last executing test programs: 24.987790733s ago: executing program 3 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_eeprom={0x7, 0x7, 0x7f}}) 24.908644371s ago: executing program 3 (id=16): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006001700800a000008001600", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57f"], 0x158}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x12, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodioread_nolock}, {@noinit_itable}, {@noload}, {@errors_remount}]}, 0x1, 0x7a7, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 24.773942054s ago: executing program 3 (id=17): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff0400000009000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/576]) 24.644189072s ago: executing program 3 (id=18): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) ptrace$getregset(0x4212, r0, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 24.594284256s ago: executing program 3 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x209, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) (async) r7 = socket(0x25, 0x80805, 0x0) setsockopt(r7, 0x84, 0x80, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) gettid() (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r11, &(0x7f0000ff1000/0x3000)=nil, 0x400c) (async) shmat(r11, &(0x7f000008d000/0x2000)=nil, 0x2000) splice(r8, 0x0, r10, 0x0, 0xf, 0x8) 21.725321187s ago: executing program 3 (id=60): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x9) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x81, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) 21.687634752s ago: executing program 32 (id=60): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x9) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x81, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) 1.486308089s ago: executing program 5 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d800800030000000000080002000300000005000400010000000500010007000001050004"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 1.462374537s ago: executing program 5 (id=685): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0xc2040) ioctl$KDENABIO(r1, 0x4b36) 1.376674613s ago: executing program 5 (id=686): sched_getaffinity(0x0, 0xfffffe70, &(0x7f0000000540)) 1.376508895s ago: executing program 5 (id=687): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r1, 0x1, 0xffffff80}, 0x14}}, 0x0) 1.375527409s ago: executing program 5 (id=689): mlock(&(0x7f00004f8000/0x4000)=nil, 0x4000) mlockall(0x1) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x19) 896.541085ms ago: executing program 0 (id=701): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x8, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_rs}}}}, 0x3e) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 771.420909ms ago: executing program 5 (id=704): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r3, 0x6700000000000000) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) 769.610222ms ago: executing program 0 (id=706): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r2 = fsmount(0xffffffffffffffff, 0x1, 0x14) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1a900000}]}, 0x34}}, 0x0) 695.872661ms ago: executing program 0 (id=708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="cb9507974660966844ab2a70160ec5589435ceb33e0b935e25cd3b8045cbbb755f6f74a33c13cc0a904e9b510a81742cce3463e626b905ed10882af2f440d270096f4fc38f3b906d11197173ded82a3ad93c6351b8370f2c862fdb1a4430e7e6b23a99cf5e20920a6c2f3121b4eeda1fe658656b10ffc16c5ab0639d2d29ab848393eb58caa784e8fe760ce27953b1e28265738cd8a47f0c2286864b235d16d86d4b9a0d67", 0xfffffe61}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 620.316001ms ago: executing program 0 (id=714): syz_read_part_table(0x5de, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$char_usb(r0, &(0x7f0000001100)="a19155d54d1a5fa9c3c8d065c7e02055b4b0c286c18d25b1e33a342a97af31839b5eb396d937a9af493e9990f51b634df1ffaff960f49a10afda7c07a838cb855af981489ae8b78d1fff87a34d48215218a0e3c4faefdd7e292e9b8b2896c923008a7cb89d1d746b38111271ebf80135735cef10dd6febf6c840a61bfcdb0acb8abf4f085949ae09d4fe30fc24b0465d09b6aae8a2b4049b233e05708edc49792017bab4ee9a274059bcc455b84a1d8a9930b3fdfe2ea4e525efc70c924db55d926adf1ebf19ec3699809131c9075063ab378848ff7ad1010e546141430c2023d5b50518530feee7e10341b602fb8ff09ee29d8afac369ec7b945304dc5a278863a8adb0dd9dd74dbeae396ea0b608ae1e28ad136651bcecb71d5bc9fa5f7628a3b4e108671b51fe9a6c9a859ddaf3f35b7c408509ee84171444bc47be16d0868a19f7dd77851ad54446b95e20b90790e1abc28a18147b9cf527a58ac0f504fae5bec70048a86d9afd668bfb030a8f17b5c96727863af73ca1ec3941a4a3fd3ae049bbdc465f8068f20aeff0f37c538adba1907e5e1f20a3deb339a6933e67f157d44259ebe24e1962a66a4f3292107230f238b42444f16143a849ce800ef6e6eb829a3a8eb45cda6fb30a7f2a2cf54f01ed795c6c00b7250a4c6e71d8639a1bc65e381a74fd995efa81ae7d33e0e4826d00445b8ee56e73b85376935f06701b5d73cd77e531c31d6d5c23f678cf97f076287042fb40c45d71b203089c3debea7af63d2a4cc485ce4682d477df1dce4ca85c363652d02d3d4cf7ef18182959ed89c267958f6f6506c62d13a31f761bc71d12197f7d007223da154bf20ee4b1a92236810fa478bd3e64c68c6d6be14ab9aba744898d6d5a50d4329122ab348e2a756860405e2fe9407a3a7c2f5c08f0ee3a8f431cd1e0702f436f119828bf01ae835dea2a6615ad3fa2655686eeb59080913a993c49c8607847fd3193e6fbb510fdadabd6d199af2972551a35c682436a43da9377aa7aab241b16cf075b35f87f0e51f6d3a51b0a8c243b4993211fc0a4d27147dace7899bd9dfff13d5a7c59059a27b533f6b625c8307ca92fdd7c910a4b1070cba58a17e80d3568b5432e2c2a5b5647305ce7765ddd02e4cd10eca19721033e3ca41dc59423a7c31883ff41a301ae748a4540b70f408dadf113a81af8cf264c6258f85be09b1931f0fe47ff7f6fcac3f61c544d30d21383eca81793d0d2cf4ae7606164745bbf9087cce109ee6d8cb0aca4df6bf5bd6fb72ffd9e28eaa6b5ed692fe347fe8536823b462d8e7b07316dbaa1ebb6b575fdce31513050e35946e8023fe1b2a26648f0177cf3b0763e593be1e5b6635edfd3f9359d75136ad964d53111c8d55116ac96bed8c3bd23b3ffb7d9d72ae39d2e0b07c384afbfd4219fcf54f2c5bee93f5de2dcd18910177914cb32bd1d92fb63074f24cf6aef8af7d3dbd977e81768717a4a293dd4637c8ce64bff800164879c18b593e2387d2e18d4b2b431130d81aa4b73bd30ab0868f65a1db2393e7cc015d125f7f86882aea4460a036fb4b47063b6200cf884c3786c9d9d32931c16c93dbf10aabf963875a7df0dbe37e1b2bee3d61c202a94010ec60ff996abe630abf730376fa49b2db24aa4c2027cd21db7ecad87d059568bb2ac0e4b7cd995ea0d2c99d9a2b161f4ac8e21b0eaba140f91cac1efdc1603da721ada568c7afc201668f3b55cf8c7ac5b1e83e2c94f4007379170f5a46a2b9f88d23aa53461fa094f8c93dcf3c7c9b2f7b3f71b88ba475a260c3fa32f82855d43310bca366a9f04614e96e3d1926209a252125114fb1e95daf9959b3520857aec37a3a9ad7327118abe8baf11ac813ea6571f5df57a2b25809d6b1f10c8dbb88c7f0ea858cf3ca031bdf3df95dcf04fdbd93d35ec2bd3fc19bf070e7f74526d1dd5597901b9947de4ec0ce6fe89898e0f88dd6943bcaa0523fea67554d9ebc093ccee1069a6ad3e8fc1c8a32c0dcb2b2311054b9db4717b5352ba48bb6fe53e2f61bf2e084334e25d45999f9b78734f5bd8f970a375357685265e8ad8eab1e064765117cd3f0745e1a44eae97f3a9d4ac4164c1b6eedf717cd6f97a823e02b51ae7ce3087a9ba35c4a649a0f2429215463ec0a3d517a9f98f860fce22215645b92920b1bd7470fcd024da71f560d268b689190e09181c426ba93fae60c442d848fb8df437ca5e7d74adf2ca38aa33ef54510dd4ba7648782837554a88d469a5f2a50ff9351f5ec8538ba42ea3bf87afda2b4f639a1d8d25e08ea0cfb11fed08c8efa570f309bdce5f210e2bdee963dc65f0b133f0e9d1fdee5f373623d3ec061bf5d3dde9442032a13bb339578d561ad9687fa2417db32fe8db3585d3d71634217d2fb885dc3131902578b24124f293e3756bc29dbdf7a4451466a6971f3cebbbf8762b03c08bfeb3443609496e2226884484104eaef1c628b7c06ed82cf4b89bbb3afa6d9d1e8b68ad0e681f1d6cb5ffbeaad0ad5ac67221712e1af949ce44c254893d7d6a01b6262960b180841502d3dad90a6cd18302c79213b688f83a458290dfa689063933ab5f5f9ba727719df6cbde564377d1960fe5a39634644abbc28ef64136b5809805bb13491151866158e9c098b37c7a84d5932fd4b1291dcae0e6f685cd3a22ee747772716113298f5adb40b96b119f98c7f4bc444b63644f1408995fa717fb5bbc7a0e49e2a511925e3a53c9581569a1cf0d5bc4013245e299e810d7717d1de5eddbbacb62c427f10d5eb31be458d84af19834f72693910f693dee6c7c323adc9152fa642f21ae4b749961bae7aec5aefd5aba8ae2352fb5f37754edb6fcec8088f15aed7ca45717c9a007d8afdf1872de23f5cad8045c9b16bf", 0x801) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) unshare(0x22020600) socket(0x40000000015, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r1, 0x10, 0x37eb, 0x683) 523.628322ms ago: executing program 0 (id=721): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x3f, 0x70, 0x64, 0x4000, 0x40, 0x1, 0x0, @private=0xa010102, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x18, 0x0, {0x15, 0x4, 0x2, 0x9, 0x8, 0x65, 0x401, 0x2, 0x1, 0x100, @multicast2, @private=0xa010101, {[@rr={0x7, 0x1f, 0xbf, [@rand_addr=0x64010100, @loopback, @local, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @local]}, @rr={0x7, 0xb, 0x60, [@loopback, @local]}, @timestamp_prespec={0x44, 0x14, 0xc4, 0x3, 0x9, [{@broadcast, 0x2}, {@rand_addr=0x64010100, 0xf0c}]}]}}}}}}}, 0x0) 455.917195ms ago: executing program 0 (id=723): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb0, 0x1c080, 0xa, 0x28002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 399.372061ms ago: executing program 1 (id=727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffdffff4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="a5", 0x1}], 0x1}, 0x2408c8c0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/234, 0xea}], 0x1}, 0x56}, {{0x0, 0x0, 0x0}, 0x9b4b}], 0x2, 0x10010, 0x0) 288.736187ms ago: executing program 1 (id=730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)='^\x00', 0x2, 0x40d5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) 250.408503ms ago: executing program 1 (id=731): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x20020200) setns(r0, 0x0) 199.994828ms ago: executing program 2 (id=733): mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ef09eded, 0x4c033, 0xffffffffffffffff, 0x8000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x214}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) syz_clone3(&(0x7f0000000680)={0x2000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 197.374555ms ago: executing program 4 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012003303"], 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x40000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001440)=""/4106, 0x100a}, {&(0x7f0000000240)=""/144, 0x90}], 0x2) 196.364076ms ago: executing program 1 (id=735): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000a00000085200000bcd801"], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 175.081953ms ago: executing program 2 (id=736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe5"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) 158.269044ms ago: executing program 1 (id=737): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r1}]}, 0x40}}, 0x4000000) 152.597967ms ago: executing program 2 (id=738): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)=ANY=[], 0x0) 138.49186ms ago: executing program 4 (id=739): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 137.248207ms ago: executing program 2 (id=740): syz_mount_image$fuse(&(0x7f0000000140), 0x0, 0x2000002, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e29, @broadcast}], 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001200"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 104.303263ms ago: executing program 2 (id=741): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x8, 0x0) msgsnd(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r0, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000) 102.496749ms ago: executing program 4 (id=742): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10) write(r0, &(0x7f0000000000)="8cfe", 0x2) 60.60554ms ago: executing program 4 (id=743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 60.48773ms ago: executing program 4 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000020000000400000058"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 58.862911ms ago: executing program 1 (id=745): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @private0, 0x3ff}, 0x1c) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r3, 0x0, r5, 0x0, 0x7ffffffffffffc, 0x1) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f0000000280)="79c0a546", 0x4}], 0x1, 0xa) move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) mlockall(0x5) 184.281µs ago: executing program 4 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000acf"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44) 0s ago: executing program 2 (id=747): r0 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') r2 = io_uring_setup(0x63f3, &(0x7f0000000040)={0x0, 0xf311, 0x1000, 0x4, 0x172}) close_range(r1, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffdd9, 0x20008080, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x35}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4044) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/45, 0x2d}], 0x1}, 0x8}], 0x1, 0x100, 0x0) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000000)={0x25, 0xfe81, 0xffffffff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 