last executing test programs: 10.13004953s ago: executing program 4 (id=1216): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fsetxattr$security_ima(r1, &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x2, "358745a06e3c103a48d34b909ea30d4bde52e886"}, 0x15, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0xc0010000, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) 9.023029481s ago: executing program 4 (id=1218): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fdatasync(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011000100"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0xc0109414, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) socket$kcm(0x2, 0x3, 0x84) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x882020, &(0x7f0000001400)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@blksize}], [{@audit}, {@measure}, {@obj_role={'obj_role', 0x3d, ',*'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '.&'}}]}}, 0x1, 0x0, &(0x7f0000000240)="d163c65b41a5d735c0a531e0dbc3e1e8b436fb84d4eb5110c47d39cf71cb69ff696a4af651e25e7db67623f56e00438f80c9c56652ba5dbe5ecd4df3511d49be1da6fb52dfbf11bfcc17357fc307e57b7e22b65613295b14e28dd162fa12f8d4fa23912f10d0e234007f94dc1e6890a6202310d588275538c383cc14bdef9629be9e32aafe719e47e67b8cc557d8edbee8cbe31f64b660e62086261002e78702514ad4fc2f778043da0e18") 7.829446778s ago: executing program 2 (id=1227): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @val, {@ipv4}}, 0x0) 7.526462134s ago: executing program 2 (id=1229): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = dup(0xffffffffffffffff) sendto$inet(r4, &(0x7f0000000240)="03c0", 0x2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="04", 0xff9a) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) 7.150406014s ago: executing program 2 (id=1232): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x56) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)='H', 0x1}], 0x1}, 0x881) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='u', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="78000000000000000000000007000000070fb27f000001e0000002ac1414bb8927cce0000002e0000001e0000001ffffffff00000000ac141423e00000017f000001ac14144300440cc401ac1e010100000fff94040100000bba416311049117549344142cb1e00000010000c6707f000001fffffc01000014000000000000000000000001000000f70c0000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff0000000014000000000000000000000001000000090000000000000011000000000000000000000001000000b400000000000000110000000000000000000000010000007a000000000000001c"], 0x118}, 0x0) recvmsg(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) 6.898307515s ago: executing program 2 (id=1234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 6.897414865s ago: executing program 4 (id=1235): socket$inet6(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x2a, &(0x7f00000015c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa628721ee450f08060001080006040002"], 0x0) 6.718612859s ago: executing program 2 (id=1238): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.11041081s ago: executing program 2 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.014191931s ago: executing program 4 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000900), 0x6, 0x20040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7, 0xae, 0x840, r3, 0xc0000000, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000300), 0x5, 0xa0000) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000340)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x5, &(0x7f0000001340)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query, @alu={0x7, 0x1, 0xa, 0x7, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e) r11 = syz_usb_connect$cdc_ecm(0x2, 0x103, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002020000402505a1a44000010203010902f10001a37f90000904000102020600060624060200c905240009000d240f019107000009000500031524120300a317a88b045e4f01a607c0ffcb7e392a0c241b0800040040020300060e24070e070007ff80ff030001016d241308ac407bab34215ba9552ea9c752813911233fd0a71f5fd553bde99bb023ca443f995515806a63f0c3e1e6c276afb51e95ba4cd992f4689a67316703b336315bdf79f78d5d658d2d9e14a199b347724f0ef4d8a825a5dd0735427fce86ddb098f20d916413a0fc237e6108241c070098070008241cfdff040200090581032000ae50fa09058202ff03040931090503020002130204"], &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0xba, 0x9, 0x80, 0x8, 0x3}, 0x3b, &(0x7f0000000500)={0x5, 0xf, 0x3b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "22d0cd7e4a2fb1bb6b2bd2afdf35bf88"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x1, 0x7, 0x9, 0x6}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "1725903bf613950c22dd207f444694e6"}]}, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x422}}, {0xf2, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000680)=@string={0x4, 0x3, '\rI'}}]}) syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000780)={0x14, &(0x7f0000000700)={0x0, 0x22, 0x18, {0x18, 0x0, "40f34bf5613bf6e419ffaefa1a8218031893d954d831"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000d40)={0x2c, 0x0, &(0x7f0000000b40)={0x0, 0x3, 0x41, @string={0x41, 0x3, "068acc33dbd20918595eea7d573859fbf3a791f82ea1308bdf1ffd6493206e1321d00a11b46c1f3a17553aa17e1ebcc88fd90f6723f9b56cbfad0522962d31"}}, &(0x7f0000000c00)={0x0, 0xf, 0x85, {0x5, 0xf, 0x85, 0x4, [@generic={0x66, 0x10, 0xa, "380f1936e2409bb7da5c198cea71e4618d33fb8a7eb48bb489fd0ba4baa28643d9eb05b06b68c9c2996c9242a65ad1675496306bc5defd5d08d26795a3b44a7e572c8f78660f0980b2707d0f995b44de94d8b607e2f0e96baf7ca1c3116e212adceb14"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "5b813f01ee2de7524e73799a334af1af"}, @ptm_cap={0x3}]}}, &(0x7f0000000cc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x6, 0x40, "76c5381d", 'V#r!'}}, &(0x7f0000000d00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x5, 0xfc, 0xff, 0xec6, 0x2}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d80)={0x20, 0x3, 0x33, "dc024fa35e0ca717cbcde1413ef32ffe46e6234894257a284a28d6ee840d048893d929143a5bf08c6148b276427558aadffb18"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x2, 0x80, [0xf00f]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000f40)={0x40, 0xb, 0x2, '\fe'}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000001000)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000001040)={0x40, 0x19, 0x2, "f0b1"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x3}}) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r12, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(r12, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a400028004000380100004800c0001000000000000000000580004800d00010000000000020000000c00010000000000000000000c00010000000800000000000c00010000000000000000000c00010000000000200000000c00010000000000000000000c0001000000000000000000340003"], 0xd4}}, 0x0) 3.79466577s ago: executing program 3 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.760831532s ago: executing program 1 (id=1251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00228000000000000000fc"], 0x0}, 0x0) 3.739430794s ago: executing program 3 (id=1252): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x0) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 2.610347586s ago: executing program 3 (id=1253): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.56380892s ago: executing program 0 (id=1254): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 2.530635273s ago: executing program 1 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 2.478535187s ago: executing program 0 (id=1256): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x29cc, 0xffffffffffffffff, 0x351, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8000002}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f00000000c0)=0x6, 0x4) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x7, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffdfe}, 0x48) 2.460466748s ago: executing program 1 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000200)='console\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.283117405s ago: executing program 1 (id=1258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) dup3(r2, r1, 0x0) 1.170503305s ago: executing program 1 (id=1259): bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001800)=@name, 0x10, 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r6, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf25170000003400018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f7465616d0000001400020070696d726567310000000000000000002000018008000100", @ANYRES32=r9, @ANYBLOB="14000200626f6e643000000000000000000000003c000180140002006361696630000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000300000000001400020076657468305f766972745f7769666900440001801400020070696d726567310000000000000000001400020064766d7270300000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0500000000000000", @ANYRES32=r12, @ANYBLOB="08000300000000001400020073797a6b616c6c657230000000000000080003000300000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0c00018008000300020000007c0001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e3100000000000000000000000800030000000000140002007767320000000000", @ANYRES32=r9, @ANYBLOB="08000300070000005c0001800800030000000000140002006261746164763000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020070696d7265670000000000000000000008000300020000000800030004000000"], 0x22c}, 0x1, 0x0, 0x0, 0x4008840}, 0x44804) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) syz_usb_connect(0x7, 0x635, &(0x7f0000000640)=ANY=[@ANYBLOB="12010102e0ebe810210492043c400102030109022306030000000009045409063780d4090a24060000acc6449e43052400990d0d240f01900000000800f7000604240204062407f9040007240a860600d508241c0800000400cb2413fe963061af2e5421674a4dbdcb000e24428d9eb88d4314be8bbf72c95f774ef280f968aef1749975a4454b04e40df0a26330a6ef28e0f0a42c4c21d0c637263a10b833a5455cbeff6bbf0a3ac23fc654d20ca7d2da186be20a1fd433be132289176a2604817293c8c8345e6a9c9500c75da860ad3f41fb2b78a8f4df9d4c1778bf27103aaaddb6f73641c382e1b65836172931d919c41b23035d7dab0d5ebe75469711c5a050205baff1a0ea8b37231ae21bd47ec76d73b258d71511a0e50a82a3eb1cb604c3cf4d09050c0c00020c07061f2174567b7a597c7f670b819a92fd66819fa84300d1ce6b6137692c3d0374450fe7a98f3a69de5b33ea6d6938943ec6a5448ca41339fd19722949df7fd7d786d1e9d660eeca23dc80de88d25b79887d21163f78a5a53d6c424ddb787103321698810b1909050404000404921f072501802900800725010107ff07090502001000800a010905800210000290010725010209fd9f0905091310000807000725018107feff09050901000004080307250180820002090408ec0a1b3ab80710240202b0010100002cb633651b7c4309240202020000008109050710100001054009050a0000020623040905021000040c0400d70363a223d7e4ffbf4f3d7495fc0c3b46f54a12dd0cfdaf65e72d2348e428df1a27c832c73aef7b663e15da43e534feb594ac353310dc33cf2b0a75138469f8969906d9a8d8806e7aad52daf0d8063f739dce6f7e30ba1ae34dce7777c1e7a735319deb40a8ab2540c1bd7a435c9cd2017d79e20d82d8028e4ff395354143447df2e09283c1d0cf435300bb5adc05c1794a7b48e80249c06ab5f71464dc1c6104519c56cc4d0419156eea04d56f1cddd2b2b5043b7fcceb6e9ed1cf973ee474f9d54a0cf01063b6f0a9d0cc7e7c4e81c4acf295cbf4b00725018006d80909050110000409037f0725010200000009050d10100002894d07250101030f00090501004000059304e70b3bb0afa5f9252428c076900010b476fd8cf307ff566ce9215209bdfec8a0caaa7059ee2fbdb1a6e16ba0db292bb7ce37799baed5fee94a4a911ad99d3f5fd70bf59bd66910c6dce5cf530011986008ede89bdf316b88a15f9b4eafd2d2f11b98ee5a7baf338e6ba46d4844e7b609442c2a87809b56aa169c8df1cab17d0d23b69abeaee1a54a327d52212a39caf3bc218066bc7ae851242f6d5268f8111a3f03082fd1be80befa98b46d7388dd20791ed06a48c6bc10cf84a02b85e81bbdc6968dfc31b5690e878b86d9573569b346b9ee3427506d04cf2b975367f0949e9993d2edef15f1090509044802d2069809050e0440000401560203a3ae9973a9bb4548bc3d2d7c532403c7a0c8ea6dd34f1f0136b770f214db477468c1d7ae97ac7c0e37750a6dab15def9fe962115586edd189d30967ee3b164e20b5934e743d8197bf6b7fafe86978a2f83396e91fc3bf89cc3de0dbe4ba3303d5bd420a605bd8347bc60c12ec946162e69d37226d5caffb909728fa877e165b3f5566e704ff3f63f062f747530f981d7ea80f527acdd41fd132175c08c54eded98066fa66775f3d0fab7f60a9eec60a26aec7250d271e1087a39cdf683f17f91ae5fd215e4b67588ba750760bd1c6bf35999087468530a2cf4fe01c40df7c47e566379d18918d80b0c822050adb55de65c6377eacde8b85500bf68372caa7729090509035002080000af3189ed85cdbc3bff6fb0b2d9861a8d79ed74bbc7af01ac3db4960ff63432d19fc2ec3ac7d301f0eff609fc8f8c89aaf552c012b5a7c97e1a32a907e349f963c36cdff9abe08c81eab4826488b6de235a475da648483a971027b32f3832f221bbbf4f2c8a053ae1d32746bdd692eabd4f7a3ca7646e70f0e3565fa701537dcbf274f9424ebcf08f7913607ff9cdbb9035cbee5f3e16a7be9f6dc0a4d82a18850dc57a00657134af3d55b53b0693b109050a0d4000bb440e0904f40902128be1010905090440008c0903072501008107000905000308002780022b0e27129ccf3d50a123b9961d09c4abb22c1f521d1d533d96803fc349018c530df98b21514f2f1dccad9807250101020700c3feb794aaf6c4c54cb53e4ad14d2adf4d876fc5a2a69525030c43a7036598f66bb4dd36fe7be64a15115e6b79213977e86e88599c4ac37868001749aa86b4f4269ac9e9c38ab7e9db3d9a6915ee7c5d91d1b1680608961fc0f81f6ff83016edc720cf5938584aa3a24d09cf09b07bf08acc14f19222"], 0x0) socket$netlink(0x10, 0x3, 0x15) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.170238745s ago: executing program 3 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 1.131717618s ago: executing program 0 (id=1261): prlimit64(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 960.831972ms ago: executing program 4 (id=1262): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c0001000800ff000000000007000000", @ANYRES32=r2, @ANYBLOB="800094000a000200aaaaaaaaaa1c"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='bridge0\x00') 898.549717ms ago: executing program 0 (id=1263): syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 881.732468ms ago: executing program 0 (id=1264): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xba, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000010002200000003009500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f307003d8a0f4bd00"}}) 832.551572ms ago: executing program 0 (id=1265): r0 = io_uring_setup(0x4822, &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000e218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f00000002c0)=""/203, 0xcb) close_range(r0, 0xffffffffffffffff, 0x0) 742.66373ms ago: executing program 3 (id=1266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000120000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 516.755748ms ago: executing program 4 (id=1267): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0xff, 0x5529, &(0x7f000000af80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fadvise64(r0, 0x0, 0x0, 0x3) 226.432712ms ago: executing program 3 (id=1268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "f92242a8"}, @global=@item_012={0x1, 0x1, 0x0, 'O'}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): 8 /dev/loop3 scanned by syz.3.683 (8007) [ 237.258851][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 237.262178][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 237.284325][ T8007] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 237.286688][ T8007] BTRFS info (device loop3): using free space tree [ 237.292777][ T8007] BTRFS info (device loop3): has skinny extents [ 237.678690][ T8007] BTRFS info (device loop3): enabling ssd optimizations [ 237.766864][ T8037] BTRFS error (device loop3): unrecognized mount option 'fd=0xffffffffffffffff' [ 238.968424][ T8047] loop3: detected capacity change from 0 to 512 [ 239.176413][ T8047] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.285640][ T8039] loop1: detected capacity change from 0 to 262144 [ 239.356983][ T8039] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.686 (8039) [ 239.873358][ T8039] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.875975][ T8039] BTRFS info (device loop1): enabling ssd optimizations [ 239.877830][ T8039] BTRFS info (device loop1): enabling auto defrag [ 239.879640][ T8039] BTRFS info (device loop1): using