last executing test programs: 10.337667939s ago: executing program 4 (id=1195): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3}, 0x48) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000080)=0x1) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) 8.684550686s ago: executing program 3 (id=1196): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,iocharset=iso8859-1,fmask=000000000000000,uni_xlate=1,uni_xlate=0,rodir,shortname=lower,uni_xlate=0,utf8=1,tz=UTC,shortname=win95,rodir,nfs=nostale_ro,rodir,dos1xfloppy,shortname=winnt,check=relaxed,\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x6, 0x2c2, &(0x7f0000000900)="$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") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000001c0)=""/88, &(0x7f0000000380)=0x58) r3 = dup3(r2, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000140)=0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$tipc(0x1e, 0x5, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 8.652655529s ago: executing program 0 (id=1197): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x200, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000040)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202020202000000040008019656813d7a32c1689e8ef1546075040067000400"], 0x48}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) fallocate(r4, 0x0, 0xff, 0x100000000) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="109e1ec9b5cae64f45659cd927", @ANYRES64], 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3}}) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {0x4}, {}, @raw32}], 0x1c) r9 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000200)={0xff02, 0x2, 0x0, 0x2, 0xfc, 'q\n\x00\x00\x00U\x00'}) memfd_secret(0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="e1cd2d3d02c0dd3f7451bf8ad1e433afa7c9206668ab8cf35e6b6fa94219abb8fa68929e917efb810e30c31a419b1373ddc137a0af933052ced68881a3745efcea2cdf776aca3206ac4c464692056fcaf794b6c5501a5c2076406348794543fdb749b0ca2ff83beb", @ANYRES32=r10, @ANYRESHEX=r12, @ANYRES16=r12, @ANYRES32=0x0], 0x20}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xffffffff}, {0x64, 0x0, 0x0, 0x80000000}, {0x6}]}) 8.195197026s ago: executing program 3 (id=1198): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10000, &(0x7f0000000c00), 0x1, 0xb8e, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000004c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.90747358s ago: executing program 1 (id=1200): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffa1, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_NAT]}}]}, 0x44}}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x2000000c}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10000, &(0x7f0000000c00), 0x1, 0xb8e, &(0x7f00000017c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000004c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.844919945s ago: executing program 4 (id=1201): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x0, 0x200}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffff9}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xdf8, 0xc, 0x6, 0x2, 0x0}, &(0x7f0000000040)=0x10) r4 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r6, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @local}, 0x200000d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r3, 0x10, "4ea05be061b60c88538bfa6da2c10db4"}, &(0x7f0000000180)=0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@gettfilter={0x74, 0x2e, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x2, 0x2}, {0x0, 0x10}}, [{0x8, 0xb, 0x4fd5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xffffb411}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0xa8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xc82}, {0x8, 0xb, 0x7}]}, 0x74}}, 0x0) 7.627828393s ago: executing program 3 (id=1202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x8) 7.559971439s ago: executing program 4 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000580)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.446214978s ago: executing program 0 (id=1204): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000b100007006000000002000020d3"]) 7.431676909s ago: executing program 4 (id=1205): setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001880)={0x8, {"0a903b29b1f56a8e81ca81550b1f43fb88dcd8d1d02a14a32f7b45869199c800bdc910478be98ed486f8f0ef7e562d1ced14dc592aa3219e36ae29f7f21e4777d693675b97565ac6cfceba3fff2e0e848e1b229b434fa546a71d12da394987c9caa66b3d7e1b905a6c9d760d3b4416d4a2b86b4332a25c5606959695545bda9139cc5c17931816f75a077ca392635a624bdc621c572c8d533305add804c0b77deae6d58543ca911ba405ac870ccb984f48d6b0d9314dcbefb5e09b435e9cc0a85323bd4d57a88f50012c50251bf9adfae5ea8b08a2b922f08459e342492fe8d033ba3107e8885f7850800f076be11462dcb5c801eaadf34c96226fa9c034c2511cd80e12b242f60526941642e55140b1d51997f78084b87b5873cb0755c0ff8981974bb80077bf18fe129cc6837df8a8a1397f037d5e051f1db8b9caaefdcafa13b18002391c459dcdf9ec11124dba8d9ef2f0ed8a3a37bf41ac9e7bff098ed113fcaa1e7848f9f1c6fc126d29b32fb4e6bdf26979e0698874ff221b4ff0069086477e81a3cc174685a29262a5b5ba251adbc2001449608771eafa5210dfa9bdf05573fcfe9bb99fd00c6d741b1d6a9e994454af3f937152e821fc082c6ff02433ab26d30a5899d5b047229473b12ef3fb81eb0f9bb68b90f2f5b4c7f98a31e7bfde8b84bf5bf8dff67f9ed339d97dd5ab6cc3b645f1592c264938f6ddb115708b3929401aa619919894c26c2a754ae25999bbc9539173b7b46c7b5a5dcb9370300d97dfbcee2e20b67a94fecf6a7bb86788198f7c89caf6c42e70bfe5557d206aef98f2daa637096d6684ff6c1957bebd66e64346d0bb353e9f46278edf6ac51dda1ba1e3f4c9b989c202aa9b430517aeeccd7b488cec296d0b82a306f2b3ec7df7057e5308b4f08165eea1717c0df4a562a1a925c56a4ef4af998581ec2c90b9823759576f102f552b2afa801f6438d912f1b74ca4e260bce3e7a7bda3e634450582d2cbcfeddeef5e2f384d434392dd9fee597566af9f6a46dc77ef4d4267c057987e27b2aee6986f98472a53ec7dc322fbe2b14daf2ce4a457a394f15667bc81f20680d70dfe32d2d145c276015d463b135a8de595ce7133d72108eb1e9d0617e71271e2e274e3059297540bc5785abb163999dedfb27a99bdde2db83aaf73998f0117db011b76d435dca1fab75ad532f082a0cef3ce2bdd1044332e6b7397cc7999863cd5e2ca55e22c78ce903fdeb4d29b269b70222c54c9576b9acc86affaa4cef208a4eb3b09d20621ff9a5426fcfb82dc5927d1a83b2f9c9e3b7621a52565dac56a623847e1c1abd23b79cb82a96fc2948e2e51dcf4a729030ff17734843069ff4696a85dce50105aec57cdf2376ffbb2345762dd127a7e2854d3c9da5b2092268dac3541fda9812daa725d438357adc8873920d092c2a926d311dcd2371ffa7d6aec8038511872c0fe90f0ac1030319af229f5202edafeb4b29a34096c0f1db326ba451594c74bd237df191ff12683c9fc72d56998cc8b2185f28557e540d69591bdd531186df7b7ab8de51c364fd5f370082764afca138db66a4293ff730b29b95f8b62ee4a3bba7e11c50d5395cc2af9f48a4e45b03ff80b3fc14d76948e8a54bb269dc15399c1e653340ec8892057bdfe6919acc9b85b9f1f0444beefd529136295382c3a9cb6f6fa34878c69abaa81a0a0d88e084f8a3c0197a59e4b53b65e47b813de9e436d0927a06401ff79f5ec7004b4e07257020ed9d5c4f7b5c2036724d8c7cbb3ebfa3548782c7b04455791dba1e5db822a6e593a2cdf7bddae1dd8b78e4cfb8c43c98b0beaefc3ee6c9f60cba9631ff8d515a732d5f62ee3fb0087d019544f672841f84577d3f7c6858363c6258cf20bb798159ea070b7704d3578e20a4402dff6df0e02b6a752c8f22344bda17a88bb01e80d134a660e3dd0ac006f3afa35f48c898e14b07ea75a01f0be88d0be3a0f5327d81b17dcf56506ae0c6ed78fe1dc044bbd839a7d63af2d6c690636bf5a9f8151fb95c6cd9ec9a0fc59d8753d4f886ab212f9f53734418fa41ce18e7249716dca226a91000025efe880636af6babb801e1b7ce04c773971ee2680740ddd360ade3a8fd69a08d0f1819ad8ab0d87e694569d62ffd2bf7a911b2a39cd13f76852267156ee9e9155c9afbac92282a6865566e825bdd54f3d713d4c299383f3249053ba02406e202deeb235092878b33052c26d74250d652a963057e9ae2bcfcd8f7c15c21fd2f389ec1230980822357438610b73e223c86538d56f98b39d06ab06caf0ebd5edc74c465d10c5f5f292fb7cff79febf5b9740d7c3d6f68f69d533a83f23c31d1d8dc40d27ab049e648685e28a07f13a0802782f0321e2d8705b6cfe8a3e42db80be3945be2a3f384e2d51562cdfe1b2fd1d73bc1104813d24076216211d558df4aa406a4903a8437cbd852bebdce778e496cc4fe9dc0ab2afa6fab38c5dddc956e006c4c5aa4c1d356076f7f0316e9e9f232927af7f03f158d73f413376a2a6bdc195a4a57ebf71fa4e931f4921a5dd7a073c004a505ba2b18bf61192677fca5b21a2f4cf85043d71213692997a5a66416e9922da2239bd08eb0b33609c42391dc3282dfd5430b17adfbac8c5c48eee9bd739e17dedd17de4a45fe2929c37525d007682108cfee4ae2a4a7491d6dbda99db33eba628b92815eb681123324ef4ee3f92405f94ef4bded0fd75a1849b9614e3134870eed09090703d1df828a762f27950aea8e52b26da50524c0c8df4ea2d48b05d8a7ccbb9c00a2f3a643f2947c03aee20bd803e7b731894eca535ced3344eab3028d1d4677e8c10ac0307f3c46d4a9c7b5c57b499938caa457010f75a2d060d732dcce00c78d5e1c7f386f83b3c68c3258188f44041e141f1542d6bd9dbfe5039c1870c32bb6bbb5e41b3b2a6de9ff62580adba515c6c0c142d0e47cb429592901a50f9111aa72c15cc2951f56f11601bbdb2ce4745ef7f61d0c39c14f997544458362144a8e331e13a1cb22c80f1a0e89b471054246bfac5cab7590da29a72b4ce3a1f81d8d3ba9d2f94164afbc6c9e621af5132dc453e2b7e98575c5918d5c29849421a1aac60798b63a46e8a9ed0257809f7f3c504a99e286b0bcb2a58b1251d4099c92d86561d3cf762e1b17a8e0d6d4f72be4cbc862fb363ff85de0012b1f6b310a851a7c1d30f6852eb61f95cd3dc2d6f39ed036f9ab3f542fcc6e57a9f9c3e3024f5008b3583b3eb7718674bcc9d6c042e3ac92b0da7d438f658b025d52902c51948a4f7630fa9ba60841c699a3d69cb88ef4097a73a282c973daaeedf018a606af7561f98720ad89dac4859573a676e2f71919f1c473ac8f01898390f9bc1a4261e8430b2d8726a59d58e3cfac217a81c923c027a02dffa2c33bdf1eb38f6e9c2df1a7c8c2d4982b52e458e4239d37791a30f66541889fb58b894e9a3085b6d5a1de7789fc7c0d2741f8246d317c9fabdfad575253e19523f45c3804d134a87db9825e73c3a5fbe68cba1dac2b11b2548f377fae8f418d2fcbce5663436277887aab4cdaa610257eec471417145e5ffee784e1c6358abff67cf7541cdc2adbeffaa2a2067c35a57347517942285c8650a74484c97c2779d19c0c8c4d5486926c5396904904dd11cf93146d0e255687e3832dd909d98dd7defaf304c926b12d0491500ec9aaf2dec99e2da254b37b624f3f7a29c90a86a6506a4b9bb87241a74e605535993a340750459dcbeba979002e508607685e0444c465826c8fd81ce4a63874e9a432eb586d8cb2ae27299f347462feb2faa9a7415c44bc0d5a99333e49239cf24327e697f6b6a18b0a756d7a2b2499c49496363d5cb0c74c69e09390da3a02bb6af42f046d230e6ac1b95249eac4692ebb1f3946d61033e55a9fcd19cfe1cae15297d0b62cdc385cb88e3875955cde8df4b43b95eb1079a34d9ba88001a9bd9c8a8c6fc1989069f9bbad7baa0830453c949d3ce26818c273cb1631f919390cb66898f25594f934ed63125ba287281c098b8f34c56fbfa43f8c6966610cfdff4b1a005ebc9dfe80c0429bfda4bbe4c849aa090f12ab37f5d7ac18a67da1af382d7204494e17d6def8558f42849afb030600068dc36ceb47eb1e7bd5ca94a8affc3852f9aa4d062c2c006664c573aa31ef6d46c5a4dc383ba0ae4fcf95d3f9c4f84a1b57312c10ca518101101635624d8ec6b6d465a9704a4284b68fafec136794f22bbcdbdab5a486e88b6b255a0dfa2a6b88f3c1d7a8f22d1e5127ee77ec7c31e18fb764a9ba692818f7c7462400d82032db378641b62ac29d4e351e1763d4588a70c162e7e334d6d4ca2b546faef10ff06c1193c5f4c86edae045f9638a9ec8f04a99137f12267e9eecd8968840b8bb45aa161211635fa830c589d41d2274f6bfabb4b3a1a6d3bb43eab9654881dfc57094b045298552ad9c6d67ddaf5e86deb5dfbe7269fca1380ff89f0724f62401a9a98e1ada14632c5cdc21aee8318b5c1add184d667158561074f3b95db281a9d5c62ac8a5401af542c1937956c3a90b9a50159f42f9ea805419a21ed54e139df2d0b1a79b77bc72c3c2b86e868a97d6c90abe34ab473c25fbfdb6ae00622acfe2f66081416d22346f0560115ddee79e6d56d1515e8a471946ad85ac4166af66eb98d113a955b7c3c14c361079c0f32b5819732e4ce34125380ab86032a13868eeb0be2e23bf2faec7685b058e626a5bf41f708eb6c45f8a283d3a30bddca949d839816f23b307811e5bf6987843320b53166042fe49b00826794b2f20ebb079aafb319fd42b4a1156fc7acb0f062e5a41e06658d5838f0e4b1817601df49b2b6be2c2169b2c607c5e41f1b83031ac9c9a9bff13141f01d63ea88ea8d6f43b16db4fa2880d0aa0d4bf76d5f0a75cfd9baa2472b8c736005d8130665f5e2f0d43049962c0c748d186a90a9743be1d6b95923c1ed98e7a601202065753598990a7ed46ce2b1ff3325aa1c1c85b56b06e6312dca0bd976d8932aad3dad3bb9fce44d5230bad998a3ae56916335996165ee98232ca0d3473a748c4e1526b72b74fb9e22c7f2cae8735c5dbc7ba94739a462a94ab8c98d3d846182a328db513789cc5e4e7e14827a8e17ddb401bb22d2a0e8ad99f9e2b199cdb1078e5a22aa9507364d69aaca209191c5d466b875282f5443aea7c5e198318f22edb8240da69f0061ec663742c5dadf269ee91017afaacbd8b65f5063138b1aaff5926d879f8e8ece246b0be007663b7429bc87cabdb4beafab28003543ed0b5f4cf78dc2e8287127e306a79ac4e19d3accaf91e15bde4fdb322c31bccbd7870d18f4801bc49e21f153f1056f8fdf196bcfe23b53f84e4d5ab850594249c784942cf957b160dd85a34294da555fda262cbf43e4d219754ab68a4fab24ea7741a9f0f0b2508a7b9a451ca43ea6574e0f66b1b8d4fe8f61a9e18c4a0512a63eaad21b39265baf6ae5a3920f52ccdf6060ca51d8a43eb840b06fa1cb6493fc26ec2381b50ec6d18cc90ea23aab34770d150ac5caef61beb9c7bcb7e59b8e9954a3e54580ecbba03bb6e32eba8aa71d8a2b7c9873687cf4cc44c0a2e36e22af0bd281a9728d1bf4793f695c4f76439f43042b95b5fcf50bd3af44ff8a6f3ac5a367bedbbe6e7ad978bc595e5f42fd77f88f21cf13a33eb24a0d1645ea6b35f2fdd182eb4d2692c0a491059a5e4d9a6f92df4cf1370f041ede68ea9b12e237b080fc7d5657cdc9c33c00bb0fb278d913f4d4d08c9959622730b7404689c067c8c0", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c756d61736b3d30303030303030303030303031343432353036333233362c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d64656661756c742c73686f72746e616d653d77696e393500756e695f786c6174653d312c756e695f386c6174653d312c757466383d312c73686f72746e616d642c696f636861727365743d6370375002000000000000007461696c3d392c757466383d302c00b08e18498eabf2b4e8ffe85b113a293e45c892212c260a64dbe059130708a5eddd4b1c3e2d1ae431b189ffdd7e586f437ac8ba15caa40760ab8316f95d1391f13be5f0542e2d5967287ba09f0165c5759a9815ffb91260df9c0eb5b4a984a65a827d632b3991c7c7e82a7b4832302c35b91c130fa616b0de49a164578e95986a1121ffa2ede16d77c439de8d8ab74b3bbf8bf2e9accd9ce7415a40ec2f54d404a28c124868ebb772d7008b10388dc4ca427559149a66e97b19ef8c648d747efad5cf5cbff32f7226cd3cfb6b995ee76467bed63bf59bca85e08930bd575b030000008bc7507b0db30861550426ef104a4fe45c9b4d4390b16d411e8a6b38ec4da423459ef9b9ba79decc9d975ad67a421b35c5a5ef3dd63290b7072b8e874c08f6299934207323c3000000000000000000000000000000d6f221abebe3f202094d59d97146b1a36d30d5b6ab9c3332dc35ce2bd0c75e21bdd30c03819426be244520e21967dd6d94863b037a96ffba2c4a21ef007111b90b00bbfd1073d16c6674207a40731a5c734687bb74386abd3cbe4c474e5c23b714a83a4b8a9ab41dbd40dbd75829b3b60253f0a2964ef645535043add43dd39387a732069e440a4270f8dee1fe987a93dad038e0e6494e52d7e92aba5e21266d94cc3e1bd6bed0178c3f9cdc5a14cbc28d4852fa673b1aa216800367e605b5859f56be7fc74ead3113a8d8e133a988426f439f59d7548af3b17c5623a88eb35abe387f142ceb36010c03a61bedacf87f7bc7fc770a7a62081e9513aa47e2e173a043911823e42adcd78e697fa831ff937e98b23d77"], 0x4, 0x2f2, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0, @ANYBLOB="05"], 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES8=r6, @ANYRESHEX=r0, @ANYRESHEX=r6], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 7.292327521s ago: executing program 0 (id=1206): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)='3', 0x1}], 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) write$cgroup_type(r1, &(0x7f0000000000), 0x182000) ftruncate(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='umask=000000000000000000000040x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b00)={0x48, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x61c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS2={0xc}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 5.162916436s ago: executing program 0 (id=1209): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000200)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xb}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r4}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="75722629832bf6042ad514e956a1000000004c900200000000002300e1583afceb7a4d65f34269c5dc343054f84d3b01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000273a07bc1ab0"]) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) pidfd_getfd(r2, r2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r6) socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x2}], 0x1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="9febfa0018"], &(0x7f00000000c0)=""/220, 0x1a, 0xdc, 0x1}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x81}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r11, &(0x7f0000000200), 0x43451) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 