 R15: 00007fffec643f30 [ 226.123306][ T5838] [ 226.688498][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 228.026618][ T6883] loop3: detected capacity change from 0 to 8 [ 228.516010][ T6883] SQUASHFS error: zstd decompression error: 10 [ 228.525480][ T6883] SQUASHFS error: zstd decompression failed, data probably corrupt [ 228.533530][ T6883] SQUASHFS error: Failed to read block 0x4ec: -5 [ 228.539897][ T6883] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 228.547330][ T6883] SQUASHFS error: Unable to read inode 0x2011f [ 229.183229][ T6891] [U]  [ 229.266964][ T5845] Bluetooth: hci1: unexpected event 0x14 length: 13 > 6 [ 229.700805][ T6903] netlink: 'syz.4.271': attribute type 11 has an invalid length. [ 229.721676][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'. [ 230.203384][ T6907] loop2: detected capacity change from 0 to 40427 [ 230.292808][ T6907] F2FS-fs (loop2): invalid crc value [ 230.436587][ T6907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.308006][ T5837] syz-executor: attempt to access beyond end of device [ 231.308006][ T5837] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.522461][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 231.522515][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.522537][ T5837] Call Trace: [ 231.522549][ T5837] [ 231.522562][ T5837] dump_stack_lvl+0x16c/0x1f0 [ 231.522631][ T5837] f2fs_handle_critical_error+0x621/0x9f0 [ 231.522676][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.522719][ T5837] ? f2fs_build_fault_attr+0x53/0x1f0 [ 231.522763][ T5837] f2fs_write_end_io+0x785/0xc20 [ 231.522810][ T5837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 231.522859][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.522913][ T5837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 231.522959][ T5837] bio_endio+0x70d/0x850 [ 231.523000][ T5837] submit_bio_noacct+0x56d/0x1eb0 [ 231.523060][ T5837] __submit_merged_bio+0x33c/0x770 [ 231.523113][ T5837] __submit_merged_write_cond+0x319/0x3f0 [ 231.523173][ T5837] f2fs_write_cache_pages+0x2067/0x2570 [ 231.523257][ T5837] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 231.523311][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523367][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523419][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523487][ T5837] ? finish_task_switch.isra.0+0x221/0xc10 [ 231.523533][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523577][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.523701][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523755][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523808][ T5837] f2fs_write_data_pages+0x4ad/0xd90 [ 231.523875][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.523930][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.523986][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.524037][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 231.524099][ T5837] do_writepages+0x27a/0x600 [ 231.524166][ T5837] ? __pfx_do_writepages+0x10/0x10 [ 231.524223][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 231.524265][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.524310][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 231.524371][ T5837] filemap_fdatawrite_wbc+0x104/0x160 [ 231.524442][ T5837] __filemap_fdatawrite_range+0xb2/0xf0 [ 231.524489][ T5837] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 231.524592][ T5837] ? find_held_lock+0x2b/0x80 [ 231.524640][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.524687][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 231.524727][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.524780][ T5837] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 231.524860][ T5837] block_operations+0x2a3/0xfd0 [ 231.524917][ T5837] ? __pfx_stack_trace_save+0x10/0x10 [ 231.524972][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.525024][ T5837] ? __pfx_block_operations+0x10/0x10 [ 231.525138][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.525184][ T5837] ? down_write+0x14d/0x200 [ 231.525225][ T5837] ? __pfx_down_write+0x10/0x10 [ 231.525267][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.525312][ T5837] ? rcu_is_watching+0x12/0xc0 [ 231.525365][ T5837] f2fs_write_checkpoint+0x2b8/0x4c60 [ 231.525442][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.525488][ T5837] ? kfree+0x2b4/0x4d0 [ 231.525544][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.525590][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.525649][ T5837] ? f2fs_stop_gc_thread+0x79/0xd0 [ 231.525687][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.525745][ T5837] kill_f2fs_super+0x3c2/0x470 [ 231.525807][ T5837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 231.525867][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.525946][ T5837] deactivate_locked_super+0xc1/0x1a0 [ 231.525987][ T5837] deactivate_super+0xde/0x100 [ 231.526033][ T5837] cleanup_mnt+0x225/0x450 [ 231.526077][ T5837] task_work_run+0x150/0x240 [ 231.526119][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 231.526155][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.526203][ T5837] ? __pfx___x64_sys_umount+0x10/0x10 [ 231.526260][ T5837] exit_to_user_mode_loop+0xeb/0x110 [ 231.526304][ T5837] do_syscall_64+0x3f6/0x4c0 [ 231.526345][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.526383][ T5837] RIP: 0033:0x7f3dd878fc57 [ 231.526412][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 231.526455][ T5837] RSP: 002b:00007ffe4e16a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 231.526492][ T5837] RAX: 0000000000000000 RBX: 00007f3dd8810925 RCX: 00007f3dd878fc57 [ 231.526517][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4e16a270 [ 231.526540][ T5837] RBP: 00007ffe4e16a270 R08: 0000000000000000 R09: 0000000000000000 [ 231.526564][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe4e16b300 [ 231.526588][ T5837] R13: 00007f3dd8810925 R14: 0000000000038421 R15: 00007ffe4e16b340 [ 231.526638][ T5837] [ 232.002686][ T6913] loop3: detected capacity change from 0 to 32768 [ 232.025178][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 232.058511][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 232.064746][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 232.070810][ T5857] Bluetooth: hci5: command 0x0406 tx timeout [ 232.072840][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 232.076922][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 232.097711][ T5837] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 232.153528][ T6913] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 232.910075][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 233.198321][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 233.648252][ T5845] Bluetooth: hci3: connection err: -111 [ 233.682562][ T6944] [U]  [ 234.778349][ T6959] loop1: detected capacity change from 0 to 512 [ 234.952441][ T6959] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.289: casefold flag without casefold feature [ 235.016401][ T6959] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.289: couldn't read orphan inode 15 (err -117) [ 235.100213][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.641933][ T6988] siw: device registration error -23 [ 238.734552][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.892950][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 239.549707][ T7001] loop2: detected capacity change from 0 to 40427 [ 239.724334][ T7001] F2FS-fs (loop2): invalid crc value [ 239.871451][ T6997] [U]  [ 239.898821][ T7001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 242.148420][ T7020] loop1: detected capacity change from 0 to 4096 [ 242.169115][ T7015] loop5: detected capacity change from 0 to 8 [ 242.646560][ T7015] SQUASHFS error: zstd decompression error: 10 [ 242.656699][ T7015] SQUASHFS error: zstd decompression failed, data probably corrupt [ 242.664730][ T7015] SQUASHFS error: Failed to read block 0x4ec: -5 [ 242.671084][ T7015] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 242.678551][ T7015] SQUASHFS error: Unable to read inode 0x2011f [ 243.112192][ T7031] warning: `syz.0.307' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 243.155704][ T7031] loop0: detected capacity change from 0 to 8 [ 243.468072][ T7026] loop3: detected capacity change from 0 to 8 [ 243.504410][ T7026] SQUASHFS error: zstd decompression error: 10 [ 243.510674][ T7026] SQUASHFS error: zstd decompression failed, data probably corrupt [ 243.519586][ T7026] SQUASHFS error: Failed to read block 0x4ec: -5 [ 243.526109][ T7026] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 243.533742][ T7026] SQUASHFS error: Unable to read inode 0x2011f [ 243.583382][ T7031] squashfs image failed sanity check [ 243.653177][ T5837] syz-executor: attempt to access beyond end of device [ 243.653177][ T5837] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.324989][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 244.325043][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.325067][ T5837] Call Trace: [ 244.325078][ T5837] [ 244.325092][ T5837] dump_stack_lvl+0x16c/0x1f0 [ 244.325161][ T5837] f2fs_handle_critical_error+0x621/0x9f0 [ 244.325209][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.325257][ T5837] ? f2fs_build_fault_attr+0x53/0x1f0 [ 244.325305][ T5837] f2fs_write_end_io+0x785/0xc20 [ 244.325359][ T5837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 244.325414][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.325471][ T5837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 244.325518][ T5837] bio_endio+0x70d/0x850 [ 244.325560][ T5837] submit_bio_noacct+0x56d/0x1eb0 [ 244.325622][ T5837] __submit_merged_bio+0x33c/0x770 [ 244.325677][ T5837] __submit_merged_write_cond+0x319/0x3f0 [ 244.325745][ T5837] f2fs_write_cache_pages+0x2067/0x2570 [ 244.325832][ T5837] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 244.325898][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.325943][ T5837] ? __lock_acquire+0x622/0x1c90 [ 244.326012][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.326150][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.326206][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.326259][ T5837] f2fs_write_data_pages+0x4ad/0xd90 [ 244.326326][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 244.326381][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.326439][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.326490][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 244.326550][ T5837] do_writepages+0x27a/0x600 [ 244.326618][ T5837] ? __pfx_do_writepages+0x10/0x10 [ 244.326675][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 244.326722][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.326767][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 244.326828][ T5837] filemap_fdatawrite_wbc+0x104/0x160 [ 244.326894][ T5837] __filemap_fdatawrite_range+0xb2/0xf0 [ 244.326941][ T5837] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 244.327046][ T5837] ? find_held_lock+0x2b/0x80 [ 244.327093][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.327139][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 244.327179][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.327231][ T5837] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 244.327312][ T5837] block_operations+0x2a3/0xfd0 [ 244.327369][ T5837] ? __pfx_stack_trace_save+0x10/0x10 [ 244.327424][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.327475][ T5837] ? __pfx_block_operations+0x10/0x10 [ 244.327591][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.327636][ T5837] ? down_write+0x14d/0x200 [ 244.327675][ T5837] ? __pfx_down_write+0x10/0x10 [ 244.327722][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.327767][ T5837] ? rcu_is_watching+0x12/0xc0 [ 244.327819][ T5837] f2fs_write_checkpoint+0x2b8/0x4c60 [ 244.327888][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.327933][ T5837] ? kfree+0x2b4/0x4d0 [ 244.327988][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.328033][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.328092][ T5837] ? f2fs_stop_gc_thread+0x79/0xd0 [ 244.328131][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.328187][ T5837] kill_f2fs_super+0x3c2/0x470 [ 244.328250][ T5837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 244.328308][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.328418][ T5837] deactivate_locked_super+0xc1/0x1a0 [ 244.328460][ T5837] deactivate_super+0xde/0x100 [ 244.328499][ T5837] cleanup_mnt+0x225/0x450 [ 244.328543][ T5837] task_work_run+0x150/0x240 [ 244.328584][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 244.328619][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.328668][ T5837] ? __pfx___x64_sys_umount+0x10/0x10 [ 244.328729][ T5837] exit_to_user_mode_loop+0xeb/0x110 [ 244.328772][ T5837] do_syscall_64+0x3f6/0x4c0 [ 244.328812][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.328850][ T5837] RIP: 0033:0x7f3dd878fc57 [ 244.328879][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 244.328919][ T5837] RSP: 002b:00007ffe4e16a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 244.328957][ T5837] RAX: 0000000000000000 RBX: 00007f3dd8810925 RCX: 00007f3dd878fc57 [ 244.328981][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4e16a270 [ 244.329005][ T5837] RBP: 00007ffe4e16a270 R08: 0000000000000000 R09: 0000000000000000 [ 244.329028][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe4e16b300 [ 244.329052][ T5837] R13: 00007f3dd8810925 R14: 000000000003ae62 R15: 00007ffe4e16b340 [ 244.329103][ T5837] [ 244.329117][ T5837] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 244.718849][ T7020] ntfs3(loop1): Failed to read $AttrDef (-4). [ 245.093206][ T7020] delete_channel: no stack [ 248.622554][ T7052] loop3: detected capacity change from 0 to 32768 [ 248.752467][ T7052] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 248.801983][ T7060] trusted_key: encrypted_key: insufficient parameters specified [ 249.490853][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 251.350386][ T7080] loop1: detected capacity change from 0 to 8 [ 251.702199][ T7080] SQUASHFS error: zstd decompression error: 10 [ 251.708531][ T7080] SQUASHFS error: zstd decompression failed, data probably corrupt [ 251.716709][ T7080] SQUASHFS error: Failed to read block 0x4ec: -5 [ 251.723282][ T7080] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 251.730732][ T7080] SQUASHFS error: Unable to read inode 0x2011f [ 255.034937][ T7106] loop1: detected capacity change from 0 to 32768 [ 255.135303][ T7106] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 256.374126][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 256.877898][ T7130] [U]  [ 257.100490][ T7137] loop5: detected capacity change from 0 to 8 [ 257.133444][ T7137] SQUASHFS error: zstd decompression error: 10 [ 257.139753][ T7137] SQUASHFS error: zstd decompression failed, data probably corrupt [ 257.148043][ T7137] SQUASHFS error: Failed to read block 0x4ec: -5 [ 257.154476][ T7137] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 257.161836][ T7137] SQUASHFS error: Unable to read inode 0x2011f [ 259.632391][ T7159] loop3: detected capacity change from 0 to 4096 [ 260.360273][ T7159] ntfs3(loop3): ino=1a, mi_enum_attr [ 260.370833][ T7159] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 260.526411][ T7150] delete_channel: no stack [ 261.757841][ T7170] loop4: detected capacity change from 0 to 32768 [ 261.848592][ T7170] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 262.653612][ T5839] ocfs2: Unmounting device (7,4) on (node local) [ 263.243018][ T7186] loop0: detected capacity change from 0 to 8 [ 263.332663][ T7186] SQUASHFS error: zstd decompression error: 10 [ 263.341281][ T7186] SQUASHFS error: zstd decompression failed, data probably corrupt [ 263.349313][ T7186] SQUASHFS error: Failed to read block 0x4ec: -5 [ 263.355783][ T7186] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 263.363169][ T7186] SQUASHFS error: Unable to read inode 0x2011f [ 263.626181][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.354'. [ 263.853851][ T7196] [U]  [ 265.304399][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.310793][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.925167][ T7227] capability: warning: `syz.5.361' uses deprecated v2 capabilities in a way that may be insecure [ 270.081524][ T7223] sp0: Synchronizing with TNC [ 272.278901][ T7241] loop3: detected capacity change from 0 to 32768 [ 272.343875][ T7241] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 272.396438][ T7246] loop5: detected capacity change from 0 to 1024 [ 272.791570][ T7248] bridge0: port 3(syz_tun) entered blocking state [ 272.833582][ T7248] bridge0: port 3(syz_tun) entered disabled state [ 272.850273][ T7248] syz_tun: entered allmulticast mode [ 272.943909][ T7248] syz_tun: entered promiscuous mode [ 273.104185][ T7252] loop0: detected capacity change from 0 to 4096 [ 273.191091][ T7248] bridge0: port 3(syz_tun) entered blocking state [ 273.198212][ T7248] bridge0: port 3(syz_tun) entered forwarding state [ 273.335985][ T7252] ntfs3(loop0): ino=1a, mi_enum_attr [ 273.341383][ T7252] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 273.354760][ T5850] ocfs2: Unmounting device (7,3) on (node local) [ 273.464887][ T5910] wlan0 speed is unknown, defaulting to 1000 [ 273.494556][ T7228] delete_channel: no stack [ 273.569342][ T7096] hfsplus: b-tree write err: -5, ino 4 [ 273.925948][ T7257] loop3: detected capacity change from 0 to 8 [ 273.939731][ T7257] SQUASHFS error: zstd decompression error: 10 [ 273.950903][ T7257] SQUASHFS error: zstd decompression failed, data probably corrupt [ 273.958961][ T7257] SQUASHFS error: Failed to read block 0x4ec: -5 [ 273.965417][ T7257] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 273.972799][ T7257] SQUASHFS error: Unable to read inode 0x2011f [ 274.281398][ T7263] loop4: detected capacity change from 0 to 256 [ 274.360539][ T7263] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.439348][ T7263] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 274.528636][ T7263] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 275.222057][ T7272] [U]  [ 275.960127][ T7283] loop0: detected capacity change from 0 to 40427 [ 276.542684][ T7283] F2FS-fs (loop0): invalid crc value [ 276.900963][ T7283] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 279.099776][ T5838] syz-executor: attempt to access beyond end of device [ 279.099776][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.249919][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 279.249972][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.249994][ T5838] Call Trace: [ 279.250006][ T5838] [ 279.250019][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 279.250087][ T5838] f2fs_handle_critical_error+0x621/0x9f0 [ 279.250136][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.250181][ T5838] ? f2fs_build_fault_attr+0x53/0x1f0 [ 279.250227][ T5838] f2fs_write_end_io+0x785/0xc20 [ 279.250279][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 279.250333][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.250389][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 279.250436][ T5838] bio_endio+0x70d/0x850 [ 279.250479][ T5838] submit_bio_noacct+0x56d/0x1eb0 [ 279.250539][ T5838] __submit_merged_bio+0x33c/0x770 [ 279.250595][ T5838] __submit_merged_write_cond+0x319/0x3f0 [ 279.250656][ T5838] f2fs_write_cache_pages+0x2067/0x2570 [ 279.250745][ T5838] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 279.250799][ T5838] ? __lock_acquire+0xb8a/0x1c90 [ 279.250862][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.250909][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.250957][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251000][ T5838] ? __lock_acquire+0xb8a/0x1c90 [ 279.251076][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251137][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251181][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.251241][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251329][ T5838] ? __pfx___schedule+0x10/0x10 [ 279.251386][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251439][ T5838] f2fs_write_data_pages+0x4ad/0xd90 [ 279.251507][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.251560][ T5838] ? preempt_schedule_thunk+0x16/0x30 [ 279.251614][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251658][ T5838] ? preempt_schedule_thunk+0x16/0x30 [ 279.251716][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.251776][ T5838] do_writepages+0x27a/0x600 [ 279.251842][ T5838] ? __pfx_do_writepages+0x10/0x10 [ 279.251899][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 279.251940][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.251985][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 279.252045][ T5838] filemap_fdatawrite_wbc+0x104/0x160 [ 279.252105][ T5838] ? __schedule+0x1181/0x5de0 [ 279.252161][ T5838] __filemap_fdatawrite_range+0xb2/0xf0 [ 279.252208][ T5838] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 279.252315][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.252361][ T5838] ? preempt_schedule_thunk+0x16/0x30 [ 279.252419][ T5838] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 279.252500][ T5838] block_operations+0x2a3/0xfd0 [ 279.252557][ T5838] ? __pfx_stack_trace_save+0x10/0x10 [ 279.252613][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.252663][ T5838] ? __pfx_block_operations+0x10/0x10 [ 279.252781][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.252826][ T5838] ? down_write+0x14d/0x200 [ 279.252865][ T5838] ? __pfx_down_write+0x10/0x10 [ 279.252908][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.252952][ T5838] ? rcu_is_watching+0x12/0xc0 [ 279.253004][ T5838] f2fs_write_checkpoint+0x2b8/0x4c60 [ 279.253070][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.253115][ T5838] ? kfree+0x2b4/0x4d0 [ 279.253169][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.253214][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.253272][ T5838] ? f2fs_stop_gc_thread+0x79/0xd0 [ 279.253310][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.253367][ T5838] kill_f2fs_super+0x3c2/0x470 [ 279.253429][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 279.253488][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.253568][ T5838] deactivate_locked_super+0xc1/0x1a0 [ 279.253608][ T5838] deactivate_super+0xde/0x100 [ 279.253648][ T5838] cleanup_mnt+0x225/0x450 [ 279.253702][ T5838] task_work_run+0x150/0x240 [ 279.253743][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 279.253778][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.253826][ T5838] ? __pfx___x64_sys_umount+0x10/0x10 [ 279.253882][ T5838] exit_to_user_mode_loop+0xeb/0x110 [ 279.253926][ T5838] do_syscall_64+0x3f6/0x4c0 [ 279.253966][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.254004][ T5838] RIP: 0033:0x7fe855b8fc57 [ 279.254033][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 279.254071][ T5838] RSP: 002b:00007fffec642da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 279.254107][ T5838] RAX: 0000000000000000 RBX: 00007fe855c10925 RCX: 00007fe855b8fc57 [ 279.254132][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffec642e60 [ 279.254155][ T5838] RBP: 00007fffec642e60 R08: 0000000000000000 R09: 0000000000000000 [ 279.254179][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffec643ef0 [ 279.254203][ T5838] R13: 00007fe855c10925 R14: 0000000000043ffb R15: 00007fffec643f30 [ 279.254252][ T5838] [ 280.112626][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 280.137313][ T7307] loop2: detected capacity change from 0 to 1024 [ 281.453111][ T6005] hfsplus: b-tree write err: -5, ino 4 [ 281.494859][ T7313] loop1: detected capacity change from 0 to 1024 [ 283.041338][ T7333] loop3: detected capacity change from 0 to 4096 [ 283.298174][ T7330] loop5: detected capacity change from 0 to 2048 [ 283.341957][ T7333] ntfs3(loop3): ino=1a, mi_enum_attr [ 283.347370][ T7333] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 283.403288][ T7330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.612014][ T7322] delete_channel: no stack [ 284.031436][ T7338] loop2: detected capacity change from 0 to 4096 [ 284.281639][ T7345] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.303743][ T7340] loop1: detected capacity change from 0 to 40427 [ 284.360740][ T7340] F2FS-fs (loop1): invalid crc value [ 284.562477][ T7340] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.605114][ T7352] [U]  [ 284.622221][ T30] audit: type=1800 audit(1749821978.688:16): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.394" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 285.843401][ T5836] syz-executor: attempt to access beyond end of device [ 285.843401][ T5836] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 286.858473][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 286.858527][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.858549][ T5836] Call Trace: [ 286.858560][ T5836] [ 286.858573][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 286.858641][ T5836] f2fs_handle_critical_error+0x621/0x9f0 [ 286.858687][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.858732][ T5836] ? f2fs_build_fault_attr+0x53/0x1f0 [ 286.858779][ T5836] f2fs_write_end_io+0x785/0xc20 [ 286.858829][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.858880][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.858933][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.858980][ T5836] bio_endio+0x70d/0x850 [ 286.859022][ T5836] submit_bio_noacct+0x56d/0x1eb0 [ 286.859083][ T5836] __submit_merged_bio+0x33c/0x770 [ 286.859137][ T5836] __submit_merged_write_cond+0x319/0x3f0 [ 286.859198][ T5836] f2fs_write_cache_pages+0x2067/0x2570 [ 286.859281][ T5836] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 286.859345][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.859389][ T5836] ? __lock_acquire+0x622/0x1c90 [ 286.859462][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.859588][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.859632][ T5836] ? mod_memcg_lruvec_state+0x394/0x610 [ 286.859699][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.859753][ T5836] f2fs_write_data_pages+0x4ad/0xd90 [ 286.859818][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 286.859871][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.859926][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.859976][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 286.860035][ T5836] do_writepages+0x27a/0x600 [ 286.860099][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 286.860155][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 286.860195][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.860238][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 286.860298][ T5836] filemap_fdatawrite_wbc+0x104/0x160 [ 286.860363][ T5836] __filemap_fdatawrite_range+0xb2/0xf0 [ 286.860410][ T5836] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 286.860517][ T5836] ? find_held_lock+0x2b/0x80 [ 286.860565][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.860611][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 286.860650][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.860701][ T5836] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 286.860780][ T5836] block_operations+0x2a3/0xfd0 [ 286.860835][ T5836] ? __pfx_stack_trace_save+0x10/0x10 [ 286.860890][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.860939][ T5836] ? __pfx_block_operations+0x10/0x10 [ 286.861050][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.861094][ T5836] ? down_write+0x14d/0x200 [ 286.861133][ T5836] ? __pfx_down_write+0x10/0x10 [ 286.861175][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.861217][ T5836] ? rcu_is_watching+0x12/0xc0 [ 286.861267][ T5836] f2fs_write_checkpoint+0x2b8/0x4c60 [ 286.861333][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.861377][ T5836] ? kfree+0x2b4/0x4d0 [ 286.861439][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.861486][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.861543][ T5836] ? f2fs_stop_gc_thread+0x79/0xd0 [ 286.861581][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.861636][ T5836] kill_f2fs_super+0x3c2/0x470 [ 286.861697][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 286.861755][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.861834][ T5836] deactivate_locked_super+0xc1/0x1a0 [ 286.861875][ T5836] deactivate_super+0xde/0x100 [ 286.861914][ T5836] cleanup_mnt+0x225/0x450 [ 286.861957][ T5836] task_work_run+0x150/0x240 [ 286.861998][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 286.862032][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.862080][ T5836] ? __pfx___x64_sys_umount+0x10/0x10 [ 286.862134][ T5836] exit_to_user_mode_loop+0xeb/0x110 [ 286.862177][ T5836] do_syscall_64+0x3f6/0x4c0 [ 286.862217][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.862254][ T5836] RIP: 0033:0x7f845118fc57 [ 286.862282][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 286.862319][ T5836] RSP: 002b:00007ffd71cff2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 286.862353][ T5836] RAX: 0000000000000000 RBX: 00007f8451210925 RCX: 00007f845118fc57 [ 286.862377][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd71cff390 [ 286.862400][ T5836] RBP: 00007ffd71cff390 R08: 0000000000000000 R09: 0000000000000000 [ 286.862423][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd71d00420 [ 286.862453][ T5836] R13: 00007f8451210925 R14: 0000000000045ad7 R15: 00007ffd71d00460 [ 286.862502][ T5836] [ 287.722501][ T7365] loop3: detected capacity change from 0 to 8 [ 288.004599][ T7364] loop0: detected capacity change from 0 to 32768 [ 288.336760][ T5836] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 289.224040][ T7365] SQUASHFS error: Failed to allocate zstd workspace [ 289.230777][ T7365] squashfs image failed sanity check [ 289.429316][ T7364] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 289.430701][ T7364] (syz.0.383,7364,0):ocfs2_initialize_super:2229 ERROR: status = -12 [ 289.449122][ T7364] (syz.0.383,7364,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 290.302353][ T7372] loop5: detected capacity change from 0 to 40427 [ 290.335787][ T7372] F2FS-fs (loop5): invalid crc value [ 290.758040][ T7372] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 291.082624][ T5835] syz-executor: attempt to access beyond end of device [ 291.082624][ T5835] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.137812][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 291.137867][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.137890][ T5835] Call Trace: [ 291.137901][ T5835] [ 291.137914][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 291.137982][ T5835] f2fs_handle_critical_error+0x621/0x9f0 [ 291.138030][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.138076][ T5835] ? f2fs_build_fault_attr+0x53/0x1f0 [ 291.138123][ T5835] f2fs_write_end_io+0x785/0xc20 [ 291.138175][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 291.138229][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.138284][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 291.138332][ T5835] bio_endio+0x70d/0x850 [ 291.138373][ T5835] submit_bio_noacct+0x56d/0x1eb0 [ 291.138434][ T5835] __submit_merged_bio+0x33c/0x770 [ 291.138490][ T5835] __submit_merged_write_cond+0x319/0x3f0 [ 291.138552][ T5835] f2fs_write_cache_pages+0x2067/0x2570 [ 291.138635][ T5835] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 291.138704][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.138749][ T5835] ? __lock_acquire+0x622/0x1c90 [ 291.138821][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.138948][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.138992][ T5835] ? mod_memcg_lruvec_state+0x394/0x610 [ 291.139061][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.139113][ T5835] f2fs_write_data_pages+0x4ad/0xd90 [ 291.139179][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 291.139234][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.139290][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.139341][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 291.139401][ T5835] do_writepages+0x27a/0x600 [ 291.139467][ T5835] ? __pfx_do_writepages+0x10/0x10 [ 291.139523][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 291.139564][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.139609][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 291.139670][ T5835] filemap_fdatawrite_wbc+0x104/0x160 [ 291.139741][ T5835] __filemap_fdatawrite_range+0xb2/0xf0 [ 291.139787][ T5835] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 291.139889][ T5835] ? find_held_lock+0x2b/0x80 [ 291.139936][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.139982][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 