last executing test programs: 57.448213519s ago: executing program 3 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 57.004081902s ago: executing program 3 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f00000004c0)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) close(r2) 56.744151128s ago: executing program 3 (id=58): acct(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 56.543708957s ago: executing program 3 (id=61): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./bus\x00', 0x82, &(0x7f0000000000)={[{@discard_unit_block}, {@fastboot}, {@test_dummy_encryption}, {@fsync_mode_strict}]}, 0x1, 0x1059a, &(0x7f0000020c40)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000000, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwrite64(r1, &(0x7f0000000140), 0x0, 0xfecc) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x0, 0x1aa287e8, 0x2}) 53.657223383s ago: executing program 3 (id=72): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 49.112122768s ago: executing program 3 (id=100): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc"}, 0x65) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}}, 0x0) 48.791831405s ago: executing program 32 (id=100): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc"}, 0x65) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}}, 0x0) 2.844396382s ago: executing program 1 (id=721): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 2.598197335s ago: executing program 1 (id=725): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x35a59414}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 1.724251819s ago: executing program 1 (id=730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) stat(0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8007ff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000001700)=0x10006) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_emit_ethernet(0x1d6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x7, 0x10000, &(0x7f0000000080)="081ab94cc2f39c427af7013e6c2fc047e9e161165afc407c6d275501b64a6895d54789e5d9886cbd32a222f9834052ba5becd09bacc3e796d3e26c7ea36c064a732bd50cd6e233605451db0f5bcb185c40bca995702487d8ad1982f05a857ed1f5647ae6998cde72047ec6565f8d517c609917"}) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r9 = socket(0x2a, 0x2, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x58, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) 1.048955151s ago: executing program 4 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc407c", 0x8, 0x3a, 0xff, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x5}}}}}}}, 0x46) 979.272316ms ago: executing program 4 (id=749): recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x3}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) 913.277438ms ago: executing program 2 (id=751): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/181, 0xb5}], 0x1, 0x0, 0xfffffffffffffce9}, 0x40010062) 912.718082ms ago: executing program 4 (id=752): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 832.173648ms ago: executing program 1 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0xfff1}, {0xc, 0xfff1}, {0x9, 0xffff}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c841}, 0x1) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746b", 0x4a, 0x11, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x100000500) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r5, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44800) socket$nl_sock_diag(0x10, 0x3, 0x4) 831.982664ms ago: executing program 2 (id=754): syz_emit_ethernet(0x14, &(0x7f0000020940)={@link_local, @random="50a245d5cde0", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xe, "11", "b8f03b"}}}}}}, 0x0) 821.445064ms ago: executing program 1 (id=755): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 786.274289ms ago: executing program 5 (id=756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x11000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 704.151021ms ago: executing program 2 (id=757): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 686.755033ms ago: executing program 1 (id=758): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) inotify_init() r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 593.027798ms ago: executing program 2 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) 544.320643ms ago: executing program 5 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f0000000140)='./file0\x00', 0x0) 537.537064ms ago: executing program 0 (id=761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "19690d", 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0) 503.633313ms ago: executing program 4 (id=762): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 452.365721ms ago: executing program 5 (id=763): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lstat(&(0x7f0000000400)='./file0\x00', 0x0) 452.232908ms ago: executing program 2 (id=764): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x200000, 0x158, 0x18}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 452.123058ms ago: executing program 0 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 398.231488ms ago: executing program 5 (id=766): socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 365.356707ms ago: executing program 4 (id=767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000030000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noquota}, {@debug}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}]}, 0x80, 0x62d, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") 316.561267ms ago: executing program 0 (id=768): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 297.420321ms ago: executing program 0 (id=769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 291.88682ms ago: executing program 5 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000"], 0xfc}}, 0x20000004) 184.376621ms ago: executing program 2 (id=771): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) close(0x3) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 178.636374ms ago: executing program 5 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 95.004633ms ago: executing program 0 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x21, 0x0, 0x7ffc1ffb}]}) time(0x0) 228.672µs ago: executing program 4 (id=774): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x6, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x5, 0x6}) 0s ago: executing program 0 (id=775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): x27b/0x3b50 [ 81.103980][ T6097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 81.104010][ T6097] ? __pfx___dev_queue_xmit+0x10/0x10 [ 81.104044][ T6097] ? ref_tracker_free+0x63a/0x7d0 [ 81.104075][ T6097] ? __asan_memcpy+0x40/0x70 [ 81.104098][ T6097] ? __pfx_ref_tracker_free+0x10/0x10 [ 81.104128][ T6097] ? __skb_clone+0x63/0x7a0 [ 81.104155][ T6097] ? __skb_clone+0x483/0x7a0 [ 81.104184][ T6097] ? skb_clone+0x246/0x3a0 [ 81.104211][ T6097] ? __netlink_deliver_tap+0x807/0x850 [ 81.104231][ T6097] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.104252][ T6097] ? rcu_is_watching+0x15/0xb0 [ 81.104270][ T6097] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.104289][ T6097] ? lock_release+0x4b/0x3e0 [ 81.104325][ T6097] netlink_unicast+0x82c/0x9e0 [ 81.104360][ T6097] ? __pfx_netlink_unicast+0x10/0x10 [ 81.104392][ T6097] ? netlink_sendmsg+0x642/0xb30 [ 81.104412][ T6097] ? skb_put+0x11b/0x210 [ 81.104435][ T6097] netlink_sendmsg+0x805/0xb30 [ 81.104461][ T6097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.104483][ T6097] ? futex_unqueue+0x22/0x240 [ 81.104505][ T6097] ? aa_sock_msg_perm+0xf1/0x1d0 [ 81.104525][ T6097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 81.104546][ T6097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.104568][ T6097] __sock_sendmsg+0x21c/0x270 [ 81.104599][ T6097] ____sys_sendmsg+0x505/0x830 [ 81.104624][ T6097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.104659][ T6097] ? import_iovec+0x74/0xa0 [ 81.104684][ T6097] ___sys_sendmsg+0x21f/0x2a0 [ 81.104710][ T6097] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.104739][ T6097] ? futex_wait+0x285/0x360 [ 81.104782][ T6097] ? __fget_files+0x2a/0x420 [ 81.104800][ T6097] ? __fget_files+0x3a0/0x420 [ 81.104823][ T6097] __x64_sys_sendmsg+0x19b/0x260 [ 81.104849][ T6097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 81.104880][ T6097] ? rcu_is_watching+0x15/0xb0 [ 81.104903][ T6097] ? rcu_is_watching+0x15/0xb0 [ 81.104924][ T6097] do_syscall_64+0xfa/0x3b0 [ 81.104945][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.104965][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 81.104988][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.105007][ T6097] RIP: 0033:0x7f25cfb8ebe9 [ 81.105039][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.105058][ T6097] RSP: 002b:00007f25d0984038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.105081][ T6097] RAX: ffffffffffffffda RBX: 00007f25cfdb6180 RCX: 00007f25cfb8ebe9 [ 81.105097][ T6097] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000008 [ 81.105111][ T6097] RBP: 00007f25cfc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.105123][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.105135][ T6097] R13: 00007f25cfdb6218 R14: 00007f25cfdb6180 R15: 00007ffdbaef2e18 [ 81.105159][ T6097] [ 81.112546][ T6144] netlink: 'syz.2.67': attribute type 12 has an invalid length. [ 81.124010][ T6097] Mem-Info: [ 81.124030][ T6097] active_anon:18991 inactive_anon:0 isolated_anon:0 [ 81.124030][ T6097] active_file:8015 inactive_file:39821 isolated_file:0 [ 81.124030][ T6097] unevictable:768 dirty:1705 writeback:0 [ 81.124030][ T6097] slab_reclaimable:10615 slab_unreclaimable:95171 [ 81.124030][ T6097] mapped:29411 shmem:14712 pagetables:1263 [ 81.124030][ T6097] sec_pagetables:0 bounce:0 [ 81.124030][ T6097] kernel_misc_reclaimable:0 [ 81.124030][ T6097] free:1281231 free_pcp:17492 free_cma:0 [ 81.730668][ T6097] Node 0 active_anon:108772kB inactive_anon:0kB active_file:32080kB inactive_file:159084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117536kB dirty:6872kB writeback:0kB shmem:90016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11820kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.766074][ T6130] loop3: detected capacity change from 0 to 131072 [ 81.775219][ T6097] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.807564][ T6130] F2FS-fs (loop3): Test dummy encryption mode enabled [ 81.820645][ T6130] F2FS-fs (loop3): invalid crc value [ 81.828970][ T6097] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.859169][ T6097] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 81.865452][ T6097] Node 0 DMA32 free:1195864kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109628kB inactive_anon:0kB active_file:32080kB inactive_file:157512kB unevictable:1536kB writepending:6872kB present:3129332kB managed:2557328kB mlocked:0kB bounce:0kB free_pcp:46868kB local_pcp:29948kB free_cma:0kB [ 81.898155][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.932205][ T6097] lowmem_reserve[]: 0 0 1 1 1 [ 81.937335][ T6097] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 81.968951][ T6097] lowmem_reserve[]: 0 0 0 0 0 [ 81.974887][ T6097] Node 1 Normal free:3879036kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23344kB local_pcp:8088kB free_cma:0kB [ 82.006819][ T6097] lowmem_reserve[]: 0 0 0 0 0 [ 82.011606][ T6097] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 82.014576][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.024925][ T6097] Node 0 DMA32: 1*4kB (M) 0*8kB 0*16kB 1*32kB (U) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 1*512kB (U) 2*1024kB (UM) 0*2048kB 291*4096kB (M) = 1195108kB [ 82.058246][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.067071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.082732][ T6097] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 82.126938][ T6097] Node 1 Normal: 152*4kB (UME) 58*8kB (UME) 44*16kB (UME) 26*32kB (UME) 14*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3879088kB [ 82.130246][ T6130] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 82.191989][ T6156] loop4: detected capacity change from 0 to 2364 [ 82.203622][ T6097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.218930][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.236003][ T6130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.269937][ T6097] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.308344][ T6097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.322885][ T6130] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 82.352562][ T6153] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 82.359301][ T6153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.370172][ T6097] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.379916][ T6097] 71317 total pagecache pages [ 82.384949][ T6097] 0 pages in swap cache [ 82.391863][ T6097] Free swap = 124996kB [ 82.398291][ T6156] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 82.404905][ T6156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.414945][ T6153] vhci_hcd vhci_hcd.0: Device attached [ 82.415474][ T6097] Total swap = 124996kB [ 82.425042][ T6097] 2097051 pages RAM [ 82.429036][ T6097] 0 pages HighMem/MovableOnly [ 82.441933][ T6156] vhci_hcd vhci_hcd.0: Device attached [ 82.455089][ T6097] 425693 pages reserved [ 82.459821][ T6170] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 82.466432][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 82.476023][ T6097] 0 pages cma reserved [ 82.501527][ T6173] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.529750][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 82.562181][ T6156] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 82.568814][ T6156] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.583607][ T6130] loop3: detected capacity change from 131072 to 0 [ 82.652468][ T5940] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 82.668710][ T5859] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 82.680259][ T6156] vhci_hcd vhci_hcd.0: Device attached [ 82.714277][ T6153] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(12) [ 82.721019][ T6153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 82.742718][ T5859] syz-executor: attempt to access beyond end of device [ 82.742718][ T5859] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0 [ 82.770732][ T6153] vhci_hcd vhci_hcd.0: Device attached [ 82.778736][ T5859] F2FS-fs (loop3): f2fs_commit_super fails to record errors:3, err:-5 [ 82.894360][ T5859] syz-executor: attempt to access beyond end of device [ 82.894360][ T5859] loop3: rw=14337, sector=8192, nr_sectors = 40 limit=0 [ 82.896039][ T6165] vhci_hcd: connection reset by peer [ 82.909359][ T6167] vhci_hcd: connection closed [ 82.917049][ T6174] vhci_hcd: connection closed [ 82.921909][ T5964] vhci_hcd: stop threads [ 82.932075][ T6171] vhci_hcd: connection closed [ 82.943436][ T5964] vhci_hcd: release socket [ 82.983041][ T6176] vhci_hcd: connection closed [ 82.984500][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 82.984530][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.984543][ T5859] Call Trace: [ 82.984550][ T5859] [ 82.984558][ T5859] dump_stack_lvl+0x189/0x250 [ 82.984591][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.984616][ T5859] ? __pfx_queue_work_on+0x10/0x10 [ 82.984636][ T5859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.984667][ T5859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.984702][ T5859] f2fs_handle_critical_error+0x37c/0x540 [ 82.984742][ T5859] f2fs_write_end_io+0x886/0xb60 [ 82.984771][ T5859] __submit_merged_bio+0x27a/0x6a0 [ 82.984802][ T5859] __submit_merged_write_cond+0x255/0x530 [ 82.984833][ T5859] f2fs_sync_meta_pages+0x8c5/0x9b0 [ 82.984869][ T5859] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 82.984899][ T5859] ? unwind_next_frame+0xa5/0x2390 [ 82.984941][ T5859] ? xas_start+0x3b3/0x770 [ 82.984984][ T5859] ? folio_set_f2fs_reference+0x44/0x170 [ 82.985010][ T5859] ? folio_unlock+0x101/0x160 [ 82.985044][ T5859] do_checkpoint+0x2240/0x3e40 [ 82.985080][ T5859] ? __pfx_do_checkpoint+0x10/0x10 [ 82.985097][ T5859] ? rcu_is_watching+0x15/0xb0 [ 82.985116][ T5859] ? lock_release+0x4b/0x3e0 [ 82.985147][ T5859] ? rcu_is_watching+0x15/0xb0 [ 82.985167][ T5859] ? lock_release+0x4b/0x3e0 [ 82.985199][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 82.985224][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.985245][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.985266][ T5859] ? __pfx_down_write+0x10/0x10 [ 82.985295][ T5859] ? __f2fs_save_inmem_curseg+0x269/0x3c0 [ 82.985317][ T5859] ? up_write+0x1c4/0x420 [ 82.985341][ T5859] f2fs_write_checkpoint+0x15bb/0x1df0 [ 82.985376][ T5859] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 82.985424][ T5859] ? kill_f2fs_super+0x298/0x6c0 [ 82.985446][ T5859] kill_f2fs_super+0x2c3/0x6c0 [ 82.985469][ T5859] ? __pfx_kill_f2fs_super+0x10/0x10 [ 82.985486][ T5859] ? radix_tree_delete_item+0x2b6/0x400 [ 82.985521][ T5859] ? shrinker_free+0x2ce/0x3e0 [ 82.985545][ T5859] deactivate_locked_super+0xbc/0x130 [ 82.985570][ T5859] cleanup_mnt+0x425/0x4c0 [ 82.985595][ T5859] task_work_run+0x1d4/0x260 [ 82.985625][ T5859] ? __pfx_task_work_run+0x10/0x10 [ 82.985654][ T5859] ? kmem_cache_free+0x18f/0x400 [ 82.985685][ T5859] do_exit+0x6b5/0x2300 [ 82.985714][ T5859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.985749][ T5859] ? __pfx_do_exit+0x10/0x10 [ 82.985775][ T5859] ? rcu_is_watching+0x15/0xb0 [ 82.985797][ T5859] ? rcu_is_watching+0x15/0xb0 [ 82.985819][ T5859] do_group_exit+0x21c/0x2d0 [ 82.985849][ T5859] __x64_sys_exit_group+0x3f/0x40 [ 82.985874][ T5859] x64_sys_call+0x21f7/0x2200 [ 82.985901][ T5859] do_syscall_64+0xfa/0x3b0 [ 82.985922][ T5859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.985942][ T5859] ? clear_bhb_loop+0x60/0xb0 [ 82.985965][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.985984][ T5859] RIP: 0033:0x7f3b3678ebe9 [ 82.986001][ T5859] Code: Unable to access opcode bytes at 0x7f3b3678ebbf. [ 82.986011][ T5859] RSP: 002b:00007ffd21694c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 82.986031][ T5859] RAX: ffffffffffffffda RBX: 00007f3b36811c77 RCX: 00007f3b3678ebe9 [ 82.986045][ T5859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 82.986056][ T5859] RBP: 0000000000000010 R08: 00007ffd216929b6 R09: 00007ffd21695ed0 [ 82.986069][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21695ed0 [ 82.986081][ T5859] R13: 00007f3b36811c05 R14: 000055556871b4a8 R15: 00007ffd21696fa0 [ 82.986105][ T5859] [ 82.986113][ T5859] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.045667][ T5964] vhci_hcd: disconnect device [ 83.049157][ T5982] kworker/0:6: attempt to access beyond end of device [ 83.049157][ T5982] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0 [ 83.075964][ T5964] vhci_hcd: stop threads [ 83.085054][ T5982] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 83.129302][ T5964] vhci_hcd: release socket [ 83.158803][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 83.158838][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.158853][ T5859] Call Trace: [ 83.158861][ T5859] [ 83.158870][ T5859] dump_stack_lvl+0x189/0x250 [ 83.158907][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.158934][ T5859] ? __pfx_queue_work_on+0x10/0x10 [ 83.158956][ T5859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 83.158992][ T5859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.159033][ T5859] f2fs_handle_critical_error+0x37c/0x540 [ 83.159071][ T5859] f2fs_write_end_io+0x886/0xb60 [ 83.159102][ T5859] __submit_merged_bio+0x27a/0x6a0 [ 83.159137][ T5859] __submit_merged_write_cond+0x255/0x530 [ 83.159172][ T5859] f2fs_sync_meta_pages+0x8c5/0x9b0 [ 83.159213][ T5859] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 83.159247][ T5859] ? unwind_next_frame+0xa5/0x2390 [ 83.159293][ T5859] ? xas_start+0x3b3/0x770 [ 83.159342][ T5859] ? folio_set_f2fs_reference+0x44/0x170 [ 83.159370][ T5859] ? folio_unlock+0x101/0x160 [ 83.159410][ T5859] do_checkpoint+0x2240/0x3e40 [ 83.159449][ T5859] ? __pfx_do_checkpoint+0x10/0x10 [ 83.159467][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.159491][ T5859] ? lock_release+0x4b/0x3e0 [ 83.159526][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.159548][ T5859] ? lock_release+0x4b/0x3e0 [ 83.159584][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 83.159612][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.159637][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.159661][ T5859] ? __pfx_down_write+0x10/0x10 [ 83.159688][ T5859] ? __f2fs_save_inmem_curseg+0x269/0x3c0 [ 83.159720][ T5859] ? up_write+0x1c4/0x420 [ 83.159749][ T5859] f2fs_write_checkpoint+0x15bb/0x1df0 [ 83.159786][ T5859] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 83.159840][ T5859] ? kill_f2fs_super+0x298/0x6c0 [ 83.159865][ T5859] kill_f2fs_super+0x2c3/0x6c0 [ 83.159891][ T5859] ? __pfx_kill_f2fs_super+0x10/0x10 [ 83.159910][ T5859] ? radix_tree_delete_item+0x2b6/0x400 [ 83.159949][ T5859] ? shrinker_free+0x2ce/0x3e0 [ 83.159975][ T5859] deactivate_locked_super+0xbc/0x130 [ 83.160004][ T5859] cleanup_mnt+0x425/0x4c0 [ 83.160035][ T5859] task_work_run+0x1d4/0x260 [ 83.160067][ T5859] ? __pfx_task_work_run+0x10/0x10 [ 83.160100][ T5859] ? kmem_cache_free+0x18f/0x400 [ 83.160135][ T5859] do_exit+0x6b5/0x2300 [ 83.160168][ T5859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.160200][ T5859] ? __pfx_do_exit+0x10/0x10 [ 83.160230][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.160256][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.160281][ T5859] do_group_exit+0x21c/0x2d0 [ 83.160315][ T5859] __x64_sys_exit_group+0x3f/0x40 [ 83.160344][ T5859] x64_sys_call+0x21f7/0x2200 [ 83.160376][ T5859] do_syscall_64+0xfa/0x3b0 [ 83.160399][ T5859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.160420][ T5859] ? clear_bhb_loop+0x60/0xb0 [ 83.160446][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.160468][ T5859] RIP: 0033:0x7f3b3678ebe9 [ 83.160487][ T5859] Code: Unable to access opcode bytes at 0x7f3b3678ebbf. [ 83.160498][ T5859] RSP: 002b:00007ffd21694c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.160523][ T5859] RAX: ffffffffffffffda RBX: 00007f3b36811c77 RCX: 00007f3b3678ebe9 [ 83.160540][ T5859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.160554][ T5859] RBP: 0000000000000010 R08: 00007ffd216929b6 R09: 00007ffd21695ed0 [ 83.160568][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21695ed0 [ 83.160583][ T5859] R13: 00007f3b36811c05 R14: 000055556871b4a8 R15: 00007ffd21696fa0 [ 83.160611][ T5859] [ 83.160620][ T5859] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.274705][ T5964] vhci_hcd: disconnect device [ 83.282750][ T5982] kworker/0:6: attempt to access beyond end of device [ 83.282750][ T5982] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0 [ 83.312757][ T5964] vhci_hcd: stop threads [ 83.318821][ T5982] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 83.342453][ T5964] vhci_hcd: release socket [ 83.351152][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 83.351186][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.351200][ T5859] Call Trace: [ 83.351209][ T5859] [ 83.351218][ T5859] dump_stack_lvl+0x189/0x250 [ 83.351254][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.351282][ T5859] ? __pfx_queue_work_on+0x10/0x10 [ 83.351306][ T5859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 83.351341][ T5859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.351382][ T5859] f2fs_handle_critical_error+0x37c/0x540 [ 83.351421][ T5859] f2fs_write_end_io+0x886/0xb60 [ 83.351450][ T5859] __submit_merged_bio+0x27a/0x6a0 [ 83.351485][ T5859] __submit_merged_write_cond+0x255/0x530 [ 83.351561][ T5859] f2fs_sync_meta_pages+0x8c5/0x9b0 [ 83.351602][ T5859] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 83.351636][ T5859] ? unwind_next_frame+0xa5/0x2390 [ 83.351683][ T5859] ? xas_start+0x3b3/0x770 [ 83.351739][ T5859] ? folio_set_f2fs_reference+0x44/0x170 [ 83.351768][ T5859] ? folio_unlock+0x101/0x160 [ 83.351808][ T5859] do_checkpoint+0x2240/0x3e40 [ 83.351847][ T5859] ? __pfx_do_checkpoint+0x10/0x10 [ 83.351867][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.351890][ T5859] ? lock_release+0x4b/0x3e0 [ 83.351924][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.351946][ T5859] ? lock_release+0x4b/0x3e0 [ 83.351983][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 83.352011][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.352035][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.352058][ T5859] ? __pfx_down_write+0x10/0x10 [ 83.352085][ T5859] ? __f2fs_save_inmem_curseg+0x269/0x3c0 [ 83.352109][ T5859] ? up_write+0x1c4/0x420 [ 83.352137][ T5859] f2fs_write_checkpoint+0x15bb/0x1df0 [ 83.352174][ T5859] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 83.352227][ T5859] ? kill_f2fs_super+0x298/0x6c0 [ 83.352253][ T5859] kill_f2fs_super+0x2c3/0x6c0 [ 83.352278][ T5859] ? __pfx_kill_f2fs_super+0x10/0x10 [ 83.352298][ T5859] ? radix_tree_delete_item+0x2b6/0x400 [ 83.352337][ T5859] ? shrinker_free+0x2ce/0x3e0 [ 83.352370][ T5859] deactivate_locked_super+0xbc/0x130 [ 83.352400][ T5859] cleanup_mnt+0x425/0x4c0 [ 83.352428][ T5859] task_work_run+0x1d4/0x260 [ 83.352462][ T5859] ? __pfx_task_work_run+0x10/0x10 [ 83.352495][ T5859] ? kmem_cache_free+0x18f/0x400 [ 83.352530][ T5859] do_exit+0x6b5/0x2300 [ 83.352564][ T5859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.352593][ T5859] ? __pfx_do_exit+0x10/0x10 [ 83.352622][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.352647][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.352673][ T5859] do_group_exit+0x21c/0x2d0 [ 83.352712][ T5859] __x64_sys_exit_group+0x3f/0x40 [ 83.352741][ T5859] x64_sys_call+0x21f7/0x2200 [ 83.352772][ T5859] do_syscall_64+0xfa/0x3b0 [ 83.352795][ T5859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.352818][ T5859] ? clear_bhb_loop+0x60/0xb0 [ 83.352844][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.352865][ T5859] RIP: 0033:0x7f3b3678ebe9 [ 83.352884][ T5859] Code: Unable to access opcode bytes at 0x7f3b3678ebbf. [ 83.352897][ T5859] RSP: 002b:00007ffd21694c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.352920][ T5859] RAX: ffffffffffffffda RBX: 00007f3b36811c77 RCX: 00007f3b3678ebe9 [ 83.352937][ T5859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.352951][ T5859] RBP: 0000000000000010 R08: 00007ffd216929b6 R09: 00007ffd21695ed0 [ 83.352965][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21695ed0 [ 83.352980][ T5859] R13: 00007f3b36811c05 R14: 000055556871b4a8 R15: 00007ffd21696fa0 [ 83.353008][ T5859] [ 83.353206][ T10] kworker/0:1: attempt to access beyond end of device [ 83.353206][ T10] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0 [ 83.404602][ T5964] vhci_hcd: disconnect device [ 83.425629][ T5859] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.539623][ T5964] vhci_hcd: stop threads [ 83.552526][ T10] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 83.575017][ T5964] vhci_hcd: release socket [ 83.599145][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 83.599179][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.599193][ T5859] Call Trace: [ 83.599202][ T5859] [ 83.599211][ T5859] dump_stack_lvl+0x189/0x250 [ 83.599247][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.599276][ T5859] ? __pfx_queue_work_on+0x10/0x10 [ 83.599299][ T5859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 83.599334][ T5859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.599376][ T5859] f2fs_handle_critical_error+0x37c/0x540 [ 83.599414][ T5859] f2fs_write_end_io+0x886/0xb60 [ 83.599444][ T5859] __submit_merged_bio+0x27a/0x6a0 [ 83.599480][ T5859] __submit_merged_write_cond+0x255/0x530 [ 83.599514][ T5859] f2fs_sync_meta_pages+0x8c5/0x9b0 [ 83.599555][ T5859] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 83.599589][ T5859] ? unwind_next_frame+0xa5/0x2390 [ 83.599637][ T5859] ? xas_start+0x3b3/0x770 [ 83.599699][ T5859] ? folio_set_f2fs_reference+0x44/0x170 [ 83.599728][ T5859] ? folio_unlock+0x101/0x160 [ 83.599767][ T5859] do_checkpoint+0x2240/0x3e40 [ 83.599809][ T5859] ? __pfx_do_checkpoint+0x10/0x10 [ 83.599829][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.599851][ T5859] ? lock_release+0x4b/0x3e0 [ 83.599886][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.599909][ T5859] ? lock_release+0x4b/0x3e0 [ 