free space tree [ 239.881374][ T8039] BTRFS info (device loop1): has skinny extents [ 239.883095][ T8039] BTRFS info (device loop1): flagging fs with big metadata feature [ 240.054465][ T136] BTRFS warning (device loop1): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 240.066692][ T8039] repair_io_failure: 2 callbacks suppressed [ 240.066713][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040) [ 240.074528][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048) [ 240.078326][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056) [ 240.081759][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064) [ 240.086312][ T148] BTRFS warning (device loop1): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 240.093050][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 30670848 (dev /dev/loop1 sector 76288) [ 240.096644][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 30674944 (dev /dev/loop1 sector 76296) [ 240.100093][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 30679040 (dev /dev/loop1 sector 76304) [ 240.103315][ T8039] BTRFS info (device loop1): read error corrected: ino 0 off 30683136 (dev /dev/loop1 sector 76312) [ 240.865473][ T8039] BTRFS error (device loop1): open_ctree failed [ 240.924450][ T8081] loop4: detected capacity change from 0 to 1024 [ 240.969025][ T8081] hfsplus: unable to parse mount options [ 241.616114][ T8083] loop2: detected capacity change from 0 to 32768 [ 241.671955][ T8083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.693 (8083) [ 241.744925][ T8083] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 241.747424][ T8083] BTRFS info (device loop2): using free space tree [ 241.749826][ T8083] BTRFS info (device loop2): has skinny extents [ 241.830975][ T8088] loop3: detected capacity change from 0 to 32768 [ 241.885301][ T8088] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.696 (8088) [ 241.984026][ T8101] loop4: detected capacity change from 0 to 32768 [ 241.998763][ T8100] loop1: detected capacity change from 0 to 32768 [ 242.000795][ T8083] BTRFS info (device loop2): enabling ssd optimizations [ 242.051380][ T8101] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.699 (8101) [ 242.327792][ T8124] BTRFS error (device loop2): unrecognized mount option 'fd=0xffffffffffffffff' [ 242.412212][ T8100] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.698 (8100) [ 243.044076][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 243.052291][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 243.895455][ T8122] loop0: detected capacity change from 0 to 32768 [ 243.961103][ T8122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.700 (8122) [ 244.071685][ T8135] loop2: detected capacity change from 0 to 4096 [ 244.086239][ T8122] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 244.094960][ T8122] BTRFS info (device loop0): using free space tree [ 244.096910][ T8122] BTRFS info (device loop0): has skinny extents [ 244.114530][ T8135] __ntfs_error: 21 callbacks suppressed [ 244.114547][ T8135] ntfs: (device loop2): parse_ntfs_boot_sector(): MFT LCN (4096, 0x1000) is beyond end of volume. Weird. [ 244.119648][ T8135] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 245.651279][ T8122] BTRFS error (device loop0): open_ctree failed [ 245.886719][ T8168] loop1: detected capacity change from 0 to 32768 [ 245.946601][ T8168] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.704 (8168) [ 246.006176][ T8168] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 246.014991][ T8168] BTRFS info (device loop1): using free space tree [ 246.018452][ T8168] BTRFS info (device loop1): has skinny extents [ 246.126571][ T8187] loop4: detected capacity change from 0 to 1024 [ 246.727579][ T8168] BTRFS info (device loop1): enabling ssd optimizations [ 247.489443][ T8180] loop0: detected capacity change from 0 to 262144 [ 247.509677][ T8187] hfsplus: unable to parse mount options [ 247.785837][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 247.802690][ T8180] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.705 (8180) [ 247.824956][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 247.865336][ T8180] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 247.868098][ T8180] BTRFS info (device loop0): enabling ssd optimizations [ 247.869926][ T8180] BTRFS info (device loop0): enabling auto defrag [ 247.871615][ T8180] BTRFS info (device loop0): using free space tree [ 247.873304][ T8180] BTRFS info (device loop0): has skinny extents [ 247.875010][ T8180] BTRFS info (device loop0): flagging fs with big metadata feature [ 247.929941][ T8216] FAULT_INJECTION: forcing a failure. [ 247.929941][ T8216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.933615][ T8216] CPU: 0 PID: 8216 Comm: syz.1.711 Not tainted 5.15.164-syzkaller #0 [ 247.935707][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.938354][ T8216] Call trace: [ 247.939228][ T8216] dump_backtrace+0x0/0x530 [ 247.940546][ T8216] show_stack+0x2c/0x3c [ 247.941769][ T8216] dump_stack_lvl+0x108/0x170 [ 247.943129][ T8216] dump_stack+0x1c/0x58 [ 247.944331][ T8216] should_fail+0x3b8/0x514 [ 247.945525][ T8216] should_fail_usercopy+0x20/0x30 [ 247.946930][ T8216] simple_read_from_buffer+0xd8/0x26c [ 247.948411][ T8216] proc_fail_nth_read+0x1a0/0x248 [ 247.949772][ T8216] vfs_read+0x278/0xb18 [ 247.950936][ T8216] ksys_read+0x15c/0x26c [ 247.952131][ T8216] __arm64_sys_read+0x7c/0x90 [ 247.953466][ T8216] invoke_syscall+0x98/0x2b8 [ 247.954819][ T8216] el0_svc_common+0x138/0x258 [ 247.956205][ T8216] do_el0_svc+0x58/0x14c [ 247.957370][ T8216] el0_svc+0x7c/0x1f0 [ 247.958558][ T8216] el0t_64_sync_handler+0x84/0xe4 [ 247.959925][ T8216] el0t_64_sync+0x1a0/0x1a4 [ 248.020089][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 248.061356][ T4778] BTRFS warning (device loop0): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 248.062428][ T8212] loop4: detected capacity change from 0 to 32768 [ 248.066081][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 22036480 (dev /dev/loop0 sector 43040) [ 248.077809][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 22040576 (dev /dev/loop0 sector 43048) [ 248.081884][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 22044672 (dev /dev/loop0 sector 43056) [ 248.087321][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 22048768 (dev /dev/loop0 sector 43064) [ 248.097441][ T564] BTRFS warning (device loop0): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 248.102024][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 30670848 (dev /dev/loop0 sector 76288) [ 248.105287][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 30674944 (dev /dev/loop0 sector 76296) [ 248.109305][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 30679040 (dev /dev/loop0 sector 76304) [ 248.114097][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 30683136 (dev /dev/loop0 sector 76312) [ 248.117457][ T8212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.713 (8212) [ 248.160337][ T4778] BTRFS warning (device loop0): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 248.168630][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 30457856 (dev /dev/loop0 sector 75872) [ 248.172217][ T8180] BTRFS info (device loop0): read error corrected: ino 0 off 30461952 (dev /dev/loop0 sector 75880) [ 248.225972][ T8212] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 248.228946][ T8212] BTRFS info (device loop4): using free space tree [ 248.230988][ T8212] BTRFS info (device loop4): has skinny extents [ 248.348268][ T8180] BTRFS info (device loop0): balance: start -d -m -s [ 248.351535][ T8180] BTRFS info (device loop0): relocating block group 30408704 flags metadata|dup [ 248.377834][ T8180] BTRFS info (device loop0): found 3 extents, stage: move data extents [ 248.400554][ T8180] BTRFS info (device loop0): relocating block group 22020096 flags system|dup [ 248.422859][ T8180] BTRFS info (device loop0): found 1 extents, stage: move data extents [ 248.447005][ T8180] BTRFS info (device loop0): relocating block group 13631488 flags data [ 248.470132][ T8180] BTRFS info (device loop0): balance: ended with status: 0 [ 248.519713][ T8212] BTRFS info (device loop4): enabling ssd optimizations [ 248.595781][ T8257] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 248.996335][ T8233] loop2: detected capacity change from 0 to 32768 [ 249.094089][ T8233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.716 (8233) [ 249.124101][ T8233] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 249.126643][ T8233] BTRFS info (device loop2): using free space tree [ 249.128797][ T8233] BTRFS info (device loop2): has skinny extents [ 249.201598][ T8276] device batadv_slave_1 entered promiscuous mode [ 249.336743][ T8233] BTRFS info (device loop2): enabling ssd optimizations [ 249.592033][ T8275] device batadv_slave_1 left promiscuous mode [ 249.958327][ T8298] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 249.978978][ T8300] loop3: detected capacity change from 0 to 1024 [ 250.020306][ T8300] hfsplus: unable to parse mount options [ 251.038616][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 251.215395][ T8316] loop3: detected capacity change from 0 to 16 [ 251.285331][ T8316] erofs: (device loop3): mounted with root inode @ nid 36. [ 251.493534][ T8325] FAULT_INJECTION: forcing a failure. [ 251.493534][ T8325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.497218][ T8325] CPU: 0 PID: 8325 Comm: syz.1.733 Not tainted 5.15.164-syzkaller #0 [ 251.499400][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 251.502065][ T8325] Call trace: [ 251.503006][ T8325] dump_backtrace+0x0/0x530 [ 251.504325][ T8325] show_stack+0x2c/0x3c [ 251.505448][ T8325] dump_stack_lvl+0x108/0x170 [ 251.506825][ T8325] dump_stack+0x1c/0x58 [ 251.507992][ T8325] should_fail+0x3b8/0x514 [ 251.509243][ T8325] should_fail_usercopy+0x20/0x30 [ 251.510686][ T8325] copy_page_from_iter_atomic+0x3c8/0xffc [ 251.512249][ T8325] generic_perform_write+0x2d0/0x520 [ 251.513720][ T8325] __generic_file_write_iter+0x230/0x454 [ 251.515228][ T8325] generic_file_write_iter+0xb4/0x1b8 [ 251.516746][ T8325] vfs_write+0x884/0xb44 [ 251.517956][ T8325] ksys_write+0x15c/0x26c [ 251.519114][ T8325] __arm64_sys_write+0x7c/0x90 [ 251.520460][ T8325] invoke_syscall+0x98/0x2b8 [ 251.521768][ T8325] el0_svc_common+0x138/0x258 [ 251.523084][ T8325] do_el0_svc+0x58/0x14c [ 251.524271][ T8325] el0_svc+0x7c/0x1f0 [ 251.525356][ T8325] el0t_64_sync_handler+0x84/0xe4 [ 251.526704][ T8325] el0t_64_sync+0x1a0/0x1a4 [ 251.532142][ T8325] loop1: detected capacity change from 0 to 256 [ 251.578421][ T8325] exfat: Unknown parameter 'ÿÿÿÿÿÿ' [ 252.774772][ T8343] loop3: detected capacity change from 0 to 1024 [ 252.804092][ T8343] hfsplus: unable to parse mount options [ 254.381673][ T8347] loop1: detected capacity change from 0 to 262144 [ 254.385818][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.387560][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.471287][ T8347] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.740 (8347) [ 254.507977][ T8362] loop3: detected capacity change from 0 to 8192 [ 254.524590][ T8347] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 254.527085][ T8347] BTRFS info (device loop1): enabling ssd optimizations [ 254.529000][ T8347] BTRFS info (device loop1): enabling auto defrag [ 254.530689][ T8347] BTRFS info (device loop1): using free space tree [ 254.532360][ T8347] BTRFS info (device loop1): has skinny extents [ 254.534099][ T8347] BTRFS info (device loop1): flagging fs with big metadata feature [ 254.678604][ T8362] udc-core: couldn't find an available UDC or it's busy [ 254.692129][ T8362] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 254.934507][ T7399] BTRFS warning (device loop1): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 254.968843][ T8347] repair_io_failure: 2 callbacks suppressed [ 254.968864][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040) [ 254.974089][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048) [ 254.977185][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056) [ 254.984174][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064) [ 254.989131][ T4085] BTRFS warning (device loop1): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 254.993304][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 30670848 (dev /dev/loop1 sector 76288) [ 254.996892][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 30674944 (dev /dev/loop1 sector 76296) [ 255.000764][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 30679040 (dev /dev/loop1 sector 76304) [ 255.004108][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 30683136 (dev /dev/loop1 sector 76312) [ 255.039792][ T7239] BTRFS warning (device loop1): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 255.043981][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 30457856 (dev /dev/loop1 sector 75872) [ 255.047086][ T8347] BTRFS info (device loop1): read error corrected: ino 0 off 30461952 (dev /dev/loop1 sector 75880) [ 255.091726][ T8347] FAULT_INJECTION: forcing a failure. [ 255.091726][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 255.095222][ T8347] CPU: 1 PID: 8347 Comm: syz.1.740 Not tainted 5.15.164-syzkaller #0 [ 255.097276][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.099936][ T8347] Call trace: [ 255.100819][ T8347] dump_backtrace+0x0/0x530 [ 255.102054][ T8347] show_stack+0x2c/0x3c [ 255.103293][ T8347] dump_stack_lvl+0x108/0x170 [ 255.104641][ T8347] dump_stack+0x1c/0x58 [ 255.105752][ T8347] should_fail+0x3b8/0x514 [ 255.107010][ T8347] __should_failslab+0xbc/0x110 [ 255.108328][ T8347] should_failslab+0x10/0x28 [ 255.109653][ T8347] slab_pre_alloc_hook+0x64/0xe8 [ 255.111025][ T8347] __kmalloc+0xc0/0x4c8 [ 255.112206][ T8347] tomoyo_realpath_from_path+0xd0/0x508 [ 255.113685][ T8347] tomoyo_path_number_perm+0x1f8/0x6b0 [ 255.115264][ T8347] tomoyo_file_ioctl+0x2c/0x3c [ 255.116616][ T8347] security_file_ioctl+0x80/0xbc [ 255.118075][ T8347] __arm64_sys_ioctl+0xa8/0x1c8 [ 255.119444][ T8347] invoke_syscall+0x98/0x2b8 [ 255.120702][ T8347] el0_svc_common+0x138/0x258 [ 255.121968][ T8347] do_el0_svc+0x58/0x14c [ 255.123265][ T8347] el0_svc+0x7c/0x1f0 [ 255.124373][ T8347] el0t_64_sync_handler+0x84/0xe4 [ 255.125801][ T8347] el0t_64_sync+0x1a0/0x1a4 [ 255.127284][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.128922][ T8347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.143294][ T8347] BTRFS info (device loop1): balance: start [ 255.145084][ T8347] BTRFS info (device loop1): balance: ended with status: 0 [ 255.535794][ T8398] loop0: detected capacity change from 0 to 1024 [ 255.575280][ T8402] loop3: detected capacity change from 0 to 1024 [ 255.765615][ T4109] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 11 /dev/loop1 scanned by udevd (4109) [ 255.807930][ T8398] hfsplus: unable to parse mount options [ 256.168624][ T8402] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 256.233278][ T8381] loop2: detected capacity change from 0 to 262144 [ 256.406950][ T8401] loop4: detected capacity change from 0 to 32768 [ 256.564613][ T8415] loop3: detected capacity change from 0 to 512 [ 256.904793][ T8369] loop2: detected capacity change from 0 to 512 [ 256.932648][ T8411] loop0: detected capacity change from 0 to 40427 [ 257.336925][ T8401] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.752 (8401) [ 257.340094][ T8411] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 257.342532][ T8411] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 257.354927][ T8369] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 257.377497][ T8415] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.385951][ T8411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.421182][ T8401] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 257.424345][ T8401] BTRFS info (device loop4): using free space tree [ 257.426076][ T8401] BTRFS info (device loop4): has skinny extents [ 257.461972][ T8411] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 257.474793][ T8411] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.528851][ T8411] netlink: 204 bytes leftover after parsing attributes in process `syz.0.754'. [ 257.686318][ T8401] BTRFS info (device loop4): enabling ssd optimizations [ 257.778256][ T8435] loop2: detected capacity change from 0 to 8192 [ 257.894426][ T8435] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 257.927761][ T8435] FAT-fs (loop2): Filesystem has been set read-only [ 257.987683][ T8422] loop1: detected capacity change from 0 to 32768 [ 258.037407][ T8422] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.757 (8422) [ 258.087669][ T8454] loop0: detected capacity change from 0 to 512 [ 258.225021][ T8454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.286182][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 258.306557][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 258.349261][ T8461] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 258.519334][ T8465] loop3: detected capacity change from 0 to 1024 [ 258.532449][ T8466] loop0: detected capacity change from 0 to 1764 [ 258.598696][ T8465] hfsplus: unable to parse mount options [ 258.619544][ T8466] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 258.622522][ T8466] ISOFS: unable to read i-node block [ 258.623989][ T8466] isofs_fill_super: get root inode failed [ 258.911131][ T8473] loop3: detected capacity change from 0 to 128 [ 259.983401][ T8488] loop3: detected capacity change from 0 to 512 [ 260.219389][ T8488] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.769: invalid indirect mapped block 256 (level 2) [ 260.223697][ T8488] EXT4-fs (loop3): 2 truncates cleaned up [ 260.225233][ T8488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 261.190709][ T8505] loop2: detected capacity change from 0 to 1024 [ 261.193118][ T8507] loop4: detected capacity change from 0 to 64 [ 261.219520][ T8505] hfsplus: unable to parse mount options [ 261.316255][ T8515] loop0: detected capacity change from 0 to 128 [ 261.435943][ T8507] hfs: unable to load codepage "macanian" [ 261.437725][ T8507] hfs: unable to parse mount options [ 261.535450][ T8521] attempt to access beyond end of device [ 261.535450][ T8521] loop0: rw=0, want=6491538, limit=128 [ 261.552333][ T8521] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 261.576586][ T8521] attempt to access beyond end of device [ 261.576586][ T8521] loop0: rw=0, want=17666808, limit=128 [ 261.604796][ T8521] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 261.614962][ T8521] attempt to access beyond end of device [ 261.614962][ T8521] loop0: rw=0, want=26539620, limit=128 [ 261.643396][ T8521] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 261.653635][ T8521] attempt to access beyond end of device [ 261.653635][ T8521] loop0: rw=0, want=16147214, limit=128 [ 261.664990][ T8521] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 261.674448][ T8521] attempt to access beyond end of device [ 261.674448][ T8521] loop0: rw=0, want=6491544, limit=128 [ 261.685949][ T8527] loop3: detected capacity change from 0 to 8 [ 261.696263][ T8521] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 261.707532][ T8521] attempt to access beyond end of device [ 261.707532][ T8521] loop0: rw=0, want=17668344, limit=128 [ 261.724539][ T8521] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 261.734598][ T8521] attempt to access beyond end of device [ 261.734598][ T8521] loop0: rw=0, want=26932836, limit=128 [ 261.743489][ T8521] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 261.746132][ T8521] attempt to access beyond end of device [ 261.746132][ T8521] loop0: rw=0, want=16147214, limit=128 [ 261.757080][ T8521] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 261.760687][ T8521] attempt to access beyond end of device [ 261.760687][ T8521] loop0: rw=0, want=6491550, limit=128 [ 261.763949][ T8521] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 261.766409][ T8521] attempt to access beyond end of device [ 261.766409][ T8521] loop0: rw=0, want=17669880, limit=128 [ 261.777007][ T8521] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 261.811225][ T8527] loop3: detected capacity change from 0 to 512 [ 262.220504][ T8536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.784'. [ 262.246302][ T8533] "syz.2.784" (8533) uses obsolete ecb(arc4) skcipher [ 263.106522][ T8540] loop3: detected capacity change from 0 to 32768 [ 263.176986][ T8540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.785 (8540) [ 263.185118][ T8540] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 263.197927][ T8540] BTRFS info (device loop3): using free space tree [ 263.199650][ T8540] BTRFS info (device loop3): has skinny extents [ 263.554345][ T8540] BTRFS info (device loop3): enabling ssd optimizations [ 263.810774][ T8544] loop2: detected capacity change from 0 to 32768 [ 263.856080][ T8544] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.787 (8544) [ 263.995597][ T8567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.140491][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 264.142989][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'. [ 264.374759][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 264.400969][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 264.422604][ T8584] BTRFS error (device loop3): unrecognized mount option 'fd=0xffffffffffffffff' [ 265.358941][ T8594] loop1: detected capacity change from 0 to 1024 [ 265.399038][ T8594] hfsplus: unable to parse mount options [ 265.572277][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 267.443231][ T8611] loop4: detected capacity change from 0 to 1024 [ 267.519509][ T8611] hfsplus: unable to parse mount options [ 267.872663][ T8631] loop3: detected capacity change from 0 to 512 [ 268.064851][ T8631] EXT4-fs (loop3): Ignoring removed orlov option [ 268.066651][ T8631] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.113977][ T8631] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 268.117774][ T8631] EXT4-fs (loop3): 1 truncate cleaned up [ 268.148185][ T8631] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000005,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,orlov,. Quota mode: none. [ 269.186350][ T8638] loop2: detected capacity change from 0 to 32768 [ 269.260536][ T8638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.807 (8638) [ 269.292060][ T8638] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 269.294322][ T8638] BTRFS info (device loop2): using free space tree [ 269.295932][ T8638] BTRFS info (device loop2): has skinny extents [ 269.544225][ T8649] loop3: detected capacity change from 0 to 32768 [ 269.611403][ T8649] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.812 (8649) [ 269.614785][ T8638] BTRFS info (device loop2): enabling ssd optimizations [ 269.702397][ T8656] loop1: detected capacity change from 0 to 40427 [ 269.753628][ T8656] F2FS-fs (loop1): invalid crc value [ 269.770029][ T4013] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4013) [ 269.783103][ T8656] F2FS-fs (loop1): Found nat_bits in checkpoint [ 269.834633][ T8656] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 269.878529][ T8656] Invalid option length (19884) for dns_resolver key [ 269.907207][ T8656] Invalid option length (716) for dns_resolver key [ 269.916153][ T8685] loop3: detected capacity change from 0 to 64 [ 270.010574][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 270.030912][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 270.288163][ T8686] BTRFS error (device loop2): unrecognized mount option 'fd=0xffffffffffffffff' [ 271.769959][ T8698] loop1: detected capacity change from 0 to 1024 [ 271.829565][ T8698] hfsplus: unable to parse mount options [ 272.155429][ T8699] chnl_net:caif_netlink_parms(): no params data found [ 272.374227][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'. [ 272.396803][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.409328][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.425295][ T8699] device bridge_slave_0 entered promiscuous mode [ 272.448421][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.459291][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.473490][ T8699] device bridge_slave_1 entered promiscuous mode [ 272.537590][ T8709] loop4: detected capacity change from 0 to 32768 [ 272.620176][ T8699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.624941][ T8699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.631846][ T8709] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.822 (8709) [ 272.735003][ T8699] team0: Port device team_slave_0 added [ 272.744864][ T4109] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4109) [ 272.752691][ T8699] team0: Port device team_slave_1 added [ 272.860652][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.862587][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.885956][ T8699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.901069][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.902980][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.944007][ T8699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.085887][ T8699] device hsr_slave_0 entered promiscuous mode [ 273.134520][ T8699] device hsr_slave_1 entered promiscuous mode [ 273.167972][ T8699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.170113][ T8699] Cannot create hsr debugfs directory [ 273.444765][ T8699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.678085][ T8699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.901623][ T8699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.948461][ T4517] Bluetooth: hci5: command 0x0409 tx timeout [ 273.985095][ T8699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.014366][ T8728] loop2: detected capacity change from 0 to 1764 [ 274.277871][ T8699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 274.329912][ T8699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 274.377027][ T8699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 274.420928][ T8699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.457044][ T8724] loop1: detected capacity change from 0 to 32768 [ 274.600070][ T8724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.826 (8724) [ 274.660819][ T8724] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 274.663370][ T8724] BTRFS info (device loop1): using free space tree [ 274.665036][ T8724] BTRFS info (device loop1): has skinny extents [ 275.548308][ T8724] BTRFS info (device loop1): enabling ssd optimizations [ 275.558151][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.604002][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.607149][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.614601][ T8699] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.668085][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.670983][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.673453][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.675496][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.679205][ T8759] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 275.683078][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.689509][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.693733][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.695803][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.701274][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.723414][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.726075][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.766050][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.770120][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.773195][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.791600][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.810741][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.835972][ T8699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.852933][ T8699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.879286][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.882100][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.884848][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.892134][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.907507][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.038101][ T4266] Bluetooth: hci5: command 0x041b tx timeout [ 276.158323][ T8765] loop2: detected capacity change from 0 to 1024 [ 276.208890][ T8765] hfsplus: unable to parse mount options [ 276.216363][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.219520][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.252991][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.432666][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.435487][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.474942][ T8699] device veth0_vlan entered promiscuous mode [ 276.492986][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.495864][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.504768][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.516147][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.548829][ T8699] device veth1_vlan entered promiscuous mode [ 276.603732][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.606646][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.613770][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.623458][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.632665][ T8699] device veth0_macvtap entered promiscuous mode [ 276.651231][ T8699] device veth1_macvtap entered promiscuous mode [ 276.714258][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.722751][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.731508][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.737668][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.750095][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.756188][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.773421][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.783736][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.791483][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.797564][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.804806][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.811924][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.826432][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.831899][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.837830][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.844856][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.851461][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.857589][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.864697][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.875124][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.892616][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.898079][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.901643][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.918566][ T8699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.925235][ T8699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.937169][ T8699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.945530][ T8699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.155423][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.157755][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.164994][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.226779][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.238017][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.261893][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.272312][ T8771] loop1: detected capacity change from 0 to 32768 [ 277.309228][ T8771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.833 (8771) [ 277.369911][ T8771] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 277.372274][ T8771] BTRFS info (device loop1): using free space tree [ 277.374044][ T8771] BTRFS info (device loop1): has skinny extents [ 277.652919][ T8802] loop4: detected capacity change from 0 to 256 [ 277.779416][ T8771] BTRFS info (device loop1): enabling ssd optimizations [ 277.902634][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 277.921665][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 278.121107][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 279.122290][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 279.149541][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 279.192570][ T8819] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 279.596629][ T8815] loop4: detected capacity change from 0 to 32768 [ 279.658339][ T8815] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.840 (8815) [ 279.955221][ T8825] loop3: detected capacity change from 0 to 32768 [ 280.020592][ T8825] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.843 (8825) [ 280.128353][ T8830] loop4: detected capacity change from 0 to 1024 [ 280.193963][ T7700] Bluetooth: hci5: command 0x0419 tx timeout [ 280.208495][ T8830] hfsplus: unable to parse mount options [ 280.756117][ T8837] device batadv_slave_1 entered promiscuous mode [ 280.961998][ T8836] device batadv_slave_1 left promiscuous mode [ 282.454689][ T8857] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 282.805436][ T8872] loop1: detected capacity change from 0 to 1024 [ 282.829671][ T8872] hfsplus: unable to parse mount options [ 283.296262][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 283.322173][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 283.607851][ T8879] loop3: detected capacity change from 0 to 256 [ 284.982292][ T8883] loop1: detected capacity change from 0 to 32768 [ 285.008068][ T8883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.861 (8883) [ 285.038236][ T8883] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 285.040635][ T8883] BTRFS info (device loop1): using free space tree [ 285.049245][ T8883] BTRFS info (device loop1): has skinny extents [ 285.282143][ T8883] BTRFS info (device loop1): enabling ssd optimizations [ 286.631935][ T8931] loop3: detected capacity change from 0 to 1024 [ 286.683557][ T8931] hfsplus: unable to parse mount options [ 286.745835][ T8933] loop2: detected capacity change from 0 to 1024 [ 287.434629][ T8941] FAULT_INJECTION: forcing a failure. [ 287.434629][ T8941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.453320][ T8941] CPU: 1 PID: 8941 Comm: syz.2.876 Not tainted 5.15.164-syzkaller #0 [ 287.455552][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.458124][ T8941] Call trace: [ 287.459021][ T8941] dump_backtrace+0x0/0x530 [ 287.460164][ T8941] show_stack+0x2c/0x3c [ 287.461251][ T8941] dump_stack_lvl+0x108/0x170 [ 287.462517][ T8941] dump_stack+0x1c/0x58 [ 287.463687][ T8941] should_fail+0x3b8/0x514 [ 287.464911][ T8941] should_fail_alloc_page+0x74/0xa8 [ 287.466358][ T8941] prepare_alloc_pages+0x160/0x460 [ 287.467843][ T8941] __alloc_pages+0x138/0x674 [ 287.469147][ T8941] alloc_pages_vma+0x294/0x7c0 [ 287.470531][ T8941] shmem_alloc_and_acct_page+0x5bc/0xca0 [ 287.472171][ T8941] shmem_getpage_gfp+0x1144/0x20e4 [ 287.473606][ T8941] shmem_write_begin+0xe0/0x29c [ 287.474955][ T8941] generic_perform_write+0x24c/0x520 [ 287.476385][ T8941] __generic_file_write_iter+0x230/0x454 [ 287.477914][ T8941] generic_file_write_iter+0xb4/0x1b8 [ 287.479405][ T8941] vfs_write+0x884/0xb44 [ 287.480626][ T8941] ksys_write+0x15c/0x26c [ 287.481768][ T8941] __arm64_sys_write+0x7c/0x90 [ 287.483052][ T8941] invoke_syscall+0x98/0x2b8 [ 287.484289][ T8941] el0_svc_common+0x138/0x258 [ 287.485652][ T8941] do_el0_svc+0x58/0x14c [ 287.486818][ T8941] el0_svc+0x7c/0x1f0 [ 287.487888][ T8941] el0t_64_sync_handler+0x84/0xe4 [ 287.489305][ T8941] el0t_64_sync+0x1a0/0x1a4 [ 288.478382][ T26] audit: type=1326 audit(288.440:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a51ad28 code=0x7fc00000 [ 288.833858][ T8943] loop1: detected capacity change from 0 to 32768 [ 288.902346][ T8943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.873 (8943) [ 288.932966][ T8943] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 288.935439][ T8943] BTRFS info (device loop1): using free space tree [ 288.947516][ T8943] BTRFS info (device loop1): has skinny extents [ 289.030892][ T8943] BTRFS info (device loop1): enabling ssd optimizations [ 289.198624][ T8987] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 290.998538][ T9012] loop1: detected capacity change from 0 to 2048 [ 291.071294][ T9012] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.275691][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 291.296229][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 291.811679][ T9017] loop3: detected capacity change from 0 to 32768 [ 291.840769][ T9017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.892 (9017) [ 291.877120][ T9017] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 291.880545][ T9017] BTRFS info (device loop3): using free space tree [ 291.882295][ T9017] BTRFS info (device loop3): has skinny extents [ 292.119784][ T9023] loop1: detected capacity change from 0 to 40427 [ 292.154850][ T9023] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 292.178346][ T9023] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.195486][ T9017] BTRFS info (device loop3): enabling ssd optimizations [ 292.237397][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 292.271563][ T9023] F2FS-fs (loop1): recover fsync data on readonly fs [ 292.273610][ T9023] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 292.279663][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 292.301688][ T9023] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 292.303700][ T9023] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 292.348130][ T9023] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.892232][ T9056] BTRFS error (device loop3): unrecognized mount option 'fd=0xffffffffffffffff' [ 293.283126][ T9054] loop1: detected capacity change from 0 to 32768 [ 293.348751][ T9054] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.895 (9054) [ 293.401010][ T4109] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4109) [ 293.513446][ T9083] loop2: detected capacity change from 0 to 1024 [ 293.715408][ T9083] hfsplus: unable to parse mount options [ 295.905962][ T9100] loop2: detected capacity change from 0 to 262144 [ 295.963084][ T9100] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.905 (9100) [ 296.025422][ T9100] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 296.028045][ T9100] BTRFS info (device loop2): enabling ssd optimizations [ 296.029822][ T9100] BTRFS info (device loop2): enabling auto defrag [ 296.031677][ T9100] BTRFS info (device loop2): using free space tree [ 296.033554][ T9100] BTRFS info (device loop2): has skinny extents [ 296.035049][ T9100] BTRFS info (device loop2): flagging fs with big metadata feature [ 296.408081][ T9] BTRFS warning (device loop2): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 296.413939][ T9100] repair_io_failure: 2 callbacks suppressed [ 296.413956][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040) [ 296.419921][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048) [ 296.423339][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056) [ 296.426627][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064) [ 296.431812][ T148] BTRFS warning (device loop2): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 296.437446][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 30670848 (dev /dev/loop2 sector 76288) [ 296.440810][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 30674944 (dev /dev/loop2 sector 76296) [ 296.443942][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 30679040 (dev /dev/loop2 sector 76304) [ 296.446980][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 30683136 (dev /dev/loop2 sector 76312) [ 296.510807][ T148] BTRFS warning (device loop2): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 296.522543][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 30457856 (dev /dev/loop2 sector 75872) [ 296.525718][ T9100] BTRFS info (device loop2): read error corrected: ino 0 off 30461952 (dev /dev/loop2 sector 75880) [ 296.562224][ T9100] FAULT_INJECTION: forcing a failure. [ 296.562224][ T9100] name failslab, interval 1, probability 0, space 0, times 0 [ 296.565648][ T9100] CPU: 0 PID: 9100 Comm: syz.2.905 Not tainted 5.15.164-syzkaller #0 [ 296.567828][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 296.570604][ T9100] Call trace: [ 296.571473][ T9100] dump_backtrace+0x0/0x530 [ 296.572910][ T9100] show_stack+0x2c/0x3c [ 296.574159][ T9100] dump_stack_lvl+0x108/0x170 [ 296.575541][ T9100] dump_stack+0x1c/0x58 [ 296.576690][ T9100] should_fail+0x3b8/0x514 [ 296.577916][ T9100] __should_failslab+0xbc/0x110 [ 296.579305][ T9100] should_failslab+0x10/0x28 [ 296.580540][ T9100] slab_pre_alloc_hook+0x64/0xe8 [ 296.581931][ T9100] __kmalloc+0xc0/0x4c8 [ 296.583021][ T9100] tomoyo_encode+0x270/0x4b0 [ 296.584341][ T9100] tomoyo_realpath_from_path+0x4b4/0x508 [ 296.585934][ T9100] tomoyo_path_number_perm+0x1f8/0x6b0 [ 296.587474][ T9100] tomoyo_file_ioctl+0x2c/0x3c [ 296.588816][ T9100] security_file_ioctl+0x80/0xbc [ 296.590208][ T9100] __arm64_sys_ioctl+0xa8/0x1c8 [ 296.591571][ T9100] invoke_syscall+0x98/0x2b8 [ 296.592853][ T9100] el0_svc_common+0x138/0x258 [ 296.594145][ T9100] do_el0_svc+0x58/0x14c [ 296.595282][ T9100] el0_svc+0x7c/0x1f0 [ 296.596358][ T9100] el0t_64_sync_handler+0x84/0xe4 [ 296.597731][ T9100] el0t_64_sync+0x1a0/0x1a4 [ 296.599897][ T9100] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.609672][ T9100] BTRFS info (device loop2): balance: start [ 296.611415][ T9100] BTRFS info (device loop2): balance: ended with status: 0 [ 297.060633][ T9131] loop4: detected capacity change from 0 to 8192 [ 297.118850][ T9131] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 297.121447][ T9131] REISERFS (device loop4): using ordered data mode [ 297.123301][ T9131] reiserfs: using flush barriers [ 297.129143][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 297.136300][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 297.186532][ T9131] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.218238][ T9131] REISERFS (device loop4): checking transaction log (loop4) [ 297.545284][ T9131] REISERFS (device loop4): Using tea hash to sort names [ 297.547407][ T9131] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 297.551639][ T9131] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 299.428095][ T4523] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 299.540525][ T9146] loop4: detected capacity change from 0 to 32768 [ 299.606044][ T9146] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.911 (9146) [ 299.641488][ T9146] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 299.643919][ T9146] BTRFS info (device loop4): using free space tree [ 299.645649][ T9146] BTRFS info (device loop4): has skinny extents [ 299.853281][ T9157] loop2: detected capacity change from 0 to 32768 [ 299.918115][ T9157] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.916 (9157) [ 299.994791][ T4013] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4013) [ 300.021589][ T9146] BTRFS info (device loop4): enabling ssd optimizations [ 300.027519][ T9159] loop1: detected capacity change from 0 to 32768 [ 300.097378][ T9159] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.917 (9159) [ 300.157854][ T9180] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 300.240588][ T4109] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4109) [ 300.248123][ T4523] usb 1-1: config 223 has an invalid interface number: 40 but max is 1 [ 300.251112][ T4523] usb 1-1: config 223 has an invalid interface number: 89 but max is 1 [ 300.253593][ T4523] usb 1-1: config 223 has an invalid descriptor of length 0, skipping remainder of the config [ 300.274656][ T4523] usb 1-1: config 223 has no interface number 0 [ 300.277124][ T4523] usb 1-1: config 223 has no interface number 1 [ 300.293927][ T4523] usb 1-1: config 223 interface 40 altsetting 71 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 300.308038][ T4523] usb 1-1: config 223 interface 40 altsetting 71 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 300.311093][ T4523] usb 1-1: config 223 interface 40 altsetting 71 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 300.328009][ T4523] usb 1-1: config 223 interface 40 altsetting 71 has an invalid endpoint with address 0x0, skipping [ 300.331018][ T4523] usb 1-1: config 223 interface 40 altsetting 71 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 300.333840][ T4523] usb 1-1: config 223 interface 89 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 300.367418][ T4523] usb 1-1: config 223 interface 89 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 300.384600][ T4523] usb 1-1: config 223 interface 89 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 300.418029][ T4523] usb 1-1: config 223 interface 40 has no altsetting 0 [ 300.420148][ T4523] usb 1-1: config 223 interface 89 has no altsetting 0 [ 300.798186][ T4523] usb 1-1: string descriptor 0 read error: -22 [ 300.800155][ T4523] usb 1-1: New USB device found, idVendor=2040, idProduct=c200, bcdDevice= d.53 [ 300.802502][ T4523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.475953][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 301.637756][ T9191] udc-core: couldn't find an available UDC or it's busy [ 301.685948][ T9191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 301.769567][ T9183] loop3: detected capacity change from 0 to 262144 [ 301.822021][ T9183] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.918 (9183) [ 301.869925][ T9183] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 301.872534][ T9183] BTRFS info (device loop3): enabling ssd optimizations [ 301.874345][ T9183] BTRFS info (device loop3): enabling auto defrag [ 301.876063][ T9183] BTRFS info (device loop3): using free space tree [ 301.877758][ T9183] BTRFS info (device loop3): has skinny extents [ 301.879603][ T9183] BTRFS info (device loop3): flagging fs with big metadata feature [ 302.239896][ T4085] BTRFS warning (device loop3): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 302.247986][ T9183] repair_io_failure: 2 callbacks suppressed [ 302.248006][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 22036480 (dev /dev/loop3 sector 43040) [ 302.253593][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 22040576 (dev /dev/loop3 sector 43048) [ 302.256793][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 22044672 (dev /dev/loop3 sector 43056) [ 302.260527][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 22048768 (dev /dev/loop3 sector 43064) [ 302.264712][ T4085] BTRFS warning (device loop3): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 302.351160][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 30670848 (dev /dev/loop3 sector 76288) [ 302.354345][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 30674944 (dev /dev/loop3 sector 76296) [ 302.357570][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 30679040 (dev /dev/loop3 sector 76304) [ 302.361418][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 30683136 (dev /dev/loop3 sector 76312) [ 302.394522][ T9148] BTRFS warning (device loop3): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 302.434730][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 