last executing test programs: 28.510059078s ago: executing program 4 (id=411): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x20}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@private}}, 0xe8) 28.36616442s ago: executing program 4 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 28.175252925s ago: executing program 4 (id=416): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x12) syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x3000000, 0x2}, 0x0, 0x0) r3 = syz_io_uring_setup(0x6249, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1e, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) syz_io_uring_setup(0x432e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='s\x11\x91\x93ource', &(0x7f0000000100)='0.0:\x00', 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, 0xffffffffffffffff) 27.077553228s ago: executing program 4 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffffb}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x388}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x48044) write$binfmt_script(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}}}, [@key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "1813709d13"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0x31}, @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x5c}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r7, 0x78, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x7, @local, 0x4}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @private=0x7fffffff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x6, @private1}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000480)=0x10) 24.273964282s ago: executing program 4 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 18.857800345s ago: executing program 3 (id=456): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x46e, &(0x7f0000000940)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 17.697696341s ago: executing program 3 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9a40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec8ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x1c8a91ce50d65ae9, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100"/19], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 16.824280385s ago: executing program 3 (id=461): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x12) syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x3000000, 0x2}, 0x0, 0x0) r3 = syz_io_uring_setup(0x6249, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1e, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) syz_io_uring_setup(0x432e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) 16.692579485s ago: executing program 3 (id=466): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x46e, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94/7U/RBEErKKR+NLS8iIHLxpNPGhiogeMp9oWgizU0JLYhmj1gEdD4t14NPEv8KQXo55MvGq8GhJiuIAmJmtmdwaW7e7ali3TsJ9PMvA888zu83xn5pl9Zp7dBtCzRrJ/kojtEfFrRAzVs3duMFL/7+b1S1N/Xb80lUS1+uafSW27G9cvTRWbFq/bVs9Uq3l+U4t6L78TMVmpzFzI82Pz594fm1tYfO7MucnTM6dnzk+cOHH0yP7B4xPHuhJnFteNvR/O7tvz6ttXXp86eeXdH7/O2rs9L2+Mo1tG6nu3pSe7XVnJdjSkk/4SG8Kq/BMR2eEaqPX/oeiLLbfKhuKVT0ptHLCuqtVqtdXnc26pCtzHkii7BUA5ig/67P63WO7R0GNDuPZi/QYoi/tmvtRL+iONiM35vdGOdap/JCJOLv39RbbEOj2HAABo9G02/nm21fgvjYcatvtfPocyHBH/j4idEfFAROyKiAcjatvujoiHV1l/8wzJ8vFPenVNga1QNv57IZ/bunP8lxabDPfluR21+AeSU2cqM4fzfXIoBjZl+fEOdXz38i+ftStrHP9lS1Z/MRbM23G1v+kB3fTk/OTdxNzo2scRe/tbxZ9EMY2TRMSeiNi7xjrOPP3VvnZlTfFnu7kp/g66MM9U/TLiqfrxX4qm+AtJ2/nJ8eePTxwb2xyVmcNjxVmx3E8/X35j+dr6+//38V9f2fHf2vL8r7dvIGI42Rwxt7B4tjZfO7f6Oi7/9mnbe5q1nv+DyVu19GC+7oPJ+fkL4xGDyWvL10/cfm2RL7bP4j90sHX/3xm398QjEZGdxPsj4kBEPJq3/bGIeDwiDrYL8Pfd8cNLT7y3+vg7PJXvoiz+6Q7HP7vkZanbx7/5RFhqUXRnou/s99+0q39lx/9oLXUoX7OS61+H5rQKAgAAAO5rae078Ek6eiudpqOj9e/w74qtaWV2bv6ZU7MXz0/Xvys/HANp8aRrqOF56Hj+bLjITzTlj+TPjT/v21LLj07NVqbLDh563LY2/T/zR1/ZrQPWnd9rQe/S/6F36f/Qu/R/6F36P/SuVv3/oxLaAdx7tf6flt0KoAy1/n/xQNnNAErg/h96l/4PPantb+PT9kUSEguLkW6IZmy0RCxFdO8NY2HxbP+K/5jF2hJJtCzqfN1I7tUFCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C79GwAA//9hgN8V") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000200)={[{@uid_forget}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@gid_forget}, {@longad}, {@mode={'mode', 0x3d, 0x8}}, {@nostrict}, {@volume={'volume', 0x3d, 0x7}}, {@dmode={'dmode', 0x3d, 0x7}}]}, 0xfc, 0xc34, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040)=0xfff, 0x4) unshare(0x22020600) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x1b4f) getsockopt(r1, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xfffffffffffffcac) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) 16.202529726s ago: executing program 3 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 6.607557769s ago: executing program 2 (id=498): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_mount_image$hfsplus(&(0x7f00000008c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6c4b52462fce60e6fd8fc6bc733d6d61637475726b69734b36d36380d682b3722c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c63726561746f723dca30c7e72c6e6f626172726965722c00"], 0x3, 0x6ab, &(0x7f00000009c0)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp1255'}}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000900)=0x1, 0x4) listen(r2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="b41907d33b0c", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local, {[@rr={0x7, 0x3, 0x1b}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0305602, &(0x7f0000000100)={0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x133, 0x8500) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x200, 0x3, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast2}}}}) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6.570342522s ago: executing program 1 (id=499): r0 = syz_io_uring_setup(0x6249, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1e, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0x432e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 6.294329234s ago: executing program 1 (id=502): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2214806, &(0x7f00000004c0)=ANY=[@ANYBLOB='hide,unhide\x00norock,block=0x0000000000000000,session=0x0000000000000062,sbsector=0x0000000000000003Amap=acorn,iocharset=iso8859-2,map=normal,map=acorn,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c017cb7f731978191fb0b57e3a2d3ee513f5de981ecdff21486971784c6ac65977b63e2baf9ddd6207740ce64509d05f22cacdb53352bf109"], 0x0, 0x69c, &(0x7f0000000840)="$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") (fail_nth: 59) 6.101964061s ago: executing program 1 (id=503): socket$key(0xf, 0x3, 0x2) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x1, 0x192, &(0x7f0000000300)="$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") (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x8917, 0x0) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f00006d0000/0x3000)=nil, 0x2, 0x4001, &(0x7f0000000100)=0x6, 0x5, 0x3) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 5.301710358s ago: executing program 0 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x1c8a91ce50d65ae9, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 5.206379296s ago: executing program 2 (id=505): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000340)={0x1, 0x8, 0x1, 0x0, 0xd}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) r1 = socket(0xa, 0x1, 0x0) nanosleep(&(0x7f0000000280)={0x77359400}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xba}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8000) ioctl(r1, 0x8916, &(0x7f0000000240)) 4.471448587s ago: executing program 1 (id=506): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}]}, &(0x7f0000000400)='GPL\x00', 0x95, 0xf7, &(0x7f00000006c0)=""/247, 0x41000, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x2, 0x279d, 0x7}, 0x10, 0x8aac, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000007c0)=[{0x1, 0x5, 0xe, 0x2}, {0x3, 0x4}, {0x3, 0x2, 0x3, 0xe}, {0x3, 0x3, 0xf}, {0x5, 0x2, 0x8, 0x9}], 0x10, 0x1}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000900)=@generic={&(0x7f00000000c0)='./file2\x00', r1}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}, {0x20, 'xfs\x00'}], 0xa, "04a5d6c5daf0c5321722"}, 0x110) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f000000b880)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0xb823, &(0x7f0000017140)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000940), 0x2, 0x80881) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x81000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee4888ffbb569a1ec154bd555c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c771"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) removexattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@known='user.incfs.id\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x8000, 0x5, &(0x7f0000000200)="c92e8afc2b8c3c78269d03e6e636ae368e2ca735b0472a5d4f893e996258e7344cd13224fc223f886ac1ce45e4ec17073617ad6c100d9e2cc141d10349da0b3c75d9913d70aab61e5a39180fd7d976403afecd41e5f43aeeff57019d165dd617d9fd3c087cca77094eb107b002a144dec6cff9e127864830026e939e4ad6ea18cb1223f254eed906179d28"}) 4.296075791s ago: executing program 0 (id=507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000240)={0x686, 0x2006}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r8, 0x0, 0x351099892e97764c) (async) getdents64(r8, 0x0, 0x351099892e97764c) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r2}, &(0x7f0000000ec0), &(0x7f0000000f00)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 4.149307714s ago: executing program 0 (id=508): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x14a, 0x85) 4.029873214s ago: executing program 0 (id=509): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYBLOB="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", @ANYBLOB], 0x1c}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r0, 0x0, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) read$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f00000000c0)=0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@minixdf}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=[&(0x7f0000000040)='resuid', &(0x7f00000000c0)='^]1\'..