83.599946][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 83.599974][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.599999][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.600022][ T5859] ? __pfx_down_write+0x10/0x10 [ 83.600049][ T5859] ? __f2fs_save_inmem_curseg+0x269/0x3c0 [ 83.600073][ T5859] ? up_write+0x1c4/0x420 [ 83.600101][ T5859] f2fs_write_checkpoint+0x15bb/0x1df0 [ 83.600140][ T5859] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 83.600195][ T5859] ? kill_f2fs_super+0x298/0x6c0 [ 83.600220][ T5859] kill_f2fs_super+0x2c3/0x6c0 [ 83.600246][ T5859] ? __pfx_kill_f2fs_super+0x10/0x10 [ 83.600265][ T5859] ? radix_tree_delete_item+0x2b6/0x400 [ 83.600306][ T5859] ? shrinker_free+0x2ce/0x3e0 [ 83.600333][ T5859] deactivate_locked_super+0xbc/0x130 [ 83.600362][ T5859] cleanup_mnt+0x425/0x4c0 [ 83.600392][ T5859] task_work_run+0x1d4/0x260 [ 83.600425][ T5859] ? __pfx_task_work_run+0x10/0x10 [ 83.600458][ T5859] ? kmem_cache_free+0x18f/0x400 [ 83.600492][ T5859] do_exit+0x6b5/0x2300 [ 83.600541][ T5859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.600571][ T5859] ? __pfx_do_exit+0x10/0x10 [ 83.600601][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.600626][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.600652][ T5859] do_group_exit+0x21c/0x2d0 [ 83.600692][ T5859] __x64_sys_exit_group+0x3f/0x40 [ 83.600722][ T5859] x64_sys_call+0x21f7/0x2200 [ 83.600752][ T5859] do_syscall_64+0xfa/0x3b0 [ 83.600777][ T5859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.600799][ T5859] ? clear_bhb_loop+0x60/0xb0 [ 83.600825][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.600846][ T5859] RIP: 0033:0x7f3b3678ebe9 [ 83.600862][ T5859] Code: Unable to access opcode bytes at 0x7f3b3678ebbf. [ 83.600874][ T5859] RSP: 002b:00007ffd21694c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.600898][ T5859] RAX: ffffffffffffffda RBX: 00007f3b36811c77 RCX: 00007f3b3678ebe9 [ 83.600915][ T5859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.600930][ T5859] RBP: 0000000000000010 R08: 00007ffd216929b6 R09: 00007ffd21695ed0 [ 83.600945][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21695ed0 [ 83.600960][ T5859] R13: 00007f3b36811c05 R14: 000055556871b4a8 R15: 00007ffd21696fa0 [ 83.600989][ T5859] [ 83.600997][ T5859] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.710586][ T5964] vhci_hcd: disconnect device [ 83.714519][ T10] kworker/0:1: attempt to access beyond end of device [ 83.714519][ T10] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0 [ 83.919304][ T5964] vhci_hcd: stop threads [ 83.920615][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 83.920644][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.920660][ T5859] Call Trace: [ 83.920668][ T5859] [ 83.920677][ T5859] dump_stack_lvl+0x189/0x250 [ 83.920713][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.920740][ T5859] ? __pfx_queue_work_on+0x10/0x10 [ 83.920762][ T5859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 83.920797][ T5859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.920836][ T5859] f2fs_handle_critical_error+0x37c/0x540 [ 83.920872][ T5859] f2fs_write_end_io+0x886/0xb60 [ 83.920902][ T5859] __submit_merged_bio+0x27a/0x6a0 [ 83.920936][ T5859] __submit_merged_write_cond+0x255/0x530 [ 83.920970][ T5859] f2fs_sync_meta_pages+0x8c5/0x9b0 [ 83.921008][ T5859] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 83.921043][ T5859] ? unwind_next_frame+0xa5/0x2390 [ 83.921084][ T5859] ? xas_start+0x3b3/0x770 [ 83.921129][ T5859] ? folio_set_f2fs_reference+0x44/0x170 [ 83.921156][ T5859] ? folio_unlock+0x101/0x160 [ 83.921195][ T5859] do_checkpoint+0x2240/0x3e40 [ 83.921231][ T5859] ? __pfx_do_checkpoint+0x10/0x10 [ 83.921251][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.921273][ T5859] ? lock_release+0x4b/0x3e0 [ 83.921308][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.921328][ T5859] ? lock_release+0x4b/0x3e0 [ 83.921365][ T5859] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 83.921391][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.921414][ T5859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.921438][ T5859] ? __pfx_down_write+0x10/0x10 [ 83.921464][ T5859] ? __f2fs_save_inmem_curseg+0x269/0x3c0 [ 83.921486][ T5859] ? up_write+0x1c4/0x420 [ 83.921512][ T5859] f2fs_write_checkpoint+0x15bb/0x1df0 [ 83.921548][ T5859] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 83.921600][ T5859] ? kill_f2fs_super+0x298/0x6c0 [ 83.921625][ T5859] kill_f2fs_super+0x2c3/0x6c0 [ 83.921650][ T5859] ? __pfx_kill_f2fs_super+0x10/0x10 [ 83.921669][ T5859] ? radix_tree_delete_item+0x2b6/0x400 [ 83.921707][ T5859] ? shrinker_free+0x2ce/0x3e0 [ 83.921735][ T5859] deactivate_locked_super+0xbc/0x130 [ 83.921763][ T5859] cleanup_mnt+0x425/0x4c0 [ 83.921791][ T5859] task_work_run+0x1d4/0x260 [ 83.921825][ T5859] ? __pfx_task_work_run+0x10/0x10 [ 83.921857][ T5859] ? kmem_cache_free+0x18f/0x400 [ 83.921889][ T5859] do_exit+0x6b5/0x2300 [ 83.921921][ T5859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.921950][ T5859] ? __pfx_do_exit+0x10/0x10 [ 83.921979][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.922003][ T5859] ? rcu_is_watching+0x15/0xb0 [ 83.922028][ T5859] do_group_exit+0x21c/0x2d0 [ 83.922059][ T5859] __x64_sys_exit_group+0x3f/0x40 [ 83.922088][ T5859] x64_sys_call+0x21f7/0x2200 [ 83.922117][ T5859] do_syscall_64+0xfa/0x3b0 [ 83.922142][ T5859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.922165][ T5859] ? clear_bhb_loop+0x60/0xb0 [ 83.922188][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.922211][ T5859] RIP: 0033:0x7f3b3678ebe9 [ 83.922230][ T5859] Code: Unable to access opcode bytes at 0x7f3b3678ebbf. [ 83.922241][ T5859] RSP: 002b:00007ffd21694c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.922265][ T5859] RAX: ffffffffffffffda RBX: 00007f3b36811c77 RCX: 00007f3b3678ebe9 [ 83.922281][ T5859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.922295][ T5859] RBP: 0000000000000010 R08: 00007ffd216929b6 R09: 00007ffd21695ed0 [ 83.922310][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21695ed0 [ 83.922324][ T5859] R13: 00007f3b36811c05 R14: 000055556871b4a8 R15: 00007ffd21696fa0 [ 83.922365][ T5859] [ 83.922511][ T5859] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.944943][ T5964] vhci_hcd: release socket [ 83.948872][ T5859] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 84.001615][ T5964] vhci_hcd: disconnect device [ 84.007354][ T10] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 84.981173][ T10] kworker/0:1: attempt to access beyond end of device [ 84.981173][ T10] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0 [ 84.994892][ T10] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 85.124324][ T30] audit: type=1326 audit(1755330871.051:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 85.213581][ T30] audit: type=1326 audit(1755330871.071:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 85.313412][ T30] audit: type=1326 audit(1755330871.111:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 85.405729][ T6200] cgroup: Unknown subsys name 'seclabel' [ 85.466599][ T30] audit: type=1326 audit(1755330871.151:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 85.497399][ T6203] loop1: detected capacity change from 0 to 8192 [ 85.643056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.707688][ T4601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.711958][ T30] audit: type=1326 audit(1755330871.151:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 86.082153][ T4601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.142478][ T6210] syz.2.87 uses obsolete (PF_INET,SOCK_PACKET) [ 86.370639][ T6217] loop0: detected capacity change from 0 to 512 [ 86.373156][ T4601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.379345][ T6217] EXT4-fs: Ignoring removed oldalloc option [ 86.490843][ T6217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.598847][ T6217] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.653537][ T6217] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.90: bg 0: block 217: padding at end of block bitmap is not set [ 86.695925][ T4601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.770045][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.004122][ T4601] bridge_slave_1: left allmulticast mode [ 87.040047][ T4601] bridge_slave_1: left promiscuous mode [ 87.089698][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.195707][ T4601] bridge_slave_0: left allmulticast mode [ 87.220040][ T4601] bridge_slave_0: left promiscuous mode [ 87.252975][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.267387][ T6246] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 87.274136][ T6246] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.337488][ T6252] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(20) [ 87.344135][ T6252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.373418][ T6256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.385615][ T6252] vhci_hcd vhci_hcd.0: Device attached [ 87.391248][ T6246] vhci_hcd vhci_hcd.0: Device attached [ 87.462531][ T6252] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(22) [ 87.469193][ T6252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.499050][ T6252] vhci_hcd vhci_hcd.0: Device attached [ 87.516178][ T6256] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(26) [ 87.522831][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.533390][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 87.540665][ T6252] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.575067][ T6252] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.783997][ T4601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.798534][ T6257] vhci_hcd: connection closed [ 87.798893][ T13] vhci_hcd: stop threads [ 87.808813][ T6253] vhci_hcd: connection closed [ 87.809470][ T6247] vhci_hcd: connection reset by peer [ 87.821672][ T6259] vhci_hcd: connection closed [ 87.822825][ T4601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.839805][ T13] vhci_hcd: release socket [ 87.844462][ T13] vhci_hcd: disconnect device [ 87.851990][ T13] vhci_hcd: stop threads [ 87.857458][ T13] vhci_hcd: release socket [ 87.862094][ T13] vhci_hcd: disconnect device [ 87.868987][ T4601] bond0 (unregistering): Released all slaves [ 87.875748][ T13] vhci_hcd: stop threads [ 87.881173][ T13] vhci_hcd: release socket [ 87.907286][ T13] vhci_hcd: disconnect device [ 87.922142][ T13] vhci_hcd: stop threads [ 87.941642][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.942059][ T13] vhci_hcd: release socket [ 87.955281][ T13] vhci_hcd: disconnect device [ 87.960221][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.970153][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.978891][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.987207][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.022778][ T5940] vhci_hcd: vhci_device speed not set [ 88.162096][ T6279] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 88.213549][ T6280] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 88.251697][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.254108][ T30] audit: type=1326 audit(1755330874.201:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 88.261332][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.300417][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.317866][ T30] audit: type=1326 audit(1755330874.241:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 88.342057][ T30] audit: type=1326 audit(1755330874.241:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 88.412205][ T30] audit: type=1326 audit(1755330874.241:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 88.529913][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.547986][ T30] audit: type=1326 audit(1755330874.241:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 88.728880][ T4601] hsr_slave_0: left promiscuous mode [ 88.760038][ T4601] hsr_slave_1: left promiscuous mode [ 88.793501][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.839999][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.887098][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.912661][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.961465][ T4601] veth1_macvtap: left promiscuous mode [ 88.972192][ T6317] openvswitch: netlink: Flow key attr not present in new flow. [ 88.987176][ T4601] veth0_macvtap: left promiscuous mode [ 88.999416][ T4601] veth1_vlan: left promiscuous mode [ 89.005139][ T4601] veth0_vlan: left promiscuous mode [ 89.324715][ T5985] usb usb42-port1: attempt power cycle [ 89.335210][ T4601] team0 (unregistering): Port device team_slave_1 removed [ 89.355526][ T4601] team0 (unregistering): Port device team_slave_0 removed [ 89.550461][ T6326] loop1: detected capacity change from 0 to 32768 [ 89.579841][ T6326] XFS: noikeep mount option is deprecated. [ 89.627843][ T6326] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.690377][ T6326] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 89.718537][ T6326] XFS (loop1): Starting recovery (logdev: internal) [ 89.771511][ T6326] XFS (loop1): Ending recovery (logdev: internal) [ 89.826058][ T6326] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 89.832637][ T6326] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.845772][ T6326] vhci_hcd vhci_hcd.0: Device attached [ 89.868395][ T6326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.878270][ T6326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.893190][ T5985] usb usb42-port1: unable to enumerate USB device [ 89.924180][ T6326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.950575][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 89.985381][ T6326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.026242][ T6326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.034932][ T1218] vhci_hcd: vhci_device speed not set [ 90.042855][ T5867] Bluetooth: hci1: command tx timeout [ 90.072672][ T6326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.105413][ T6326] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 90.113091][ T1218] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 90.117170][ T6326] XFS (loop1): Unmount and run xfs_repair [ 90.174204][ T6351] vhci_hcd: connection closed [ 90.176252][ T13] vhci_hcd: stop threads [ 90.202336][ T13] vhci_hcd: release socket [ 90.218248][ T13] vhci_hcd: disconnect device [ 90.235470][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 90.235489][ T30] audit: type=1326 audit(1755330876.191:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.264275][ T30] audit: type=1326 audit(1755330876.191:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.288451][ T30] audit: type=1326 audit(1755330876.191:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.318206][ T6373] loop2: detected capacity change from 0 to 512 [ 90.341647][ T6373] EXT4-fs: Ignoring removed bh option [ 90.342486][ T30] audit: type=1326 audit(1755330876.191:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.375292][ T6373] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.406525][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425442][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.448360][ T30] audit: type=1326 audit(1755330876.241:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.451999][ T6373] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.481635][ T6273] bridge_slave_0: entered allmulticast mode [ 90.502697][ T6273] bridge_slave_0: entered promiscuous mode [ 90.507773][ T6373] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 90.520775][ T6373] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 90.532009][ T6373] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 90.543807][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.545071][ T6373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.550961][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.573485][ T30] audit: type=1326 audit(1755330876.241:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.615589][ T6273] bridge_slave_1: entered allmulticast mode [ 90.616099][ T30] audit: type=1326 audit(1755330876.241:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.622856][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.654452][ T6273] bridge_slave_1: entered promiscuous mode [ 90.674277][ T30] audit: type=1326 audit(1755330876.241:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.711123][ T30] audit: type=1326 audit(1755330876.241:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.827117][ T30] audit: type=1326 audit(1755330876.241:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 90.858192][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.894838][ T5863] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.908715][ T5863] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 90.928409][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.062942][ T6397] loop4: detected capacity change from 0 to 1024 [ 91.070591][ T6397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.085568][ T6273] team0: Port device team_slave_0 added [ 91.113829][ T6397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.125078][ T6273] team0: Port device team_slave_1 added [ 91.214844][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.226757][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.254153][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.255899][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.266664][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.283122][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.328337][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.528635][ T6273] hsr_slave_0: entered promiscuous mode [ 91.535337][ T6273] hsr_slave_1: entered promiscuous mode [ 91.553596][ T6273] debugfs: 'hsr0' already exists in 'hsr' [ 91.592436][ T6273] Cannot create hsr debugfs directory [ 91.777847][ T6423] loop2: detected capacity change from 0 to 512 [ 91.788956][ T6423] EXT4-fs: Ignoring removed oldalloc option [ 91.801220][ T6423] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.147: error while reading EA inode 32 err=-116 [ 91.822932][ T6423] EXT4-fs (loop2): Remounting filesystem read-only [ 91.830135][ T6423] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.843899][ T6423] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 91.855463][ T6423] EXT4-fs (loop2): 1 orphan inode deleted [ 91.862135][ T6423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.883991][ T6423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.112950][ T5867] Bluetooth: hci1: command tx timeout [ 92.134260][ T6273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.180876][ T6273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.199100][ T1210] cfg80211: failed to load regulatory.db [ 92.226604][ T6273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.248634][ T6273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.577149][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.656061][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.690997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.698198][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.799854][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.807050][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.911256][ T6477] loop0: detected capacity change from 0 to 512 [ 92.951086][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.087176][ T6477] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.110738][ T6477] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.161: bad orphan inode 13 [ 93.146918][ T6477] ext4_test_bit(bit=12, block=18) = 1 [ 93.172904][ T6477] is_bad_inode(inode)=0 [ 93.192738][ T6477] NEXT_ORPHAN(inode)=2130706432 [ 93.202865][ T6477] max_ino=32 [ 93.210547][ T6477] i_nlink=1 [ 93.226046][ T6477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.287732][ T6477] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 93.334463][ T6477] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 93.399716][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.485334][ T6479] infiniband syz!: set active [ 93.504336][ T6479] infiniband syz!: added team_slave_0 [ 93.601893][ T6479] RDS/IB: syz!: added [ 93.612243][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.628550][ T6479] smc: adding ib device syz! with port count 1 [ 93.653970][ T6479] smc: ib device syz! port 1 has pnetid [ 93.724293][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564f1c00: rx timeout, send abort [ 93.732650][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564f0800: rx timeout, send abort [ 93.741100][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564f1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.755498][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564f0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.868245][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.897645][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.996200][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.022297][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.192669][ T5867] Bluetooth: hci1: command tx timeout [ 94.488118][ T6273] veth0_vlan: entered promiscuous mode [ 94.579652][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.627253][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.647681][ T6273] veth1_vlan: entered promiscuous mode [ 94.774472][ T6273] veth0_macvtap: entered promiscuous mode [ 94.839780][ T6273] veth1_macvtap: entered promiscuous mode [ 94.891836][ T6542] loop2: detected capacity change from 0 to 1764 [ 94.959451][ T6544] loop0: detected capacity change from 0 to 1024 [ 94.993032][ T6544] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 94.997228][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.022317][ T6544] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.031755][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.072454][ T6544] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 95.086374][ T6544] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.107648][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.126746][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.143930][ T6544] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #17: comm syz.0.177: iget: bad i_size value: 4398046511204 [ 95.152867][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173697][ T6544] EXT4-fs (loop0): no journal found [ 95.202289][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289891][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.303519][ T1218] vhci_hcd: vhci_device speed not set [ 95.315578][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.363080][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.374773][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.383006][ T6539] loop4: detected capacity change from 0 to 32768 [ 95.400118][ T6539] XFS: noikeep mount option is deprecated. [ 95.422016][ T6539] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.479160][ T6539] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 95.525079][ T6539] XFS (loop4): Starting recovery (logdev: internal) [ 95.556113][ T6539] XFS (loop4): Ending recovery (logdev: internal) [ 95.689016][ T6539] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 95.695597][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.743456][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 95.743474][ T30] audit: type=1326 audit(1755330881.701:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 95.813480][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 95.825135][ T30] audit: type=1326 audit(1755330881.721:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 95.853448][ T5940] kernel write not supported for file /vmallocinfo (pid: 5940 comm: kworker/1:6) [ 95.882455][ T30] audit: type=1326 audit(1755330881.741:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 95.911804][ T30] audit: type=1326 audit(1755330881.741:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 95.978182][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.997473][ T30] audit: type=1326 audit(1755330881.751:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 95.997562][ T6581] loop5: detected capacity change from 0 to 512 [ 96.020305][ T9] vhci_hcd: vhci_device speed not set [ 96.047538][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.059473][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.084159][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.125933][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.138082][ T30] audit: type=1326 audit(1755330881.751:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 96.165137][ T6590] loop0: detected capacity change from 0 to 512 [ 96.166788][ T9] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 96.180534][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.199072][ T6581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 96.212644][ T6581] System zones: 0-2, 18-18, 34-34 [ 96.226036][ T6539] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 96.256564][ T30] audit: type=1326 audit(1755330881.751:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 96.266409][ T6581] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.288458][ T5867] Bluetooth: hci1: command tx timeout [ 96.314225][ T6539] XFS (loop4): Unmount and run xfs_repair [ 96.325585][ T30] audit: type=1326 audit(1755330881.751:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 96.348382][ T30] audit: type=1326 audit(1755330881.751:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 96.374386][ T6590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.386988][ T6574] vhci_hcd: connection reset by peer [ 96.395907][ T6581] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.187: bad orphan inode 13 [ 96.407153][ T30] audit: type=1326 audit(1755330881.751:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 96.429738][ T5964] vhci_hcd: stop threads [ 96.430457][ T6590] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.444581][ T5964] vhci_hcd: release socket [ 96.444628][ T5964] vhci_hcd: disconnect device [ 96.447189][ T6581] ext4_test_bit(bit=12, block=18) = 1 [ 96.464586][ T6581] is_bad_inode(inode)=0 [ 96.468789][ T6581] NEXT_ORPHAN(inode)=2130706432 [ 96.473767][ T6581] max_ino=32 [ 96.477043][ T6581] i_nlink=1 [ 96.481100][ T6581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.517425][ T6581] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 96.527763][ T6581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 96.560791][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.582301][ T6581] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 96.665243][ T6273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.751860][ T10] IPVS: starting estimator thread 0... [ 96.829771][ T6619] 9pnet_fd: Insufficient options for proto=fd [ 96.872603][ T6617] IPVS: using max 47 ests per chain, 112800 per kthread [ 96.975851][ T5857] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.057276][ T5857] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 97.243736][ T6637] netlink: 'syz.5.212': attribute type 1 has an invalid length. [ 97.951877][ T6647] syzkaller1: entered promiscuous mode [ 97.973145][ T6647] syzkaller1: entered allmulticast mode [ 98.908610][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.916164][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.015792][ T6710] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 99.035557][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.051881][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.167213][ T6706] ªªªªª: renamed from vlan1 [ 99.184676][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.198944][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.210381][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.241575][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.351018][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 99.420948][ T6727] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 99.427623][ T6727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.447934][ T6733] netlink: 'syz.0.249': attribute type 21 has an invalid length. [ 99.456409][ T6733] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 99.468838][ T6727] vhci_hcd vhci_hcd.0: Device attached [ 99.481388][ T6736] loop5: detected capacity change from 0 to 512 [ 99.495129][ T6733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.249'. [ 99.548855][ T6736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.582905][ T6727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.604326][ T6727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.630432][ T6727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.644039][ T1218] vhci_hcd: vhci_device speed not set [ 99.663444][ T6749] loop0: detected capacity change from 0 to 512 [ 99.675952][ T6727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.695439][ T6749] EXT4-fs (loop0): 1 orphan inode deleted [ 99.702144][ T6749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.715073][ T5964] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 99.727499][ T1218] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 99.729582][ T6727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.746637][ T6727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.762747][ T6749] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.786537][ T6731] vhci_hcd: connection reset by peer [ 99.798471][ T13] vhci_hcd: stop threads [ 99.815037][ T13] vhci_hcd: release socket [ 99.819580][ T13] vhci_hcd: disconnect device [ 99.848914][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.881032][ T6759] mmap: syz.2.260 (6759) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.221091][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.228492][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.361849][ T6273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.471995][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.519977][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.587461][ T6809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 100.587461][ T6809] program syz.5.284 not setting count and/or reply_len properly [ 100.793520][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 100.793539][ T30] audit: type=1326 audit(1755330886.751:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 100.881801][ T30] audit: type=1326 audit(1755330886.781:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 100.918165][ T30] audit: type=1326 audit(1755330886.781:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 100.946275][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.971311][ T1124] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.998249][ T30] audit: type=1326 audit(1755330886.781:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.048544][ T1124] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.048956][ T30] audit: type=1326 audit(1755330886.781:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.068081][ T1124] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.092105][ T30] audit: type=1326 audit(1755330886.781:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.137640][ T6821] netlink: 7 bytes leftover after parsing attributes in process `syz.4.289'. [ 101.175776][ T30] audit: type=1326 audit(1755330886.781:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.229995][ T30] audit: type=1326 audit(1755330886.781:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.233969][ T6824] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 101.258750][ T6824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.288265][ T30] audit: type=1326 audit(1755330886.781:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.310729][ T9] vhci_hcd: vhci_device speed not set [ 101.320952][ T6830] loop0: detected capacity change from 0 to 512 [ 101.328070][ T6824] vhci_hcd vhci_hcd.0: Device attached [ 101.351238][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.386441][ T6824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.399131][ T30] audit: type=1326 audit(1755330886.781:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 101.436865][ T6824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.465074][ T6824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.478544][ T6824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.505311][ T6824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.507112][ T10] vhci_hcd: vhci_device speed not set [ 101.531355][ T6824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.573928][ T6828] vhci_hcd: connection closed [ 101.574136][ T1158] vhci_hcd: stop threads [ 101.586306][ T1158] vhci_hcd: release socket [ 101.588810][ T10] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 101.595379][ T1158] vhci_hcd: disconnect device [ 101.606381][ T6821] netlink: 7 bytes leftover after parsing attributes in process `syz.4.289'. [ 102.015697][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.023247][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.176245][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.228674][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.263963][ T6847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.504951][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.589064][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.638764][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.703084][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.835026][ T6870] loop1: detected capacity change from 0 to 1024 [ 102.887993][ T6869] loop0: detected capacity change from 0 to 1764 [ 102.896122][ T6870] EXT4-fs: inline encryption not supported [ 102.901985][ T6870] EXT4-fs: Ignoring removed i_version option [ 102.927972][ T6870] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.026105][ T6870] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.309: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.547037][ T6870] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.309: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.561472][ T6870] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.309: Failed to acquire dquot type 0 [ 103.575367][ T6870] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 103.585363][ T6870] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.309: mark_inode_dirty error [ 103.598126][ T6870] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 103.608976][ T6870] EXT4-fs (loop1): 1 orphan inode deleted [ 103.617778][ T6870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.681401][ T5964] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.702879][ T5964] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 103.725190][ T6870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.762522][ T24] IPVS: starting estimator thread 0... [ 103.777007][ T6870] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.309: Invalid inode table block 1 in block_group 0 [ 103.795196][ T6881] pim6reg1: entered promiscuous mode [ 103.800864][ T6881] pim6reg1: entered allmulticast mode [ 103.836006][ T6870] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 103.855295][ T6870] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.309: mark_inode_dirty error [ 103.891121][ T6882] IPVS: using max 38 ests per chain, 91200 per kthread [ 104.078083][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 104.087717][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 104.456993][ T6915] tipc: Started in network mode [ 104.466053][ T6917] openvswitch: netlink: Message has 8 unknown bytes. [ 104.482553][ T6915] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 104.482613][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 104.665264][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 104.690537][ T6905] loop5: detected capacity change from 0 to 32768 [ 104.697424][ T6927] IPVS: Error joining to the multicast group [ 104.705737][ T6905] XFS: noikeep mount option is deprecated. [ 104.777194][ T6905] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.822637][ T1218] vhci_hcd: vhci_device speed not set [ 104.964209][ T6905] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 105.086518][ T6905] XFS (loop5): Starting recovery (logdev: internal) [ 105.137815][ T6905] XFS (loop5): Ending recovery (logdev: internal) [ 105.212899][ T6905] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 105.219475][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.247382][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 105.280778][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.314801][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.339427][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.372052][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.386707][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.400980][ T6905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.443011][ T6905] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 105.490947][ T6905] XFS (loop5): Unmount and run xfs_repair [ 105.515784][ T6955] vhci_hcd: connection closed [ 105.516109][ T13] vhci_hcd: stop threads [ 105.525131][ T1218] vhci_hcd: vhci_device speed not set [ 105.549209][ T13] vhci_hcd: release socket [ 105.577509][ T13] vhci_hcd: disconnect device [ 105.582627][ T1218] usb 43-1: device descriptor read/64, error -110 [ 105.674316][ T6991] loop0: detected capacity change from 0 to 512 [ 105.686687][ T6991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 105.695475][ T6991] System zones: 1-12 [ 105.700802][ T6991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.357: error while reading EA inode 32 err=-116 [ 105.714151][ T6991] EXT4-fs (loop0): Remounting filesystem read-only [ 105.720948][ T6991] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 105.736011][ T6991] EXT4-fs (loop0): 1 orphan inode deleted [ 105.744811][ T6991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.760971][ T6991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.770109][ T1218] vhci_hcd: vhci_device speed not set [ 105.890688][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 105.890707][ T30] audit: type=1326 audit(1755330891.841:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 105.919795][ T30] audit: type=1326 audit(1755330891.841:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 105.946952][ T7006] netlink: 76 bytes leftover after parsing attributes in process `syz.4.363'. [ 105.948553][ T30] audit: type=1326 audit(1755330891.841:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 105.978481][ T30] audit: type=1326 audit(1755330891.841:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.001324][ T30] audit: type=1326 audit(1755330891.841:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.025418][ T30] audit: type=1326 audit(1755330891.841:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.066215][ T30] audit: type=1326 audit(1755330891.841:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.097277][ T6273] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.109398][ T30] audit: type=1326 audit(1755330891.841:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.114808][ T6273] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 106.140762][ T30] audit: type=1326 audit(1755330891.841:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.163758][ T30] audit: type=1326 audit(1755330891.841:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 106.366406][ T7032] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 106.742653][ T10] vhci_hcd: vhci_device speed not set [ 106.916343][ T7059] loop1: detected capacity change from 0 to 512 [ 106.932135][ T7059] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.940404][ T7059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.961888][ T7059] EXT4-fs (loop1): 1 truncate cleaned up [ 106.971674][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.315250][ T7080] netlink: 'syz.0.390': attribute type 12 has an invalid length. [ 107.758590][ T7092] pimreg: entered allmulticast mode [ 107.784484][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.784522][ T7092] pimreg: left allmulticast mode [ 107.843271][ T7094] atomic_op ffff8880780ff998 conn xmit_atomic 0000000000000000 [ 108.105636][ T7095] loop1: detected capacity change from 0 to 8192 [ 110.395942][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.425'. [ 111.093006][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.431'. [ 111.378304][ T7195] loop1: detected capacity change from 0 to 1024 [ 111.386515][ T7195] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 111.399801][ T7195] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 111.410968][ T7195] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.424185][ T7195] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #5: comm syz.1.440: unexpected bad inode w/o EXT4_IGET_BAD [ 111.439498][ T7195] EXT4-fs (loop1): no journal found [ 111.448620][ T7195] EXT4-fs (loop1): can't get journal size [ 111.478761][ T7195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.497121][ T7195] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.1.440: path /92/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 111.543993][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.670027][ T7206] netlink: 'syz.2.444': attribute type 12 has an invalid length. [ 112.689174][ T7204] loop1: detected capacity change from 0 to 1024 [ 112.750135][ T7204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.772886][ T7204] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.827887][ T7204] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.443: lblock 1 mapped to illegal pblock 1 (length 15) [ 112.878299][ T7204] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 112.891057][ T7204] EXT4-fs (loop1): This should not happen!! Data will be lost [ 112.891057][ T7204] [ 113.274045][ T7230] loop2: detected capacity change from 0 to 8192 [ 113.380229][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.520464][ T7238] loop2: detected capacity change from 0 to 512 [ 113.537501][ T7238] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.559992][ T7238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.607714][ T7238] EXT4-fs (loop2): 1 truncate cleaned up [ 113.670204][ T7238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.837060][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.117598][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 114.117632][ T30] audit: type=1326 audit(1755330900.061:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.242469][ T30] audit: type=1326 audit(1755330900.061:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.288327][ T7259] loop1: detected capacity change from 0 to 128 [ 114.299390][ T30] audit: type=1326 