last executing test programs: 1m31.975435656s ago: executing program 1 (id=943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x178, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xcd0}]}}]}, @IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x94, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x200, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x52, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m31.907068887s ago: executing program 1 (id=945): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x190, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x8}]}}]}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x94, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x200, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x52, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m31.748549609s ago: executing program 1 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffdc0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r7, &(0x7f0000000780)}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000600)={0x0, 0x36, &(0x7f00000005c0)={&(0x7f00000000c0)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x850) 1m30.677763985s ago: executing program 1 (id=951): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x8000, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x51a, 0x383e, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m30.39235493s ago: executing program 1 (id=953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x158, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xcd0}, {0x8, 0x1d, 0x0, 0x0, 0x8}]}}]}, @IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x94, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x200, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x52, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m29.452950254s ago: executing program 1 (id=961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x17c, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x8}]}}]}, @IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x94, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x200, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x52, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m29.226642348s ago: executing program 32 (id=961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x17c, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x8}]}}]}, @IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x94, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x200, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x52, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 30.216072209s ago: executing program 5 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x64) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) write$evdev(r0, &(0x7f00000012c0)=[{{}, 0x4, 0x8, 0x3965}, {{0x0, 0x2710}, 0x17, 0x0, 0xb}], 0x30) 29.740837356s ago: executing program 5 (id=1265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000002480)=@bridge_getneigh={0x18c, 0x1e, 0x100, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20c00, 0x412}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'macvlan0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xf}, {0x8, 0x21, 0x0, 0x0, 0x7fffffff}, {0x8, 0xd}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xcd0}, {0x8, 0x1d, 0x0, 0x0, 0x8}]}}]}, @IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbff}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_OKEY={0x8, 0x5, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8004}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x44c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3193}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x94, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x3, 0x6, 0x4, 0x5, {0x0, 0x2, 0xfffa, 0xc, 0x4, 0xb}, {0xf7, 0x1, 0xd9, 0x0, 0x80c, 0x8}, 0x1c000, 0x200, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xd, 0xc5, 0x1, {0x5, 0x2, 0x7fff, 0x98ca, 0x38e, 0x80000000}, {0x9, 0x2, 0x5, 0x3, 0x4, 0x8}, 0x6, 0x5, 0x8}}]}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_tunnel_key={0x120, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0xc0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xd8, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x52, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 28.839487628s ago: executing program 5 (id=1270): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x46, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff6f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0xfffffffe) rt_sigprocmask(0x0, &(0x7f0000000140)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r1 = gettid() prlimit64(0x0, 0x4, &(0x7f0000000000)={0x2, 0x100000000004}, 0x0) tkill(r1, 0x12) r2 = gettid() io_uring_setup(0x557c, &(0x7f0000000380)={0x0, 0xf33c, 0x4, 0x0, 0x3bd}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r3, 0x0, 0x4, 0x0) tkill(r2, 0x15) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ftruncate(r6, 0x8979) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000180)={{&(0x7f000013d000/0x1000)=nil, 0x1000}, 0x1}) 27.691459745s ago: executing program 5 (id=1273): socket$inet6(0xa, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0xee02ad183fcb5e6b) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a9f4600000000000000000200000028000480240001800b0001007470726f7879000014000280080003400000000c08000140000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000aa481aa16065962ba766cc7cd214e01c1ae06560576e57e31624548865fa25ed766aa586b4b2bc0846c9d921420512b546f97d9d2dffc4c9e9cd11034bc8a3a7cfaddc61b5d9e1bc1748267044d6e288e85049ae964249d950218173ff6e09911b473c908a1952eb5eb226c62431d706fcdc15cea7db42a61ea5c8d51ae648210da661b8f3d60c3a5d2a7baa71b04adcdf4ca7892"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@errors_remount}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file3\x00', &(0x7f00000001c0)='ext4\x00', 0x400, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1002) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) r3 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x420f, r3) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31c7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = io_uring_setup(0x179b, &(0x7f0000000080)={0x0, 0xfe3e, 0x800, 0x1, 0xd3}) io_uring_setup(0x2e32, &(0x7f0000000380)={0x0, 0x93ea, 0x2, 0x0, 0xcb, 0x0, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xb}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x24000000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x86, 0x7, 0x1}) 27.240889571s ago: executing program 5 (id=1277): r0 = socket$netlink(0x10, 0x3, 0x2) write(r0, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 26.458009542s ago: executing program 5 (id=1284): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@gid}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@uid}, {}, {@gid_ignore}, {@anchor}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000100)={'sit0\x00', 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='io\x00') capget(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f0000000200)={0x9, 0x3ff, 0x4, 0x8000, 0x5, 0x4}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r2, 0x2b) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x44040) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x4000000) 26.367476083s ago: executing program 33 (id=1284): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@gid}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@uid}, {}, {@gid_ignore}, {@anchor}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000100)={'sit0\x00', 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='io\x00') capget(&(0x7f00000001c0)={0x19980330, r4}, &(0x7f0000000200)={0x9, 0x3ff, 0x4, 0x8000, 0x5, 0x4}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r2, 0x2b) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x44040) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x4000000) 2.181445309s ago: executing program 4 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x15) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$9p_virtio(0x0, &(0x7f0000002340)='./file0\x00', 0x0, 0x20000, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 2.10640396s ago: executing program 2 (id=1418): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b06, 0x0) 2.1057405s ago: executing program 4 (id=1419): write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099", 0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x4, 0xffffffff, 0x1, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 1.720203775s ago: executing program 6 (id=1427): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.570640567s ago: executing program 2 (id=1428): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) 1.502761818s ago: executing program 2 (id=1429): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.345486471s ago: executing program 2 (id=1430): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000022c0)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xc0}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.298043932s ago: executing program 4 (id=1431): recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000400)=@xdp, 0x80, 0x0}, 0x9}], 0x1, 0x21, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.286897492s ago: executing program 2 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 989.457216ms ago: executing program 2 (id=1433): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) 889.040467ms ago: executing program 3 (id=1435): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="056070141a0c"], 0x7) socket$packet(0x11, 0x3, 0x300) 801.371208ms ago: executing program 3 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}, 0x1, 0x0, 0x0, 0x200000d0}, 0x80) 761.771649ms ago: executing program 3 (id=1438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c0c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 730.289969ms ago: executing program 3 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 613.785211ms ago: executing program 6 (id=1440): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) 588.278811ms ago: executing program 6 (id=1441): syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0xb, 0x8}, {0x2, 0x0, 0x6, 0x7fff}}]}}, 0x15) 552.403612ms ago: executing program 6 (id=1442): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 485.696603ms ago: executing program 6 (id=1443): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/159) 485.358893ms ago: executing program 3 (id=1444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r6, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 480.733543ms ago: executing program 0 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x88, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @random=0x1a8, 0x1, @void, @val, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @void, @val={0x25, 0x3, {0x0, 0x24, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0xff, 0x1b, 0x401}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80000000}, @NL80211_ATTR_PBSS={0x4}]}, 0x88}}, 0x4040870) 401.880434ms ago: executing program 4 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000070605000000000000000000050000030500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x48000) 333.726615ms ago: executing program 0 (id=1447): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 266.156386ms ago: executing program 0 (id=1448): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 183.346737ms ago: executing program 0 (id=1449): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c0c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 183.119797ms ago: executing program 4 (id=1450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_num_supported_iac={{0x9}, {0x1, 0x8f}}}}, 0x8) 95.410929ms ago: executing program 0 (id=1451): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000008f"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 25.6017ms ago: executing program 4 (id=1452): syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "7f84e5", 0x20, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, 0x5, 0x2, 0x3, 0x9784, 0xfffa, 0x2, 0x4e22, 0x4e21}, 0x4, 0x3}}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 23.29846ms ago: executing program 0 (id=1453): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0daaaaaaaaaa121002c1ffffffffffffffff00"], 0x1d) 1.54187ms ago: executing program 3 (id=1454): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x5eae) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x88) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x37, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1455): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) kernel console output (not intermixed with test programs): (0x1) [ 164.255453][ T7293] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.299014][ T7304] XFS (loop4): Quotacheck: Done. [ 164.362159][ T4040] XFS (loop4): Unmounting Filesystem [ 164.653537][ T7362] loop1: detected capacity change from 0 to 512 [ 164.714688][ T7328] loop3: detected capacity change from 0 to 32768 [ 164.750330][ T7362] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.845: casefold flag without casefold feature [ 164.755941][ T7362] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.845: couldn't read orphan inode 15 (err -117) [ 164.759310][ T7362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.803748][ T7328] jfs: Unrecognized mount option "i" or missing value [ 164.948496][ T7333] loop0: detected capacity change from 0 to 32768 [ 165.101124][ T7333] XFS (loop0): Mounting V5 Filesystem [ 165.286347][ T7388] FAULT_INJECTION: forcing a failure. [ 165.286347][ T7388] name failslab, interval 1, probability 0, space 0, times 0 [ 165.289890][ T7388] CPU: 1 PID: 7388 Comm: syz.1.852 Not tainted 5.15.181-syzkaller #0 [ 165.292074][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.294775][ T7388] Call trace: [ 165.295648][ T7388] dump_backtrace+0x0/0x43c [ 165.296929][ T7388] show_stack+0x2c/0x3c [ 165.298070][ T7388] __dump_stack+0x30/0x40 [ 165.299287][ T7388] dump_stack_lvl+0xf8/0x160 [ 165.300571][ T7388] dump_stack+0x1c/0x5c [ 165.301744][ T7388] should_fail+0x3c0/0x51c [ 165.302939][ T7388] __should_failslab+0xbc/0x10c [ 165.304269][ T7388] should_failslab+0x10/0x28 [ 165.305518][ T7388] slab_pre_alloc_hook+0x64/0xec [ 165.306848][ T7388] kmem_cache_alloc+0x94/0x3e4 [ 165.308161][ T7388] skb_clone+0x178/0x308 [ 165.309313][ T7388] __netlink_deliver_tap+0x364/0x710 [ 165.310749][ T7388] netlink_deliver_tap+0x1ac/0x1b0 [ 165.312164][ T7388] netlink_dump+0x674/0xab4 [ 165.313437][ T7388] netlink_recvmsg+0x4cc/0xac4 [ 165.314720][ T7388] ____sys_recvmsg+0x254/0x794 [ 165.316061][ T7388] ___sys_recvmsg+0x1ac/0x220 [ 165.317313][ T7388] do_recvmmsg+0x2ac/0x85c [ 165.318488][ T7388] __arm64_sys_recvmmsg+0x19c/0x238 [ 165.319887][ T7388] invoke_syscall+0x98/0x2b8 [ 165.321149][ T7388] el0_svc_common+0x138/0x258 [ 165.322469][ T7388] do_el0_svc+0x58/0x14c [ 165.323612][ T7388] el0_svc+0x78/0x1e0 [ 165.324700][ T7388] el0t_64_sync_handler+0xcc/0xe4 [ 165.326075][ T7388] el0t_64_sync+0x1a0/0x1a4 [ 165.344132][ T7333] XFS (loop0): Ending clean mount [ 165.346882][ T7333] XFS (loop0): Quotacheck needed: Please wait. [ 165.379925][ T7333] XFS (loop0): Quotacheck: Done. [ 165.393326][ T7390] Injecting memory failure for pfn 0x12f3a7 at process virtual address 0x20000000 [ 165.408746][ T7390] Memory failure: 0x12f3a7: keeping poisoned page in swap cache [ 165.410902][ T7390] Memory failure: 0x12f3a7: recovery action for clean swapcache page: Recovered [ 165.449542][ T7390] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20001000 [ 165.450891][ T7399] loop1: detected capacity change from 0 to 256 [ 165.452075][ T7390] Memory failure: 0x1b1f88: already hardware poisoned [ 165.461882][ T4035] XFS (loop0): Unmounting Filesystem [ 165.481676][ T7398] loop4: detected capacity change from 0 to 512 [ 165.553310][ T7398] EXT4-fs (loop4): Unrecognized mount option "obj_role=*[+" or missing value [ 165.567466][ T7402] loop3: detected capacity change from 0 to 4096 [ 165.745836][ T7402] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.747776][ T7402] EXT4-fs (loop3): Ignoring removed orlov option [ 165.771096][ T7402] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,nolazytime,orlov,data_err=abort,errors=remount-ro,nobarrier,quota,. Quota