30457856 (dev /dev/loop3 sector 75872) [ 302.438481][ T9183] BTRFS info (device loop3): read error corrected: ino 0 off 30461952 (dev /dev/loop3 sector 75880) [ 302.841312][ T9215] BTRFS info (device loop3): balance: start [ 302.843080][ T9215] BTRFS info (device loop3): balance: ended with status: 0 [ 302.985479][ T4104] usb 1-1: USB disconnect, device number 2 [ 304.613211][ T9231] loop4: detected capacity change from 0 to 512 [ 304.710490][ T9231] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.948015][ T9241] bridge0: port 3(syz_tun) entered blocking state [ 305.039036][ T9241] bridge0: port 3(syz_tun) entered disabled state [ 305.058563][ T9239] 9pnet: Insufficient options for proto=fd [ 305.078666][ T9241] device syz_tun entered promiscuous mode [ 305.089213][ T9241] bridge0: port 3(syz_tun) entered blocking state [ 305.091362][ T9241] bridge0: port 3(syz_tun) entered forwarding state [ 305.760709][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'. [ 305.771964][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'. [ 307.423135][ T9267] loop4: detected capacity change from 0 to 512 [ 307.535484][ T9267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.094976][ T9271] loop4: detected capacity change from 0 to 32768 [ 309.169541][ T9271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.935 (9271) [ 309.197056][ T9271] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 309.208338][ T9271] BTRFS info (device loop4): using free space tree [ 309.210179][ T9271] BTRFS info (device loop4): has skinny extents [ 309.513656][ T9271] BTRFS info (device loop4): enabling ssd optimizations [ 310.276980][ T9318] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 310.465028][ T9320] loop3: detected capacity change from 0 to 512 [ 310.558348][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 310.585494][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 310.591642][ T9320] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.945: invalid indirect mapped block 256 (level 2) [ 310.596568][ T9320] EXT4-fs (loop3): 2 truncates cleaned up [ 310.598316][ T9320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.465310][ T9327] loop3: detected capacity change from 0 to 32768 [ 311.555749][ T9327] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.946 (9327) [ 311.609734][ T4109] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4109) [ 313.107782][ T9346] loop4: detected capacity change from 0 to 512 [ 313.173989][ T9346] EXT4-fs (loop4): can't mount with commit=4095, fs mounted w/o journal [ 313.363797][ T9353] loop1: detected capacity change from 0 to 4096 [ 313.442251][ T9336] loop3: detected capacity change from 0 to 32768 [ 313.457271][ T9353] ntfs: (device loop1): ntfs_read_inode_mount(): Device read failed. [ 313.459525][ T9353] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 313.461892][ T9353] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 313.527154][ T9336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.949 (9336) [ 313.574348][ T9336] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 313.577014][ T9336] BTRFS info (device loop3): setting nodatacow, compression disabled [ 313.579755][ T9336] BTRFS info (device loop3): enabling auto defrag [ 313.583842][ T9336] BTRFS info (device loop3): max_inline at 0 [ 313.590107][ T9336] BTRFS info (device loop3): using free space tree [ 313.596523][ T9336] BTRFS info (device loop3): has skinny extents [ 314.135901][ T9355] loop4: detected capacity change from 0 to 32768 [ 314.274034][ T9355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.957 (9355) [ 314.369499][ T9355] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 314.371817][ T9355] BTRFS info (device loop4): using free space tree [ 314.373546][ T9355] BTRFS info (device loop4): has skinny extents [ 314.377588][ T9357] loop1: detected capacity change from 0 to 32768 [ 315.042428][ T9357] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.958 (9357) [ 315.208031][ T9355] BTRFS info (device loop4): enabling ssd optimizations [ 315.279843][ T9408] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 315.392956][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.394862][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.013091][ T9420] loop3: detected capacity change from 0 to 8 [ 316.172688][ T9379] loop2: detected capacity change from 0 to 32768 [ 316.252995][ T9379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.960 (9379) [ 316.301562][ T9379] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 316.303898][ T9379] BTRFS info (device loop2): using free space tree [ 316.305669][ T9379] BTRFS info (device loop2): has skinny extents [ 316.516737][ T9379] BTRFS info (device loop2): enabling ssd optimizations [ 317.218185][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 317.221286][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 317.224641][ T9451] BTRFS error (device loop2): unrecognized mount option 'fd=0xffffffffffffffff' [ 317.323304][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 318.034080][ T9448] loop3: detected capacity change from 0 to 32768 [ 318.192911][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 318.196159][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 318.199275][ T9448] XFS (loop3): Mounting V5 Filesystem [ 318.359002][ T9448] XFS (loop3): Ending clean mount [ 318.386028][ T9448] XFS (loop3): Quotacheck needed: Please wait. [ 318.544220][ T9448] XFS (loop3): Quotacheck: Done. [ 319.261941][ T9448] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 319.458560][ T4030] XFS (loop3): Unmounting Filesystem [ 319.516083][ T4026] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 319.668375][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 320.120618][ T9479] loop1: detected capacity change from 0 to 32768 [ 320.162413][ T9497] loop3: detected capacity change from 0 to 512 [ 320.187201][ T9479] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.972 (9479) [ 320.203644][ T9479] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 320.206005][ T9479] BTRFS info (device loop1): using free space tree [ 320.218196][ T9479] BTRFS info (device loop1): has skinny extents [ 320.246825][ T9497] EXT4-fs (loop3): 1 orphan inode deleted [ 320.248572][ T9497] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 321.603563][ T9490] loop4: detected capacity change from 0 to 32768 [ 321.699329][ T9479] BTRFS info (device loop1): enabling ssd optimizations [ 321.727155][ T9490] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.978 (9490) [ 322.333125][ T9532] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 322.857109][ T9541] loop2: detected capacity change from 0 to 1024 [ 322.893515][ T9541] hfsplus: unable to parse mount options [ 323.033582][ T9546] loop1: detected capacity change from 0 to 16 [ 323.082295][ T9546] erofs: (device loop1): mounted with root inode @ nid 36. [ 323.182061][ T9528] loop3: detected capacity change from 0 to 32768 [ 323.229273][ T9528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.981 (9528) [ 323.281125][ T9528] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 323.285752][ T9528] BTRFS info (device loop3): using free space tree [ 323.295516][ T9528] BTRFS info (device loop3): has skinny extents [ 323.508487][ T9528] BTRFS info (device loop3): enabling ssd optimizations [ 324.020759][ T9578] BTRFS error (device loop3): unrecognized mount option 'fd=0xffffffffffffffff' [ 326.464351][ T9591] loop1: detected capacity change from 0 to 32768 [ 326.561084][ T9591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.995 (9591) [ 326.665742][ T9591] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 326.668216][ T9591] BTRFS info (device loop1): using free space tree [ 326.708077][ T9591] BTRFS info (device loop1): has skinny extents [ 327.088120][ T9591] BTRFS info (device loop1): enabling ssd optimizations [ 327.162051][ T9622] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 327.674590][ T9643] x_tables: unsorted entry at hook 3 [ 327.676867][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 327.691491][ T9643] loop3: detected capacity change from 0 to 512 [ 327.706783][ T9645] loop2: detected capacity change from 0 to 64 [ 327.795352][ T9643] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 327.852751][ T9643] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 329.417433][ T9641] loop1: detected capacity change from 0 to 32768 [ 329.481934][ T9641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1003 (9641) [ 329.569413][ T9641] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 329.571910][ T9641] BTRFS info (device loop1): using free space tree [ 329.573598][ T9641] BTRFS info (device loop1): has skinny extents [ 329.871690][ T9641] BTRFS info (device loop1): enabling ssd optimizations [ 329.872767][ T9662] loop2: detected capacity change from 0 to 32768 [ 329.991276][ T9662] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1009 (9662) [ 330.616791][ T9703] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 331.621070][ T9710] device batadv_slave_1 entered promiscuous mode [ 331.651322][ T9707] loop1: detected capacity change from 0 to 4096 [ 331.695359][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 331.698734][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 331.794104][ T9707] NILFS (loop1): invalid segment: Checksum error in segment payload [ 331.826908][ T9707] NILFS (loop1): trying rollback from an earlier position [ 331.931950][ T9707] NILFS (loop1): recovery complete [ 331.970301][ T9713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.013252][ T9709] device batadv_slave_1 left promiscuous mode [ 332.111041][ T9707] overlayfs: upper fs does not support tmpfile. [ 332.178186][ T9707] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 332.180341][ T9707] overlayfs: failed to set xattr on upper [ 332.181918][ T9707] overlayfs: ...falling back to index=off,metacopy=off. [ 332.209320][ T9717] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 333.939132][ T9729] loop1: detected capacity change from 0 to 32768 [ 334.003512][ T9729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1021 (9729) [ 334.044336][ T9729] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 334.046763][ T9729] BTRFS info (device loop1): using free space tree [ 334.058227][ T9729] BTRFS info (device loop1): has skinny extents [ 334.062186][ T9733] loop2: detected capacity change from 0 to 32768 [ 334.111190][ T9737] loop4: detected capacity change from 0 to 32768 [ 334.123131][ T9733] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1024 (9733) [ 334.166980][ T9737] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1026 (9737) [ 334.478265][ T9729] BTRFS info (device loop1): enabling ssd optimizations [ 334.547578][ T9769] loop2: detected capacity change from 0 to 256 [ 334.730317][ T9769] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 334.768872][ T9769] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 335.179249][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 335.182344][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 335.186046][ T9785] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 335.430236][ T9789] FAULT_INJECTION: forcing a failure. [ 335.430236][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 335.433702][ T9789] CPU: 0 PID: 9789 Comm: syz.2.1031 Not tainted 5.15.164-syzkaller #0 [ 335.435837][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 335.438586][ T9789] Call trace: [ 335.439462][ T9789] dump_backtrace+0x0/0x530 [ 335.440747][ T9789] show_stack+0x2c/0x3c [ 335.441905][ T9789] dump_stack_lvl+0x108/0x170 [ 335.443167][ T9789] dump_stack+0x1c/0x58 [ 335.444318][ T9789] should_fail+0x3b8/0x514 [ 335.445638][ T9789] __should_failslab+0xbc/0x110 [ 335.446975][ T9789] should_failslab+0x10/0x28 [ 335.448209][ T9789] slab_pre_alloc_hook+0x64/0xe8 [ 335.449581][ T9789] kmem_cache_alloc+0x98/0x45c [ 335.450937][ T9789] vm_area_dup+0x2c/0xb4 [ 335.452099][ T9789] __split_vma+0xbc/0x444 [ 335.453221][ T9789] __do_munmap+0x344/0x1544 [ 335.454429][ T9789] mmap_region+0x6d4/0x12f0 [ 335.455668][ T9789] do_mmap+0x6c0/0xcec [ 335.456792][ T9789] vm_mmap_pgoff+0x1a4/0x2b4 [ 335.458006][ T9789] ksys_mmap_pgoff+0x458/0x668 [ 335.459270][ T9789] __arm64_sys_mmap+0xf8/0x110 [ 335.460622][ T9789] invoke_syscall+0x98/0x2b8 [ 335.461939][ T9789] el0_svc_common+0x138/0x258 [ 335.463203][ T9789] do_el0_svc+0x58/0x14c [ 335.464363][ T9789] el0_svc+0x7c/0x1f0 [ 335.465505][ T9789] el0t_64_sync_handler+0x84/0xe4 [ 335.466996][ T9789] el0t_64_sync+0x1a0/0x1a4 [ 337.097828][ T9801] loop3: detected capacity change from 0 to 4096 [ 337.169875][ T9801] ntfs3: Unknown parameter '' [ 337.308455][ T9801] netlink: 'syz.3.1035': attribute type 9 has an invalid length. [ 337.310645][ T9801] netlink: 'syz.3.1035': attribute type 7 has an invalid length. [ 337.312687][ T9801] netlink: 'syz.3.1035': attribute type 8 has an invalid length. [ 337.679426][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 337.757594][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 337.761034][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 338.005623][ T9817] loop3: detected capacity change from 0 to 7994 [ 338.045196][ T9811] loop1: detected capacity change from 0 to 32768 [ 338.228931][ T9811] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1039 (9811) [ 338.271467][ T9817] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "jdev" [ 338.271467][ T9817] [ 338.286409][ T9811] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 338.289128][ T9811] BTRFS info (device loop1): using free space tree [ 338.290843][ T9811] BTRFS info (device loop1): has skinny extents [ 338.508032][ T9811] BTRFS info (device loop1): enabling ssd optimizations [ 338.670975][ T9849] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 338.695120][ T9850] FAULT_INJECTION: forcing a failure. [ 338.695120][ T9850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.702391][ T9850] CPU: 1 PID: 9850 Comm: syz.3.1043 Not tainted 5.15.164-syzkaller #0 [ 338.704669][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 338.707309][ T9850] Call trace: [ 338.708167][ T9850] dump_backtrace+0x0/0x530 [ 338.709388][ T9850] show_stack+0x2c/0x3c [ 338.710508][ T9850] dump_stack_lvl+0x108/0x170 [ 338.711792][ T9850] dump_stack+0x1c/0x58 [ 338.712994][ T9850] should_fail+0x3b8/0x514 [ 338.714192][ T9850] should_fail_usercopy+0x20/0x30 [ 338.715582][ T9850] __copy_msghdr_from_user+0xbc/0x5d0 [ 338.717055][ T9850] ___sys_sendmsg+0x154/0x294 [ 338.718369][ T9850] __arm64_sys_sendmsg+0x1ac/0x25c [ 338.719770][ T9850] invoke_syscall+0x98/0x2b8 [ 338.721030][ T9850] el0_svc_common+0x138/0x258 [ 338.722308][ T9850] do_el0_svc+0x58/0x14c [ 338.723556][ T9850] el0_svc+0x7c/0x1f0 [ 338.724637][ T9850] el0t_64_sync_handler+0x84/0xe4 [ 338.725965][ T9850] el0t_64_sync+0x1a0/0x1a4 [ 339.039715][ T9826] loop4: detected capacity change from 0 to 32768 [ 339.131879][ T9826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1042 (9826) [ 339.933581][ T9826] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 339.938112][ T9826] BTRFS info (device loop4): using free space tree [ 339.940051][ T9826] BTRFS info (device loop4): has skinny extents [ 340.203183][ T9826] BTRFS info (device loop4): enabling ssd optimizations [ 340.237258][ T9880] loop1: detected capacity change from 0 to 128 [ 340.299103][ T9880] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 340.664513][ T9887] loop1: detected capacity change from 0 to 512 [ 340.670537][ T9887] EXT4-fs (loop1): Ignoring removed oldalloc option [ 340.716028][ T9887] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,dioread_lock,delalloc,oldalloc,usrquota,discard,init_itable=0x0000000000000001,max_batch_time=0x0000000000000020,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 