audit(1755330900.071:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.402456][ T30] audit: type=1326 audit(1755330900.071:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.429029][ T30] audit: type=1326 audit(1755330900.071:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.496852][ T30] audit: type=1326 audit(1755330900.071:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.572279][ T30] audit: type=1326 audit(1755330900.071:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.679635][ T30] audit: type=1326 audit(1755330900.071:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.718601][ T30] audit: type=1326 audit(1755330900.071:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.793260][ T30] audit: type=1326 audit(1755330900.071:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cfb8ebe9 code=0x7ffc0000 [ 114.826611][ T7273] netlink: 'syz.1.472': attribute type 12 has an invalid length. [ 115.444472][ T7072] Set syz1 is full, maxelem 65536 reached [ 115.553938][ T7303] netlink: 'syz.5.486': attribute type 12 has an invalid length. [ 115.680576][ T7311] loop1: detected capacity change from 0 to 1024 [ 115.738039][ T7311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.771185][ T7311] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.845371][ T7311] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.489: lblock 1 mapped to illegal pblock 1 (length 15) [ 115.912881][ T7311] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 115.974740][ T7311] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.974740][ T7311] [ 116.135350][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.722929][ T7345] netlink: 'syz.1.500': attribute type 12 has an invalid length. [ 118.093842][ T7353] loop4: detected capacity change from 0 to 164 [ 118.124560][ T7353] iso9660: Unknown parameter 'kfree' [ 118.241620][ T7087] Set syz1 is full, maxelem 65536 reached [ 118.709075][ T7374] netlink: 'syz.5.511': attribute type 12 has an invalid length. [ 119.710306][ T7425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 120.406556][ T7435] netlink: 48 bytes leftover after parsing attributes in process `syz.5.538'. [ 120.612246][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 120.612266][ T30] audit: type=1326 audit(1755330906.551:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 120.667456][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 120.692477][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 120.708424][ T30] audit: type=1326 audit(1755330906.561:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 120.766438][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.772311][ T7463] loop4: detected capacity change from 0 to 128 [ 120.784824][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 120.793367][ T30] audit: type=1326 audit(1755330906.611:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 120.810782][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.833786][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 120.848522][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.879980][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.921100][ T30] audit: type=1326 audit(1755330906.611:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.034662][ T30] audit: type=1326 audit(1755330906.611:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.101624][ T30] audit: type=1326 audit(1755330906.611:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.152589][ T30] audit: type=1326 audit(1755330906.621:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.174956][ T30] audit: type=1326 audit(1755330906.621:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.197348][ T30] audit: type=1326 audit(1755330906.621:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.220123][ T30] audit: type=1326 audit(1755330906.621:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 121.366977][ T7474] tmpfs: Unknown parameter '0x0000000000000006' [ 121.723591][ T1210] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.933223][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 121.948718][ T1210] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 121.962765][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.975058][ T1210] usb 5-1: config 0 descriptor?? [ 121.987363][ T1210] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 122.188975][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.556'. [ 122.220966][ T5219] bcm5974 5-1:0.0: could not read from device [ 122.238101][ T5219] bcm5974 5-1:0.0: could not read from device [ 122.242101][ T1210] usb 5-1: USB disconnect, device number 2 [ 122.257516][ T5219] bcm5974 5-1:0.0: could not read from device [ 122.563996][ T7514] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.630457][ T7514] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.678556][ T7514] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.698732][ T7520] loop1: detected capacity change from 0 to 128 [ 122.740422][ T7514] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.844878][ T5964] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.888228][ T5964] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.923720][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.940324][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.358357][ T7546] netlink: 'syz.0.588': attribute type 12 has an invalid length. [ 123.556052][ T7558] 9pnet_fd: Insufficient options for proto=fd [ 123.659867][ T7560] loop0: detected capacity change from 0 to 512 [ 123.744572][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.778603][ T7560] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.780909][ T7570] netlink: 'syz.5.600': attribute type 12 has an invalid length. [ 123.822896][ T7560] netlink: '+}[@': attribute type 1 has an invalid length. [ 123.852035][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 123.893625][ T7560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.970958][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.981081][ T7577] syz.1.602 (7577) used greatest stack depth: 17992 bytes left [ 124.563521][ T7604] loop5: detected capacity change from 0 to 32768 [ 124.570591][ T7604] XFS: noikeep mount option is deprecated. [ 124.582597][ T7604] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.609617][ T7604] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 124.658881][ T7604] XFS (loop5): Starting recovery (logdev: internal) [ 124.688926][ T7604] XFS (loop5): Ending recovery (logdev: internal) [ 124.702054][ T7616] loop2: detected capacity change from 0 to 512 [ 124.740543][ T7616] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.616: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 124.765431][ T7604] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 124.772012][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.781183][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 124.788519][ T7616] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.616: Bad quota inode: 3, type: 0 [ 124.804172][ T7616] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 124.822213][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.832539][ T7616] EXT4-fs (loop2): mount failed [ 124.838843][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.850375][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.889978][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.914697][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.952786][ T1210] vhci_hcd: vhci_device speed not set [ 124.964580][ T7604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.002645][ T7604] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 125.032696][ T1210] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 125.047325][ T7632] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 125.050591][ T7604] XFS (loop5): Unmount and run xfs_repair [ 125.053902][ T7632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.055786][ T7632] vhci_hcd vhci_hcd.0: Device attached [ 125.073194][ T7621] XFS (loop5): Internal error i != 1 at line 605 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x969/0xd20 [ 125.086537][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.5.614 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 125.086570][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.086589][ T7621] Call Trace: [ 125.086597][ T7621] [ 125.086607][ T7621] dump_stack_lvl+0x189/0x250 [ 125.086648][ T7621] ? __pfx__xfs_alert_tag+0x10/0x10 [ 125.086673][ T7621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.086700][ T7621] ? __pfx_xfs_btree_lookup+0x10/0x10 [ 125.086722][ T7621] ? __pfx_xfs_btree_increment+0x10/0x10 [ 125.086746][ T7621] xfs_corruption_error+0x122/0x170 [ 125.086772][ T7621] ? xfs_alloc_fixup_trees+0x969/0xd20 [ 125.086804][ T7621] xfs_alloc_fixup_trees+0x9d0/0xd20 [ 125.086834][ T7621] ? xfs_alloc_fixup_trees+0x969/0xd20 [ 125.086864][ T7621] ? __pfx_xfs_alloc_walk_iter+0x10/0x10 [ 125.086898][ T7621] ? __pfx_xfs_alloc_fixup_trees+0x10/0x10 [ 125.086928][ T7621] ? xfs_alloc_ag_vextent_locality+0xb4e/0xf80 [ 125.086959][ T7621] ? xfs_alloc_ag_vextent_locality+0xc70/0xf80 [ 125.086996][ T7621] xfs_alloc_cur_finish+0xd3/0x4b0 [ 125.087031][ T7621] xfs_alloc_ag_vextent_near+0xd1a/0x1230 [ 125.087072][ T7621] ? __pfx_xfs_alloc_ag_vextent_near+0x10/0x10 [ 125.087102][ T7621] ? xfs_group_grab+0x28/0x480 [ 125.087123][ T7621] ? xfs_alloc_vextent_prepare_ag+0x1b2/0x610 [ 125.087153][ T7621] xfs_alloc_vextent_iterate_ags+0x640/0x940 [ 125.087189][ T7621] xfs_alloc_vextent_start_ag+0x388/0x850 [ 125.087223][ T7621] xfs_bmapi_allocate+0x188e/0x2e00 [ 125.087257][ T7621] ? __pfx_xfs_bmapi_allocate+0x10/0x10 [ 125.087286][ T7621] ? xfs_iext_lookup_extent+0x3b7/0x7e0 [ 125.087312][ T7621] ? xfs_iext_prev+0x32e/0x370 [ 125.087334][ T7621] ? xfs_iext_last+0x54a/0x5f0 [ 125.087355][ T7621] ? xfs_iext_get_extent+0xe5/0x370 [ 125.087383][ T7621] xfs_bmapi_write+0x7df/0x1260 [ 125.087402][ T7621] ? arch_stack_walk+0xfc/0x150 [ 125.087435][ T7621] ? __pfx_xfs_bmapi_write+0x10/0x10 [ 125.087458][ T7621] ? xfs_iext_first+0xd0/0x2b0 [ 125.087491][ T7621] ? __vfs_setxattr+0x43c/0x480 [ 125.087520][ T7621] ? __vfs_setxattr_noperm+0x12d/0x660 [ 125.087549][ T7621] ? vfs_setxattr+0x16b/0x2f0 [ 125.087576][ T7621] ? filename_setxattr+0x274/0x600 [ 125.087594][ T7621] ? do_syscall_64+0xfa/0x3b0 [ 125.087615][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.087650][ T7621] xfs_da_grow_inode_int+0x298/0x860 [ 125.087681][ T7621] ? __pfx_xfs_da_grow_inode_int+0x10/0x10 [ 125.087714][ T7621] ? rcu_is_watching+0x15/0xb0 [ 125.087746][ T7621] xfs_da_grow_inode+0x16d/0x390 [ 125.087768][ T7621] ? __pfx_xfs_da_grow_inode+0x10/0x10 [ 125.087792][ T7621] ? xfs_trans_log_inode+0xa3/0x1a0 [ 125.087817][ T7621] xfs_attr_shortform_to_leaf+0x273/0x860 [ 125.087849][ T7621] ? krealloc_node_align_noprof+0x1e2/0x390 [ 125.087880][ T7621] ? __pfx_xfs_attr_shortform_to_leaf+0x10/0x10 [ 125.087906][ T7621] ? krealloc_node_align_noprof+0x1e2/0x390 [ 125.087950][ T7621] xfs_attr_set_iter+0xd30/0x4b70 [ 125.087981][ T7621] ? __pfx_xfs_attr_set_iter+0x10/0x10 [ 125.088002][ T7621] ? lock_release+0x4b/0x3e0 [ 125.088031][ T7621] ? lock_release+0x4b/0x3e0 [ 125.088062][ T7621] ? is_bpf_text_address+0x292/0x2b0 [ 125.088092][ T7621] ? is_bpf_text_address+0x26/0x2b0 [ 125.088122][ T7621] ? kernel_text_address+0xa5/0xe0 [ 125.088149][ T7621] ? __kernel_text_address+0xd/0x40 [ 125.088175][ T7621] ? unwind_get_return_address+0x4d/0x90 [ 125.088196][ T7621] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.088219][ T7621] ? arch_stack_walk+0xfc/0x150 [ 125.088247][ T7621] ? stack_trace_save+0x9c/0xe0 [ 125.088271][ T7621] ? stack_depot_save_flags+0x40/0x860 [ 125.088302][ T7621] xfs_attr_finish_item+0xed/0x320 [ 125.088325][ T7621] ? __pfx_xfs_attr_finish_item+0x10/0x10 [ 125.088347][ T7621] xfs_defer_finish_one+0x5c8/0xcf0 [ 125.088379][ T7621] ? __pfx_xfs_defer_finish_one+0x10/0x10 [ 125.088406][ T7621] xfs_defer_finish_noroll+0x910/0x12d0 [ 125.088429][ T7621] ? xfs_trans_commit+0x10b/0x1c0 [ 125.088458][ T7621] ? __pfx_xfs_defer_finish_noroll+0x10/0x10 [ 125.088478][ T7621] ? inode_set_ctime_current+0x740/0xb40 [ 125.088502][ T7621] ? inode_maybe_inc_iversion+0x17c/0x1e0 [ 125.088537][ T7621] xfs_trans_commit+0x10b/0x1c0 [ 125.088563][ T7621] ? __pfx_xfs_trans_commit+0x10/0x10 [ 125.088591][ T7621] ? xfs_trans_log_inode+0x12c/0x1a0 [ 125.088614][ T7621] xfs_attr_set+0xdc6/0x1210 [ 125.088653][ T7621] ? __pfx_xfs_attr_set+0x10/0x10 [ 125.088677][ T7621] ? rcu_is_watching+0x15/0xb0 [ 125.088698][ T7621] ? path_init+0x749/0x1350 [ 125.088716][ T7621] ? xfs_da_hashname+0x4d6/0x740 [ 125.088736][ T7621] ? do_raw_spin_lock+0x121/0x290 [ 125.088760][ T7621] ? xfs_attr_hashval+0x3c/0x80 [ 125.088783][ T7621] ? xfs_attr_change+0x2ac/0x390 [ 125.088813][ T7621] xfs_xattr_set+0x14d/0x250 [ 125.088842][ T7621] ? __pfx_xfs_xattr_set+0x10/0x10 [ 125.088878][ T7621] ? evm_protect_xattr+0x71d/0xa90 [ 125.088903][ T7621] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 125.088923][ T7621] ? __pfx_evm_protect_xattr+0x10/0x10 [ 125.088949][ T7621] ? __pfx_xfs_xattr_set+0x10/0x10 [ 125.088976][ T7621] __vfs_setxattr+0x43c/0x480 [ 125.089012][ T7621] __vfs_setxattr_noperm+0x12d/0x660 [ 125.089045][ T7621] vfs_setxattr+0x16b/0x2f0 [ 125.089077][ T7621] ? __pfx_vfs_setxattr+0x10/0x10 [ 125.089105][ T7621] ? mnt_get_write_access+0x223/0x2a0 [ 125.089133][ T7621] filename_setxattr+0x274/0x600 [ 125.089150][ T7621] ? lock_release+0x4b/0x3e0 [ 125.089179][ T7621] ? __might_fault+0xb0/0x130 [ 125.089209][ T7621] ? __pfx_filename_setxattr+0x10/0x10 [ 125.089229][ T7621] ? getname_flags+0x1e5/0x540 [ 125.089250][ T7621] path_setxattrat+0x364/0x3a0 [ 125.089278][ T7621] ? __pfx_path_setxattrat+0x10/0x10 [ 125.089300][ T7621] ? do_futex+0x333/0x420 [ 125.089342][ T7621] ? rcu_is_watching+0x15/0xb0 [ 125.089364][ T7621] __x64_sys_setxattr+0xbc/0xe0 [ 125.089385][ T7621] do_syscall_64+0xfa/0x3b0 [ 125.089407][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.089427][ T7621] ? clear_bhb_loop+0x60/0xb0 [ 125.089450][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.089471][ T7621] RIP: 0033:0x7f259038ebe9 [ 125.089503][ T7621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.089522][ T7621] RSP: 