mode: writeback. [ 166.321261][ T7423] loop0: detected capacity change from 0 to 4096 [ 166.339260][ T7398] loop4: detected capacity change from 0 to 32768 [ 166.359733][ T7410] loop2: detected capacity change from 0 to 32768 [ 166.397076][ T7423] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 166.399696][ T7423] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 166.401038][ T7410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.861 (7410) [ 166.427398][ T7414] loop1: detected capacity change from 0 to 32768 [ 166.463674][ T7414] XFS: ikeep mount option is deprecated. [ 166.468945][ T7410] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 166.471566][ T7410] BTRFS info (device loop2): setting nodatacow, compression disabled [ 166.476882][ T7410] BTRFS info (device loop2): setting datacow [ 166.476960][ T7398] XFS (loop4): Mounting V5 Filesystem [ 166.480675][ T7410] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.499152][ T7410] BTRFS info (device loop2): use zstd compression, level 3 [ 166.501162][ T7410] BTRFS info (device loop2): using free space tree [ 166.525252][ T7410] BTRFS info (device loop2): has skinny extents [ 166.567158][ T7414] XFS (loop1): Mounting V5 Filesystem [ 166.617330][ T7421] loop3: detected capacity change from 0 to 32768 [ 166.639276][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 166.651138][ T7414] XFS (loop1): Ending clean mount [ 166.656305][ T7421] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.863 (7421) [ 166.668356][ T7414] XFS (loop1): Quotacheck needed: Please wait. [ 166.680326][ T7398] XFS (loop4): Ending clean mount [ 166.690565][ T7398] XFS (loop4): Quotacheck needed: Please wait. [ 166.741282][ T7398] XFS (loop4): Quotacheck: Done. [ 166.778858][ T7414] XFS (loop1): Quotacheck: Done. [ 166.847604][ T4030] XFS (loop1): Unmounting Filesystem [ 166.883769][ T4040] XFS (loop4): Unmounting Filesystem [ 166.972022][ T7410] BTRFS info (device loop2): enabling ssd optimizations [ 167.666571][ T7410] FAULT_INJECTION: forcing a failure. [ 167.666571][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 167.672938][ T7410] CPU: 1 PID: 7410 Comm: syz.2.861 Not tainted 5.15.181-syzkaller #0 [ 167.675261][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 167.678151][ T7410] Call trace: [ 167.679089][ T7410] dump_backtrace+0x0/0x43c [ 167.680416][ T7410] show_stack+0x2c/0x3c [ 167.681647][ T7410] __dump_stack+0x30/0x40 [ 167.682846][ T7410] dump_stack_lvl+0xf8/0x160 [ 167.684160][ T7410] dump_stack+0x1c/0x5c [ 167.685338][ T7410] should_fail+0x3c0/0x51c [ 167.686659][ T7410] __should_failslab+0xbc/0x10c [ 167.687989][ T7410] should_failslab+0x10/0x28 [ 167.689356][ T7410] slab_pre_alloc_hook+0x64/0xec [ 167.690707][ T7410] kmem_cache_alloc+0x94/0x3e4 [ 167.691989][ T7410] btrfs_alloc_path+0x5c/0x68 [ 167.693336][ T7410] btrfs_getxattr+0x5c/0x248 [ 167.694647][ T7410] btrfs_xattr_handler_get+0x50/0x68 [ 167.696115][ T7410] __vfs_getxattr+0x34c/0x368 [ 167.697409][ T7410] cap_inode_need_killpriv+0x50/0x78 [ 167.698923][ T7410] security_inode_need_killpriv+0x6c/0xa4 [ 167.700522][ T7410] file_remove_privs+0x1b4/0x4d8 [ 167.701930][ T7410] btrfs_write_check+0x240/0x664 [ 167.703360][ T7410] btrfs_buffered_write+0x188/0xccc [ 167.704822][ T7410] btrfs_file_write_iter+0x19c/0xbe8 [ 167.706354][ T7410] vfs_write+0x7c8/0xa2c [ 167.707571][ T7410] ksys_write+0x120/0x210 [ 167.708813][ T7410] __arm64_sys_write+0x7c/0x90 [ 167.710183][ T7410] invoke_syscall+0x98/0x2b8 [ 167.711523][ T7410] el0_svc_common+0x138/0x258 [ 167.712864][ T7410] do_el0_svc+0x58/0x14c [ 167.714074][ T7410] el0_svc+0x78/0x1e0 [ 167.715203][ T7410] el0t_64_sync_handler+0xcc/0xe4 [ 167.716665][ T7410] el0t_64_sync+0x1a0/0x1a4 [ 167.836394][ T4111] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4111) [ 168.312620][ T7496] loop4: detected capacity change from 0 to 256 [ 168.566426][ T7499] Injecting memory failure for pfn 0x12f495 at process virtual address 0x20000000 [ 168.624294][ T7499] Memory failure: 0x12f495: keeping poisoned page in swap cache [ 168.626613][ T7499] Memory failure: 0x12f495: recovery action for clean swapcache page: Recovered [ 168.629052][ T7499] Injecting memory failure for pfn 0x12f494 at process virtual address 0x20001000 [ 168.665573][ T7499] Memory failure: 0x12f494: keeping poisoned page in swap cache [ 168.667864][ T7499] Memory failure: 0x12f494: recovery action for clean swapcache page: Recovered [ 168.695957][ T7499] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 168.698596][ T7499] Memory failure: 0x1b1f88: already hardware poisoned [ 168.799659][ T7483] loop0: detected capacity change from 0 to 32768 [ 168.879099][ T7487] loop2: detected capacity change from 0 to 32768 [ 168.923814][ T7487] XFS (loop2): sunit and swidth must be specified together [ 168.936899][ T7494] loop3: detected capacity change from 0 to 32768 [ 168.981518][ T7494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.880 (7494) [ 169.007419][ T7483] XFS (loop0): Mounting V5 Filesystem [ 169.035982][ T7494] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 169.038440][ T7494] BTRFS info (device loop3): force clearing of disk cache [ 169.040391][ T7494] BTRFS info (device loop3): enabling auto defrag [ 169.052591][ T7494] BTRFS info (device loop3): max_inline at 0 [ 169.062984][ T7494] BTRFS info (device loop3): enabling disk space caching [ 169.098665][ T7494] BTRFS info (device loop3): disk space caching is enabled [ 169.100860][ T7494] BTRFS info (device loop3): has skinny extents [ 169.167443][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 169.167455][ T26] audit: type=1326 audit(169.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.2.883" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b6cb728 code=0x0 [ 169.167847][ T7483] XFS (loop0): Ending clean mount [ 169.219697][ T7483] XFS (loop0): Quotacheck needed: Please wait. [ 169.250283][ T7483] XFS (loop0): Quotacheck: Done. [ 169.330319][ T4035] XFS (loop0): Unmounting Filesystem [ 169.341317][ T7494] BTRFS info (device loop3): enabling ssd optimizations [ 169.344432][ T7494] BTRFS info (device loop3): clearing free space tree [ 169.346468][ T7494] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.356862][ T7494] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.587848][ T4214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4214) [ 170.018214][ T7555] Injecting memory failure for pfn 0x11e08d at process virtual address 0x20000000 [ 170.027151][ T7525] loop1: detected capacity change from 0 to 32768 [ 170.033768][ T7555] Memory failure: 0x11e08d: keeping poisoned page in swap cache [ 170.045450][ T7555] Memory failure: 0x11e08d: recovery action for clean swapcache page: Recovered [ 170.051623][ T7555] Injecting memory failure for pfn 0x11e08c at process virtual address 0x20001000 [ 170.059038][ T7555] Memory failure: 0x11e08c: keeping poisoned page in swap cache [ 170.075353][ T7555] Memory failure: 0x11e08c: recovery action for clean swapcache page: Recovered [ 170.088386][ T7555] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 170.097071][ T7555] Memory failure: 0x1b1f88: already hardware poisoned [ 170.132430][ T7561] FAULT_INJECTION: forcing a failure. [ 170.132430][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.142903][ T7561] CPU: 0 PID: 7561 Comm: syz.3.893 Not tainted 5.15.181-syzkaller #0 [ 170.145129][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 170.147844][ T7561] Call trace: [ 170.148742][ T7561] dump_backtrace+0x0/0x43c [ 170.149999][ T7561] show_stack+0x2c/0x3c [ 170.151119][ T7561] __dump_stack+0x30/0x40 [ 170.152325][ T7561] dump_stack_lvl+0xf8/0x160 [ 170.153546][ T7561] dump_stack+0x1c/0x5c [ 170.154672][ T7561] should_fail+0x3c0/0x51c [ 170.155884][ T7561] should_fail_usercopy+0x20/0x30 [ 170.157332][ T7561] __copy_msghdr_from_user+0xb8/0x4f8 [ 170.158767][ T7561] ___sys_recvmsg+0x118/0x220 [ 170.160029][ T7561] do_recvmmsg+0x2ac/0x85c [ 170.161188][ T7561] __arm64_sys_recvmmsg+0x19c/0x238 [ 170.162636][ T7561] invoke_syscall+0x98/0x2b8 [ 170.163850][ T7561] el0_svc_common+0x138/0x258 [ 170.165139][ T7561] do_el0_svc+0x58/0x14c [ 170.166257][ T7561] el0_svc+0x78/0x1e0 [ 170.167361][ T7561] el0t_64_sync_handler+0xcc/0xe4 [ 170.168711][ T7561] el0t_64_sync+0x1a0/0x1a4 [ 170.634490][ T7586] loop4: detected capacity change from 0 to 512 [ 170.796463][ T7586] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 170.808455][ T7586] device batadv_slave_1 entered promiscuous mode [ 170.836891][ T7567] loop0: detected capacity change from 0 to 32768 [ 170.849687][ T7585] device batadv_slave_1 left promiscuous mode [ 170.941339][ T7578] loop1: detected capacity change from 0 to 32768 [ 170.973664][ T7567] XFS (loop0): Mounting V5 Filesystem [ 170.981863][ T7584] loop3: detected capacity change from 0 to 32768 [ 171.017315][ T7584] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.904 (7584) [ 171.057872][ T7599] Injecting memory failure for pfn 0x12be6d at process virtual address 0x20000000 [ 171.069055][ T7578] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.902 (7578) [ 171.077218][ T7584] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 171.079674][ T7584] BTRFS info (device loop3): setting nodatacow, compression disabled [ 171.081940][ T7584] BTRFS info (device loop3): setting datacow [ 171.088046][ T7584] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 171.090838][ T7584] BTRFS info (device loop3): use zstd compression, level 3 [ 171.095716][ T7599] Memory failure: 0x12be6d: keeping poisoned page in swap cache [ 171.098055][ T7599] Memory failure: 0x12be6d: recovery action for clean swapcache page: Recovered [ 171.100651][ T7599] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20001000 [ 171.101419][ T7584] BTRFS info (device loop3): using free space tree [ 171.105064][ T7584] BTRFS info (device loop3): has skinny extents [ 171.123638][ T7599] Memory failure: 0x1b1f88: already hardware poisoned [ 171.129484][ T7567] XFS (loop0): Ending clean mount [ 171.132640][ T7567] XFS (loop0): Quotacheck needed: Please wait. [ 171.220747][ T7567] XFS (loop0): Quotacheck: Done. [ 171.397487][ T4035] XFS (loop0): Unmounting Filesystem [ 172.102923][ T7584] BTRFS info (device loop3): enabling ssd optimizations [ 172.269126][ T7631] loop2: detected capacity change from 0 to 256 [ 172.368622][ T7620] loop4: detected capacity change from 0 to 32768 [ 172.518390][ T7620] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.910 (7620) [ 172.772269][ T4024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4024) [ 172.821258][ T26] audit: type=1326 audit(172.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.0.918" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa312d728 code=0x0 [ 172.941996][ T7654] Injecting memory failure for pfn 0x12c0e0 at process virtual address 0x20000000 [ 172.944851][ T7654] Memory failure: 0x12c0e0: keeping poisoned page in swap cache [ 172.962540][ T7654] Memory failure: 0x12c0e0: recovery action for clean swapcache page: Recovered [ 172.976883][ T7654] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20001000 [ 172.979475][ T7654] Memory failure: 0x1b1f88: already hardware poisoned [ 173.144599][ T7637] loop1: detected capacity change from 0 to 32768 [ 173.177718][ T7637] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 173.180394][ T7637] BTRFS info (device loop1): setting nodatacow, compression disabled [ 173.184969][ T7637] BTRFS info (device loop1): setting datacow [ 173.191148][ T7637] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.199664][ T7637] BTRFS info (device loop1): use zstd compression, level 3 [ 173.214305][ T7637] BTRFS info (device loop1): using free space tree [ 173.220921][ T7637] BTRFS info (device loop1): has skinny extents [ 173.403348][ T7637] BTRFS info (device loop1): enabling ssd optimizations [ 173.409150][ T7637] FAULT_INJECTION: forcing a failure. [ 173.409150][ T7637] name failslab, interval 1, probability 0, space 0, times 0 [ 173.412646][ T7637] CPU: 1 PID: 7637 Comm: syz.1.916 Not tainted 5.15.181-syzkaller #0 [ 173.414820][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 173.417540][ T7637] Call trace: [ 173.418399][ T7637] dump_backtrace+0x0/0x43c [ 173.419620][ T7637] show_stack+0x2c/0x3c [ 173.420795][ T7637] __dump_stack+0x30/0x40 [ 173.422016][ T7637] dump_stack_lvl+0xf8/0x160 [ 173.423223][ T7637] dump_stack+0x1c/0x5c [ 173.424336][ T7637] should_fail+0x3c0/0x51c [ 173.425560][ T7637] __should_failslab+0xbc/0x10c [ 173.426891][ T7637] should_failslab+0x10/0x28 [ 173.428150][ T7637] slab_pre_alloc_hook+0x64/0xec [ 173.429503][ T7637] __kmalloc+0xbc/0x44c [ 173.430641][ T7637] btrfs_buffered_write+0x26c/0xccc [ 173.432010][ T7637] btrfs_file_write_iter+0x19c/0xbe8 [ 173.433511][ T7637] vfs_write+0x7c8/0xa2c [ 173.434680][ T7637] ksys_write+0x120/0x210 [ 173.435832][ T7637] __arm64_sys_write+0x7c/0x90 [ 173.437102][ T7637] invoke_syscall+0x98/0x2b8 [ 173.438320][ T7637] el0_svc_common+0x138/0x258 [ 173.439595][ T7637] do_el0_svc+0x58/0x14c [ 173.440735][ T7637] el0_svc+0x78/0x1e0 [ 173.441766][ T7637] el0t_64_sync_handler+0xcc/0xe4 [ 173.443193][ T7637] el0t_64_sync+0x1a0/0x1a4 [ 173.444497][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.822056][ T7659] loop3: detected capacity change from 0 to 32768 [ 173.828053][ T7691] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 173.950194][ T7659] XFS (loop3): Mounting V5 Filesystem [ 174.012570][ T7679] loop4: detected capacity change from 0 to 32768 [ 174.050722][ T7659] XFS (loop3): Ending clean mount [ 174.054156][ T7659] XFS (loop3): Quotacheck needed: Please wait. [ 174.066319][ T7679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.925 (7679) [ 174.098993][ T7659] XFS (loop3): Quotacheck: Done. [ 174.111732][ T7679] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 174.114618][ T7679] BTRFS info (device loop4): force clearing of disk cache [ 174.116528][ T7679] BTRFS info (device loop4): enabling auto defrag [ 174.118246][ T7679] BTRFS info (device loop4): max_inline at 0 [ 174.123691][ T4031] XFS (loop3): Unmounting Filesystem [ 174.160425][ T7710] FAULT_INJECTION: forcing a failure. [ 174.160425][ T7710] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 174.164410][ T7679] BTRFS info (device loop4): enabling disk space caching [ 174.166317][ T7679] BTRFS info (device loop4): disk space caching is enabled [ 174.168319][ T7679] BTRFS info (device loop4): has skinny extents [ 174.185607][ T7710] CPU: 1 PID: 7710 Comm: syz.0.934 Not tainted 5.15.181-syzkaller #0 [ 174.187813][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 174.190567][ T7710] Call trace: [ 174.191467][ T7710] dump_backtrace+0x0/0x43c [ 174.192659][ T7710] show_stack+0x2c/0x3c [ 174.193750][ T7710] __dump_stack+0x30/0x40 [ 174.194900][ T7710] dump_stack_lvl+0xf8/0x160 [ 174.196172][ T7710] dump_stack+0x1c/0x5c [ 174.197284][ T7710] should_fail+0x3c0/0x51c [ 174.198476][ T7710] should_fail_alloc_page+0x74/0xa8 [ 174.199913][ T7710] prepare_alloc_pages+0x160/0x460 [ 174.201285][ T7710] __alloc_pages+0x108/0x470 [ 174.202561][ T7710] alloc_pages+0x34c/0x5c0 [ 174.203775][ T7710] new_slab+0xe0/0x55c [ 174.204836][ T7710] ___slab_alloc+0x6c0/0xda8 [ 174.206043][ T7710] __slab_alloc+0x68/0xc0 [ 174.207208][ T7710] __kmalloc_node_track_caller+0x288/0x3bc [ 174.208723][ T7710] kmalloc_reserve+0xe4/0x26c [ 174.209981][ T7710] __alloc_skb+0x23c/0x67c [ 174.211190][ T7710] netlink_dump+0x19c/0xab4 [ 174.212406][ T7710] netlink_recvmsg+0x4cc/0xac4 [ 174.213726][ T7710] ____sys_recvmsg+0x254/0x794 [ 174.214982][ T7710] ___sys_recvmsg+0x1ac/0x220 [ 174.216240][ T7710] do_recvmmsg+0x2ac/0x85c [ 174.217451][ T7710] __arm64_sys_recvmmsg+0x19c/0x238 [ 174.218879][ T7710] invoke_syscall+0x98/0x2b8 [ 174.220151][ T7710] el0_svc_common+0x138/0x258 [ 174.221358][ T7710] do_el0_svc+0x58/0x14c [ 174.222482][ T7710] el0_svc+0x78/0x1e0 [ 174.223548][ T7710] el0t_64_sync_handler+0xcc/0xe4 [ 174.225001][ T7710] el0t_64_sync+0x1a0/0x1a4 [ 174.226240][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.527045][ T7679] BTRFS info (device loop4): enabling ssd optimizations [ 174.529841][ T7679] BTRFS info (device loop4): clearing free space tree [ 174.531776][ T7679] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.544128][ T7679] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.729752][ T7707] loop1: detected capacity change from 0 to 32768 [ 174.773802][ T7707] jfs: Unrecognized mount option "i" or missing value [ 174.784518][ T7735] Injecting memory failure for pfn 0x12ee25 at process virtual address 0x20000000 [ 174.803058][ T7735] Memory failure: 0x12ee25: keeping poisoned page in swap cache [ 174.805232][ T7735] Memory failure: 0x12ee25: recovery action for clean swapcache page: Recovered [ 174.814957][ T7735] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20001000 [ 174.817483][ T7735] Memory failure: 0x1b1f88: already hardware poisoned [ 174.864983][ T7739] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 174.908129][ T7739] device macsec1 entered promiscuous mode [ 174.909777][ T7739] device bond1 entered promiscuous mode [ 176.306156][ T7776] Injecting memory failure for pfn 0x132504 at process virtual address 0x20000000 [ 176.365276][ T7776] Memory failure: 0x132504: keeping poisoned page in swap cache [ 176.367556][ T7776] Memory failure: 0x132504: recovery action for clean swapcache page: Recovered [ 176.369974][ T7776] Injecting memory failure for pfn 0x132503 at process virtual address 0x20001000 [ 176.379913][ T7779] loop1: detected capacity change from 0 to 128 [ 176.394778][ T7776] Memory failure: 0x132503: keeping poisoned page in swap cache [ 176.399172][ T7776] Memory failure: 0x132503: recovery action for clean swapcache page: Recovered [ 176.419893][ T7776] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 176.422550][ T7776] Memory failure: 0x1b1f88: already hardware poisoned [ 176.520446][ T7779] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 176.548067][ T7754] loop4: detected capacity change from 0 to 32768 [ 176.551059][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 176.668471][ T7768] loop3: detected capacity change from 0 to 32768 [ 176.679988][ T7754] XFS (loop4): Mounting V5 Filesystem [ 176.687230][ T7760] loop2: detected capacity change from 0 to 4096 [ 176.729362][ T7768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.948 (7768) [ 176.735920][ T7760] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 176.756382][ T4030] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 176.759261][ T4030] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh [ 176.789755][ T7768] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 176.792292][ T7768] BTRFS info (device loop3): setting nodatacow, compression disabled [ 176.798488][ T7768] BTRFS info (device loop3): setting datacow [ 176.800114][ T7768] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 176.802626][ T7768] BTRFS info (device loop3): use zstd compression, level 3 [ 176.811729][ T7760] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 176.837550][ T7760] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 176.846863][ T7768] BTRFS info (device loop3): using free space tree [ 176.848768][ T7768] BTRFS info (device loop3): has skinny extents [ 176.860614][ T7760] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 176.873835][ T7784] loop0: detected capacity change from 0 to 32768 [ 176.896063][ T7760] ntfs: volume version 3.1. [ 176.900058][ T7754] XFS (loop4): Ending clean mount [ 176.910574][ T7754] XFS (loop4): Quotacheck needed: Please wait. [ 176.916336][ T7784] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.952 (7784) [ 176.931601][ T7760] ntfs: (device loop2): parse_options(): Unrecognized mount option <. [ 176.951575][ T7754] XFS (loop4): Quotacheck: Done. [ 176.974602][ T4040] XFS (loop4): Unmounting Filesystem [ 177.072950][ T7768] BTRFS info (device loop3): enabling ssd optimizations [ 177.075505][ T4038] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 177.106240][ T4214] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4214) [ 177.213359][ T7816] loop2: detected capacity change from 0 to 256 [ 178.020442][ T1601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.297467][ T1601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.406302][ T1601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.480907][ T1601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.497356][ T7835] loop0: detected capacity change from 0 to 32768 [ 178.543586][ T7835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.963 (7835) [ 178.573658][ T7835] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 178.580173][ T7835] BTRFS info (device loop0): setting nodatacow, compression disabled [ 178.587520][ T7835] BTRFS info (device loop0): setting datacow [ 178.592576][ T7835] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.606591][ T7835] BTRFS info (device loop0): use zstd compression, level 3 [ 178.612181][ T7835] BTRFS info (device loop0): using free space tree [ 178.618932][ T7835] BTRFS info (device loop0): has skinny extents [ 178.861893][ T7845] chnl_net:caif_netlink_parms(): no params data found [ 178.887748][ T7835] BTRFS info (device loop0): enabling ssd optimizations [ 178.895738][ T7835] FAULT_INJECTION: forcing a failure. [ 178.895738][ T7835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.907196][ T7835] CPU: 1 PID: 7835 Comm: syz.0.963 Not tainted 5.15.181-syzkaller #0 [ 178.909397][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.912056][ T7835] Call trace: [ 178.912961][ T7835] dump_backtrace+0x0/0x43c [ 178.914185][ T7835] show_stack+0x2c/0x3c [ 178.915349][ T7835] __dump_stack+0x30/0x40 [ 178.916591][ T7835] dump_stack_lvl+0xf8/0x160 [ 178.917868][ T7835] dump_stack+0x1c/0x5c [ 178.918959][ T7835] should_fail+0x3c0/0x51c [ 178.920137][ T7835] should_fail_alloc_page+0x74/0xa8 [ 178.921559][ T7835] prepare_alloc_pages+0x160/0x460 [ 178.922981][ T7835] __alloc_pages+0x108/0x470 [ 178.924236][ T7835] alloc_pages+0x34c/0x5c0 [ 178.925496][ T7835] __page_cache_alloc+0x78/0x514 [ 178.926877][ T7835] pagecache_get_page+0x938/0xcb4 [ 178.928278][ T7835] prepare_pages+0xf4/0x328 [ 178.929531][ T7835] btrfs_buffered_write+0x490/0xccc [ 178.930914][ T7835] btrfs_file_write_iter+0x19c/0xbe8 [ 178.932430][ T7835] vfs_write+0x7c8/0xa2c [ 178.933612][ T7835] ksys_write+0x120/0x210 [ 178.934777][ T7835] __arm64_sys_write+0x7c/0x90 [ 178.936037][ T7835] invoke_syscall+0x98/0x2b8 [ 178.937316][ T7835] el0_svc_common+0x138/0x258 [ 178.939018][ T7835] do_el0_svc+0x58/0x14c [ 178.940178][ T7835] el0_svc+0x78/0x1e0 [ 178.941288][ T7835] el0t_64_sync_handler+0xcc/0xe4 [ 178.942647][ T7835] el0t_64_sync+0x1a0/0x1a4 [ 178.956204][ T7842] loop3: detected capacity change from 0 to 32768 [ 179.061042][ T7842] XFS (loop3): Mounting V5 Filesystem [ 179.096332][ T7888] FAULT_INJECTION: forcing a failure. [ 179.096332][ T7888] name failslab, interval 1, probability 0, space 0, times 0 [ 179.099904][ T7888] CPU: 1 PID: 7888 Comm: syz.4.969 Not tainted 5.15.181-syzkaller #0 [ 179.102055][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 179.104759][ T7888] Call trace: [ 179.105646][ T7888] dump_backtrace+0x0/0x43c [ 179.106909][ T7888] show_stack+0x2c/0x3c [ 179.108024][ T7888] __dump_stack+0x30/0x40 [ 179.109146][ T7888] dump_stack_lvl+0xf8/0x160 [ 179.110358][ T7888] dump_stack+0x1c/0x5c [ 179.111489][ T7888] should_fail+0x3c0/0x51c [ 179.112721][ T7888] __should_failslab+0xbc/0x10c [ 179.114014][ T7888] should_failslab+0x10/0x28 [ 179.115239][ T7888] slab_pre_alloc_hook+0x64/0xec [ 179.116614][ T7888] __kmalloc_node_track_caller+0x70/0x3bc [ 179.118196][ T7888] kmalloc_reserve+0xe4/0x26c [ 179.119500][ T7888] __alloc_skb+0x23c/0x67c [ 179.120666][ T7888] netlink_dump+0x19c/0xab4 [ 179.121853][ T7888] netlink_recvmsg+0x4cc/0xac4 [ 179.123167][ T7888] ____sys_recvmsg+0x254/0x794 [ 179.124401][ T7888] ___sys_recvmsg+0x1ac/0x220 [ 179.125634][ T7888] do_recvmmsg+0x2ac/0x85c [ 179.126848][ T7888] __arm64_sys_recvmmsg+0x19c/0x238 [ 179.128247][ T7888] invoke_syscall+0x98/0x2b8 [ 179.129486][ T7888] el0_svc_common+0x138/0x258 [ 179.130797][ T7888] do_el0_svc+0x58/0x14c [ 179.131952][ T7888] el0_svc+0x78/0x1e0 [ 179.133009][ T7888] el0t_64_sync_handler+0xcc/0xe4 [ 179.134467][ T7888] el0t_64_sync+0x1a0/0x1a4 [ 179.357061][ T4214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4214) [ 179.360127][ T7842] XFS (loop3): Ending clean mount [ 179.387355][ T7842] XFS (loop3): Quotacheck needed: Please wait. [ 179.455638][ T7842] XFS (loop3): Quotacheck: Done. [ 179.539322][ T4031] XFS (loop3): Unmounting Filesystem [ 179.553997][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.577069][ T7845] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.600596][ T7845] device bridge_slave_0 entered promiscuous mode [ 179.608621][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.618165][ T7845] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.623427][ T7845] device bridge_slave_1 entered promiscuous mode [ 179.785276][ T7845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.805185][ T7845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.895000][ T7845] team0: Port device team_slave_0 added [ 179.898747][ T7845] team0: Port device team_slave_1 added [ 179.992448][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.001201][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.011286][ T7845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.058658][ T7930] loop4: detected capacity change from 0 to 512 [ 180.096109][ T7930] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 180.142389][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.151725][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.181910][ T7845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.290414][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 180.416688][ T7943] loop4: detected capacity change from 0 to 256 [ 180.457667][ T7945] syz.3.979 uses obsolete (PF_INET,SOCK_PACKET) [ 180.466638][ T7845] device hsr_slave_0 entered promiscuous mode [ 180.497201][ T7913] loop0: detected capacity change from 0 to 32768 [ 180.503276][ T7845] device hsr_slave_1 entered promiscuous mode [ 180.520344][ T7948] loop3: detected capacity change from 0 to 1024 [ 180.633189][ T7845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.635331][ T7845] Cannot create hsr debugfs directory [ 180.640395][ T7913] jfs: Unrecognized mount option "i" or missing value [ 181.031120][ T1690] hfsplus: b-tree write err: -5, ino 4 [ 181.070432][ T7956] loop2: detected capacity change from 0 to 4096 [ 181.146233][ T7956] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 181.311002][ T7845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.405352][ T7845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.486310][ T7962] loop0: detected capacity change from 0 to 32768 [ 181.525039][ T7962] XFS: attr2 mount option is deprecated. [ 181.526603][ T7962] XFS: ikeep mount option is deprecated. [ 181.528082][ T7962] XFS: noikeep mount option is deprecated. [ 181.561177][ T7845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.624620][ T7845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.630281][ T7962] XFS (loop0): Mounting V5 Filesystem [ 181.878255][ T7962] XFS (loop0): Ending clean mount [ 181.882889][ T7962] XFS (loop0): Quotacheck needed: Please wait. [ 181.952494][ T7962] XFS (loop0): Quotacheck: Done. [ 182.037939][ T1601] device hsr_slave_0 left promiscuous mode [ 182.092973][ T1601] device hsr_slave_1 left promiscuous mode [ 182.214096][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.216392][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.219838][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.224670][ T4035] XFS (loop0): Unmounting Filesystem [ 182.230335][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.236983][ T1601] device bridge_slave_1 left promiscuous mode [ 182.244229][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.288137][ T7988] loop3: detected capacity change from 0 to 32768 [ 182.329414][ T1601] device bridge_slave_0 left promiscuous mode [ 182.334774][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.367433][ T7988] XFS (loop3): Mounting V5 Filesystem [ 182.373098][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 182.458277][ T1601] device bond1 left promiscuous mode [ 182.461331][ T7988] XFS (loop3): Ending clean mount [ 182.464709][ T7988] XFS (loop3): Quotacheck needed: Please wait. [ 182.500703][ T7988] XFS (loop3): Quotacheck: Done. [ 182.528657][ T4031] XFS (loop3): Unmounting Filesystem [ 182.533612][ T1601] device veth1_macvtap left promiscuous mode [ 182.535600][ T1601] device veth0_macvtap left promiscuous mode [ 182.538255][ T1601] device veth1_vlan left promiscuous mode [ 182.542365][ T1601] device veth0_vlan left promiscuous mode [ 182.924603][ T8007] loop4: detected capacity change from 0 to 32768 [ 182.946699][ T1601] bond1 (unregistering): Released all slaves [ 183.732625][ T1601] team0 (unregistering): Port device team_slave_1 removed [ 183.761517][ T1601] team0 (unregistering): Port device team_slave_0 removed [ 183.800978][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.874678][ T8018] loop3: detected capacity change from 0 to 4096 [ 183.883469][ T1601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.051115][ T1601] bond0 (unregistering): Released all slaves [ 184.161276][ T7845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.226495][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.229169][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.252232][ T7845] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.313580][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.316582][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.319078][ T1690] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.321033][ T1690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.335140][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.351199][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.354134][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.361537][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.363551][ T1690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.388791][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.441613][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.452946][ T4465] Bluetooth: hci0: command 0x040f tx timeout [ 184.457614][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.461999][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.474708][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.483826][ T8040] loop4: detected capacity change from 0 to 256 [ 184.519331][ T7845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.529359][ T7845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.542673][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.545821][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.548741][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.551754][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.598806][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.618340][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.671656][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.888976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.891288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.967585][ T7845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.058325][ T8025] loop0: detected capacity change from 0 to 32768 [ 185.171226][ T8025] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 185.179971][ T8025] BTRFS info (device loop0): setting nodatacow, compression disabled [ 185.182267][ T8025] BTRFS info (device loop0): setting datacow [ 185.233935][ T8025] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 185.262044][ T8025] BTRFS info (device loop0): use zstd compression, level 3 [ 185.264593][ T8025] BTRFS info (device loop0): using free space tree [ 185.266270][ T8025] BTRFS info (device loop0): has skinny extents [ 185.606977][ T8025] BTRFS info (device loop0): enabling ssd optimizations [ 185.612637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.613203][ T8049] loop3: detected capacity change from 0 to 32768 [ 185.615837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.634159][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.636750][ T1690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.640139][ T7845] device veth0_vlan entered promiscuous mode [ 185.645601][ T8025] FAULT_INJECTION: forcing a failure. [ 