291.140023][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.140075][ T5835] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 291.140156][ T5835] block_operations+0x2a3/0xfd0 [ 291.140212][ T5835] ? __pfx_stack_trace_save+0x10/0x10 [ 291.140267][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.140319][ T5835] ? __pfx_block_operations+0x10/0x10 [ 291.140433][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.140479][ T5835] ? down_write+0x14d/0x200 [ 291.140519][ T5835] ? __pfx_down_write+0x10/0x10 [ 291.140561][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.140606][ T5835] ? rcu_is_watching+0x12/0xc0 [ 291.140659][ T5835] f2fs_write_checkpoint+0x2b8/0x4c60 [ 291.140732][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.140777][ T5835] ? kfree+0x2b4/0x4d0 [ 291.140833][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.140878][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.140938][ T5835] ? f2fs_stop_gc_thread+0x79/0xd0 [ 291.140977][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.141034][ T5835] kill_f2fs_super+0x3c2/0x470 [ 291.141096][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 291.141156][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.141235][ T5835] deactivate_locked_super+0xc1/0x1a0 [ 291.141275][ T5835] deactivate_super+0xde/0x100 [ 291.141314][ T5835] cleanup_mnt+0x225/0x450 [ 291.141356][ T5835] task_work_run+0x150/0x240 [ 291.141396][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 291.141429][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.141477][ T5835] ? __pfx___x64_sys_umount+0x10/0x10 [ 291.141533][ T5835] exit_to_user_mode_loop+0xeb/0x110 [ 291.141576][ T5835] do_syscall_64+0x3f6/0x4c0 [ 291.141617][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.141655][ T5835] RIP: 0033:0x7feb4138fc57 [ 291.141692][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 291.141729][ T5835] RSP: 002b:00007ffd5336d3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 291.141764][ T5835] RAX: 0000000000000000 RBX: 00007feb41410925 RCX: 00007feb4138fc57 [ 291.141789][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5336d480 [ 291.141812][ T5835] RBP: 00007ffd5336d480 R08: 0000000000000000 R09: 0000000000000000 [ 291.141835][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5336e510 [ 291.141859][ T5835] R13: 00007feb41410925 R14: 00000000000470a4 R15: 00007ffd5336e550 [ 291.141910][ T5835] [ 291.682270][ T5835] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.291851][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 293.482041][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 293.521724][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.529807][ T10] usb 1-1: Product: syz [ 293.561851][ T10] usb 1-1: Manufacturer: syz [ 293.566538][ T10] usb 1-1: SerialNumber: syz [ 293.608929][ T10] usb 1-1: config 0 descriptor?? [ 293.814894][ T7406] loop1: detected capacity change from 0 to 1024 [ 293.998638][ T7408] loop5: detected capacity change from 0 to 256 [ 294.041731][ T7408] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.101991][ T7408] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 294.144967][ T7408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 294.944476][ T2903] hfsplus: b-tree write err: -5, ino 4 [ 295.383688][ T7415] loop4: detected capacity change from 0 to 32768 [ 295.533079][ T7415] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.414 (7415) [ 295.896885][ T10] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 296.020665][ T7415] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.021698][ T10] usb 1-1: USB disconnect, device number 3 [ 296.031152][ T7415] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 296.188110][ T10] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 296.283711][ T5494] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 296.292583][ T7415] BTRFS info (device loop4): rebuilding free space tree [ 296.388150][ T7415] BTRFS info (device loop4): disabling free space tree [ 296.395530][ T7415] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.405651][ T7415] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.600987][ T10] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 298.403944][ T7443] loop5: detected capacity change from 0 to 32768 [ 298.554311][ T7443] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 298.563531][ T5839] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.964683][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'. [ 300.397486][ T5835] ocfs2: Unmounting device (7,5) on (node local) [ 300.794693][ T7461] loop1: detected capacity change from 0 to 2048 [ 301.256255][ T7461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.402647][ T7466] loop0: detected capacity change from 0 to 128 [ 301.495092][ T7466] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 301.602689][ T6093] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 301.814882][ T6093] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.822946][ T7463] FAT-fs (loop0): FAT read failed (blocknr 128) [ 301.877867][ T6093] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 301.921619][ T6093] usb 5-1: config 1 has no interface number 1 [ 301.957323][ T6093] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 302.036700][ T6093] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.080190][ T6093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.123332][ T6093] usb 5-1: Product: syz [ 302.127579][ T6093] usb 5-1: Manufacturer: syz [ 302.160428][ T6093] usb 5-1: SerialNumber: syz [ 302.405141][ T7477] loop0: detected capacity change from 0 to 256 [ 302.491067][ T7477] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.631532][ T7477] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 302.815616][ T7477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 303.467558][ T6093] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 303.479819][ T6093] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 303.494480][ T6093] usb 5-1: failed to enable PITCH for EP 0x82 [ 303.859782][ T7487] loop1: detected capacity change from 0 to 256 [ 303.985236][ T7487] vfat: Unknown parameter '18446744073709551615' [ 304.367307][ T6093] usb 5-1: USB disconnect, device number 2 [ 304.899352][ T10] IPVS: starting estimator thread 0... [ 304.909838][ T7496] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 305.062872][ T7498] IPVS: using max 21 ests per chain, 50400 per kthread [ 306.351835][ T7507] loop5: detected capacity change from 0 to 4096 [ 306.535912][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.809951][ T7517] loop0: detected capacity change from 0 to 4096 [ 308.062322][ T7512] loop4: detected capacity change from 0 to 128 [ 308.106776][ T7512] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 308.239563][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.444'. [ 308.438666][ T7512] FAT-fs (loop4): FAT read failed (blocknr 128) [ 310.119238][ T7539] loop3: detected capacity change from 0 to 40427 [ 310.149639][ T7543] netlink: 'syz.1.446': attribute type 7 has an invalid length. [ 310.222031][ T7543] : entered promiscuous mode [ 310.462157][ T7535] [U] ¦ [ 310.530132][ T7539] F2FS-fs (loop3): invalid crc value [ 310.675050][ T7539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 311.059874][ T7557] loop4: detected capacity change from 0 to 256 [ 311.397363][ T7557] vfat: Unknown parameter '18446744073709551615' [ 312.422087][ T5850] syz-executor: attempt to access beyond end of device [ 312.422087][ T5850] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 312.671788][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 312.671841][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.671863][ T5850] Call Trace: [ 312.671874][ T5850] [ 312.671889][ T5850] dump_stack_lvl+0x16c/0x1f0 [ 312.671956][ T5850] f2fs_handle_critical_error+0x621/0x9f0 [ 312.672004][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.672050][ T5850] ? f2fs_build_fault_attr+0x53/0x1f0 [ 312.672097][ T5850] f2fs_write_end_io+0x785/0xc20 [ 312.672148][ T5850] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 312.672202][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.672256][ T5850] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 312.672303][ T5850] bio_endio+0x70d/0x850 [ 312.672343][ T5850] submit_bio_noacct+0x56d/0x1eb0 [ 312.672402][ T5850] __submit_merged_bio+0x33c/0x770 [ 312.672461][ T5850] __submit_merged_write_cond+0x319/0x3f0 [ 312.672522][ T5850] f2fs_write_cache_pages+0x2067/0x2570 [ 312.672605][ T5850] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 312.672669][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.672714][ T5850] ? __lock_acquire+0x622/0x1c90 [ 312.672783][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.672871][ T5850] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 312.672960][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.673004][ T5850] ? mod_memcg_lruvec_state+0x394/0x610 [ 312.673072][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.673123][ T5850] f2fs_write_data_pages+0x4ad/0xd90 [ 312.673187][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 312.673240][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.673296][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.673344][ T5850] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 312.673404][ T5850] do_writepages+0x27a/0x600 [ 312.673474][ T5850] ? __pfx_do_writepages+0x10/0x10 [ 312.673532][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 312.673572][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.673616][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 312.673676][ T5850] filemap_fdatawrite_wbc+0x104/0x160 [ 312.673741][ T5850] __filemap_fdatawrite_range+0xb2/0xf0 [ 312.673787][ T5850] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 312.673887][ T5850] ? find_held_lock+0x2b/0x80 [ 312.673933][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.673977][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 312.674016][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.674067][ T5850] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 312.674145][ T5850] block_operations+0x2a3/0xfd0 [ 312.674200][ T5850] ? __pfx_stack_trace_save+0x10/0x10 [ 312.674253][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.674303][ T5850] ? __pfx_block_operations+0x10/0x10 [ 312.674442][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.674492][ T5850] ? down_write+0x14d/0x200 [ 312.674531][ T5850] ? __pfx_down_write+0x10/0x10 [ 312.674572][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.674619][ T5850] ? rcu_is_watching+0x12/0xc0 [ 312.674672][ T5850] f2fs_write_checkpoint+0x2b8/0x4c60 [ 312.674739][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.674783][ T5850] ? kfree+0x2b4/0x4d0 [ 312.674837][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.674880][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.674938][ T5850] ? f2fs_stop_gc_thread+0x79/0xd0 [ 