4.839859092s ago: executing program 1 (id=1210): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfff2}}) (fail_nth: 2) 4.806359835s ago: executing program 4 (id=1211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3}, 0x48) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000080)=0x1) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) 4.235865242s ago: executing program 1 (id=1213): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x4410, 0xffffffffffffffff, 0x6, '\x00', r2, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000080)='net/protocols\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfff2}}) 4.008636551s ago: executing program 1 (id=1214): syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "80ac97989e0ad479"}}}}}}}, 0x0) (fail_nth: 2) 3.830523755s ago: executing program 4 (id=1215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000001c0)={0x0, 0x0, {0x3a, 0x2a, 0xd, 0x19, 0xa, 0x6591, 0x4, 0x13b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="81", 0x1}], 0x1}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) r5 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000180)) 3.435618928s ago: executing program 0 (id=1217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x2, 0x0, 0x2, 0x9b, 0x7, 0x4, 0x0, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0x92, 0x9, 0x8, 0x9, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb3, 0xfb, 0x2, 0x4, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x4, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x5000, 0xc, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0xf, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0xf, 0x4000, 0x7004, [0x8000000000000000, 0x8, 0x6cd2, 0x3]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x18090, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES16=0x0, @ANYRES64], 0x8, 0x2ee, &(0x7f00000004c0)="$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") r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000900)={0xc9, 0x0, 0xc}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b000100000000090401"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000010000000853a6e1d127e5d5292f3b9e67925d96d34b70244f25560e8a01161d39c2fd200ad0f9fe1a4903b6bdad0aca2777873287cad6c24404fe323db091f3913431ce0858a5ecc0bc481c4d31ac1cb548f19d5596e87dc3f3cec115a8c7d16540fbbfd3e5c2b33fe0a15100bb12af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)) 3.386004122s ago: executing program 2 (id=1218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xd6, [@private=0xa010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 3.323151157s ago: executing program 3 (id=1219): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)='3', 0x1}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='umask=000000000000000000000040xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000140)='THAWED\x00', 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x1}) fallocate(r6, 0x20, 0x1, 0x2000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, @in={0x2, 0x4e20, @private}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x118) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000040)=ANY=[], 0x1001, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, 0x0) 2.642605893s ago: executing program 2 (id=1221): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000080003006f241fa2a4e57503e260d7aab5", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32], 0x11, 0x6a0, &(0x7f0000004200)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVRQIxI7VgrhkoAQClKFqnDgbDVOY8VJg+OitAfiAhJXDvwB5RAucAIhJCSkSOUMt4qbxakSEpee0h4YNLOz9trd9UvebMPnE80+zzPPzDO/+c3LvkTWBPi/delU2vfTyaVTr9+p2mv35pbW7s3d6NWTjCdpJe1ukeJmUnyYXEx3yheqmc1wxbDt/Grx/OWPPln7uNtqZ2O86qUzPMD2bvZitZkynWSkKR/BpvHefLjxxjeqxXpmqoSd7CUO9ttoknKTHx3f6BmkHOlrDL3egcOj6L5v9ule/1PJkSQTvTe01W5n6+lHuKM93YtWn1wcAAAAcGAcfXA3uZPJ/Y4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpPm+f9FM7V69ekUvef/j/U9Y39sn8MdbvvIJnqV+62nEQwAAAAAAAAAPFlfepDfXi7LyV67LOr/83+5bhyrX5/JO7mdhSzndO5kPitZyXJmk0z1DTR2Z35lZXm2t+ZnZVkOWfPswDXP7jLgzuPYawAAAAAAAAD4n3GhKX+aS5nc51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCTIhnpFvV0rFefSqudZCLJWLXcavL3Xv0wu7/fAQAAAMBTcPRBHuROJnvtsqi/8x+vv/dP5J3czEoWs5KlLORK/VtA91t/a+3e3NLavbkb1fT5cb/17436HyZ3DKMeMd3fHgZv+US9RCdXs1jPOZ0383aWciWtes3KiV48g+N6v4qpuNBVlrtL0JWmrPb8l015MEzVGRldz8hME1uVjWe3z0T/0XmILc2mtf7Lz7E95PzCtlsp/tM7Jkd6c5Jnvrdzzkf3tDOPZGsmzvadfce3z0TylT/+7ofXlm5ev1asnjo4p9EejP9z46rZmom5vky8uOtMXL19ODOxVSsvrNcv5bv5QU5lOm9kOYv5ceazkoVM5zt1bb45n6vXqe0zdXFT642dohhrjsvIlpi+fLRbbhfTy/W6k1nM9/N2rmQhr9X/zmY2X8+5nMv5viP8wi6u+taAq/5Pw4M/+dWm0knyi6Y8GKq8PtuX1/577lTd1z+nlXK8u95zj+3euK79xaZSHYmfNeXBsJ6Jiay/S/Sie76XgdGBmfh1fVu5vXTz+vK1+Vtbxi1WB2/vlWze/T3dSEb2svBeVefLc9XBqlubz46q7/mBfbN137H1vtbWvt901vt2ulLHms9wnx/pbN334sC+ubrvRF/fxuetz8qy7H7eAuDAO/LqkbHOvzp/63zQ+XnnWuf1iW+Pf2P8pbGM/nX0m+2ZkVdaLxW/zwf5SXb+hg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzo9rvvXZ9fWlpY3lIpy/LukK4nUkk72TTnL3/uWyZJ/TCg3Q9YLX2xldRz2mkqewvs7sPtzvsPm4R/NMfkqST8sVQmhp4/WyuflmV5MGLeTaVsHJR4nkDl1bIst11mX29LwFNwZuXGrTO3333va4s35t9aeGvh5vlz587PnD/32tyZq4tLCzPd1/2OEngS+j6BAwAAAAAAAAAAAIfE7v44p3i0v+0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeASXTqV9P0VmZ07PVO21e3NL1dSrbyz5aZJWkmI6KT5MLqY7ZapvuGLYdlaTyx99svZxt9Vupnr51nbr7c5qM2U6yUhTDjAxaGZ5d9h4RT3OreHjbTFsL4r1viphJ3uJg/323wAAAP//H4wcFQ==") link(&(0x7f0000000340)='./file1\x00', &(0x7f0000000540)='./bus\x00') r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) flistxattr(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r4, @ANYBLOB="400064000a0002000000fb"], 0x28}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x14, r7, 0x1}, 0x14}}, 0x0) 2.280073353s ago: executing program 1 (id=1222): setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001880)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f2, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0, @ANYBLOB="05"], 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES8=r6, @ANYRESHEX=r0, @ANYRESHEX=r6], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 2.175966501s ago: executing program 2 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x3c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x25, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0d9908216ded8a223b473fe77f3"]}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000340)=0x1b) 1.447707631s ago: executing program 3 (id=1224): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x80000000, 0x10}, 0xc) fcntl$dupfd(r0, 0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r2, &(0x7f0000000040)='net/ip6_tables_matches\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="288d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.384338936s ago: executing program 0 (id=1225): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3}, 0x48) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000080)=0x1) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) 906.960656ms ago: executing program 2 (id=1226): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 906.280296ms ago: executing program 2 (id=1227): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000240)=ANY=[], 0x1, 0xac0, &(0x7f00000013c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x6, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40203, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x41292}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x28) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 0s ago: executing program 2 (id=1228): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4008744b, 0x0) kernel console output (not intermixed with test programs): NETDEV_CHANGE): vlan0: link becomes ready [ 463.994306][ T9995] loop4: detected capacity change from 0 to 1024 [ 464.000556][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.009078][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.089200][ T9870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.138277][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.154643][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.214596][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.243567][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.270096][ T9870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.350617][ T9870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.424754][ T9764] device veth0_macvtap entered promiscuous mode [ 464.441527][ T9870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.483305][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.500451][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.519038][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.529938][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.545588][ T9764] device veth1_macvtap entered promiscuous mode [ 464.559652][ T6616] Bluetooth: hci0: command 0x040f tx timeout [ 464.579318][ T9887] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.633423][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 464.657264][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 464.692235][ T9887] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.718178][ T3551] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 464.742294][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.770842][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.794154][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.817853][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.838242][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.849286][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.871818][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.892539][ T9887] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.923273][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.950433][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.969643][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 464.986780][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.997840][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.013220][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.030190][ T9759] device veth0_vlan entered promiscuous mode [ 465.080721][ T9887] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.102863][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.121514][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.139729][ T3551] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.158715][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.169848][ T3551] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.178742][ T3551] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 465.198627][ T3551] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 465.199958][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.222522][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.243381][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.260566][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.282220][ T4875] Bluetooth: hci2: command 0x040f tx timeout [ 465.294250][ T9759] device veth1_vlan entered promiscuous mode [ 465.302835][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.311229][ T3551] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.321431][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.330013][ T3551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.340153][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.348910][ T3551] usb 5-1: SerialNumber: syz [ 465.356844][ T9764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.367307][ T9764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.379763][ T9764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.388477][ T9764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.527216][ T9759] device veth0_macvtap entered promiscuous mode [ 465.537843][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 465.548889][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.557997][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.568090][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.591027][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.602303][ T9759] device veth1_macvtap entered promiscuous mode [ 465.652606][ T3551] usb 5-1: 0:2 : does not exist [ 465.657556][ T3551] usb 5-1: unit 5 not found! [ 465.665527][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.689052][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.704848][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.731984][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.746902][ T3551] usb 5-1: USB disconnect, device number 27 [ 465.768636][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.777509][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.793475][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.805635][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.815756][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.826449][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.836623][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.847984][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.858250][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.869856][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.881365][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.892153][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.900053][ T9887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 465.914829][ T9887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 465.925557][ T9887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 465.935934][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.945190][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.955742][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.969340][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.979903][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.990463][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.000856][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.011439][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.021366][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.035114][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.046408][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.066265][ T9887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.087482][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.096787][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.108576][ T9759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.118348][ T9759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.127371][ T9759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.136473][ T9759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.157265][ T9263] hfsplus: bad catalog entry type [ 466.185432][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.194992][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.230002][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.237099][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.263741][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.288828][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.298722][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 466.308145][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.317283][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.325915][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.333035][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.344592][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.440719][ T6616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.473289][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.517035][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.533257][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.603678][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 