185.645601][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 185.648961][ T8025] CPU: 0 PID: 8025 Comm: syz.0.993 Not tainted 5.15.181-syzkaller #0 [ 185.651141][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 185.653867][ T8025] Call trace: [ 185.654772][ T8025] dump_backtrace+0x0/0x43c [ 185.655962][ T8025] show_stack+0x2c/0x3c [ 185.657060][ T8025] __dump_stack+0x30/0x40 [ 185.658206][ T8025] dump_stack_lvl+0xf8/0x160 [ 185.659428][ T8025] dump_stack+0x1c/0x5c [ 185.659992][ T7845] device veth1_vlan entered promiscuous mode [ 185.660510][ T8025] should_fail+0x3c0/0x51c [ 185.663341][ T8025] __should_failslab+0xbc/0x10c [ 185.664637][ T8025] should_failslab+0x10/0x28 [ 185.665881][ T8025] slab_pre_alloc_hook+0x64/0xec [ 185.667206][ T8025] kmem_cache_alloc+0x94/0x3e4 [ 185.668516][ T8025] alloc_extent_state+0x38/0x430 [ 185.669239][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.669787][ T8025] set_extent_bit+0x1b4/0x13f4 [ 185.673004][ T8025] lock_extent_bits+0x64/0x130 [ 185.674297][ T8025] btrfs_lock_and_flush_ordered_range+0xa8/0x224 [ 185.676012][ T8025] btrfs_readpage+0xfc/0x188 [ 185.677202][ T8025] prepare_uptodate_page+0xc0/0x344 [ 185.678618][ T8025] prepare_pages+0x1d4/0x328 [ 185.679853][ T8025] btrfs_buffered_write+0x490/0xccc [ 185.681243][ T8025] btrfs_file_write_iter+0x19c/0xbe8 [ 185.682705][ T8025] vfs_write+0x7c8/0xa2c [ 185.683814][ T8025] ksys_write+0x120/0x210 [ 185.684995][ T8025] __arm64_sys_write+0x7c/0x90 [ 185.686264][ T8025] invoke_syscall+0x98/0x2b8 [ 185.687601][ T8025] el0_svc_common+0x138/0x258 [ 185.688922][ T8025] do_el0_svc+0x58/0x14c [ 185.690037][ T8025] el0_svc+0x78/0x1e0 [ 185.691112][ T8025] el0t_64_sync_handler+0xcc/0xe4 [ 185.692469][ T8025] el0t_64_sync+0x1a0/0x1a4 [ 185.739708][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.742258][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.776903][ T8049] XFS (loop3): Mounting V5 Filesystem [ 185.799150][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.801732][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.824197][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.828644][ T7845] device veth0_macvtap entered promiscuous mode [ 185.868323][ T7845] device veth1_macvtap entered promiscuous mode [ 185.938770][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.943268][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.946134][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.948862][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.951478][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.956820][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.959536][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.962433][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.967265][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.974146][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.977079][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.979724][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.982554][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.985817][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.988754][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.991368][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.997518][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.001396][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.006267][ T7845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.008783][ T7845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.011228][ T7845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.024034][ T7845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.066501][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.077302][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.079890][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.082545][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.106008][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.108795][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.151499][ T8049] XFS (loop3): Ending clean mount [ 186.154258][ T8049] XFS (loop3): Quotacheck needed: Please wait. [ 186.222411][ T8049] XFS (loop3): Quotacheck: Done. [ 186.298435][ T5886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.300686][ T5886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.304713][ T4031] XFS (loop3): Unmounting Filesystem [ 186.354464][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.387973][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.390331][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.409523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.430233][ T8110] FAULT_INJECTION: forcing a failure. [ 186.430233][ T8110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.466775][ T8110] CPU: 1 PID: 8110 Comm: syz.0.1000 Not tainted 5.15.181-syzkaller #0 [ 186.468967][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.471637][ T8110] Call trace: [ 186.472536][ T8110] dump_backtrace+0x0/0x43c [ 186.473786][ T8110] show_stack+0x2c/0x3c [ 186.474909][ T8110] __dump_stack+0x30/0x40 [ 186.476094][ T8110] dump_stack_lvl+0xf8/0x160 [ 186.477378][ T8110] dump_stack+0x1c/0x5c [ 186.478522][ T8110] should_fail+0x3c0/0x51c [ 186.479668][ T8110] should_fail_alloc_page+0x74/0xa8 [ 186.481093][ T8110] prepare_alloc_pages+0x160/0x460 [ 186.482555][ T8110] __alloc_pages+0x108/0x470 [ 186.483789][ T8110] alloc_pages+0x34c/0x5c0 [ 186.485035][ T8110] new_slab+0xe0/0x55c [ 186.486115][ T8110] ___slab_alloc+0x6c0/0xda8 [ 186.487352][ T8110] __slab_alloc+0x68/0xc0 [ 186.488539][ T8110] __kmalloc_node_track_caller+0x288/0x3bc [ 186.490142][ T8110] kmalloc_reserve+0xe4/0x26c [ 186.491376][ T8110] __alloc_skb+0x23c/0x67c [ 186.492634][ T8110] netlink_dump+0x19c/0xab4 [ 186.493836][ T8110] netlink_recvmsg+0x4cc/0xac4 [ 186.495143][ T8110] ____sys_recvmsg+0x254/0x794 [ 186.496426][ T8110] ___sys_recvmsg+0x1ac/0x220 [ 186.497638][ T8110] do_recvmmsg+0x2ac/0x85c [ 186.498821][ T8110] __arm64_sys_recvmmsg+0x19c/0x238 [ 186.500204][ T8110] invoke_syscall+0x98/0x2b8 [ 186.501399][ T8110] el0_svc_common+0x138/0x258 [ 186.502689][ T8110] do_el0_svc+0x58/0x14c [ 186.503832][ T8110] el0_svc+0x78/0x1e0 [ 186.504933][ T8110] el0t_64_sync_handler+0xcc/0xe4 [ 186.506244][ T8110] el0t_64_sync+0x1a0/0x1a4 [ 186.533244][ T4042] Bluetooth: hci0: command 0x0419 tx timeout [ 186.595239][ T8113] Injecting memory failure for pfn 0x11daae at process virtual address 0x20000000 [ 186.598110][ T8113] Memory failure: 0x11daae: keeping poisoned page in swap cache [ 186.600239][ T8113] Memory failure: 0x11daae: recovery action for clean swapcache page: Recovered [ 186.602715][ T8113] Injecting memory failure for pfn 0x11e805 at process virtual address 0x20001000 [ 186.621169][ T8113] Memory failure: 0x11e805: keeping poisoned page in swap cache [ 186.631457][ T8113] Memory failure: 0x11e805: recovery action for clean swapcache page: Recovered [ 186.641483][ T8113] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 186.663057][ T8113] Memory failure: 0x1b1f88: already hardware poisoned [ 187.508590][ T8117] loop0: detected capacity change from 0 to 32768 [ 187.559527][ T8117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1002 (8117) [ 187.589365][ T8117] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 187.591883][ T8117] BTRFS info (device loop0): force clearing of disk cache [ 187.603630][ T8117] BTRFS info (device loop0): enabling auto defrag [ 187.605396][ T8117] BTRFS info (device loop0): max_inline at 0 [ 187.607102][ T8117] BTRFS info (device loop0): enabling disk space caching [ 187.622902][ T8117] BTRFS info (device loop0): disk space caching is enabled [ 187.624997][ T8117] BTRFS info (device loop0): has skinny extents [ 187.870720][ T8155] loop4: detected capacity change from 0 to 1024 [ 187.899885][ T8155] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 187.918091][ T8155] hfsplus: filesystem is marked journaled, leaving read-only. [ 188.081038][ T8117] BTRFS info (device loop0): enabling ssd optimizations [ 188.100509][ T8117] BTRFS info (device loop0): clearing free space tree [ 188.108887][ T8117] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.111671][ T8117] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.159911][ T8177] loop3: detected capacity change from 0 to 1024 [ 188.273280][ T8177] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.781915][ T8204] Injecting memory failure for pfn 0x12de72 at process virtual address 0x20000000 [ 188.798806][ T8204] Memory failure: 0x12de72: keeping poisoned page in swap cache [ 188.823162][ T8204] Memory failure: 0x12de72: recovery action for clean swapcache page: Recovered [ 188.855401][ T8204] Injecting memory failure for pfn 0x12de73 at process virtual address 0x20001000 [ 188.858048][ T8208] loop2: detected capacity change from 0 to 256 [ 188.881532][ T8204] Memory failure: 0x12de73: keeping poisoned page in swap cache [ 188.893438][ T8204] Memory failure: 0x12de73: recovery action for clean swapcache page: Recovered [ 188.912364][ T8204] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 188.932186][ T8204] Memory failure: 0x1b1f88: already hardware poisoned [ 189.251243][ T8179] loop5: detected capacity change from 0 to 32768 [ 189.325441][ T8179] jfs: Unrecognized mount option "i" or missing value [ 190.027343][ T8214] loop0: detected capacity change from 0 to 32768 [ 190.104978][ T8214] XFS (loop0): Mounting V5 Filesystem [ 190.224228][ T8231] loop4: detected capacity change from 0 to 32768 [ 190.317323][ T8248] loop3: detected capacity change from 0 to 32768 [ 190.326080][ T8214] XFS (loop0): Ending clean mount [ 190.328964][ T8214] XFS (loop0): Quotacheck needed: Please wait. [ 190.359542][ T8214] XFS (loop0): Quotacheck: Done. [ 190.431046][ T8231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1024 (8231) [ 190.435666][ T4035] XFS (loop0): Unmounting Filesystem [ 190.457571][ T8248] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1028 (8248) [ 190.459708][ T8231] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 190.481760][ T8231] BTRFS error (device loop4): superblock checksum mismatch [ 190.522250][ T8231] BTRFS error (device loop4): open_ctree failed: -22 [ 190.543502][ T4111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4111) [ 190.718962][ T8274] Injecting memory failure for pfn 0x133053 at process virtual address 0x20000000 [ 190.745489][ T8274] Memory failure: 0x133053: keeping poisoned page in swap cache [ 190.747830][ T8274] Memory failure: 0x133053: recovery action for clean swapcache page: Recovered [ 190.750342][ T8274] Injecting memory failure for pfn 0x11f5f6 at process virtual address 0x20001000 [ 190.774081][ T8274] Memory failure: 0x11f5f6: keeping poisoned page in swap cache [ 190.791103][ T8274] Memory failure: 0x11f5f6: recovery action for clean swapcache page: Recovered [ 190.799248][ T8251] loop5: detected capacity change from 0 to 32768 [ 190.802421][ T8274] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 190.807050][ T8274] Memory failure: 0x1b1f88: already hardware poisoned [ 190.819756][ T8278] FAULT_INJECTION: forcing a failure. [ 190.819756][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.859915][ T8278] CPU: 0 PID: 8278 Comm: syz.4.1034 Not tainted 5.15.181-syzkaller #0 [ 190.862155][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.864970][ T8278] Call trace: [ 190.865810][ T8278] dump_backtrace+0x0/0x43c [ 190.867059][ T8278] show_stack+0x2c/0x3c [ 190.868242][ T8278] __dump_stack+0x30/0x40 [ 190.869395][ T8278] dump_stack_lvl+0xf8/0x160 [ 190.870657][ T8278] dump_stack+0x1c/0x5c [ 190.871796][ T8278] should_fail+0x3c0/0x51c [ 190.872980][ T8278] should_fail_usercopy+0x20/0x30 [ 190.874338][ T8278] __copy_msghdr_from_user+0xb8/0x4f8 [ 190.875812][ T8278] ___sys_recvmsg+0x118/0x220 [ 190.877131][ T8278] do_recvmmsg+0x2ac/0x85c [ 190.878317][ T8278] __arm64_sys_recvmmsg+0x19c/0x238 [ 190.879746][ T8278] invoke_syscall+0x98/0x2b8 [ 190.880994][ T8278] el0_svc_common+0x138/0x258 [ 190.882259][ T8278] do_el0_svc+0x58/0x14c [ 190.883432][ T8278] el0_svc+0x78/0x1e0 [ 190.884495][ T8278] el0t_64_sync_handler+0xcc/0xe4 [ 190.885870][ T8278] el0t_64_sync+0x1a0/0x1a4 [ 190.974243][ T8251] XFS (loop5): Mounting V5 Filesystem [ 191.201283][ T8290] loop3: detected capacity change from 0 to 1024 [ 191.298462][ T8251] XFS (loop5): Ending clean mount [ 191.318426][ T8251] XFS (loop5): Quotacheck needed: Please wait. [ 191.361892][ T8251] XFS (loop5): Quotacheck: Done. [ 191.415688][ T7845] XFS (loop5): Unmounting Filesystem [ 192.731774][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.733691][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.853267][ T8313] loop2: detected capacity change from 0 to 32768 [ 192.884678][ T8305] loop4: detected capacity change from 0 to 32768 [ 192.988019][ T8305] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1041 (8305) [ 193.054762][ T8324] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20000000 [ 193.057484][ T8324] Memory failure: 0x1b1f88: already hardware poisoned [ 193.097692][ T8308] loop0: detected capacity change from 0 to 32768 [ 193.155693][ T8305] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 193.158295][ T8305] BTRFS info (device loop4): using free space tree [ 193.160016][ T8305] BTRFS info (device loop4): has skinny extents [ 193.188580][ T8308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1042 (8308) [ 193.259940][ T8308] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 193.265895][ T8308] BTRFS info (device loop0): force clearing of disk cache [ 193.270602][ T8308] BTRFS info (device loop0): enabling auto defrag [ 193.272425][ T8308] BTRFS info (device loop0): max_inline at 0 [ 193.292061][ T8308] BTRFS info (device loop0): enabling disk space caching [ 193.298843][ T8308] BTRFS info (device loop0): disk space caching is enabled [ 193.300815][ T8308] BTRFS info (device loop0): has skinny extents [ 193.306495][ T8350] loop5: detected capacity change from 0 to 256 [ 193.387686][ T8305] BTRFS info (device loop4): enabling ssd optimizations [ 193.746660][ T8308] BTRFS info (device loop0): enabling ssd optimizations [ 193.804557][ T8308] BTRFS info (device loop0): clearing free space tree [ 193.806538][ T8308] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.816685][ T8308] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.891345][ T8346] loop2: detected capacity change from 0 to 32768 [ 194.111528][ T8352] loop3: detected capacity change from 0 to 32768 [ 194.287996][ T8346] jfs: Unrecognized mount option "i" or missing value [ 194.384678][ T8406] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20000000 [ 194.387199][ T8406] Memory failure: 0x1b1f88: already hardware poisoned [ 194.411328][ T8352] XFS (loop3): Mounting V5 Filesystem [ 194.529187][ T8418] FAULT_INJECTION: forcing a failure. [ 194.529187][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 194.568914][ T8418] CPU: 1 PID: 8418 Comm: syz.5.1060 Not tainted 5.15.181-syzkaller #0 [ 194.571099][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 194.573824][ T8418] Call trace: [ 194.574763][ T8418] dump_backtrace+0x0/0x43c [ 194.576006][ T8418] show_stack+0x2c/0x3c [ 194.577115][ T8418] __dump_stack+0x30/0x40 [ 194.578338][ T8418] dump_stack_lvl+0xf8/0x160 [ 194.579526][ T8418] dump_stack+0x1c/0x5c [ 194.580587][ T8418] should_fail+0x3c0/0x51c [ 194.581768][ T8418] __should_failslab+0xbc/0x10c [ 194.583073][ T8418] should_failslab+0x10/0x28 [ 194.584239][ T8418] slab_pre_alloc_hook+0x64/0xec [ 194.585530][ T8418] kmem_cache_alloc_node+0x98/0x41c [ 194.586942][ T8418] __alloc_skb+0x134/0x67c [ 194.588080][ T8418] netlink_dump+0x19c/0xab4 [ 194.589261][ T8418] netlink_recvmsg+0x4cc/0xac4 [ 194.590512][ T8418] ____sys_recvmsg+0x254/0x794 [ 194.591738][ T8418] ___sys_recvmsg+0x1ac/0x220 [ 194.592975][ T8418] do_recvmmsg+0x2ac/0x85c [ 194.594159][ T8418] __arm64_sys_recvmmsg+0x19c/0x238 [ 194.595551][ T8418] invoke_syscall+0x98/0x2b8 [ 194.596764][ T8418] el0_svc_common+0x138/0x258 [ 194.597968][ T8418] do_el0_svc+0x58/0x14c [ 194.599099][ T8418] el0_svc+0x78/0x1e0 [ 194.600107][ T8418] el0t_64_sync_handler+0xcc/0xe4 [ 194.601450][ T8418] el0t_64_sync+0x1a0/0x1a4 [ 194.632618][ T8407] loop0: detected capacity change from 0 to 4096 [ 194.634582][ T8352] XFS (loop3): Ending clean mount [ 