312.674975][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.675030][ T5850] kill_f2fs_super+0x3c2/0x470 [ 312.675091][ T5850] ? __pfx_kill_f2fs_super+0x10/0x10 [ 312.675148][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.675225][ T5850] deactivate_locked_super+0xc1/0x1a0 [ 312.675270][ T5850] deactivate_super+0xde/0x100 [ 312.675309][ T5850] cleanup_mnt+0x225/0x450 [ 312.675352][ T5850] task_work_run+0x150/0x240 [ 312.675393][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 312.675427][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.675482][ T5850] ? __pfx___x64_sys_umount+0x10/0x10 [ 312.675539][ T5850] exit_to_user_mode_loop+0xeb/0x110 [ 312.675581][ T5850] do_syscall_64+0x3f6/0x4c0 [ 312.675620][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.675657][ T5850] RIP: 0033:0x7f1a9a58fc57 [ 312.675686][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 312.675722][ T5850] RSP: 002b:00007ffc63ac45f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 312.675756][ T5850] RAX: 0000000000000000 RBX: 00007f1a9a610925 RCX: 00007f1a9a58fc57 [ 312.675780][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc63ac46b0 [ 312.675803][ T5850] RBP: 00007ffc63ac46b0 R08: 0000000000000000 R09: 0000000000000000 [ 312.675826][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc63ac5740 [ 312.675850][ T5850] R13: 00007f1a9a610925 R14: 000000000004c044 R15: 00007ffc63ac5780 [ 312.675898][ T5850] [ 312.675911][ T5850] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 314.924854][ T7574] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 316.866204][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.463'. [ 317.304593][ T7595] loop2: detected capacity change from 0 to 128 [ 317.332775][ T7595] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 317.534091][ T7587] FAT-fs (loop2): FAT read failed (blocknr 128) [ 317.595200][ T7597] netlink: 'syz.0.464': attribute type 7 has an invalid length. [ 317.613462][ T7597] : entered promiscuous mode [ 317.753246][ T7593] [U] ¦ [ 318.372844][ T7608] loop4: detected capacity change from 0 to 8 [ 319.319076][ T7608] SQUASHFS error: zstd decompression error: 10 [ 319.325515][ T7608] SQUASHFS error: zstd decompression failed, data probably corrupt [ 319.333566][ T7608] SQUASHFS error: Failed to read block 0x4ec: -5 [ 319.339944][ T7608] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 319.350720][ T7608] SQUASHFS error: Unable to read inode 0x2011f [ 321.696964][ T7624] loop5: detected capacity change from 0 to 256 [ 321.746717][ T7624] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.791763][ T7624] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 321.825202][ T7629] loop3: detected capacity change from 0 to 256 [ 321.856291][ T7629] vfat: Unknown parameter '18446744073709551615' [ 321.875062][ T7624] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 321.910508][ T7631] syzkaller1: entered promiscuous mode [ 322.003333][ T7631] syzkaller1: entered allmulticast mode [ 323.156903][ T7642] [U]  [ 325.384416][ T7650] loop3: detected capacity change from 0 to 128 [ 325.486241][ T7650] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 325.514331][ T7658] loop1: detected capacity change from 0 to 32768 [ 325.644943][ T7658] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 325.858253][ T7647] FAT-fs (loop3): FAT read failed (blocknr 128) [ 327.104209][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.110824][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.920777][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 328.952850][ T7681] loop3: detected capacity change from 0 to 256 [ 328.998549][ T7681] vfat: Unknown parameter '18446744073709551615' [ 330.300677][ T7693] loop2: detected capacity change from 0 to 40427 [ 330.304593][ T7698] [U]  [ 330.665014][ T7693] F2FS-fs (loop2): invalid crc value [ 330.808903][ T7693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 331.874858][ T5837] syz-executor: attempt to access beyond end of device [ 331.874858][ T5837] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.004508][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 332.004562][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.004584][ T5837] Call Trace: [ 332.004597][ T5837] [ 332.004610][ T5837] dump_stack_lvl+0x16c/0x1f0 [ 332.004682][ T5837] f2fs_handle_critical_error+0x621/0x9f0 [ 332.004732][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.004778][ T5837] ? f2fs_build_fault_attr+0x53/0x1f0 [ 332.004827][ T5837] f2fs_write_end_io+0x785/0xc20 [ 332.004881][ T5837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 332.004938][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.004994][ T5837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 332.005043][ T5837] bio_endio+0x70d/0x850 [ 332.005086][ T5837] submit_bio_noacct+0x56d/0x1eb0 [ 332.005149][ T5837] __submit_merged_bio+0x33c/0x770 [ 332.005205][ T5837] __submit_merged_write_cond+0x319/0x3f0 [ 332.005270][ T5837] f2fs_write_cache_pages+0x2067/0x2570 [ 332.005361][ T5837] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 332.005448][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.005493][ T5837] ? __lock_acquire+0x622/0x1c90 [ 332.005565][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.005661][ T5837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.005756][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.005801][ T5837] ? __lock_acquire+0x622/0x1c90 [ 332.005866][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.005921][ T5837] f2fs_write_data_pages+0x4ad/0xd90 [ 332.005989][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 332.006043][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.006102][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.006153][ T5837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 332.006214][ T5837] do_writepages+0x27a/0x600 [ 332.006282][ T5837] ? __pfx_do_writepages+0x10/0x10 [ 332.006338][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 332.006379][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.006428][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 332.006489][ T5837] filemap_fdatawrite_wbc+0x104/0x160 [ 332.006556][ T5837] __filemap_fdatawrite_range+0xb2/0xf0 [ 332.006602][ T5837] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 332.006715][ T5837] ? find_held_lock+0x2b/0x80 [ 332.006762][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.006808][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 332.006849][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.006902][ T5837] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 332.006986][ T5837] block_operations+0x2a3/0xfd0 [ 332.007043][ T5837] ? __pfx_stack_trace_save+0x10/0x10 [ 332.007099][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.007150][ T5837] ? __pfx_block_operations+0x10/0x10 [ 332.007275][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.007319][ T5837] ? down_write+0x14d/0x200 [ 332.007359][ T5837] ? __pfx_down_write+0x10/0x10 [ 332.007403][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.007453][ T5837] ? rcu_is_watching+0x12/0xc0 [ 332.007507][ T5837] f2fs_write_checkpoint+0x2b8/0x4c60 [ 332.007576][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.007620][ T5837] ? kfree+0x2b4/0x4d0 [ 332.007675][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.007719][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.007778][ T5837] ? f2fs_stop_gc_thread+0x79/0xd0 [ 332.007816][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.007875][ T5837] kill_f2fs_super+0x3c2/0x470 [ 332.007937][ T5837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 332.007996][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.008079][ T5837] deactivate_locked_super+0xc1/0x1a0 [ 332.008120][ T5837] deactivate_super+0xde/0x100 [ 332.008160][ T5837] cleanup_mnt+0x225/0x450 [ 332.008205][ T5837] task_work_run+0x150/0x240 [ 332.008247][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 332.008281][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.008330][ T5837] ? __pfx___x64_sys_umount+0x10/0x10 [ 332.008388][ T5837] exit_to_user_mode_loop+0xeb/0x110 [ 332.008436][ T5837] do_syscall_64+0x3f6/0x4c0 [ 332.008477][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.008515][ T5837] RIP: 0033:0x7f3dd878fc57 [ 332.008545][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 332.008582][ T5837] RSP: 002b:00007ffe4e16a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 332.008618][ T5837] RAX: 0000000000000000 RBX: 00007f3dd8810925 RCX: 00007f3dd878fc57 [ 332.008642][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4e16a270 [ 332.008666][ T5837] RBP: 00007ffe4e16a270 R08: 0000000000000000 R09: 0000000000000000 [ 332.008688][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe4e16b300 [ 332.008713][ T5837] R13: 00007f3dd8810925 R14: 0000000000050f2f R15: 00007ffe4e16b340 [ 332.008767][ T5837] [ 332.009438][ T5837] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 332.366921][ T7720] loop1: detected capacity change from 0 to 128 [ 332.606342][ T7718] tipc: Enabling of bearer rejected, failed to enable media [ 333.048851][ T7720] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 333.188511][ T7725] netlink: 'syz.5.500': attribute type 7 has an invalid length. [ 333.206250][ T7725] : entered promiscuous mode [ 333.442068][ T7719] [U] ¦ [ 334.458224][ T7731] loop4: detected capacity change from 0 to 32768 [ 334.476361][ T7713] FAT-fs (loop1): FAT read failed (blocknr 128) [ 334.561638][ T7731] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 335.149571][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 335.290178][ T5839] ocfs2: Unmounting device (7,4) on (node local) [ 335.450198][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 335.546776][ T7740] loop0: detected capacity change from 0 to 256 [ 335.555390][ T7740] vfat: Unknown parameter '18446744073709551615' [ 335.867355][ T5903] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 336.013854][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.132035][ T5903] usb 2-1: Product: syz [ 336.136733][ T5903] usb 2-1: Manufacturer: syz [ 336.188646][ T5903] usb 2-1: SerialNumber: syz [ 336.241436][ T5903] usb 2-1: config 0 descriptor?? [ 336.540145][ T5903] usb 2-1: USB disconnect, device number 2 [ 337.912911][ T5845] Bluetooth: hci1: unexpected event for opcode 0x080d [ 337.962804][ T7761] loop4: detected capacity change from 0 to 128 [ 337.970517][ T7761] affs: Bad value for 'root' [ 338.055837][ T7767] [U]  [ 338.914049][ T7775] loop0: detected capacity change from 0 to 128 [ 338.972839][ T7775] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 341.199376][ T7784] loop2: detected capacity change from 0 to 32768 [ 341.246025][ T7775] FAT-fs (loop0): FAT read failed (blocknr 128) [ 341.322927][ T7784] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 341.550038][ T7789] loop4: detected capacity change from 0 to 1024 [ 341.618954][ T7791] loop5: detected capacity change from 0 to 256 [ 341.647098][ T7791] vfat: Unknown parameter '18446744073709551615' [ 341.882723][ T3993] hfsplus: b-tree write err: -5, ino 4 [ 341.933893][ T5845] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 341.944642][ T5845] Bluetooth: hci1: Injecting HCI hardware error event [ 341.957625][ T5845] Bluetooth: hci1: hardware error 0x00 [ 342.620795][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 344.574543][ T5845] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 344.893593][ T7803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.899841][ T7803] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 345.214224][ T7803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.251694][ T7803] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 345.272980][ T7817] [U]  [ 345.307544][ T7803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.321774][ T7803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 345.375419][ T7803] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.414371][ T7803] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 345.507349][ T7803] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 345.521381][ T7803] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 346.045345][ T7830] loop4: detected capacity change from 0 to 128 [ 346.053996][ T7830] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 346.120977][ T7830] FAT-fs (loop4): FAT read failed (blocknr 128) [ 346.655036][ T7836] loop4: detected capacity change from 0 to 1024 [ 346.994583][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 347.292733][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 347.344218][ T7843] loop5: detected capacity change from 0 to 256 [ 347.381638][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 347.407738][ T7843] vfat: Unknown parameter '18446744073709551615' [ 347.451723][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 347.533113][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 347.643984][ T13] hfsplus: b-tree write err: -5, ino 4 [ 348.686847][ T7829] loop3: detected capacity change from 0 to 32768 [ 348.728644][ T7829] btrfs: Deprecated parameter 'usebackuproot' [ 348.801778][ T7829] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 349.061624][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 349.155337][ T7855] loop4: detected capacity change from 0 to 8 [ 349.227689][ T7855] SQUASHFS error: zstd decompression error: 10 [ 349.301588][ T7855] SQUASHFS error: zstd decompression failed, data probably corrupt [ 349.321023][ T7855] SQUASHFS error: Failed to read block 0x4ec: -5 [ 349.371724][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 349.390263][ T7855] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 349.451720][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 349.462292][ T7855] SQUASHFS error: Unable to read inode 0x2011f [ 349.536589][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 349.581842][ T5903] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 349.611714][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 349.829210][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 349.858922][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 349.873584][ T7868] [U]  [ 349.941110][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 349.981541][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 349.992003][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.547'. [ 350.011525][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.037996][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.547'. [ 350.061969][ T5903] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 350.101597][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.109684][ T5903] usb 4-1: Product: syz [ 350.134670][ T5903] usb 4-1: Manufacturer: syz [ 350.139344][ T5903] usb 4-1: SerialNumber: syz [ 350.211923][ T5903] usb 4-1: config 0 descriptor?? [ 350.232934][ T5903] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 350.444817][ T5903] usb 4-1: USB disconnect, device number 3 [ 350.774324][ T7873] loop1: detected capacity change from 0 to 40427 [ 350.849778][ T7875] loop5: detected capacity change from 0 to 128 [ 350.869077][ T7873] F2FS-fs (loop1): invalid crc value [ 350.871648][ T7875] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 351.018984][ T7875] FAT-fs (loop5): FAT read failed (blocknr 128) [ 351.065194][ T7873] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 351.249550][ T7852] loop2: detected capacity change from 0 to 40427 [ 351.369453][ T7852] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 351.472526][ T7852] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 352.419610][ T7852] F2FS-fs (loop2): Unable to read 2th superblock [ 352.530436][ T5836] syz-executor: attempt to access beyond end of device [ 352.530436][ T5836] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 352.621710][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 352.621766][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.621790][ T5836] Call Trace: [ 352.621801][ T5836] [ 352.621815][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 352.621885][ T5836] f2fs_handle_critical_error+0x621/0x9f0 [ 352.621935][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.621982][ T5836] ? f2fs_build_fault_attr+0x53/0x1f0 [ 352.622031][ T5836] f2fs_write_end_io+0x785/0xc20 [ 352.622084][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 352.622140][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.622197][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 352.622246][ T5836] bio_endio+0x70d/0x850 [ 352.622288][ T5836] submit_bio_noacct+0x56d/0x1eb0 [ 352.622349][ T5836] __submit_merged_bio+0x33c/0x770 [ 352.622411][ T5836] __submit_merged_write_cond+0x319/0x3f0 [ 352.622475][ T5836] f2fs_write_cache_pages+0x2067/0x2570 [ 352.622563][ T5836] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 352.622629][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.622675][ T5836] ? __lock_acquire+0x622/0x1c90 [ 352.622745][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.622878][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.622924][ T5836] ? mod_memcg_lruvec_state+0x394/0x610 [ 352.622993][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.623047][ T5836] f2fs_write_data_pages+0x4ad/0xd90 [ 352.623114][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 352.623170][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.623227][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.623278][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 352.623338][ T5836] do_writepages+0x27a/0x600 [ 352.623410][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 352.623468][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 352.623509][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.623555][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 352.623617][ T5836] filemap_fdatawrite_wbc+0x104/0x160 [ 352.623684][ T5836] __filemap_fdatawrite_range+0xb2/0xf0 [ 352.623731][ T5836] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 352.623836][ T5836] ? find_held_lock+0x2b/0x80 [ 352.623884][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.623931][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 352.623972][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624024][ T5836] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 352.624106][ T5836] block_operations+0x2a3/0xfd0 [ 352.624163][ T5836] ? __pfx_stack_trace_save+0x10/0x10 [ 352.624219][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624270][ T5836] ? __pfx_block_operations+0x10/0x10 [ 352.624386][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624437][ T5836] ? down_write+0x14d/0x200 [ 352.624478][ T5836] ? __pfx_down_write+0x10/0x10 [ 352.624522][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624567][ T5836] ? rcu_is_watching+0x12/0xc0 [ 352.624620][ T5836] f2fs_write_checkpoint+0x2b8/0x4c60 [ 352.624689][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624735][ T5836] ? kfree+0x2b4/0x4d0 [ 352.624791][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624836][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.624896][ T5836] ? f2fs_stop_gc_thread+0x79/0xd0 [ 352.624934][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.624992][ T5836] kill_f2fs_super+0x3c2/0x470 [ 352.625054][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 352.625114][ T5836] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.625195][ T5836] deactivate_locked_super+0xc1/0x1a0 [ 352.625235][ T5836] deactivate_super+0xde/0x100 [ 352.625276][ T5836] cleanup_mnt+0x225/0x450 [ 352.625321][ T5836] task_work_run+0x150/0x240 [ 352.625361][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 352.625397][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.625451][ T5836] ? __pfx___x64_sys_umount+0x10/0x10 [ 352.625509][ T5836] exit_to_user_mode_loop+0xeb/0x110 [ 352.625553][ T5836] do_syscall_64+0x3f6/0x4c0 [ 352.625594][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.625632][ T5836] RIP: 0033:0x7f845118fc57 [ 352.625661][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 352.625699][ T5836] RSP: 002b:00007ffd71cff2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 352.625734][ T5836] RAX: 0000000000000000 RBX: 00007f8451210925 RCX: 00007f845118fc57 [ 352.625758][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd71cff390 [ 352.625782][ T5836] RBP: 00007ffd71cff390 R08: 0000000000000000 R09: 0000000000000000 [ 352.625805][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd71d00420 [ 352.625829][ T5836] R13: 00007f8451210925 R14: 0000000000056073 R15: 00007ffd71d00460 [ 352.625880][ T5836] [ 352.625895][ T5836] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 353.326441][ T7899] loop4: detected capacity change from 0 to 1024 [ 354.119219][ T4254] hfsplus: b-tree write err: -5, ino 4 [ 354.380255][ T7905] loop0: detected capacity change from 0 to 256 [ 354.449327][ T7907] loop4: detected capacity change from 0 to 512 [ 354.461905][ T7905] vfat: Unknown parameter '18446744073709551615' [ 354.552375][ T7907] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 358.481929][ T6093] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 359.335960][ T7939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.347244][ T7939] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 359.828725][ T6093] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 359.837972][ T6093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.850393][ T6093] usb 4-1: config 0 descriptor?? [ 359.910009][ T6093] usb 4-1: invalid MIDI EP [ 359.914950][ T6093] usb 4-1: snd-bcd2000: error during probing [ 359.922959][ T6093] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 360.293854][ T7944] loop1: detected capacity change from 0 to 512 [ 360.451041][ T6093] usb 4-1: USB disconnect, device number 4 [ 360.516210][ T7944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.554868][ T7944] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.389906][ T7959] loop0: detected capacity