last executing test programs: 9.886312428s ago: executing program 5 (id=1048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x10, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @timestamp={0x8, 0xa, 0x2, 0x2}, @exp_smc={0xfe, 0x6}, @eol, @fastopen={0x22, 0x4, "5881"}, @exp_fastopen={0xfe, 0x7, 0xf989, "898833"}, @exp_fastopen={0xfe, 0x10, 0xf989, "f7adc202430a2ee32c9355e4"}, @mptcp=@capable={0x1e, 0x14, 0x4, 0x1, 0x40, 0x1, [0x9a]}]}}}}}}}, 0x0) 8.248873935s ago: executing program 5 (id=1056): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000400)) 7.583531768s ago: executing program 5 (id=1061): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) 6.602331778s ago: executing program 2 (id=1068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911014000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.332733754s ago: executing program 2 (id=1069): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 6.092651305s ago: executing program 2 (id=1072): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6.07221472s ago: executing program 5 (id=1073): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) 5.953317241s ago: executing program 5 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0xc050) 5.778823282s ago: executing program 5 (id=1076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 5.696565501s ago: executing program 4 (id=1077): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1c3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) unshare(0x64000600) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) 3.95202773s ago: executing program 2 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) io_uring_enter(0xffffffffffffffff, 0x66a8, 0x4000, 0xf, 0x0, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) 2.720176135s ago: executing program 2 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 2.700007926s ago: executing program 4 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0xc050) 2.320107443s ago: executing program 2 (id=1091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r3, 0x2004, 0x0) fsopen(0x0, 0x1) 2.302662685s ago: executing program 4 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005b80)={0x58, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 2.111123541s ago: executing program 4 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 1.972734985s ago: executing program 3 (id=1098): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) sendto$l2tp6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000002c0)={0xa, 0x0, 0x5, @private2, 0xffff8000, 0x2}, 0x20) 1.8134515s ago: executing program 4 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.770200323s ago: executing program 1 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) io_uring_enter(0xffffffffffffffff, 0x66a8, 0x4000, 0xf, 0x0, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) 1.74447286s ago: executing program 3 (id=1101): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x14, 0x0, 0x8d61ddcfedb48df}, 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) 1.499981961s ago: executing program 3 (id=1103): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) 1.48109587s ago: executing program 0 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 1.478485272s ago: executing program 1 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0xc050) 1.289211113s ago: executing program 4 (id=1106): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x8) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_sync_file_enter\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) getdents(r3, &(0x7f00000007c0)=""/157, 0x9d) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.25554145s ago: executing program 1 (id=1107): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) close(r0) 1.176674962s ago: executing program 3 (id=1108): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005b80)={0x58, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 1.080780517s ago: executing program 1 (id=1109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x7}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x157, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x121, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1f, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b"}]}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) io_setup(0x2, &(0x7f0000000000)=0x0) r7 = eventfd(0x0) io_submit(r6, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xc4, r7, 0x0, 0x0, 0x3, 0x0, 0x1996db1c96311468}, &(0x7f0000000140)={0x0, 0x0, 0xfe, 0x5, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) syz_clone3(0x0, 0x0) 1.079296866s ago: executing program 0 (id=1110): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 955.924649ms ago: executing program 3 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mlockall(0x6) 811.203668ms ago: executing program 0 (id=1112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffd}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r1) 336.713343ms ago: executing program 0 (id=1113): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 315.611186ms ago: executing program 0 (id=1114): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 220.90482ms ago: executing program 1 (id=1115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) 124.689682ms ago: executing program 3 (id=1116): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x1c, &(0x7f0000000000)="091a146330ef983e408be02376ef9b07287000d9e1619d4a214e4d13"}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 106.065584ms ago: executing program 1 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000200", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xad, &(0x7f0000000300)=ANY=[], 0x0) 0s ago: executing program 0 (id=1118): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r5, r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x54e, @private1={0xfc, 0x1, '\x00', 0x19}, 0x20, 0x4}, 0x20) kernel console output (not intermixed with test programs): 0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 163.210125][ T6898] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.281263][ T6898] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 163.287119][ T6898] Node 0 DMA32 free:1274692kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48884kB inactive_anon:0kB active_file:15156kB inactive_file:160160kB unevictable:1536kB writepending:808kB zspages:0kB present:3129332kB managed:2543524kB mlocked:0kB bounce:0kB free_pcp:35048kB local_pcp:13080kB free_cma:0kB [ 163.350477][ T6898] lowmem_reserve[]: 0 0 1 1 1 [ 163.355293][ T6898] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.422257][ T6898] lowmem_reserve[]: 0 0 0 0 0 [ 163.427069][ T6898] Node 1 Normal free:3891160kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:12352kB free_cma:0kB [ 163.540487][ T6898] lowmem_reserve[]: 0 0 0 0 0 [ 163.551596][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 163.551619][ T30] audit: type=1326 audit(1760491607.692:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.561864][ T6898] Node 0 [ 163.584830][ T6919] netlink: 96 bytes leftover after parsing attributes in process `syz.0.337'. [ 163.619853][ T30] audit: type=1326 audit(1760491607.692:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.642728][ T6898] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 163.644301][ T30] audit: type=1326 audit(1760491607.722:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.752818][ T30] audit: type=1326 audit(1760491607.722:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.759568][ T6898] Node 0 DMA32: 840*4kB (M) 251*8kB (ME) 155*16kB (ME) 27*32kB (UME) 5*64kB (M) 5*128kB (M) 1*256kB (M) 4*512kB (UM) 5*1024kB (UM) 3*2048kB (UME) 306*4096kB (UM) = 1276616kB [ 163.839931][ T30] audit: type=1326 audit(1760491607.722:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.887606][ T6898] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 163.925825][ T30] audit: type=1326 audit(1760491607.722:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.960860][ T30] audit: type=1326 audit(1760491607.742:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 163.973229][ T6898] Node 1 [ 164.034666][ T30] audit: type=1326 audit(1760491607.742:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 164.043026][ T6898] Normal: 200*4kB (U) 53*8kB (UME) 37*16kB (UME) 82*32kB (UME) 26*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891160kB [ 164.092442][ T30] audit: type=1326 audit(1760491607.742:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 164.101683][ T6052] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 164.115271][ T30] audit: type=1326 audit(1760491607.742:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb80a18d617 code=0x7ffc0000 [ 164.175236][ T6052] EXT4-fs (loop2): This should not happen!! Data will be lost [ 164.175236][ T6052] [ 164.185031][ T6052] EXT4-fs (loop2): Total free blocks count 0 [ 164.188820][ T6898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.191492][ T6052] EXT4-fs (loop2): Free/Dirty block details [ 164.206976][ T6052] EXT4-fs (loop2): free_blocks=2415919504 [ 164.212757][ T6052] EXT4-fs (loop2): dirty_blocks=16 [ 164.220421][ T6052] EXT4-fs (loop2): Block reservation details [ 164.228161][ T6052] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 164.235688][ T6898] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.260795][ T6898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.270497][ T6898] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.279819][ T6898] 48607 total pagecache pages [ 164.290895][ T6898] 0 pages in swap cache [ 164.295087][ T6898] Free swap = 124996kB [ 164.299251][ T6898] Total swap = 124996kB [ 164.303589][ T6898] 2097051 pages RAM [ 164.307411][ T6898] 0 pages HighMem/MovableOnly [ 164.337613][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.373028][ T6898] 429080 pages reserved [ 164.400613][ T6898] 0 pages cma reserved [ 164.830839][ T6935] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 164.847783][ T6934] loop9: detected capacity change from 0 to 8 [ 164.865417][ C1] blk_print_req_error: 5 callbacks suppressed [ 164.865443][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.881800][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.890574][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.900834][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.920363][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.920410][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.931429][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.931478][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.932529][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.932573][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.942447][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.942501][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.943913][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.015599][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.038635][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.048947][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.056851][ T6934] ldm_validate_partition_table(): Disk read failed. [ 165.070705][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.081158][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.091708][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.101929][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.120722][ T6934] Dev loop9: unable to read RDB block 0 [ 165.139067][ T6934] loop9: unable to read partition table [ 165.173199][ T6934] loop9: partition table beyond EOD, truncated [ 165.179401][ T6934] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.179401][ T6934] ) failed (rc=-5) [ 165.669060][ T6893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.987039][ T6945] vxcan0: tx address claim with dlc 0 [ 166.049628][ T6893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.482998][ T6893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.813309][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 166.862541][ T6961] loop1: detected capacity change from 0 to 2048 [ 166.916161][ T6893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.963187][ T6961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.450601][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.635196][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.663538][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.745952][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.882742][ T6986] loop2: detected capacity change from 0 to 1764 [ 168.474413][ T6989] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 168.921808][ T6989] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 168.936334][ T6989] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.936334][ T6989] [ 168.948206][ T6989] EXT4-fs (loop1): Total free blocks count 0 [ 168.961120][ T6989] EXT4-fs (loop1): Free/Dirty block details [ 168.965578][ T6997] loop0: detected capacity change from 0 to 128 [ 168.967606][ T6989] EXT4-fs (loop1): free_blocks=2415919504 [ 168.991194][ T6989] EXT4-fs (loop1): dirty_blocks=208 [ 168.996446][ T6989] EXT4-fs (loop1): Block reservation details [ 169.032116][ T6989] EXT4-fs (loop1): i_reserved_data_blocks=13 [ 169.060651][ T6997] bio_check_eod: 2 callbacks suppressed [ 169.060678][ T6997] syz.0.365: attempt to access beyond end of device [ 169.060678][ T6997] loop0: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 169.103058][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 169.103083][ T30] audit: type=1326 audit(1760491613.232:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff22cd85d67 code=0x7ffc0000 [ 169.156911][ T6997] syz.0.365: attempt to access beyond end of device [ 169.156911][ T6997] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 169.210642][ T30] audit: type=1326 audit(1760491613.232:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff22cd2af79 code=0x7ffc0000 [ 169.234156][ T6997] syz.0.365: attempt to access beyond end of device [ 169.234156][ T6997] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 169.299486][ T30] audit: type=1326 audit(1760491613.232:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 169.340534][ T7008] syz.0.365: attempt to access beyond end of device [ 169.340534][ T7008] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 169.380720][ T6997] syz.0.365: attempt to access beyond end of device [ 169.380720][ T6997] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 169.404563][ T30] audit: type=1326 audit(1760491613.232:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff22cd85d67 code=0x7ffc0000 [ 169.441453][ T7008] syz.0.365: attempt to access beyond end of device [ 169.441453][ T7008] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 169.459640][ T6997] syz.0.365: attempt to access beyond end of device [ 169.459640][ T6997] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 169.473471][ T30] audit: type=1326 audit(1760491613.232:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff22cd2af79 code=0x7ffc0000 [ 169.526091][ T30] audit: type=1326 audit(1760491613.232:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff22cd85d67 code=0x7ffc0000 [ 169.552019][ T6997] syz.0.365: attempt to access beyond end of device [ 169.552019][ T6997] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 169.605392][ T5842] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 169.635708][ T5842] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.643491][ T6997] syz.0.365: attempt to access beyond end of device [ 169.643491][ T6997] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 169.656294][ T30] audit: type=1326 audit(1760491613.232:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff22cd2af79 code=0x7ffc0000 [ 169.726996][ T30] audit: type=1326 audit(1760491613.232:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff22cd85d67 code=0x7ffc0000 [ 169.732891][ T6997] syz.0.365: attempt to access beyond end of device [ 169.732891][ T6997] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 169.791268][ T7018] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.829406][ T30] audit: type=1326 audit(1760491613.232:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff22cd2af79 code=0x7ffc0000 [ 169.919729][ T30] audit: type=1326 audit(1760491613.232:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.5.