002b:00007f259116b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 125.089550][ T7621] RAX: ffffffffffffffda RBX: 00007f25905b6090 RCX: 00007f259038ebe9 [ 125.089564][ T7621] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 125.089579][ T7621] RBP: 00007f2590411e19 R08: 0000000000000000 R09: 0000000000000000 [ 125.089592][ T7621] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000000 [ 125.089605][ T7621] R13: 00007f25905b6128 R14: 00007f25905b6090 R15: 00007ffe1ed35db8 [ 125.089630][ T7621] [ 125.089646][ T7621] XFS (loop5): Corruption detected. Unmount and run xfs_repair [ 125.274257][ T7635] vhci_hcd: connection closed [ 125.281818][ T7621] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xcc0/0x12d0 (fs/xfs/libxfs/xfs_defer.c:721). Shutting down filesystem. [ 125.283074][ T7617] vhci_hcd: connection reset by peer [ 125.288056][ T7621] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 125.392543][ T12] vhci_hcd: stop threads [ 125.395637][ T10] vhci_hcd: vhci_device speed not set [ 125.401003][ T12] vhci_hcd: release socket [ 125.472560][ T10] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 125.568859][ T12] vhci_hcd: disconnect device [ 125.903010][ T12] vhci_hcd: stop threads [ 125.907483][ T12] vhci_hcd: release socket [ 125.912036][ T12] vhci_hcd: disconnect device [ 125.970195][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 126.007807][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 126.007834][ T30] audit: type=1326 audit(1755330911.961:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 126.024157][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 126.078765][ T30] audit: type=1326 audit(1755330912.001:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 126.135814][ T30] audit: type=1326 audit(1755330912.011:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 126.187992][ T7663] hub 8-0:1.0: USB hub found [ 126.195142][ T30] audit: type=1326 audit(1755330912.011:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 126.220536][ T7663] hub 8-0:1.0: 1 port detected [ 126.251297][ T30] audit: type=1326 audit(1755330912.011:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1738ebe9 code=0x7ffc0000 [ 126.296901][ T7660] loop4: detected capacity change from 0 to 256 [ 126.459951][ T6273] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.595515][ T30] audit: type=1326 audit(1755330912.551:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 126.669413][ T30] audit: type=1326 audit(1755330912.551:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 126.725518][ T30] audit: type=1326 audit(1755330912.581:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 126.798729][ T30] audit: type=1326 audit(1755330912.581:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 126.872212][ T30] audit: type=1326 audit(1755330912.581:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4698ebe9 code=0x7ffc0000 [ 127.007678][ T7695] loop5: detected capacity change from 0 to 512 [ 127.025323][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 127.039079][ T7699] loop1: detected capacity change from 0 to 1024 [ 127.068338][ T7695] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 127.077720][ T7699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.092080][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 127.110428][ T7699] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.123586][ T7695] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 127.141577][ T7705] loop0: detected capacity change from 0 to 1024 [ 127.148907][ T7695] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.649: iget: bad i_size value: 12154757448730 [ 127.163407][ T7707] netlink: 188 bytes leftover after parsing attributes in process `syz.2.652'. [ 127.165969][ T7705] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 127.180090][ T7695] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.649: couldn't read orphan inode 13 (err -117) [ 127.202699][ T7700] tipc: Started in network mode [ 127.207717][ T7700] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 127.215927][ T7695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.238804][ T7700] tipc: Enabled bearer , priority 0 [ 127.243696][ T7699] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.648: bg 0: block 3: invalid block bitmap [ 127.254557][ T7695] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 127.277443][ T7699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 127.322982][ T7699] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.322982][ T7699] [ 127.323064][ T7695] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 127.348788][ T7711] netlink: 'syz.4.653': attribute type 12 has an invalid length. [ 127.409201][ T7715] Set syz1 is full, maxelem 65536 reached [ 127.428890][ T7695] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 127.550382][ T7713] lo speed is unknown, defaulting to 1000 [ 127.562705][ T7713] lo speed is unknown, defaulting to 1000 [ 127.594605][ T7713] lo speed is unknown, defaulting to 1000 [ 127.613207][ T7713] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.639894][ T7713] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.674516][ T7721] loop2: detected capacity change from 0 to 512 [ 127.707064][ T7695] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 127.717487][ T7721] EXT4-fs: Ignoring removed oldalloc option [ 127.736056][ T7721] EXT4-fs: inline encryption not supported [ 127.744433][ T7695] binfmt_misc: register: failed to install interpreter file ./file2 [ 127.758256][ T7713] lo speed is unknown, defaulting to 1000 [ 127.769319][ T7721] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.784895][ T7713] lo speed is unknown, defaulting to 1000 [ 127.798384][ T7721] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.815385][ T7713] lo speed is unknown, defaulting to 1000 [ 127.837042][ T7721] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.657: bg 0: block 64: padding at end of block bitmap is not set [ 127.857758][ T7713] lo speed is unknown, defaulting to 1000 [ 127.870461][ T7713] lo speed is unknown, defaulting to 1000 [ 127.895391][ T7721] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.657: Failed to acquire dquot type 0 [ 127.909095][ T7718] smc: removing ib device syz! [ 127.920562][ T7729] loop4: detected capacity change from 0 to 128 [ 127.938000][ T7721] EXT4-fs (loop2): 1 truncate cleaned up [ 127.949410][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.007928][ T6273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.873360][ T7738] loop4: detected capacity change from 0 to 256 [ 128.924873][ T5940] tipc: Node number set to 11578026 [ 128.999246][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.016378][ T5868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.821342][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'. [ 129.848798][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.878054][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.038048][ T7765] loop1: detected capacity change from 0 to 1024 [ 130.063478][ T7765] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 130.090443][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 130.090626][ T7765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.140316][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 130.156334][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.204861][ T1210] vhci_hcd: vhci_device speed not set [ 130.662649][ T10] vhci_hcd: vhci_device speed not set [ 131.287989][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 131.347609][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 131.923049][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 131.923069][ T30] audit: type=1326 audit(1755330917.881:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 131.995375][ T30] audit: type=1326 audit(1755330917.911:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.097825][ T30] audit: type=1326 audit(1755330917.911:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.134842][ T30] audit: type=1326 audit(1755330917.911:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.159912][ T30] audit: type=1326 audit(1755330917.911:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.221029][ T30] audit: type=1326 audit(1755330917.911:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.257451][ T30] audit: type=1326 audit(1755330917.911:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.262425][ T5940] IPVS: starting estimator thread 0... [ 132.346129][ T30] audit: type=1326 audit(1755330917.911:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.370922][ T30] audit: type=1326 audit(1755330917.911:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.393571][ T30] audit: type=1326 audit(1755330917.911:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe041d8ebe9 code=0x7ffc0000 [ 132.462521][ T7836] IPVS: using max 51 ests per chain, 122400 per kthread [ 132.974367][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 133.070782][ T7854] loop2: detected capacity change from 0 to 32768 [ 133.080042][ T7854] XFS: noikeep mount option is deprecated. [ 133.170106][ T7854] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.311670][ T7854] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 133.350987][ T7879] netlink: 5 bytes leftover after parsing attributes in process `syz.0.716'. [ 133.360674][ T7879] 0ªî{X¹¦: renamed from gretap0 [ 133.378910][ T7879] 0ªî{X¹¦: entered allmulticast mode [ 133.397526][ T7854] XFS (loop2): Starting recovery (logdev: internal) [ 133.406201][ T7879] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 133.420210][ T7854] XFS (loop2): Ending recovery (logdev: internal) [ 133.492875][ T7854] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 133.499442][ T7854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.510324][ T7854] vhci_hcd vhci_hcd.0: Device attached [ 133.527569][ T7891] loop1: detected capacity change from 0 to 1024 [ 133.537551][ T7891] EXT4-fs: Ignoring removed bh option [ 133.547510][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.556145][ T7891] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 133.567214][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.576999][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.587488][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.597096][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.608005][ T7891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.644117][ T7854] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.680648][ T7854] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8 [ 133.693355][ T5940] vhci_hcd: vhci_device speed not set [ 133.716487][ T7854] XFS (loop2): Unmount and run xfs_repair [ 133.730840][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.738166][ T7854] XFS (loop2): Internal error i != 1 at line 605 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x969/0xd20 [ 133.753193][ T5940] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 133.779837][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.2.707 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 133.779870][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.779884][ T7854] Call Trace: [ 133.779892][ T7854] [ 133.779901][ T7854] dump_stack_lvl+0x189/0x250 [ 133.779930][ T7854] ? __pfx__xfs_alert_tag+0x10/0x10 [ 133.779954][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.779982][ T7854] ? __pfx_xfs_btree_lookup+0x10/0x10 [ 133.780003][ T7854] ? __pfx_xfs_alloc_cur_check+0x10/0x10 [ 133.780040][ T7854] xfs_corruption_error+0x122/0x170 [ 133.780065][ T7854] ? xfs_alloc_fixup_trees+0x969/0xd20 [ 133.780106][ T7854] xfs_alloc_fixup_trees+0x9d0/0xd20 [ 133.780136][ T7854] ? xfs_alloc_fixup_trees+0x969/0xd20 [ 133.780167][ T7854] ? __pfx_xfs_alloc_walk_iter+0x10/0x10 [ 133.780202][ T7854] ? __pfx_xfs_alloc_fixup_trees+0x10/0x10 [ 133.780233][ T7854] ? xfs_alloc_ag_vextent_locality+0xb4e/0xf80 [ 133.780264][ T7854] ? xfs_alloc_ag_vextent_locality+0xc70/0xf80 [ 133.780303][ T7854] xfs_alloc_cur_finish+0xd3/0x4b0 [ 133.780336][ T7854] xfs_alloc_ag_vextent_near+0xd1a/0x1230 [ 133.780376][ T7854] ? __pfx_xfs_alloc_ag_vextent_near+0x10/0x10 [ 133.780406][ T7854] ? xfs_group_grab+0x28/0x480 [ 133.780426][ T7854] ? xfs_alloc_vextent_prepare_ag+0x1b2/0x610 [ 133.780454][ T7854] xfs_alloc_vextent_iterate_ags+0x640/0x940 [ 133.780489][ T7854] xfs_alloc_vextent_start_ag+0x388/0x850 [ 133.780521][ T7854] xfs_bmapi_allocate+0x188e/0x2e00 [ 133.780554][ T7854] ? __pfx_xfs_bmapi_allocate+0x10/0x10 [ 133.780585][ T7854] ? xfs_iext_lookup_extent+0x3b7/0x7e0 [ 133.780611][ T7854] ? xfs_iext_prev+0x32e/0x370 [ 133.780633][ T7854] ? xfs_iext_last+0x54a/0x5f0 [ 133.780656][ T7854] ? xfs_iext_get_extent+0xe5/0x370 [ 133.780683][ T7854] xfs_bmapi_write+0x7df/0x1260 [ 133.780702][ T7854] ? arch_stack_walk+0xfc/0x150 [ 133.780735][ T7854] ? __pfx_xfs_bmapi_write+0x10/0x10 [ 133.780757][ T7854] ? xfs_iext_first+0xd0/0x2b0 [ 133.780789][ T7854] ? __vfs_setxattr+0x43c/0x480 [ 133.780817][ T7854] ? __vfs_setxattr_noperm+0x12d/0x660 [ 133.780847][ T7854] ? vfs_setxattr+0x16b/0x2f0 [ 133.780875][ T7854] ? filename_setxattr+0x274/0x600 [ 133.780893][ T7854] ? do_syscall_64+0xfa/0x3b0 [ 133.780914][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.780938][ T7854] xfs_da_grow_inode_int+0x298/0x860 [ 133.780994][ T7854] ? __pfx_xfs_da_grow_inode_int+0x10/0x10 [ 133.781019][ T7854] ? rcu_is_watching+0x15/0xb0 [ 133.781044][ T7854] xfs_da_grow_inode+0x16d/0x390 [ 133.781067][ T7854] ? __pfx_xfs_da_grow_inode+0x10/0x10 [ 133.781097][ T7854] ? xfs_trans_log_inode+0xa3/0x1a0 [ 133.781122][ T7854] xfs_attr_shortform_to_leaf+0x273/0x860 [ 133.781152][ T7854] ? krealloc_node_align_noprof+0x1e2/0x390 [ 133.781183][ T7854] ? __pfx_xfs_attr_shortform_to_leaf+0x10/0x10 [ 133.781211][ T7854] ? krealloc_node_align_noprof+0x1e2/0x390 [ 133.781256][ T7854] xfs_attr_set_iter+0xd30/0x4b70 [ 133.781287][ T7854] ? __pfx_xfs_attr_set_iter+0x10/0x10 [ 133.781309][ T7854] ? lock_release+0x4b/0x3e0 [ 133.781339][ T7854] ? lock_release+0x4b/0x3e0 [ 133.781371][ T7854] ? is_bpf_text_address+0x292/0x2b0 [ 133.781402][ T7854] ? is_bpf_text_address+0x26/0x2b0 [ 133.781433][ T7854] ? kernel_text_address+0xa5/0xe0 [ 133.781463][ T7854] ? __kernel_text_address+0xd/0x40 [ 