change from 0 to 256 [ 361.519484][ T30] audit: type=1800 audit(1749822055.548:17): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.554" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 361.643787][ T7959] vfat: Unknown parameter '18446744073709551615' [ 362.412728][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.808288][ T7995] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 364.820534][ T7995] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 364.896030][ T7992] netlink: 'syz.3.585': attribute type 7 has an invalid length. [ 365.055862][ T7992] : entered promiscuous mode [ 365.132490][ T7991] [U] ¦ [ 366.272373][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 367.121970][ T8014] loop5: detected capacity change from 0 to 256 [ 367.129572][ T8014] vfat: Unknown parameter '18446744073709551615' [ 367.348083][ T8005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.441114][ T8010] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 368.343080][ T8027] loop4: detected capacity change from 0 to 40427 [ 369.080296][ T8027] F2FS-fs (loop4): invalid crc value [ 369.348024][ T8027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 370.964026][ T5839] syz-executor: attempt to access beyond end of device [ 370.964026][ T5839] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 371.012943][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 371.012983][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.013000][ T5839] Call Trace: [ 371.013010][ T5839] [ 371.013020][ T5839] dump_stack_lvl+0x16c/0x1f0 [ 371.013072][ T5839] f2fs_handle_critical_error+0x621/0x9f0 [ 371.013108][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.013142][ T5839] ? f2fs_build_fault_attr+0x53/0x1f0 [ 371.013178][ T5839] f2fs_write_end_io+0x785/0xc20 [ 371.013217][ T5839] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 371.013258][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.013299][ T5839] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 371.013334][ T5839] bio_endio+0x70d/0x850 [ 371.013366][ T5839] submit_bio_noacct+0x56d/0x1eb0 [ 371.013411][ T5839] __submit_merged_bio+0x33c/0x770 [ 371.013462][ T5839] __submit_merged_write_cond+0x319/0x3f0 [ 371.013508][ T5839] f2fs_write_cache_pages+0x2067/0x2570 [ 371.013571][ T5839] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 371.013619][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.013653][ T5839] ? __lock_acquire+0x622/0x1c90 [ 371.013706][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.013802][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.013835][ T5839] ? mod_memcg_lruvec_state+0x394/0x610 [ 371.013886][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.013926][ T5839] f2fs_write_data_pages+0x4ad/0xd90 [ 371.013975][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 371.014015][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014057][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014094][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 371.014139][ T5839] do_writepages+0x27a/0x600 [ 371.014188][ T5839] ? __pfx_do_writepages+0x10/0x10 [ 371.014229][ T5839] ? do_raw_spin_unlock+0x172/0x230 [ 371.014260][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014293][ T5839] ? _raw_spin_unlock+0x28/0x50 [ 371.014339][ T5839] filemap_fdatawrite_wbc+0x104/0x160 [ 371.014389][ T5839] __filemap_fdatawrite_range+0xb2/0xf0 [ 371.014447][ T5839] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 371.014524][ T5839] ? find_held_lock+0x2b/0x80 [ 371.014559][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014593][ T5839] ? do_raw_spin_unlock+0x172/0x230 [ 371.014623][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014662][ T5839] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 371.014721][ T5839] block_operations+0x2a3/0xfd0 [ 371.014763][ T5839] ? __pfx_stack_trace_save+0x10/0x10 [ 371.014804][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014841][ T5839] ? __pfx_block_operations+0x10/0x10 [ 371.014927][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.014960][ T5839] ? down_write+0x14d/0x200 [ 371.014989][ T5839] ? __pfx_down_write+0x10/0x10 [ 371.015021][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.015054][ T5839] ? rcu_is_watching+0x12/0xc0 [ 371.015093][ T5839] f2fs_write_checkpoint+0x2b8/0x4c60 [ 371.015144][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.015176][ T5839] ? kfree+0x2b4/0x4d0 [ 371.015217][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.015250][ T5839] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.015293][ T5839] ? f2fs_stop_gc_thread+0x79/0xd0 [ 371.015322][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.015364][ T5839] kill_f2fs_super+0x3c2/0x470 [ 371.015410][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 371.015457][ T5839] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.015516][ T5839] deactivate_locked_super+0xc1/0x1a0 [ 371.015546][ T5839] deactivate_super+0xde/0x100 [ 371.015576][ T5839] cleanup_mnt+0x225/0x450 [ 371.015609][ T5839] task_work_run+0x150/0x240 [ 371.015639][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 371.015665][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.015702][ T5839] ? __pfx___x64_sys_umount+0x10/0x10 [ 371.015743][ T5839] exit_to_user_mode_loop+0xeb/0x110 [ 371.015776][ T5839] do_syscall_64+0x3f6/0x4c0 [ 371.015806][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.015834][ T5839] RIP: 0033:0x7f2cb7d8fc57 [ 371.015857][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 371.015884][ T5839] RSP: 002b:00007fff7be520d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 371.015910][ T5839] RAX: 0000000000000000 RBX: 00007f2cb7e10925 RCX: 00007f2cb7d8fc57 [ 371.015929][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7be52190 [ 371.015946][ T5839] RBP: 00007fff7be52190 R08: 0000000000000000 R09: 0000000000000000 [ 371.015963][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7be53220 [ 371.015981][ T5839] R13: 00007f2cb7e10925 R14: 000000000005a7b4 R15: 00007fff7be53260 [ 371.016018][ T5839] [ 371.016028][ T5839] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 371.731579][ T8049] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 371.738264][ T8049] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 371.750276][ T8049] vhci_hcd vhci_hcd.0: Device attached [ 371.827318][ T8054] loop1: detected capacity change from 0 to 256 [ 371.848395][ T8049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 371.909491][ T8049] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 371.916172][ T8049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 371.931764][ T9] vhci_hcd: vhci_device speed not set [ 371.976073][ T8054] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 372.021024][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 372.062191][ T8049] vhci_hcd vhci_hcd.0: Device attached [ 372.137037][ T8057] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 372.143706][ T8057] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.164200][ T30] audit: type=1800 audit(1749822066.248:18): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.601" name="file1" dev="loop1" ino=1048629 res=0 errno=0 [ 372.224070][ T8057] vhci_hcd vhci_hcd.0: Device attached [ 372.434496][ T8067] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.719583][ T8069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 372.730854][ T8069] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 373.632758][ T8071] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 374.649640][ T8049] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 374.656328][ T8049] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 374.775328][ T8049] vhci_hcd vhci_hcd.0: Device attached [ 374.878236][ T8065] vhci_hcd: connection closed [ 374.880336][ T8055] vhci_hcd: connection closed [ 374.885365][ T8058] vhci_hcd: connection closed [ 374.891207][ T8051] vhci_hcd: connection reset by peer [ 374.916423][ T6346] vhci_hcd: stop threads [ 374.927590][ T6346] vhci_hcd: release socket [ 374.983749][ T6346] vhci_hcd: disconnect device [ 375.021137][ T6346] vhci_hcd: stop threads [ 375.058544][ T6346] vhci_hcd: release socket [ 375.089040][ T6346] vhci_hcd: disconnect device [ 375.621666][ T6346] vhci_hcd: stop threads [ 375.625984][ T6346] vhci_hcd: release socket [ 375.640935][ T6346] vhci_hcd: disconnect device [ 375.646503][ T6346] vhci_hcd: stop threads [ 375.657157][ T6346] vhci_hcd: release socket [ 375.662100][ T6346] vhci_hcd: disconnect device [ 377.871967][ T9] vhci_hcd: vhci_device speed not set [ 378.572680][ T8115] loop2: detected capacity change from 0 to 8 [ 378.618697][ T8115] squashfs image failed sanity check [ 379.773616][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'. [ 379.787834][ T8125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 379.799127][ T8125] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 380.998501][ T8117] loop1: detected capacity change from 0 to 1024 [ 381.236212][ T3993] hfsplus: b-tree write err: -5, ino 4 [ 382.330419][ T8140] netlink: 'syz.5.622': attribute type 7 has an invalid length. [ 382.743044][ T8133] [U] ¦ [ 383.243442][ T8141] loop1: detected capacity change from 0 to 1024 [ 383.707838][ T12] hfsplus: b-tree write err: -5, ino 4 [ 384.001099][ T8155] loop1: detected capacity change from 0 to 256 [ 384.024835][ T8155] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.142817][ T30] audit: type=1326 audit(1749822078.208:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4138e929 code=0x7ffc0000 [ 384.194266][ T8155] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 384.206906][ T30] audit: type=1326 audit(1749822078.208:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4138e929 code=0x7ffc0000 [ 384.384884][ T8155] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 384.409642][ T30] audit: type=1326 audit(1749822078.208:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4138e929 code=0x7ffc0000 [ 384.609866][ T6346] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 384.630409][ T30] audit: type=1326 audit(1749822078.208:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb4132ab19 code=0x7ffc0000 [ 384.760020][ T30] audit: type=1326 audit(1749822078.208:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb4132ab19 code=0x7ffc0000 [ 385.041606][ T30] audit: type=1326 audit(1749822078.218:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb4132ab19 code=0x7ffc0000 [ 385.181666][ T30] audit: type=1326 audit(1749822078.218:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4138e929 code=0x7ffc0000 [ 385.309085][ T30] audit: type=1326 audit(1749822078.218:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4138e929 code=0x7ffc0000 [ 385.579039][ T8176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 385.591223][ T8176] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 386.492135][ T30] audit: type=1326 audit(1749822078.218:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb4132ab19 code=0x7ffc0000 [ 