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff22cd85d67 code=0x7ffc0000 [ 169.984614][ T1159] buffer_io_error: 5 callbacks suppressed [ 169.984641][ T1159] Buffer I/O error on dev loop0, logical block 305, lost async page write [ 170.506177][ T7026] loop3: detected capacity change from 0 to 2048 [ 170.532352][ T7026] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.555821][ T7026] EXT4-fs: Ignoring removed i_version option [ 170.603365][ T7026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.082616][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.535243][ T2995] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 171.725263][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 171.987783][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 172.014249][ T7055] 9pnet_fd: p9_fd_create_unix (7055): problem connecting socket: ./file0: -2 [ 172.376408][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 172.850906][ T7075] netlink: 44 bytes leftover after parsing attributes in process `syz.3.392'. [ 173.678817][ T6032] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 173.719736][ T6032] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.281197][ T7120] netlink: 96 bytes leftover after parsing attributes in process `syz.3.409'. [ 175.340726][ T7122] loop4: detected capacity change from 0 to 128 [ 175.433943][ T7122] bio_check_eod: 2 callbacks suppressed [ 175.433971][ T7122] syz.4.410: attempt to access beyond end of device [ 175.433971][ T7122] loop4: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 175.465275][ T7122] syz.4.410: attempt to access beyond end of device [ 175.465275][ T7122] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 175.550655][ T7122] syz.4.410: attempt to access beyond end of device [ 175.550655][ T7122] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 175.607106][ T7126] syz.4.410: attempt to access beyond end of device [ 175.607106][ T7126] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 175.640597][ T7122] syz.4.410: attempt to access beyond end of device [ 175.640597][ T7122] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 175.712925][ T7126] syz.4.410: attempt to access beyond end of device [ 175.712925][ T7126] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 175.760611][ T7122] syz.4.410: attempt to access beyond end of device [ 175.760611][ T7122] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 175.808071][ T7122] syz.4.410: attempt to access beyond end of device [ 175.808071][ T7122] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 175.855558][ T7132] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 175.884017][ T7132] loop9: detected capacity change from 0 to 8 [ 175.891014][ T7122] syz.4.410: attempt to access beyond end of device [ 175.891014][ T7122] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 175.918391][ T7122] syz.4.410: attempt to access beyond end of device [ 175.918391][ T7122] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 175.922576][ C1] blk_print_req_error: 5 callbacks suppressed [ 175.922598][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.948045][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.965649][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.965705][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.980192][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.980246][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.021825][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.021881][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.026694][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.026745][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.035384][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.035438][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.079063][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.079120][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.079381][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.079430][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.079524][ T7132] ldm_validate_partition_table(): Disk read failed. [ 176.079700][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.079745][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.079965][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.080009][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.080829][ T7132] Dev loop9: unable to read RDB block 0 [ 176.081455][ T7132] loop9: unable to read partition table [ 176.081701][ T7132] loop9: partition table beyond EOD, truncated [ 176.081729][ T7132] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 176.081729][ T7132] ) failed (rc=-5) [ 176.476865][ T7149] 9pnet_fd: p9_fd_create_unix (7149): problem connecting socket: ./file0: -2 [ 176.578326][ T5829] EXT4-fs: 7 callbacks suppressed [ 176.578353][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.103686][ T6032] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 177.140705][ T6032] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.169281][ T7172] loop3: detected capacity change from 0 to 128 [ 177.428858][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.432'. [ 178.046239][ T7183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.140745][ T7191] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 178.155769][ T7191] loop9: detected capacity change from 0 to 8 [ 178.167290][ T7191] ldm_validate_partition_table(): Disk read failed. [ 178.177571][ T7191] Dev loop9: unable to read RDB block 0 [ 178.189588][ T7191] loop9: unable to read partition table [ 178.216230][ T7191] loop9: partition table beyond EOD, truncated [ 178.238441][ T7191] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.238441][ T7191] ) failed (rc=-5) [ 178.299147][ T7183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.303765][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 178.566397][ T7183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.753280][ T7207] netlink: 44 bytes leftover after parsing attributes in process `syz.3.446'. [ 178.759060][ T7183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.032730][ T7214] loop4: detected capacity change from 0 to 128 [ 179.052310][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.156640][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.199897][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.230998][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.358153][ T7228] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 179.390473][ T7228] loop9: detected capacity change from 0 to 8 [ 179.409435][ T7228] ldm_validate_partition_table(): Disk read failed. [ 179.422349][ T7228] Dev loop9: unable to read RDB block 0 [ 179.440921][ T7228] loop9: unable to read partition table [ 179.465636][ T7228] loop9: partition table beyond EOD, truncated [ 179.465674][ T7228] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 179.465674][ T7228] ) failed (rc=-5) [ 179.816889][ T6032] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.880689][ T6032] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.503414][ T7273] loop2: detected capacity change from 0 to 128 [ 180.625715][ T7275] bio_check_eod: 1523 callbacks suppressed [ 180.625741][ T7275] syz.2.472: attempt to access beyond end of device [ 180.625741][ T7275] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 180.652490][ T7275] syz.2.472: attempt to access beyond end of device [ 180.652490][ T7275] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 180.666902][ T7275] syz.2.472: attempt to access beyond end of device [ 180.666902][ T7275] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 180.680876][ T7275] syz.2.472: attempt to access beyond end of device [ 180.680876][ T7275] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 180.697237][ T7275] syz.2.472: attempt to access beyond end of device [ 180.697237][ T7275] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 180.730893][ T7275] syz.2.472: attempt to access beyond end of device [ 180.730893][ T7275] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 181.065451][ T7283] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 181.113635][ T7283] loop9: detected capacity change from 0 to 8 [ 181.142434][ C1] blk_print_req_error: 35 callbacks suppressed [ 181.142463][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.158908][ C1] buffer_io_error: 1508 callbacks suppressed [ 181.158933][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.173618][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.183927][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.193301][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.203596][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.212077][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.212127][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.217549][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.217606][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.240374][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.240430][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.240820][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.240867][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.241114][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.241158][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.241253][ T7283] ldm_validate_partition_table(): Disk read failed. [ 181.368962][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'. [ 181.392006][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.402296][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.415087][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.425349][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.440559][ T7283] Dev loop9: unable to read RDB block 0 [ 181.454869][ T7283] loop9: unable to read partition table [ 181.471145][ T7283] loop9: partition table beyond EOD, truncated [ 181.480535][ T7283] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 181.480535][ T7283] ) failed (rc=-5) [ 181.967750][ T7309] loop1: detected capacity change from 0 to 128 [ 182.091135][ T7321] syz.1.489: attempt to access beyond end of device [ 182.091135][ T7321] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 182.101667][ T5941] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 182.128390][ T5941] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.179092][ T7321] syz.1.489: attempt to access beyond end of device [ 182.179092][ T7321] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 182.211412][ T7321] syz.1.489: attempt to access beyond end of device [ 182.211412][ T7321] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 182.280816][ T7321] syz.1.489: attempt to access beyond end of device [ 182.280816][ T7321] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 182.542025][ T7334] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 182.585295][ T7334] loop9: detected capacity change from 0 to 8 [ 182.612019][ T7334] ldm_validate_partition_table(): Disk read failed. [ 182.620170][ T7334] Dev loop9: unable to read RDB block 0 [ 182.626564][ T7334] loop9: unable to read partition table [ 182.654152][ T7334] loop9: partition table beyond EOD, truncated [ 182.677168][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 182.677194][ T30] audit: type=1326 audit(1760491626.812:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 182.750488][ T30] audit: type=1326 audit(1760491626.812:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 182.772026][ T7334] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 182.772026][ T7334] ) failed (rc=-5) [ 182.785890][ T30] audit: type=1326 audit(1760491626.812:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 182.785970][ T30] audit: type=1326 audit(1760491626.812:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 182.786038][ T30] audit: type=1326 audit(1760491626.812:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 182.811481][ T30] audit: type=1326 audit(1760491626.952:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.5.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 183.027289][ T30] audit: type=1326 audit(1760491627.022:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.5.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 183.093825][ T30] audit: type=1326 audit(1760491627.022:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.5.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 183.138487][ T30] audit: type=1326 audit(1760491627.022:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.5.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 183.226417][ T30] audit: type=1326 audit(1760491627.022:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.5.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 183.250240][ T7357] loop3: detected capacity change from 0 to 512 [ 183.285352][ T7357] EXT4-fs: Ignoring removed bh option [ 183.292611][ T7357] journal_path: Lookup failure for './file0' [ 183.299515][ T7357] EXT4-fs: error: could not find journal device path [ 183.507954][ T7357] loop3: detected capacity change from 0 to 1024 [ 183.543149][ T7357] EXT4-fs: Ignoring removed orlov option [ 183.585582][ T7357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.613579][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 183.729848][ T7370] loop5: detected capacity change from 0 to 128 [ 184.417140][ T7388] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 184.454208][ T7388] loop9: detected capacity change from 0 to 8 [ 184.460808][ T7387] 9p: Unknown access argument : -22 [ 184.475074][ T7388] ldm_validate_partition_table(): Disk read failed. [ 184.496168][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.524217][ T7388] Dev loop9: unable to read RDB block 0 [ 184.561408][ T7388] loop9: unable to read partition table [ 184.584411][ T7388] loop9: partition table beyond EOD, truncated [ 184.596286][ T7388] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 184.596286][ T7388] ) failed (rc=-5) [ 184.633291][ T7395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.521'. [ 184.946747][ T7405] loop2: detected capacity change from 0 to 2048 [ 185.026561][ T5902] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 185.114728][ T5902] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.136998][ T7405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.211939][ T7415] loop1: detected capacity change from 0 to 128 [ 185.630524][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.536'. [ 185.668286][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.536'. [ 185.749286][ T7432] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 185.782975][ T7432] loop9: detected capacity change from 0 to 8 [ 185.806430][ T7432] ldm_validate_partition_table(): Disk read failed. [ 185.820882][ T7432] Dev loop9: unable to read RDB block 0 [ 185.842930][ T7432] loop9: unable to read partition table [ 185.869706][ T7432] loop9: partition table beyond EOD, truncated [ 185.895388][ T7432] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.895388][ T7432] ) failed (rc=-5) [ 186.010080][ T7439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.540'. [ 186.773622][ T7459] loop5: detected capacity change from 0 to 128 [ 186.907920][ T7465] bio_check_eod: 32 callbacks suppressed [ 186.907946][ T7465] syz.5.549: attempt to