133.781490][ T7854] ? unwind_get_return_address+0x4d/0x90 [ 133.781513][ T7854] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.781538][ T7854] ? arch_stack_walk+0xfc/0x150 [ 133.781569][ T7854] ? stack_trace_save+0x9c/0xe0 [ 133.781595][ T7854] ? stack_depot_save_flags+0x40/0x860 [ 133.781628][ T7854] xfs_attr_finish_item+0xed/0x320 [ 133.781653][ T7854] ? __pfx_xfs_attr_finish_item+0x10/0x10 [ 133.781677][ T7854] xfs_defer_finish_one+0x5c8/0xcf0 [ 133.781709][ T7854] ? __pfx_xfs_defer_finish_one+0x10/0x10 [ 133.781738][ T7854] xfs_defer_finish_noroll+0x910/0x12d0 [ 133.781762][ T7854] ? xfs_trans_commit+0x10b/0x1c0 [ 133.781792][ T7854] ? __pfx_xfs_defer_finish_noroll+0x10/0x10 [ 133.781813][ T7854] ? inode_set_ctime_current+0x740/0xb40 [ 133.781840][ T7854] ? inode_maybe_inc_iversion+0x17c/0x1e0 [ 133.781874][ T7854] xfs_trans_commit+0x10b/0x1c0 [ 133.781902][ T7854] ? __pfx_xfs_trans_commit+0x10/0x10 [ 133.781933][ T7854] ? xfs_trans_log_inode+0x12c/0x1a0 [ 133.781957][ T7854] xfs_attr_set+0xdc6/0x1210 [ 133.781985][ T7854] ? __pfx_xfs_attr_set+0x10/0x10 [ 133.782008][ T7854] ? rcu_is_watching+0x15/0xb0 [ 133.782028][ T7854] ? path_init+0x749/0x1350 [ 133.782046][ T7854] ? xfs_da_hashname+0x4d6/0x740 [ 133.782064][ T7854] ? do_raw_spin_lock+0x121/0x290 [ 133.782097][ T7854] ? xfs_attr_hashval+0x3c/0x80 [ 133.782121][ T7854] ? xfs_attr_change+0x2ac/0x390 [ 133.782151][ T7854] xfs_xattr_set+0x14d/0x250 [ 133.782180][ T7854] ? __pfx_xfs_xattr_set+0x10/0x10 [ 133.782216][ T7854] ? evm_protect_xattr+0x71d/0xa90 [ 133.782240][ T7854] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 133.782262][ T7854] ? __pfx_evm_protect_xattr+0x10/0x10 [ 133.782286][ T7854] ? __pfx_xfs_xattr_set+0x10/0x10 [ 133.782315][ T7854] __vfs_setxattr+0x43c/0x480 [ 133.782354][ T7854] __vfs_setxattr_noperm+0x12d/0x660 [ 133.782388][ T7854] vfs_setxattr+0x16b/0x2f0 [ 133.782420][ T7854] ? __pfx_vfs_setxattr+0x10/0x10 [ 133.782446][ T7854] ? mnt_get_write_access+0x223/0x2a0 [ 133.782473][ T7854] filename_setxattr+0x274/0x600 [ 133.782488][ T7854] ? lock_release+0x4b/0x3e0 [ 133.782516][ T7854] ? __might_fault+0xb0/0x130 [ 133.782547][ T7854] ? __pfx_filename_setxattr+0x10/0x10 [ 133.782567][ T7854] ? getname_flags+0x1e5/0x540 [ 133.782588][ T7854] path_setxattrat+0x364/0x3a0 [ 133.782615][ T7854] ? __pfx_path_setxattrat+0x10/0x10 [ 133.782636][ T7854] ? do_futex+0x333/0x420 [ 133.782677][ T7854] ? rcu_is_watching+0x15/0xb0 [ 133.782699][ T7854] __x64_sys_setxattr+0xbc/0xe0 [ 133.782720][ T7854] do_syscall_64+0xfa/0x3b0 [ 133.782741][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.782762][ T7854] ? clear_bhb_loop+0x60/0xb0 [ 133.782809][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.782830][ T7854] RIP: 0033:0x7f5e1738ebe9 [ 133.782849][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.782868][ T7854] RSP: 002b:00007f5e182e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 133.782891][ T7854] RAX: ffffffffffffffda RBX: 00007f5e175b5fa0 RCX: 00007f5e1738ebe9 [ 133.782907][ T7854] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 133.782922][ T7854] RBP: 00007f5e17411e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.782935][ T7854] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000000 [ 133.782948][ T7854] R13: 00007f5e175b6038 R14: 00007f5e175b5fa0 R15: 00007ffd0181eb98 [ 133.782972][ T7854] [ 134.430998][ T7854] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 134.466617][ T7854] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xcc0/0x12d0 (fs/xfs/libxfs/xfs_defer.c:721). Shutting down filesystem. [ 134.503810][ T7854] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 134.558570][ T7890] vhci_hcd: connection reset by peer [ 134.574523][ T4601] vhci_hcd: stop threads [ 134.592548][ T4601] vhci_hcd: release socket [ 134.619729][ T4601] vhci_hcd: disconnect device [ 134.656866][ T7922] loop5: detected capacity change from 0 to 512 [ 134.697094][ T7922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.722528][ T7922] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.833050][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 134.842082][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 134.843773][ T7938] ÿÿÿÿÿÿ: renamed from vlan1 [ 134.941124][ T7944] loop4: detected capacity change from 0 to 1764 [ 134.985839][ T7947] loop4: detected capacity change from 0 to 1024 [ 135.006530][ T7947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.018739][ T7947] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.034514][ T7947] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 135.049531][ T7947] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 135.062151][ T7947] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.062151][ T7947] [ 135.071881][ T7947] EXT4-fs (loop4): Total free blocks count 0 [ 135.078327][ T7947] EXT4-fs (loop4): Free/Dirty block details [ 135.085913][ T7947] EXT4-fs (loop4): free_blocks=4293918720 [ 135.091782][ T7947] EXT4-fs (loop4): dirty_blocks=16 [ 135.097339][ T7947] EXT4-fs (loop4): Block reservation details [ 135.099152][ T5868] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.103520][ T7947] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 135.141786][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.295822][ T7962] netlink: 'syz.2.748': attribute type 11 has an invalid length. [ 135.306735][ T7962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.748'. [ 135.358668][ T7966] netlink: 'syz.2.750': attribute type 3 has an invalid length. [ 135.435112][ T7970] loop4: detected capacity change from 0 to 512 [ 135.454216][ T7970] EXT4-fs: Ignoring removed i_version option [ 135.461189][ T10] IPVS: starting estimator thread 0... [ 135.465007][ T7970] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.508817][ T7970] EXT4-fs (loop4): 1 truncate cleaned up [ 135.518778][ T7970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.535827][ T6273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.564178][ T7973] IPVS: using max 36 ests per chain, 86400 per kthread [ 135.744687][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 135.772908][ T7986] openvswitch: netlink: Flow key attr not present in new flow. [ 135.825020][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.890444][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 135.905721][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 136.017770][ T8005] loop4: detected capacity change from 0 to 1024 [ 136.035098][ T8005] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.051606][ T8005] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.062655][ T8005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e028, mo2=0000] [ 136.071312][ T8005] System zones: 0-1, 3-12 [ 136.076151][ T8005] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.090942][ T8005] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.767: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.091415][ T8010] process 'syz.0.769' launched './file1' with NULL argv: empty string added [ 136.133092][ T8005] EXT4-fs (loop4): Remounting filesystem read-only [ 136.161307][ T8005] EXT4-fs (loop4): 1 orphan inode deleted [ 136.179283][ T8005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.264923][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.342319][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 241.349371][ C0] rcu: (detected by 0, t=10502 jiffies, g=18469, q=29 ncpus=2) [ 241.357019][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294961219-4294950717), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 241.370410][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g18469 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 241.381620][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 241.391605][ C0] rcu: RCU grace-period kthread stack dump: [ 241.397503][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 241.411077][ C0] Call Trace: [ 241.414374][ C0] [ 241.417335][ C0] __schedule+0x1798/0x4cc0 [ 241.421879][ C0] ? rcu_is_watching+0x15/0xb0 [ 241.426669][ C0] ? __pfx___schedule+0x10/0x10 [ 241.431553][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 241.437482][ C0] ? schedule+0x91/0x360 [ 241.441843][ C0] ? rcu_is_watching+0x15/0xb0 [ 241.446629][ C0] ? lock_release+0x4b/0x3e0 [ 241.451253][ C0] schedule+0x165/0x360 [ 241.455666][ C0] schedule_timeout+0x12b/0x270 [ 241.460551][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 241.465954][ C0] ? __pfx_process_timeout+0x10/0x10 [ 241.471268][ C0] ? prepare_to_swait_event+0x341/0x380 [ 241.476855][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 241.481747][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 241.486845][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 241.492164][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 241.497400][ C0] ? finish_swait+0xcd/0x1f0 [ 241.502022][ C0] rcu_gp_kthread+0x99/0x390 [ 241.506651][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 241.511886][ C0] ? __kthread_parkme+0x7b/0x200 [ 241.516849][ C0] ? __kthread_parkme+0x1a1/0x200 [ 241.521900][ C0] kthread+0x711/0x8a0 [ 241.525997][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 241.531223][ C0] ? __pfx_kthread+0x10/0x10 [ 241.535842][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.541071][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.546286][ C0] ? __pfx_kthread+0x10/0x10 [ 241.550909][ C0] ret_from_fork+0x3f9/0x770 [ 241.555521][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 241.560659][ C0] ? __switch_to_asm+0x39/0x70 [ 241.565453][ C0] ? __switch_to_asm+0x33/0x70 [ 241.570246][ C0] ? __pfx_kthread+0x10/0x10 [ 241.574867][ C0] ret_from_fork_asm+0x1a/0x30 [ 241.579668][ C0] [ 241.582701][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 241.589056][ C0] Sending NMI from CPU 0 to CPUs 1: [ 241.594309][ C1] NMI backtrace for cpu 1 [ 241.594335][ C1] CPU: 1 UID: 0 PID: 8014 Comm: syz.5.772 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 241.594359][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.594371][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 241.594400][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d e4 ae fe 0b 48 89 de 5b e9 13 ad 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 10 a1 92 65 8b 15 08 6a [ 241.594415][ C1] RSP: 0018:ffffc90000a08d38 EFLAGS: 00000097 [ 241.594430][ C1] RAX: ffffffff81adb348 RBX: ffff8880b8727bc8 RCX: 0000000000010000 [ 241.594444][ C1] RDX: ffff88802b94bc00 RSI: 0000000000000001 RDI: 0000000000000007 [ 241.594455][ C1] RBP: ffffc90000a08e90 R08: ffff88803393815f R09: 1ffff1100672702b [ 241.594468][ C1] R10: dffffc0000000000 R11: ffffed100672702c R12: ffff888033938340 [ 241.594481][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88802b94c6d8 [ 241.594492][ C1] FS: 00007f259118c6c0(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 241.594507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.594519][ C1] CR2: 0000001b32c23ffc CR3: 0000000075146000 CR4: 00000000003526f0 [ 241.594534][ C1] Call Trace: [ 241.594542][ C1] [ 241.594549][ C1] __hrtimer_run_queues+0x577/0xc60 [ 241.594589][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 241.594613][ C1] ? read_tsc+0x9/0x20 [ 241.594653][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 241.594693][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 241.594724][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 241.594762][ C1] [ 241.594767][ C1] [ 241.594774][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.594793][ C1] RIP: 0010:copy_splice_read+0x577/0xa50 [ 241.594817][ C1] Code: 48 c7 84 24 18 01 00 00 00 00 00 00 48 8b 5c 24 40 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 6c 39 e0 ff 48 8b 03 <48> 89 84 24 f8 00 00 00 48 8b 5c 24 20 48 83 c3 48 48 89 d8 48 c1 [ 241.594832][ C1] RSP: 0018:ffffc9000bce78e0 EFLAGS: 00000246 [ 241.594847][ C1] RAX: 0000000000000000 RBX: ffffc9000bce7b80 RCX: 0000000000000000 [ 241.594858][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000bce79f0 [ 241.594868][ C1] RBP: ffffc9000bce7a70 R08: ffffc9000bce79ef R09: 0000000000000000 [ 241.594881][ C1] R10: ffffc9000bce79e0 R11: fffff5200179cf3e R12: dffffc0000000000 [ 241.594893][ C1] R13: 1ffff9200179cf2c R14: 0000000000004004 R15: 1ffff9200179cf70 [ 241.594920][ C1] ? __pfx_copy_splice_read+0x10/0x10 [ 241.594945][ C1] ? register_lock_class+0x121/0x320 [ 241.594973][ C1] ? file_end_write+0xd8/0x250 [ 241.594997][ C1] ? direct_splice_actor+0x10c/0x160 [ 241.595022][ C1] ? __pfx_copy_splice_read+0x10/0x10 [ 241.595045][ C1] splice_direct_to_actor+0x4a9/0xcc0 [ 241.595078][ C1] ? __pfx_direct_splice_actor+0x10/0x10 [ 241.595110][ C1] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 241.595138][ C1] do_splice_direct+0x181/0x270 [ 241.595164][ C1] ? __pfx_do_splice_direct+0x10/0x10 [ 241.595187][ C1] ? common_file_perm+0x1b5/0x230 [ 241.595214][ C1] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 241.595241][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 241.595261][ C1] ? security_file_permission+0x75/0x290 [ 241.595283][ C1] ? rw_verify_area+0x255/0x4d0 [ 241.595307][ C1] do_sendfile+0x4da/0x7e0 [ 241.595327][ C1] ? __pfx_do_sendfile+0x10/0x10 [ 241.595347][ C1] ? __se_sys_futex+0x36f/0x400 [ 241.595370][ C1] __se_sys_sendfile64+0x13e/0x190 [ 241.595388][ C1] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 241.595402][ C1] ? rcu_is_watching+0x15/0xb0 [ 241.595421][ C1] ? rcu_is_watching+0x15/0xb0 [ 241.595439][ C1] do_syscall_64+0xfa/0x3b0 [ 241.595457][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.595474][ C1] ? clear_bhb_loop+0x60/0xb0 [ 241.595492][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.595509][ C1] RIP: 0033:0x7f259038ebe9 [ 241.595525][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.595540][ C1] RSP: 002b:00007f259118c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 241.595556][ C1] RAX: ffffffffffffffda RBX: 00007f25905b5fa0 RCX: 00007f259038ebe9 [ 241.595569][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 241.595579][ C1] RBP: 00007f2590411e19 R08: 0000000000000000 R09: 0000000000000000 [ 241.595589][ C1] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 241.595600][ C1] R13: 00007f25905b6038 R14: 00007f25905b5fa0 R15: 00007ffe1ed35db8 [ 241.595619][ C1]