386.588328][ T30] audit: type=1326 audit(1749822078.218:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4138e929 code=0x7ffc0000 [ 388.097771][ T8192] loop0: detected capacity change from 0 to 1024 [ 388.179960][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.210315][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.850653][ T8198] loop4: detected capacity change from 0 to 1024 [ 388.992843][ T8198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.112802][ T8198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 389.219183][ T8195] loop1: detected capacity change from 0 to 40427 [ 389.230158][ T8195] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 389.230744][ T12] hfsplus: b-tree write err: -5, ino 4 [ 389.238022][ T8195] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 389.292105][ T8195] F2FS-fs (loop1): invalid crc value [ 389.674272][ T8195] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 389.681788][ T8195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 389.978503][ T8214] loop5: detected capacity change from 0 to 8 [ 391.406404][ T8222] loop8: detected capacity change from 0 to 16384 [ 391.553360][ T8222] loop8: detected capacity change from 16384 to 16298 [ 391.603873][ T8222] [ 391.606269][ T8222] ====================================================== [ 391.613309][ T8222] WARNING: possible circular locking dependency detected [ 391.620356][ T8222] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 391.627504][ T8222] ------------------------------------------------------ [ 391.634549][ T8222] syz.5.649/8222 is trying to acquire lock: [ 391.640467][ T8222] ffffffff908b47a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 391.650304][ T8222] [ 391.650304][ T8222] but task is already holding lock: [ 391.657702][ T8222] ffff888142b3ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 391.669050][ T8222] [ 391.669050][ T8222] which lock already depends on the new lock. [ 391.669050][ T8222] [ 391.679481][ T8222] [ 391.679481][ T8222] the existing dependency chain (in reverse order) is: [ 391.688513][ T8222] [ 391.688513][ T8222] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 391.697188][ T8222] blk_alloc_queue+0x619/0x760 [ 391.702511][ T8222] blk_mq_alloc_queue+0x175/0x290 [ 391.708096][ T8222] __blk_mq_alloc_disk+0x29/0x120 [ 391.713695][ T8222] loop_add+0x49e/0xb70 [ 391.718407][ T8222] loop_init+0x164/0x270 [ 391.723212][ T8222] do_one_initcall+0x123/0x6e0 [ 391.728520][ T8222] kernel_init_freeable+0x5c2/0x900 [ 391.734279][ T8222] kernel_init+0x1c/0x2b0 [ 391.739165][ T8222] ret_from_fork+0x5d7/0x6f0 [ 391.744323][ T8222] ret_from_fork_asm+0x1a/0x30 [ 391.749662][ T8222] [ 391.749662][ T8222] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 391.756938][ T8222] fs_reclaim_acquire+0x102/0x150 [ 391.762537][ T8222] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 391.768903][ T8222] __alloc_skb+0x2b2/0x380 [ 391.773885][ T8222] alloc_uevent_skb+0x7d/0x210 [ 391.779204][ T8222] kobject_uevent_env+0xca4/0x1870 [ 391.784873][ T8222] kobject_synth_uevent+0x7d4/0x8a0 [ 391.790626][ T8222] bus_uevent_store+0x3d/0x90 [ 391.795869][ T8222] bus_attr_store+0x74/0xb0 [ 391.800926][ T8222] sysfs_kf_write+0xf2/0x150 [ 391.806068][ T8222] kernfs_fop_write_iter+0x354/0x510 [ 391.811930][ T8222] vfs_write+0x6c7/0x1150 [ 391.816838][ T8222] ksys_write+0x12a/0x250 [ 391.821717][ T8222] do_syscall_64+0xcd/0x4c0 [ 391.826766][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.833204][ T8222] [ 391.833204][ T8222] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 391.841097][ T8222] __lock_acquire+0x126f/0x1c90 [ 391.846523][ T8222] lock_acquire+0x179/0x350 [ 391.851619][ T8222] __mutex_lock+0x199/0xb90 [ 391.856692][ T8222] kobject_uevent_env+0xb36/0x1870 [ 391.862357][ T8222] set_capacity_and_notify+0x1ca/0x240 [ 391.868368][ T8222] loop_set_status+0x94c/0xb90 [ 391.873687][ T8222] loop_set_status_old+0x162/0x1d0 [ 391.879351][ T8222] lo_ioctl+0xb3f/0x2760 [ 391.884143][ T8222] blkdev_ioctl+0x277/0x6d0 [ 391.889193][ T8222] __x64_sys_ioctl+0x18e/0x210 [ 391.894518][ T8222] do_syscall_64+0xcd/0x4c0 [ 391.899564][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.906003][ T8222] [ 391.906003][ T8222] other info that might help us debug this: [ 391.906003][ T8222] [ 391.916243][ T8222] Chain exists of: [ 391.916243][ T8222] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 391.916243][ T8222] [ 391.930049][ T8222] Possible unsafe locking scenario: [ 391.930049][ T8222] [ 391.937511][ T8222] CPU0 CPU1 [ 391.942884][ T8222] ---- ---- [ 391.948253][ T8222] lock(&q->q_usage_counter(io)#25); [ 391.953687][ T8222] lock(fs_reclaim); [ 391.960217][ T8222] lock(&q->q_usage_counter(io)#25); [ 391.968158][ T8222] lock(uevent_sock_mutex); [ 391.972780][ T8222] [ 391.972780][ T8222] *** DEADLOCK *** [ 391.972780][ T8222] [ 391.980937][ T8222] 3 locks held by syz.5.649/8222: [ 391.985981][ T8222] #0: ffff888142b67400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 391.995471][ T8222] #1: ffff888142b3ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 392.007230][ T8222] #2: ffff888142b3ec78 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 392.019258][ T8222] [ 392.019258][ T8222] stack backtrace: [ 392.025164][ T8222] CPU: 0 UID: 0 PID: 8222 Comm: syz.5.649 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 392.025211][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.025232][ T8222] Call Trace: [ 392.025245][ T8222] [ 392.025259][ T8222] dump_stack_lvl+0x116/0x1f0 [ 392.025323][ T8222] print_circular_bug+0x275/0x350 [ 392.025378][ T8222] check_noncircular+0x14c/0x170 [ 392.025438][ T8222] __lock_acquire+0x126f/0x1c90 [ 392.025500][ T8222] lock_acquire+0x179/0x350 [ 392.025553][ T8222] ? kobject_uevent_env+0xb36/0x1870 [ 392.025596][ T8222] ? __pfx___might_resched+0x10/0x10 [ 392.025730][ T8222] __mutex_lock+0x199/0xb90 [ 392.025763][ T8222] ? kobject_uevent_env+0xb36/0x1870 [ 392.025804][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.025848][ T8222] ? kobject_uevent_env+0xb36/0x1870 [ 392.025892][ T8222] ? __pfx___mutex_lock+0x10/0x10 [ 392.025932][ T8222] ? __asan_memcpy+0x3c/0x60 [ 392.025963][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026004][ T8222] ? kobject_get_path+0x8e/0x2a0 [ 392.026041][ T8222] ? kobject_uevent_env+0xb36/0x1870 [ 392.026081][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026123][ T8222] kobject_uevent_env+0xb36/0x1870 [ 392.026168][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026215][ T8222] set_capacity_and_notify+0x1ca/0x240 [ 392.026262][ T8222] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 392.026307][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026348][ T8222] ? __asan_memcpy+0x3c/0x60 [ 392.026381][ T8222] loop_set_status+0x94c/0xb90 [ 392.026431][ T8222] loop_set_status_old+0x162/0x1d0 [ 392.026473][ T8222] ? __pfx_loop_set_status_old+0x10/0x10 [ 392.026516][ T8222] ? __lock_acquire+0x622/0x1c90 [ 392.026580][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026621][ T8222] ? find_held_lock+0x2b/0x80 [ 392.026671][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026734][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026775][ T8222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.026816][ T8222] lo_ioctl+0xb3f/0x2760 [ 392.026855][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026897][ T8222] ? __lock_acquire+0xb8a/0x1c90 [ 392.026951][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.026992][ T8222] ? kasan_save_stack+0x42/0x60 [ 392.027028][ T8222] ? kasan_save_stack+0x33/0x60 [ 392.027062][ T8222] ? kasan_save_track+0x14/0x30 [ 392.027097][ T8222] ? kasan_save_free_info+0x3b/0x60 [ 392.027149][ T8222] ? __kasan_slab_free+0x51/0x70 [ 392.027186][ T8222] ? kfree+0x2b4/0x4d0 [ 392.027238][ T8222] ? tomoyo_path_number_perm+0x470/0x580 [ 392.027277][ T8222] ? security_file_ioctl+0x9b/0x240 [ 392.027317][ T8222] ? __x64_sys_ioctl+0xb7/0x210 [ 392.027371][ T8222] ? do_syscall_64+0xcd/0x4c0 [ 392.027403][ T8222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.027445][ T8222] ? __pfx_lo_ioctl+0x10/0x10 [ 392.027503][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027546][ T8222] ? kasan_quarantine_put+0x10a/0x240 [ 392.027580][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027622][ T8222] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.027681][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027725][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027766][ T8222] ? find_held_lock+0x2b/0x80 [ 392.027807][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027853][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027895][ T8222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.027933][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.027974][ T8222] ? blkdev_common_ioctl+0x1dd/0x2480 [ 392.028014][ T8222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.028053][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.028094][ T8222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.028133][ T8222] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 392.028176][ T8222] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 392.028246][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.028287][ T8222] ? find_held_lock+0x2b/0x80 [ 392.028327][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.028370][ T8222] ? __pfx_lo_ioctl+0x10/0x10 [ 392.028412][ T8222] blkdev_ioctl+0x277/0x6d0 [ 392.028451][ T8222] ? __pfx_blkdev_ioctl+0x10/0x10 [ 392.028494][ T8222] ? __pfx_blkdev_ioctl+0x10/0x10 [ 392.028535][ T8222] __x64_sys_ioctl+0x18e/0x210 [ 392.028593][ T8222] do_syscall_64+0xcd/0x4c0 [ 392.028627][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.028666][ T8222] RIP: 0033:0x7feb4138e929 [ 392.028692][ T8222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.028726][ T8222] RSP: 002b:00007feb422af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.028758][ T8222] RAX: ffffffffffffffda RBX: 00007feb415b5fa0 RCX: 00007feb4138e929 [ 392.028781][ T8222] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000003 [ 392.028803][ T8222] RBP: 00007feb41410b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.028824][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.028845][ T8222] R13: 0000000000000000 R14: 00007feb415b5fa0 R15: 00007ffd5336e138 [ 392.028879][ T8222] [ 392.530017][ T8224] loop0: detected capacity change from 0 to 512 [ 392.876057][ T8230] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.887286][ T8230] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 393.199128][ T8224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.307734][ T8224] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.608646][ T8238] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 393.608646][ T8238] The task syz.0.651 (8238) triggered the difference, watch for misbehavior. [ 394.209841][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.373412][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.