access beyond end of device [ 186.907946][ T7465] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 186.990825][ T7465] syz.5.549: attempt to access beyond end of device [ 186.990825][ T7465] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 187.383254][ T7468] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 187.398280][ T7468] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 416 with error 28 [ 187.410710][ T7468] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.410710][ T7468] [ 187.420843][ T7468] EXT4-fs (loop2): Total free blocks count 0 [ 187.426850][ T7468] EXT4-fs (loop2): Free/Dirty block details [ 187.432814][ T7468] EXT4-fs (loop2): free_blocks=2415919504 [ 187.438555][ T7468] EXT4-fs (loop2): dirty_blocks=432 [ 187.443872][ T7468] EXT4-fs (loop2): Block reservation details [ 187.449879][ T7468] EXT4-fs (loop2): i_reserved_data_blocks=27 [ 187.482069][ T7465] syz.5.549: attempt to access beyond end of device [ 187.482069][ T7465] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 188.109629][ T7481] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 188.123042][ T7481] loop9: detected capacity change from 0 to 8 [ 188.130036][ C0] blk_print_req_error: 50 callbacks suppressed [ 188.130062][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.146519][ C0] buffer_io_error: 50 callbacks suppressed [ 188.146544][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.220735][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.231069][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.249192][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.259828][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.278028][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.288393][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.312013][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.312075][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.330383][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.330441][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.392933][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.392992][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.431046][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.431103][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.431290][ T7481] ldm_validate_partition_table(): Disk read failed. [ 188.431480][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.431526][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.431793][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.431841][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.441864][ T7481] Dev loop9: unable to read RDB block 0 [ 188.481393][ T5941] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 188.504729][ T5941] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.645408][ T7481] loop9: unable to read partition table [ 188.645708][ T7481] loop9: partition table beyond EOD, truncated [ 188.645741][ T7481] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 188.645741][ T7481] ) failed (rc=-5) [ 188.825931][ T7497] syz.1.561 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.057081][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 189.284946][ T7500] 9pnet_fd: p9_fd_create_unix (7500): problem connecting socket: ./file0: -2 [ 189.389523][ T7503] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.297637][ T7520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.572'. [ 190.420683][ T7522] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 190.427705][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.468635][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 190.486668][ T7528] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 190.493359][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.553044][ T7528] vhci_hcd vhci_hcd.0: Device attached [ 190.643879][ T7522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.677707][ T7533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.576'. [ 190.737372][ T7522] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 190.744036][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.755376][ T7537] loop4: detected capacity change from 0 to 2048 [ 190.768875][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 190.780460][ T5842] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 190.798898][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.819130][ T7522] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(18) [ 190.825805][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.850664][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 190.890900][ T7522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.919475][ T7522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.974916][ T7522] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(28) [ 190.981577][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.023103][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 191.252903][ T7545] vhci_hcd: connection closed [ 191.255168][ T7538] vhci_hcd: connection closed [ 191.255307][ T7530] vhci_hcd: connection closed [ 191.270451][ T7550] vhci_hcd: connection closed [ 191.275423][ T7524] vhci_hcd: connection reset by peer [ 191.286193][ T7553] 9pnet_fd: p9_fd_create_unix (7553): problem connecting socket: ./file0: -2 [ 191.290377][ T13] vhci_hcd: stop threads [ 191.331694][ T13] vhci_hcd: release socket [ 191.337195][ T13] vhci_hcd: disconnect device [ 191.344045][ T13] vhci_hcd: stop threads [ 191.348296][ T13] vhci_hcd: release socket [ 191.360799][ T13] vhci_hcd: disconnect device [ 191.372171][ T13] vhci_hcd: stop threads [ 191.376473][ T13] vhci_hcd: release socket [ 191.392558][ T13] vhci_hcd: disconnect device [ 191.488021][ T13] vhci_hcd: stop threads [ 191.493159][ T13] vhci_hcd: release socket [ 191.505736][ T13] vhci_hcd: disconnect device [ 191.520600][ T13] vhci_hcd: stop threads [ 191.524920][ T13] vhci_hcd: release socket [ 191.529515][ T13] vhci_hcd: disconnect device [ 191.729643][ T7564] loop3: detected capacity change from 0 to 128 [ 191.861982][ T7564] syz.3.584: attempt to access beyond end of device [ 191.861982][ T7564] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 191.948617][ T7564] syz.3.584: attempt to access beyond end of device [ 191.948617][ T7564] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 191.960056][ T7568] loop1: detected capacity change from 0 to 128 [ 192.021787][ T7568] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.043359][ T7568] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.171111][ T7568] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.586: No space for directory leaf checksum. Please run e2fsck -D. [ 192.208463][ T7573] tipc: Enabling of bearer rejected, failed to enable media [ 192.219393][ T7568] EXT4-fs error (device loop1): __ext4_find_entry:1624: inode #2: comm syz.1.586: checksumming directory block 0 [ 192.546671][ T7579] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 192.561641][ T7579] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 512 with error 28 [ 192.574056][ T7579] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.574056][ T7579] [ 192.583796][ T7579] EXT4-fs (loop4): Total free blocks count 0 [ 192.591285][ T7579] EXT4-fs (loop4): Free/Dirty block details [ 192.597202][ T7579] EXT4-fs (loop4): free_blocks=2415919504 [ 192.604252][ T7579] EXT4-fs (loop4): dirty_blocks=528 [ 192.609480][ T7579] EXT4-fs (loop4): Block reservation details [ 192.615546][ T7579] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 192.729873][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.503012][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 193.503040][ T30] audit: type=1326 audit(1760491637.632:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a778eec9 code=0x7ffc0000 [ 194.152600][ T7597] 9pnet_fd: p9_fd_create_unix (7597): problem connecting socket: ./file0: -2 [ 194.367991][ T30] audit: type=1326 audit(1760491637.642:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f86a778eec9 code=0x7ffc0000 [ 194.392655][ T1159] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 30 with error 28 [ 194.400439][ T30] audit: type=1326 audit(1760491637.642:234): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a778eec9 code=0x7ffc0000 [ 194.432752][ T30] audit: type=1326 audit(1760491637.642:235): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a778eec9 code=0x7ffc0000 [ 194.695583][ T7616] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 194.740611][ T7616] loop9: detected capacity change from 0 to 8 [ 194.777333][ C0] blk_print_req_error: 5 callbacks suppressed [ 194.777362][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.793761][ C0] buffer_io_error: 5 callbacks suppressed [ 194.793786][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.812056][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.822392][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.832153][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.842451][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.871537][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.881932][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.891294][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.906543][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.916053][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 194.941148][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.951476][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.959846][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.970203][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.979423][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.989821][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.998028][ T7616] ldm_validate_partition_table(): Disk read failed. [ 195.005651][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.016014][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.024780][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.035135][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.043845][ T7616] Dev loop9: unable to read RDB block 0 [ 195.053527][ T7616] loop9: unable to read partition table [ 195.056972][ T7622] sd 0:0:1:0: device reset [ 195.068382][ T7616] loop9: partition table beyond EOD, truncated [ 195.102166][ T7616] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 195.102166][ T7616] ) failed (rc=-5) [ 195.534561][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 195.564332][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 195.603417][ T30] audit: type=1326 audit(1760491639.742:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.4.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x0 [ 195.873337][ T7643] loop3: detected capacity change from 0 to 2048 [ 195.890908][ T5842] vhci_hcd: vhci_device speed not set [ 195.926362][ T7643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.080487][ T7652] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 196.109486][ T7649] 9pnet_fd: p9_fd_create_unix (7649): problem connecting socket: ./file0: -2 [ 196.679086][ T7664] tipc: Enabling of bearer rejected, failed to enable media [ 196.764956][ T7666] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 196.801381][ T7666] loop9: detected capacity change from 0 to 8 [ 196.823258][ T7666] ldm_validate_partition_table(): Disk read failed. [ 196.861856][ T7666] Dev loop9: unable to read RDB block 0 [ 196.887258][ T7666] loop9: unable to read partition table [ 196.916682][ T7666] loop9: partition table beyond EOD, truncated [ 196.953411][ T7666] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 196.953411][ T7666] ) failed (rc=-5) [ 197.150066][ T7676] loop5: detected capacity change from 0 to 128 [ 197.172112][ T43] usb usb44-port1: attempt power cycle [ 197.247691][ T7676] syz.5.627: attempt to access beyond end of device [ 197.247691][ T7676] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 197.311136][ T7676] syz.5.627: attempt to access beyond end of device [ 197.311136][ T7676] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 197.430615][ T7676] syz.5.627: attempt to access beyond end of device [ 197.430615][ T7676] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 197.481033][ T7676] syz.5.627: attempt to access beyond end of device [ 197.481033][ T7676] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 197.496595][ T7676] syz.5.627: attempt to access beyond end of device [ 197.496595][ T7676] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 197.518105][ T7682] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 197.561119][ T7682] EXT4-fs (loop3): This should not happen!! Data will be lost [ 197.561119][ T7682] [ 197.593785][ T7682] EXT4-fs (loop3): Total free blocks count 0 [ 197.617427][ T7682] EXT4-fs (loop3): Free/Dirty block details [ 197.638221][ T7682] EXT4-fs (loop3): free_blocks=2415919504 [ 197.664518][ T7682] EXT4-fs (loop3): dirty_blocks=464 [ 197.669738][ T7682] EXT4-fs (loop3): Block reservation details [ 197.692265][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 197.720427][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 197.730216][ T7682] EXT4-fs (loop3): i_reserved_data_blocks=29 [ 197.765803][ T30] audit: type=1326 audit(1760491641.892:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.2.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x0 [ 197.791639][ T43] usb usb44-port1: unable to enumerate USB device [ 198.532800][ T7699] 9pnet_fd: p9_fd_create_unix (7699): problem connecting socket: ./file0: -2 [ 198.637215][ T7705] tipc: Started in network mode [ 198.650554][ T7705] tipc: Node identity 5616ef1b4bd3, cluster identity 4711 [ 198.668201][ T7705] tipc: Enabled bearer , priority 0 [ 198.710266][ T7705] tipc: Disabling bearer [ 199.388999][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 200.347490][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 200.360450][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 200.391781][ T30] audit: type=1326 audit(1760491644.522:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.4.645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x0 [ 201.041170][ T7761] loop5: detected capacity change from 0 to 128 [ 201.090830][ T7755] 9pnet_fd: p9_fd_create_unix (7755): problem connecting socket: ./file0: -2 [ 201.160408][ T30] audit: type=1800 audit(1760491645.282:239): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.658" name="file1" dev="loop5" ino=1048639 res=0 errno=0 [ 201.284469][ T7763] netlink: 176 bytes leftover after parsing attributes in process `syz.5.658'. [ 201.316836][ T7765] loop0: detected capacity change from 0 to 128 [ 201.436730][ T7767] syz.0.660: attempt to access beyond end of device [ 201.436730][ T7767] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 201.510595][ T7767] syz.0.660: attempt to access beyond end of device [ 201.510595][ T7767] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 201.565105][ T7767] syz.0.660: attempt to access beyond end of device [ 201.565105][ T7767] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 201.946949][ T7781] tipc: Enabled bearer , priority 0 [ 202.183940][ T7781] tipc: Disabling bearer [ 202.526399][ T7789] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 202.574198][ T7789] loop9: detected capacity change from 0 to 8 [ 202.602708][ C1] blk_print_req_error: 20 callbacks suppressed [ 202.602733][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.619148][ C1] buffer_io_error: 20 callbacks suppressed [ 