*^\x00'], &(0x7f0000000240)=[&(0x7f00000001c0)='@\x00']) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000440)="3e7780f606e210b4d6e5ecd7", 0xc}, {0x0}], 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x14a, 0x0) 3.584554941s ago: executing program 2 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x19, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) 3.510293947s ago: executing program 2 (id=511): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x0, "e19b6bdecd37de8b92723846bf5f6129dd1e9216033cb9330bdb1d2d05c6068b"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x0, "e19b6bdecd37de8b92723846bf5f6129dd1e9216033cb9330bdb1d2d05c6068b"}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x8, 0x4}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000000180)={'nr0\x00', 0x3}) 1.693996908s ago: executing program 0 (id=512): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x46e, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94/7U/RBEErKKR+NLS8iIHLxpNPGhiogeMp9oWgizU0JLYhmj1gEdD4t14NPEv8KQXo55MvGq8GhJiuIAmJmtmdwaW7e7ali3TsJ9PMvA888zu83xn5pl9Zp7dBtCzRrJ/kojtEfFrRAzVs3duMFL/7+b1S1N/Xb80lUS1+uafSW27G9cvTRWbFq/bVs9Uq3l+U4t6L78TMVmpzFzI82Pz594fm1tYfO7MucnTM6dnzk+cOHH0yP7B4xPHuhJnFteNvR/O7tvz6ttXXp86eeXdH7/O2rs9L2+Mo1tG6nu3pSe7XVnJdjSkk/4SG8Kq/BMR2eEaqPX/oeiLLbfKhuKVT0ptHLCuqtVqtdXnc26pCtzHkii7BUA5ig/67P63WO7R0GNDuPZi/QYoi/tmvtRL+iONiM35vdGOdap/JCJOLv39RbbEOj2HAABo9G02/nm21fgvjYcatvtfPocyHBH/j4idEfFAROyKiAcjatvujoiHV1l/8wzJ8vFPenVNga1QNv57IZ/bunP8lxabDPfluR21+AeSU2cqM4fzfXIoBjZl+fEOdXz38i+ftStrHP9lS1Z/MRbM23G1v+kB3fTk/OTdxNzo2scRe/tbxZ9EMY2TRMSeiNi7xjrOPP3VvnZlTfFnu7kp/g66MM9U/TLiqfrxX4qm+AtJ2/nJ8eePTxwb2xyVmcNjxVmx3E8/X35j+dr6+//38V9f2fHf2vL8r7dvIGI42Rwxt7B4tjZfO7f6Oi7/9mnbe5q1nv+DyVu19GC+7oPJ+fkL4xGDyWvL10/cfm2RL7bP4j90sHX/3xm398QjEZGdxPsj4kBEPJq3/bGIeDwiDrYL8Pfd8cNLT7y3+vg7PJXvoiz+6Q7HP7vkZanbx7/5RFhqUXRnou/s99+0q39lx/9oLXUoX7OS61+H5rQKAgAAAO5rae078Ek6eiudpqOj9e/w74qtaWV2bv6ZU7MXz0/Xvys/HANp8aRrqOF56Hj+bLjITzTlj+TPjT/v21LLj07NVqbLDh563LY2/T/zR1/ZrQPWnd9rQe/S/6F36f/Qu/R/6F36P/SuVv3/oxLaAdx7tf6flt0KoAy1/n/xQNnNAErg/h96l/4PPantb+PT9kUSEguLkW6IZmy0RCxFdO8NY2HxbP+K/5jF2hJJtCzqfN1I7tUFCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C79GwAA//9hgN8V") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.693785488s ago: executing program 2 (id=513): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x46e, &(0x7f0000000940)="$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") r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x0, 0xfffffffd, @private0}}}, 0x84) fanotify_mark(r0, 0x101, 0x20, r1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000c80)=""/4079, 0xfef) 1.55480579s ago: executing program 1 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='bridge0\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace$peekuser(0x3, r4, 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x2, 0xf, 0x9, 0x5}, 0x14) 1.347025988s ago: executing program 4 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 538.058075ms ago: executing program 3 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 23.184858ms ago: executing program 1 (id=515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x84, 0x7, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000100300020802000000646d1ce5ac727fbd"], &(0x7f0000000240), 0x0) 22.976428ms ago: executing program 2 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000000308010400000020000000000000000006000240000000000500030006000000240004800800064000000000080001400000000008000540000000000800034000000004"], 0x48}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0x249beff511fadf60, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xf9e}]}}]}, 0x54}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa1}, 0x90) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x324000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x823080, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r7, r1, 0x2) splice(r8, 0x0, r9, 0xffffffffffffffff, 0x80000001, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f00000001c0)={0x50}, 0x50) fchmodat(r10, &(0x7f00000000c0)='./file1\x00', 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000400000000000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53}, 0x20) 0s ago: executing program 0 (id=525): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x100000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) kernel console output (not intermixed with test programs): iblock : 0, err : -5) [ 49.205025][ T4206] loop1: detected capacity change from 0 to 512 [ 49.244962][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 49.249616][ T4206] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 49.332290][ T4219] loop4: detected capacity change from 0 to 512 [ 49.360286][ T4220] loop0: detected capacity change from 0 to 512 [ 49.365853][ T4219] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 49.373298][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 49.383570][ T4220] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 49.445378][ T4220] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 49.465157][ T4228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 49.489289][ T4232] loop3: detected capacity change from 0 to 512 [ 49.554317][ T4232] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 49.558567][ T4232] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 49.562202][ T4236] loop4: detected capacity change from 0 to 512 [ 49.571418][ T4232] FAULT_INJECTION: forcing a failure. [ 49.571418][ T4232] name failslab, interval 1, probability 0, space 0, times 0 [ 49.587697][ T4232] CPU: 0 PID: 4232 Comm: syz.3.40 Not tainted 5.15.165-syzkaller #0 [ 49.589896][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.592560][ T4232] Call trace: [ 49.593462][ T4232] dump_backtrace+0x0/0x530 [ 49.594673][ T4232] show_stack+0x2c/0x3c [ 49.595853][ T4232] dump_stack_lvl+0x108/0x170 [ 49.597182][ T4232] dump_stack+0x1c/0x58 [ 49.598319][ T4232] should_fail+0x3b8/0x514 [ 49.599485][ T4232] __should_failslab+0xbc/0x110 [ 49.600837][ T4232] should_failslab+0x10/0x28 [ 49.602085][ T4232] slab_pre_alloc_hook+0x64/0xe8 [ 49.603388][ T4232] kmem_cache_alloc+0x98/0x45c [ 49.604689][ T4232] getname_flags+0xd0/0x480 [ 49.605973][ T4232] __arm64_sys_unlinkat+0xb4/0xfc [ 49.607368][ T4232] invoke_syscall+0x98/0x2b8 [ 49.608565][ T4232] el0_svc_common+0x138/0x258 [ 49.609948][ T4232] do_el0_svc+0x58/0x14c [ 49.611189][ T4232] el0_svc+0x7c/0x1f0 [ 49.612247][ T4232] el0t_64_sync_handler+0x84/0xe4 [ 49.613591][ T4232] el0t_64_sync+0x1a0/0x1a4 [ 49.711874][ T4236] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 49.729114][ T4236] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 50.423125][ T4244] device macvlan2 entered promiscuous mode [ 50.477261][ T4250] loop2: detected capacity change from 0 to 512 [ 50.594245][ T4252] loop1: detected capacity change from 0 to 512 [ 50.621418][ T4250] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 50.652997][ T4252] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 50.688305][ T4254] FAULT_INJECTION: forcing a failure. [ 50.688305][ T4254] name failslab, interval 1, probability 0, space 0, times 0 [ 50.691945][ T4254] CPU: 1 PID: 4254 Comm: syz.4.47 Not tainted 5.15.165-syzkaller #0 [ 50.694071][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.696684][ T4254] Call trace: [ 50.697600][ T4254] dump_backtrace+0x0/0x530 [ 50.698838][ T4254] show_stack+0x2c/0x3c [ 50.699955][ T4254] dump_stack_lvl+0x108/0x170 [ 50.701164][ T4254] dump_stack+0x1c/0x58 [ 50.702255][ T4254] should_fail+0x3b8/0x514 [ 50.703460][ T4254] __should_failslab+0xbc/0x110 [ 50.704727][ T4254] should_failslab+0x10/0x28 [ 50.705950][ T4254] slab_pre_alloc_hook+0x64/0xe8 [ 50.707339][ T4254] kmem_cache_alloc+0x98/0x45c [ 50.708619][ T4254] __d_alloc+0x3c/0x6a8 [ 50.709802][ T4254] d_alloc+0x54/0x18c [ 50.710884][ T4254] vfs_tmpfile+0x100/0x28c [ 50.712089][ T4254] ovl_copy_up_flags+0x164c/0x213c [ 50.713387][ T4254] ovl_copy_up+0x24/0x34 [ 50.714484][ T4254] ovl_setattr+0xb4/0x448 [ 50.715625][ T4254] notify_change+0xa34/0xcf8 [ 50.716946][ T4254] chmod_common+0x23c/0x418 [ 50.718141][ T4254] __arm64_sys_fchmodat+0x118/0x1dc [ 50.719539][ T4254] invoke_syscall+0x98/0x2b8 [ 50.720782][ T4254] el0_svc_common+0x138/0x258 [ 50.721990][ T4254] do_el0_svc+0x58/0x14c [ 50.723088][ T4254] el0_svc+0x7c/0x1f0 [ 50.724147][ T4254] el0t_64_sync_handler+0x84/0xe4 [ 50.725498][ T4254] el0t_64_sync+0x1a0/0x1a4 [ 50.731440][ T4258] FAULT_INJECTION: forcing a failure. [ 50.731440][ T4258] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.735021][ T4258] CPU: 0 PID: 4258 Comm: syz.3.50 Not tainted 5.15.165-syzkaller #0 [ 50.737200][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.739921][ T4258] Call trace: [ 50.740830][ T4258] dump_backtrace+0x0/0x530 [ 50.741996][ T4258] show_stack+0x2c/0x3c [ 50.743182][ T4258] dump_stack_lvl+0x108/0x170 [ 50.744424][ T4258] dump_stack+0x1c/0x58 [ 50.745591][ T4258] should_fail+0x3b8/0x514 [ 50.746786][ T4258] should_fail_usercopy+0x20/0x30 [ 50.748094][ T4258] copy_page_from_iter_atomic+0x3c8/0xffc [ 50.749728][ T4258] generic_perform_write+0x2d0/0x520 [ 50.751124][ T4258] __generic_file_write_iter+0x230/0x454 [ 50.752668][ T4258] generic_file_write_iter+0xb4/0x1b8 [ 50.754058][ T4258] vfs_write+0x884/0xb44 [ 50.755179][ T4258] ksys_write+0x15c/0x26c [ 50.756301][ T4258] __arm64_sys_write+0x7c/0x90 [ 50.757594][ T4258] invoke_syscall+0x98/0x2b8 [ 50.758821][ T4258] el0_svc_common+0x138/0x258 [ 50.760117][ T4258] do_el0_svc+0x58/0x14c [ 50.761274][ T4258] el0_svc+0x7c/0x1f0 [ 50.762367][ T4258] el0t_64_sync_handler+0x84/0xe4 [ 50.763722][ T4258] el0t_64_sync+0x1a0/0x1a4 [ 50.777937][ T4258] loop3: detected capacity change from 0 to 164 [ 50.862610][ T4263] loop4: detected capacity change from 0 to 512 [ 50.866348][ T4264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53'. [ 50.870434][ T4260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 50.918356][ T4263] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 51.019113][ T4241] loop0: detected capacity change from 0 to 32768 [ 51.090249][ T4283] loop4: detected capacity change from 0 to 512 [ 51.143488][ T4285] device macvlan5 entered promiscuous mode [ 51.192830][ T4241] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 51.197498][ T4241] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 51.894217][ T4283] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 51.925789][ T4241] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 51.942719][ T4283] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 51.949922][ T4012] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 51.952461][ T4012] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 52.101364][ T4299] FAULT_INJECTION: forcing a failure. [ 52.101364][ T4299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.104844][ T4299] CPU: 1 PID: 4299 Comm: syz.1.64 Not tainted 5.15.165-syzkaller #0 [ 52.107027][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.109777][ T4299] Call trace: [ 52.110674][ T4299] dump_backtrace+0x0/0x530 [ 52.112005][ T4299] show_stack+0x2c/0x3c [ 52.113202][ T4299] dump_stack_lvl+0x108/0x170 [ 52.114428][ T4299] dump_stack+0x1c/0x58 [ 52.115511][ T4299] should_fail+0x3b8/0x514 [ 52.116685][ T4299] should_fail_usercopy+0x20/0x30 [ 52.118013][ T4299] iovec_from_user+0xcc/0x630 [ 52.119206][ T4299] __import_iovec+0x80/0x414 [ 52.120426][ T4299] import_iovec+0x88/0xa4 [ 52.121608][ T4299] ___sys_sendmsg+0x1dc/0x294 [ 52.122841][ T4299] __arm64_sys_sendmsg+0x1ac/0x25c [ 52.124180][ T4299] invoke_syscall+0x98/0x2b8 [ 52.125413][ T4299] el0_svc_common+0x138/0x258 [ 52.126665][ T4299] do_el0_svc+0x58/0x14c [ 52.127841][ T4299] el0_svc+0x7c/0x1f0 [ 52.128887][ T4299] el0t_64_sync_handler+0x84/0xe4 [ 52.130211][ T4299] el0t_64_sync+0x1a0/0x1a4 [ 52.147970][ T4301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'. [ 52.159735][ T4012] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 207ms [ 52.162488][ T4012] gfs2: fsid=syz:syz.0: jid=0: Done [ 52.164375][ T4241] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 52.197227][ T4303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 52.245197][ T4309] loop1: detected capacity change from 0 to 512 [ 52.297833][ T4306] loop4: detected capacity change from 0 to 128 [ 52.311405][ T4309] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 52.385965][ T4306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.418021][ T4306] syz.4.62 (pid 4306) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 52.734426][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 52.781804][ T4339] loop3: detected capacity change from 0 to 512 [ 52.816421][ T4339] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 52.840425][ T4339] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 52.843537][ T4342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 52.972285][ T4346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'. [ 53.124518][ T4352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 53.276754][ T4358] loop3: detected capacity change from 0 to 256 [ 53.304500][ T4358] FAT-fs (loop3): Unrecognized mount option "rodir" or missing value [ 53.328239][ T4362] FAULT_INJECTION: forcing a failure. [ 53.328239][ T4362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.332411][ T4362] CPU: 1 PID: 4362 Comm: syz.1.84 Not tainted 5.15.165-syzkaller #0 [ 53.334474][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 53.337074][ T4362] Call trace: [ 53.337872][ T4362] dump_backtrace+0x0/0x530 [ 53.339159][ T4362] show_stack+0x2c/0x3c [ 53.340292][ T4362] dump_stack_lvl+0x108/0x170 [ 53.341480][ T4362] dump_stack+0x1c/0x58 [ 53.342562][ T4362] should_fail+0x3b8/0x514 [ 53.343755][ T4362] should_fail_usercopy+0x20/0x30 [ 53.345055][ T4362] iovec_from_user+0xcc/0x630 [ 53.346318][ T4362] __import_iovec+0x80/0x414 [ 53.347554][ T4362] import_iovec+0x88/0xa4 [ 53.348656][ T4362] do_preadv+0x1b8/0x324 [ 53.349768][ T4362] __arm64_sys_preadv+0xa0/0xb8 [ 53.351150][ T4362] invoke_syscall+0x98/0x2b8 [ 53.352362][ T4362] el0_svc_common+0x138/0x258 [ 53.353629][ T4362] do_el0_svc+0x58/0x14c [ 53.354769][ T4362] el0_svc+0x7c/0x1f0 [ 53.355841][ T4362] el0t_64_sync_handler+0x84/0xe4 [ 53.357165][ T4362] el0t_64_sync+0x1a0/0x1a4 [ 53.493997][ T4367] device bridge_slave_0 left promiscuous mode [ 53.496329][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.413065][ T4367] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 54.444699][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 54.529886][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.91'. [ 54.568269][ T4389] loop2: detected capacity change from 0 to 512 [ 54.613668][ T4392] loop1: detected capacity change from 0 to 256 [ 54.634770][ T4389] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 54.657208][ T4389] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 54.769125][ T4395] loop4: detected capacity change from 0 to 2048 [ 54.789998][ T26] audit: type=1326 audit(54.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.0.95" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee94e68 code=0x0 [ 54.868537][ T4395] UDF-fs: bad mount option "gid=û1¼u­Ó'5c —·CW Ø?È]E#–kOU£ß„õØ?2¾%¥?ûÕÿMBÈ&žŒS(€σ­8Ä@ÕFתã=%÷®ˆD©RQ÷" or missing value [ 54.895845][ T4403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.94'. [ 54.935916][ T4401] input: syz1 as /devices/virtual/input/input2 [ 54.985901][ T4395] loop4: detected capacity change from 0 to 2048 [ 55.256821][ T4395] loop4: detected capacity change from 0 to 64 [ 55.294121][ T4395] ======================================================= [ 55.294121][ T4395] WARNING: The mand mount option has been deprecated and [ 55.294121][ T4395] and is ignored by this kernel. Remove the mand [ 55.294121][ T4395] option from the mount to silence this warning. [ 55.294121][ T4395] ======================================================= [ 56.294765][ T4421] loop0: detected capacity change from 0 to 512 [ 56.296929][ T4417] loop2: detected capacity change from 0 to 512 [ 56.303135][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 56.356033][ T4421] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 56.360570][ T4417] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 56.363762][ T4419] loop3: detected capacity change from 0 to 8192 [ 56.393070][ T4421] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 56.397159][ T4417] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 56.422657][ T4419] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "sma" for option "tails" [ 56.422657][ T4419] [ 56.434433][ T4421] FAULT_INJECTION: forcing a failure. [ 56.434433][ T4421] name failslab, interval 1, probability 0, space 0, times 0 [ 56.437686][ T4421] CPU: 0 PID: 4421 Comm: syz.0.103 Not tainted 5.15.165-syzkaller #0 [ 56.439650][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 56.442295][ T4421] Call trace: [ 56.443113][ T4421] dump_backtrace+0x0/0x530 [ 56.444375][ T4421] show_stack+0x2c/0x3c [ 56.445448][ T4421] dump_stack_lvl+0x108/0x170 [ 56.446665][ T4421] dump_stack+0x1c/0x58 [ 56.447778][ T4421] should_fail+0x3b8/0x514 [ 56.448970][ T4421] __should_failslab+0xbc/0x110 [ 56.450307][ T4421] should_failslab+0x10/0x28 [ 56.451479][ T4421] slab_pre_alloc_hook+0x64/0xe8 [ 56.452788][ T4421] kmem_cache_alloc+0x98/0x45c [ 56.454035][ T4421] getname_flags+0xd0/0x480 [ 56.455253][ T4421] __arm64_sys_mkdirat+0x80/0xa8 [ 56.456582][ T4421] invoke_syscall+0x98/0x2b8 [ 56.457764][ T4421] el0_svc_common+0x138/0x258 [ 56.458957][ T4421] do_el0_svc+0x58/0x14c [ 56.460045][ T4421] el0_svc+0x7c/0x1f0 [ 56.461087][ T4421] el0t_64_sync_handler+0x84/0xe4 [ 56.462423][ T4421] el0t_64_sync+0x1a0/0x1a4 [ 56.463694][ C0] vkms_vblank_simulate: vblank timer overrun [ 56.518343][ T4431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'. [ 56.693131][ T4438] loop2: detected capacity change from 0 to 512 [ 56.723537][ T4438] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 56.724541][ T4448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 57.762001][ T4462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.115'. [ 57.843323][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 57.862038][ T4457] loop1: detected capacity change from 0 to 4096 [ 57.885456][ T4457] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 57.914355][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 57.943468][ T4457] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 57.973581][ T4471] loop4: detected capacity change from 0 to 512 [ 57.985348][ T4470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 57.987673][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 58.013691][ T4471] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 58.030434][ T4471] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 58.125575][ T4021] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 58.349581][ T4481] loop1: detected capacity change from 0 to 1024 [ 58.391953][ T4485] loop3: detected capacity change from 0 to 512 [ 58.733700][ T4438] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 58.746349][ T4438] EXT2-fs (loop2): error: ext2_check_page: size of directory #12 is not a multiple of chunk size [ 59.116232][ T4486] loop4: detected capacity change from 0 to 131072 [ 59.133931][ T4485] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 59.151914][ T4485] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 59.201161][ T4481] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 59.203672][ T4481] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 59.205515][ T4481] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.230298][ T4481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 59.250468][ T4481] System zones: 0-1, 3-36 [ 59.267998][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 59.287216][ T4486] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.042175][ T4481] __nla_validate_parse: 1 callbacks suppressed [ 60.042189][ T4481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 60.046190][ T4481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 60.048486][ T4481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 60.060963][ T4486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.095993][ T4508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.129'. [ 60.157330][ T4510] loop2: detected capacity change from 0 to 512 [ 60.171651][ T4510] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 60.178156][ T4512] loop0: detected capacity change from 0 to 512 [ 60.191804][ T4510] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 60.198557][ T4510] FAULT_INJECTION: forcing a failure. [ 60.198557][ T4510] name failslab, interval 1, probability 0, space 0, times 0 [ 60.202462][ T4510] CPU: 1 PID: 4510 Comm: syz.2.130 Not tainted 5.15.165-syzkaller #0 [ 60.204596][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 60.207044][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 60.207194][ T4510] Call trace: [ 60.209389][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 60.210235][ T4510] dump_backtrace+0x0/0x530 [ 60.213676][ T4510] show_stack+0x2c/0x3c [ 60.214743][ T4510] dump_stack_lvl+0x108/0x170 [ 60.216003][ T4510] dump_stack+0x1c/0x58 [ 60.217080][ T4510] should_fail+0x3b8/0x514 [ 60.218272][ T4510] __should_failslab+0xbc/0x110 [ 60.219535][ T4510] should_failslab+0x10/0x28 [ 60.220770][ T4510] slab_pre_alloc_hook+0x64/0xe8 [ 60.222182][ T4510] kmem_cache_alloc+0x98/0x45c [ 60.223527][ T4510] getname_flags+0xd0/0x480 [ 60.224769][ T4510] __arm64_sys_mkdirat+0x80/0xa8 [ 60.226127][ T4510] invoke_syscall+0x98/0x2b8 [ 60.227346][ T4510] el0_svc_common+0x138/0x258 [ 60.228648][ T4510] do_el0_svc+0x58/0x14c [ 60.229832][ T4510] el0_svc+0x7c/0x1f0 [ 60.230894][ T4510] el0t_64_sync_handler+0x84/0xe4 [ 60.232251][ T4510] el0t_64_sync+0x1a0/0x1a4 [ 60.254949][ T4512] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 60.299477][ T4512] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 60.317472][ T4518] loop1: detected capacity change from 0 to 512 [ 60.346077][ T4518] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 60.356953][ T4518] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 60.367609][ T4512] netlink: 'syz.0.131': attribute type 10 has an invalid length. [ 60.369829][ T4512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.131'. [ 60.411690][ T4512] device caif0 entered promiscuous mode [ 60.413202][ T4512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.424508][ T4521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'. [ 60.426765][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 61.563020][ T4548] device bridge1 entered promiscuous mode [ 61.620087][ T4551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.723603][ T4539] loop4: detected capacity change from 0 to 8192 [ 61.732042][ T4557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.145'. [ 61.777593][ T4562] loop0: detected capacity change from 0 to 512 [ 61.780640][ T4539] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 61.834085][ T4562] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 61.869548][ T4562] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 62.210936][ T4530] loop3: detected capacity change from 0 to 32768 [ 62.293495][ T4581] loop0: detected capacity change from 0 to 128 [ 62.450291][ T4581] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 62.471983][ T4581] EXT4-fs (loop0): group descriptors corrupted! [ 63.150217][ T4588] fuse: Bad value for 'fd' [ 63.182698][ T4590] loop2: detected capacity change from 0 to 128 [ 63.427411][ T4593] Zero length message leads to an empty skb [ 63.655326][ T4608] loop4: detected capacity change from 0 to 512 [ 63.693947][ T4608] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 63.708613][ T4608] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 63.868112][ T4622] ceph: No path or : separator in source [ 64.183580][ T4585] loop1: detected capacity change from 0 to 32768 [ 64.861655][ T4585] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.155 (4585) [ 65.034563][ T4585] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 65.036977][ T4585] BTRFS info (device loop1): allowing degraded mounts [ 65.038803][ T4585] BTRFS info (device loop1): doing ref verification [ 65.059564][ T4647] Cannot find del_set index 0 as target [ 65.061565][ T4585] BTRFS info (device loop1): turning on sync discard [ 65.063497][ T4585] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 65.066280][ T4585] BTRFS info (device loop1): use zstd compression, level 3 [ 65.068161][ T4585] BTRFS info (device loop1): doing ref verification [ 65.069891][ T4585] BTRFS info (device loop1): using free space tree [ 65.084261][ T4650] __nla_validate_parse: 12 callbacks suppressed [ 65.084273][ T4650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.171'. [ 65.092651][ T4585] BTRFS info (device loop1): has skinny extents [ 65.119152][ T4655] loop4: detected capacity change from 0 to 512 [ 65.183148][ T4655] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 65.194246][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 65.196554][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 65.286740][ T4668] loop3: detected capacity change from 0 to 4096 [ 65.289052][ T4668] ntfs3: Unknown parameter 'nohidden.prealloc' [ 65.521672][ T4585] BTRFS error (device loop1): open_ctree failed [ 65.624264][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 65.627193][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 67.573716][ T4714] loop1: detected capacity change from 0 to 512 [ 67.587377][ T4696] loop4: detected capacity change from 0 to 8192 [ 67.590445][ T4716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.186'. [ 67.638041][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 67.640257][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 67.651258][ T4714] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 67.651258][ T4714] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.651258][ T4714] [ 67.663877][ T4696] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 67.666614][ T4696] REISERFS (device loop4): using ordered data mode [ 67.668258][ T4696] reiserfs: using flush barriers [ 67.704721][ T4714] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 67.715865][ T4696] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.721983][ T4714] EXT4-fs (loop1): 1 truncate cleaned up [ 67.723598][ T4714] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 67.738500][ T4696] REISERFS (device loop4): checking transaction log (loop4) [ 67.827802][ T4685] loop2: detected capacity change from 0 to 32768 [ 67.865700][ T4696] REISERFS (device loop4): Using r5 hash to sort names [ 67.868982][ T4696] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 67.899123][ T4696] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 67.918768][ T4727] loop0: detected capacity change from 0 to 512 [ 67.938673][ T4730] udc-core: couldn't find an available UDC or it's busy [ 67.940475][ T4730] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.968243][ T4731] loop3: detected capacity change from 0 to 2048 [ 68.077679][ T4733] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 68.897887][ T4727] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 70.105339][ T4741] FAULT_INJECTION: forcing a failure. [ 70.105339][ T4741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.109018][ T4741] CPU: 1 PID: 4741 Comm: syz.0.194 Not tainted 5.15.165-syzkaller #0 [ 70.111245][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 70.113990][ T4741] Call trace: [ 70.114939][ T4741] dump_backtrace+0x0/0x530 [ 70.116163][ T4741] show_stack+0x2c/0x3c [ 70.117339][ T4741] dump_stack_lvl+0x108/0x170 [ 70.118618][ T4741] dump_stack+0x1c/0x58 [ 70.119712][ T4741] should_fail+0x3b8/0x514 [ 70.120882][ T4741] should_fail_usercopy+0x20/0x30 [ 70.122246][ T4741] kstrtouint_from_user+0xd8/0x384 [ 70.123664][ T4741] proc_fail_nth_write+0xa8/0x288 [ 70.125036][ T4741] vfs_write+0x280/0xb44 [ 70.126199][ T4741] ksys_write+0x15c/0x26c [ 70.127132][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.127344][ T4741] __arm64_sys_write+0x7c/0x90 [ 70.129262][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.130462][ T4741] invoke_syscall+0x98/0x2b8 [ 70.133384][ T4741] el0_svc_common+0x138/0x258 [ 70.134640][ T4741] do_el0_svc+0x58/0x14c [ 70.135816][ T4741] el0_svc+0x7c/0x1f0 [ 70.136931][ T4741] el0t_64_sync_handler+0x84/0xe4 [ 70.138306][ T4741] el0t_64_sync+0x1a0/0x1a4 [ 70.376745][ T4747] loop0: detected capacity change from 0 to 4096 [ 70.408932][ T4747] ntfs: (device loop0): ntfs_read_locked_inode(): Inode is an extent inode! [ 70.519795][ T4747] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 71.009966][ T4747] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 71.040616][ T4747] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 71.127213][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 71.142578][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 71.241906][ T4753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 71.244279][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 71.271735][ T4747] loop0: detected capacity change from 0 to 256 [ 71.284697][ T4747] exfat: Bad value for 'uid' [ 71.466953][ T4764] FAULT_INJECTION: forcing a failure. [ 71.466953][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 71.470485][ T4764] CPU: 0 PID: 4764 Comm: syz.2.196 Not tainted 5.15.165-syzkaller #0 [ 71.472586][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 71.475397][ T4764] Call trace: [ 71.476306][ T4764] dump_backtrace+0x0/0x530 [ 71.477667][ T4764] show_stack+0x2c/0x3c [ 71.478728][ T4764] dump_stack_lvl+0x108/0x170 [ 71.479984][ T4764] dump_stack+0x1c/0x58 [ 71.481161][ T4764] should_fail+0x3b8/0x514 [ 71.482301][ T4764] __should_failslab+0xbc/0x110 [ 71.483613][ T4764] should_failslab+0x10/0x28 [ 71.484819][ T4764] slab_pre_alloc_hook+0x64/0xe8 [ 71.486106][ T4764] __kmalloc+0xc0/0x4c8 [ 71.487161][ T4764] tomoyo_encode+0x270/0x4b0 [ 71.488482][ T4764] tomoyo_realpath_from_path+0x4b4/0x508 [ 71.489971][ T4764] tomoyo_path_number_perm+0x1f8/0x6b0 [ 71.491396][ T4764] tomoyo_file_ioctl+0x2c/0x3c [ 71.492672][ T4764] security_file_ioctl+0x80/0xbc [ 71.494000][ T4764] __arm64_sys_ioctl+0xa8/0x1c8 [ 71.495311][ T4764] invoke_syscall+0x98/0x2b8 [ 71.496593][ T4764] el0_svc_common+0x138/0x258 [ 71.497781][ T4764] do_el0_svc+0x58/0x14c [ 71.498902][ T4764] el0_svc+0x7c/0x1f0 [ 71.499987][ T4764] el0t_64_sync_handler+0x84/0xe4 [ 71.501328][ T4764] el0t_64_sync+0x1a0/0x1a4 [ 71.548643][ T4764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.615965][ T4777] loop1: detected capacity change from 0 to 512 [ 71.647922][ T4781] loop2: detected capacity change from 0 to 512 [ 71.696141][ T4777] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 71.701882][ T4781] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 71.739265][ T4781] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 71.799588][ T4783] tipc: Invalid UDP bearer configuration [ 71.799630][ T4783] tipc: Enabling of bearer rejected, failed to enable media [ 72.000379][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 72.022865][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 72.772487][ T4792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 72.782949][ T4795] loop2: detected capacity change from 0 to 512 [ 72.785370][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 72.935559][ T4798] loop1: detected capacity change from 0 to 512 [ 72.973322][ T4795] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 72.977943][ T4795] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 72.985145][ T4798] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 73.019622][ T4795] FAULT_INJECTION: forcing a failure. [ 73.019622][ T4795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.031920][ T4795] CPU: 0 PID: 4795 Comm: syz.2.212 Not tainted 5.15.165-syzkaller #0 [ 73.034056][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.036808][ T4795] Call trace: [ 73.037686][ T4795] dump_backtrace+0x0/0x530 [ 73.038941][ T4795] show_stack+0x2c/0x3c [ 73.040152][ T4795] dump_stack_lvl+0x108/0x170 [ 73.041479][ T4795] dump_stack+0x1c/0x58 [ 73.042664][ T4795] should_fail+0x3b8/0x514 [ 73.043907][ T4795] should_fail_usercopy+0x20/0x30 [ 73.045354][ T4795] strncpy_from_user+0x48/0x580 [ 73.046775][ T4795] getname_flags+0x104/0x480 [ 73.048047][ T4795] __arm64_sys_unlinkat+0xb4/0xfc [ 73.049483][ T4795] invoke_syscall+0x98/0x2b8 [ 73.050767][ T4795] el0_svc_common+0x138/0x258 [ 73.052119][ T4795] do_el0_svc+0x58/0x14c [ 73.053341][ T4795] el0_svc+0x7c/0x1f0 [ 73.054503][ T4795] el0t_64_sync_handler+0x84/0xe4 [ 73.055971][ T4795] el0t_64_sync+0x1a0/0x1a4 [ 73.083342][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 73.185422][ T4807] loop0: detected capacity change from 0 to 512 [ 73.196699][ T4809] loop1: detected capacity change from 0 to 512 [ 73.214236][ T4807] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 73.223346][ T4809] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 73.246190][ T4809] FAULT_INJECTION: forcing a failure. [ 73.246190][ T4809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.280738][ T4809] CPU: 0 PID: 4809 Comm: syz.1.215 Not tainted 5.15.165-syzkaller #0 [ 73.283036][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.285936][ T4809] Call trace: [ 73.286844][ T4809] dump_backtrace+0x0/0x530 [ 73.288243][ T4809] show_stack+0x2c/0x3c [ 73.289459][ T4809] dump_stack_lvl+0x108/0x170 [ 73.290733][ T4809] dump_stack+0x1c/0x58 [ 73.291971][ T4809] should_fail+0x3b8/0x514 [ 73.293282][ T4809] should_fail_usercopy+0x20/0x30 [ 73.294713][ T4809] filldir64+0x750/0x9e4 [ 73.295934][ T4809] ext2_readdir+0x41c/0x798 [ 73.297213][ T4809] iterate_dir+0x1f4/0x4ec [ 73.298472][ T4809] __arm64_sys_getdents64+0x1c4/0x4c4 [ 73.299965][ T4809] invoke_syscall+0x98/0x2b8 [ 73.301333][ T4809] el0_svc_common+0x138/0x258 [ 73.302583][ T4809] do_el0_svc+0x58/0x14c [ 73.303760][ T4809] el0_svc+0x7c/0x1f0 [ 73.304892][ T4809] el0t_64_sync_handler+0x84/0xe4 [ 73.306339][ T4809] el0t_64_sync+0x1a0/0x1a4 [ 73.451135][ T4813] loop2: detected capacity change from 0 to 512 [ 73.491112][ T4813] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.522364][ T4819] FAULT_INJECTION: forcing a failure. [ 73.522364][ T4819] name failslab, interval 1, probability 0, space 0, times 0 [ 73.525824][ T4819] CPU: 1 PID: 4819 Comm: syz.1.220 Not tainted 5.15.165-syzkaller #0 [ 73.528135][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.530984][ T4819] Call trace: [ 73.531840][ T4819] dump_backtrace+0x0/0x530 [ 73.533069][ T4819] show_stack+0x2c/0x3c [ 73.534208][ T4819] dump_stack_lvl+0x108/0x170 [ 73.535550][ T4819] dump_stack+0x1c/0x58 [ 73.536634][ T4819] should_fail+0x3b8/0x514 [ 73.537855][ T4819] __should_failslab+0xbc/0x110 [ 73.539218][ T4819] should_failslab+0x10/0x28 [ 73.540367][ T4819] slab_pre_alloc_hook+0x64/0xe8 [ 73.540699][ T4813] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.541633][ T4819] kmem_cache_alloc+0x98/0x45c [ 73.541664][ T4819] shmem_alloc_inode+0x20/0x38 [ 73.547543][ T4819] new_inode_pseudo+0x68/0x200 [ 73.548901][ T4819] new_inode+0x38/0x174 [ 73.550045][ T4819] shmem_get_inode+0x31c/0xa04 [ 73.551310][ T4819] shmem_tmpfile+0x58/0x110 [ 73.552563][ T4819] vfs_tmpfile+0x1d4/0x28c [ 73.553736][ T4819] ovl_copy_up_flags+0x164c/0x213c [ 73.555132][ T4819] ovl_copy_up+0x24/0x34 [ 73.556343][ T4819] ovl_setattr+0xb4/0x448 [ 73.557495][ T4819] notify_change+0xa34/0xcf8 [ 73.558743][ T4819] chmod_common+0x23c/0x418 [ 73.560010][ T4819] __arm64_sys_fchmodat+0x118/0x1dc [ 73.561408][ T4819] invoke_syscall+0x98/0x2b8 [ 73.562696][ T4819] el0_svc_common+0x138/0x258 [ 73.563975][ T4819] do_el0_svc+0x58/0x14c [ 73.565094][ T4819] el0_svc+0x7c/0x1f0 [ 73.566174][ T4819] el0t_64_sync_handler+0x84/0xe4 [ 73.567581][ T4819] el0t_64_sync+0x1a0/0x1a4 [ 73.687518][ T4813] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 73.760609][ T4813] EXT4-fs (loop2): Remounting filesystem read-only [ 73.767697][ T4813] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.219: invalid indirect mapped block 1 (level 1) [ 73.795116][ T4813] EXT4-fs (loop2): 1 truncate cleaned up [ 73.796556][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 74.529220][ T4831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 74.739639][ T4837] loop0: detected capacity change from 0 to 512 [ 74.753866][ T1982] cfg80211: failed to load regulatory.db [ 74.813080][ T4839] FAULT_INJECTION: forcing a failure. [ 74.813080][ T4839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.816708][ T4839] CPU: 0 PID: 4839 Comm: syz.3.227 Not tainted 5.15.165-syzkaller #0 [ 74.818875][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 74.821461][ T4839] Call trace: [ 74.822274][ T4839] dump_backtrace+0x0/0x530 [ 74.823449][ T4839] show_stack+0x2c/0x3c [ 74.824546][ T4839] dump_stack_lvl+0x108/0x170 [ 74.825758][ T4839] dump_stack+0x1c/0x58 [ 74.826886][ T4839] should_fail+0x3b8/0x514 [ 74.828028][ T4839] should_fail_usercopy+0x20/0x30 [ 74.829296][ T4839] copy_page_from_iter_atomic+0x3c8/0xffc [ 74.830874][ T4839] generic_perform_write+0x2d0/0x520 [ 74.832271][ T4839] __generic_file_write_iter+0x230/0x454 [ 74.833774][ T4839] generic_file_write_iter+0xb4/0x1b8 [ 74.835203][ T4839] vfs_write+0x884/0xb44 [ 74.836324][ T4839] ksys_write+0x15c/0x26c [ 74.837480][ T4839] __arm64_sys_write+0x7c/0x90 [ 74.838747][ T4839] invoke_syscall+0x98/0x2b8 [ 74.839994][ T4839] el0_svc_common+0x138/0x258 [ 74.841188][ T4839] do_el0_svc+0x58/0x14c [ 74.842361][ T4839] el0_svc+0x7c/0x1f0 [ 74.843390][ T4839] el0t_64_sync_handler+0x84/0xe4 [ 74.844686][ T4839] el0t_64_sync+0x1a0/0x1a4 [ 74.912815][ T4839] loop3: detected capacity change from 0 to 164 [ 74.967037][ T4837] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 75.008158][ T4837] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 75.536604][ T4867] loop0: detected capacity change from 0 to 64 [ 76.261539][ T4878] FAULT_INJECTION: forcing a failure. [ 76.261539][ T4878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.265485][ T4878] CPU: 1 PID: 4878 Comm: syz.2.240 Not tainted 5.15.165-syzkaller #0 [ 76.267562][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 76.270177][ T4878] Call trace: [ 76.271010][ T4878] dump_backtrace+0x0/0x530 [ 76.272234][ T4878] show_stack+0x2c/0x3c [ 76.273309][ T4878] dump_stack_lvl+0x108/0x170 [ 76.274541][ T4878] dump_stack+0x1c/0x58 [ 76.275686][ T4878] should_fail+0x3b8/0x514 [ 76.276906][ T4878] should_fail_usercopy+0x20/0x30 [ 76.278178][ T4878] simple_read_from_buffer+0xd8/0x26c [ 76.279541][ T4878] proc_fail_nth_read+0x1a0/0x248 [ 76.280976][ T4878] vfs_read+0x278/0xb18 [ 76.282066][ T4878] ksys_read+0x15c/0x26c [ 76.283261][ T4878] __arm64_sys_read+0x7c/0x90 [ 76.284550][ T4878] invoke_syscall+0x98/0x2b8 [ 76.285780][ T4878] el0_svc_common+0x138/0x258 [ 76.286986][ T4878] do_el0_svc+0x58/0x14c [ 76.288098][ T4878] el0_svc+0x7c/0x1f0 [ 76.289204][ T4878] el0t_64_sync_handler+0x84/0xe4 [ 76.290553][ T4878] el0t_64_sync+0x1a0/0x1a4 [ 76.304894][ T4881] loop1: detected capacity change from 0 to 512 [ 76.387352][ T4881] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 76.441348][ T4888] __nla_validate_parse: 4 callbacks suppressed [ 76.441361][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 76.488416][ T4890] loop3: detected capacity change from 0 to 512 [ 76.488724][ T4887] device syzkaller0 entered promiscuous mode [ 76.535125][ T4890] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 76.542633][ T4890] FAULT_INJECTION: forcing a failure. [ 76.542633][ T4890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.546308][ T4890] CPU: 1 PID: 4890 Comm: syz.3.246 Not tainted 5.15.165-syzkaller #0 [ 76.548401][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 76.550963][ T4890] Call trace: [ 76.551872][ T4890] dump_backtrace+0x0/0x530 [ 76.553083][ T4890] show_stack+0x2c/0x3c [ 76.554229][ T4890] dump_stack_lvl+0x108/0x170 [ 76.555568][ T4890] dump_stack+0x1c/0x58 [ 76.556704][ T4890] should_fail+0x3b8/0x514 [ 76.557819][ T4890] should_fail_usercopy+0x20/0x30 [ 76.559146][ T4890] filldir64+0x750/0x9e4 [ 76.560323][ T4890] ext2_readdir+0x41c/0x798 [ 76.561560][ T4890] iterate_dir+0x1f4/0x4ec [ 76.562695][ T4890] __arm64_sys_getdents64+0x1c4/0x4c4 [ 76.564108][ T4890] invoke_syscall+0x98/0x2b8 [ 76.565309][ T4890] el0_svc_common+0x138/0x258 [ 76.566573][ T4890] do_el0_svc+0x58/0x14c [ 76.567699][ T4890] el0_svc+0x7c/0x1f0 [ 76.568760][ T4890] el0t_64_sync_handler+0x84/0xe4 [ 76.570115][ T4890] el0t_64_sync+0x1a0/0x1a4 [ 76.678202][ T4895] loop1: detected capacity change from 0 to 4096 [ 76.711841][ T4899] loop2: detected capacity change from 0 to 512 [ 76.726557][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 76.730573][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 76.760901][ T4895] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 76.763386][ T4895] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 76.766732][ T4895] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 76.788147][ T4899] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 76.847580][ T4899] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 76.874218][ T4899] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 19 [ 76.886907][ T4899] EXT2-fs (loop2): error: ext2_fsync: detected IO error when writing metadata buffers [ 77.029392][ T9] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 18 [ 77.037501][ T9] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 2 [ 77.796864][ T4912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.255'. [ 77.837458][ T4911] loop4: detected capacity change from 0 to 4096 [ 77.875448][ T4911] NILFS (loop4): unrecognized mount option "ÉÓ9-ö" [ 77.900097][ T4914] loop0: detected capacity change from 0 to 512 [ 77.937299][ T4916] loop2: detected capacity change from 0 to 512 [ 77.952476][ T4914] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 77.972838][ T4914] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 77.982336][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 78.147459][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 78.256794][ T4895] loop1: detected capacity change from 0 to 32768 [ 78.258733][ T4926] device syzkaller0 entered promiscuous mode [ 78.280644][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 78.283254][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 78.353753][ T4931] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 78.394908][ T4895] XFS (loop1): Mounting V5 Filesystem [ 78.537255][ T4895] XFS (loop1): Ending clean mount [ 78.557149][ T4931] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 78.569598][ T4944] netlink: 'syz.2.264': attribute type 21 has an invalid length. [ 78.599494][ T4944] netlink: 128 bytes leftover after parsing attributes in process `syz.2.264'. [ 78.634226][ T4944] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 78.646734][ T4944] netlink: 'syz.2.264': attribute type 3 has an invalid length. [ 78.648701][ T4944] netlink: 3 bytes leftover after parsing attributes in process `syz.2.264'. [ 79.312122][ T4021] XFS (loop1): Unmounting Filesystem [ 79.618016][ T4960] loop2: detected capacity change from 0 to 512 [ 79.658231][ T4961] loop0: detected capacity change from 0 to 64 [ 79.667791][ T4960] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 79.702555][ T4960] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 79.729078][ T4961] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 79.758545][ T4961] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 79.850862][ T4905] loop4: detected capacity change from 0 to 32768 [ 79.999945][ T4963] FAULT_INJECTION: forcing a failure. [ 79.999945][ T4963] name failslab, interval 1, probability 0, space 0, times 0 [ 80.010911][ T4963] CPU: 1 PID: 4963 Comm: syz.1.267 Not tainted 5.15.165-syzkaller #0 [ 80.013092][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 80.015778][ T4963] Call trace: [ 80.016621][ T4963] dump_backtrace+0x0/0x530 [ 80.017784][ T4963] show_stack+0x2c/0x3c [ 80.018889][ T4963] dump_stack_lvl+0x108/0x170 [ 80.020113][ T4963] dump_stack+0x1c/0x58 [ 80.021265][ T4963] should_fail+0x3b8/0x514 [ 80.022434][ T4963] __should_failslab+0xbc/0x110 [ 80.023712][ T4963] should_failslab+0x10/0x28 [ 80.024985][ T4963] slab_pre_alloc_hook+0x64/0xe8 [ 80.026303][ T4963] __kmalloc_node+0xbc/0x5b8 [ 80.027531][ T4963] kvmalloc_node+0x88/0x204 [ 80.028708][ T4963] traverse+0xec/0x554 [ 80.029781][ T4963] seq_read_iter+0xb84/0xc44 [ 80.031116][ T4963] seq_read+0x388/0x4ec [ 80.032196][ T4963] proc_reg_read+0x1a4/0x314 [ 80.033503][ T4963] do_iter_read+0x434/0x684 [ 80.034675][ T4963] do_preadv+0x1e4/0x324 [ 80.035793][ T4963] __arm64_sys_preadv+0xa0/0xb8 [ 80.037117][ T4963] invoke_syscall+0x98/0x2b8 [ 80.038350][ T4963] el0_svc_common+0x138/0x258 [ 80.039554][ T4963] do_el0_svc+0x58/0x14c [ 80.040630][ T4963] el0_svc+0x7c/0x1f0 [ 80.041675][ T4963] el0t_64_sync_handler+0x84/0xe4 [ 80.043005][ T4963] el0t_64_sync+0x1a0/0x1a4 [ 80.225943][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.300093][ T4973] loop2: detected capacity change from 0 to 2048 [ 80.385790][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.387633][ T4969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.446534][ T4974] device syzkaller0 entered promiscuous mode [ 80.574091][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.147439][ T4989] overlayfs: failed to resolve './file2': -2 [ 81.191123][ T4973] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.278: bg 0: block 234: padding at end of block bitmap is not set [ 81.197523][ T4973] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 81.200815][ T4973] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.200815][ T4973] [ 81.203319][ T4973] EXT4-fs (loop2): Total free blocks count 0 [ 81.204867][ T4973] EXT4-fs (loop2): Free/Dirty block details [ 81.206452][ T4973] EXT4-fs (loop2): free_blocks=0 [ 81.207904][ T4973] EXT4-fs (loop2): dirty_blocks=8192 [ 81.209339][ T4973] EXT4-fs (loop2): Block reservation details [ 81.210887][ T4973] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 81.266184][ T4992] loop3: detected capacity change from 0 to 256 [ 81.297722][ T4114] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 81.377913][ T4114] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.377913][ T4114] [ 81.392486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.477693][ T4994] loop4: detected capacity change from 0 to 1024 [ 81.496487][ T4997] __nla_validate_parse: 2 callbacks suppressed [ 81.496500][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 81.633929][ T4998] input: syz1 as /devices/virtual/input/input3 [ 81.830548][ T5003] loop0: detected capacity change from 0 to 512 [ 81.887249][ T4994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.910367][ T5006] loop1: detected capacity change from 0 to 512 [ 81.946150][ T4994] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.960376][ T5003] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 81.987702][ T5003] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 81.994713][ T5006] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 82.012773][ T4994] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 28 [ 82.016090][ T4994] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.016090][ T4994] [ 82.031274][ T5006] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 82.051757][ T4994] EXT4-fs (loop4): Total free blocks count 0 [ 82.053944][ T4994] EXT4-fs (loop4): Free/Dirty block details [ 82.055492][ T4994] EXT4-fs (loop4): free_blocks=68451041280 [ 82.057026][ T4994] EXT4-fs (loop4): dirty_blocks=80 [ 82.058388][ T4994] EXT4-fs (loop4): Block reservation details [ 82.100887][ T4994] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 82.264253][ T5016] loop3: detected capacity change from 0 to 47 [ 82.293363][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 82.349920][ T5020] MINIX-fs: deleted inode referenced: 9 [ 82.398114][ T5026] 9pnet: Insufficient options for proto=fd [ 82.446030][ T5032] loop2: detected capacity change from 0 to 512 [ 83.448047][ T5042] loop1: detected capacity change from 0 to 512 [ 84.014003][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 84.046638][ T5042] EXT4-fs (loop1): 1 orphan inode deleted [ 84.048160][ T5042] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 84.076551][ T5032] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 84.084258][ T5032] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 84.084978][ T5055] loop4: detected capacity change from 0 to 512 [ 84.104112][ T5032] FAULT_INJECTION: forcing a failure. [ 84.104112][ T5032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.116540][ T5032] CPU: 0 PID: 5032 Comm: syz.2.287 Not tainted 5.15.165-syzkaller #0 [ 84.118611][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 84.121265][ T5032] Call trace: [ 84.122068][ T5055] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 