194.644761][ T8352] XFS (loop3): Quotacheck needed: Please wait. [ 194.683711][ T8407] ntfs: (device loop0): parse_options(): Unrecognized mount option /dev/video#. [ 194.688585][ T8352] XFS (loop3): Quotacheck: Done. [ 194.742495][ T4031] XFS (loop3): Unmounting Filesystem [ 194.857147][ T8414] loop4: detected capacity change from 0 to 32768 [ 194.959021][ T8414] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 194.961535][ T8414] BTRFS info (device loop4): setting nodatacow, compression disabled [ 194.971689][ T8414] BTRFS info (device loop4): setting datacow [ 194.974172][ T8414] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 194.976848][ T8414] BTRFS info (device loop4): use zstd compression, level 3 [ 194.978799][ T8414] BTRFS info (device loop4): using free space tree [ 194.980662][ T8414] BTRFS info (device loop4): has skinny extents [ 195.170905][ T8346] loop2: detected capacity change from 0 to 40427 [ 195.181713][ T8346] F2FS-fs (loop2): invalid crc value [ 195.206933][ T8346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.300344][ T8346] F2FS-fs (loop2): Start checkpoint disabled! [ 195.322323][ T8346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 195.380473][ T8414] BTRFS info (device loop4): enabling ssd optimizations [ 195.482312][ T8425] loop5: detected capacity change from 0 to 32768 [ 195.632255][ T8425] XFS (loop5): Mounting V5 Filesystem [ 195.760320][ T1601] attempt to access beyond end of device [ 195.760320][ T1601] loop2: rw=2049, want=40968, limit=40427 [ 195.837016][ T8425] XFS (loop5): Ending clean mount [ 195.843817][ T8425] XFS (loop5): Quotacheck needed: Please wait. [ 195.934676][ T8425] XFS (loop5): Quotacheck: Done. [ 195.989647][ T7845] XFS (loop5): Unmounting Filesystem [ 196.124890][ T8474] loop0: detected capacity change from 0 to 256 [ 196.301432][ T8478] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20000000 [ 196.304130][ T8478] Memory failure: 0x1b1f88: already hardware poisoned [ 196.630929][ T8469] loop4: detected capacity change from 0 to 32768 [ 196.730263][ T8496] loop3: detected capacity change from 0 to 256 [ 196.748637][ T8489] loop5: detected capacity change from 0 to 4096 [ 196.773561][ T8489] ntfs3: Unknown parameter '00000000000000000000026' [ 197.945005][ T8498] loop2: detected capacity change from 0 to 8192 [ 197.999683][ T8518] Injecting memory failure for pfn 0x128e1e at process virtual address 0x20000000 [ 198.036873][ T8518] Memory failure: 0x128e1e: keeping poisoned page in swap cache [ 198.045992][ T8518] Memory failure: 0x128e1e: recovery action for clean swapcache page: Recovered [ 198.048511][ T8518] Injecting memory failure for pfn 0x12e9ed at process virtual address 0x20001000 [ 198.072214][ T8518] Memory failure: 0x12e9ed: keeping poisoned page in swap cache [ 198.086428][ T8518] Memory failure: 0x12e9ed: recovery action for clean swapcache page: Recovered [ 198.109498][ T8518] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 198.112069][ T8518] Memory failure: 0x1b1f88: already hardware poisoned [ 198.454432][ T8530] loop2: detected capacity change from 0 to 64 [ 199.131094][ T8539] Injecting memory failure for pfn 0x128d03 at process virtual address 0x20000000 [ 199.150582][ T8539] Memory failure: 0x128d03: recovery action for dirty LRU page: Recovered [ 199.154684][ T8539] Injecting memory failure for pfn 0x1297a9 at process virtual address 0x20001000 [ 199.178465][ T8539] Memory failure: 0x1297a9: keeping poisoned page in swap cache [ 199.180755][ T8539] Memory failure: 0x1297a9: recovery action for clean swapcache page: Recovered [ 199.206029][ T8539] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 199.208483][ T8539] Memory failure: 0x1b1f88: already hardware poisoned [ 199.211734][ T8546] loop5: detected capacity change from 0 to 1024 [ 199.470735][ T8562] loop5: detected capacity change from 0 to 256 [ 199.617565][ T8559] loop3: detected capacity change from 0 to 8192 [ 199.738276][ T8559] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.030539][ T8556] loop2: detected capacity change from 0 to 40427 [ 202.105647][ T8556] binder: 8556 RLIMIT_NICE not set [ 202.312491][ T8556] binder: 8554:8556 ioctl c0306201 20000040 returned -14 [ 202.458993][ T8576] loop3: detected capacity change from 0 to 32768 [ 202.465826][ T8580] loop4: detected capacity change from 0 to 32768 [ 202.528697][ T8576] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1095 (8576) [ 202.555465][ T8580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1099 (8580) [ 202.560112][ T8576] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 202.563242][ T8576] BTRFS info (device loop3): setting nodatacow, compression disabled [ 202.571453][ T8576] BTRFS info (device loop3): setting datacow [ 202.583351][ T8576] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.586093][ T8576] BTRFS info (device loop3): use zstd compression, level 3 [ 202.588010][ T8576] BTRFS error (device loop3): unrecognized mount option 'seclabel' [ 202.608547][ T8580] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 202.610883][ T8580] BTRFS info (device loop4): force clearing of disk cache [ 202.619114][ T8584] loop5: detected capacity change from 0 to 32768 [ 202.619502][ T8576] BTRFS error (device loop3): open_ctree failed: -22 [ 202.628572][ T4024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4024) [ 202.650259][ T8580] BTRFS info (device loop4): enabling auto defrag [ 202.652028][ T8580] BTRFS info (device loop4): max_inline at 0 [ 202.660394][ T8580] BTRFS info (device loop4): enabling disk space caching [ 202.662264][ T8580] BTRFS info (device loop4): disk space caching is enabled [ 202.677384][ T8580] BTRFS info (device loop4): has skinny extents [ 202.890723][ T8624] udc-core: couldn't find an available UDC or it's busy [ 202.892763][ T8624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 203.031322][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'. [ 204.070563][ T8580] BTRFS info (device loop4): enabling ssd optimizations [ 204.086895][ T8580] BTRFS info (device loop4): clearing free space tree [ 204.088825][ T8580] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.091473][ T8580] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 204.395448][ T8654] Injecting memory failure for pfn 0x132009 at process virtual address 0x20000000 [ 204.417581][ T8654] Memory failure: 0x132009: keeping poisoned page in swap cache [ 204.419779][ T8654] Memory failure: 0x132009: recovery action for clean swapcache page: Recovered [ 204.422372][ T8654] Injecting memory failure for pfn 0x12a56e at process virtual address 0x20001000 [ 204.428291][ T8654] Memory failure: 0x12a56e: keeping poisoned page in swap cache [ 204.430562][ T8654] Memory failure: 0x12a56e: recovery action for clean swapcache page: Recovered [ 204.462626][ T8654] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 204.479636][ T8654] Memory failure: 0x1b1f88: already hardware poisoned [ 204.522641][ T8630] loop0: detected capacity change from 0 to 32768 [ 204.548357][ T8630] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 204.551143][ T8630] BTRFS info (device loop0): setting nodatacow, compression disabled [ 204.573982][ T8630] BTRFS info (device loop0): setting datacow [ 204.575621][ T8630] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 204.582980][ T8630] BTRFS info (device loop0): use zstd compression, level 3 [ 204.584949][ T8630] BTRFS info (device loop0): using free space tree [ 204.586636][ T8630] BTRFS info (device loop0): has skinny extents [ 204.750466][ T8642] loop3: detected capacity change from 0 to 32768 [ 204.838961][ T8684] loop2: detected capacity change from 0 to 256 [ 204.888855][ T8642] XFS (loop3): Mounting V5 Filesystem [ 204.958418][ T8630] BTRFS info (device loop0): enabling ssd optimizations [ 205.101569][ T8642] XFS (loop3): Ending clean mount [ 205.107682][ T8642] XFS (loop3): Quotacheck needed: Please wait. [ 205.141784][ T8710] loop4: detected capacity change from 0 to 256 [ 205.150159][ T8642] XFS (loop3): Quotacheck: Done. [ 205.158789][ T8715] loop5: detected capacity change from 0 to 256 [ 205.266739][ T4031] XFS (loop3): Unmounting Filesystem [ 206.669528][ T8728] loop4: detected capacity change from 0 to 1024 [ 206.763014][ T8728] EXT4-fs (loop4): Ignoring removed nobh option [ 206.764736][ T8728] EXT4-fs (loop4): Ignoring removed bh option [ 206.766265][ T8728] EXT4-fs (loop4): Ignoring removed oldalloc option [ 207.017107][ T8728] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,oldalloc,,errors=continue. Quota mode: writeback. [ 207.049825][ T8743] loop3: detected capacity change from 0 to 256 [ 207.049866][ T8741] loop0: detected capacity change from 0 to 256 [ 207.101179][ T8742] Injecting memory failure for pfn 0x11d60f at process virtual address 0x20000000 [ 207.132542][ T8742] Memory failure: 0x11d60f: keeping poisoned page in swap cache [ 207.178559][ T8742] Memory failure: 0x11d60f: recovery action for clean swapcache page: Recovered [ 207.181073][ T8742] Injecting memory failure for pfn 0x12f2ee at process virtual address 0x20001000 [ 207.238493][ T8728] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 207.355669][ T8742] Memory failure: 0x12f2ee: keeping poisoned page in swap cache [ 209.110122][ T8742] Memory failure: 0x12f2ee: recovery action for clean swapcache page: Recovered [ 209.112699][ T8742] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 209.145396][ T8742] Memory failure: 0x1b1f88: already hardware poisoned [ 209.353255][ T8759] loop3: detected capacity change from 0 to 256 [ 209.415784][ T8770] loop0: detected capacity change from 0 to 256 [ 211.088211][ T8791] loop0: detected capacity change from 0 to 256 [ 211.373910][ T8794] loop4: detected capacity change from 0 to 256 [ 211.376410][ T8799] loop2: detected capacity change from 0 to 256 [ 214.813911][ T8815] Injecting memory failure for pfn 0x128e03 at process virtual address 0x20000000 [ 214.842833][ T8815] Memory failure: 0x128e03: keeping poisoned page in swap cache [ 214.844945][ T8815] Memory failure: 0x128e03: recovery action for clean swapcache page: Recovered [ 214.847586][ T8815] Injecting memory failure for pfn 0x129883 at process virtual address 0x20001000 [ 214.853958][ T8818] loop0: detected capacity change from 0 to 256 [ 214.875947][ T8815] Memory failure: 0x129883: keeping poisoned page in swap cache [ 214.878293][ T8815] Memory failure: 0x129883: recovery action for clean swapcache page: Recovered [ 214.880837][ T8815] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 214.896060][ T8815] Memory failure: 0x1b1f88: already hardware poisoned [ 215.929244][ T8822] loop2: detected capacity change from 0 to 4096 [ 215.968492][ T8822] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 215.971689][ T8822] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 216.023043][ T8822] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 216.026313][ T8822] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 216.053891][ T8837] loop0: detected capacity change from 0 to 256 [ 216.064007][ T8831] Injecting memory failure for pfn 0x12a701 at process virtual address 0x20000000 [ 216.067065][ T8831] Memory failure: 0x12a701: keeping poisoned page in swap cache [ 216.067339][ T8839] loop5: detected capacity change from 0 to 256 [ 216.069241][ T8831] Memory failure: 0x12a701: recovery action for clean swapcache page: Recovered [ 216.071114][ T8822] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 216.080295][ T8831] Injecting memory failure for pfn 0x12de1d at process virtual address 0x20001000 [ 216.084761][ T8822] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 216.095577][ T8831] Memory failure: 0x12de1d: keeping poisoned page in swap cache [ 216.097328][ T8822] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 216.100751][ T8822] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 216.101534][ T8831] Memory failure: 0x12de1d: recovery action for clean swapcache page: Recovered [ 216.111649][ T8831] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 216.119367][ T8822] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 216.120822][ T8831] Memory failure: 0x1b1f88: already hardware poisoned [ 216.159936][ T8822] ntfs: volume version 3.1. [ 216.169757][ T8822] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 217.480271][ T8859] loop4: detected capacity change from 0 to 256 [ 217.645840][ T8866] Injecting memory failure for pfn 0x12de6e at process virtual address 0x20000000 [ 217.649238][ T8869] loop0: detected capacity change from 0 to 256 [ 217.737066][ T8866] Memory failure: 0x12de6e: keeping poisoned page in swap cache [ 217.739545][ T8866] Memory failure: 0x12de6e: recovery action for clean swapcache page: Recovered [ 217.742191][ T8866] Injecting memory failure for pfn 0x12e317 at process virtual address 0x20001000 [ 217.775580][ T8866] Memory failure: 0x12e317: keeping poisoned page in swap cache [ 217.777938][ T8866] Memory failure: 0x12e317: recovery action for clean swapcache page: Recovered [ 217.784875][ T8866] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 217.840543][ T8866] Memory failure: 0x1b1f88: already hardware poisoned [ 219.582265][ T8882] loop4: detected capacity change from 0 to 256 [ 219.636061][ T8884] Injecting memory failure for pfn 0x12a90b at process virtual address 0x20000000 [ 219.638674][ T8884] Memory failure: 0x12a90b: keeping poisoned page in swap cache [ 219.643031][ T8884] Memory failure: 0x12a90b: recovery action for clean swapcache page: Recovered [ 219.654846][ T8884] Injecting memory failure for pfn 0x12df58 at process virtual address 0x20001000 [ 219.657876][ T8884] Memory failure: 0x12df58: keeping poisoned page in swap cache [ 219.660089][ T8884] Memory failure: 0x12df58: recovery action for clean swapcache page: Recovered [ 219.662592][ T8884] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 219.706350][ T8884] Memory failure: 0x1b1f88: already hardware poisoned [ 219.831832][ T8892] loop3: detected capacity change from 0 to 256 [ 219.847110][ T8872] loop5: detected capacity change from 0 to 32768 [ 219.910439][ T8887] loop0: detected capacity change from 0 to 4096 [ 220.709402][ T8887] ntfs: volume version 3.1. [ 221.700880][ T8907] loop2: detected capacity change from 0 to 256 [ 221.740780][ T8904] loop0: detected capacity change from 0 to 1024 [ 221.778693][ T8904] EXT4-fs (loop0): Ignoring removed nobh option [ 221.779595][ T8899] loop4: detected capacity change from 0 to 8192 [ 221.780441][ T8904] EXT4-fs (loop0): Ignoring removed bh option [ 221.804285][ T8904] EXT4-fs (loop0): Ignoring removed oldalloc option [ 221.900249][ T8913] loop3: detected capacity change from 0 to 256 [ 221.918996][ T8899] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.053467][ T8904] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,oldalloc,,errors=continue. Quota mode: writeback. [ 223.173302][ T8913] sched: RT throttling activated [ 224.533321][ T8925] Injecting memory failure for pfn 0x129f71 at process virtual address 0x20000000 [ 224.617531][ T8925] Memory failure: 0x129f71: keeping poisoned page in swap cache [ 224.619862][ T8925] Memory failure: 0x129f71: recovery action for clean swapcache page: Recovered [ 224.622274][ T8925] Injecting memory failure for pfn 0x129721 at process virtual address 0x20001000 [ 225.412225][ T8925] Memory failure: 0x129721: keeping poisoned page in swap cache [ 225.415219][ T8925] Memory failure: 0x129721: recovery action for clean swapcache page: Recovered [ 225.417689][ T8925] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 225.420147][ T8925] Memory failure: 0x1b1f88: already hardware poisoned [ 225.694776][ T8941] loop4: detected capacity change from 0 to 8192 [ 226.057184][ T8945] loop4: detected capacity change from 0 to 64 [ 226.201534][ T8942] loop0: detected capacity change from 0 to 32768 [ 226.212401][ T8942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1172 (8942) [ 226.239087][ T8942] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 226.247286][ T8942] BTRFS info (device loop0): setting nodatacow, compression disabled [ 226.251922][ T8942] BTRFS info (device loop0): setting datacow [ 226.253928][ T8942] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 226.270150][ T8942] BTRFS info (device loop0): use zstd