466.605708][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 466.612975][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.631382][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.640957][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.652125][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.660943][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.661185][T10021] loop2: detected capacity change from 0 to 128 [ 466.670880][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.714505][ T6176] hfsplus: b-tree write err: -5, ino 8 [ 466.719978][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.721509][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.761590][ T4726] Bluetooth: hci0: command 0x0419 tx timeout [ 466.775413][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.818744][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.864006][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 466.927271][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.946292][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.956057][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.970771][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 466.996818][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 467.092967][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.156020][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.166689][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.191353][ T9887] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.359873][ T3868] Bluetooth: hci2: command 0x0419 tx timeout [ 467.393764][T10034] loop3: detected capacity change from 0 to 2048 [ 467.594958][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.605064][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.613720][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.620818][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.629103][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.682238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.700190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.720423][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.727522][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.739071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.748268][T10034] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.773452][T10034] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 467.791682][T10034] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 467.804970][T10034] EXT4-fs (loop3): This should not happen!! Data will be lost [ 467.804970][T10034] [ 467.815230][T10034] EXT4-fs (loop3): Total free blocks count 0 [ 467.824086][T10034] EXT4-fs (loop3): Free/Dirty block details [ 467.830529][T10034] EXT4-fs (loop3): free_blocks=2415919104 [ 467.836296][T10034] EXT4-fs (loop3): dirty_blocks=16 [ 467.842867][T10034] EXT4-fs (loop3): Block reservation details [ 467.848918][T10034] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 467.850687][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.865370][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.906203][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.928653][T10034] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 870758 with max blocks 1 with error 28 [ 467.944348][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.951818][T10034] EXT4-fs (loop3): This should not happen!! Data will be lost [ 467.951818][T10034] [ 467.953883][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.044580][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.052697][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.061975][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.070589][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.078042][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.120718][ T9887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.132452][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.140736][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.149814][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.162760][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.170855][ T6931] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 468.227304][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.241729][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.303199][T10026] chnl_net:caif_netlink_parms(): no params data found [ 468.311702][ T1068] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 468.325194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.334248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.346823][ T9870] device veth0_vlan entered promiscuous mode [ 468.382712][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.392395][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.415987][ T9870] device veth1_vlan entered promiscuous mode [ 468.449669][ T6931] usb 3-1: Using ep0 maxpacket: 8 [ 468.474270][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.482831][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 468.491644][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 468.500416][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.510784][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.577835][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.585396][ T1068] usb 4-1: Using ep0 maxpacket: 8 [ 468.590900][ T6931] usb 3-1: config 0 has no interfaces? [ 468.597523][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.606117][T10026] device bridge_slave_0 entered promiscuous mode [ 468.621568][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.628643][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.638741][T10026] device bridge_slave_1 entered promiscuous mode [ 468.685465][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.689836][ T6931] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 468.695368][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.703210][ T6931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 468.720521][ T6931] usb 3-1: SerialNumber: syz [ 468.724899][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.727214][ T6931] usb 3-1: config 0 descriptor?? [ 468.746125][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.759730][ T1068] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 468.769648][ T1068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.787523][ T1068] usb 4-1: config 0 descriptor?? [ 468.803466][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.816053][ T9870] device veth0_macvtap entered promiscuous mode [ 468.845151][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.854928][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.860647][ T1068] hso 4-1:0.0: Can't find BULK IN endpoint [ 468.874175][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.884848][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.894598][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.902944][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.912124][ T9887] device veth0_vlan entered promiscuous mode [ 468.930883][ T9870] device veth1_macvtap entered promiscuous mode [ 468.977193][T10026] team0: Port device team_slave_0 added [ 468.985205][T10026] team0: Port device team_slave_1 added [ 469.033606][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.041150][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.069034][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.082746][ T7] usb 4-1: USB disconnect, device number 43 [ 469.112655][ T9887] device veth1_vlan entered promiscuous mode [ 469.120082][ T3868] Bluetooth: hci4: command 0x0409 tx timeout [ 469.291530][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.305747][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.366407][T10045] loop2: detected capacity change from 0 to 512 [ 469.406028][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.455029][T10045] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.1150: iget: bogus i_mode (0) [ 469.466939][T10045] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1150: couldn't read orphan inode 17 (err -117) [ 469.479604][T10045] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 469.498738][T10045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1150: bg 0: block 7: invalid block bitmap [ 469.591077][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.624806][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.661711][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.719720][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.734545][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.745781][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.755657][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.767996][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.777973][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.788420][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.800158][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.848572][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.870383][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.930743][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.949099][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.965773][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.982113][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.998975][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.010275][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.020438][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.031091][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.043162][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.054372][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.080068][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.093577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.110377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.119108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.137024][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.184728][ T9887] device veth0_macvtap entered promiscuous mode [ 470.230721][T10026] device hsr_slave_0 entered promiscuous mode [ 470.253578][T10026] device hsr_slave_1 entered promiscuous mode [ 470.269749][T10026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.279181][T10026] Cannot create hsr debugfs directory [ 470.297081][ T9870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.322136][ T9870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.331430][ T9870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.340530][ T9870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.355135][ T9887] device veth1_macvtap entered promiscuous mode [ 470.409233][ T154] device hsr_slave_0 left promiscuous mode [ 470.417533][ T154] device hsr_slave_1 left promiscuous mode [ 470.425000][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.433663][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.441849][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.449288][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.458825][ T154] device bridge_slave_1 left promiscuous mode [ 470.475612][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.501165][ T154] device bridge_slave_0 left promiscuous mode [ 470.507592][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.535821][ T154] device hsr_slave_0 left promiscuous mode [ 470.552756][ T154] device hsr_slave_1 left promiscuous mode [ 470.568305][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.586849][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.598258][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.616499][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.637413][ T154] device bridge_slave_1 left promiscuous mode [ 470.644467][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.654003][ T154] device bridge_slave_0 left promiscuous mode [ 470.661511][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.679278][ T154] device veth1_macvtap left promiscuous mode [ 470.685556][ T154] device veth0_macvtap left promiscuous mode [ 470.692472][ T154] device veth1_vlan left promiscuous mode [ 470.698314][ T154] device veth0_vlan left promiscuous mode [ 470.707087][ T154] device veth1_macvtap left promiscuous mode [ 470.713320][ T154] device veth0_macvtap left promiscuous mode [ 470.720907][ T154] device veth1_vlan left promiscuous mode [ 470.726762][ T154] device veth0_vlan left promiscuous mode [ 470.965503][T10065] loop3: detected capacity change from 0 to 1024 [ 471.032800][T10065] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.048477][T10065] input: syz1 as /devices/virtual/input/input12 [ 471.201120][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 471.412267][T10071] loop3: detected capacity change from 0 to 256 [ 471.429063][ T154] team0 (unregistering): Port device team_slave_1 removed [ 471.446384][ T154] team0 (unregistering): Port device team_slave_0 removed [ 471.458076][T10071] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 471.488070][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.498760][ T26] audit: type=1800 audit(1721231596.858:108): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1153" name="bus" dev="loop3" ino=1048746 res=0 errno=0 [ 471.539595][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.702207][ T154] bond0 (unregistering): Released all slaves [ 472.437008][ T154] team0 (unregistering): Port device team_slave_1 removed [ 472.454032][ T154] team0 (unregistering): Port device team_slave_0 removed [ 472.469323][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.526135][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.606491][ T154] bond0 (unregistering): Released all slaves [ 472.689668][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.731327][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.742008][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.752211][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.765350][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.775238][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.785737][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.795803][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.806658][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.818527][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.849721][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.858516][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.892850][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.906072][ T3744] usb 3-1: USB disconnect, device number 32 [ 472.922392][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.932883][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.944681][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.954888][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.965747][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.976113][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.986875][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.998608][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.046725][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.080649][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.161996][ T9887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.174387][T10076] loop2: detected capacity change from 0 to 256 [ 473.189952][ T9887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.198682][ T9887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.214488][ T9887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.290825][ T3744] Bluetooth: hci4: command 0x040f tx timeout [ 473.317547][T10077] vivid-004: disconnect [ 473.332201][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.363063][T10074] vivid-004: reconnect [ 473.368153][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.428854][T10026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.438136][T10081] loop2: detected capacity change from 0 to 1024 [ 473.480079][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.517579][T10081] EXT4-fs (loop2): Test dummy encryption mode enabled [ 473.523376][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.537561][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.556564][T10081] EXT4-fs (loop2): Ignoring removed orlov option [ 473.596713][T10026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.601796][T10081] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 473.650789][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.816935][T10026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.829241][T10085] loop0: detected capacity change from 0 to 512 [ 473.905461][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.925232][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.933760][T10085] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 473.933760][T10085] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 473.933760][T10085] [ 473.959909][T10085] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 473.973585][T10081] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 473.978932][T10026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.006239][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.033409][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.086939][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.134131][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 474.153817][T10078] chnl_net:caif_netlink_parms(): no params data found [ 474.234882][T10092] loop0: detected capacity change from 0 to 512 [ 474.296567][T10092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 474.318109][T10096] loop1: detected capacity change from 0 to 512 [ 474.361522][T10092] EXT4-fs (loop0): 1 truncate cleaned up [ 474.369620][T10092] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 474.389674][T10096] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 474.404399][T10026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.434463][T10096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 474.449114][T10026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.495090][T10096] EXT4-fs (loop1): 1 orphan inode deleted [ 474.501058][ T13] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 474.521105][T10026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.529046][T10096] EXT4-fs (loop1): 1 truncate cleaned up [ 474.551393][T10096] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 474.599335][T10026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 474.617550][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.627205][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.657032][T10078] device bridge_slave_0 entered promiscuous mode [ 474.703720][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.720590][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.734181][T10096] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 474.739197][T10078] device bridge_slave_1 entered promiscuous mode [ 474.755896][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 474.759221][T10096] EXT4-fs (loop1): Remounting filesystem read-only [ 474.883881][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.893194][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 474.928302][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.965638][T10026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.009987][T10078] team0: Port device team_slave_0 added [ 475.018769][T10078] team0: Port device team_slave_1 added [ 475.071322][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.080673][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.088659][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.118681][ T6931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 475.119688][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.149433][ T13] usb 3-1: Product: syz [ 475.153650][ T13] usb 3-1: Manufacturer: syz [ 475.158257][ T13] usb 3-1: SerialNumber: syz [ 475.179602][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.215720][T10026] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.230691][ T13] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 475.280463][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.300260][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.310013][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.316996][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.360566][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.372088][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 475.393130][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.410502][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.418966][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.426106][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.470192][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.478739][ T3548] Bluetooth: hci1: command 0x0409 tx timeout [ 475.559816][ T6931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.596381][ T6931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.624122][ T6931] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 475.649521][ T6931] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 475.695641][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.710275][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.731403][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.738498][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.749894][ T6931] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 475.758961][ T6931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 475.781484][T10078] device hsr_slave_0 entered promiscuous mode [ 475.791406][T10078] device hsr_slave_1 entered promiscuous mode [ 475.798035][ T6931] usb 2-1: SerialNumber: syz [ 475.818872][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.871109][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.905758][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.921479][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.940516][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.968877][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.990603][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.020385][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.039177][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.059725][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.068315][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.081186][T10096] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 13: comm syz.1.1140: lblock 0 mapped to illegal pblock 13 (length 1) [ 476.118226][T10096] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 13: comm syz.1.1140: lblock 0 mapped to illegal pblock 13 (length 1) [ 476.177062][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.202304][ T6931] usb 2-1: 0:2 : does not exist [ 476.208355][ T6931] usb 2-1: unit 5 not found! [ 476.240826][ T6931] usb 2-1: USB disconnect, device number 22 [ 476.279091][T10094] loop2: detected capacity change from 0 to 40427 [ 476.471348][T10078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.524250][ T3648] udevd[3648]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.585190][T10078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.675742][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.767790][ T9887] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 476.782983][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.800495][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.835717][T10078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.849333][ T9887] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 476.936297][T10078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.990697][T10106] chnl_net:caif_netlink_parms(): no params data found [ 477.271016][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.278111][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.288285][T10106] device bridge_slave_0 entered promiscuous mode [ 477.311921][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.320806][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.330036][T10106] device bridge_slave_1 entered promiscuous mode [ 477.429281][T10078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.492091][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.520356][ T3874] Bluetooth: hci1: command 0x041b tx timeout [ 477.531430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.560641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.585322][T10078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.611071][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.646090][T10026] device veth0_vlan entered promiscuous mode [ 477.657601][T10078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.711114][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.725812][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.762985][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.776883][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.814784][T10078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.844363][T10106] team0: Port device team_slave_0 added [ 477.886202][T10106] team0: Port device team_slave_1 added [ 477.902711][T10026] device veth1_vlan entered promiscuous mode [ 477.911421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 478.042959][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.061319][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.105312][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.136125][T10026] device veth0_macvtap entered promiscuous mode [ 478.159681][ T3874] Bluetooth: hci0: command 0x0409 tx timeout [ 478.169962][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.176924][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.219760][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.244201][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 478.251990][ T7] usb 3-1: USB disconnect, device number 33 [ 478.260931][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.287940][T10026] device veth1_macvtap entered promiscuous mode [ 478.318085][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.332767][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.417451][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.449654][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.479849][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.490783][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.501038][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.513934][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.541330][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.553051][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.563928][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.574836][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.587398][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.617765][ T6176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.688247][T10106] device hsr_slave_0 entered promiscuous mode [ 478.713217][T10106] device hsr_slave_1 entered promiscuous mode [ 478.716017][T10137] loop2: detected capacity change from 0 to 512 [ 478.725935][T10106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.756604][T10106] Cannot create hsr debugfs directory [ 478.761139][T10137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 478.774887][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.779869][T10137] EXT4-fs (loop2): 1 truncate cleaned up [ 478.785111][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.797927][T10137] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 478.800542][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.827740][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.838138][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.844953][T10137] FAULT_INJECTION: forcing a failure. [ 478.844953][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 478.859557][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.871453][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.883281][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.893276][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.895733][T10137] CPU: 1 PID: 10137 Comm: syz.2.1168 Not tainted 5.15.162-syzkaller #0 [ 478.903750][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.912018][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 478.912034][T10137] Call Trace: [ 478.912043][T10137] [ 478.912052][T10137] dump_stack_lvl+0x1e3/0x2d0 [ 478.912084][T10137] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 478.922057][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.931921][T10137] ? panic+0x860/0x860 [ 478.931952][T10137] ? __might_sleep+0xc0/0xc0 [ 478.935226][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.938158][T10137] should_fail+0x38a/0x4c0 [ 478.944664][T10026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.948447][T10137] should_failslab+0x5/0x20 [ 478.993355][T10137] slab_pre_alloc_hook+0x53/0xc0 [ 478.998296][T10137] __kmalloc+0x6e/0x300 [ 479.002463][T10137] ? tomoyo_encode+0x26b/0x530 [ 479.007246][T10137] tomoyo_encode+0x26b/0x530 [ 479.011838][T10137] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 479.017485][T10137] tomoyo_path_number_perm+0x225/0x810 [ 479.022944][T10137] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 479.028448][T10137] ? __fget_files+0x413/0x480 [ 479.033148][T10137] security_file_ioctl+0x6d/0xa0 [ 479.038098][T10137] __se_sys_ioctl+0x47/0x160 [ 479.042693][T10137] do_syscall_64+0x3b/0xb0 [ 479.047140][T10137] ? clear_bhb_loop+0x15/0x70 [ 479.051810][T10137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.057702][T10137] RIP: 0033:0x7fce090f6a19 [ 479.062139][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.081742][T10137] RSP: 002b:00007fce07b77048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.090155][T10137] RAX: ffffffffffffffda RBX: 00007fce09284f60 RCX: 00007fce090f6a19 [ 479.098140][T10137] RDX: 00000000200000c0 RSI: 0000000040086602 RDI: 0000000000000004 [ 479.106104][T10137] RBP: 00007fce07b770a0 R08: 0000000000000000 R09: 0000000000000000 [ 479.114092][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.122083][T10137] R13: 000000000000000b R14: 00007fce09284f60 R15: 00007ffc474dccd8 [ 479.130080][T10137] [ 479.140823][T10137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 479.151038][ T6176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.227881][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.237511][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.249737][T10026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.258597][T10026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.268820][T10026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.278098][T10026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.350382][ T6176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.410432][ T6176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.436681][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.462154][T10124] chnl_net:caif_netlink_parms(): no params data found [ 479.514974][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.532230][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.546263][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.601978][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 479.648208][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.697974][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.722480][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.735016][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.760452][ T3874] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.764788][ T3547] Bluetooth: hci2: command 0x0409 tx timeout [ 479.767553][ T3874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.795308][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.808983][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.828042][ T3874] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.835214][ T3874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.912436][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.925856][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.935108][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.950122][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.958746][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.975289][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.986041][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.049333][ T6176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.072717][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.095621][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.110052][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.118741][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.144829][T10078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.155847][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.156685][T10078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.174661][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.184503][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.192244][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.207433][T10124] device bridge_slave_0 entered promiscuous mode [ 480.239790][ T3548] Bluetooth: hci0: command 0x041b tx timeout [ 480.248588][ T6176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.309847][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.318160][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.340646][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.360348][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.367451][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.377766][T10124] device bridge_slave_1 entered promiscuous mode [ 480.405068][ T6176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.526441][ T6176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.578843][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.630928][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.644789][T10168] loop4: detected capacity change from 0 to 256 [ 480.661384][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.668916][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.693088][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.761237][T10124] team0: Port device team_slave_0 added [ 480.815088][T10124] team0: Port device team_slave_1 added [ 480.856623][T10170] vivid-008: disconnect [ 480.870352][T10167] vivid-008: reconnect [ 480.913927][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.923332][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.951278][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.978539][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.986257][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.027006][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.061229][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.080389][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.438863][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.457891][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.471728][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.490332][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.505278][T10124] device hsr_slave_0 entered promiscuous mode [ 481.538611][T10124] device hsr_slave_1 entered promiscuous mode [ 481.555290][T10124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.563756][T10124] Cannot create hsr debugfs directory [ 481.571703][T10078] device veth0_vlan entered promiscuous mode [ 481.683648][T10142] chnl_net:caif_netlink_parms(): no params data found [ 481.692451][ T3744] Bluetooth: hci1: command 0x0419 tx timeout [ 481.726894][T10175] loop4: detected capacity change from 0 to 32768 [ 481.763532][T10078] device veth1_vlan entered promiscuous mode [ 481.780332][T10175] XFS: ikeep mount option is deprecated. [ 481.842839][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 481.851280][T10175] XFS (loop4): Mounting V5 Filesystem [ 481.858646][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 481.937473][T10175] XFS (loop4): Ending clean mount [ 481.944877][T10175] XFS (loop4): Quotacheck needed: Please wait. [ 482.009964][T10175] XFS (loop4): Quotacheck: Done. [ 482.059009][T10078] device veth0_macvtap entered promiscuous mode [ 482.068032][T10026] XFS (loop4): Unmounting Filesystem [ 482.091962][T10078] device veth1_macvtap entered promiscuous mode [ 482.099087][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.108661][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.130786][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.189876][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.199856][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.207010][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.232077][T10142] device bridge_slave_0 entered promiscuous mode [ 482.241391][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.249113][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.283751][T10142] device bridge_slave_1 entered promiscuous mode [ 482.313919][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.329877][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 482.336865][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.358863][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.383228][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.419439][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.436974][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.447035][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.457648][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.469034][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.481086][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.491532][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.502311][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.529040][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.650644][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.661810][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.676645][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.700510][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.720040][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.741320][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.762525][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.769977][T10217] loop4: detected capacity change from 0 to 128 [ 482.779582][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.790539][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.801836][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.811718][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.822205][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.832095][T10078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.842595][T10078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.855021][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.870831][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.892762][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.902240][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.929213][T10078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.958669][T10078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.993028][T10217] attempt to access beyond end of device [ 482.993028][T10217] loop4: rw=2049, want=241, limit=128 [ 482.999532][T10078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.013714][T10078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.014866][T10217] attempt to access beyond end of device [ 483.014866][T10217] loop4: rw=524288, want=193, limit=128 [ 483.028670][T10106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 483.047123][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.092819][T10142] team0: Port device team_slave_0 added [ 483.103175][T10142] team0: Port device team_slave_1 added [ 483.111221][T10106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.122638][T10106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.157760][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.164865][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.191765][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.232326][T10106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 483.289624][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.302478][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.328837][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.339787][ T13] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 483.514591][T10142] device hsr_slave_0 entered promiscuous mode [ 483.525360][T10142] device hsr_slave_1 entered promiscuous mode [ 483.532652][T10142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.541914][T10142] Cannot create hsr debugfs directory [ 483.626189][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.643877][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.699760][ T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.707944][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.729258][ T13] usb 5-1: config 0 has no interface number 0 [ 483.738265][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.887175][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.889875][ T13] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 483.905134][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.914474][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.922706][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.930280][ T3743] Bluetooth: hci2: command 0x040f tx timeout [ 483.931055][ T13] usb 5-1: Product: syz [ 483.937409][ T3743] Bluetooth: hci3: command 0x041b tx timeout [ 483.940917][ T13] usb 5-1: Manufacturer: syz [ 483.940937][ T13] usb 5-1: SerialNumber: syz [ 483.943078][ T13] usb 5-1: config 0 descriptor?? [ 484.000395][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.007586][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.020356][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.029079][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.046335][T10124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.062564][T10124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.103221][T10124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.140147][T10124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.164966][T10223] loop3: detected capacity change from 0 to 256 [ 484.196558][T10142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.219761][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.228892][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.269250][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.276526][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.294281][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.303565][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.312989][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.317404][ T3874] usb 5-1: USB disconnect, device number 28 [ 484.320121][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.321426][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.394524][T10142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.405260][ T6935] Bluetooth: hci0: command 0x0419 tx timeout [ 484.424014][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.432446][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.441901][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.454101][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.465911][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.524213][T10142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.535084][ T4726] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 484.551603][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.562805][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.597222][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.607031][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.616426][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.625220][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.682674][T10142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.700372][T10106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.779911][ T4726] usb 4-1: Using ep0 maxpacket: 16 [ 484.806276][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.881242][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.893378][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.899977][ T4726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.920260][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.939551][ T4726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 484.967304][T10142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 484.987505][ T4726] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.001077][ T3640] attempt to access beyond end of device [ 485.001077][ T3640] loop4: rw=1, want=153, limit=128 [ 485.012466][ T4726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.042147][ T4726] usb 4-1: config 0 descriptor?? [ 485.052588][T10142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.072473][T10142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.159705][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.169175][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.200891][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.207991][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.241837][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.279644][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.298385][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.305525][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.328197][T10142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.471713][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.481186][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.488733][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.509647][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.525734][ T4726] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 485.534280][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.543846][ T4726] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 485.557511][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.567249][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.575139][ T4726] microsoft 0003:045E:07DA.0007: no inputs found [ 485.581572][ T4726] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 485.593602][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.603991][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.684907][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.701267][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.713067][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.927190][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.954011][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.977092][T10124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.012037][T10124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.030441][ T3741] Bluetooth: hci3: command 0x040f tx timeout [ 486.036742][ T3741] Bluetooth: hci2: command 0x0419 tx timeout [ 486.095622][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.109842][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.132527][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.147985][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.242158][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.255637][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.267004][T10106] device