340.824426][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.652888][ T9899] Cannot find del_set index 0 as target [ 342.513682][ T9910] FAULT_INJECTION: forcing a failure. [ 342.513682][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.517342][ T9910] CPU: 1 PID: 9910 Comm: syz.2.1054 Not tainted 5.15.164-syzkaller #0 [ 342.519496][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 342.522287][ T9910] Call trace: [ 342.523174][ T9910] dump_backtrace+0x0/0x530 [ 342.524412][ T9910] show_stack+0x2c/0x3c [ 342.525542][ T9910] dump_stack_lvl+0x108/0x170 [ 342.526779][ T9910] dump_stack+0x1c/0x58 [ 342.527909][ T9910] should_fail+0x3b8/0x514 [ 342.529151][ T9910] should_fail_usercopy+0x20/0x30 [ 342.530518][ T9910] copy_page_from_iter_atomic+0x3c8/0xffc [ 342.532028][ T9910] generic_perform_write+0x2d0/0x520 [ 342.533476][ T9910] __generic_file_write_iter+0x230/0x454 [ 342.534986][ T9910] generic_file_write_iter+0xb4/0x1b8 [ 342.536411][ T9910] vfs_write+0x884/0xb44 [ 342.537560][ T9910] ksys_write+0x15c/0x26c [ 342.538749][ T9910] __arm64_sys_write+0x7c/0x90 [ 342.540036][ T9910] invoke_syscall+0x98/0x2b8 [ 342.541344][ T9910] el0_svc_common+0x138/0x258 [ 342.542719][ T9910] do_el0_svc+0x58/0x14c [ 342.543933][ T9910] el0_svc+0x7c/0x1f0 [ 342.545003][ T9910] el0t_64_sync_handler+0x84/0xe4 [ 342.546365][ T9910] el0t_64_sync+0x1a0/0x1a4 [ 342.689683][ T9910] loop2: detected capacity change from 0 to 256 [ 342.735733][ T9910] exfat: Unknown parameter 'ÿÿÿÿÿÿ' [ 343.667242][ T9922] loop2: detected capacity change from 0 to 1024 [ 343.774558][ T9922] hfsplus: unable to parse mount options [ 343.899490][ T9912] loop1: detected capacity change from 0 to 32768 [ 343.979369][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 343.982711][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 344.058439][ T9912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1056 (9912) [ 344.269460][ T9920] loop4: detected capacity change from 0 to 32768 [ 344.332386][ T9920] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1052 (9920) [ 344.452929][ T9912] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 344.465722][ T9912] BTRFS info (device loop1): using free space tree [ 344.467520][ T9912] BTRFS info (device loop1): has skinny extents [ 344.726374][ T9912] BTRFS info (device loop1): enabling ssd optimizations [ 344.750592][ T9934] loop2: detected capacity change from 0 to 32768 [ 344.809387][ T9934] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1062 (9934) [ 344.814033][ T9961] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 345.967416][ T9974] loop1: detected capacity change from 0 to 2048 [ 346.188102][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 346.191060][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 346.414758][ T9974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.250829][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 347.258988][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1072'. [ 347.261683][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1072'. [ 347.311462][ T9990] device netdevsim0 entered promiscuous mode [ 347.341848][ T9993] loop4: detected capacity change from 0 to 1024 [ 347.377987][ T9990] device netdevsim0 left promiscuous mode [ 347.468076][ T9993] EXT4-fs (loop4): Ignoring removed oldalloc option [ 347.501455][ T9993] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 347.965397][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 347.968860][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 348.503704][T10008] loop1: detected capacity change from 0 to 1024 [ 348.568816][T10008] hfsplus: unable to parse mount options [ 349.048687][T10006] loop4: detected capacity change from 0 to 32768 [ 349.106495][T10006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1076 (10006) [ 349.121906][T10006] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 349.124187][T10006] BTRFS info (device loop4): using free space tree [ 349.125802][T10006] BTRFS info (device loop4): has skinny extents [ 349.402777][T10033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.429667][T10006] BTRFS info (device loop4): enabling ssd optimizations [ 349.487100][T10036] loop1: detected capacity change from 0 to 1024 [ 349.497007][T10013] loop2: detected capacity change from 0 to 32768 [ 349.508848][T10036] hfsplus: unable to parse mount options [ 349.528034][T10039] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 349.582062][T10013] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1079 (10013) [ 349.773687][T10011] loop3: detected capacity change from 0 to 40427 [ 349.808677][T10041] FAULT_INJECTION: forcing a failure. [ 349.808677][T10041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.812067][T10041] CPU: 1 PID: 10041 Comm: syz.1.1081 Not tainted 5.15.164-syzkaller #0 [ 349.814222][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.816844][T10041] Call trace: [ 349.817677][T10041] dump_backtrace+0x0/0x530 [ 349.818870][T10041] show_stack+0x2c/0x3c [ 349.820013][T10041] dump_stack_lvl+0x108/0x170 [ 349.821233][T10041] dump_stack+0x1c/0x58 [ 349.822377][T10041] should_fail+0x3b8/0x514 [ 349.823529][T10041] should_fail_usercopy+0x20/0x30 [ 349.824843][T10041] move_addr_to_user+0x26c/0x478 [ 349.826180][T10041] __sys_getsockname+0x1dc/0x280 [ 349.827518][T10041] __arm64_sys_getsockname+0x7c/0x94 [ 349.828912][T10041] invoke_syscall+0x98/0x2b8 [ 349.830169][T10041] el0_svc_common+0x138/0x258 [ 349.831481][T10041] do_el0_svc+0x58/0x14c [ 349.832685][T10041] el0_svc+0x7c/0x1f0 [ 349.833714][T10041] el0t_64_sync_handler+0x84/0xe4 [ 349.835068][T10041] el0t_64_sync+0x1a0/0x1a4 [ 349.855311][T10011] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 349.857514][T10011] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 349.865816][T10011] F2FS-fs (loop3): invalid crc value [ 349.925339][T10011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 350.012504][T10011] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 350.014372][T10011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 350.126369][T10011] udc-core: couldn't find an available UDC or it's busy [ 350.155207][T10011] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 350.172670][T10011] udc-core: couldn't find an available UDC or it's busy [ 350.192790][T10011] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 350.936649][T10051] loop1: detected capacity change from 0 to 1024 [ 351.068876][T10051] hfsplus: unable to parse mount options [ 351.420027][T10051] binder: 10050:10051 tried to acquire reference to desc 0, got 1 instead [ 351.424767][T10051] binder: 10050:10051 got transaction with invalid number of fds (-1) [ 351.427247][T10051] binder: 10050:10051 transaction failed 29201/-22, size 96-24 line 3332 [ 351.430831][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.488409][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 352.491742][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 353.261362][T10067] loop3: detected capacity change from 0 to 32768 [ 353.384135][T10067] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 353.384135][T10067] [ 353.391376][T10067] ERROR: (device loop3): remounting filesystem as read-only [ 353.393467][T10067] ialloc: diAlloc returned -5! [ 353.553922][T10076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.555957][T10076] IPv6: NLM_F_CREATE should be set when creating new route [ 353.790404][ T4030] non-latin1 character 0x2e66 found in JFS file name [ 353.792592][ T4030] mount with iocharset=utf8 to access [ 354.074515][T10071] loop1: detected capacity change from 0 to 32768 [ 354.134866][T10071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1089 (10071) [ 354.512267][T10073] loop2: detected capacity change from 0 to 262144 [ 354.528667][T10071] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 354.531039][T10071] BTRFS info (device loop1): using free space tree [ 354.532768][T10071] BTRFS info (device loop1): has skinny extents [ 354.573254][T10073] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.1090 (10073) [ 354.606393][T10073] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 354.609059][T10073] BTRFS info (device loop2): enabling ssd optimizations [ 354.611000][T10073] BTRFS info (device loop2): enabling auto defrag [ 354.612649][T10073] BTRFS info (device loop2): using free space tree [ 354.614439][T10073] BTRFS info (device loop2): has skinny extents [ 354.616048][T10073] BTRFS info (device loop2): flagging fs with big metadata feature [ 354.738402][T10090] loop4: detected capacity change from 0 to 8192 [ 354.775673][T10071] BTRFS info (device loop1): enabling ssd optimizations [ 354.802210][T10090] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 354.804750][T10090] REISERFS (device loop4): using ordered data mode [ 354.806482][T10090] reiserfs: using flush barriers [ 354.814791][T10090] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 354.819990][T10090] REISERFS (device loop4): checking transaction log (loop4) [ 354.860175][ T9] BTRFS warning (device loop2): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 354.879038][T10073] repair_io_failure: 2 callbacks suppressed [ 354.879059][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040) [ 354.883930][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048) [ 354.887031][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056) [ 354.890343][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064) [ 354.894282][ T153] BTRFS warning (device loop2): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 354.898413][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 30670848 (dev /dev/loop2 sector 76288) [ 354.901711][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 30674944 (dev /dev/loop2 sector 76296) [ 354.904905][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 30679040 (dev /dev/loop2 sector 76304) [ 354.908291][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 30683136 (dev /dev/loop2 sector 76312) [ 354.932716][ T9] BTRFS warning (device loop2): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 354.937672][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 30457856 (dev /dev/loop2 sector 75872) [ 354.953727][T10073] BTRFS info (device loop2): read error corrected: ino 0 off 30461952 (dev /dev/loop2 sector 75880) [ 354.981755][T10130] overlayfs: failed to resolve './file1': -2 [ 355.009413][T10073] FAULT_INJECTION: forcing a failure. [ 355.009413][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 355.012900][T10073] CPU: 0 PID: 10073 Comm: syz.2.1090 Not tainted 5.15.164-syzkaller #0 [ 355.015033][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 355.017689][T10073] Call trace: [ 355.018571][T10073] dump_backtrace+0x0/0x530 [ 355.019780][T10073] show_stack+0x2c/0x3c [ 355.020939][T10073] dump_stack_lvl+0x108/0x170 [ 355.022231][T10073] dump_stack+0x1c/0x58 [ 355.023368][T10073] should_fail+0x3b8/0x514 [ 355.024594][T10073] __should_failslab+0xbc/0x110 [ 355.025918][T10073] should_failslab+0x10/0x28 [ 355.027183][T10073] slab_pre_alloc_hook+0x64/0xe8 [ 355.028476][T10073] __kmalloc_track_caller+0x78/0x3d8 [ 355.029895][T10073] memdup_user+0xd0/0x2c8 [ 355.031055][T10073] btrfs_ioctl_balance+0x29c/0x7b4 [ 355.032403][T10073] btrfs_ioctl+0x8d4/0xa5c [ 355.033599][T10073] __arm64_sys_ioctl+0x14c/0x1c8 [ 355.034959][T10073] invoke_syscall+0x98/0x2b8 [ 355.036206][T10073] el0_svc_common+0x138/0x258 [ 355.037472][T10073] do_el0_svc+0x58/0x14c [ 355.038606][T10073] el0_svc+0x7c/0x1f0 [ 355.039667][T10073] el0t_64_sync_handler+0x84/0xe4 [ 355.041054][T10073] el0t_64_sync+0x1a0/0x1a4 [ 355.119495][T10090] REISERFS (device loop4): Using tea hash to sort names [ 355.121714][T10090] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 355.125295][T10090] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 355.679125][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 355.682047][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 355.685446][T10140] BTRFS error (device loop1): unrecognized mount option 'fd=0xffffffffffffffff' [ 355.991940][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.222497][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.471107][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.600346][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.645870][T10136] loop2: detected capacity change from 0 to 32768 [ 356.722701][T10136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1098 (10136) [ 356.739146][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 356.742266][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 357.197560][T10136] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 357.201477][T10136] BTRFS info (device loop2): using free space tree [ 357.203466][T10136] BTRFS info (device loop2): has skinny extents [ 357.302681][T10143] chnl_net:caif_netlink_parms(): no params data found [ 357.578028][T10136] BTRFS info (device loop2): enabling ssd optimizations [ 358.086749][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.089368][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.092090][T10143] device bridge_slave_0 entered promiscuous mode [ 358.256093][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.268271][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.272596][T10143] device bridge_slave_1 entered promiscuous mode [ 358.365233][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.422999][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.428205][ T4156] Bluetooth: hci4: command 0x0409 tx timeout [ 359.638193][T10181] loop4: detected capacity change from 0 to 262144 [ 359.691579][T10143] team0: Port device team_slave_0 added [ 359.696573][T10143] team0: Port device team_slave_1 added [ 359.720454][T10181] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.1103 (10181) [ 359.805708][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.807621][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.835207][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.846678][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.850290][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.857201][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.965306][T10181] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 359.968104][T10181] BTRFS info (device loop4): enabling ssd optimizations [ 359.969966][T10181] BTRFS info (device loop4): enabling auto defrag [ 359.971645][T10181] BTRFS info (device loop4): using free space tree [ 359.973365][T10181] BTRFS info (device loop4): has skinny extents [ 359.975688][T10181] BTRFS info (device loop4): flagging fs with big metadata feature [ 360.120357][T10143] device hsr_slave_0 entered promiscuous mode [ 360.158907][T10143] device hsr_slave_1 entered promiscuous mode [ 360.219880][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.227071][T10143] Cannot create hsr debugfs directory [ 360.231824][T10203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.233829][T10203] IPv6: NLM_F_CREATE should be set when creating new route [ 360.253428][ T153] BTRFS warning (device loop4): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 360.295122][T10181] repair_io_failure: 2 callbacks suppressed [ 360.295142][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 22036480 (dev /dev/loop4 sector 43040) [ 360.301608][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 22040576 (dev /dev/loop4 sector 43048) [ 360.304781][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 22044672 (dev /dev/loop4 sector 43056) [ 360.307836][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 22048768 (dev /dev/loop4 sector 43064) [ 360.312108][ T7399] BTRFS warning (device loop4): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 360.318467][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 30670848 (dev /dev/loop4 sector 76288) [ 360.322075][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 30674944 (dev /dev/loop4 sector 76296) [ 360.325262][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 30679040 (dev /dev/loop4 sector 76304) [ 360.328714][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 30683136 (dev /dev/loop4 sector 76312) [ 360.403470][ T4189] BTRFS warning (device loop4): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 360.407564][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872) [ 360.410918][T10181] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880) [ 360.598020][ T4012] Bluetooth: hci4: command 0x041b tx timeout [ 361.446359][T10181] BTRFS info (device loop4): balance: start [ 361.449919][T10181] BTRFS info (device loop4): balance: ended with status: 0 [ 361.955329][T10250] loop1: detected capacity change from 0 to 512 [ 362.069032][T10250] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 362.668319][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 362.774152][ T4369] device hsr_slave_0 left promiscuous mode [ 362.809493][ T4369] device hsr_slave_1 left promiscuous mode [ 362.879928][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.882092][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.896952][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.899145][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.916211][ T4369] device bridge_slave_1 left promiscuous mode [ 362.920057][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.952735][ T4369] device bridge_slave_0 left promiscuous mode [ 362.954644][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.138806][ T4369] device veth1_macvtap left promiscuous mode [ 363.141037][ T4369] device veth0_macvtap left promiscuous mode [ 363.142730][ T4369] device veth1_vlan left promiscuous mode [ 363.144432][ T4369] device veth0_vlan left promiscuous mode [ 363.148117][T10269] loop4: detected capacity change from 0 to 1024 [ 363.256987][T10269] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 363.862332][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 363.865821][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 364.197103][T10274] loop4: detected capacity change from 0 to 32768 [ 364.216858][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 364.270634][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 364.287036][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.303759][T10274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1114 (10274) [ 364.341531][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.348481][T10274] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 364.354244][T10274] BTRFS info (device loop4): using free space tree [ 364.360260][T10274] BTRFS info (device loop4): has skinny extents [ 364.501956][T10274] BTRFS info (device loop4): enabling ssd optimizations [ 364.748314][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 364.774413][ T4369] bond0 (unregistering): Released all slaves [ 364.884991][T10299] loop1: detected capacity change from 0 to 32768 [ 365.032156][T10299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1116 (10299) [ 365.085657][T10299] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 365.093202][T10299] BTRFS info (device loop1): setting nodatacow, compression disabled [ 365.095864][T10299] BTRFS info (device loop1): turning on flush-on-commit [ 365.098332][T10299] BTRFS info (device loop1): enabling auto defrag [ 365.108240][T10299] BTRFS info (device loop1): max_inline at 0 [ 365.109871][T10299] BTRFS info (device loop1): using free space tree [ 365.111675][T10299] BTRFS info (device loop1): has skinny extents [ 365.148547][T10143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.154167][T10311] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 365.311937][T10143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.350007][T10143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.382785][T10143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.589242][T10299] BTRFS info (device loop1): enabling ssd optimizations [ 365.668537][T10143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.735449][T10340] ebt_among: src integrity fail: 300 [ 365.785199][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.795115][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 365.798488][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 366.032916][T10143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.035875][T10143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.188647][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.191208][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.193618][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.196271][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.222792][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.224770][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.227194][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.243395][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.245941][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.247857][ T1960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.255574][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.260065][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.263012][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.267313][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.271263][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.274862][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.277756][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.282158][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.285096][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.292797][ T1960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.461130][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.463742][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.466460][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.515344][T10354] loop2: detected capacity change from 0 to 512 [ 366.534390][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.537300][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.539634][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.593290][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.596156][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.664398][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.667205][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.670406][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.672864][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.689857][T10143] device veth0_vlan entered promiscuous mode [ 366.714528][T10143] device veth1_vlan entered promiscuous mode [ 366.768770][T10354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 366.810788][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.820029][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.823005][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.828818][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.836986][T10143] device veth0_macvtap entered promiscuous mode [ 367.211637][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.496738][T10143] device veth1_macvtap entered promiscuous mode [ 367.561855][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.564764][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.567438][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.660880][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.663602][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.666368][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.689012][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.702232][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.748487][T10143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.752575][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.755514][ T4012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.800424][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.803330][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.805952][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.826945][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.845103][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.849465][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.855228][T10143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.863589][T10143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.874072][T10143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.878420][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.881430][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.897824][T10143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.904155][T10143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.907860][T10143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.914290][T10143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.089446][ T7399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.097577][ T7399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.114867][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.176609][ T7399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.180567][ T7399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.194135][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.791938][T10377] loop2: detected capacity change from 0 to 32768 [ 368.852035][T10377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1121 (10377) [ 368.865952][T10377] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 368.878998][T10377] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 368.881845][T10377] BTRFS info (device loop2): setting nodatasum [ 368.884206][T10377] BTRFS info (device loop2): max_inline at 21 [ 368.885843][T10377] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 368.907268][T10377] BTRFS info (device loop2): turning on flush-on-commit [ 368.926649][T10377] BTRFS info (device loop2): allowing degraded mounts [ 368.932830][T10377] BTRFS info (device loop2): using free space tree [ 368.934762][T10377] BTRFS info (device loop2): has skinny extents [ 369.168157][T10377] BTRFS info (device loop2): enabling ssd optimizations [ 369.517131][T10387] loop3: detected capacity change from 0 to 32768 [ 369.554880][T10387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1110 (10387) [ 369.585218][T10387] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 369.587561][T10387] BTRFS info (device loop3): using free space tree [ 369.598198][T10387] BTRFS info (device loop3): has skinny extents [ 369.822415][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 369.825529][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 369.855979][T10387] BTRFS info (device loop3): enabling ssd optimizations [ 369.922098][T10443] BTRFS error (device loop3): unrecognized mount option 'fd=0xffffffffffffffff' [ 372.635166][T10457] loop2: detected capacity change from 0 to 262144 [ 372.688882][T10465] loop3: detected capacity change from 0 to 512 [ 372.731997][T10457] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.1127 (10457) [ 372.775902][T10457] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 372.778742][T10457] BTRFS info (device loop2): enabling ssd optimizations [ 372.780540][T10457] BTRFS info (device loop2): enabling auto defrag [ 372.782264][T10457] BTRFS info (device loop2): using free space tree [ 372.783934][T10457] BTRFS info (device loop2): has skinny extents [ 372.785461][T10457] BTRFS info (device loop2): flagging fs with big metadata feature [ 372.809536][T10465] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1132: invalid indirect mapped block 256 (level 2) [ 372.814167][T10465] EXT4-fs (loop3): 2 truncates cleaned up [ 372.815707][T10465] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 373.066668][T10488] netlink: 'syz.4.1135': attribute type 7 has an invalid length. [ 373.145374][ T4194] BTRFS warning (device loop2): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 373.164148][T10457] repair_io_failure: 2 callbacks suppressed [ 373.164168][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040) [ 373.170213][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048) [ 373.173239][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056) [ 373.176594][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064) [ 373.180804][ T4194] BTRFS warning (device loop2): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 373.202197][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 30670848 (dev /dev/loop2 sector 76288) [ 373.205520][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 30674944 (dev /dev/loop2 sector 76296) [ 373.213090][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 30679040 (dev /dev/loop2 sector 76304) [ 373.216668][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 30683136 (dev /dev/loop2 sector 76312) [ 373.255241][ T4191] BTRFS warning (device loop2): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 373.268230][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 30457856 (dev /dev/loop2 sector 75872) [ 373.271966][T10457] BTRFS info (device loop2): read error corrected: ino 0 off 30461952 (dev /dev/loop2 sector 75880) [ 373.602033][T10482] loop3: detected capacity change from 0 to 32768 [ 373.645234][T10482] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1133 (10482) [ 373.757998][T10482] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 373.760307][T10482] BTRFS info (device loop3): using free space tree [ 373.773353][T10482] BTRFS info (device loop3): has skinny extents [ 374.012879][T10503] loop4: detected capacity change from 0 to 32768 [ 374.061824][T10503] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1139 (10503) [ 374.093344][T10491] loop1: detected capacity change from 0 to 32768 [ 374.135354][T10491] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1136 (10491) [ 374.177660][T10482] BTRFS info (device loop3): enabling ssd optimizations [ 374.593004][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 374.599097][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 375.394077][T10536] loop1: detected capacity change from 0 to 4096 [ 375.433177][T10536] ntfs: (device loop1): parse_ntfs_boot_sector(): MFTMirr LCN (31, 0x1f) is beyond end of volume. Weird. [ 375.436395][T10536] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 376.711297][T10558] loop1: detected capacity change from 0 to 8 [ 376.843022][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.845030][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.960942][T10558] loop1: detected capacity change from 0 to 512 [ 377.017204][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 377.020720][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 377.413826][T10560] loop2: detected capacity change from 0 to 32768 [ 377.520509][T10560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1153 (10560) [ 377.525792][T10560] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 377.528673][T10560] BTRFS info (device loop2): using free space tree [ 377.530398][T10560] BTRFS info (device loop2): has skinny extents [ 377.570818][T10568] loop4: detected capacity change from 0 to 128 [ 377.819164][T10560] BTRFS info (device loop2): enabling ssd optimizations [ 377.936168][T10593] BTRFS error (device loop2): unrecognized mount option 'fd=0xffffffffffffffff' [ 378.229092][T10594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.250961][ T4109] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4109) [ 378.375703][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 378.386896][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 378.477361][T10567] loop1: detected capacity change from 0 to 32768 [ 379.301366][T10612] loop3: detected capacity change from 0 to 4096 [ 379.428981][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 