compression, level 3 [ 226.272302][ T8942] BTRFS error (device loop0): unrecognized mount option 'seclabel' [ 226.281755][ T8942] BTRFS error (device loop0): open_ctree failed: -22 [ 226.282005][ T8931] loop3: detected capacity change from 0 to 32768 [ 226.299999][ T8944] loop2: detected capacity change from 0 to 32768 [ 226.305872][ T8939] loop5: detected capacity change from 0 to 40427 [ 226.321096][ T4214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4214) [ 226.387882][ T8939] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 226.413011][ T8944] XFS (loop2): Mounting V5 Filesystem [ 226.457207][ T8939] F2FS-fs (loop5): invalid crc value [ 226.470765][ T8939] F2FS-fs (loop5): Found nat_bits in checkpoint [ 226.583339][ T8939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 226.593018][ T8944] XFS (loop2): Ending clean mount [ 226.596933][ T8944] XFS (loop2): Quotacheck needed: Please wait. [ 226.651346][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 226.668082][ T8944] XFS (loop2): Quotacheck: Done. [ 226.759335][ T8939] attempt to access beyond end of device [ 226.759335][ T8939] loop5: rw=2049, want=45104, limit=40427 [ 226.800163][ T4038] XFS (loop2): Unmounting Filesystem [ 227.848920][ T7845] attempt to access beyond end of device [ 227.848920][ T7845] loop5: rw=2049, want=45112, limit=40427 [ 228.071530][ T8961] loop4: detected capacity change from 0 to 40427 [ 228.135055][ T8961] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 228.137285][ T8961] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.154839][ T8961] F2FS-fs (loop4): invalid crc value [ 228.155260][ T8969] tc_dump_action: action bad kind [ 228.192667][ T8961] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.271031][ T8961] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 228.274768][ T8961] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.678126][ T8966] loop0: detected capacity change from 0 to 32768 [ 228.707942][ T8991] Injecting memory failure for pfn 0x12e494 at process virtual address 0x20000000 [ 228.710693][ T8991] Memory failure: 0x12e494: keeping poisoned page in swap cache [ 228.714108][ T8987] loop3: detected capacity change from 0 to 4096 [ 228.736021][ T8991] Memory failure: 0x12e494: recovery action for clean swapcache page: Recovered [ 228.738570][ T8991] Injecting memory failure for pfn 0x129d70 at process virtual address 0x20001000 [ 228.769729][ T8987] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 228.774960][ T8991] Memory failure: 0x129d70: keeping poisoned page in swap cache [ 228.777505][ T8991] Memory failure: 0x129d70: recovery action for clean swapcache page: Recovered [ 228.790526][ T8991] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 228.791006][ T8966] JBD2: Ignoring recovery information on journal [ 228.793639][ T8991] Memory failure: 0x1b1f88: already hardware poisoned [ 228.796340][ T8966] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has bad extent record (0, 304, 0) [ 228.846487][ T8966] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 228.849332][ T8966] (syz.0.1178,8966,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 228.851471][ T8966] (syz.0.1178,8966,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 228.878959][ T8987] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 228.893027][ T8966] (syz.0.1178,8966,0):ocfs2_bmap:488 ERROR: get_blocks() failed, block = 32 [ 228.918758][ T8966] (syz.0.1178,8966,0):ocfs2_bmap:489 ERROR: status = -30 [ 228.920698][ T8966] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 228.946639][ T8966] JBD2: bad block at offset 32 [ 228.973691][ T8969] loop2: detected capacity change from 0 to 32768 [ 228.981639][ T8966] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 229.003581][ T4031] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 229.010588][ T4031] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 229.023744][ T8969] jfs: Unrecognized mount option "i" or missing value [ 229.477663][ T9020] Injecting memory failure for pfn 0x128c33 at process virtual address 0x20000000 [ 229.485840][ T9020] Memory failure: 0x128c33: keeping poisoned page in swap cache [ 229.488111][ T9020] Memory failure: 0x128c33: recovery action for clean swapcache page: Recovered [ 229.490628][ T9020] Injecting memory failure for pfn 0x129914 at process virtual address 0x20001000 [ 229.503574][ T9020] Memory failure: 0x129914: keeping poisoned page in swap cache [ 229.505709][ T9020] Memory failure: 0x129914: recovery action for clean swapcache page: Recovered [ 229.527806][ T9020] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 229.532303][ T9020] Memory failure: 0x1b1f88: already hardware poisoned [ 229.742704][ T9029] loop5: detected capacity change from 0 to 4096 [ 230.084677][ T9022] loop2: detected capacity change from 0 to 32768 [ 230.202034][ T9022] XFS (loop2): Mounting V5 Filesystem [ 230.283419][ T9022] XFS (loop2): Ending clean mount [ 230.288562][ T9022] XFS (loop2): Quotacheck needed: Please wait. [ 230.300710][ T9033] loop4: detected capacity change from 0 to 32768 [ 230.435214][ T9022] XFS (loop2): Quotacheck: Done. [ 230.485963][ T9033] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 230.488341][ T9033] BTRFS info (device loop4): setting nodatacow, compression disabled [ 230.490406][ T9033] BTRFS info (device loop4): setting datacow [ 230.512987][ T9033] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 230.525960][ T9033] BTRFS info (device loop4): use zstd compression, level 3 [ 230.527986][ T9033] BTRFS info (device loop4): using free space tree [ 230.529709][ T9033] BTRFS info (device loop4): has skinny extents [ 230.531766][ T4038] XFS (loop2): Unmounting Filesystem [ 231.209715][ T4035] ocfs2: Unmounting device (7,0) on (node local) [ 231.406669][ T9033] BTRFS info (device loop4): enabling ssd optimizations [ 231.627655][ T9085] Injecting memory failure for pfn 0x11e98e at process virtual address 0x20000000 [ 231.630623][ T9085] Memory failure: 0x11e98e: keeping poisoned page in swap cache [ 231.632753][ T9085] Memory failure: 0x11e98e: recovery action for clean swapcache page: Recovered [ 231.676310][ T9085] Injecting memory failure for pfn 0x11e9b6 at process virtual address 0x20001000 [ 231.715817][ T9085] Memory failure: 0x11e9b6: keeping poisoned page in swap cache [ 231.725387][ T9085] Memory failure: 0x11e9b6: recovery action for clean swapcache page: Recovered [ 231.757216][ T9085] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 231.766560][ T9085] Memory failure: 0x1b1f88: already hardware poisoned [ 231.878142][ T9099] Injecting memory failure for pfn 0x11f031 at process virtual address 0x20000000 [ 231.892665][ T9099] Memory failure: 0x11f031: keeping poisoned page in swap cache [ 231.902626][ T9099] Memory failure: 0x11f031: recovery action for clean swapcache page: Recovered [ 231.905119][ T9099] Injecting memory failure for pfn 0x11f51d at process virtual address 0x20001000 [ 231.916865][ T9107] loop2: detected capacity change from 0 to 256 [ 231.934398][ T9099] Memory failure: 0x11f51d: keeping poisoned page in swap cache [ 231.946281][ T9099] Memory failure: 0x11f51d: recovery action for clean swapcache page: Recovered [ 231.948839][ T9099] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 231.951307][ T9099] Memory failure: 0x1b1f88: already hardware poisoned [ 231.969410][ T9103] loop3: detected capacity change from 0 to 4096 [ 232.052581][ T9091] loop4: detected capacity change from 0 to 4096 [ 232.193570][ T9115] loop5: detected capacity change from 0 to 256 [ 232.998362][ T9103] NILFS (loop3): error -4 creating segctord thread [ 233.432212][ T9136] Injecting memory failure for pfn 0x11d9bb at process virtual address 0x20000000 [ 233.452541][ T9136] Memory failure: 0x11d9bb: keeping poisoned page in swap cache [ 233.461925][ T9136] Memory failure: 0x11d9bb: recovery action for clean swapcache page: Recovered [ 233.489924][ T9136] Injecting memory failure for pfn 0x12e020 at process virtual address 0x20001000 [ 233.502538][ T9136] Memory failure: 0x12e020: keeping poisoned page in swap cache [ 233.529739][ T9136] Memory failure: 0x12e020: recovery action for clean swapcache page: Recovered [ 233.532207][ T9136] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 233.555333][ T9136] Memory failure: 0x1b1f88: already hardware poisoned [ 233.755714][ T9122] loop2: detected capacity change from 0 to 32768 [ 233.782080][ T9122] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1226 (9122) [ 233.808310][ T9147] loop4: detected capacity change from 0 to 1024 [ 233.841374][ T9122] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 233.844431][ T9122] BTRFS info (device loop2): setting nodatacow, compression disabled [ 233.848888][ T9122] BTRFS info (device loop2): setting datacow [ 233.855146][ T9122] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 233.860351][ T9147] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 233.863563][ T9122] BTRFS info (device loop2): use zstd compression, level 3 [ 233.870149][ T9122] BTRFS info (device loop2): using free space tree [ 233.872337][ T9147] EXT4-fs (loop4): Ignoring removed orlov option [ 233.875749][ T9147] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 233.876697][ T9122] BTRFS info (device loop2): has skinny extents [ 234.011072][ T9122] BTRFS info (device loop2): enabling ssd optimizations [ 234.260097][ T9143] loop3: detected capacity change from 0 to 32768 [ 234.392111][ T9143] XFS (loop3): Mounting V5 Filesystem [ 234.482009][ T9143] XFS (loop3): Ending clean mount [ 234.485452][ T9143] XFS (loop3): Quotacheck needed: Please wait. [ 234.506976][ T9192] loop4: detected capacity change from 0 to 256 [ 234.554522][ T9143] XFS (loop3): Quotacheck: Done. [ 234.610885][ T4031] XFS (loop3): Unmounting Filesystem [ 234.678594][ T9199] Injecting memory failure for pfn 0x12e7ee at process virtual address 0x20000000 [ 234.692432][ T9199] Memory failure: 0x12e7ee: keeping poisoned page in swap cache [ 234.694664][ T9199] Memory failure: 0x12e7ee: recovery action for clean swapcache page: Recovered [ 234.702221][ T9199] Injecting memory failure for pfn 0x1299be at process virtual address 0x20001000 [ 234.704920][ T9199] Memory failure: 0x1299be: keeping poisoned page in swap cache [ 234.722737][ T9199] Memory failure: 0x1299be: recovery action for clean swapcache page: Recovered [ 234.743766][ T9199] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 234.755857][ T9199] Memory failure: 0x1b1f88: already hardware poisoned [ 234.823454][ T9197] loop0: detected capacity change from 0 to 4096 [ 234.882791][ T9197] NILFS (loop0): unrecognized mount option "/dev/fuse" [ 235.197900][ T9196] loop5: detected capacity change from 0 to 32768 [ 235.351910][ T9196] jfs_mount: Mount Failure: File System Dirty. [ 235.353646][ T9196] Mount JFS Failure: -22 [ 235.354841][ T9196] jfs_mount failed w/return code = -22 [ 235.555705][ T9210] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1250'. [ 235.558277][ T9210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1250'. [ 236.916442][ T9230] Injecting memory failure for pfn 0x12ebc7 at process virtual address 0x20000000 [ 236.925518][ T9235] Scaler: ================= START STATUS ================= [ 236.927645][ T9235] Scaler: ================== END STATUS ================== [ 236.928268][ T9227] loop2: detected capacity change from 0 to 32768 [ 236.950655][ T9227] jfs: Unrecognized mount option "i" or missing value [ 236.958795][ T9230] Memory failure: 0x12ebc7: keeping poisoned page in swap cache [ 236.960955][ T9230] Memory failure: 0x12ebc7: recovery action for clean swapcache page: Recovered [ 236.971455][ T9230] Injecting memory failure for pfn 0x12e378 at process virtual address 0x20001000 [ 236.990229][ T9230] Memory failure: 0x12e378: keeping poisoned page in swap cache [ 237.000835][ T9230] Memory failure: 0x12e378: recovery action for clean swapcache page: Recovered [ 237.011015][ T9230] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 237.013617][ T9230] Memory failure: 0x1b1f88: already hardware poisoned [ 237.092425][ T9243] FAULT_INJECTION: forcing a failure. [ 237.092425][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.113113][ T9243] CPU: 0 PID: 9243 Comm: syz.3.1261 Not tainted 5.15.181-syzkaller #0 [ 237.115474][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.118266][ T9243] Call trace: [ 237.119177][ T9243] dump_backtrace+0x0/0x43c [ 237.120458][ T9243] show_stack+0x2c/0x3c [ 237.121608][ T9243] __dump_stack+0x30/0x40 [ 237.122815][ T9243] dump_stack_lvl+0xf8/0x160 [ 237.124076][ T9243] dump_stack+0x1c/0x5c [ 237.125230][ T9243] should_fail+0x3c0/0x51c [ 237.126448][ T9243] should_fail_usercopy+0x20/0x30 [ 237.127838][ T9243] __copy_msghdr_from_user+0xb8/0x4f8 [ 237.129268][ T9243] ___sys_recvmsg+0x118/0x220 [ 237.130624][ T9243] do_recvmmsg+0x2ac/0x85c [ 237.131797][ T9243] __arm64_sys_recvmmsg+0x19c/0x238 [ 237.133219][ T9243] invoke_syscall+0x98/0x2b8 [ 237.134481][ T9243] el0_svc_common+0x138/0x258 [ 237.135733][ T9243] do_el0_svc+0x58/0x14c [ 237.136876][ T9243] el0_svc+0x78/0x1e0 [ 237.137968][ T9243] el0t_64_sync_handler+0xcc/0xe4 [ 237.139320][ T9243] el0t_64_sync+0x1a0/0x1a4 [ 239.335917][ T9268] loop0: detected capacity change from 0 to 4096 [ 239.350975][ T9268] __ntfs_warning: 26 callbacks suppressed [ 239.350988][ T9268] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 239.386949][ T9257] loop3: detected capacity change from 0 to 32768 [ 239.489870][ T9257] XFS (loop3): Mounting V5 Filesystem [ 239.573707][ T9277] loop5: detected capacity change from 0 to 512 [ 239.604510][ T9277] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 239.665429][ T9277] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,quota,. Quota mode: writeback. [ 239.799924][ T9257] XFS (loop3): Ending clean mount [ 239.802642][ T9287] loop0: detected capacity change from 0 to 32768 [ 239.802741][ T9257] XFS (loop3): Quotacheck needed: Please wait. [ 239.841003][ T9287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1276 (9287) [ 239.861286][ T9257] XFS (loop3): Quotacheck: Done. [ 239.927191][ T9287] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 239.934354][ T9287] BTRFS info (device loop0): force clearing of disk cache [ 239.936397][ T9287] BTRFS info (device loop0): enabling auto defrag [ 239.948130][ T9287] BTRFS info (device loop0): max_inline at 0 [ 239.949932][ T9287] BTRFS info (device loop0): enabling disk space caching [ 239.951830][ T9287] BTRFS info (device loop0): disk space caching is enabled [ 239.953713][ T9287] BTRFS info (device loop0): has skinny extents [ 239.956057][ T4031] XFS (loop3): Unmounting Filesystem [ 240.065655][ T9281] loop4: detected capacity change from 0 to 32768 [ 240.107362][ T9281] jfs: Unrecognized mount option "i" or missing value [ 240.251473][ T9287] BTRFS info (device loop0): enabling ssd optimizations [ 240.254331][ T9287] BTRFS info (device loop0): clearing free space tree [ 240.257678][ T9287] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.260397][ T9287] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.376855][ T9282] loop2: detected capacity change from 0 to 32768 [ 240.508257][ T9282] XFS (loop2): Mounting V5 Filesystem [ 240.625393][ T9329] loop4: detected capacity change from 0 to 256 [ 240.694669][ T9282] XFS (loop2): Ending clean mount [ 240.713257][ T9282] XFS (loop2): Quotacheck needed: Please wait. [ 240.759237][ T9282] XFS (loop2): Quotacheck: Done. [ 240.859045][ T4038] XFS (loop2): Unmounting Filesystem [ 241.610072][ T4277] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.713990][ T4277] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.833821][ T4277] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.976937][ T9345] loop0: detected capacity change from 0 to 256 [ 242.008473][ T4277] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.809251][ T9369] loop2: detected capacity change from 0 to 2048 [ 243.874498][ T9341] chnl_net:caif_netlink_parms(): no params data found [ 243.943924][ T9369] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 243.951424][ T3606] Bluetooth: hci0: command 0x0409 tx timeout [ 243.959415][ T9369] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 243.962581][ T9369] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 243.964810][ T9369] UDF-fs: Scanning with blocksize 512 failed [ 243.975457][ T9369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.018471][ T9361] loop4: detected capacity change from 0 to 32768 [ 244.126478][ T9361] XFS (loop4): Mounting V5 Filesystem [ 244.185840][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.187907][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.217643][ T9341] device bridge_slave_0 entered promiscuous mode [ 244.241863][ T9372] loop0: detected capacity change from 0 to 32768 [ 244.243522][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.245705][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.248237][ T9341] device bridge_slave_1 entered promiscuous mode [ 244.249715][ T9361] XFS (loop4): Ending clean mount [ 244.252633][ T9361] XFS (loop4): Quotacheck needed: Please wait. [ 244.289793][ T9372] jfs: Unrecognized mount option "i" or missing value [ 244.303318][ T9393] loop2: detected capacity change from 0 to 128 [ 244.356176][ T9393] EXT4-fs (loop2): Ignoring removed nobh option [ 244.363163][ T9361] XFS (loop4): Quotacheck: Done. [ 244.381765][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.386623][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.408404][ T9393] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 244.438045][ T4040] XFS (loop4): Unmounting Filesystem [ 244.508226][ T9401] loop2: detected capacity change from 0 to 128 [ 244.513490][ T9401] EXT4-fs (loop2): Ignoring removed nobh option [ 244.557362][ T9401] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 244.580009][ T9341] team0: Port device team_slave_0 added [ 244.584672][ T9341] team0: Port device team_slave_1 added [ 244.633896][ T9363] loop3: detected capacity change from 0 to 32768 [ 244.664615][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.666707][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.691646][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.692316][ T9363] (syz.3.1292,9363,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "x4dqC"7g)p:}=j&VGor`$" or missing value [ 244.698183][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.716280][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.723294][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.733477][ T9363] (syz.3.1292,9363,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 244.811548][ T9410] loop0: detected capacity change from 0 to 2048 [ 244.914137][ T9410] NILFS (loop0): unrecognized mount option "" [ 245.884631][ T9341] device hsr_slave_0 entered promiscuous mode [ 245.901673][ T9424] loop2: detected capacity change from 0 to 512 [ 245.929762][ T9341] device hsr_slave_1 entered promiscuous mode [ 245.951474][ T9424] EXT4-fs (loop2): Ignoring removed oldalloc option [ 245.953479][ T9424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 245.956894][ T9424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.968507][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.970542][ T9341] Cannot create hsr debugfs directory [ 246.030153][ T4657] Bluetooth: hci0: command 0x041b tx timeout [ 246.074506][ T9424] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 246.080304][ T9424] EXT4-fs (loop2): 1 truncate cleaned up [ 246.082044][ T9424] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 246.136707][ T9410] loop0: detected capacity change from 0 to 256 [ 246.684430][ T9443] loop3: detected capacity change from 0 to 4096 [ 247.263855][ T9443] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.432334][ T9341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.481738][ T9341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.538258][ T9464] loop2: detected capacity change from 0 to 512 [ 247.609295][ T9464] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 247.620087][ T9341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.660706][ T9341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.803953][ T9464] loop2: detected capacity change from 0 to 256 [ 248.102967][ T3606] Bluetooth: hci0: command 0x040f tx timeout [ 248.643756][ T9464] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 248.676631][ T9452] loop0: detected capacity change from 0 to 32768 [ 248.684550][ T9464] exFAT-fs (loop2): IO charset ascijnD3/|i not found [ 248.724106][ T9452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1310 (9452) [ 248.770654][ T9452] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 248.787822][ T9452] BTRFS info (device loop0): setting nodatacow, compression disabled [ 248.790128][ T9452] BTRFS info (device loop0): setting datacow [ 248.808965][ T9452] BTRFS info (device loop0): max_inline at 4096 [ 248.810699][ T9452] BTRFS info (device loop0): using free space tree [ 248.850920][ T9452] BTRFS info (device loop0): has skinny extents [ 248.989587][ T4277] device hsr_slave_0 left promiscuous mode [ 249.024127][ T9466] loop4: detected capacity change from 0 to 32768 [ 249.161820][ T4277] device hsr_slave_1 left promiscuous mode [ 249.179467][ T1601] BTRFS warning (device loop0): checksum verify failed on 5328896 wanted 0x51ec978b found 0x7ee97b3c level 0 [ 249.182887][ T9452] BTRFS warning (device loop0): failed to read root (objectid=4): -5 [ 249.966496][ T9466] XFS (loop4): Mounting V5 Filesystem [ 249.994954][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.997074][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.019290][ T9516] loop2: detected capacity change from 0 to 256 [ 250.053123][ T9485] loop3: detected capacity change from 0 to 32768 [ 250.089568][ T9452] BTRFS error (device loop0): open_ctree failed: -22 [ 250.094692][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.096810][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.105531][ T4277] device bridge_slave_1 left promiscuous mode [ 250.107276][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.114721][ T9485] jfs: Unrecognized mount option "i" or missing value [ 250.163213][ T4078] Bluetooth: hci0: command 0x0419 tx timeout [ 250.185613][ T4277] device bridge_slave_0 left promiscuous mode [ 250.187404][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.327681][ T9466] XFS (loop4): Ending clean mount [ 250.330365][ T9466] XFS (loop4): Quotacheck needed: Please wait. [ 251.141296][ T9466] XFS (loop4): Quotacheck: Done. [ 251.191485][ T4040] XFS (loop4): Unmounting Filesystem [ 251.287297][ T4277] device veth1_macvtap left promiscuous mode [ 251.289100][ T4277] device veth0_macvtap left promiscuous mode [ 251.291022][ T4277] device veth1_vlan left promiscuous mode [ 251.292785][ T4277] device veth0_vlan left promiscuous mode [ 251.710536][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 251.725804][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 251.738935][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.773034][ T9536] loop4: detected capacity change from 0 to 4096 [ 251.775225][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.783357][ T9536] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 251.959975][ T4277] bond0 (unregistering): Released all slaves [ 252.067338][ T9526] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 252.109144][ T9526] team0: Port device vlan0 added [ 252.178608][ T9546] loop0: detected capacity change from 0 to 256 [ 252.211714][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.376752][ T9549] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.1327'. [ 252.395194][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.397838][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.403599][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.408775][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.411721][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.414217][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.416166][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.422805][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.425538][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.428219][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.438514][ T9552] loop4: detected capacity change from 0 to 8 [ 252.455188][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.457206][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.481062][ T9555] udc-core: couldn't find an available UDC or it's busy [ 252.483262][ T9555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.649159][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.166186][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.171104][ T9552] attempt to access beyond end of device [ 254.171104][ T9552] loop4: rw=2048, want=36028797018963976, limit=8 [ 254.174510][ T9552] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 254.176601][ T9552] unable to read xattr id index table [ 254.235627][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.236941][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.237545][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.243776][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.247759][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.251418][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.254184][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.257923][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 254.286778][ T9341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.287858][ T9563] Injecting memory failure for pfn 0x12de77 at process virtual address 0x20000000 [ 254.289582][ T9341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.304199][ T9563] Memory failure: 0x12de77: keeping poisoned page in swap cache [ 254.306466][ T9563] Memory failure: 0x12de77: recovery action for clean swapcache page: Recovered [ 254.308935][ T9563] Injecting memory failure for pfn 0x11ea92 at process virtual address 0x20001000 [ 254.337149][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.353571][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.367650][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.380589][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.388853][ T9570] loop3: detected capacity change from 0 to 256 [ 254.392772][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.397049][ T9563] Memory failure: 0x11ea92: keeping poisoned page in swap cache [ 254.402891][ T9563] Memory failure: 0x11ea92: recovery action for clean swapcache page: Recovered [ 254.408754][ T9563] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 254.419017][ T9563] Memory failure: 0x1b1f88: already hardware poisoned [ 255.625780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.627945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.707480][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.184060][ T9569] loop0: detected capacity change from 0 to 32768 [ 256.476863][ T9569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1330 (9569) [ 257.024329][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.031557][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.039422][ T9616] Injecting memory failure for pfn 0x12dd78 at process virtual address 0x20000000 [ 257.067902][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.070800][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.079362][ T9569] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 257.081777][ T9569] BTRFS info (device loop0): setting nodatacow, compression disabled [ 257.083963][ T9569] BTRFS info (device loop0): setting datacow [ 257.085706][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.088659][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.095512][ T9616] Memory failure: 0x12dd78: keeping poisoned page in swap cache [ 257.097791][ T9616] Memory failure: 0x12dd78: recovery action for clean swapcache page: Recovered [ 257.100245][ T9616] Injecting memory failure for pfn 0x12deb9 at process virtual address 0x20001000 [ 257.104009][ T9341] device veth0_vlan entered promiscuous mode [ 257.110991][ T9620] FAULT_INJECTION: forcing a failure. [ 257.110991][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.119639][ T9569] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 257.122040][ T9569] BTRFS info (device loop0): use zstd compression, level 3 [ 257.123915][ T9569] BTRFS info (device loop0): using free space tree [ 257.140739][ T9616] Memory failure: 0x12deb9: keeping poisoned page in swap cache [ 257.142991][ T9616] Memory failure: 0x12deb9: recovery action for clean swapcache page: Recovered [ 257.146053][ T9569] BTRFS info (device loop0): has skinny extents [ 257.152655][ T9616] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 257.155400][ T9620] CPU: 1 PID: 9620 Comm: syz.3.1341 Not tainted 5.15.181-syzkaller #0 [ 257.155439][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.155446][ T9620] Call trace: [ 257.155449][ T9620] dump_backtrace+0x0/0x43c [ 257.155466][ T9620] show_stack+0x2c/0x3c [ 257.155475][ T9620] __dump_stack+0x30/0x40 [ 257.155485][ T9620] dump_stack_lvl+0xf8/0x160 [ 257.155493][ T9620] dump_stack+0x1c/0x5c [ 257.155501][ T9620] should_fail+0x3c0/0x51c [ 257.155510][ T9620] should_fail_usercopy+0x20/0x30 [ 257.155519][ T9620] input_event_from_user+0xc0/0x450 [ 257.155537][ T9620] evdev_write+0x274/0x37c [ 257.155545][ T9620] vfs_write+0x280/0xa2c [ 257.155555][ T9620] ksys_write+0x120/0x210 [ 257.155563][ T9620] __arm64_sys_write+0x7c/0x90 [ 257.155571][ T9620] invoke_syscall+0x98/0x2b8 [ 257.155581][ T9620] el0_svc_common+0x138/0x258 [ 257.155590][ T9620] do_el0_svc+0x58/0x14c [ 257.155599][ T9620] el0_svc+0x78/0x1e0 [ 257.155608][ T9620] el0t_64_sync_handler+0xcc/0xe4 [ 257.155617][ T9620] el0t_64_sync+0x1a0/0x1a4 [ 257.197439][ T9341] device veth1_vlan entered promiscuous mode [ 257.209780][ T9619] loop2: detected capacity change from 0 to 4096 [ 257.221958][ T9592] loop4: detected capacity change from 0 to 32768 [ 257.224621][ T9616] Memory failure: 0x1b1f88: already hardware poisoned [ 257.242222][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.245277][ T9619] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 257.255099][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.259465][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.273171][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.289551][ T9341] device veth0_macvtap entered promiscuous mode [ 257.310782][ T9341] device veth1_macvtap entered promiscuous mode [ 257.350549][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.356258][ T9569] BTRFS error (device loop0): open_ctree failed: -12 [ 257.386397][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.389004][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.446883][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.449517][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.452260][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.470190][ T9592] XFS (loop4): Mounting V5 Filesystem [ 257.478256][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.490700][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.519247][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.539038][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.541932][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.551429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.572811][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.730397][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.733675][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.736296][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.739068][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.774491][ T9592] XFS (loop4): Ending clean mount [ 257.792562][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.795824][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.799596][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.818915][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.534030][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.541326][ T9592] XFS (loop4): Quotacheck needed: Please wait. [ 258.555053][ T9341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.577439][ T9341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.579814][ T9341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.582158][ T9341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.617200][ T9592] XFS (loop4): Quotacheck: Done. [ 258.643237][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.645871][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.741536][ T4040] XFS (loop4): Unmounting Filesystem [ 258.853866][ T9581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.856341][ T9581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.861440][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.034175][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.036764][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.042225][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.092073][ T9684] loop3: detected capacity change from 0 to 4096 [ 259.106626][ T9689] Injecting memory failure for pfn 0x11e141 at process virtual address 0x20000000 [ 259.134047][ T9689] Memory failure: 0x11e141: keeping poisoned page in swap cache [ 259.144276][ T9689] Memory failure: 0x11e141: recovery action for clean swapcache page: Recovered [ 259.147308][ T9689] Injecting memory failure for pfn 0x11eb11 at process virtual address 0x20001000 [ 259.160856][ T9689] Memory failure: 0x11eb11: keeping poisoned page in swap cache [ 259.163017][ T9689] Memory failure: 0x11eb11: recovery action for clean swapcache page: Recovered [ 259.182475][ T9692] FAULT_INJECTION: forcing a failure. [ 259.182475][ T9692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.203548][ T9689] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 259.213655][ T9692] CPU: 0 PID: 9692 Comm: syz.2.1354 Not tainted 5.15.181-syzkaller #0 [ 259.215912][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 259.218676][ T9692] Call trace: [ 259.219531][ T9692] dump_backtrace+0x0/0x43c [ 259.220749][ T9692] show_stack+0x2c/0x3c [ 259.221857][ T9692] __dump_stack+0x30/0x40 [ 259.223052][ T9692] dump_stack_lvl+0xf8/0x160 [ 259.224303][ T9692] dump_stack+0x1c/0x5c [ 259.225386][ T9692] should_fail+0x3c0/0x51c [ 259.226555][ T9692] should_fail_alloc_page+0x74/0xa8 [ 259.228026][ T9692] prepare_alloc_pages+0x160/0x460 [ 259.229411][ T9692] __alloc_pages+0x108/0x470 [ 259.230651][ T9692] alloc_pages_vma+0x284/0x7a8 [ 259.231954][ T9692] __read_swap_cache_async+0x1a0/0x664 [ 259.233526][ T9692] swapin_readahead+0x57c/0x8ac [ 259.234818][ T9692] do_swap_page+0x448/0x157c [ 259.236130][ T9692] handle_mm_fault+0x1468/0x2950 [ 259.237577][ T9692] do_page_fault+0x694/0xad4 [ 259.238809][ T9692] do_translation_fault+0xe0/0x130 [ 259.240180][ T9692] do_mem_abort+0x6c/0x1ac [ 259.241371][ T9692] el1_abort+0x3c/0x5c [ 259.242521][ T9692] el1h_64_sync_handler+0x80/0xcc [ 259.243846][ T9692] el1h_64_sync+0x78/0x7c [ 259.244998][ T9692] __arch_copy_from_user+0xa4/0x218 [ 259.246410][ T9692] evdev_write+0x274/0x37c [ 259.247644][ T9692] vfs_write+0x280/0xa2c [ 259.248776][ T9692] ksys_write+0x120/0x210 [ 259.249945][ T9692] __arm64_sys_write+0x7c/0x90 [ 259.251252][ T9692] invoke_syscall+0x98/0x2b8 [ 259.252497][ T9692] el0_svc_common+0x138/0x258 [ 259.253734][ T9692] do_el0_svc+0x58/0x14c [ 259.254866][ T9692] el0_svc+0x78/0x1e0 [ 259.255950][ T9692] el0t_64_sync_handler+0xcc/0xe4 [ 259.257305][ T9692] el0t_64_sync+0x1a0/0x1a4 [ 259.263251][ T9684] ntfs: (device loop3): parse_options(): Invalid gid option argument: 0xffffffffffffffff [ 259.278003][ T9690] loop0: detected capacity change from 0 to 4096 [ 259.290346][ T9689] Memory failure: 0x1b1f88: already hardware poisoned [ 259.336150][ T9690] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 259.584730][ T9701] mkiss: ax0: crc mode is auto. [ 259.748795][ T9713] Injecting memory failure for pfn 0x12e9ef at process virtual address 0x20000000 [ 259.772326][ T9713] Memory failure: 0x12e9ef: keeping poisoned page in swap cache [ 259.774547][ T9713] Memory failure: 0x12e9ef: recovery action for clean swapcache page: Recovered [ 259.777096][ T9713] Injecting memory failure for pfn 0x12a563 at process virtual address 0x20001000 [ 259.811699][ T9713] Memory failure: 0x12a563: keeping poisoned page in swap cache [ 259.814037][ T9713] Memory failure: 0x12a563: recovery action for clean swapcache page: Recovered [ 259.838887][ T9713] Injecting memory failure for pfn 0x1b1f88 at process virtual address 0x20002000 [ 259.850961][ T9713] Memory failure: 0x1b1f88: already hardware poisoned [ 260.734431][ T9697] loop6: detected capacity change from 0 to 32768 [ 260.821160][ T9697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1356 (9697) [ 260.904131][ T9697] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 260.912035][ T9697] BTRFS info (device loop6): setting nodatacow, compression disabled [ 260.914307][ T9697] BTRFS info (device loop6): setting datacow [ 260.932341][ T9697] BTRFS info (device loop6): max_inline at 4096 [ 260.934171][ T9697] BTRFS info (device loop6): using free space tree [ 260.962682][ T9697] BTRFS info (device loop6): has skinny extents [ 261.129273][ T26] audit: type=1326 audit(261.254:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.0.1367" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa312d728 code=0x0 [ 261.156003][ T9727] loop4: detected capacity change from 0 to 32768 [ 261.230253][ T9727] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1362 (9727) [ 261.243144][ T9707] loop3: detected capacity change from 0 to 40427 [ 261.308084][ T9727] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 261.310606][ T9727] BTRFS info (device loop4): force clearing of disk cache [ 261.312707][ T9727] BTRFS info (device loop4): enabling auto defrag [ 261.318256][ T9581] BTRFS warning (device loop6): checksum verify failed on 5328896 wanted 0x51ec978b found 0x7ee97b3c level 0 [ 261.321845][ T9697] BTRFS warning (device loop6): failed to read root (objectid=4): -5 [ 261.406045][ T9727] BTRFS info (device loop4): max_inline at 0 [ 261.418460][ T9727] BTRFS info (device loop4): enabling disk space caching [ 261.423860][ T9707] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.446055][ T9727] BTRFS info (device loop4): disk space caching is enabled [ 261.465414][ T9727] BTRFS info (device loop4): has skinny extents [ 261.483570][ T9697] BTRFS error (device loop6): open_ctree failed: -22 [ 261.529086][ T9707] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 261.564825][ T9701] loop2: detected capacity change from 0 to 40427 [ 261.616068][ T9701] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 261.618451][ T9701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 261.625292][ T9701] F2FS-fs (loop2): invalid crc value [ 261.687054][ T9701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.819431][ T9701] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 261.821894][ T9727] BTRFS info (device loop4): enabling ssd optimizations [ 261.822729][ T9727] BTRFS info (device loop4): clearing free space tree [ 261.823943][ T9701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.827885][ T9727] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 261.841497][ T9727] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.107579][ T9807] loop0: detected capacity change from 0 to 4096 [ 262.153275][ T9807] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 262.537396][ T9819] udc-core: couldn't find an available UDC or it's busy [ 262.559973][ T9819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 262.686754][ T9825] Mount JFS Failure: -22 [ 262.695183][ T9825] jfs_mount failed w/return code = -22 [ 262.809462][ T9830] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 262.878392][ T4031] attempt to access beyond end of device [ 262.878392][ T4031] loop3: rw=2049, want=45104, limit=40427 [ 262.937319][ T9805] loop6: detected capacity change from 0 to 32768 [ 263.154744][ T9805] XFS (loop6): Mounting V5 Filesystem [ 263.439629][ T9876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 263.441691][ T9876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.460497][ T9876] vhci_hcd vhci_hcd.0: Device attached [ 263.461848][ T4036] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 263.473723][ T9805] XFS (loop6): Ending clean mount [ 263.479516][ T9805] XFS (loop6): Quotacheck needed: Please wait. [ 263.488680][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 263.572111][ T9805] XFS (loop6): Quotacheck: Done. [ 263.707143][ T9893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 263.732540][ T9341] XFS (loop6): Unmounting Filesystem [ 263.742098][ T8396] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 263.822522][ T8393] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 264.066409][ T8393] usb 1-1: Using ep0 maxpacket: 16 [ 264.105420][ T9926] 9pnet_virtio: no channels available for device syz [ 264.339533][ T8393] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 264.342057][ T8393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.344189][ T8393] usb 1-1: Product: syz [ 264.345285][ T8393] usb 1-1: Manufacturer: syz [ 264.356882][ T8393] usb 1-1: SerialNumber: syz [ 264.381628][ T8393] usb 1-1: config 0 descriptor?? [ 264.393767][ T9946] udc-core: couldn't find an available UDC or it's busy [ 264.395676][ T9946] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 264.420726][ T8393] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 264.423370][ T8393] usb 1-1: Detected FT232H [ 264.438419][ T9949] 9pnet_virtio: no channels available for device syz [ 264.620490][ T9878] usb 2-1: recv xbuf, 0 [ 264.640437][ T8393] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 264.645654][ T4277] vhci_hcd: stop threads [ 264.647759][ T4277] vhci_hcd: release socket [ 264.650978][ T4277] vhci_hcd: disconnect device [ 264.661114][ T8393] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 264.681343][ T8393] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 264.686400][ T8393] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 264.697327][ T8393] usb 1-1: USB disconnect, device number 3 [ 264.699327][ T8396] vhci_hcd: vhci_device speed not set [ 264.718644][ T8393] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 264.728778][ T8393] ftdi_sio 1-1:0.0: device disconnected [ 264.764481][ T4036] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 264.982109][ T9974] udc-core: couldn't find an available UDC or it's busy [ 264.992256][ T9974] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 265.337080][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 265.438847][ T9995] udc-core: couldn't find an available UDC or it's busy [ 265.449153][ T9995] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 265.664893][ T9995] udc-core: couldn't find an available UDC or it's busy [ 265.666901][ T9995] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.268555][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 266.272671][T10017] device bridge_slave_1 left promiscuous mode [ 266.274512][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.318932][T10017] device bridge_slave_0 left promiscuous mode [ 266.321092][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.566742][T10036] udc-core: couldn't find an available UDC or it's busy [ 266.568788][T10036] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.748936][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 266.767630][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 267.096807][ T144] ================================================================== [ 267.099423][ T144] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xce8/0x3010 [ 267.101607][ T144] Read of size 1 at addr ffff0000e75c8204 by task kworker/u5:0/144 [ 267.102469][T10056] udc-core: couldn't find an available UDC or it's busy [ 267.103713][ T144] [ 267.103747][ T144] CPU: 1 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.181-syzkaller #0 [ 267.103760][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 267.103767][ T144] Workqueue: hci2 hci_rx_work [ 267.103783][ T144] Call trace: [ 267.103786][ T144] dump_backtrace+0x0/0x43c [ 267.103800][ T144] show_stack+0x2c/0x3c [ 267.103809][ T144] __dump_stack+0x30/0x40 [ 267.103819][ T144] dump_stack_lvl+0xf8/0x160 [ 267.103827][ T144] print_address_description+0x78/0x30c [ 267.103837][ T144] kasan_report+0xec/0x15c [ 267.109369][T10056] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 267.111304][ T144] __asan_report_load1_noabort+0x44/0x50 [ 267.124237][ T144] hci_le_meta_evt+0xce8/0x3010 [ 267.125594][ T144] hci_event_packet+0xd10/0x11bc [ 267.126945][ T144] hci_rx_work+0x1cc/0x880 [ 267.128132][ T144] process_one_work+0x79c/0x1140 [ 267.129481][ T144] worker_thread+0x8f4/0x101c [ 267.130759][ T144] kthread+0x374/0x454 [ 267.131897][ T144] ret_from_fork+0x10/0x20 [ 267.133061][ T144] [ 267.133691][ T144] Allocated by task 10058: [ 267.134838][ T144] __kasan_kmalloc+0xb0/0xf0 [ 267.136017][ T144] __kmalloc_node_track_caller+0x234/0x3bc [ 267.137590][ T144] kmalloc_reserve+0xe4/0x26c [ 267.138823][ T144] __alloc_skb+0x23c/0x67c [ 267.140050][ T144] vhci_write+0xb8/0x3ac [ 267.141188][ T144] vfs_write+0x7c8/0xa2c [ 267.142355][ T144] ksys_write+0x120/0x210 [ 267.143612][ T144] __arm64_sys_write+0x7c/0x90 [ 267.144871][ T144] invoke_syscall+0x98/0x2b8 [ 267.146093][ T144] el0_svc_common+0x138/0x258 [ 267.147361][ T144] do_el0_svc+0x58/0x14c [ 267.148489][ T144] el0_svc+0x78/0x1e0 [ 267.149556][ T144] el0t_64_sync_handler+0xcc/0xe4 [ 267.150954][ T144] el0t_64_sync+0x1a0/0x1a4 [ 267.152162][ T144] [ 267.152783][ T144] Last potentially related work creation: [ 267.154256][ T144] kasan_save_stack+0x38/0x68 [ 267.155455][ T144] kasan_record_aux_stack+0xcc/0x114 [ 267.156914][ T144] insert_work+0x64/0x388 [ 267.158106][ T144] __queue_work+0xb30/0x1054 [ 267.159321][ T144] delayed_work_timer_fn+0x74/0x90 [ 267.160673][ T144] call_timer_fn+0x19c/0x858 [ 267.161867][ T144] __run_timers+0x49c/0x6c4 [ 267.163075][ T144] run_timer_softirq+0x7c/0x114 [ 267.164390][ T144] handle_softirqs+0x344/0xbf0 [ 267.165686][ T144] __irq_exit_rcu+0x240/0x440 [ 267.166907][ T144] irq_exit+0x14/0x88 [ 267.168006][ T144] handle_domain_irq+0x14c/0x1fc [ 267.169301][ T144] gic_handle_irq+0x78/0x1c8 [ 267.170581][ T144] [ 267.171149][ T144] The buggy address belongs to the object at ffff0000e75c8000 [ 267.171149][ T144] which belongs to the cache kmalloc-512 of size 512 [ 267.174955][ T144] The buggy address is located 4 bytes to the right of [ 267.174955][ T144] 512-byte region [ffff0000e75c8000, ffff0000e75c8200) [ 267.178569][ T144] The buggy address belongs to the page: [ 267.180196][ T144] page:0000000099ab6e2f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1275c8 [ 267.182905][ T144] head:0000000099ab6e2f order:2 compound_mapcount:0 compound_pincount:0 [ 267.185074][ T144] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 267.187166][ T144] raw: 05ffc00000010200 fffffc00032f5f00 0000000500000005 ffff0000c0002600 [ 267.189380][ T144] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 267.191656][ T144] page dumped because: kasan: bad access detected [ 267.193390][ T144] [ 267.193994][ T144] Memory state around the buggy address: [ 267.195474][ T144] ffff0000e75c8100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 267.197640][ T144] ffff0000e75c8180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 267.199761][ T144] >ffff0000e75c8200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.201909][ T144] ^ [ 267.202987][ T144] ffff0000e75c8280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.205187][ T144] ffff0000e75c8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.207348][ T144] ================================================================== [ 267.209539][ T144] Disabling lock debugging due to kernel taint [ 267.211261][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.215780][ T144] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 267.215801][ T144] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 268.062581][ T4078] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 268.066714][ T4078] Bluetooth: hci0: Injecting HCI hardware error event [ 268.068661][ T144] Bluetooth: hci0: hardware error 0x00 [ 268.152075][ T8396] Bluetooth: hci5: command 0x1003 tx timeout [ 268.154367][ T4032] Bluetooth: hci5: sending frame failed (-49) [ 269.496333][ T3606] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 269.498585][ T3606] Bluetooth: hci2: Injecting HCI hardware error event [ 269.500416][ T4032] Bluetooth: hci2: hardware error 0x00 [ 270.213320][ T8393] Bluetooth: hci5: command 0x1001 tx timeout [ 270.216058][ T4034] Bluetooth: hci5: sending frame failed (-49) [ 272.284986][ T4078] Bluetooth: hci5: command 0x1009 tx timeout