202.619170][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.633466][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.643732][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.655121][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.665417][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.676970][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.677021][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.681452][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.681501][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.692590][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.692651][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.693195][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.693242][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.693497][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.693542][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.693690][ T7789] ldm_validate_partition_table(): Disk read failed. [ 202.693888][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.693934][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.694179][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.694224][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.700657][ T7789] Dev loop9: unable to read RDB block 0 [ 202.871064][ T7789] loop9: unable to read partition table [ 202.877057][ T7789] loop9: partition table beyond EOD, truncated [ 202.900435][ T7789] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 202.900435][ T7789] ) failed (rc=-5) [ 203.034107][ T7794] netlink: '+}[@': attribute type 2 has an invalid length. [ 203.344594][ T7800] 9pnet_fd: p9_fd_create_unix (7800): problem connecting socket: ./file0: -2 [ 203.415234][ T30] audit: type=1326 audit(1760491647.542:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.478154][ T30] audit: type=1326 audit(1760491647.552:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.530195][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 203.541974][ T30] audit: type=1326 audit(1760491647.592:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.575663][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 203.614813][ T30] audit: type=1326 audit(1760491647.592:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.720421][ T30] audit: type=1326 audit(1760491647.592:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.791935][ T30] audit: type=1326 audit(1760491647.592:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.816181][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.855126][ T30] audit: type=1326 audit(1760491647.592:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 203.928741][ T30] audit: type=1326 audit(1760491647.592:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 204.355802][ T7827] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 204.396186][ T7827] loop9: detected capacity change from 0 to 8 [ 204.440903][ T7827] ldm_validate_partition_table(): Disk read failed. [ 204.490570][ T7827] Dev loop9: unable to read RDB block 0 [ 204.500513][ T7827] loop9: unable to read partition table [ 204.518830][ T7827] loop9: partition table beyond EOD, truncated [ 204.550046][ T7827] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 204.550046][ T7827] ) failed (rc=-5) [ 205.041956][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.5.692'. [ 205.065946][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 205.199216][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 205.230881][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 205.299885][ T7851] tipc: Enabling of bearer rejected, failed to enable media [ 205.687255][ T2995] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 205.715316][ T2995] EXT4-fs (loop3): This should not happen!! Data will be lost [ 205.715316][ T2995] [ 205.770371][ T2995] EXT4-fs (loop3): Total free blocks count 0 [ 205.776403][ T2995] EXT4-fs (loop3): Free/Dirty block details [ 205.790882][ T2995] EXT4-fs (loop3): free_blocks=2415919504 [ 205.815938][ T2995] EXT4-fs (loop3): dirty_blocks=16 [ 205.827408][ T2995] EXT4-fs (loop3): Block reservation details [ 205.850503][ T2995] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 205.898875][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.953885][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.706'. [ 205.998213][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.706'. [ 206.137901][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.708'. [ 206.342288][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 206.353679][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 206.399903][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 206.399932][ T30] audit: type=1326 audit(1760491650.532:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.4.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x0 [ 206.971678][ T7902] loop5: detected capacity change from 0 to 2048 [ 207.043848][ T7902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.767491][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 208.035644][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 208.072732][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 208.113603][ T30] audit: type=1326 audit(1760491652.252:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x0 [ 208.525177][ T7948] netlink: 68 bytes leftover after parsing attributes in process `syz.3.736'. [ 209.050949][ T7962] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 209.067133][ T7962] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 209.082517][ T7962] EXT4-fs (loop5): This should not happen!! Data will be lost [ 209.082517][ T7962] [ 209.100634][ T7962] EXT4-fs (loop5): Total free blocks count 0 [ 209.106738][ T7962] EXT4-fs (loop5): Free/Dirty block details [ 209.123808][ T7962] EXT4-fs (loop5): free_blocks=2415919504 [ 209.132707][ T7962] EXT4-fs (loop5): dirty_blocks=464 [ 209.135532][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 209.148156][ T7962] EXT4-fs (loop5): Block reservation details [ 209.154267][ T7962] EXT4-fs (loop5): i_reserved_data_blocks=29 [ 209.245429][ T7969] loop1: detected capacity change from 0 to 1024 [ 209.373261][ T7969] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.452177][ T7969] EXT4-fs error (device loop1): ext4_quota_enable:7136: comm syz.1.743: inode #3584: comm syz.1.743: iget: illegal inode # [ 209.563235][ T7969] EXT4-fs error (device loop1): ext4_quota_enable:7138: comm syz.1.743: Bad quota inode: 3584, type: 2 [ 209.606290][ T7969] EXT4-fs warning (device loop1): ext4_enable_quotas:7176: Failed to enable quota tracking (type=2, err=-117, ino=3584). Please run e2fsck to fix. [ 209.652058][ T7969] EXT4-fs (loop1): mount failed [ 209.762550][ T7969] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 209.844481][ T7969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.859399][ T7977] 9pnet_fd: p9_fd_create_unix (7977): problem connecting socket: ./file0: -2 [ 209.882002][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 210.182161][ T7990] loop3: detected capacity change from 0 to 512 [ 210.213037][ T7990] EXT4-fs: Ignoring removed nobh option [ 210.263093][ T7990] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.751: corrupted inode contents [ 210.299339][ T7990] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.751: mark_inode_dirty error [ 210.338267][ T7996] loop9: detected capacity change from 0 to 7 [ 210.343669][ T7990] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.751: corrupted inode contents [ 210.345296][ T7996] buffer_io_error: 20 callbacks suppressed [ 210.345318][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.369999][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.378148][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.387251][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.396752][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.399737][ T7990] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.751: mark_inode_dirty error [ 210.404891][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.405023][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.440512][ T7996] ldm_validate_partition_table(): Disk read failed. [ 210.447219][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.455779][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.464072][ T7996] Buffer I/O error on dev loop9, logical block 0, async page read [ 210.472166][ T7996] Dev loop9: unable to read RDB block 0 [ 210.473515][ T7981] bond1 (unregistering): Released all slaves [ 210.480009][ T7996] loop9: unable to read partition table [ 210.489798][ T7996] loop9: partition table beyond EOD, truncated [ 210.498341][ T7990] Quota error (device loop3): write_blk: dquota write failed [ 210.506726][ T7990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 210.519962][ T7990] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.751: Failed to acquire dquot type 0 [ 210.531635][ T7996] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 210.531635][ T7996] ) failed (rc=-5) [ 210.549241][ T7990] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.751: corrupted inode contents [ 210.563132][ T7990] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.751: mark_inode_dirty error [ 210.582739][ T7990] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.751: corrupted inode contents [ 210.616329][ T7990] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.751: mark_inode_dirty error [ 210.617893][ T7995] pim6reg: entered allmulticast mode [ 210.636335][ T7990] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.751: corrupted inode contents [ 210.731994][ T7990] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 210.751012][ T7990] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.751: corrupted inode contents [ 210.822962][ T7990] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.751: mark_inode_dirty error [ 210.898650][ T7990] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 210.911990][ T7990] EXT4-fs (loop3): 1 truncate cleaned up [ 210.935081][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.978117][ T8008] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 210.993300][ T7990] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.023940][ T8010] tipc: Enabling of bearer rejected, failed to enable media [ 211.034659][ T8008] loop9: detected capacity change from 0 to 8 [ 211.061188][ C1] blk_print_req_error: 20 callbacks suppressed [ 211.061217][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.090380][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.110523][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.124006][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.136068][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.147393][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.160385][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.182694][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.198639][ T8008] ldm_validate_partition_table(): Disk read failed. [ 211.215523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 211.223820][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.234507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 211.251640][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.262618][ T8008] Dev loop9: unable to read RDB block 0 [ 211.265589][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.301943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 211.354815][ T8008] loop9: unable to read partition table [ 211.380660][ T8008] loop9: partition table beyond EOD, truncated [ 211.386894][ T8008] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 211.386894][ T8008] ) failed (rc=-5) [ 211.813456][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 211.834629][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 211.874177][ T30] audit: type=1326 audit(1760491656.012:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x0 [ 212.225602][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 212.542002][ T8047] tipc: Enabling of bearer rejected, failed to enable media [ 212.973269][ T8059] loop2: detected capacity change from 0 to 128 [ 213.006267][ T8059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.060796][ T8059] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.243705][ T8067] loop4: detected capacity change from 0 to 4096 [ 213.250514][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 213.290470][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 213.327973][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.328090][ T8067] loop4: detected capacity change from 0 to 256 [ 213.346897][ T8067] /dev/loop4: Can't open blockdev [ 213.497440][ T8072] loop0: detected capacity change from 0 to 128 [ 213.522413][ T8072] vfat: Unknown parameter '' [ 213.788135][ T8080] tipc: Enabling of bearer rejected, failed to enable media [ 213.875950][ T8084] loop1: detected capacity change from 0 to 128 [ 213.985597][ T8084] syz.1.791: attempt to access beyond end of device [ 213.985597][ T8084] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 214.030873][ T8084] syz.1.791: attempt to access beyond end of device [ 214.030873][ T8084] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 214.096698][ T8090] syz.1.791: attempt to access beyond end of device [ 214.096698][ T8090] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 214.110690][ T8084] syz.1.791: attempt to access beyond end of device [ 214.110690][ T8084] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 214.150045][ T8090] syz.1.791: attempt to access beyond end of device [ 214.150045][ T8090] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 214.189073][ T8090] syz.1.791: attempt to access beyond end of device [ 214.189073][ T8090] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 214.230960][ T8084] syz.1.791: attempt to access beyond end of device [ 214.230960][ T8084] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 214.251315][ T8090] syz.1.791: attempt to access beyond end of device [ 214.251315][ T8090] loop1: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 214.333779][ T8084] syz.1.791: attempt to access beyond end of device [ 214.333779][ T8084] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 214.380764][ T8084] syz.1.791: attempt to access beyond end of device [ 214.380764][ T8084] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 214.611928][ T8101] 9pnet_fd: p9_fd_create_unix (8101): problem connecting socket: ./file0: -2 [ 214.726068][ T8109] tipc: Enabling of bearer rejected, failed to enable media [ 215.007744][ T8118] tipc: Enabling of bearer rejected, failed to enable media [ 215.279709][ T8124] loop0: detected capacity change from 0 to 1024 [ 215.348887][ T8124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.422252][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 215.564342][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.755378][ T6052] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 215.768751][ T6052] EXT4-fs (loop5): This should not happen!! Data will be lost [ 215.768751][ T6052] [ 215.838036][ T6052] EXT4-fs (loop5): Total free blocks count 0 [ 215.850248][ T6052] EXT4-fs (loop5): Free/Dirty block details [ 215.872844][ T6052] EXT4-fs (loop5): free_blocks=2415919504 [ 215.878646][ T6052] EXT4-fs (loop5): dirty_blocks=16 [ 215.904582][ T6052] EXT4-fs (loop5): Block reservation details [ 215.924827][ T6052] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 215.986639][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.264575][ T8153] tipc: Enabling of bearer rejected, failed to enable media [ 216.391130][ T8157] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 216.422712][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.824'. [ 216.464609][ T8160] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 216.505178][ T8160] loop9: detected capacity change from 0 to 8 [ 216.527971][ C1] blk_print_req_error: 5 callbacks suppressed [ 216.528000][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.544426][ C1] buffer_io_error: 20 callbacks suppressed [ 