31.525007][ T6560] cgroup: Unknown subsys name 'net' [ 31.645132][ T6560] cgroup: Unknown subsys name 'cpuset' [ 31.647173][ T6560] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.796515][ T6560] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.946788][ T6574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.966420][ T6580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.966808][ T6580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.980115][ T6586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.980591][ T6586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.980759][ T6586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.981063][ T6586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.981252][ T6586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.985258][ T6585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.989801][ T6588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.991321][ T6588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.993424][ T6164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.996871][ T6588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.997001][ T6164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.999690][ T6164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.001383][ T6164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.001472][ T6588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.004161][ T6164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.005484][ T6164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.007529][ T6164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.009110][ T6588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.010792][ T6588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.012443][ T6588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.013885][ T6588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.014372][ T6588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.126935][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 33.207415][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 33.210241][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.211719][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.213131][ T6578] bridge_slave_0: entered allmulticast mode [ 33.214729][ T6578] bridge_slave_0: entered promiscuous mode [ 33.222927][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 33.229533][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.230961][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.232252][ T6578] bridge_slave_1: entered allmulticast mode [ 33.233876][ T6578] bridge_slave_1: entered promiscuous mode [ 33.254849][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.285265][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.321620][ T6578] team0: Port device team_slave_0 added [ 33.322412][ T6578] team0: Port device team_slave_1 added [ 33.349191][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.349267][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.349325][ T6572] bridge_slave_0: entered allmulticast mode [ 33.349744][ T6572] bridge_slave_0: entered promiscuous mode [ 33.353050][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.353070][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.353120][ T6572] bridge_slave_1: entered allmulticast mode [ 33.353524][ T6572] bridge_slave_1: entered promiscuous mode [ 33.356579][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 33.358277][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.358297][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.358373][ T6573] bridge_slave_0: entered allmulticast mode [ 33.358775][ T6573] bridge_slave_0: entered promiscuous mode [ 33.360029][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.360036][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.360047][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.360941][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.360960][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.361038][ T6573] bridge_slave_1: entered allmulticast mode [ 33.361451][ T6573] bridge_slave_1: entered promiscuous mode [ 33.375994][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.376031][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.376043][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.382372][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.384600][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.389129][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.391799][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.414852][ T6573] team0: Port device team_slave_0 added [ 33.427599][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 33.433763][ T6572] team0: Port device team_slave_0 added [ 33.435474][ T6573] team0: Port device team_slave_1 added [ 33.444438][ T6578] hsr_slave_0: entered promiscuous mode [ 33.444797][ T6578] hsr_slave_1: entered promiscuous mode [ 33.445741][ T6572] team0: Port device team_slave_1 added [ 33.460123][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.460208][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.460258][ T6582] bridge_slave_0: entered allmulticast mode [ 33.460692][ T6582] bridge_slave_0: entered promiscuous mode [ 33.470255][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.470327][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.470408][ T6582] bridge_slave_1: entered allmulticast mode [ 33.470844][ T6582] bridge_slave_1: entered promiscuous mode [ 33.477580][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.478743][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.482854][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.496327][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.497503][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.501569][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.504007][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.504026][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.504039][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.514732][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.516024][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.523205][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.523907][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.523928][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.548883][ T6582] team0: Port device team_slave_0 added [ 33.549655][ T6582] team0: Port device team_slave_1 added [ 33.564314][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.564337][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.564349][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.564928][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.564935][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.564949][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.567006][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.580966][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.582364][ T6579] bridge_slave_0: entered allmulticast mode [ 33.584405][ T6579] bridge_slave_0: entered promiscuous mode [ 33.591208][ T6573] hsr_slave_0: entered promiscuous mode [ 33.592695][ T6573] hsr_slave_1: entered promiscuous mode [ 33.594170][ T6573] debugfs: 'hsr0' already exists in 'hsr' [ 33.595201][ T6573] Cannot create hsr debugfs directory [ 33.598425][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.599688][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.601040][ T6579] bridge_slave_1: entered allmulticast mode [ 33.602832][ T6579] bridge_slave_1: entered promiscuous mode [ 33.625946][ T6572] hsr_slave_0: entered promiscuous mode [ 33.627369][ T6572] hsr_slave_1: entered promiscuous mode [ 33.628541][ T6572] debugfs: 'hsr0' already exists in 'hsr' [ 33.629539][ T6572] Cannot create hsr debugfs directory [ 33.640275][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.642027][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.646730][ T6582] hsr_slave_0: entered promiscuous mode [ 33.647053][ T6582] hsr_slave_1: entered promiscuous mode [ 33.647226][ T6582] debugfs: 'hsr0' already exists in 'hsr' [ 33.647238][ T6582] Cannot create hsr debugfs directory [ 33.660579][ T6579] team0: Port device team_slave_0 added [ 33.669912][ T6579] team0: Port device team_slave_1 added [ 33.685620][ T6578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.697275][ T6578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.706600][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.707853][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.712285][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.716255][ T6578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.723674][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.724906][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.729181][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.732989][ T6578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.785453][ T6579] hsr_slave_0: entered promiscuous mode [ 33.785789][ T6579] hsr_slave_1: entered promiscuous mode [ 33.785998][ T6579] debugfs: 'hsr0' already exists in 'hsr' [ 33.786009][ T6579] Cannot create hsr debugfs directory [ 33.799326][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.799371][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.799541][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.799579][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.826451][ T6573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.835751][ T6573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.842371][ T6573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.848697][ T6573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.880120][ T6582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.886503][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.886545][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.886615][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.886637][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.887725][ T6582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.890731][ T6582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.897870][ T6582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.918300][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.925374][ T6572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.933454][ T6572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.937157][ T6572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.941151][ T6572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.952952][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.952990][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.953053][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.953075][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.965484][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.966837][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.970211][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.971447][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.975644][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.976929][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.989764][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.995076][ T6579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.000656][ T6579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.007251][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.010124][ T6579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.016072][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.016117][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.018511][ T6579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.033118][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.033156][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.036089][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.042352][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.042388][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.051256][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.051297][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.109532][ T6573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.109563][ T6573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.116983][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.137042][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.139790][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.148519][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.148561][ T5711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.155058][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.159530][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.159612][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.181121][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.188218][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.193090][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.198320][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.198361][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.199024][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.199040][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.201581][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.213307][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.213341][ T5711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.220093][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.220130][ T5711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.283153][ T6579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.285832][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.296485][ T6578] veth0_vlan: entered promiscuous mode [ 34.302674][ T6578] veth1_vlan: entered promiscuous mode [ 34.314404][ T6573] veth0_vlan: entered promiscuous mode [ 34.319702][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.329246][ T6573] veth1_vlan: entered promiscuous mode [ 34.331632][ T6578] veth0_macvtap: entered promiscuous mode [ 34.335025][ T6578] veth1_macvtap: entered promiscuous mode [ 34.340494][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.358505][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.373526][ T1498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.373767][ T1498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.373792][ T1498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.373810][ T1498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.390520][ T6573] veth0_macvtap: entered promiscuous mode [ 34.399643][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.402192][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.422603][ T6573] veth1_macvtap: entered promiscuous mode [ 34.431151][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.432127][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.448027][ T6582] veth0_vlan: entered promiscuous mode [ 34.461350][ T5711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.463868][ T3494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.465380][ T3494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.466945][ T3494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.477902][ T6582] veth1_vlan: entered promiscuous mode [ 34.485460][ T6572] veth0_vlan: entered promiscuous mode [ 34.505808][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.505847][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.510104][ T6572] veth1_vlan: entered promiscuous mode [ 34.537289][ T6582] veth0_macvtap: entered promiscuous mode [ 34.538378][ T6582] veth1_macvtap: entered promiscuous mode [ 34.550624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.550656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.561738][ T2059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.563194][ T2059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.566844][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.581498][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.591984][ T6572] veth0_macvtap: entered promiscuous mode [ 34.597225][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597278][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597338][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597353][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.604932][ T6578] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.610175][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.610209][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.610894][ T6572] veth1_macvtap: entered promiscuous mode [ 34.632392][ T6579] veth0_vlan: entered promiscuous mode [ 34.637385][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.674579][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.679136][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.679968][ T6579] veth1_vlan: entered promiscuous mode [ 34.698236][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.698530][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.700923][ T3494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.701129][ T3494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.701382][ T3494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.701445][ T3494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.743196][ T6579] veth0_macvtap: entered promiscuous mode [ 34.748024][ T6579] veth1_macvtap: entered promiscuous mode [ 34.757327][ T5711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.757368][ T5711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.784395][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.784428][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.797786][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.806421][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.808197][ T2059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.808224][ T2059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.811692][ T2059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.811782][ T2059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.811796][ T2059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.811808][ T2059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.827020][ T6693] overlayfs: overlapping lowerdir path [ 34.830063][ T6693] overlayfs: overlapping lowerdir path [ 34.834882][ T6693] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 34.994031][ T6574] Bluetooth: hci2: command tx timeout [ 35.065589][ T6588] Bluetooth: hci3: command tx timeout [ 35.096644][ T6588] Bluetooth: hci1: command tx timeout [ 35.096863][ T6588] Bluetooth: hci0: command tx timeout [ 35.099200][ T6574] Bluetooth: hci4: command tx timeout [ 35.292697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.294638][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.296158][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 35.328578][ T6703] loop3: detected capacity change from 0 to 128 [ 35.329942][ T6703] msdos: Unknown parameter 'ÿ0xffffffffffffffff00000000000000000000005' [ 35.335425][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.337990][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.341158][ T6703] Zero length message leads to an empty skb [ 35.843049][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 35.900694][ T6708] loop4: detected capacity change from 0 to 32768 [ 35.907848][ T6708] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (6708) [ 35.921222][ T6708] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 35.923141][ T6708] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 35.929191][ T6708] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 36.002122][ T6708] BTRFS info (device loop4): rebuilding free space tree [ 36.263229][ T6740] loop0: detected capacity change from 0 to 1764 [ 36.269287][ T6740] iso9660: Unknown parameter 'ÿ' [ 36.285602][ T6708] BTRFS info (device loop4): disabling free space tree [ 36.287216][ T6708] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 36.289321][ T6708] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 36.303225][ T6708] BTRFS info (device loop4): setting nodatasum [ 36.304833][ T6708] BTRFS info (device loop4): allowing degraded mounts [ 36.306245][ T6708] BTRFS info (device loop4): turning on async discard [ 36.308900][ T6708] BTRFS info (device loop4): enabling disk space caching [ 36.310183][ T6708] BTRFS info (device loop4): force clearing of disk cache [ 36.311494][ T6708] BTRFS info (device loop4): force zlib compression, level 3 [ 36.409805][ T6751] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 36.411492][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.430141][ T6751] loop3: detected capacity change from 0 to 2048 [ 36.461653][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.465488][ T6751] EXT4-fs error (device loop3): ext4_find_extent:903: inode #2: comm syz.3.16: inode has invalid extent depth: 9 [ 36.468599][ T6751] EXT4-fs (loop3): Remounting filesystem read-only [ 36.490958][ T6572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.519704][ T6757] loop3: detected capacity change from 0 to 512 [ 36.550341][ T6757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.566285][ T6708] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.589714][ T6572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.646199][ T6762] loop3: detected capacity change from 0 to 22 [ 36.647392][ T6762] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 36.649480][ T6762] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 36.736531][ T6765] overlayfs: missing 'lowerdir' [ 36.818072][ T6767] loop2: detected capacity change from 0 to 512 [ 36.818395][ T6767] ======================================================= [ 36.818395][ T6767] WARNING: The mand mount option has been deprecated and [ 36.818395][ T6767] and is ignored by this kernel. Remove the mand [ 36.818395][ T6767] option from the mount to silence this warning. [ 36.818395][ T6767] ======================================================= [ 36.818426][ T6767] EXT4-fs: Ignoring removed oldalloc option [ 36.829169][ T6767] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.829211][ T6767] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.901150][ T6767] EXT4-fs (loop2): 1 truncate cleaned up [ 36.902858][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.924002][ T6650] IPVS: starting estimator thread 0... [ 37.013729][ T6770] IPVS: using max 70 ests per chain, 168000 per kthread [ 37.016938][ T6579] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 37.051379][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.064380][ T6580] Bluetooth: hci2: command tx timeout [ 37.153696][ T6580] Bluetooth: hci4: command tx timeout [ 37.153717][ T6588] Bluetooth: hci3: command tx timeout [ 37.182852][ T6574] Bluetooth: hci1: command tx timeout [ 37.220133][ T6779] loop0: detected capacity change from 0 to 4096 [ 37.226301][ T6779] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 37.228862][ T6776] loop2: detected capacity change from 0 to 40427 [ 37.232034][ T6776] F2FS-fs (loop2): Image doesn't support compression [ 37.233300][ T6776] F2FS-fs (loop2): build fault injection rate: 684 [ 37.234553][ T6776] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 37.236772][ T6776] F2FS-fs (loop2): invalid crc value [ 37.247890][ T6779] ntfs3(loop0): ino=19, mi_enum_attr [ 37.247974][ T6779] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 37.287958][ T6776] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 37.308661][ T6776] F2FS-fs (loop2): Start checkpoint disabled! [ 37.312289][ T6776] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 37.314317][ T6776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 37.322341][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.322558][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.459312][ T6783] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 38.210542][ T4221] kworker/u8:19: attempt to access beyond end of device [ 38.210542][ T4221] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.215445][ T4221] CPU: 0 UID: 0 PID: 4221 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT [ 38.215474][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 38.215485][ T4221] Workqueue: writeback wb_workfn (flush-7:2) [ 38.215508][ T4221] Call trace: [ 38.215511][ T4221] show_stack+0x2c/0x3c (C) [ 38.215522][ T4221] __dump_stack+0x30/0x40 [ 38.215528][ T4221] dump_stack_lvl+0xd8/0x12c [ 38.215534][ T4221] dump_stack+0x1c/0x28 [ 38.215539][ T4221] f2fs_handle_critical_error+0x34c/0x4b8 [ 38.215547][ T4221] f2fs_stop_checkpoint+0x5c/0x70 [ 38.215554][ T4221] f2fs_write_end_io+0x770/0xa78 [ 38.215559][ T4221] bio_endio+0x8d4/0x910 [ 38.215566][ T4221] submit_bio_noacct+0xd44/0x186c [ 38.215571][ T4221] submit_bio+0x3b4/0x550 [ 38.215576][ T4221] f2fs_submit_write_bio+0x124/0x324 [ 38.215581][ T4221] __submit_merged_bio+0x224/0x6d4 [ 38.215586][ T4221] __submit_merged_write_cond+0x250/0x4ac [ 38.215590][ T4221] f2fs_write_data_pages+0x1dd4/0x2878 [ 38.215595][ T4221] do_writepages+0x270/0x468 [ 38.215602][ T4221] __writeback_single_inode+0x144/0x16b8 [ 38.215608][ T4221] writeback_sb_inodes+0x73c/0x16b4 [ 38.215614][ T4221] wb_writeback+0x3b4/0xd70 [ 38.215619][ T4221] wb_workfn+0x320/0xdc0 [ 38.215624][ T4221] process_one_work+0x7c0/0x1558 [ 38.215631][ T4221] worker_thread+0x958/0xed8 [ 38.215637][ T4221] kthread+0x5fc/0x75c [ 38.215642][ T4221] ret_from_fork+0x10/0x20 [ 38.224345][ T4221] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 38.287193][ T6791] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 39.144313][ T6574] Bluetooth: hci2: command tx timeout [ 39.151125][ T6857] team0 (unregistering): Port device team_slave_0 removed [ 39.154467][ T6857] team0 (unregistering): Port device team_slave_1 removed [ 39.223675][ T6588] Bluetooth: hci4: command tx timeout [ 39.223711][ T6588] Bluetooth: hci3: command tx timeout [ 39.223784][ T6574] Bluetooth: hci1: command tx timeout [ 39.607191][ T6574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.609247][ T6574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.610939][ T6574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.613143][ T6574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.615256][ T6574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.706021][ T6886] team0: entered promiscuous mode [ 39.707144][ T6886] team_slave_0: entered promiscuous mode [ 39.708516][ T6886] team_slave_1: entered promiscuous mode [ 39.726526][ T2520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.733403][ T6885] team0: left promiscuous mode [ 39.734507][ T6885] team_slave_0: left promiscuous mode [ 39.734675][ T6885] team_slave_1: left promiscuous mode [ 39.759873][ T2520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.787524][ T31] audit: type=1326 audit(39.