veth0_vlan entered promiscuous mode [ 486.324714][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.340398][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.377739][T10106] device veth1_vlan entered promiscuous mode [ 486.404070][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.498178][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.510674][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 486.543593][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.582658][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.604949][T10269] loop4: detected capacity change from 0 to 1024 [ 486.616255][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.675266][T10106] device veth0_macvtap entered promiscuous mode [ 486.695964][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.706762][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.725136][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.729798][T10269] EXT4-fs (loop4): Ignoring removed orlov option [ 486.750600][T10269] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 486.757486][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.797010][T10269] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 486.862460][T10269] FAULT_INJECTION: forcing a failure. [ 486.862460][T10269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.909943][T10269] CPU: 0 PID: 10269 Comm: syz.4.1176 Not tainted 5.15.162-syzkaller #0 [ 486.918243][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 486.925496][T10106] device veth1_macvtap entered promiscuous mode [ 486.928329][T10269] Call Trace: [ 486.928340][T10269] [ 486.940777][T10269] dump_stack_lvl+0x1e3/0x2d0 [ 486.945465][T10269] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 486.951098][T10269] ? panic+0x860/0x860 [ 486.955171][T10269] ? __lock_acquire+0x1295/0x1ff0 [ 486.960198][T10269] should_fail+0x38a/0x4c0 [ 486.964618][T10269] prepare_alloc_pages+0x1db/0x5b0 [ 486.969759][T10269] __alloc_pages+0x14f/0x700 [ 486.974368][T10269] ? __rmqueue_pcplist+0x2030/0x2030 [ 486.979664][T10269] ? alloc_pages+0x458/0x570 [ 486.984257][T10269] new_slab+0xbb/0x4b0 [ 486.988333][T10269] ___slab_alloc+0x6f6/0xe10 [ 486.992921][T10269] ? getname_flags+0xb8/0x4e0 [ 486.997601][T10269] ? getname_flags+0xb8/0x4e0 [ 487.002287][T10269] kmem_cache_alloc+0x18e/0x280 [ 487.007141][T10269] getname_flags+0xb8/0x4e0 [ 487.011650][T10269] __x64_sys_execve+0x74/0xa0 [ 487.016359][T10269] do_syscall_64+0x3b/0xb0 [ 487.020774][T10269] ? clear_bhb_loop+0x15/0x70 [ 487.025452][T10269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.031341][T10269] RIP: 0033:0x7f5999a32a19 [ 487.035757][T10269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.055361][T10269] RSP: 002b:00007f59984b3048 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 487.063774][T10269] RAX: ffffffffffffffda RBX: 00007f5999bc0f60 RCX: 00007f5999a32a19 [ 487.071829][T10269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 487.079890][T10269] RBP: 00007f59984b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 487.087944][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.095915][T10269] R13: 000000000000000b R14: 00007f5999bc0f60 R15: 00007ffc6c06d368 [ 487.103918][T10269] [ 487.151036][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.181128][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 487.200514][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.218554][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.240260][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.249216][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.256357][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.277784][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.286952][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.296226][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.303378][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.311897][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.321190][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.333297][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.459942][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.482297][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.509498][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.569464][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.579321][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.657411][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.702059][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.732671][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.789421][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.810936][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.833256][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.859323][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.870655][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.890516][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.903339][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.924406][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.951962][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.980597][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.990304][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.010215][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.030455][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.050978][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.090106][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 488.111815][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.121703][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.140607][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.149168][ T3874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.159228][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.175436][ T3868] usb 4-1: USB disconnect, device number 44 [ 488.184579][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.202855][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.221765][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.239514][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.260354][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.271500][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.283710][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.293785][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.304359][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.314480][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.325134][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.335403][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.345901][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.357295][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.373082][T10142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.395463][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.408486][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.428058][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.450475][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.498040][T10106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.559062][T10106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.579696][T10106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.595543][T10311] loop3: detected capacity change from 0 to 256 [ 488.602129][T10106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.627116][ T6176] device hsr_slave_0 left promiscuous mode [ 488.644559][ T6176] device hsr_slave_1 left promiscuous mode [ 488.661238][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.685291][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.744044][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.754738][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.762944][ T6176] device bridge_slave_1 left promiscuous mode [ 488.769178][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.777471][T10315] loop4: detected capacity change from 0 to 2048 [ 488.796027][ T6176] device bridge_slave_0 left promiscuous mode [ 488.816846][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.843616][T10315] UDF-fs: bad mount option "noadrnicb" or missing value [ 488.859080][ T6176] device hsr_slave_0 left promiscuous mode [ 488.872528][ T6176] device hsr_slave_1 left promiscuous mode [ 488.880356][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.890537][T10317] vivid-006: disconnect [ 488.895989][T10310] vivid-006: reconnect [ 488.909538][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.917847][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.926091][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.931569][T10315] Process accounting resumed [ 488.950252][ T6176] device bridge_slave_1 left promiscuous mode [ 488.956503][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.007691][ T6176] device bridge_slave_0 left promiscuous mode [ 489.016512][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.038433][ T6176] device hsr_slave_0 left promiscuous mode [ 489.056558][ T6176] device hsr_slave_1 left promiscuous mode [ 489.091633][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.099309][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.134723][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.146678][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.162415][ T6176] device bridge_slave_1 left promiscuous mode [ 489.162737][T10326] FAULT_INJECTION: forcing a failure. [ 489.162737][T10326] name failslab, interval 1, probability 0, space 0, times 0 [ 489.168769][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.200196][ T6176] device bridge_slave_0 left promiscuous mode [ 489.206564][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.222321][ T6176] device hsr_slave_0 left promiscuous mode [ 489.229043][ T6176] device hsr_slave_1 left promiscuous mode [ 489.237527][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.239330][T10326] CPU: 0 PID: 10326 Comm: syz.4.1184 Not tainted 5.15.162-syzkaller #0 [ 489.245512][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.253160][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 489.253176][T10326] Call Trace: [ 489.253184][T10326] [ 489.253194][T10326] dump_stack_lvl+0x1e3/0x2d0 [ 489.281236][T10326] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 489.286894][T10326] ? panic+0x860/0x860 [ 489.290993][T10326] ? __might_sleep+0xc0/0xc0 [ 489.295609][T10326] should_fail+0x38a/0x4c0 [ 489.300052][T10326] should_failslab+0x5/0x20 [ 489.304580][T10326] slab_pre_alloc_hook+0x53/0xc0 [ 489.309540][T10326] ? getname_flags+0xb8/0x4e0 [ 489.314237][T10326] kmem_cache_alloc+0x3f/0x280 [ 489.319024][T10326] getname_flags+0xb8/0x4e0 [ 489.323554][T10326] __x64_sys_mknod+0x77/0xa0 [ 489.328164][T10326] do_syscall_64+0x3b/0xb0 [ 489.332603][T10326] ? clear_bhb_loop+0x15/0x70 [ 489.337329][T10326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 489.343247][T10326] RIP: 0033:0x7f5999a32a19 [ 489.347686][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.367315][T10326] RSP: 002b:00007f59984b3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 489.375757][T10326] RAX: ffffffffffffffda RBX: 00007f5999bc0f60 RCX: 00007f5999a32a19 [ 489.383754][T10326] RDX: 0000000000000708 RSI: 0000000000000000 RDI: 00000000200002c0 [ 489.391745][T10326] RBP: 00007f59984b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 489.399828][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.407915][T10326] R13: 000000000000000b R14: 00007f5999bc0f60 R15: 00007ffc6c06d368 [ 489.415914][T10326] [ 489.421267][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.428999][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.440709][ T6176] device bridge_slave_1 left promiscuous mode [ 489.447137][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.458142][ T6176] device bridge_slave_0 left promiscuous mode [ 489.464999][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.497876][ T6176] device veth1_macvtap left promiscuous mode [ 489.506280][ T6176] device veth0_macvtap left promiscuous mode [ 489.513232][ T6176] device veth1_vlan left promiscuous mode [ 489.519197][ T6176] device veth0_vlan left promiscuous mode [ 489.527340][ T6176] device veth1_macvtap left promiscuous mode [ 489.533710][ T6176] device veth0_macvtap left promiscuous mode [ 489.541288][ T6176] device veth1_vlan left promiscuous mode [ 489.547255][ T6176] device veth0_vlan left promiscuous mode [ 489.555721][ T6176] device veth1_macvtap left promiscuous mode [ 489.562070][ T6176] device veth0_macvtap left promiscuous mode [ 489.568261][ T6176] device veth1_vlan left promiscuous mode [ 489.575023][ T6176] device veth0_vlan left promiscuous mode [ 489.584855][ T6176] device veth1_macvtap left promiscuous mode [ 489.592002][ T6176] device veth0_macvtap left promiscuous mode [ 489.598250][ T6176] device veth1_vlan left promiscuous mode [ 489.606245][ T6176] device veth0_vlan left promiscuous mode [ 490.505997][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 490.549126][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 490.571800][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.590691][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.761006][ T6176] bond0 (unregistering): Released all slaves [ 491.120780][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 491.144214][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 491.160832][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.178498][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.296490][ T6176] bond0 (unregistering): Released all slaves [ 491.387065][T10342] loop4: detected capacity change from 0 to 256 [ 491.511060][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 491.532811][T10343] vivid-008: disconnect [ 491.541527][T10341] vivid-008: reconnect [ 491.543373][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 491.564007][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.583019][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.716071][ T6176] bond0 (unregistering): Released all slaves [ 491.834053][T10348] loop4: detected capacity change from 0 to 2048 [ 491.942482][T10350] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.003691][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 492.023061][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 492.038639][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.055208][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.137776][ T6176] bond0 (unregistering): Released all slaves [ 492.234747][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.251001][ T3868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.263092][T10124] device veth0_vlan entered promiscuous mode [ 492.332337][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.345255][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.368493][T10124] device veth1_vlan entered promiscuous mode [ 492.411903][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 492.425967][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.434829][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.456836][T10142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.472677][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 492.490443][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.509481][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.533804][T10355] device syzkaller0 entered promiscuous mode [ 492.558589][T10124] device veth0_macvtap entered promiscuous mode [ 492.594501][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 