216.544454][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.561462][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.571729][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.579830][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.590238][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.599857][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.610266][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.630589][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.640995][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.650827][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.650889][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.653624][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.653673][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.655970][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.656021][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.656129][ T8160] ldm_validate_partition_table(): Disk read failed. [ 216.656310][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.656358][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.660368][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.660420][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.671185][ T8160] Dev loop9: unable to read RDB block 0 [ 216.699469][ T8170] netlink: 96 bytes leftover after parsing attributes in process `syz.4.827'. [ 216.751109][ T8160] loop9: unable to read partition table [ 216.751364][ T8160] loop9: partition table beyond EOD, truncated [ 216.880244][ T8160] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 216.880244][ T8160] ) failed (rc=-5) [ 217.068705][ T8178] loop4: detected capacity change from 0 to 512 [ 217.094847][ T8178] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 217.297855][ T8185] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.319912][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 217.400929][ T8186] team1: entered promiscuous mode [ 217.406087][ T8186] team1: entered allmulticast mode [ 217.412092][ T8186] 8021q: adding VLAN 0 to HW filter on device team1 [ 217.702059][ T8201] loop1: detected capacity change from 0 to 512 [ 217.731058][ T8201] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.749687][ T8202] loop4: detected capacity change from 0 to 764 [ 218.397078][ T8207] loop1: detected capacity change from 0 to 128 [ 218.735430][ T8185] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.794391][ T8195] tipc: Enabling of bearer rejected, failed to enable media [ 218.849827][ T8185] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.884913][ T8215] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 218.927188][ T8215] loop9: detected capacity change from 0 to 8 [ 218.943339][ T8215] ldm_validate_partition_table(): Disk read failed. [ 218.974201][ T8215] Dev loop9: unable to read RDB block 0 [ 219.001472][ T8215] loop9: unable to read partition table [ 219.024583][ T8215] loop9: partition table beyond EOD, truncated [ 219.089746][ T8215] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 219.089746][ T8215] ) failed (rc=-5) [ 219.183215][ T8185] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.442596][ T8233] nft_compat: unsupported protocol 1 [ 220.177969][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.332284][ T6052] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.456433][ T6052] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.627313][ T1159] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.677143][ T8256] --map-set only usable from mangle table [ 220.762901][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 220.763075][ T8260] 9pnet_fd: p9_fd_create_unix (8260): problem connecting socket: ./file0: -2 [ 220.790632][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 220.837697][ T30] audit: type=1326 audit(1760491664.972:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.1.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86a778eec9 code=0x0 [ 221.047899][ T8265] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 221.087967][ T8265] loop9: detected capacity change from 0 to 8 [ 221.108473][ T8265] ldm_validate_partition_table(): Disk read failed. [ 221.122560][ T8265] Dev loop9: unable to read RDB block 0 [ 221.143692][ T8265] loop9: unable to read partition table [ 221.179024][ T8265] loop9: partition table beyond EOD, truncated [ 221.216489][ T8265] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 221.216489][ T8265] ) failed (rc=-5) [ 221.745704][ T8288] loop4: detected capacity change from 0 to 128 [ 221.812538][ T8288] bio_check_eod: 685 callbacks suppressed [ 221.812569][ T8288] syz.4.871: attempt to access beyond end of device [ 221.812569][ T8288] loop4: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 221.838121][ T8288] syz.4.871: attempt to access beyond end of device [ 221.838121][ T8288] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 221.862824][ T8288] syz.4.871: attempt to access beyond end of device [ 221.862824][ T8288] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 221.893053][ T8288] syz.4.871: attempt to access beyond end of device [ 221.893053][ T8288] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 221.938643][ T8294] syz.4.871: attempt to access beyond end of device [ 221.938643][ T8294] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 221.951663][ T8288] syz.4.871: attempt to access beyond end of device [ 221.951663][ T8288] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 221.986738][ T8296] loop2: detected capacity change from 0 to 128 [ 222.030864][ T8294] syz.4.871: attempt to access beyond end of device [ 222.030864][ T8294] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 222.065439][ T8288] syz.4.871: attempt to access beyond end of device [ 222.065439][ T8288] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 222.107284][ T8288] syz.4.871: attempt to access beyond end of device [ 222.107284][ T8288] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 222.119604][ T8294] syz.4.871: attempt to access beyond end of device [ 222.119604][ T8294] loop4: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 222.158025][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 222.168156][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 222.217384][ T30] audit: type=1326 audit(1760491666.352:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.0.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x0 [ 222.278056][ T8303] loop2: detected capacity change from 0 to 164 [ 222.358570][ T8303] Unable to read rock-ridge attributes [ 222.435946][ T6052] buffer_io_error: 699 callbacks suppressed [ 222.435975][ T6052] Buffer I/O error on dev loop4, logical block 305, lost async page write [ 222.538391][ T8272] loop1: detected capacity change from 0 to 4096 [ 222.559034][ T8272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.638259][ T8272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.715137][ T30] audit: type=1800 audit(1760491666.852:311): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.864" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 223.287491][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.301965][ T8331] loop2: detected capacity change from 0 to 512 [ 223.716147][ T8331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.745226][ T30] audit: type=1326 audit(1760491667.882:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a838eec9 code=0x7ffc0000 [ 223.768505][ T30] audit: type=1326 audit(1760491667.882:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f36a838eec9 code=0x7ffc0000 [ 223.791177][ T30] audit: type=1326 audit(1760491667.882:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a838eec9 code=0x7ffc0000 [ 223.801002][ T8331] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.814500][ T30] audit: type=1326 audit(1760491667.952:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a838eec9 code=0x7ffc0000 [ 223.940697][ T8331] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.885: corrupted inode contents [ 223.991219][ T8331] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.885: mark_inode_dirty error [ 224.023720][ T8331] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.885: corrupted inode contents [ 224.072850][ T8344] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.885: corrupted inode contents [ 224.087488][ T8344] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.885: mark_inode_dirty error [ 224.118180][ T8344] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.885: corrupted inode contents [ 224.156541][ T8344] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.885: mark_inode_dirty error [ 224.215167][ T8344] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.885: corrupted inode contents [ 224.304115][ T8344] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.885: mark_inode_dirty error [ 224.314402][ T8348] loop4: detected capacity change from 0 to 128 [ 224.472129][ T8347] Buffer I/O error on dev loop4, logical block 305, async page read [ 224.480745][ T8347] Buffer I/O error on dev loop4, logical block 306, async page read [ 224.489017][ T8347] Buffer I/O error on dev loop4, logical block 307, async page read [ 224.497539][ T8347] Buffer I/O error on dev loop4, logical block 308, async page read [ 224.505807][ T8347] Buffer I/O error on dev loop4, logical block 309, async page read [ 224.515195][ T8347] Buffer I/O error on dev loop4, logical block 310, async page read [ 224.523451][ T8347] Buffer I/O error on dev loop4, logical block 311, async page read [ 224.535493][ T8347] Buffer I/O error on dev loop4, logical block 312, async page read [ 224.548697][ T8347] Buffer I/O error on dev loop4, logical block 305, async page read [ 224.760169][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.985853][ T8357] loop4: detected capacity change from 0 to 1024 [ 225.030376][ T8357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.202819][ T8371] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 225.255484][ T8371] loop9: detected capacity change from 0 to 8 [ 225.312135][ C0] blk_print_req_error: 35 callbacks suppressed [ 225.312164][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.351209][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.409718][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.436826][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.437151][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.448436][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.473065][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.514384][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.514697][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.514808][ T8371] ldm_validate_partition_table(): Disk read failed. [ 225.516248][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.517155][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.578040][ T8371] Dev loop9: unable to read RDB block 0 [ 225.578900][ T8371] loop9: unable to read partition table [ 225.579226][ T8371] loop9: partition table beyond EOD, truncated [ 225.579255][ T8371] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 225.579255][ T8371] ) failed (rc=-5) [ 225.953262][ T8391] 9pnet_fd: p9_fd_create_unix (8391): problem connecting socket: ./file0: -2 [ 225.967703][ T8390] loop4: detected capacity change from 0 to 128 [ 226.641727][ T8415] sd 0:0:1:0: device reset [ 226.893978][ T8424] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 226.919576][ T8424] loop9: detected capacity change from 0 to 8 [ 226.936067][ T8424] ldm_validate_partition_table(): Disk read failed. [ 226.944321][ T8424] Dev loop9: unable to read RDB block 0 [ 226.961172][ T8424] loop9: unable to read partition table [ 226.990645][ T8424] loop9: partition table beyond EOD, truncated [ 226.990683][ T8424] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 226.990683][ T8424] ) failed (rc=-5) [ 227.280014][ T8444] loop4: detected capacity change from 0 to 128 [ 227.356761][ T8444] bio_check_eod: 1460 callbacks suppressed [ 227.356788][ T8444] syz.4.929: attempt to access beyond end of device [ 227.356788][ T8444] loop4: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 227.386119][ T8444] syz.4.929: attempt to access beyond end of device [ 227.386119][ T8444] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 227.431291][ T8444] syz.4.929: attempt to access beyond end of device [ 227.431291][ T8444] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 227.480202][ T8444] syz.4.929: attempt to access beyond end of device [ 227.480202][ T8444] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 227.530804][ T30] audit: type=1326 audit(1760491671.652:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 227.568756][ T8454] syz.4.929: attempt to access beyond end of device [ 227.568756][ T8454] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 227.586692][ T8444] syz.4.929: attempt to access beyond end of device [ 227.586692][ T8444] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 227.620435][ T30] audit: type=1326 audit(1760491671.652:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 227.645090][ T8454] syz.4.929: attempt to access beyond end of device [ 227.645090][ T8454] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 227.660773][ T8444] syz.4.929: attempt to access beyond end of device [ 227.660773][ T8444] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 227.674464][ T8454] syz.4.929: attempt to access beyond end of device [ 227.674464][ T8454] loop4: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 227.677620][ T30] audit: type=1326 audit(1760491671.672:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 227.716038][ T8444] syz.4.929: attempt to access beyond end of device [ 227.716038][ T8444] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 227.752433][ T30] audit: type=1326 audit(1760491671.672:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 227.844564][ T8442] buffer_io_error: 1397 callbacks suppressed [ 227.844592][ T8442] Buffer I/O error on dev loop4, logical block 305, async page read [ 227.868188][ T8442] Buffer I/O error on dev loop4, logical block 306, async page read [ 227.881547][ T30] audit: type=1326 audit(1760491671.672:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 227.932353][ T8442] Buffer I/O error on dev loop4, logical block 307, async page read [ 227.956807][ T8442] Buffer I/O error on dev loop4, logical block 308, async page read [ 227.970931][ T30] audit: type=1326 audit(1760491671.742:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 227.999690][ T8442] Buffer I/O error on dev loop4, logical block 309, async page read [ 228.024729][ T8442] Buffer I/O error on dev loop4, logical block 310, async page read [ 228.034124][ T30] audit: type=1326 audit(1760491671.742:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 228.056639][ T8442] Buffer I/O error on dev loop4, logical block 311, async page read [ 228.064906][ T30] audit: type=1326 audit(1760491671.762:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 228.087954][ T30] audit: type=1326 audit(1760491671.762:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 228.090633][ T8442] Buffer I/O error on dev loop4, logical block 312, async page read [ 228.110905][ T30] audit: type=1326 audit(1760491671.802:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x7ffc0000 [ 228.150753][ T8442] Buffer I/O error on dev loop4, logical block 305, async page read [ 228.165785][ T8442] Buffer I/O error on dev loop4, logical block 306, async page read [ 228.379489][ T8477] loop3: detected capacity change from 0 to 2048 [ 228.435418][ T8477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.713345][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.722022][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.166609][ T8495] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 229.182592][ T8495] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 229.194954][ T8495] EXT4-fs (loop3): This should not happen!! Data