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d776b68 code=0x7ffc0000 [ 39.795774][ T31] audit: type=1326 audit(39.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=197 compat=0 ip=0xffff9d776b68 code=0x7ffc0000 [ 39.799466][ T31] audit: type=1326 audit(39.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d776b68 code=0x7ffc0000 [ 39.799508][ T31] audit: type=1326 audit(39.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6891 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d776b68 code=0x7ffc0000 [ 39.818878][ T2520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.853060][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 39.861645][ T6899] ptrace attach of "./syz-executor exec"[6900] was attempted by "./syz-executor exec"[6899] [ 39.869352][ T2520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.892961][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.894502][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.895987][ T6875] bridge_slave_0: entered allmulticast mode [ 39.897771][ T6875] bridge_slave_0: entered promiscuous mode [ 39.900744][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.903322][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.904840][ T6875] bridge_slave_1: entered allmulticast mode [ 39.906623][ T6875] bridge_slave_1: entered promiscuous mode [ 39.921849][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.923894][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.932520][ T6875] team0: Port device team_slave_0 added [ 39.934065][ T6875] team0: Port device team_slave_1 added [ 39.942483][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.942724][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.942745][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.944987][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.944997][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.945012][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.959512][ T6875] hsr_slave_0: entered promiscuous mode [ 39.961495][ T6875] hsr_slave_1: entered promiscuous mode [ 39.962053][ T6875] debugfs: 'hsr0' already exists in 'hsr' [ 39.962064][ T6875] Cannot create hsr debugfs directory [ 40.048755][ T2520] bridge_slave_1: left allmulticast mode [ 40.048801][ T2520] bridge_slave_1: left promiscuous mode [ 40.049225][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.054492][ T2520] bridge_slave_0: left allmulticast mode [ 40.054980][ T2520] bridge_slave_0: left promiscuous mode [ 40.055064][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.166289][ T6915] overlayfs: upper fs does not support tmpfile. [ 40.281908][ T1545] kernel read not supported for file /28/ns (pid: 1545 comm: kworker/0:2) [ 40.330095][ T6938] netlink: 'syz.0.83': attribute type 25 has an invalid length. [ 40.333007][ T2520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.365374][ T2520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.394673][ T2520] bond0 (unregistering): Released all slaves [ 40.435664][ T6875] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.447182][ T6875] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.459512][ T6875] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.465239][ T6875] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.646501][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.674723][ T6976] netlink: 36 bytes leftover after parsing attributes in process `syz.4.90'. [ 40.715286][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.726717][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.726768][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.728328][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.728345][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.790109][ T2520] hsr_slave_0: left promiscuous mode [ 40.791234][ T2520] hsr_slave_1: left promiscuous mode [ 40.791622][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.791643][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.794553][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.794575][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.807699][ T2520] veth1_macvtap: left promiscuous mode [ 40.807778][ T2520] veth0_macvtap: left promiscuous mode [ 40.807833][ T2520] veth1_vlan: left promiscuous mode [ 40.808484][ T2520] veth0_vlan: left promiscuous mode [ 41.045483][ T2520] team0 (unregistering): Port device team_slave_1 removed [ 41.057041][ T2520] team0 (unregistering): Port device team_slave_0 removed [ 41.155555][ T7011] loop1: detected capacity change from 0 to 512 [ 41.234596][ T6580] Bluetooth: hci2: command tx timeout [ 41.265845][ T6875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.305023][ T6580] Bluetooth: hci1: command tx timeout [ 41.305065][ T6580] Bluetooth: hci3: command tx timeout [ 41.305300][ T6580] Bluetooth: hci4: command tx timeout [ 41.351967][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.624880][ T6574] Bluetooth: hci0: command tx timeout [ 41.642904][ T6875] veth0_vlan: entered promiscuous mode [ 41.670725][ T6875] veth1_vlan: entered promiscuous mode [ 41.671449][ T7057] loop4: detected capacity change from 0 to 2048 [ 41.686300][ T6875] veth0_macvtap: entered promiscuous mode [ 41.691141][ T6875] veth1_macvtap: entered promiscuous mode [ 41.692691][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 41.697430][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.702896][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.710863][ T1461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.711041][ T1461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.711098][ T1461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.711147][ T1461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.816862][ T7072] capability: warning: `syz.2.114' uses deprecated v2 capabilities in a way that may be insecure [ 41.832432][ T7074] loop0: detected capacity change from 0 to 164 [ 41.850547][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.850594][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.909305][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.909347][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.949040][ T7085] loop1: detected capacity change from 0 to 1024 [ 41.953326][ T7085] EXT4-fs: Ignoring removed orlov option [ 41.956068][ T7085] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.975155][ T7085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.991518][ T6562] loop4: unable to read partition table [ 41.991614][ T6562] loop4: partition table beyond EOD, truncated [ 42.001467][ T7085] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 42.001522][ T7085] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.119: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 42.055163][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.091000][ T7104] netlink: 'syz.1.121': attribute type 14 has an invalid length. [ 42.091040][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 42.101520][ T7104] netlink: 'syz.1.121': attribute type 14 has an invalid length. [ 42.103031][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 42.106686][ T2520] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.109828][ T2520] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.110512][ T2520] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.110534][ T2520] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.147605][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 42.148531][ T7057] loop4: unable to read partition table [ 42.149632][ T7057] loop4: partition table beyond EOD, truncated [ 42.149665][ T7057] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 42.170521][ T7109] bond1: option primary_reselect: invalid value (5) [ 42.174275][ T7109] bond1 (unregistering): Released all slaves [ 42.325835][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 42.368717][ T7137] loop4: detected capacity change from 0 to 4096 [ 42.385317][ T7137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.421056][ T6579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.576621][ T7157] loop1: detected capacity change from 0 to 2048 [ 42.591765][ T7157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.603085][ T31] audit: type=1326 audit(42.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1976b68 code=0x7ffc0000 [ 42.608177][ T31] audit: type=1326 audit(42.580:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1976b68 code=0x7ffc0000 [ 42.613340][ T31] audit: type=1326 audit(42.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffffb1976b68 code=0x7ffc0000 [ 42.617256][ T31] audit: type=1326 audit(42.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1976b68 code=0x7ffc0000 [ 42.621396][ T31] audit: type=1326 audit(42.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1976b68 code=0x7ffc0000 [ 42.633006][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.713493][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 42.787317][ T7183] loop4: detected capacity change from 0 to 1024 [ 42.809223][ T7183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.831375][ T7183] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.153: lblock 3 mapped to illegal pblock 3 (length 2) [ 42.843008][ T7183] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.153: lblock 0 mapped to illegal pblock 0 (length 3) [ 42.845937][ T7183] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 42.845958][ T7183] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.845958][ T7183] [ 42.870810][ T7195] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 42.873445][ T3494] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:17: lblock 4 mapped to illegal pblock 4 (length 1) [ 42.876238][ T3494] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 42.876260][ T3494] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.876260][ T3494] [ 42.878939][ T6579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.897260][ T7197] loop0: detected capacity change from 0 to 1024 [ 42.940735][ T7197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.955417][ T7197] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.159: lblock 0 mapped to illegal pblock 0 (length 5) [ 42.960073][ T7197] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 42.962072][ T7197] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.962072][ T7197] [ 42.983358][ T7213] loop1: detected capacity change from 0 to 512 [ 43.009901][ T6582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.017126][ T7213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.018189][ T7213] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 43.026359][ T7213] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 43.044165][ T7213] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.167: attempt to clear invalid blocks 2 len 1 [ 43.046757][ T7213] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.167: invalid indirect mapped block 1819239214 (level 0) [ 43.049162][ T7213] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.167: invalid indirect mapped block 1819239214 (level 1) [ 43.054149][ T7213] EXT4-fs (loop1): 1 truncate cleaned up [ 43.083862][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.100420][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.174'. [ 43.104287][ T7232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.173'. [ 43.127072][ T7213] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 43.128908][ T7213] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.162496][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.265957][ T7239] loop0: detected capacity change from 0 to 4096 [ 43.273534][ T7246] EXT4-fs: Ignoring removed bh option [ 43.281249][ T7248] syz_tun: entered allmulticast mode [ 43.288415][ T7247] syz_tun: left allmulticast mode [ 43.289352][ T7246] EXT4-fs: Ignoring removed nobh option [ 43.291973][ T7239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.323169][ T7246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.361119][ T7254] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.183: bad orphan inode 17 [ 43.361861][ T7254] ext4_test_bit(bit=16, block=4) = 1 [ 43.361870][ T7254] is_bad_inode(inode)=0 [ 43.361874][ T7254] NEXT_ORPHAN(inode)=0 [ 43.361877][ T7254] max_ino=32 [ 43.361880][ T7254] i_nlink=1 [ 43.362358][ T7254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.380776][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.391395][ T6582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.409135][ T6579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.630374][ T7275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.723224][ T6574] Bluetooth: hci0: command tx timeout [ 43.750461][ T6875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.828444][ T7298] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.861655][ T7302] netlink: 'syz.4.199': attribute type 3 has an invalid length. [ 43.872819][ T7298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.891779][ T7298] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.198: lblock 3 mapped to illegal pblock 3 (length 3) [ 43.922503][ T7298] EXT4-fs (loop2): Remounting filesystem read-only [ 43.957837][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.049711][ T7315] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.053853][ T7315] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 44.056272][ T7315] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 44.082836][ T6875] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.110261][ T7316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.178325][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.325985][ T24] cfg80211: failed to load regulatory.db [ 44.459691][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.213'. [ 44.536758][ T7348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.598522][ T7359] ucma_write: process 93 (syz.1.221) changed security contexts after opening file descriptor, this is not allowed. [ 44.603471][ T7361] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.617365][ T7362] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.630052][ T7362] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.710504][ T7367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.748200][ T6582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.774269][ T7370] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.858346][ T7382] batadv1: entered promiscuous mode [ 44.858379][ T7382] batadv1: entered allmulticast mode [ 44.865783][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 44.892656][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892656][ T7380] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 44.892744][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892744][ T7380] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 44.892781][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892781][ T7380] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 44.892819][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892819][ T7380] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 44.892857][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892857][ T7380] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 44.892893][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892893][ T7380] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 44.892926][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892926][ T7380] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 44.892957][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892957][ T7380] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 44.892988][ T7380] syz.0.232: attempt to access beyond end of device [ 44.892988][ T7380] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 44.893017][ T7380] syz.0.232: attempt to access beyond end of device [ 44.893017][ T7380] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 45.401183][ T7434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.457524][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.671907][ T7479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.674310][ T7479] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 45.677015][ T7479] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.275: invalid block [ 45.679434][ T7479] EXT4-fs (loop1): Remounting filesystem read-only [ 45.681076][ T7479] EXT4-fs (loop1): 1 truncate cleaned up [ 45.696345][ T7478] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 45.699773][ T7479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.713186][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.718914][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.733185][ T6582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.768502][ T24] IPVS: starting estimator thread 0... [ 45.776792][ T7488] ip_vti0: entered promiscuous mode [ 45.783812][ T6574] Bluetooth: hci0: command tx timeout [ 45.788328][ T7490] EXT4-fs: Ignoring removed orlov option [ 45.808070][ T7490] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.814681][ T7490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 45.831448][ T7490] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.280: corrupted in-inode xattr: e_value size too large [ 45.835795][ T7490] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.280: couldn't read orphan inode 15 (err -117) [ 45.842935][ T7490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.854913][ T7487] IPVS: using max 70 ests per chain, 168000 per kthread [ 45.880106][ T6579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.889013][ T7503] __nla_validate_parse: 3 callbacks suppressed [ 45.889070][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 45.975239][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.294'. [ 46.226523][ T7541] set_capacity_and_notify: 16 callbacks suppressed [ 46.228049][ T7541] loop1: detected capacity change from 0 to 512 [ 46.233069][ T7541] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.240745][ T7541] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.246731][ T7541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.303: bg 0: block 248: padding at end of block bitmap is not set [ 46.250002][ T7541] Quota error (device loop1): write_blk: dquota write failed [ 46.253888][ T7541] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 46.255725][ T7541] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.303: Failed to acquire dquot type 1 [ 46.260003][ T7541] EXT4-fs (loop1): 1 truncate cleaned up [ 46.266473][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 46.268461][ T7544] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 46.268471][ T7544] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.293196][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 46.304607][ T7546] all: renamed from veth1_to_bond (while UP) [ 46.413532][ T31] audit: type=1326 audit(46.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.4.309" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1976b68 code=0x0 [ 46.440640][ T7557] loop2: detected capacity change from 0 to 1024 [ 46.445954][ T7557] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.449265][ T7557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.450124][ T7557] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.465041][ T7557] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 46.465944][ T7557] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.310: couldn't read orphan inode 11 (err -117) [ 46.466581][ T7557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.500386][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.349950][ T7589] loop4: detected capacity change from 0 to 32768 [ 47.364194][ T7596] loop1: detected capacity change from 0 to 128 [ 47.381229][ T7596] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 47.385704][ T6564] loop4: p1 p3 < > [ 47.397066][ T7596] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 47.398586][ T7589] loop4: p1 p3 < > [ 47.402397][ T7596] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 47.405218][ T7596] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 47.407793][ T7596] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 47.410406][ T7596] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 47.415654][ T7596] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 47.419641][ T7596] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 47.422758][ T7596] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 47.426468][ T7596] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 47.523126][ T6564] udevd[6564]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.528596][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.539931][ T6564] udevd[6564]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.542329][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.542759][ T7609] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.546719][ T7609] netlink: 14 bytes leftover after parsing attributes in process `syz.2.331'. [ 47.572905][ T7609] smc: removing net device bond0 with user defined pnetid SYZ2 [ 47.579608][ T7609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.582231][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 47.582663][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 47.596074][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.624972][ T7609] bond0 (unregistering): Released all slaves [ 47.642499][ T1498] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.642554][ T1498] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.642572][ T1498] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.642926][ T1498] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.644474][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 47.644502][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 47.814511][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.344'. [ 47.819142][ T7637] vlan2: entered promiscuous mode [ 47.820138][ T7637] gretap0: entered promiscuous mode [ 47.865696][ T6574] Bluetooth: hci0: command tx timeout [ 47.915675][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 47.915705][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 47.922220][ T3517] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.922559][ T3517] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.922587][ T3517] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.922604][ T3517] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.051820][ T7653] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 48.132618][ T31] audit: type=1326 audit(48.100:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.133470][ T31] audit: type=1326 audit(48.100:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.136728][ T31] audit: type=1326 audit(48.110:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.137245][ T31] audit: type=1326 audit(48.110:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.137554][ T31] audit: type=1326 audit(48.110:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.137700][ T31] audit: type=1326 audit(48.110:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.137780][ T31] audit: type=1326 audit(48.110:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5176b68 code=0x7ffc0000 [ 48.400368][ T7674] loop5: detected capacity change from 0 to 4096 [ 48.404872][ T7678] capability: warning: `syz.0.360' uses 32-bit capabilities (legacy support in use) [ 48.416097][ T7674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.604517][ T6875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.662537][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.663207][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.758070][ T7707] tipc: Can't bind to reserved service type 1 [ 48.766820][ T7707] loop5: detected capacity change from 0 to 128 [ 48.885456][ T7718] loop1: detected capacity change from 0 to 128 [ 48.895838][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.903213][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.904099][ T7718] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.920310][ T6573] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.038143][ T7728] loop5: detected capacity change from 0 to 512 [ 49.046014][ T7728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.050678][ T7728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.382: corrupted xattr block 6: invalid header [ 49.055698][ T7728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.382: corrupted xattr block 6: invalid header [ 49.059878][ T7728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.382: corrupted xattr block 6: invalid header [ 49.063369][ T7728] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.382: corrupted xattr block 6: invalid header [ 49.082744][ T6875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.125337][ T7732] loop5: detected capacity change from 0 to 128 [ 49.260921][ T1461] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.262589][ T1461] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.262948][ T1461] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.262987][ T1461] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.266892][ T7742] loop0: detected capacity change from 0 to 128 [ 49.458364][ T7752] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.548267][ T7757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.561160][ T7757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.395: bg 0: block 217: padding at end of block bitmap is not set [ 49.562149][ T7757] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 49.814582][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.931060][ T7775] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 49.951268][ T7775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.000787][ T7775] bond1: (slave gretap1): making interface the new active one [ 50.001633][ T7775] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 50.358063][ T7806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.387909][ T7806] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 16: comm syz.0.414: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=2048, size=2048 fake=1 [ 50.432730][ T6582] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.683353][ T7833] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.683403][ T7833] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.759017][ T7833] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.759059][ T7833] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.800370][ T7851] dvmrp0: entered allmulticast mode [ 50.855907][ T7833] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.855956][ T7833] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.863188][ T7850] dvmrp0: left allmulticast mode [ 50.926551][ T7833] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.926589][ T7833] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.936562][ T7863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.976002][ T7867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.982870][ T7867] EXT4-fs (loop4): shut down requested (1) [ 51.264610][ T2037] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.266261][ T2037] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.274076][ T2037] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.275661][ T6579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.277518][ T2037] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.318388][ T2059] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.319930][ T2059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.321621][ T7878] __nla_validate_parse: 15 callbacks suppressed [ 51.321633][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 51.338069][ T7880] team0: Port device vlan3 added [ 51.339096][ T2059] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.339117][ T2059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.414989][ T7891] set_capacity_and_notify: 4 callbacks suppressed [ 51.417028][ T7891] loop1: detected capacity change from 0 to 512 [ 51.469389][ T7891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.478093][ T7894] loop2: detected capacity change from 0 to 4096 [ 51.488323][ T7891] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.452: corrupted xattr block 6: invalid header [ 51.493078][ T7891] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.452: corrupted xattr block 6: invalid header [ 51.493231][ T7891] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.452: corrupted xattr block 6: invalid header [ 51.499017][ T7891] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.452: corrupted xattr block 6: invalid header [ 51.507871][ T7894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.525615][ T7891] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.452: corrupted xattr block 6: invalid header [ 51.544472][ T7894] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.548810][ T7900] netlink: 'syz.0.455': attribute type 13 has an invalid length. [ 51.577226][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.579411][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.649506][ T7897] team0: Port device vlan3 removed [ 51.672402][ T7900] gretap0: refused to change device tx_queue_len [ 51.672431][ T7900] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.686996][ T7912] netlink: 'syz.0.459': attribute type 13 has an invalid length. [ 51.704141][ T7914] netlink: 76 bytes leftover after parsing attributes in process `syz.0.460'. [ 51.748854][ T7910] loop1: detected capacity change from 0 to 4096 [ 51.770289][ T7910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.943001][ T7934] loop5: detected capacity change from 0 to 1024 [ 51.943165][ T6573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.954075][ T7934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.960830][ T7931] tipc: Started in network mode [ 51.960870][ T7931] tipc: Node identity 529b598462b5, cluster identity 4711 [ 51.961819][ T7931] tipc: Enabled bearer , priority 0 [ 51.962263][ T7931] syzkaller0: entered promiscuous mode [ 51.962274][ T7931] syzkaller0: entered allmulticast mode [ 51.971048][ T7934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 51.972229][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 51.974886][ T7934] System zones: 0-1, 3-36 [ 52.002182][ T7931] tipc: Resetting bearer [ 52.004482][ T7930] tipc: Resetting bearer [ 52.027195][ T7930] tipc: Disabling bearer [ 52.206519][ T7952] loop5: detected capacity change from 0 to 1024 [ 52.287772][ T7952] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.476: lblock 0 mapped to illegal pblock 0 (length 6) [ 52.290458][ T7952] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 52.292516][ T7952] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.292516][ T7952] [ 52.306938][ T7952] EXT4-fs (loop5): shut down requested (0) [ 52.354896][ T13] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 52.358362][ T13] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 12 with error 117 [ 52.358398][ T13] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.358398][ T13] [ 52.629968][ T7988] loop0: detected capacity change from 0 to 128 [ 52.632461][ T7988] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.804936][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 52.804983][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 52.816450][ T8006] gretap0: entered promiscuous mode [ 52.875245][ T8006] gretap0: left promiscuous mode [ 52.939565][ T8012] netlink: 76 bytes leftover after parsing attributes in process `syz.5.496'. [ 53.003419][ T8018] loop4: detected capacity change from 0 to 1024 [ 53.012159][ T8018] EXT4-fs: Ignoring removed orlov option [ 53.061599][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.501'. [ 53.203500][ T8049] loop2: detected capacity change from 0 to 256 [ 53.300014][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'. [ 53.324616][ T8055] loop4: detected capacity change from 0 to 512 [ 53.324997][ T8055] EXT4-fs: Ignoring removed oldalloc option [ 53.340525][ T8055] EXT4-fs (loop4): 1 truncate cleaned up [ 53.501363][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 53.539552][ T8086] loop5: detected capacity change from 0 to 1024 [ 53.542776][ T8086] EXT4-fs: Ignoring removed bh option [ 53.545374][ T8086] EXT4-fs: Ignoring removed nobh option [ 53.628785][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'. [ 54.115590][ T8131] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.117762][ T8131] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 54.137007][ T8131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.141081][ T8131] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.534: Invalid inode table block 0 in block_group 0 [ 54.143260][ T8131] EXT4-fs (loop2): Remounting filesystem read-only [ 54.143305][ T8131] __quota_error: 4 callbacks suppressed [ 54.143317][ T8131] Quota error (device loop2): write_blk: dquota write failed [ 54.143355][ T8131] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 54.143415][ T8131] EXT4-fs (loop2): 1 truncate cleaned up [ 54.771598][ T8176] netlink: 'syz.5.546': attribute type 9 has an invalid length. [ 55.159519][ T31] audit: type=1326 audit(55.130:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.4.553" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1976b68 code=0x0 [ 55.487916][ T8203] FAT-fs (loop0): Directory bread(block 64) failed [ 55.488038][ T8203] FAT-fs (loop0): Directory bread(block 65) failed [ 55.488182][ T8203] FAT-fs (loop0): Directory bread(block 66) failed [ 55.488252][ T8203] FAT-fs (loop0): Directory bread(block 67) failed [ 55.488363][ T8203] FAT-fs (loop0): Directory bread(block 68) failed [ 55.488421][ T8203] FAT-fs (loop0): Directory bread(block 69) failed [ 55.488539][ T8203] FAT-fs (loop0): Directory bread(block 70) failed [ 55.488551][ T8203] FAT-fs (loop0): Directory bread(block 71) failed [ 55.488571][ T8203] FAT-fs (loop0): Directory bread(block 72) failed [ 55.488583][ T8203] FAT-fs (loop0): Directory bread(block 73) failed [ 56.540438][ T8209] syz.1.560: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 56.540567][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT [ 56.540577][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 56.540582][ T8209] Call trace: [ 56.540585][ T8209] show_stack+0x2c/0x3c (C) [ 56.540601][ T8209] __dump_stack+0x30/0x40 [ 56.540611][ T8209] dump_stack_lvl+0xd8/0x12c [ 56.540618][ T8209] dump_stack+0x1c/0x28 [ 56.540625][ T8209] warn_alloc+0x1f8/0x314 [ 56.540633][ T8209] __vmalloc_node_range_noprof+0x128/0x132c [ 56.540642][ T8209] vmalloc_user_noprof+0xf0/0x14c [ 56.540650][ T8209] xskq_create+0xbc/0x168 [ 56.540657][ T8209] xsk_init_queue+0xb0/0x118 [ 56.540663][ T8209] xsk_setsockopt+0x448/0x684 [ 56.540668][ T8209] do_sock_setsockopt+0x1ec/0x328 [ 56.540676][ T8209] __arm64_sys_setsockopt+0x170/0x1e0 [ 56.540683][ T8209] invoke_syscall+0x98/0x254 [ 56.540690][ T8209] el0_svc_common+0xe8/0x23c [ 56.540697][ T8209] do_el0_svc+0x48/0x58 [ 56.540704][ T8209] el0_svc+0x5c/0x26c [ 56.540712][ T8209] el0t_64_sync_handler+0x84/0x12c [ 56.540720][ T8209] el0t_64_sync+0x198/0x19c [ 56.540731][ T8209] Mem-Info: [ 56.540746][ T8209] active_anon:85 inactive_anon:8229 isolated_anon:0 [ 56.540746][ T8209] active_file:2718 inactive_file:14070 isolated_file:0 [ 56.540746][ T8209] unevictable:768 dirty:229 writeback:0 [ 56.540746][ T8209] slab_reclaimable:10523 slab_unreclaimable:91938 [ 56.540746][ T8209] mapped:32136 shmem:3874 pagetables:1487 [ 56.540746][ T8209] sec_pagetables:0 bounce:0 [ 56.540746][ T8209] kernel_misc_reclaimable:0 [ 56.540746][ T8209] free:1406827 free_pcp:30545 free_cma:7360 [ 56.540768][ T8209] Node 0 active_anon:340kB inactive_anon:32916kB active_file:10872kB inactive_file:56280kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:128544kB dirty:916kB writeback:0kB shmem:15496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10384kB pagetables:5948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 56.540785][ T8209] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 56.540809][ T8209] lowmem_reserve[]: 0 0 3491 3491 3491 [ 56.540845][ T8209] Node 0 Normal free:2550444kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:340kB inactive_anon:32916kB active_file:10872kB inactive_file:56280kB unevictable:3072kB writepending:916kB zspages:0kB present:5242880kB managed:3575080kB mlocked:0kB bounce:0kB free_pcp:122180kB local_pcp:80632kB free_cma:0kB [ 56.540868][ T8209] lowmem_reserve[]: 0 0 0 0 0 [ 56.540903][ T8209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 56.541001][ T8209] Node 0 Normal: 3472*4kB (UME) 1535*8kB (UME) 1073*16kB (UME) 740*32kB (UME) 343*64kB (UME) 307*128kB (UME) 268*256kB (UM) 227*512kB (UM) 137*1024kB (UME) 28*2048kB (UM) 498*4096kB (UM) = 2550536kB [ 56.541135][ T8209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.541143][ T8209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 56.541151][ T8209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 56.541159][ T8209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 56.541167][ T8209] 20686 total pagecache pages [ 56.541173][ T8209] 0 pages in swap cache [ 56.541179][ T8209] Free swap = 124996kB [ 56.541184][ T8209] Total swap = 124996kB [ 56.541190][ T8209] 2097152 pages RAM [ 56.541196][ T8209] 0 pages HighMem/MovableOnly [ 56.541201][ T8209] 433334 pages reserved [ 56.541207][ T8209] 8192 pages cma reserved [ 56.541213][ T8209] 0 pages hwpoisoned [ 56.696404][ T6580] Bluetooth: hci5: sending frame failed (-49) [ 56.698714][ T6574] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 56.728295][ T8218] __nla_validate_parse: 5 callbacks suppressed [ 56.729672][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 56.836856][ T8229] set_capacity_and_notify: 4 callbacks suppressed [ 56.838220][ T8229] loop5: detected capacity change from 0 to 1024 [ 56.839724][ T8229] EXT4-fs: Ignoring