492.604690][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.621062][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.629928][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.642781][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.654036][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.734315][T10124] device veth1_macvtap entered promiscuous mode [ 492.742601][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 492.768365][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.777143][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 492.836721][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.848538][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.873009][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.894728][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.912478][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.938102][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.954138][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.972647][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.003674][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.024634][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.048222][T10124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.069818][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.082116][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.103095][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.140300][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.166884][T10142] device veth0_vlan entered promiscuous mode [ 493.179871][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.191630][ T3741] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 493.229649][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.249428][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.269440][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.290229][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.311890][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.329498][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.350475][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.375825][T10124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.392456][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.410197][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.418174][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.455691][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.464187][ T3741] usb 4-1: Using ep0 maxpacket: 32 [ 493.497240][T10124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.529870][T10124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.543177][T10124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.562349][T10124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.599931][ T3741] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.612512][ T3741] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.625994][ T3741] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 493.635598][ T3741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.640375][T10142] device veth1_vlan entered promiscuous mode [ 493.702391][ T3741] hub 4-1:4.0: USB hub found [ 493.826801][T10364] loop0: detected capacity change from 0 to 40427 [ 493.948244][T10364] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 493.977879][T10364] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 494.004957][T10364] F2FS-fs (loop0): invalid crc value [ 494.014939][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.036701][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.071029][T10364] F2FS-fs (loop0): Found nat_bits in checkpoint [ 494.081571][T10142] device veth0_macvtap entered promiscuous mode [ 494.113629][T10142] device veth1_macvtap entered promiscuous mode [ 494.117361][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.131362][ T3741] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 494.150091][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.179701][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.208831][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.253222][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.267009][T10364] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 494.290266][T10364] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 494.291276][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.347879][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.347909][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.358162][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.372395][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.385292][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.408380][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.413837][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.430526][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.465283][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.465313][T10364] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 494.481915][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.503943][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.515784][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.526993][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.530531][T10364] attempt to access beyond end of device [ 494.530531][T10364] loop0: rw=10241, want=45104, limit=40427 [ 494.538472][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.549745][ T3874] usb 4-1: USB disconnect, device number 45 [ 494.561699][T10142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.574159][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.596995][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.621217][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 494.622075][T10364] attempt to access beyond end of device [ 494.622075][T10364] loop0: rw=2049, want=45232, limit=40427 [ 494.642396][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 494.660366][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.669351][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.705385][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.730306][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.749444][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.760517][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.770795][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.781739][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.792008][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.803491][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.817385][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.829167][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.841390][T10142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.861382][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 494.871086][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 494.883605][T10142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.893468][T10142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.904320][T10142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.913776][T10142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.100948][T10383] FAULT_INJECTION: forcing a failure. [ 495.100948][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.165619][T10383] CPU: 0 PID: 10383 Comm: syz.1.1166 Not tainted 5.15.162-syzkaller #0 [ 495.173915][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 495.183993][T10383] Call Trace: [ 495.187287][T10383] [ 495.190228][T10383] dump_stack_lvl+0x1e3/0x2d0 [ 495.190950][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.194927][T10383] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 495.194957][T10383] ? panic+0x860/0x860 [ 495.194983][T10383] ? __lock_acquire+0x1295/0x1ff0 [ 495.208798][T10383] should_fail+0x38a/0x4c0 [ 495.222278][T10383] _copy_from_user+0x2d/0x170 [ 495.223737][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.226972][T10383] __copy_msghdr_from_user+0x587/0x7c0 [ 495.227010][T10383] ? __ia32_sys_shutdown+0x60/0x60 [ 495.244826][T10383] ___sys_sendmsg+0x166/0x2e0 [ 495.249538][T10383] ? __sys_sendmsg+0x260/0x260 [ 495.254396][T10383] ? __fdget+0x191/0x220 [ 495.258683][T10383] __sys_sendmmsg+0x2bf/0x560 [ 495.263407][T10383] ? __ia32_sys_sendmsg+0x80/0x80 [ 495.268457][T10383] ? __lock_acquire+0x1ff0/0x1ff0 [ 495.273505][T10383] ? print_irqtrace_events+0x210/0x210 [ 495.279022][T10383] ? vtime_user_exit+0x2d1/0x400 [ 495.281140][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.283983][T10383] ? syscall_enter_from_user_mode+0x2e/0x240 [ 495.297141][T10383] __x64_sys_sendmmsg+0x9c/0xb0 [ 495.302025][T10383] do_syscall_64+0x3b/0xb0 [ 495.306466][T10383] ? clear_bhb_loop+0x15/0x70 [ 495.306771][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.311165][T10383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.311191][T10383] RIP: 0033:0x7f4f7ca91a19 [ 495.311212][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.311231][T10383] RSP: 002b:00007f4f7b4f1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.311256][T10383] RAX: ffffffffffffffda RBX: 00007f4f7cc20038 RCX: 00007f4f7ca91a19 [ 495.311273][T10383] RDX: 0000000000000001 RSI: 0000000020006800 RDI: 0000000000000006 [ 495.311288][T10383] RBP: 00007f4f7b4f10a0 R08: 0000000000000000 R09: 0000000000000000 [ 495.311303][T10383] R10: 0000000000000891 R11: 0000000000000246 R12: 0000000000000001 [ 495.311317][T10383] R13: 000000000000006e R14: 00007f4f7cc20038 R15: 00007fff8f8abbd8 [ 495.311349][T10383] [ 495.375872][T10385] loop3: detected capacity change from 0 to 256 [ 495.408575][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.455057][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 495.631212][ T144] attempt to access beyond end of device [ 495.631212][ T144] loop0: rw=1, want=45240, limit=40427 [ 495.743140][T10388] vivid-006: disconnect [ 495.761330][T10384] vivid-006: reconnect [ 496.049837][T10390] loop3: detected capacity change from 0 to 4096 [ 496.218200][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1200'. [ 496.248041][T10390] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 496.340331][T10402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1197'. [ 496.435916][T10400] loop1: detected capacity change from 0 to 4096 [ 496.634809][T10400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 496.653527][T10387] loop2: detected capacity change from 0 to 32768 [ 496.676338][T10413] loop4: detected capacity change from 0 to 512 [ 496.720173][T10387] XFS: ikeep mount option is deprecated. [ 496.744406][T10413] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 496.800438][T10387] XFS (loop2): Mounting V5 Filesystem [ 496.810106][T10413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 496.871863][T10413] EXT4-fs (loop4): 1 orphan inode deleted [ 496.906491][T10413] EXT4-fs (loop4): 1 truncate cleaned up [ 496.916030][T10413] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 497.040803][T10387] XFS (loop2): Ending clean mount [ 497.050153][T10413] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 497.073942][T10387] XFS (loop2): Quotacheck needed: Please wait. [ 497.090040][T10413] EXT4-fs (loop4): Remounting filesystem read-only [ 497.291232][T10387] XFS (loop2): Quotacheck: Done. [ 497.536231][ T3743] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 497.848981][T10419] loop0: detected capacity change from 0 to 40427 [ 497.937059][T10419] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 497.949864][ T3743] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.949878][T10419] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 497.977360][ T3743] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.994076][ T3743] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 498.009503][ T3548] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 498.017886][T10419] F2FS-fs (loop0): invalid crc value [ 498.024140][ T3743] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 498.053205][T10419] F2FS-fs (loop0): Found nat_bits in checkpoint [ 498.149120][ T3743] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 498.161717][ T3743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.169717][T10419] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 498.169750][T10419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 498.191904][T10419] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 498.191931][T10419] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 498.221436][T10419] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 498.229325][ T3743] usb 5-1: SerialNumber: syz [ 498.256292][T10142] XFS (loop2): Unmounting Filesystem [ 498.297911][ T3548] usb 4-1: Using ep0 maxpacket: 32 [ 498.321407][T10419] attempt to access beyond end of device [ 498.321407][T10419] loop0: rw=10241, want=45104, limit=40427 [ 498.336976][T10419] attempt to access beyond end of device [ 498.336976][T10419] loop0: rw=2049, want=45232, limit=40427 [ 498.393956][T10419] attempt to access beyond end of device [ 498.393956][T10419] loop0: rw=34817, want=45232, limit=40427 [ 498.407098][T10419] attempt to access beyond end of device [ 498.407098][T10419] loop0: rw=34817, want=79872, limit=40427 [ 498.432223][T10419] attempt to access beyond end of device [ 498.432223][T10419] loop0: rw=34817, want=80784, limit=40427 [ 498.439777][ T3548] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.460432][ T3548] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.471082][T10419] attempt to access beyond end of device [ 498.471082][T10419] loop0: rw=0, want=45232, limit=40427 [ 498.490755][ T3548] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 498.504229][T10413] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz.4.1205: lblock 0 mapped to illegal pblock 13 (length 1) [ 498.504828][T10419] attempt to access beyond end of device [ 498.504828][T10419] loop0: rw=0, want=45232, limit=40427 [ 498.529574][ T3548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.556947][T10427] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz.4.1205: lblock 0 mapped to illegal pblock 13 (length 1) [ 498.610946][ T3548] hub 4-1:4.0: USB hub found [ 498.634484][ T3743] usb 5-1: 0:2 : does not exist [ 498.659256][ T3743] usb 5-1: unit 5 not found! [ 498.687764][ T3743] usb 5-1: USB disconnect, device number 29 [ 498.886253][T10444] loop2: detected capacity change from 0 to 256 [ 498.931647][ T3648] udevd[3648]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.960143][ T3548] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 499.190736][T10026] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 499.205517][T10445] vivid-004: disconnect [ 499.211615][T10443] vivid-004: reconnect [ 499.242384][T10026] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 499.380322][ T7] usb 4-1: USB disconnect, device number 46 [ 499.389512][T10448] FAULT_INJECTION: forcing a failure. [ 499.389512][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 499.440123][T10448] CPU: 0 PID: 10448 Comm: syz.1.1210 Not tainted 5.15.162-syzkaller #0 [ 499.448414][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 499.458505][T10448] Call Trace: [ 499.461798][T10448] [ 499.464738][T10448] dump_stack_lvl+0x1e3/0x2d0 [ 499.469436][T10448] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 499.475094][T10448] ? panic+0x860/0x860 [ 499.479190][T10448] ? should_fail+0x337/0x4c0 [ 499.483796][T10448] ? kasan_check_range+0x7b/0x290 [ 499.488837][T10448] should_fail+0x38a/0x4c0 [ 499.493281][T10448] should_failslab+0x5/0x20 [ 499.497797][T10448] slab_pre_alloc_hook+0x53/0xc0 [ 499.502743][T10448] __kmalloc+0x6e/0x300 [ 499.506897][T10448] ? tomoyo_encode+0x26b/0x530 [ 499.511668][T10448] tomoyo_encode+0x26b/0x530 [ 499.516263][T10448] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 499.521903][T10448] tomoyo_path_number_perm+0x225/0x810 [ 