will be lost [ 229.194954][ T8495] [ 229.204738][ T8495] EXT4-fs (loop3): Total free blocks count 0 [ 229.210900][ T8495] EXT4-fs (loop3): Free/Dirty block details [ 229.216914][ T8495] EXT4-fs (loop3): free_blocks=2415919504 [ 229.222828][ T8495] EXT4-fs (loop3): dirty_blocks=32 [ 229.228024][ T8495] EXT4-fs (loop3): Block reservation details [ 229.234269][ T8495] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 229.896873][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 229.991186][ T8504] loop4: detected capacity change from 0 to 512 [ 230.026018][ T8504] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.076925][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.160942][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.227791][ T8510] netlink: 'syz.5.953': attribute type 6 has an invalid length. [ 230.729157][ T8512] loop4: detected capacity change from 0 to 1024 [ 230.768439][ T8512] EXT4-fs: inline encryption not supported [ 230.838850][ T8512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.535753][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.626543][ T1159] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.649774][ T1159] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.658385][ T1159] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.671359][ T1159] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.108895][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 232.447559][ T8535] loop1: detected capacity change from 0 to 128 [ 232.576299][ T8535] bio_check_eod: 723 callbacks suppressed [ 232.576341][ T8535] syz.1.961: attempt to access beyond end of device [ 232.576341][ T8535] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 232.617228][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.629436][ T8535] syz.1.961: attempt to access beyond end of device [ 232.629436][ T8535] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 232.636256][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.675739][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.692105][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.696720][ T8535] syz.1.961: attempt to access beyond end of device [ 232.696720][ T8535] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 232.710198][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.732189][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.748797][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.767464][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.775926][ T8544] syz.1.961: attempt to access beyond end of device [ 232.775926][ T8544] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 232.801821][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.814433][ T8535] syz.1.961: attempt to access beyond end of device [ 232.814433][ T8535] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 232.827619][ T5895] hid-generic 0003:0003:0000.000C: unknown main item tag 0x0 [ 232.851529][ T8544] syz.1.961: attempt to access beyond end of device [ 232.851529][ T8544] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 232.890967][ T8535] syz.1.961: attempt to access beyond end of device [ 232.890967][ T8535] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 232.892488][ T5895] hid-generic 0003:0003:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 232.931720][ T8544] syz.1.961: attempt to access beyond end of device [ 232.931720][ T8544] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 232.996100][ T8535] syz.1.961: attempt to access beyond end of device [ 232.996100][ T8535] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 233.044184][ T8535] syz.1.961: attempt to access beyond end of device [ 233.044184][ T8535] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 233.118143][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 233.128181][ T8555] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 233.166697][ T8555] loop9: detected capacity change from 0 to 8 [ 233.202513][ C0] blk_print_req_error: 20 callbacks suppressed [ 233.202546][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.219120][ C0] buffer_io_error: 702 callbacks suppressed [ 233.219148][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.256594][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.256664][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.256954][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.257004][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.257308][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.257356][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.269577][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.269648][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.304806][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.304865][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.325050][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.325115][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.332127][ T50] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 233.347858][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.347926][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.366260][ T8555] ldm_validate_partition_table(): Disk read failed. [ 233.373498][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.490018][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.498154][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.518907][ T8555] Dev loop9: unable to read RDB block 0 [ 233.527931][ T8555] loop9: unable to read partition table [ 233.534875][ T8555] loop9: partition table beyond EOD, truncated [ 233.544658][ T8555] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 233.544658][ T8555] ) failed (rc=-5) [ 233.868547][ T8569] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 233.997924][ T30] audit: type=1326 audit(1760491678.122:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.056947][ T30] audit: type=1326 audit(1760491678.122:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.157275][ T30] audit: type=1326 audit(1760491678.132:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.283347][ T30] audit: type=1326 audit(1760491678.132:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.378393][ T30] audit: type=1326 audit(1760491678.132:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.465530][ T8585] Driver unsupported XDP return value 0 on prog (id 395) dev N/A, expect packet loss! [ 234.473924][ T30] audit: type=1326 audit(1760491678.172:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.597294][ T30] audit: type=1326 audit(1760491678.172:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.704197][ T30] audit: type=1326 audit(1760491678.172:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.0.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 234.944214][ T8595] loop0: detected capacity change from 0 to 128 [ 235.178321][ T8600] loop5: detected capacity change from 0 to 512 [ 235.198375][ T8600] EXT4-fs: Ignoring removed nobh option [ 235.318545][ T8600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.368023][ T8600] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.553327][ T8614] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 235.601054][ T8614] loop9: detected capacity change from 0 to 8 [ 235.614969][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.986'. [ 235.622261][ T8614] ldm_validate_partition_table(): Disk read failed. [ 235.652035][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.986'. [ 235.676059][ T8614] Dev loop9: unable to read RDB block 0 [ 235.693377][ T8614] loop9: unable to read partition table [ 235.710956][ T8614] loop9: partition table beyond EOD, truncated [ 235.710997][ T8614] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 235.710997][ T8614] ) failed (rc=-5) [ 235.725497][ T8600] SET target dimension over the limit! [ 235.869610][ T8615] netlink: 43 bytes leftover after parsing attributes in process `syz.5.986'. [ 236.106576][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.310419][ T30] audit: type=1326 audit(1760491680.422:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 236.332667][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.400420][ T30] audit: type=1326 audit(1760491680.442:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.5.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 236.870675][ T8645] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.999'. [ 237.047274][ T8650] loop4: detected capacity change from 0 to 128 [ 237.342275][ T8661] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 237.347537][ T8654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.386534][ T8661] loop9: detected capacity change from 0 to 8 [ 237.414072][ T8661] ldm_validate_partition_table(): Disk read failed. [ 237.446662][ T8661] Dev loop9: unable to read RDB block 0 [ 237.484263][ T8661] loop9: unable to read partition table [ 237.484594][ T8661] loop9: partition table beyond EOD, truncated [ 237.484642][ T8661] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 237.484642][ T8661] ) failed (rc=-5) [ 238.158657][ T8675] loop5: detected capacity change from 0 to 2048 [ 238.223948][ T8675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.292254][ T8662] syz.2.1004: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.455817][ T8662] CPU: 0 UID: 0 PID: 8662 Comm: syz.2.1004 Not tainted syzkaller #0 PREEMPT(full) [ 238.455868][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.455892][ T8662] Call Trace: [ 238.455914][ T8662] [ 238.455928][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 238.455992][ T8662] warn_alloc+0x248/0x3a0 [ 238.456059][ T8662] ? __pfx_warn_alloc+0x10/0x10 [ 238.456142][ T8662] ? xskq_create+0xfb/0x1d0 [ 238.456187][ T8662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.456233][ T8662] ? __vmalloc_node_noprof+0xad/0xf0 [ 238.456295][ T8662] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 238.456367][ T8662] ? xskq_create+0xfb/0x1d0 [ 238.456427][ T8662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.456499][ T8662] ? xskq_create+0xfb/0x1d0 [ 238.456546][ T8662] vmalloc_user_noprof+0x9e/0xe0 [ 238.456600][ T8662] ? xskq_create+0xfb/0x1d0 [ 238.456649][ T8662] xskq_create+0xfb/0x1d0 [ 238.456700][ T8662] xsk_setsockopt+0x792/0x9a0 [ 238.456748][ T8662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.456795][ T8662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.456840][ T8662] ? find_held_lock+0x2b/0x80 [ 238.456913][ T8662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.456958][ T8662] ? aa_sock_opt_perm+0xfd/0x1c0 [ 238.457022][ T8662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.457070][ T8662] do_sock_setsockopt+0xf3/0x1d0 [ 238.457118][ T8662] __sys_setsockopt+0x1a0/0x230 [ 238.457182][ T8662] __x64_sys_setsockopt+0xbd/0x160 [ 238.457234][ T8662] ? do_syscall_64+0x91/0xfa0 [ 238.457290][ T8662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.457333][ T8662] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.457391][ T8662] do_syscall_64+0xcd/0xfa0 [ 238.457453][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.457497][ T8662] RIP: 0033:0x7f56a0b8eec9 [ 238.457527][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.457563][ T8662] RSP: 002b:00007f56a1a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.457598][ T8662] RAX: ffffffffffffffda RBX: 00007f56a0de6180 RCX: 00007f56a0b8eec9 [ 238.457637][ T8662] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 238.457662][ T8662] RBP: 00007f56a0c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 238.457686][ T8662] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 238.457709][ T8662] R13: 00007f56a0de6218 R14: 00007f56a0de6180 R15: 00007fff95370c88 [ 238.457762][ T8662] [ 238.680377][ T8662] Mem-Info: [ 238.683522][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.700396][ T8662] active_anon:8144 inactive_anon:0 isolated_anon:0 [ 238.700396][ T8662] active_file:14199 inactive_file:40272 isolated_file:0 [ 238.700396][ T8662] unevictable:768 dirty:112 writeback:0 [ 238.700396][ T8662] slab_reclaimable:11684 slab_unreclaimable:97483 [ 238.700396][ T8662] mapped:38669 shmem:4500 pagetables:1167 [ 238.700396][ T8662] sec_pagetables:0 bounce:0 [ 238.700396][ T8662] kernel_misc_reclaimable:0 [ 238.700396][ T8662] free:1275950 free_pcp:21307 free_cma:0 [ 238.841851][ T8695] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 239.324570][ T8662] Node 0 active_anon:32956kB inactive_anon:0kB active_file:56796kB inactive_file:160896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167144kB dirty:488kB writeback:0kB shmem:16552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12576kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.473969][ T8662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.637982][ T8662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.819701][ T8662] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 239.860615][ T8662] Node 0 DMA32 free:1198436kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32860kB inactive_anon:0kB active_file:56796kB inactive_file:160920kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2543524kB mlocked:0kB bounce:0kB free_pcp:62512kB local_pcp:36752kB free_cma:0kB [ 240.017879][ T8662] lowmem_reserve[]: 0 0 1 1 1 [ 240.060901][ T8662] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.207288][ T8662] lowmem_reserve[]: 0 0 0 0 0 [ 240.218731][ T8706] loop3: detected capacity change from 0 to 128 [ 240.235781][ T8662] Node 1 Normal free:3891160kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21564kB local_pcp:14436kB free_cma:0kB [ 240.312528][ T8706] bio_check_eod: 1479 callbacks suppressed [ 240.312558][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.312558][ T8706] loop3: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 240.374339][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.374339][ T8706] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 240.398051][ T8662] lowmem_reserve[]: 0 0 0 0 0 [ 240.418700][ T8662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.445264][ T8708] syz.3.1019: attempt to access beyond end of device [ 240.445264][ T8708] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 240.476347][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.476347][ T8706] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 240.490170][ T8662] Node 0 DMA32: 3*4kB (UME) 4*8kB (UM) 6*16kB (UE) 37*32kB (ME) 76*64kB (ME) 112*128kB (UME) 56*256kB (ME) 18*512kB (UM) 7*1024kB (UM) 10*2048kB (UM) 275*4096kB (UM) = 1198124kB [ 240.528071][ T8708] syz.3.1019: attempt to access beyond end of device [ 240.528071][ T8708] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 240.556368][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.556368][ T8706] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 240.572455][ T8662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.609972][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.609972][ T8706] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 240.622400][ T8662] Node 1 Normal: 200*4kB (U) 53*8kB (UME) 37*16kB (UME) 82*32kB (UME) 26*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891160kB [ 240.627780][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.627780][ T8706] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 240.656914][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.656914][ T8706] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 240.664396][ T8662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.670590][ T8706] syz.3.1019: attempt to access beyond end of device [ 240.670590][ T8706] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 240.694408][ T8662] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 240.703996][ T8662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.714557][ T8662] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 240.764332][ T8662] 59025 total pagecache pages [ 240.769944][ T50] buffer_io_error: 1460 callbacks suppressed [ 240.769971][ T50] Buffer I/O error on dev loop3, logical block 305, lost async page write [ 240.786253][ T8662] 0 pages in swap cache [ 240.790560][ T8662] Free swap = 124996kB [ 240.794775][ T8662] Total swap = 124996kB [ 240.799087][ T8662] 2097051 pages RAM [ 240.805278][ T8662] 0 pages HighMem/MovableOnly [ 240.810086][ T8662] 429080 pages reserved [ 240.814455][ T8662] 0 pages cma reserved [ 240.915663][ T8654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.951899][ T8677] : renamed from vlan1 [ 241.292864][ T8654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.367769][ T8716] 9pnet_fd: p9_fd_create_unix (8716): problem connecting socket: ./file0: -2 [ 241.456210][ T8654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.091407][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.118226][ T8737] loop3: detected capacity change from 0 to 2048 [ 243.196965][ T8740] loop1: detected capacity change from 0 to 1024 [ 243.198244][ T8737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 243.212579][ T8740] EXT4-fs: Ignoring removed nobh option [ 243.221278][ T8740] EXT4-fs: Ignoring removed bh option [ 243.270861][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.286997][ T8740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.327081][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 243.327107][ T30] audit: type=1804 audit(1760491687.462:401): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1030" name="/newroot/164/file2/bus" dev="loop1" ino=18 res=1 errno=0 [ 243.359336][ T30] audit: type=1804 audit(1760491687.472:402): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1030" name="/newroot/164/file2/bus" dev="loop1" ino=18 res=1 errno=0 [ 243.417783][ T8752] EXT4-fs (loop1): shut down requested (0) [ 243.428304][ T8737] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 243.498117][ T8737] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 510 with error 28 [ 243.512275][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.540579][ T8737] EXT4-fs (loop3): This should not happen!! Data will be lost [ 243.540579][ T8737] [ 243.563034][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.589166][ T8737] EXT4-fs (loop3): Total free blocks count 0 [ 243.601345][ T8737] EXT4-fs (loop3): Free/Dirty block details [ 243.607261][ T8737] EXT4-fs (loop3): free_blocks=2415919104 [ 243.613646][ T8737] EXT4-fs (loop3): dirty_blocks=512 [ 243.625710][ T8737] EXT4-fs (loop3): Block reservation details [ 243.648292][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.682700][ T8737] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 243.698131][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.975732][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 244.139852][ T8771] loop5: detected capacity change from 0 to 512 [ 244.170449][ T8771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.183676][ T8771] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.222992][ T8775] 9pnet_fd: p9_fd_create_unix (8775): problem connecting socket: ./file0: -2 [ 244.361306][ T8771] EXT4-fs error (device loop5): ext4_get_first_dir_block:3536: inode #12: block 32: comm syz.5.1043: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 244.397790][ T8771] EXT4-fs (loop5): Remounting filesystem read-only [ 244.492526][ T8780] loop0: detected capacity change from 0 to 2048 [ 244.522372][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.540292][ T8782] netlink: 'syz.3.1046': attribute type 3 has an invalid length. [ 244.583573][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.996646][ T8799] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 246.012096][ T8799] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.024365][ T8799] EXT4-fs (loop0): This should not happen!! Data will be lost [ 246.024365][ T8799] [ 246.056500][ T8799] EXT4-fs (loop0): Total free blocks count 0 [ 246.065392][ T8799] EXT4-fs (loop0): Free/Dirty block details [ 246.071560][ T8799] EXT4-fs (loop0): free_blocks=2415919504 [ 246.077327][ T8799] EXT4-fs (loop0): dirty_blocks=32 [ 246.082859][ T8799] EXT4-fs (loop0): Block reservation details [ 246.088871][ T8799] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 246.471541][ T30] audit: type=1326 audit(1760491690.522:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 246.630730][ T30] audit: type=1326 audit(1760491690.542:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 246.815379][ T30] audit: type=1326 audit(1760491690.542:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aab8eec9 code=0x7ffc0000 [ 246.974168][ T30] audit: type=1326 audit(1760491690.592:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.5.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 247.062506][ T8816] Falling back ldisc for ptm0. [ 247.121779][ T30] audit: type=1326 audit(1760491690.592:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.5.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 247.223600][ T8819] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.246787][ T30] audit: type=1326 audit(1760491690.682:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.5.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 247.312891][ T30] audit: type=1326 audit(1760491690.682:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.5.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 247.394615][ T30] audit: type=1326 audit(1760491690.682:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.5.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22cd8eec9 code=0x7ffc0000 [ 247.428525][ T8819] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.453290][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 247.479158][ T8827] loop1: detected capacity change from 0 to 1024 [ 247.573023][ T8827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.592773][ T8819] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.706834][ T8819] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.776851][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.066699][ T8835] 9pnet_fd: p9_fd_create_unix (8835): problem connecting socket: ./file0: -2 [ 248.115495][ T2995] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.140512][ T2995] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.228201][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.262919][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.840732][ T8861] loop4: detected capacity change from 0 to 2048 [ 248.882068][ T8861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.260734][ T8873] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 250.278877][ T8873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 250.299848][ T8873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 250.299848][ T8873] [ 250.309606][ T8873] EXT4-fs (loop4): Total free blocks count 0 [ 250.315847][ T8873] EXT4-fs (loop4): Free/Dirty block details [ 250.321817][ T8873] EXT4-fs (loop4): free_blocks=2415919504 [ 250.327553][ T8873] EXT4-fs (loop4): dirty_blocks=32 [ 250.332910][ T8873] EXT4-fs (loop4): Block reservation details [ 250.338924][ T8873] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 250.836626][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 250.836657][ T30] audit: type=1326 audit(1760491694.952:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.1081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a0b8eec9 code=0x0 [ 251.285185][ T8884] 9pnet_fd: p9_fd_create_unix (8884): problem connecting socket: ./file0: -2 [ 251.739648][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 251.851811][ T8893] loop1: detected capacity change from 0 to 128 [ 251.933372][ T8893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.962449][ T8893] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.155969][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.329053][ T8908] 9pnet_fd: Insufficient options for proto=fd [ 252.844333][ T30] audit: type=1326 audit(1760491696.982:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.1.1100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86a778eec9 code=0x0 [ 253.077207][ T8930] loop3: detected capacity change from 0 to 764 [ 253.497294][ T8943] 9pnet_fd: Insufficient options for proto=fd [ 254.406421][ T8959] loop3: detected capacity change from 0 to 512 [ 254.488053][ T8959] [ 254.490429][ T8959] ====================================================== [ 254.497450][ T8959] WARNING: possible circular locking dependency detected [ 254.504477][ T8959] syzkaller #0 Not tainted [ 254.508902][ T8959] ------------------------------------------------------ [ 254.515926][ T8959] syz.3.1116/8959 is trying to acquire lock: [ 254.521918][ T8959] ffff88805310eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 254.531807][ T8959] [ 254.531807][ T8959] but task is already holding lock: [ 254.539164][ T8959] ffff888055a51d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 254.549056][ T8959] [ 254.549056][ T8959] which lock already depends on the new lock. [ 254.549056][ T8959] [ 254.559455][ T8959] [ 254.559455][ T8959] the existing dependency chain (in reverse order) is: [ 254.568469][ T8959] [ 254.568469][ T8959] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 254.576054][ T8959] down_write+0x92/0x200 [ 254.580832][ T8959] ext4_destroy_inline_data+0x2d/0xe0 [ 254.586746][ T8959] ext4_do_writepages+0x1154/0x3cf0 [ 254.592582][ T8959] ext4_writepages+0x37a/0x7d0 [ 254.597898][ T8959] do_writepages+0x27a/0x600 [ 254.603024][ T8959] filemap_fdatawrite_wbc+0x104/0x160 [ 254.608940][ T8959] __filemap_fdatawrite_range+0xb9/0x100 [ 254.615098][ T8959] file_write_and_wait_range+0xca/0x140 [ 254.621169][ T8959] generic_buffers_fsync_noflush+0x76/0x310 [ 254.627609][ T8959] ext4_sync_file+0x896/0xf10 [ 254.632826][ T8959] vfs_fsync_range+0x139/0x220 [ 254.638124][ T8959] ext4_buffered_write_iter+0x2e0/0x440 [ 254.644209][ T8959] ext4_file_write_iter+0xa4c/0x1d10 [ 254.650035][ T8959] vfs_write+0x7d3/0x11d0 [ 254.654895][ T8959] ksys_write+0x12a/0x250 [ 254.659756][ T8959] do_syscall_64+0xcd/0xfa0 [ 254.664800][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.671223][ T8959] [ 254.671223][ T8959] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 254.679670][ T8959] __lock_acquire+0x126f/0x1c90 [ 254.685057][ T8959] lock_acquire+0x179/0x350 [ 254.690120][ T8959] ext4_writepages+0x224/0x7d0 [ 254.695456][ T8959] do_writepages+0x27a/0x600 [ 254.700591][ T8959] __writeback_single_inode+0x160/0xfb0 [ 254.706688][ T8959] writeback_single_inode+0x2bc/0x550 [ 254.712612][ T8959] write_inode_now+0x170/0x1e0 [ 254.717902][ T8959] iput.part.0+0x487/0xb00 [ 254.722855][ T8959] iput+0x35/0x40 [ 254.727024][ T8959] ext4_xattr_block_set+0x67c/0x3650 [ 254.732845][ T8959] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 254.739274][ T8959] __ext4_expand_extra_isize+0x346/0x480 [ 254.745435][ T8959] __ext4_mark_inode_dirty+0x544/0x870 [ 254.751442][ T8959] ext4_evict_inode+0x74e/0x18e0 [ 254.756901][ T8959] evict+0x3e6/0x920 [ 254.761331][ T8959] iput.part.0+0x6a9/0xb00 [ 254.766284][ T8959] iput+0x35/0x40 [ 254.770453][ T8959] ext4_orphan_cleanup+0x731/0x11e0 [ 254.776194][ T8959] ext4_fill_super+0x8db7/0xaf70 [ 254.781663][ T8959] get_tree_bdev_flags+0x38c/0x620 [ 254.787301][ T8959] vfs_get_tree+0x8e/0x340 [ 254.792259][ T8959] path_mount+0x7b9/0x23a0 [ 254.797207][ T8959] __x64_sys_mount+0x293/0x310 [ 254.802502][ T8959] do_syscall_64+0xcd/0xfa0 [ 254.807554][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.813981][ T8959] [ 254.813981][ T8959] other info that might help us debug this: [ 254.813981][ T8959] [ 254.824204][ T8959] Possible unsafe locking scenario: [ 254.824204][ T8959] [ 254.831649][ T8959] CPU0 CPU1 [ 254.837008][ T8959] ---- ---- [ 254.842360][ T8959] lock(&ei->xattr_sem); [ 254.846691][ T8959] lock(&sbi->s_writepages_rwsem); [ 254.854417][ T8959] lock(&ei->xattr_sem); [ 254.861270][ T8959] rlock(&sbi->s_writepages_rwsem); [ 254.866555][ T8959] [ 254.866555][ T8959] *** DEADLOCK *** [ 254.866555][ T8959] [ 254.874691][ T8959] 3 locks held by syz.3.1116/8959: [ 254.879798][ T8959] #0: ffff88805310c0e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 254.889981][ T8959] #1: ffff88805310c610 (sb_internal){++++}-{0:0}, at: evict+0x3e6/0x920 [ 254.898503][ T8959] #2: ffff888055a51d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x4ba/0x870 [ 254.908836][ T8959] [ 254.908836][ T8959] stack backtrace: [ 254.914724][ T8959] CPU: 1 UID: 0 PID: 8959 Comm: syz.3.1116 Not tainted syzkaller #0 PREEMPT(full) [ 254.914766][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.914786][ T8959] Call Trace: [ 254.914799][ T8959] [ 254.914812][ T8959] dump_stack_lvl+0x116/0x1f0 [ 254.914865][ T8959] print_circular_bug+0x275/0x350 [ 254.914911][ T8959] check_noncircular+0x14c/0x170 [ 254.914956][ T8959] __lock_acquire+0x126f/0x1c90 [ 254.915000][ T8959] ? __lock_acquire+0x622/0x1c90 [ 254.915042][ T8959] lock_acquire+0x179/0x350 [ 254.915082][ T8959] ? do_writepages+0x27a/0x600 [ 254.915127][ T8959] ? __pfx___might_resched+0x10/0x10 [ 254.915184][ T8959] ext4_writepages+0x224/0x7d0 [ 254.915236][ T8959] ? do_writepages+0x27a/0x600 [ 254.915278][ T8959] ? __pfx_ext4_writepages+0x10/0x10 [ 254.915330][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.915370][ T8959] ? __lock_acquire+0xb8a/0x1c90 [ 254.915417][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.915458][ T8959] ? __pfx_ext4_writepages+0x10/0x10 [ 254.915512][ T8959] do_writepages+0x27a/0x600 [ 254.915558][ T8959] ? __pfx_do_writepages+0x10/0x10 [ 254.915605][ T8959] __writeback_single_inode+0x160/0xfb0 [ 254.915660][ T8959] ? __pfx___writeback_single_inode+0x10/0x10 [ 254.915713][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.915751][ T8959] ? do_raw_spin_unlock+0x172/0x230 [ 254.915800][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.915842][ T8959] writeback_single_inode+0x2bc/0x550 [ 254.915903][ T8959] write_inode_now+0x170/0x1e0 [ 254.915933][ T8959] ? __pfx_write_inode_now+0x10/0x10 [ 254.915985][ T8959] ? find_held_lock+0x2b/0x80 [ 254.916038][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.916079][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.916122][ T8959] iput.part.0+0x487/0xb00 [ 254.916172][ T8959] iput+0x35/0x40 [ 254.916215][ T8959] ext4_xattr_block_set+0x67c/0x3650 [ 254.916267][ T8959] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 254.916312][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.916351][ T8959] ? xattr_find_entry+0x289/0x330 [ 254.916392][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.916430][ T8959] ? ext4_xattr_block_find+0x59/0x430 [ 254.916472][ T8959] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 254.916533][ T8959] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 254.916586][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.916625][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.916664][ T8959] ? dquot_initialize_needed+0x183/0x2a0 [ 254.916714][ T8959] __ext4_expand_extra_isize+0x346/0x480 [ 254.916758][ T8959] __ext4_mark_inode_dirty+0x544/0x870 [ 254.916814][ T8959] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 254.916868][ T8959] ? __pfx___might_resched+0x10/0x10 [ 254.916931][ T8959] ? ext4_journal_check_start+0x22b/0x340 [ 254.916981][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.917020][ T8959] ? __ext4_journal_start_sb+0x19e/0x690 [ 254.917067][ T8959] ? ext4_evict_inode+0x5cf/0x18e0 [ 254.917100][ T8959] ext4_evict_inode+0x74e/0x18e0 [ 254.917132][ T8959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 254.917163][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.917206][ T8959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 254.917236][ T8959] evict+0x3e6/0x920 [ 254.917282][ T8959] ? __pfx_evict+0x10/0x10 [ 