removed orlov option [ 56.840986][ T8229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.842247][ T8229] ext4: Unknown parameter 'subj_role' [ 56.870137][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 56.897707][ T8232] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 56.904940][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.573'. [ 56.906592][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.573'. [ 57.025592][ T8249] loop4: detected capacity change from 0 to 4096 [ 57.105325][ T8262] syz.2.583 (8262): /proc/8261/oom_adj is deprecated, please use /proc/8261/oom_score_adj instead. [ 57.219475][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.590'. [ 57.277547][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 57.315201][ T8284] netlink: 'syz.4.594': attribute type 12 has an invalid length. [ 57.316749][ T8284] netlink: 'syz.4.594': attribute type 29 has an invalid length. [ 57.318300][ T8284] netlink: 148 bytes leftover after parsing attributes in process `syz.4.594'. [ 57.318784][ T8286] loop2: detected capacity change from 0 to 512 [ 57.321320][ T8284] netlink: 59 bytes leftover after parsing attributes in process `syz.4.594'. [ 57.321565][ T8286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.325600][ T8286] EXT4-fs (loop2): 1 truncate cleaned up [ 57.466927][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.602'. [ 57.551541][ T8308] loop4: detected capacity change from 0 to 4096 [ 57.554567][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.602'. [ 57.708603][ T8325] loop4: detected capacity change from 0 to 1024 [ 57.724728][ T8323] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 57.733490][ T8323] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 57.776285][ T8325] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.611: lblock 0 mapped to illegal pblock 0 (length 6) [ 57.776582][ T8325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 57.776597][ T8325] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.776597][ T8325] [ 57.790232][ T8325] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.611: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.798984][ T8325] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.611: Freeing blocks not in datazone - block = 1, count = 5 [ 57.808206][ T2520] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 112: padding at end of block bitmap is not set [ 57.808587][ T2520] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 37 with max blocks 7 with error 28 [ 57.808598][ T2520] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.808598][ T2520] [ 57.808605][ T2520] EXT4-fs (loop4): Total free blocks count 0 [ 57.808610][ T2520] EXT4-fs (loop4): Free/Dirty block details [ 57.808616][ T2520] EXT4-fs (loop4): free_blocks=0 [ 57.808630][ T2520] EXT4-fs (loop4): dirty_blocks=16 [ 57.808634][ T2520] EXT4-fs (loop4): Block reservation details [ 57.808639][ T2520] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 57.979014][ T8335] loop2: detected capacity change from 0 to 4096 [ 58.226177][ T8367] netlink: 'syz.4.629': attribute type 3 has an invalid length. [ 58.228260][ T8367] netlink: 'syz.4.629': attribute type 3 has an invalid length. [ 58.272803][ T8369] loop4: detected capacity change from 0 to 512 [ 58.278440][ T8369] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 58.357021][ T8371] netlink: 'syz.4.631': attribute type 12 has an invalid length. [ 58.467442][ T8375] loop4: detected capacity change from 0 to 512 [ 58.532675][ T8375] EXT4-fs (loop4): 1 orphan inode deleted [ 58.544640][ T217] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.547156][ T217] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 58.877431][ T2059] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.879389][ T2059] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.881321][ T2059] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.883194][ T2059] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.910109][ T8395] tipc: Started in network mode [ 58.911307][ T8395] tipc: Node identity 9af7c0b85eee, cluster identity 4711 [ 58.912876][ T8395] tipc: Enabled bearer , priority 0 [ 58.915004][ T8395] syzkaller0: entered promiscuous mode [ 58.916221][ T8395] syzkaller0: entered allmulticast mode [ 58.924607][ T8395] tipc: Resetting bearer [ 58.929327][ T8394] tipc: Resetting bearer [ 58.939321][ T8394] tipc: Disabling bearer [ 59.135971][ T8421] Set syz1 is full, maxelem 14 reached [ 59.282250][ T8439] loop1: detected capacity change from 0 to 1024 [ 59.312730][ T8439] EXT4-fs (loop1): shut down requested (0) [ 59.319302][ T8445] netlink: 'syz.0.665': attribute type 22 has an invalid length. [ 59.323015][ T877] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.323305][ T877] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.323330][ T877] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.323353][ T877] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.323464][ T8445] netlink: 'syz.0.665': attribute type 22 has an invalid length. [ 59.468877][ T8454] netlink: 'syz.1.669': attribute type 9 has an invalid length. [ 59.499644][ T8459] loop1: detected capacity change from 0 to 1024 [ 59.625869][ T8469] dummy0: entered promiscuous mode [ 59.628146][ T8469] team0: entered promiscuous mode [ 59.629223][ T8469] team_slave_0: entered promiscuous mode [ 59.630285][ T8469] team_slave_1: entered promiscuous mode [ 59.719660][ T8477] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.731992][ T8477] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.750948][ T8477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 59.751073][ T8477] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.751399][ T8477] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.679: bg 0: block 361: padding at end of block bitmap is not set [ 59.754901][ T8477] EXT4-fs (loop1): Remounting filesystem read-only [ 59.755576][ T8477] EXT4-fs (loop1): 1 truncate cleaned up [ 59.759958][ T8477] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.679: dx entry: limit 0 != root limit 125 [ 59.764867][ T8477] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.679: Corrupt directory, running e2fsck is recommended [ 60.401666][ T8529] smc: adding net device syzkaller1 with user defined pnetid SYZ0 [ 60.441362][ T8527] smc: removing net device syzkaller1 with user defined pnetid SYZ0 [ 60.636415][ T8554] bond2: option lp_interval: invalid value (18446744071562067968) [ 60.637766][ T8554] bond2: option lp_interval: allowed values 1 - 2147483647 [ 60.645254][ T8554] bond2 (unregistering): Released all slaves [ 60.669916][ T6564] loop0: p1 < > p4 [ 60.672175][ T6564] loop0: p4 size 722688 extends beyond EOD, truncated [ 60.687131][ T8559] loop0: p1 < > p4 [ 60.690190][ T8559] loop0: p4 size 722688 extends beyond EOD, truncated [ 60.767273][ T8574] tc_dump_action: action bad kind [ 60.772545][ T8073] udevd[8073]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 60.773531][ T6564] udevd[6564]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 60.811840][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 60.819854][ T6564] udevd[6564]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 60.844041][ T8582] netlink: 'syz.1.725': attribute type 3 has an invalid length. [ 61.024627][ T8591] Soft offlining pfn 0x163bc7 at process virtual address 0x209c7000 [ 61.305293][ T8533] [ 61.305721][ T8533] ===================================================== [ 61.306797][ T8533] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 61.308058][ T8533] syzkaller #0 Not tainted [ 61.308751][ T8533] ----------------------------------------------------- [ 61.309858][ T8533] syz.5.704/8533 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 61.310995][ T8533] ffff800097626150 (&p->sequence){+.-.}-{0:0}, at: __fprop_add_percpu_max+0x130/0x1f4 [ 61.312457][ T8533] [ 61.312457][ T8533] and this task is already holding: [ 61.313659][ T8533] ffff0000f50e0240 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 61.315173][ T8533] which would create a new lock dependency: [ 61.316091][ T8533] (&xa->xa_lock#10){-.-.}-{3:3} -> (&p->sequence){+.-.}-{0:0} [ 61.317282][ T8533] [ 61.317282][ T8533] but this new dependency connects a HARDIRQ-irq-safe lock: [ 61.318666][ T8533] (&xa->xa_lock#10){-.-.}-{3:3} [ 61.318694][ T8533] [ 61.318694][ T8533] ... which became HARDIRQ-irq-safe at: [ 61.320629][ T8533] lock_acquire+0x140/0x2e0 [ 61.321346][ T8533] _raw_spin_lock_irqsave+0x5c/0x7c [ 61.322176][ T8533] __folio_end_writeback+0x10c/0x6f8 [ 61.323105][ T8533] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 61.324177][ T8533] folio_end_writeback+0xd8/0x248 [ 61.324943][ T8533] end_buffer_async_write+0x20c/0x350 [ 61.325756][ T8533] end_bio_bh_io_sync+0xb0/0x184 [ 61.326521][ T8533] bio_endio+0x8d4/0x910 [ 61.327185][ T8533] blk_mq_end_request_batch+0x49c/0x105c [ 61.328076][ T8533] nvme_irq+0x1ec/0x240 [ 61.328748][ T8533] __handle_irq_event_percpu+0x20c/0x8e4 [ 61.329796][ T8533] handle_irq_event+0x9c/0x1d0 [ 61.330563][ T8533] handle_fasteoi_irq+0x328/0x8d8 [ 61.331352][ T8533] generic_handle_domain_irq+0xe0/0x140 [ 61.332170][ T8533] gic_handle_irq+0x6c/0x18c [ 61.332833][ T8533] call_on_irq_stack+0x30/0x48 [ 61.333536][ T8533] do_interrupt_handler+0xd4/0x138 [ 61.334324][ T8533] el1_interrupt+0x3c/0x60 [ 61.334954][ T8533] el1h_64_irq_handler+0x18/0x24 [ 61.335664][ T8533] el1h_64_irq+0x6c/0x70 [ 61.336280][ T8533] seqcount_lockdep_reader_access+0xac/0xc8 [ 61.337168][ T8533] bad_range+0x94/0x26c [ 61.337764][ T8533] get_page_from_freelist+0x2478/0x2624 [ 61.338559][ T8533] __alloc_frozen_pages_noprof+0x17c/0x318 [ 61.339448][ T8533] alloc_pages_mpol+0x1e4/0x460 [ 61.340168][ T8533] folio_alloc_mpol_noprof+0x4c/0x24c [ 61.341017][ T8533] vma_alloc_folio_noprof+0xf4/0x230 [ 61.341912][ T8533] vma_alloc_zeroed_movable_folio+0x70/0x84 [ 61.342836][ T8533] folio_prealloc+0x3c/0x1c0 [ 61.343567][ T8533] do_pte_missing+0x1e5c/0x2c88 [ 61.344283][ T8533] handle_mm_fault+0x1488/0x2678 [ 61.345100][ T8533] do_page_fault+0x410/0x13cc [ 61.345852][ T8533] do_translation_fault+0xc4/0x114 [ 61.346628][ T8533] do_mem_abort+0x70/0x194 [ 61.347336][ T8533] el0_da+0x64/0x248 [ 61.347950][ T8533] el0t_64_sync_handler+0x90/0x12c [ 61.348742][ T8533] el0t_64_sync+0x198/0x19c [ 61.349429][ T8533] [ 61.349429][ T8533] to a HARDIRQ-irq-unsafe lock: [ 61.350466][ T8533] (&p->sequence){+.-.}-{0:0} [ 61.350488][ T8533] [ 61.350488][ T8533] ... which became HARDIRQ-irq-unsafe at: [ 61.352292][ T8533] ... [ 61.352299][ T8533] lock_acquire+0x140/0x2e0 [ 61.353398][ T8533] fprop_new_period+0x3b8/0x718 [ 61.354094][ T8533] writeout_period+0x94/0x11c [ 61.354804][ T8533] call_timer_fn+0x19c/0x814 [ 61.355469][ T8533] __run_timer_base+0x51c/0x76c [ 61.356261][ T8533] run_timer_softirq+0x11c/0x194 [ 61.357000][ T8533] handle_softirqs+0x31c/0xc88 [ 61.357696][ T8533] __do_softirq+0x14/0x20 [ 61.358360][ T8533] ____do_softirq+0x14/0x20 [ 61.359063][ T8533] call_on_irq_stack+0x30/0x48 [ 61.359805][ T8533] do_softirq_own_stack+0x20/0x2c [ 61.360577][ T8533] __irq_exit_rcu+0x1b0/0x478 [ 61.361278][ T8533] irq_exit_rcu+0x14/0x84 [ 61.361965][ T8533] el1_interrupt+0x40/0x60 [ 61.362639][ T8533] el1h_64_irq_handler+0x18/0x24 [ 61.363342][ T8533] el1h_64_irq+0x6c/0x70 [ 61.363997][ T8533] _raw_spin_unlock_irqrestore+0x44/0x98 [ 61.364916][ T8533] hrtimer_start_range_ns+0x954/0xcac [ 61.365685][ T8533] hrtimer_sleeper_start_expires+0x6c/0x80 [ 61.366654][ T8533] futex_do_wait+0x38/0x158 [ 61.367468][ T8533] futex_wait+0x160/0x3e8 [ 61.368201][ T8533] do_futex+0x304/0x35c [ 61.368915][ T8533] __arm64_sys_futex+0x378/0x3f0 [ 61.369737][ T8533] invoke_syscall+0x98/0x254 [ 61.370525][ T8533] el0_svc_common+0xe8/0x23c [ 61.371221][ T8533] do_el0_svc+0x48/0x58 [ 61.371853][ T8533] el0_svc+0x5c/0x26c [ 61.372471][ T8533] el0t_64_sync_handler+0x84/0x12c [ 61.373218][ T8533] el0t_64_sync+0x198/0x19c [ 61.373943][ T8533] [ 61.373943][ T8533] other info that might help us debug this: [ 61.373943][ T8533] [ 61.375574][ T8533] Possible interrupt unsafe locking scenario: [ 61.375574][ T8533] [ 61.376830][ T8533] CPU0 CPU1 [ 61.377661][ T8533] ---- ---- [ 61.378530][ T8533] lock(&p->sequence); [ 61.379123][ T8533] local_irq_disable(); [ 61.380133][ T8533] lock(&xa->xa_lock#10); [ 61.381296][ T8533] lock(&p->sequence); [ 61.382236][ T8533] [ 61.382754][ T8533] lock(&xa->xa_lock#10); [ 61.383499][ T8533] [ 61.383499][ T8533] *** DEADLOCK *** [ 61.383499][ T8533] [ 61.384692][ T8533] 2 locks held by syz.5.704/8533: [ 61.385473][ T8533] #0: ffff0000f50e0638 (&fi->lock){+.+.}-{3:3}, at: fuse_iomap_writeback_submit+0xd4/0x220 [ 61.387068][ T8533] #1: ffff0000f50e0240 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 61.388665][ T8533] [ 61.388665][ T8533] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 61.390126][ T8533] -> (&xa->xa_lock#10){-.-.