380.276628][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 380.279812][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 380.539491][T10637] loop2: detected capacity change from 0 to 512 [ 380.587076][T10637] EXT4-fs (loop2): 1 orphan inode deleted [ 380.589518][T10637] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 380.735271][T10639] loop3: detected capacity change from 0 to 256 [ 380.958012][T10645] loop4: detected capacity change from 0 to 1024 [ 381.076757][T10620] loop1: detected capacity change from 0 to 32768 [ 381.293076][T10645] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 381.485901][T10645] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noload,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 382.894066][T10664] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 383.273053][T10676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1181'. [ 383.369103][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 383.376966][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 384.014654][T10656] loop2: detected capacity change from 0 to 32768 [ 384.248459][T10656] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 384.250708][T10656] BTRFS info (device loop2): using free space tree [ 384.252393][T10656] BTRFS info (device loop2): has skinny extents [ 384.304543][T10662] loop3: detected capacity change from 0 to 32768 [ 384.506879][T10656] BTRFS info (device loop2): enabling ssd optimizations [ 384.532027][T10662] XFS (loop3): Mounting V5 Filesystem [ 384.697606][T10662] XFS (loop3): Ending clean mount [ 384.718608][T10662] XFS (loop3): Quotacheck needed: Please wait. [ 384.793129][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 384.799050][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 384.809761][T10720] BTRFS error (device loop2): unrecognized mount option 'fd=0xffffffffffffffff' [ 385.548582][T10662] XFS (loop3): Quotacheck: Done. [ 386.095260][T10143] XFS (loop3): Unmounting Filesystem [ 387.646863][T10748] device batadv_slave_1 entered promiscuous mode [ 387.921643][T10747] device batadv_slave_1 left promiscuous mode [ 388.201566][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 388.208078][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 388.989598][T10759] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 390.331431][T10775] loop2: detected capacity change from 0 to 1764 [ 390.498132][T10763] loop3: detected capacity change from 0 to 32768 [ 390.573277][T10763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1196 (10763) [ 390.612762][T10763] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 390.615209][T10763] BTRFS info (device loop3): using free space tree [ 390.617012][T10763] BTRFS info (device loop3): has skinny extents [ 390.782381][T10799] FAULT_INJECTION: forcing a failure. [ 390.782381][T10799] name failslab, interval 1, probability 0, space 0, times 0 [ 390.791929][T10799] CPU: 0 PID: 10799 Comm: syz.0.1204 Not tainted 5.15.164-syzkaller #0 [ 390.794019][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 390.796713][T10799] Call trace: [ 390.797574][T10799] dump_backtrace+0x0/0x530 [ 390.798782][T10799] show_stack+0x2c/0x3c [ 390.799911][T10799] dump_stack_lvl+0x108/0x170 [ 390.801310][T10799] dump_stack+0x1c/0x58 [ 390.802419][T10799] should_fail+0x3b8/0x514 [ 390.803579][T10799] __should_failslab+0xbc/0x110 [ 390.804868][T10799] should_failslab+0x10/0x28 [ 390.806141][T10799] slab_pre_alloc_hook+0x64/0xe8 [ 390.807501][T10799] kmem_cache_alloc+0x98/0x45c [ 390.808871][T10799] anon_vma_clone+0x9c/0x468 [ 390.810109][T10799] __split_vma+0x198/0x444 [ 390.811376][T10799] __do_munmap+0x344/0x1544 [ 390.812590][T10799] mmap_region+0x6d4/0x12f0 [ 390.813789][T10799] do_mmap+0x6c0/0xcec [ 390.814902][T10799] vm_mmap_pgoff+0x1a4/0x2b4 [ 390.816160][T10799] ksys_mmap_pgoff+0x458/0x668 [ 390.817442][T10799] __arm64_sys_mmap+0xf8/0x110 [ 390.818743][T10799] invoke_syscall+0x98/0x2b8 [ 390.819462][T10773] loop1: detected capacity change from 0 to 32768 [ 390.819981][T10799] el0_svc_common+0x138/0x258 [ 390.822984][T10799] do_el0_svc+0x58/0x14c [ 390.824138][T10799] el0_svc+0x7c/0x1f0 [ 390.825243][T10799] el0t_64_sync_handler+0x84/0xe4 [ 390.826674][T10799] el0t_64_sync+0x1a0/0x1a4 [ 390.874323][T10763] BTRFS info (device loop3): enabling ssd optimizations [ 390.894003][T10773] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1200 (10773) [ 391.180737][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 391.186840][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 391.198226][T10806] BTRFS error (device loop3): unrecognized mount option 'fd=0xffffffffffffffff' [ 391.779001][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 391.794774][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 394.268170][ T25] Bluetooth: hci5: command 0x0406 tx timeout [ 394.284997][T10834] loop1: detected capacity change from 0 to 32768 [ 394.322371][T10834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1213 (10834) [ 394.377412][T10834] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 394.379967][T10834] BTRFS info (device loop1): using free space tree [ 394.383705][T10834] BTRFS info (device loop1): has skinny extents [ 395.238829][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 395.528224][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 395.668295][ T7] usb 1-1: descriptor type invalid, skip [ 395.688678][T10834] BTRFS info (device loop1): enabling ssd optimizations [ 396.578116][ T7] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 396.580263][ T7] usb 1-1: config 1 has no interface number 0 [ 396.581835][ T7] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.788289][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 396.790769][ T7] usb 1-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 396.792873][ T7] usb 1-1: Product: syz [ 396.793948][ T7] usb 1-1: Manufacturer: syz [ 396.795167][ T7] usb 1-1: SerialNumber: syz [ 397.326370][T10872] loop4: detected capacity change from 0 to 32768 [ 397.517640][T10887] loop3: detected capacity change from 0 to 512 [ 397.538317][T10882] tipc: Started in network mode [ 397.540051][T10882] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 397.542122][T10882] tipc: Enabled bearer , priority 10 [ 397.557501][T10883] tipc: Resetting bearer [ 397.598990][T10872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1218 (10872) [ 397.651692][T10872] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 397.654090][T10872] BTRFS info (device loop4): using free space tree [ 397.655749][T10872] BTRFS info (device loop4): has skinny extents [ 397.666116][T10887] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 397.687224][T10883] tipc: Disabling bearer [ 397.862633][T10872] BTRFS info (device loop4): enabling ssd optimizations [ 398.164611][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 398.171503][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 398.182740][T10920] BTRFS error (device loop4): unrecognized mount option 'fd=0xffffffffffffffff' [ 398.656356][ T7] usb 1-1: USB disconnect, device number 3 [ 398.859346][T10935] udc-core: couldn't find an available UDC or it's busy [ 398.885670][T10935] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 398.918827][T10938] udc-core: couldn't find an available UDC or it's busy [ 398.920684][T10938] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 398.954165][T10935] udc-core: couldn't find an available UDC or it's busy [ 398.956111][T10935] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 398.968182][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 398.998569][T10942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.000634][T10942] IPv6: NLM_F_CREATE should be set when creating new route [ 399.013411][T10942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.756197][T10965] udc-core: couldn't find an available UDC or it's busy [ 400.758174][T10965] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 401.057563][T10957] loop3: detected capacity change from 0 to 40427 [ 401.153609][T10957] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 401.155657][T10957] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 401.214041][T10957] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 401.309517][T10957] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 401.311500][T10957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 401.318967][T10971] udc-core: couldn't find an available UDC or it's busy [ 401.320938][T10971] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 401.410533][T10957] attempt to access beyond end of device [ 401.410533][T10957] loop3: rw=10241, want=53256, limit=40427 [ 401.415225][T10957] attempt to access beyond end of device [ 401.415225][T10957] loop3: rw=2049, want=53264, limit=40427 [ 401.440728][T10957] attempt to access beyond end of device [ 401.440728][T10957] loop3: rw=2049, want=53328, limit=40427 [ 401.467372][T10143] attempt to access beyond end of device [ 401.467372][T10143] loop3: rw=2049, want=45104, limit=40427 [ 401.676462][T10974] udc-core: couldn't find an available UDC or it's busy [ 401.690427][T10974] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 401.749798][T10977] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1249'. [ 401.752114][T10977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1249'. [ 401.868899][ T4515] Bluetooth: hci6: command 0x1003 tx timeout [ 401.872488][ T4024] Bluetooth: hci6: sending frame failed (-49) [ 401.923778][T10984] udc-core: couldn't find an available UDC or it's busy [ 401.941790][T10984] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 403.003342][T10988] udc-core: couldn't find an available UDC or it's busy [ 403.005375][T10988] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 403.016385][T10988] udc-core: couldn't find an available UDC or it's busy [ 403.018828][T10988] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 403.375540][T10997] device pim6reg1 entered promiscuous mode [ 404.306717][ T4515] Bluetooth: hci6: command 0x1001 tx timeout [ 404.316019][ T4024] Bluetooth: hci6: sending frame failed (-49) [ 404.480225][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 404.550463][T11002] device syzkaller0 entered promiscuous mode [ 404.557322][T11004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.559551][T11004] IPv6: NLM_F_CREATE should be set when creating new route [ 404.562791][T11008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.640047][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 404.808310][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.810669][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.840483][T11011] device bridge_slave_1 left promiscuous mode [ 404.845745][T11011] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.847691][T11019] udc-core: couldn't find an available UDC or it's busy [ 404.855350][T11019] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 404.895793][T11011] device bridge_slave_0 left promiscuous mode [ 404.898184][T11011] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.424699][T11024] udc-core: couldn't find an available UDC or it's busy [ 405.426742][T11024] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 405.508794][T11022] loop4: detected capacity change from 0 to 40427 [ 405.571356][T11022] F2FS-fs (loop4): invalid crc value [ 405.607085][T11022] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.617595][T11028] udc-core: couldn't find an available UDC or it's busy [ 405.620084][T11028] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 405.639355][ T27] INFO: task syz.0.779:8515 blocked for more than 143 seconds. [ 405.641540][ T27] Not tainted 5.15.164-syzkaller #0 [ 405.643716][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.648840][ T27] task:syz.0.779 state:D stack: 0 pid: 8515 ppid: 4028 flags:0x00000001 [ 405.654176][ T27] Call trace: [ 405.655149][ T27] __switch_to+0x308/0x5e8 [ 405.656566][T11022] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.658752][ T27] __schedule+0xf10/0x1e48 [ 405.658788][ T27] schedule+0x11c/0x1c8 [ 405.658803][ T27] d_wait_lookup+0x1a0/0x27c [ 405.664922][ T27] d_alloc_parallel+0x9e0/0x11bc [ 405.667092][ T27] __lookup_slow+0x108/0x388 [ 405.671130][ T27] lookup_slow+0x60/0x84 [ 405.672390][ T27] walk_component+0x394/0x4cc [ 405.674886][ T27] path_lookupat+0x13c/0x3d0 [ 405.678366][ T27] filename_lookup+0x1c4/0x4c8 [ 405.680996][ T27] user_path_at_empty+0x5c/0x1a4 [ 405.683684][ T27] __arm64_sys_mount+0x4dc/0x5e0 [ 405.686606][ T27] invoke_syscall+0x98/0x2b8 [ 405.688644][T11022] attempt to access beyond end of device [ 405.688644][T11022] loop4: rw=524288, want=45072, limit=40427 [ 405.690361][ T27] el0_svc_common+0x138/0x258 [ 405.694597][ T27] do_el0_svc+0x58/0x14c [ 405.697169][ T27] el0_svc+0x7c/0x1f0 [ 405.700060][ T27] el0t_64_sync_handler+0x84/0xe4 [ 405.702849][ T27] el0t_64_sync+0x1a0/0x1a4 [ 405.705410][ T27] [ 405.705410][ T27] Showing all locks held in the system: [ 405.710076][ T27] 1 lock held by khungtaskd/27: [ 405.712715][ T27] #0: ffff800014c91660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 405.718455][ T27] 2 locks held by getty/3775: [ 405.721243][ T27] #0: ffff0000d412a098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 405.726514][ T27] #1: ffff80001a45e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 405.733000][ T27] 1 lock held by syz-executor/4022: [ 405.735740][ T27] #0: ffff800014c95c68 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x660 [ 405.741326][ T27] 3 locks held by kworker/u5:2/4026: [ 405.744026][ T27] #0: ffff0000e522c138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 405.753087][ T27] #1: ffff80001cb57c00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 405.759761][ T27] #2: ffff0000da204ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xb8/0x104c [ 405.766210][ T27] 2 locks held by kworker/1:10/4515: [ 405.770135][ T27] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 405.776533][ T27] #1: ffff80001d9c7c00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 405.780353][ T27] 3 locks held by kworker/1:17/4837: [ 405.781918][ T27] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 405.785002][ T27] #1: ffff80001f067c00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 405.788653][ T27] #2: ffff800014c95b70 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x54/0x4b0 [ 405.791657][ T27] 1 lock held by syz.0.779/8515: [ 405.793118][ T27] #0: ffff0000e6770188 (&type->i_mutex_dir_key#22){.+.+}-{3:3}, at: lookup_slow+0x50/0x84 [ 405.796117][ T27] 1 lock held by syz.0.779/8521: [ 405.797579][ T27] 2 locks held by syz.2.1243/10954: [ 405.799671][ T27] #0: ffff0000d34e0098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x40/0x50 [ 405.802570][ T27] #1: ffff0000e3ddf098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: ldsem_down_write_nested+0x48/0x5c [ 405.805547][ T27] [ 405.806642][ T27] ============================================= [ 405.806642][ T27] [ 405.809668][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 405.811518][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 405.813615][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 405.816317][ T27] Call trace: [ 405.817204][ T27] dump_backtrace+0x0/0x530 [ 405.818435][ T27] show_stack+0x2c/0x3c [ 405.819546][ T27] dump_stack_lvl+0x108/0x170 [ 405.820790][ T27] dump_stack+0x1c/0x58 [ 405.821900][ T27] panic+0x304/0x8bc [ 405.822960][ T27] hung_task_panic+0x0/0x2c [ 405.824164][ T27] kthread+0x37c/0x45c [ 405.825244][ T27] ret_from_fork+0x10/0x20 [ 405.826436][ T27] SMP: stopping secondary CPUs [ 405.827730][ T27] Kernel Offset: disabled [ 405.828898][ T27] CPU features: 0x0,000081c1,21302e40 [ 405.830321][ T27] Memory Limit: none [ 406.378214][ T27] Rebooting in 86400 seconds..