84.122140][ T5032] dump_backtrace+0x0/0x530 [ 84.125256][ T5032] show_stack+0x2c/0x3c [ 84.126367][ T5032] dump_stack_lvl+0x108/0x170 [ 84.127630][ T5032] dump_stack+0x1c/0x58 [ 84.128697][ T5032] should_fail+0x3b8/0x514 [ 84.129915][ T5032] should_fail_usercopy+0x20/0x30 [ 84.131268][ T5032] strncpy_from_user+0x48/0x580 [ 84.132544][ T5032] getname_flags+0x104/0x480 [ 84.133752][ T5032] __arm64_sys_mkdirat+0x80/0xa8 [ 84.135130][ T5032] invoke_syscall+0x98/0x2b8 [ 84.136359][ T5032] el0_svc_common+0x138/0x258 [ 84.137154][ T5056] device syzkaller0 entered promiscuous mode [ 84.137636][ T5032] do_el0_svc+0x58/0x14c [ 84.140569][ T5032] el0_svc+0x7c/0x1f0 [ 84.141682][ T5032] el0t_64_sync_handler+0x84/0xe4 [ 84.143063][ T5032] el0t_64_sync+0x1a0/0x1a4 [ 84.160513][ T5055] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 84.291551][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 84.396049][ T5066] loop0: detected capacity change from 0 to 512 [ 84.412449][ T5066] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 84.495143][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 84.505465][ T5066] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 84.583242][ T5066] netlink: 'syz.0.303': attribute type 30 has an invalid length. [ 84.585310][ T5066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.303'. [ 84.587950][ T5066] bond0: option arp_missed_max: invalid value (0) [ 84.604548][ T5066] bond0: option arp_missed_max: allowed values 1 - 255 [ 84.636731][ T5072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.637644][ T5066] input: syz1 as /devices/virtual/input/input4 [ 84.638889][ T5072] IPv6: NLM_F_CREATE should be set when creating new route [ 84.642504][ T5072] IPv6: NLM_F_CREATE should be set when creating new route [ 85.058667][ T5081] loop1: detected capacity change from 0 to 512 [ 85.066200][ T5081] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 85.778809][ T5081] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 85.803387][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 85.886139][ T5086] netlink: zone id is out of range [ 85.887516][ T5086] netlink: zone id is out of range [ 85.919227][ T5088] loop3: detected capacity change from 0 to 512 [ 85.923279][ T5086] netlink: zone id is out of range [ 85.924581][ T5086] netlink: zone id is out of range [ 85.925915][ T5086] netlink: zone id is out of range [ 85.927243][ T5086] netlink: zone id is out of range [ 85.928542][ T5086] netlink: zone id is out of range [ 85.929920][ T5086] netlink: zone id is out of range [ 85.931386][ T5086] netlink: zone id is out of range [ 85.932702][ T5086] netlink: zone id is out of range [ 85.975861][ T5088] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 86.024049][ T5088] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 86.029182][ T5094] loop4: detected capacity change from 0 to 512 [ 86.040374][ T5090] loop1: detected capacity change from 0 to 1024 [ 86.045659][ T5088] FAULT_INJECTION: forcing a failure. [ 86.045659][ T5088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.072549][ T5088] CPU: 1 PID: 5088 Comm: syz.3.312 Not tainted 5.15.165-syzkaller #0 [ 86.073978][ T5096] device syzkaller0 entered promiscuous mode [ 86.074684][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 86.078985][ T5088] Call trace: [ 86.079814][ T5088] dump_backtrace+0x0/0x530 [ 86.081052][ T5088] show_stack+0x2c/0x3c [ 86.082117][ T5088] dump_stack_lvl+0x108/0x170 [ 86.083348][ T5088] dump_stack+0x1c/0x58 [ 86.084449][ T5088] should_fail+0x3b8/0x514 [ 86.085646][ T5088] should_fail_usercopy+0x20/0x30 [ 86.086954][ T5088] strncpy_from_user+0x48/0x580 [ 86.088280][ T5088] getname_flags+0x104/0x480 [ 86.089487][ T5088] __arm64_sys_mkdirat+0x80/0xa8 [ 86.090823][ T5088] invoke_syscall+0x98/0x2b8 [ 86.092029][ T5088] el0_svc_common+0x138/0x258 [ 86.093270][ T5088] do_el0_svc+0x58/0x14c [ 86.094444][ T5088] el0_svc+0x7c/0x1f0 [ 86.095479][ T5088] el0t_64_sync_handler+0x84/0xe4 [ 86.096764][ T5088] el0t_64_sync+0x1a0/0x1a4 [ 86.108243][ T5094] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 86.117686][ T5094] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 86.129248][ T5090] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 86.134866][ T5090] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 86.144564][ T5090] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.156773][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 86.165636][ T5090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 86.168003][ T5090] System zones: 0-1, 3-36 [ 86.184437][ T5090] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 86.255227][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.311'. [ 86.257526][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.311'. [ 87.131290][ T5114] __nla_validate_parse: 2 callbacks suppressed [ 87.131304][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 87.153218][ T5118] process 'syz.3.321' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 87.307468][ T5121] device bridge1 entered promiscuous mode [ 88.282006][ T5135] device syzkaller0 entered promiscuous mode [ 88.294582][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 88.305619][ T5140] loop3: detected capacity change from 0 to 512 [ 88.349296][ T5140] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 88.370840][ T5140] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 88.389053][ T5137] loop4: detected capacity change from 0 to 4096 [ 88.524484][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 88.579272][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 88.593618][ T5137] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 88.647637][ T5137] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 88.672868][ T5137] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 88.675301][ T5137] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 88.678670][ T5137] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 88.735719][ T5124] loop0: detected capacity change from 0 to 32768 [ 88.769418][ T5137] ntfs: volume version 3.1. [ 88.786809][ T5137] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 88.799828][ T5137] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 88.868196][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 88.885354][ T5157] loop3: detected capacity change from 0 to 128 [ 88.948618][ T5124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (5124) [ 89.520338][ T5124] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 89.525659][ T5124] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.548934][ T5124] BTRFS info (device loop0): force zstd compression, level 3 [ 89.554798][ T5124] BTRFS info (device loop0): force zlib compression, level 3 [ 89.556647][ T5124] BTRFS info (device loop0): enabling auto defrag [ 89.558329][ T5124] BTRFS info (device loop0): turning on flush-on-commit [ 89.574344][ T5161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.339'. [ 89.583932][ T5124] BTRFS info (device loop0): disabling auto defrag [ 89.660911][ T5124] BTRFS info (device loop0): using free space tree [ 89.662575][ T5124] BTRFS info (device loop0): has skinny extents [ 89.902657][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 89.957837][ T5186] loop2: detected capacity change from 0 to 512 [ 89.963397][ T5181] device syzkaller0 entered promiscuous mode [ 90.011286][ T5186] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 90.088587][ T5186] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 90.091314][ T148] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xf837d73e level 0 [ 90.095553][ T5124] BTRFS warning (device loop0): couldn't read tree root [ 90.173536][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 90.178246][ T5124] BTRFS error (device loop0): open_ctree failed [ 90.331074][ T5202] loop3: detected capacity change from 0 to 1024 [ 90.375857][ T5200] loop2: detected capacity change from 0 to 4096 [ 90.390906][ T5200] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 90.417321][ T5162] loop1: detected capacity change from 0 to 32768 [ 90.605971][ T5219] Cannot find del_set index 0 as target [ 91.444221][ T5223] loop2: detected capacity change from 0 to 2048 [ 91.461820][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 91.490430][ T5223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.508252][ T5229] device syzkaller0 entered promiscuous mode [ 91.562062][ T5236] loop0: detected capacity change from 0 to 512 [ 91.617738][ T5236] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 91.645554][ T4029] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 91.648171][ T5236] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 91.664558][ T4029] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 91.687388][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 91.786622][ T5244] udc-core: couldn't find an available UDC or it's busy [ 91.788395][ T5244] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.951754][ T5241] loop4: detected capacity change from 0 to 1024 [ 92.947466][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,errors=continue,block_validity,i_version,bsddf,i_version,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,abort,grpjquota=,user_xattr,grpid,,errors=continue. Quota mode: none. [ 92.966612][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 92.998949][ T5241] EXT4-fs (loop4): shut down requested (2) [ 93.017123][ T5241] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 93.183053][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 93.270617][ T5266] loop0: detected capacity change from 0 to 256 [ 93.508573][ T5257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.611837][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 93.658272][ T346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.843625][ T5268] loop3: detected capacity change from 