}-{3:3} { [ 61.390935][ T8533] IN-HARDIRQ-W at: [ 61.391562][ T8533] lock_acquire+0x140/0x2e0 [ 61.392500][ T8533] _raw_spin_lock_irqsave+0x5c/0x7c [ 61.393518][ T8533] __folio_end_writeback+0x10c/0x6f8 [ 61.394524][ T8533] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 61.395715][ T8533] folio_end_writeback+0xd8/0x248 [ 61.396693][ T8533] end_buffer_async_write+0x20c/0x350 [ 61.397770][ T8533] end_bio_bh_io_sync+0xb0/0x184 [ 61.398766][ T8533] bio_endio+0x8d4/0x910 [ 61.399682][ T8533] blk_mq_end_request_batch+0x49c/0x105c [ 61.400690][ T8533] nvme_irq+0x1ec/0x240 [ 61.401599][ T8533] __handle_irq_event_percpu+0x20c/0x8e4 [ 61.402626][ T8533] handle_irq_event+0x9c/0x1d0 [ 61.403501][ T8533] handle_fasteoi_irq+0x328/0x8d8 [ 61.404516][ T8533] generic_handle_domain_irq+0xe0/0x140 [ 61.405537][ T8533] gic_handle_irq+0x6c/0x18c [ 61.406491][ T8533] call_on_irq_stack+0x30/0x48 [ 61.407487][ T8533] do_interrupt_handler+0xd4/0x138 [ 61.408410][ T8533] el1_interrupt+0x3c/0x60 [ 61.409303][ T8533] el1h_64_irq_handler+0x18/0x24 [ 61.410246][ T8533] el1h_64_irq+0x6c/0x70 [ 61.411201][ T8533] seqcount_lockdep_reader_access+0xac/0xc8 [ 61.412325][ T8533] bad_range+0x94/0x26c [ 61.413115][ T8533] get_page_from_freelist+0x2478/0x2624 [ 61.414122][ T8533] __alloc_frozen_pages_noprof+0x17c/0x318 [ 61.415193][ T8533] alloc_pages_mpol+0x1e4/0x460 [ 61.416213][ T8533] folio_alloc_mpol_noprof+0x4c/0x24c [ 61.417247][ T8533] vma_alloc_folio_noprof+0xf4/0x230 [ 61.418379][ T8533] vma_alloc_zeroed_movable_folio+0x70/0x84 [ 61.419501][ T8533] folio_prealloc+0x3c/0x1c0 [ 61.420369][ T8533] do_pte_missing+0x1e5c/0x2c88 [ 61.421332][ T8533] handle_mm_fault+0x1488/0x2678 [ 61.422311][ T8533] do_page_fault+0x410/0x13cc [ 61.423329][ T8533] do_translation_fault+0xc4/0x114 [ 61.424331][ T8533] do_mem_abort+0x70/0x194 [ 61.425199][ T8533] el0_da+0x64/0x248 [ 61.426010][ T8533] el0t_64_sync_handler+0x90/0x12c [ 61.427016][ T8533] el0t_64_sync+0x198/0x19c [ 61.427938][ T8533] IN-SOFTIRQ-W at: [ 61.428540][ T8533] lock_acquire+0x140/0x2e0 [ 61.429487][ T8533] _raw_spin_lock_irqsave+0x5c/0x7c [ 61.430570][ T8533] __folio_end_writeback+0x10c/0x6f8 [ 61.431659][ T8533] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 61.432855][ T8533] folio_end_writeback+0xd8/0x248 [ 61.433805][ T8533] end_buffer_async_write+0x20c/0x350 [ 61.434942][ T8533] end_bio_bh_io_sync+0xb0/0x184 [ 61.436031][ T8533] bio_endio+0x8d4/0x910 [ 61.437013][ T8533] blk_update_request+0x474/0xba8 [ 61.437986][ T8533] blk_mq_end_request+0x54/0x88 [ 61.438957][ T8533] lo_complete_rq+0x124/0x274 [ 61.439885][ T8533] blk_done_softirq+0x11c/0x168 [ 61.440833][ T8533] handle_softirqs+0x31c/0xc88 [ 61.441808][ T8533] run_ksoftirqd+0x70/0xc0 [ 61.442744][ T8533] smpboot_thread_fn+0x4d8/0x9cc [ 61.443674][ T8533] kthread+0x5fc/0x75c [ 61.444517][ T8533] ret_from_fork+0x10/0x20 [ 61.445481][ T8533] INITIAL USE at: [ 61.446068][ T8533] lock_acquire+0x140/0x2e0 [ 61.447039][ T8533] _raw_spin_lock_irq+0x58/0x70 [ 61.448000][ T8533] shmem_add_to_page_cache+0x564/0xa24 [ 61.449140][ T8533] shmem_alloc_and_add_folio+0x758/0x10c4 [ 61.450210][ T8533] shmem_get_folio_gfp+0x4d4/0x159c [ 61.451197][ T8533] shmem_read_folio_gfp+0x8c/0xf0 [ 61.452195][ T8533] drm_gem_get_pages+0x1cc/0x7c0 [ 61.453237][ T8533] drm_gem_shmem_get_pages_locked+0x1d4/0x364 [ 61.454460][ T8533] drm_gem_shmem_pin_locked+0x1f8/0x410 [ 61.455608][ T8533] drm_gem_shmem_vmap_locked+0x3cc/0x658 [ 61.456697][ T8533] drm_gem_shmem_object_vmap+0x28/0x38 [ 61.457770][ T8533] drm_gem_vmap+0x104/0x1d8 [ 61.458678][ T8533] drm_client_buffer_vmap+0x68/0xb0 [ 61.459674][ T8533] drm_fbdev_shmem_driver_fbdev_probe+0x1f4/0x700 [ 61.460881][ T8533] __drm_fb_helper_initial_config_and_unlock+0x108c/0x1728 [ 61.462251][ T8533] drm_fb_helper_initial_config+0x3c/0x58 [ 61.463312][ T8533] drm_fbdev_client_hotplug+0x154/0x22c [ 61.464532][ T8533] drm_client_register+0x13c/0x1d4 [ 61.465540][ T8533] drm_fbdev_client_setup+0x194/0x3d0 [ 61.466600][ T8533] drm_client_setup+0x114/0x228 [ 61.467598][ T8533] vkms_create+0x370/0x420 [ 61.468635][ T8533] vkms_init+0x64/0x9c [ 61.469474][ T8533] do_one_initcall+0x248/0x9b4 [ 61.470491][ T8533] do_initcall_level+0x128/0x1c4 [ 61.471449][ T8533] do_initcalls+0x70/0xd0 [ 61.472336][ T8533] do_basic_setup+0x78/0x8c [ 61.473339][ T8533] kernel_init_freeable+0x268/0x39c [ 61.474369][ T8533] kernel_init+0x24/0x1dc [ 61.475268][ T8533] ret_from_fork+0x10/0x20 [ 61.476173][ T8533] } [ 61.476516][ T8533] ... key at: [] xa_init_flags.__key+0x0/0x20 [ 61.477672][ T8533] [ 61.477672][ T8533] the dependencies between the lock to be acquired [ 61.477682][ T8533] and HARDIRQ-irq-unsafe lock: [ 61.479727][ T8533] -> (&p->sequence){+.-.}-{0:0} { [ 61.480468][ T8533] HARDIRQ-ON-W at: [ 61.481061][ T8533] lock_acquire+0x140/0x2e0 [ 61.482017][ T8533] fprop_new_period+0x3b8/0x718 [ 61.483023][ T8533] writeout_period+0x94/0x11c [ 61.483950][ T8533] call_timer_fn+0x19c/0x814 [ 61.484872][ T8533] __run_timer_base+0x51c/0x76c [ 61.485910][ T8533] run_timer_softirq+0x11c/0x194 [ 61.486849][ T8533] handle_softirqs+0x31c/0xc88 [ 61.487704][ T8533] __do_softirq+0x14/0x20 [ 61.488560][ T8533] ____do_softirq+0x14/0x20 [ 61.489407][ T8533] call_on_irq_stack+0x30/0x48 [ 61.490400][ T8533] do_softirq_own_stack+0x20/0x2c [ 61.491378][ T8533] __irq_exit_rcu+0x1b0/0x478 [ 61.492325][ T8533] irq_exit_rcu+0x14/0x84 [ 61.493179][ T8533] el1_interrupt+0x40/0x60 [ 61.494081][ T8533] el1h_64_irq_handler+0x18/0x24 [ 61.495188][ T8533] el1h_64_irq+0x6c/0x70 [ 61.496056][ T8533] _raw_spin_unlock_irqrestore+0x44/0x98 [ 61.497184][ T8533] hrtimer_start_range_ns+0x954/0xcac [ 61.498217][ T8533] hrtimer_sleeper_start_expires+0x6c/0x80 [ 61.499406][ T8533] futex_do_wait+0x38/0x158 [ 61.500211][ T8533] futex_wait+0x160/0x3e8 [ 61.501122][ T8533] do_futex+0x304/0x35c [ 61.501985][ T8533] __arm64_sys_futex+0x378/0x3f0 [ 61.503000][ T8533] invoke_syscall+0x98/0x254 [ 61.504001][ T8533] el0_svc_common+0xe8/0x23c [ 61.504885][ T8533] do_el0_svc+0x48/0x58 [ 61.505720][ T8533] el0_svc+0x5c/0x26c [ 61.506570][ T8533] el0t_64_sync_handler+0x84/0x12c [ 61.507592][ T8533] el0t_64_sync+0x198/0x19c [ 61.508454][ T8533] IN-SOFTIRQ-W at: [ 61.509060][ T8533] lock_acquire+0x140/0x2e0 [ 61.509939][ T8533] fprop_new_period+0x3b8/0x718 [ 61.510855][ T8533] writeout_period+0x94/0x11c [ 61.511850][ T8533] call_timer_fn+0x19c/0x814 [ 61.512895][ T8533] __run_timer_base+0x51c/0x76c [ 61.513857][ T8533] run_timer_softirq+0x11c/0x194 [ 61.514833][ T8533] handle_softirqs+0x31c/0xc88 [ 61.515732][ T8533] __do_softirq+0x14/0x20 [ 61.516564][ T8533] ____do_softirq+0x14/0x20 [ 61.517419][ T8533] call_on_irq_stack+0x30/0x48 [ 61.518292][ T8533] do_softirq_own_stack+0x20/0x2c [ 61.519293][ T8533] __irq_exit_rcu+0x1b0/0x478 [ 61.520302][ T8533] irq_exit_rcu+0x14/0x84 [ 61.521264][ T8533] el1_interrupt+0x40/0x60 [ 61.522195][ T8533] el1h_64_irq_handler+0x18/0x24 [ 61.523162][ T8533] el1h_64_irq+0x6c/0x70 [ 61.524046][ T8533] _raw_spin_unlock_irqrestore+0x44/0x98 [ 61.525149][ T8533] hrtimer_start_range_ns+0x954/0xcac [ 61.526141][ T8533] hrtimer_sleeper_start_expires+0x6c/0x80 [ 61.527259][ T8533] futex_do_wait+0x38/0x158 [ 61.528169][ T8533] futex_wait+0x160/0x3e8 [ 61.529037][ T8533] do_futex+0x304/0x35c [ 61.529888][ T8533] __arm64_sys_futex+0x378/0x3f0 [ 61.530943][ T8533] invoke_syscall+0x98/0x254 [ 61.531832][ T8533] el0_svc_common+0xe8/0x23c [ 61.532753][ T8533] do_el0_svc+0x48/0x58 [ 61.533614][ T8533] el0_svc+0x5c/0x26c [ 61.534467][ T8533] el0t_64_sync_handler+0x84/0x12c [ 61.535449][ T8533] el0t_64_sync+0x198/0x19c [ 61.536374][ T8533] INITIAL USE at: [ 61.536961][ T8533] lock_acquire+0x140/0x2e0 [ 61.537899][ T8533] fprop_new_period+0x3b8/0x718 [ 61.538859][ T8533] writeout_period+0x94/0x11c [ 61.539840][ T8533] call_timer_fn+0x19c/0x814 [ 61.540763][ T8533] __run_timer_base+0x51c/0x76c [ 61.541718][ T8533] run_timer_softirq+0x11c/0x194 [ 61.542725][ T8533] handle_softirqs+0x31c/0xc88 [ 61.543695][ T8533] __do_softirq+0x14/0x20 [ 61.544535][ T8533] ____do_softirq+0x14/0x20 [ 61.545440][ T8533] call_on_irq_stack+0x30/0x48 [ 61.546443][ T8533] do_softirq_own_stack+0x20/0x2c [ 61.547464][ T8533] __irq_exit_rcu+0x1b0/0x478 [ 61.548401][ T8533] irq_exit_rcu+0x14/0x84 [ 61.549225][ T8533] el1_interrupt+0x40/0x60 [ 61.550069][ T8533] el1h_64_irq_handler+0x18/0x24 [ 61.551105][ T8533] el1h_64_irq+0x6c/0x70 [ 61.551896][ T8533] _raw_spin_unlock_irqrestore+0x44/0x98 [ 61.552917][ T8533] hrtimer_start_range_ns+0x954/0xcac [ 61.553918][ T8533] hrtimer_sleeper_start_expires+0x6c/0x80 [ 61.554969][ T8533] futex_do_wait+0x38/0x158 [ 61.555979][ T8533] futex_wait+0x160/0x3e8 [ 61.557031][ T8533] do_futex+0x304/0x35c [ 61.557889][ T8533] __arm64_sys_futex+0x378/0x3f0 [ 61.558883][ T8533] invoke_syscall+0x98/0x254 [ 61.559881][ T8533] el0_svc_common+0xe8/0x23c [ 61.560908][ T8533] do_el0_svc+0x48/0x58 [ 61.561807][ T8533] el0_svc+0x5c/0x26c [ 61.562604][ T8533] el0t_64_sync_handler+0x84/0x12c [ 61.563601][ T8533] el0t_64_sync+0x198/0x19c [ 61.564519][ T8533] INITIAL READ USE at: [ 61.565190][ T8533] lock_acquire+0x140/0x2e0 [ 61.566264][ T8533] fprop_fraction_percpu+0xac/0x270 [ 61.567310][ T8533] __wb_calc_thresh+0xfc/0x3b0 [ 61.568360][ T8533] domain_over_bg_thresh+0xb8/0x1f0 [ 61.569508][ T8533] wb_over_bg_thresh+0xf8/0x17c [ 61.570476][ T8533] wb_workfn+0xa30/0xdc0 [ 61.571507][ T8533] process_one_work+0x7c0/0x1558 [ 61.572547][ T8533] worker_thread+0x958/0xed8 [ 61.573506][ T8533] kthread+0x5fc/0x75c [ 61.574425][ T8533] ret_from_fork+0x10/0x20 [ 61.575350][ T8533] } [ 61.575716][ T8533] ... key at: [] fprop_global_init.__key.1+0x0/0x20 [ 61.577048][ T8533] ... acquired at: [ 61.577648][ T8533] fprop_fraction_percpu+0xf0/0x270 [ 61.578499][ T8533] __fprop_add_percpu_max+0x130/0x1f4 [ 61.579387][ T8533] __wb_writeout_add+0xbc/0x27c [ 61.580164][ T8533] __folio_end_writeback+0x380/0x6f8 [ 61.580978][ T8533] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 61.581966][ T8533] folio_end_writeback+0xd8/0x248 [ 61.582784][ T8533] iomap_finish_folio_write+0x1c0/0x2a4 [ 61.583637][ T8533] fuse_flush_writepages+0x578/0x788 [ 61.584538][ T8533] fuse_iomap_writeback_submit+0x188/0x220 [ 61.585420][ T8533] iomap_writepages+0x1dc/0x25c [ 61.586153][ T8533] fuse_writepages+0x208/0x2bc [ 61.586912][ T8533] do_writepages+0x270/0x468 [ 61.587623][ T8533] __writeback_single_inode+0x144/0x16b8 [ 61.588549][ T8533] writeback_single_inode+0x3e4/0xc2c [ 61.589389][ T8533] write_inode_now+0x13c/0x1a4 [ 61.590171][ T8533] fuse_release+0xe0/0x194 [ 61.590872][ T8533] __fput+0x340/0x75c [ 61.591524][ T8533] ____fput+0x20/0x58 [ 61.592155][ T8533] task_work_run+0x1dc/0x260 [ 61.592841][ T8533] get_signal+0x112c/0x12f8 [ 61.593519][ T8533] arch_do_signal_or_restart+0x268/0x46d4 [ 61.594357][ T8533] exit_to_user_mode_loop+0x88/0x18c [ 61.595240][ T8533] el0_svc+0x17c/0x26c [ 61.595934][ T8533] el0t_64_sync_handler+0x84/0x12c [ 61.596840][ T8533] el0t_64_sync+0x198/0x19c [ 61.597556][ T8533] [ 61.597922][ T8533] [ 61.597922][ T8533] stack backtrace: [ 61.598829][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.5.704 Not tainted syzkaller #0 PREEMPT [ 61.600107][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 61.601616][ T8533] Call trace: [ 61.602099][ T8533] show_stack+0x2c/0x3c (C) [ 61.602748][ T8533] __dump_stack+0x30/0x40 [ 61.603437][ T8533] dump_stack_lvl+0xd8/0x12c [ 61.604107][ T8533] dump_stack+0x1c/0x28 [ 61.604788][ T8533] __lock_acquire+0x3058/0x30a4 [ 61.605589][ T8533] lock_acquire+0x140/0x2e0 [ 61.606256][ T8533] fprop_fraction_percpu+0xf0/0x270 [ 61.607090][ T8533] __fprop_add_percpu_max+0x130/0x1f4 [ 61.607908][ T8533] __wb_writeout_add+0xbc/0x27c [ 61.608605][ T8533] __folio_end_writeback+0x380/0x6f8 [ 61.609308][ T8533] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 61.610201][ T8533] folio_end_writeback+0xd8/0x248 [ 61.610970][ T8533] iomap_finish_folio_write+0x1c0/0x2a4 [ 61.611866][ T8533] fuse_flush_writepages+0x578/0x788 [ 61.612611][ T8533] fuse_iomap_writeback_submit+0x188/0x220 [ 61.613433][ T8533] iomap_writepages+0x1dc/0x25c [ 61.624228][ T8533] fuse_writepages+0x208/0x2bc [ 61.624928][ T8533] do_writepages+0x270/0x468 [ 61.625578][ T8533] __writeback_single_inode+0x144/0x16b8 [ 61.626448][ T8533] writeback_single_inode+0x3e4/0xc2c [ 61.627286][ T8533] write_inode_now+0x13c/0x1a4 [ 61.628092][ T8533] fuse_release+0xe0/0x194 [ 61.628713][ T8533] __fput+0x340/0x75c [ 61.629342][ T8533] ____fput+0x20/0x58 [ 61.629936][ T8533] task_work_run+0x1dc/0x260 [ 61.630643][ T8533] get_signal+0x112c/0x12f8 [ 61.631339][ T8533] arch_do_signal_or_restart+0x268/0x46d4 [ 61.632263][ T8533] exit_to_user_mode_loop+0x88/0x18c [ 61.633044][ T8533] el0_svc+0x17c/0x26c [ 61.633642][ T8533] el0t_64_sync_handler+0x84/0x12c [ 61.634382][ T8533] el0t_64_sync+0x198/0x19c [ 64.504473][ T2468] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.504520][ T2468] ieee802154 phy1 wpan1: encryption failed: -22