499.527369][T10448] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 499.532865][T10448] ? __fget_files+0x413/0x480 [ 499.537548][T10448] security_file_ioctl+0x6d/0xa0 [ 499.542489][T10448] __se_sys_ioctl+0x47/0x160 [ 499.547079][T10448] do_syscall_64+0x3b/0xb0 [ 499.551496][T10448] ? clear_bhb_loop+0x15/0x70 [ 499.556186][T10448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.562081][T10448] RIP: 0033:0x7f4f7ca91a19 [ 499.566494][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.586096][T10448] RSP: 002b:00007f4f7b512048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.594510][T10448] RAX: ffffffffffffffda RBX: 00007f4f7cc1ff60 RCX: 00007f4f7ca91a19 [ 499.602564][T10448] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 499.610528][T10448] RBP: 00007f4f7b5120a0 R08: 0000000000000000 R09: 0000000000000000 [ 499.618492][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.626543][T10448] R13: 000000000000000b R14: 00007f4f7cc1ff60 R15: 00007fff8f8abbd8 [ 499.634523][T10448] [ 499.669622][T10448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.795739][T10451] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1212'. [ 500.156029][T10461] FAULT_INJECTION: forcing a failure. [ 500.156029][T10461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.242590][T10461] CPU: 1 PID: 10461 Comm: syz.1.1214 Not tainted 5.15.162-syzkaller #0 [ 500.250954][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 500.261028][T10461] Call Trace: [ 500.264300][T10461] [ 500.267222][T10461] dump_stack_lvl+0x1e3/0x2d0 [ 500.272016][T10461] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 500.277644][T10461] ? panic+0x860/0x860 [ 500.281711][T10461] ? __might_sleep+0xc0/0xc0 [ 500.286299][T10461] should_fail+0x38a/0x4c0 [ 500.290711][T10461] copy_page_from_iter+0x33b/0x750 [ 500.295827][T10461] tun_get_user+0x1c55/0x40f0 [ 500.300537][T10461] ? tun_ring_recv+0xcc0/0xcc0 [ 500.305303][T10461] ? rcu_lock_release+0x5/0x20 [ 500.310088][T10461] tun_chr_write_iter+0x10c/0x1e0 [ 500.315136][T10461] vfs_write+0xacf/0xe50 [ 500.319474][T10461] ? file_end_write+0x250/0x250 [ 500.324433][T10461] ? __fget_files+0x413/0x480 [ 500.329132][T10461] ? __fdget_pos+0x1e9/0x380 [ 500.333714][T10461] ? ksys_write+0x77/0x2c0 [ 500.338127][T10461] ksys_write+0x1a2/0x2c0 [ 500.342464][T10461] ? print_irqtrace_events+0x210/0x210 [ 500.347930][T10461] ? __ia32_sys_read+0x80/0x80 [ 500.352696][T10461] ? syscall_enter_from_user_mode+0x2e/0x240 [ 500.358681][T10461] ? lockdep_hardirqs_on+0x94/0x130 [ 500.363894][T10461] ? syscall_enter_from_user_mode+0x2e/0x240 [ 500.369897][T10461] do_syscall_64+0x3b/0xb0 [ 500.374308][T10461] ? clear_bhb_loop+0x15/0x70 [ 500.378988][T10461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 500.384873][T10461] RIP: 0033:0x7f4f7ca9059f [ 500.389281][T10461] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 500.408966][T10461] RSP: 002b:00007f4f7b512010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 500.417405][T10461] RAX: ffffffffffffffda RBX: 00007f4f7cc1ff60 RCX: 00007f4f7ca9059f [ 500.425375][T10461] RDX: 000000000000006e RSI: 0000000020000340 RDI: 00000000000000c8 [ 500.433346][T10461] RBP: 00007f4f7b5120a0 R08: 0000000000000000 R09: 0000000000000000 [ 500.441309][T10461] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 500.449271][T10461] R13: 000000000000000b R14: 00007f4f7cc1ff60 R15: 00007fff8f8abbd8 [ 500.457254][T10461] [ 500.586100][T10465] loop0: detected capacity change from 0 to 128 [ 500.878987][T10465] attempt to access beyond end of device [ 500.878987][T10465] loop0: rw=2049, want=177, limit=128 [ 500.928020][T10465] attempt to access beyond end of device [ 500.928020][T10465] loop0: rw=2049, want=249, limit=128 [ 501.070441][T10477] loop1: detected capacity change from 0 to 4096 [ 501.099496][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 501.124553][T10467] chnl_net:caif_netlink_parms(): no params data found [ 501.291918][ T6176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.406789][ T6176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.412535][T10486] loop2: detected capacity change from 0 to 1024 [ 501.450420][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.456717][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.463245][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.472864][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.494404][ T7] usb 1-1: config 0 has no interface number 0 [ 501.513917][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.514613][T10473] loop3: detected capacity change from 0 to 40427 [ 501.540141][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.565685][T10467] device bridge_slave_0 entered promiscuous mode [ 501.576843][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.587923][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.600802][T10473] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 501.610853][T10467] device bridge_slave_1 entered promiscuous mode [ 501.617761][T10473] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 501.654967][ T6176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.665924][ T7] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 501.671079][T10473] F2FS-fs (loop3): invalid crc value [ 501.675493][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.692664][ T7] usb 1-1: Product: syz [ 501.696983][ T7] usb 1-1: Manufacturer: syz [ 501.702157][ T7] usb 1-1: SerialNumber: syz [ 501.711820][T10473] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.719336][ T7] usb 1-1: config 0 descriptor?? [ 501.793808][T10467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.813172][T10492] loop1: detected capacity change from 0 to 512 [ 501.834643][T10467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.874110][T10492] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 501.928307][T10492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.942298][T10473] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 501.960481][ T6176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.969121][T10473] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 502.024503][ T13] usb 1-1: USB disconnect, device number 33 [ 502.030612][T10467] team0: Port device team_slave_0 added [ 502.031269][T10473] f2fs_fill_dentries: 4 callbacks suppressed [ 502.031286][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.079925][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.087536][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.099771][T10467] team0: Port device team_slave_1 added [ 502.116306][T10492] EXT4-fs (loop1): 1 orphan inode deleted [ 502.123417][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.123443][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.129847][T10492] EXT4-fs (loop1): 1 truncate cleaned up [ 502.131668][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.144573][T10473] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 502.178862][T10492] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 502.214210][T10473] attempt to access beyond end of device [ 502.214210][T10473] loop3: rw=10241, want=45104, limit=40427 [ 502.237060][T10473] attempt to access beyond end of device [ 502.237060][T10473] loop3: rw=2049, want=45232, limit=40427 [ 502.251568][T10467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.258543][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.343967][T10467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.360949][T10492] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 502.379859][T10492] EXT4-fs (loop1): Remounting filesystem read-only [ 502.436097][T10467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.459951][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.495324][T10467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.656953][ T4364] attempt to access beyond end of device [ 502.656953][ T4364] loop0: rw=1, want=153, limit=128 [ 502.689678][T10467] device hsr_slave_0 entered promiscuous mode [ 502.706017][T10467] device hsr_slave_1 entered promiscuous mode [ 502.726322][T10467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.738736][T10467] Cannot create hsr debugfs directory [ 502.769641][ T6931] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 502.829573][ T3744] Bluetooth: hci4: command 0x0409 tx timeout [ 503.160052][ T6931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.180984][ T6931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.235684][ T6931] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 503.260550][T10518] loop2: detected capacity change from 0 to 2048 [ 503.273796][ T6931] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 503.389757][ T6931] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.399118][ T6931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.404163][T10521] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.430269][ T6931] usb 2-1: SerialNumber: syz [ 503.600394][T10518] attempt to access beyond end of device [ 503.600394][T10518] loop2: rw=0, want=343245196361802, limit=2048 [ 503.663957][T10518] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 503.705996][T10492] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 13: comm syz.1.1222: lblock 0 mapped to illegal pblock 13 (length 1) [ 503.727855][T10492] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 13: comm syz.1.1222: lblock 0 mapped to illegal pblock 13 (length 1) [ 503.792566][ T6931] usb 2-1: 0:2 : does not exist [ 503.797519][ T6931] usb 2-1: unit 5 not found! [ 503.822029][ T6931] usb 2-1: USB disconnect, device number 23 [ 503.919662][ T13] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 504.060655][ T3648] udevd[3648]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.097057][T10142] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 6 already freed [ 504.130580][T10142] ------------[ cut here ]------------ [ 504.137255][T10142] kernel BUG at fs/inode.c:599! [ 504.142504][T10142] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 504.148593][T10142] CPU: 1 PID: 10142 Comm: syz-executor Not tainted 5.15.162-syzkaller #0 [ 504.157018][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 504.167093][T10142] RIP: 0010:evict+0x615/0x620 [ 504.171804][T10142] Code: fe c1 38 c1 0f 8c de fc ff ff 4c 89 ff e8 d3 ff ec ff e9 d1 fc ff ff e8 f9 30 a3 ff 0f 0b e8 f2 30 a3 ff 0f 0b e8 eb 30 a3 ff <0f> 0b e8 e4 30 a3 ff 0f 0b 66 90 41 56 53 49 89 fe e8 d5 30 a3 ff [ 504.191432][T10142] RSP: 0018:ffffc90003177ae8 EFLAGS: 00010293 [ 504.197524][T10142] RAX: ffffffff81dd2a75 RBX: 0000000000000064 RCX: ffff88801de13b80 [ 504.205522][T10142] RDX: 0000000000000000 RSI: 0000000000000064 RDI: 0000000000000060 [ 504.213516][T10142] RBP: ffff888060ac3520 R08: ffffffff81dd2906 R09: 0000000000000003 [ 504.221511][T10142] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888060ac34c0 [ 504.229505][T10142] R13: ffff888060ac3520 R14: dffffc0000000000 R15: ffff888060ac3498 [ 504.237500][T10142] FS: 0000555557058500(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 504.246454][T10142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.253061][T10142] CR2: 0000001b2cb15ff8 CR3: 0000000058789000 CR4: 00000000003506e0 [ 504.261059][T10142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.269058][T10142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 504.277053][T10142] Call Trace: [ 504.280348][T10142] [ 504.283289][T10142] ? __die_body+0x5e/0xa0 [ 504.287639][T10142] ? die+0x83/0xb0 [ 504.289666][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.291372][T10142] ? do_trap+0x11e/0x350 [ 504.291401][T10142] ? evict+0x615/0x620 [ 504.310624][T10142] ? evict+0x615/0x620 [ 504.314718][T10142] ? do_error_trap+0x13d/0x1e0 [ 504.319505][T10142] ? evict+0x615/0x620 [ 504.320313][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.323585][T10142] ? do_int3+0x30/0x30 [ 504.323616][T10142] ? rcu_is_watching+0x11/0xa0 [ 504.342152][T10142] ? handle_invalid_op+0x2c/0x40 [ 504.347120][T10142] ? evict+0x615/0x620 [ 504.351215][T10142] ? exc_invalid_op+0x2f/0x40 [ 504.355912][T10142] ? asm_exc_invalid_op+0x16/0x20 [ 504.360874][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.360981][T10142] ? evict+0x4a6/0x620 [ 504.377869][T10142] ? evict+0x615/0x620 [ 504.381965][T10142] ? evict+0x615/0x620 [ 504.386052][T10142] ? evict+0x615/0x620 [ 504.390145][T10142] nilfs_put_root+0x93/0xb0 [ 504.394672][T10142] nilfs_detach_log_writer+0x8c7/0xbe0 [ 504.400162][T10142] ? nilfs_attach_log_writer+0x880/0x880 [ 504.400651][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.405822][T10142] ? hook_sb_delete+0xa05/0xb30 [ 504.405852][T10142] ? init_wait_entry+0xd0/0xd0 [ 504.424466][T10142] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 504.430217][T10142] ? clear_inode+0x150/0x150 [ 504.434930][T10142] ? nilfs_free_inode+0x70/0x70 [ 504.439804][T10142] nilfs_put_super+0x49/0x150 [ 504.443900][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.444507][T10142] ? nilfs_free_inode+0x70/0x70 [ 504.457392][T10142] generic_shutdown_super+0x136/0x2c0 [ 504.462800][T10142] kill_block_super+0x7a/0xe0 [ 504.467503][T10142] deactivate_locked_super+0xa0/0x110 [ 504.472911][T10142] cleanup_mnt+0x44e/0x500 [ 504.477368][T10142] ? lockdep_hardirqs_on+0x94/0x130 [ 504.482592][T10142] task_work_run+0x129/0x1a0 [ 504.487225][T10142] exit_to_user_mode_loop+0x106/0x130 [ 504.492624][T10142] exit_to_user_mode_prepare+0xb1/0x140 [ 504.497829][ T13] usb 4-1: config 0 descriptor?? [ 504.498195][T10142] syscall_exit_to_user_mode+0x5d/0x240 [ 504.508660][T10142] do_syscall_64+0x47/0xb0 [ 504.513096][T10142] ? clear_bhb_loop+0x15/0x70 [ 504.517797][T10142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 504.523711][T10142] RIP: 0033:0x7f1e56147d47 [ 504.528144][T10142] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 504.547765][T10142] RSP: 002b:00007ffe410ab4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 504.556207][T10142] RAX: 0000000000000000 RBX: 00007f1e561b4515 RCX: 00007f1e56147d47 [ 504.564197][T10142] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe410ab560 [ 504.572191][T10142] RBP: 00007ffe410ab560 R08: 0000000000000000 R09: 0000000000000000 [ 504.580202][T10142] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe410ac620 [ 504.588203][T10142] R13: 00007f1e561b4515 R14: 000000000007b00b R15: 000000000007ad62 [ 504.596203][T10142] [ 504.599328][T10142] Modules linked in: [ 504.604645][T10142] ---[ end trace 4347fbaa6a7e28db ]--- [ 504.610485][T10142] RIP: 0010:evict+0x615/0x620 [ 504.615193][T10142] Code: fe c1 38 c1 0f 8c de fc ff ff 4c 89 ff e8 d3 ff ec ff e9 d1 fc ff ff e8 f9 30 a3 ff 0f 0b e8 f2 30 a3 ff 0f 0b e8 eb 30 a3 ff <0f> 0b e8 e4 30 a3 ff 0f 0b 66 90 41 56 53 49 89 fe e8 d5 30 a3 ff [ 504.634854][T10142] RSP: 0018:ffffc90003177ae8 EFLAGS: 00010293 [ 504.640972][T10142] RAX: ffffffff81dd2a75 RBX: 0000000000000064 RCX: ffff88801de13b80 [ 504.648961][T10142] RDX: 0000000000000000 RSI: 0000000000000064 RDI: 0000000000000060 [ 504.657067][T10142] RBP: ffff888060ac3520 R08: ffffffff81dd2906 R09: 0000000000000003 [ 504.665079][T10142] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888060ac34c0 [ 504.673105][T10142] R13: ffff888060ac3520 R14: dffffc0000000000 R15: ffff888060ac3498 [ 504.681123][T10142] FS: 0000555557058500(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 504.690106][T10142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.696734][T10142] CR2: 0000001b2cb15ff8 CR3: 0000000058789000 CR4: 00000000003506e0 [ 504.704772][T10142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.712781][T10142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 504.720820][T10142] Kernel panic - not syncing: Fatal exception [ 504.727108][T10142] Kernel Offset: disabled [ 504.731439][T10142] Rebooting in 86400 seconds..