254.917324][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.917368][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.917412][ T8959] iput.part.0+0x6a9/0xb00 [ 254.917457][ T8959] ? __pfx_ext4_drop_inode+0x10/0x10 [ 254.917503][ T8959] iput+0x35/0x40 [ 254.917546][ T8959] ext4_orphan_cleanup+0x731/0x11e0 [ 254.917605][ T8959] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 254.917663][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.917701][ T8959] ? ext4_register_li_request+0xec/0x9b0 [ 254.917740][ T8959] ext4_fill_super+0x8db7/0xaf70 [ 254.917789][ T8959] ? __pfx_ext4_fill_super+0x10/0x10 [ 254.917823][ T8959] ? do_raw_spin_lock+0x12c/0x2b0 [ 254.917869][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.917912][ T8959] ? find_held_lock+0x2b/0x80 [ 254.917968][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.918007][ T8959] ? sb_set_blocksize+0x176/0x1d0 [ 254.918045][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.918084][ T8959] ? setup_bdev_super+0x369/0x730 [ 254.918116][ T8959] get_tree_bdev_flags+0x38c/0x620 [ 254.918151][ T8959] ? __pfx_ext4_fill_super+0x10/0x10 [ 254.918186][ T8959] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 254.918223][ T8959] ? apparmor_capable+0x114/0x1d0 [ 254.918258][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.918297][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.918335][ T8959] ? security_capable+0x7e/0x260 [ 254.918390][ T8959] vfs_get_tree+0x8e/0x340 [ 254.918441][ T8959] path_mount+0x7b9/0x23a0 [ 254.918487][ T8959] ? __pfx_path_mount+0x10/0x10 [ 254.918530][ T8959] ? putname+0x154/0x1a0 [ 254.918577][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.918615][ T8959] ? putname+0x154/0x1a0 [ 254.918660][ T8959] ? __x64_sys_mount+0x293/0x310 [ 254.918701][ T8959] __x64_sys_mount+0x293/0x310 [ 254.918744][ T8959] ? __pfx___x64_sys_mount+0x10/0x10 [ 254.918786][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.918832][ T8959] do_syscall_64+0xcd/0xfa0 [ 254.918888][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.918921][ T8959] RIP: 0033:0x7f36a839066a [ 254.918947][ T8959] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.918980][ T8959] RSP: 002b:00007f36a9241e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.919010][ T8959] RAX: ffffffffffffffda RBX: 00007f36a9241ef0 RCX: 00007f36a839066a [ 254.919032][ T8959] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f36a9241eb0 [ 254.919053][ T8959] RBP: 0000200000000180 R08: 00007f36a9241ef0 R09: 0000000000800718 [ 254.919074][ T8959] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 254.919095][ T8959] R13: 00007f36a9241eb0 R14: 0000000000000473 R15: 0000200000000680 [ 254.919129][ T8959] [ 255.608260][ T8959] ------------[ cut here ]------------ [ 255.613938][ T8959] EA inode 11 i_nlink=2 [ 255.620857][ T8959] WARNING: CPU: 0 PID: 8959 at fs/ext4/xattr.c:1056 ext4_xattr_inode_update_ref+0x4ec/0x610 [ 255.635292][ T8959] Modules linked in: [ 255.639216][ T8959] CPU: 0 UID: 0 PID: 8959 Comm: syz.3.1116 Not tainted syzkaller #0 PREEMPT(full) [ 255.648615][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.658732][ T8959] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 255.665404][ T8959] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 5d a8 8b e8 35 00 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 36 cb 2e ff 44 0f b6 2d 22 8b dd 0d [ 255.685837][ T8959] RSP: 0018:ffffc90002f57178 EFLAGS: 00010282 [ 255.692571][ T8959] RAX: 0000000000000000 RBX: ffff888055a515b8 RCX: ffffc9000c3cc000 [ 255.700710][ T8959] RDX: 0000000000080000 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 255.708733][ T8959] RBP: ffffc90002f57240 R08: 0000000000000001 R09: 0000000000000000 [ 255.716973][ T8959] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 255.725153][ T8959] R13: 0000000000000000 R14: 1ffff920005eae32 R15: ffff888055a517a8 [ 255.733238][ T8959] FS: 00007f36a92426c0(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 255.742521][ T8959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.749145][ T8959] CR2: 00007f56a19156c0 CR3: 000000003a924000 CR4: 0000000000350ef0 [ 255.757216][ T8959] Call Trace: [ 255.760571][ T8959] [ 255.763519][ T8959] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 255.770632][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.776325][ T8959] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 255.782518][ T8959] ext4_xattr_set_entry+0x158f/0x1f00 [ 255.787954][ T8959] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 255.793782][ T8959] ? xattr_find_entry+0x289/0x330 [ 255.798852][ T8959] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 255.804154][ T8959] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 255.810120][ T8959] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 255.816591][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.822334][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.828003][ T8959] ? dquot_initialize_needed+0x183/0x2a0 [ 255.833739][ T8959] __ext4_expand_extra_isize+0x346/0x480 [ 255.839415][ T8959] __ext4_mark_inode_dirty+0x544/0x870 [ 255.845025][ T8959] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 255.851110][ T8959] ? __pfx___might_resched+0x10/0x10 [ 255.856454][ T8959] ? ext4_journal_check_start+0x22b/0x340 [ 255.862293][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.867966][ T8959] ? __ext4_journal_start_sb+0x19e/0x690 [ 255.874392][ T8959] ? ext4_evict_inode+0x5cf/0x18e0 [ 255.879531][ T8959] ext4_evict_inode+0x74e/0x18e0 [ 255.885092][ T8959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 255.890521][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.896273][ T8959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 255.902107][ T8959] evict+0x3e6/0x920 [ 255.904237][ T30] audit: type=1326 audit(1760491700.042:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 255.906039][ T8959] ? __pfx_evict+0x10/0x10 [ 255.928666][ T30] audit: type=1326 audit(1760491700.072:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 255.929204][ T30] audit: type=1326 audit(1760491700.072:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 255.933689][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.955752][ T30] audit: type=1326 audit(1760491700.102:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 255.979051][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.013727][ T8959] iput.part.0+0x6a9/0xb00 [ 256.018206][ T8959] ? __pfx_ext4_drop_inode+0x10/0x10 [ 256.023903][ T8959] iput+0x35/0x40 [ 256.027593][ T8959] ext4_orphan_cleanup+0x731/0x11e0 [ 256.033155][ T8959] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 256.038876][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.044935][ T8959] ? ext4_register_li_request+0xec/0x9b0 [ 256.050958][ T8959] ext4_fill_super+0x8db7/0xaf70 [ 256.055965][ T8959] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.061703][ T8959] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.066788][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.072825][ T8959] ? find_held_lock+0x2b/0x80 [ 256.078344][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.084786][ T8959] ? sb_set_blocksize+0x176/0x1d0 [ 256.089874][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.095673][ T8959] ? setup_bdev_super+0x369/0x730 [ 256.100808][ T8959] get_tree_bdev_flags+0x38c/0x620 [ 256.105975][ T8959] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.111363][ T8959] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 256.117052][ T8959] ? apparmor_capable+0x114/0x1d0 [ 256.122193][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.127882][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.133704][ T8959] ? security_capable+0x7e/0x260 [ 256.138738][ T8959] vfs_get_tree+0x8e/0x340 [ 256.143307][ T8959] path_mount+0x7b9/0x23a0 [ 256.147812][ T8959] ? __pfx_path_mount+0x10/0x10 [ 256.152834][ T8959] ? putname+0x154/0x1a0 [ 256.157143][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.162820][ T30] audit: type=1326 audit(1760491700.292:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 256.164522][ T30] audit: type=1326 audit(1760491700.302:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 256.186017][ T8959] ? putname+0x154/0x1a0 [ 256.213629][ T8959] ? __x64_sys_mount+0x293/0x310 [ 256.215182][ T30] audit: type=1326 audit(1760491700.302:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 256.218597][ T8959] __x64_sys_mount+0x293/0x310 [ 256.241934][ T30] audit: type=1326 audit(1760491700.302:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 256.245729][ T8959] ? __pfx___x64_sys_mount+0x10/0x10 [ 256.273362][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.279148][ T8959] do_syscall_64+0xcd/0xfa0 [ 256.284442][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.291059][ T8959] RIP: 0033:0x7f36a839066a [ 256.295652][ T8959] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.315571][ T8959] RSP: 002b:00007f36a9241e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.315644][ T30] audit: type=1326 audit(1760491700.302:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a18eec9 code=0x7ffc0000 [ 256.324234][ T8959] RAX: ffffffffffffffda RBX: 00007f36a9241ef0 RCX: 00007f36a839066a [ 256.324262][ T8959] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f36a9241eb0 [ 256.324287][ T8959] RBP: 0000200000000180 R08: 00007f36a9241ef0 R09: 0000000000800718 [ 256.324314][ T8959] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 256.324340][ T8959] R13: 00007f36a9241eb0 R14: 0000000000000473 R15: 0000200000000680 [ 256.324385][ T8959] [ 256.324403][ T8959] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.324426][ T8959] CPU: 0 UID: 0 PID: 8959 Comm: syz.3.1116 Not tainted syzkaller #0 PREEMPT(full) [ 256.324467][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.324489][ T8959] Call Trace: [ 256.324501][ T8959] [ 256.324514][ T8959] dump_stack_lvl+0x3d/0x1f0 [ 256.324577][ T8959] vpanic+0x640/0x6f0 [ 256.324621][ T8959] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 256.324668][ T8959] panic+0xca/0xd0 [ 256.324710][ T8959] ? __pfx_panic+0x10/0x10 [ 256.324763][ T8959] check_panic_on_warn+0xab/0xb0 [ 256.324808][ T8959] __warn+0xf6/0x3c0 [ 256.324851][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.324896][ T8959] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 256.324950][ T8959] report_bug+0x3c3/0x580 [ 256.325000][ T8959] ? ext4_xattr_inode_update_ref+0x4ec/0x610 [ 256.325047][ T8959] handle_bug+0x184/0x210 [ 256.325084][ T8959] exc_invalid_op+0x17/0x50 [ 256.325122][ T8959] asm_exc_invalid_op+0x1a/0x20 [ 256.325157][ T8959] RIP: 0010:ext4_xattr_inode_update_ref+0x4ec/0x610 [ 256.325206][ T8959] Code: df 48 8d 7b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 23 01 00 00 48 8b 73 40 44 89 e2 48 c7 c7 c0 5d a8 8b e8 35 00 ed fe 90 <0f> 0b 90 90 e9 d9 fe ff ff e8 36 cb 2e ff 44 0f b6 2d 22 8b dd 0d [ 256.325244][ T8959] RSP: 0018:ffffc90002f57178 EFLAGS: 00010282 [ 256.325273][ T8959] RAX: 0000000000000000 RBX: ffff888055a515b8 RCX: ffffc9000c3cc000 [ 256.325299][ T8959] RDX: 0000000000080000 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 256.325323][ T8959] RBP: ffffc90002f57240 R08: 0000000000000001 R09: 0000000000000000 [ 256.325347][ T8959] R10: 0000000000000001 R11: 000000002d2d2d2d R12: 0000000000000002 [ 256.325370][ T8959] R13: 0000000000000000 R14: 1ffff920005eae32 R15: ffff888055a517a8 [ 256.325403][ T8959] ? __warn_printk+0x1a5/0x350 [ 256.325449][ T8959] ? ext4_xattr_inode_update_ref+0x4eb/0x610 [ 256.325496][ T8959] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 256.325546][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.325608][ T8959] ? ext4_xattr_inode_iget+0x1ee/0x400 [ 256.325657][ T8959] ext4_xattr_set_entry+0x158f/0x1f00 [ 256.325713][ T8959] ? __pfx_ext4_xattr_set_entry+0x10/0x10 [ 256.325759][ T8959] ? xattr_find_entry+0x289/0x330 [ 256.325806][ T8959] ext4_xattr_ibody_set+0x3d6/0x5d0 [ 256.325857][ T8959] ext4_expand_extra_isize_ea+0x148c/0x1ab0 [ 256.325930][ T8959] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 256.325991][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.326034][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.326077][ T8959] ? dquot_initialize_needed+0x183/0x2a0 [ 256.326133][ T8959] __ext4_expand_extra_isize+0x346/0x480 [ 256.326182][ T8959] __ext4_mark_inode_dirty+0x544/0x870 [ 256.326245][ T8959] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 256.326306][ T8959] ? __pfx___might_resched+0x10/0x10 [ 256.326371][ T8959] ? ext4_journal_check_start+0x22b/0x340 [ 256.326427][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.326470][ T8959] ? __ext4_journal_start_sb+0x19e/0x690 [ 256.326523][ T8959] ? ext4_evict_inode+0x5cf/0x18e0 [ 256.326560][ T8959] ext4_evict_inode+0x74e/0x18e0 [ 256.326597][ T8959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 256.326631][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.326679][ T8959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 256.326712][ T8959] evict+0x3e6/0x920 [ 256.326763][ T8959] ? __pfx_evict+0x10/0x10 [ 256.326811][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.326861][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.326915][ T8959] iput.part.0+0x6a9/0xb00 [ 256.326964][ T8959] ? __pfx_ext4_drop_inode+0x10/0x10 [ 256.327016][ T8959] iput+0x35/0x40 [ 256.327064][ T8959] ext4_orphan_cleanup+0x731/0x11e0 [ 256.327131][ T8959] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 256.327195][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.327238][ T8959] ? ext4_register_li_request+0xec/0x9b0 [ 256.327281][ T8959] ext4_fill_super+0x8db7/0xaf70 [ 256.327337][ T8959] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.327375][ T8959] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.327426][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.327470][ T8959] ? find_held_lock+0x2b/0x80 [ 256.327532][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.327575][ T8959] ? sb_set_blocksize+0x176/0x1d0 [ 256.327618][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.327661][ T8959] ? setup_bdev_super+0x369/0x730 [ 256.327698][ T8959] get_tree_bdev_flags+0x38c/0x620 [ 256.327737][ T8959] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.327776][ T8959] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 256.327818][ T8959] ? apparmor_capable+0x114/0x1d0 [ 256.327858][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.327901][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.327949][ T8959] ? security_capable+0x7e/0x260 [ 256.328010][ T8959] vfs_get_tree+0x8e/0x340 [ 256.328066][ T8959] path_mount+0x7b9/0x23a0 [ 256.328116][ T8959] ? __pfx_path_mount+0x10/0x10 [ 256.328165][ T8959] ? putname+0x154/0x1a0 [ 256.328217][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.328260][ T8959] ? putname+0x154/0x1a0 [ 256.328310][ T8959] ? __x64_sys_mount+0x293/0x310 [ 256.328355][ T8959] __x64_sys_mount+0x293/0x310 [ 256.328403][ T8959] ? __pfx___x64_sys_mount+0x10/0x10 [ 256.328450][ T8959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.328501][ T8959] do_syscall_64+0xcd/0xfa0 [ 256.328563][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.328600][ T8959] RIP: 0033:0x7f36a839066a [ 256.328630][ T8959] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.328665][ T8959] RSP: 002b:00007f36a9241e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.328700][ T8959] RAX: ffffffffffffffda RBX: 00007f36a9241ef0 RCX: 00007f36a839066a [ 256.328725][ T8959] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f36a9241eb0 [ 256.328749][ T8959] RBP: 0000200000000180 R08: 00007f36a9241ef0 R09: 0000000000800718 [ 256.328774][ T8959] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 256.328797][ T8959] R13: 00007f36a9241eb0 R14: 0000000000000473 R15: 0000200000000680 [ 256.328837][ T8959] [ 256.346933][ T8959] Kernel Offset: disabled