0 to 32768 [ 93.850553][ T5289] loop0: detected capacity change from 0 to 1024 [ 93.872925][ T346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.902732][ T5289] hfsplus: unable to parse mount options [ 93.925005][ T5277] device syzkaller0 entered promiscuous mode [ 93.992815][ T346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.357818][ T346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.433057][ T5304] loop4: detected capacity change from 0 to 64 [ 95.515027][ T5317] loop1: detected capacity change from 0 to 512 [ 95.585603][ T5322] FAULT_INJECTION: forcing a failure. [ 95.585603][ T5322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.589285][ T5322] CPU: 1 PID: 5322 Comm: syz.3.382 Not tainted 5.15.165-syzkaller #0 [ 95.591513][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 95.591958][ T5317] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 95.594229][ T5322] Call trace: [ 95.597014][ T5322] dump_backtrace+0x0/0x530 [ 95.598253][ T5322] show_stack+0x2c/0x3c [ 95.599280][ T5322] dump_stack_lvl+0x108/0x170 [ 95.600491][ T5322] dump_stack+0x1c/0x58 [ 95.601565][ T5322] should_fail+0x3b8/0x514 [ 95.602788][ T5322] should_fail_usercopy+0x20/0x30 [ 95.604094][ T5322] simple_read_from_buffer+0xd8/0x26c [ 95.605511][ T5322] proc_fail_nth_read+0x1a0/0x248 [ 95.606950][ T5322] vfs_read+0x278/0xb18 [ 95.608085][ T5322] ksys_read+0x15c/0x26c [ 95.609268][ T5322] __arm64_sys_read+0x7c/0x90 [ 95.610539][ T5322] invoke_syscall+0x98/0x2b8 [ 95.611853][ T5322] el0_svc_common+0x138/0x258 [ 95.613134][ T5322] do_el0_svc+0x58/0x14c [ 95.614228][ T5322] el0_svc+0x7c/0x1f0 [ 95.615237][ T5322] el0t_64_sync_handler+0x84/0xe4 [ 95.616548][ T5322] el0t_64_sync+0x1a0/0x1a4 [ 95.647794][ T5317] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 95.656047][ T5320] loop4: detected capacity change from 0 to 512 [ 95.656139][ T5326] loop3: detected capacity change from 0 to 512 [ 95.661833][ T5283] chnl_net:caif_netlink_parms(): no params data found [ 95.686115][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 95.701192][ T5326] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 95.704051][ T5320] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 95.787590][ T5320] EXT2-fs (loop4): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 95.849292][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.868662][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.871326][ T4098] Bluetooth: hci3: command 0x0409 tx timeout [ 95.913738][ T5283] device bridge_slave_0 entered promiscuous mode [ 95.917198][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.919017][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.923482][ T5283] device bridge_slave_1 entered promiscuous mode [ 96.215937][ T5336] hub 6-0:1.0: USB hub found [ 96.250748][ T5336] hub 6-0:1.0: 8 ports detected [ 96.741076][ T5342] loop1: detected capacity change from 0 to 512 [ 97.012777][ T5342] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 97.041161][ T5342] FAULT_INJECTION: forcing a failure. [ 97.041161][ T5342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.044652][ T5342] CPU: 0 PID: 5342 Comm: syz.1.392 Not tainted 5.15.165-syzkaller #0 [ 97.046729][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.049267][ T5342] Call trace: [ 97.050106][ T5342] dump_backtrace+0x0/0x530 [ 97.051353][ T5342] show_stack+0x2c/0x3c [ 97.052478][ T5342] dump_stack_lvl+0x108/0x170 [ 97.053710][ T5342] dump_stack+0x1c/0x58 [ 97.054753][ T5342] should_fail+0x3b8/0x514 [ 97.055702][ T5352] loop3: detected capacity change from 0 to 512 [ 97.055968][ T5342] should_fail_usercopy+0x20/0x30 [ 97.056001][ T5342] filldir64+0x750/0x9e4 [ 97.059965][ T5342] ext2_readdir+0x41c/0x798 [ 97.061179][ T5342] iterate_dir+0x1f4/0x4ec [ 97.062392][ T5342] __arm64_sys_getdents64+0x1c4/0x4c4 [ 97.063858][ T5342] invoke_syscall+0x98/0x2b8 [ 97.065097][ T5342] el0_svc_common+0x138/0x258 [ 97.066366][ T5342] do_el0_svc+0x58/0x14c [ 97.067495][ T5342] el0_svc+0x7c/0x1f0 [ 97.068530][ T5342] el0t_64_sync_handler+0x84/0xe4 [ 97.069932][ T5342] el0t_64_sync+0x1a0/0x1a4 [ 97.088656][ T5344] device syzkaller0 entered promiscuous mode [ 97.118644][ T5283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.141827][ T5352] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 97.154410][ T5352] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 97.179604][ T5352] FAULT_INJECTION: forcing a failure. [ 97.179604][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 97.231439][ T5352] CPU: 0 PID: 5352 Comm: syz.3.391 Not tainted 5.15.165-syzkaller #0 [ 97.233598][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.236386][ T5352] Call trace: [ 97.237239][ T5352] dump_backtrace+0x0/0x530 [ 97.238458][ T5352] show_stack+0x2c/0x3c [ 97.239505][ T5352] dump_stack_lvl+0x108/0x170 [ 97.240720][ T5352] dump_stack+0x1c/0x58 [ 97.241840][ T5352] should_fail+0x3b8/0x514 [ 97.243070][ T5352] __should_failslab+0xbc/0x110 [ 97.244343][ T5352] should_failslab+0x10/0x28 [ 97.245571][ T5352] slab_pre_alloc_hook+0x64/0xe8 [ 97.246888][ T5352] __kmalloc+0xc0/0x4c8 [ 97.248051][ T5352] tomoyo_realpath_from_path+0xd0/0x508 [ 97.249520][ T5352] tomoyo_path_perm+0x208/0x568 [ 97.250893][ T5352] tomoyo_path_rmdir+0xd4/0x118 [ 97.252222][ T5352] security_path_rmdir+0xe4/0x134 [ 97.253576][ T5352] do_rmdir+0x24c/0x84c [ 97.254713][ T5352] __arm64_sys_unlinkat+0xe0/0xfc [ 97.256011][ T5352] invoke_syscall+0x98/0x2b8 [ 97.257233][ T5352] el0_svc_common+0x138/0x258 [ 97.258536][ T5352] do_el0_svc+0x58/0x14c [ 97.259661][ T5352] el0_svc+0x7c/0x1f0 [ 97.260695][ T5352] el0t_64_sync_handler+0x84/0xe4 [ 97.262193][ T5352] el0t_64_sync+0x1a0/0x1a4 [ 97.291144][ T5283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.329852][ T5283] team0: Port device team_slave_0 added [ 97.367464][ T5355] loop0: detected capacity change from 0 to 8192 [ 97.371521][ T5352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.373688][ T5359] FAULT_INJECTION: forcing a failure. [ 97.373688][ T5359] name failslab, interval 1, probability 0, space 0, times 0 [ 97.376843][ T5359] CPU: 1 PID: 5359 Comm: syz.1.395 Not tainted 5.15.165-syzkaller #0 [ 97.378900][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.381599][ T5359] Call trace: [ 97.382446][ T5359] dump_backtrace+0x0/0x530 [ 97.383655][ T5359] show_stack+0x2c/0x3c [ 97.384740][ T5359] dump_stack_lvl+0x108/0x170 [ 97.385964][ T5359] dump_stack+0x1c/0x58 [ 97.387010][ T5359] should_fail+0x3b8/0x514 [ 97.388293][ T5359] __should_failslab+0xbc/0x110 [ 97.389588][ T5359] should_failslab+0x10/0x28 [ 97.390828][ T5359] slab_pre_alloc_hook+0x64/0xe8 [ 97.392214][ T5359] kmem_cache_alloc_trace+0x9c/0x47c [ 97.393642][ T5359] ovl_set_origin+0x108/0x414 [ 97.394837][ T5359] ovl_copy_up_inode+0x6c8/0xaa0 [ 97.396142][ T5359] ovl_copy_up_flags+0x1684/0x213c [ 97.397473][ T5359] ovl_copy_up+0x24/0x34 [ 97.398521][ T5359] ovl_setattr+0xb4/0x448 [ 97.399631][ T5359] notify_change+0xa34/0xcf8 [ 97.400835][ T5359] chmod_common+0x23c/0x418 [ 97.402028][ T5359] __arm64_sys_fchmodat+0x118/0x1dc [ 97.403393][ T5359] invoke_syscall+0x98/0x2b8 [ 97.404595][ T5359] el0_svc_common+0x138/0x258 [ 97.405924][ T5359] do_el0_svc+0x58/0x14c [ 97.407076][ T5359] el0_svc+0x7c/0x1f0 [ 97.408136][ T5359] el0t_64_sync_handler+0x84/0xe4 [ 97.409495][ T5359] el0t_64_sync+0x1a0/0x1a4 [ 97.415162][ T5283] team0: Port device team_slave_1 added [ 97.454927][ T5355] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 97.457310][ T5355] REISERFS (device loop0): using ordered data mode [ 97.459055][ T5355] reiserfs: using flush barriers [ 97.473876][ T5355] REISERFS warning (device loop0): journal-1393 journal_init: journal does not fit for area addressed by first of bitmap blocks. It starts at 18 and its size is 262144. Block size 4096 [ 97.480599][ T5364] loop4: detected capacity change from 0 to 512 [ 97.499006][ T5355] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 97.525091][ T5283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.526958][ T5283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.534674][ T5364] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 97.569330][ T5283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.578730][ T5372] loop1: detected capacity change from 0 to 512 [ 97.589635][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.396'. [ 97.631478][ T5283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.633393][ T5283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.640019][ T5283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.649684][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 97.651958][ T5372] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 97.667380][ T5372] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 97.815230][ T5385] FAULT_INJECTION: forcing a failure. [ 97.815230][ T5385] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 97.818706][ T5385] CPU: 1 PID: 5385 Comm: syz.3.402 Not tainted 5.15.165-syzkaller #0 [ 97.820893][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.823550][ T5385] Call trace: [ 97.824415][ T5385] dump_backtrace+0x0/0x530 [ 97.825636][ T5385] show_stack+0x2c/0x3c [ 97.826748][ T5385] dump_stack_lvl+0x108/0x170 [ 97.828076][ T5385] dump_stack+0x1c/0x58 [ 97.829189][ T5385] should_fail+0x3b8/0x514 [ 97.830376][ T5385] should_fail_alloc_page+0x74/0xa8 [ 97.831737][ T5385] prepare_alloc_pages+0x160/0x460 [ 97.833093][ T5385] __alloc_pages+0x138/0x674 [ 97.834294][ T5385] alloc_pages_vma+0x294/0x7c0 [ 97.835554][ T5385] shmem_alloc_and_acct_page+0x5bc/0xca0 [ 97.837081][ T5385] shmem_getpage_gfp+0x1144/0x20e4 [ 97.838399][ T5385] shmem_write_begin+0xe0/0x29c [ 97.839724][ T5385] generic_perform_write+0x24c/0x520 [ 97.841163][ T5385] __generic_file_write_iter+0x230/0x454 [ 97.842690][ T5385] generic_file_write_iter+0xb4/0x1b8 [ 97.844228][ T5385] vfs_write+0x884/0xb44 [ 97.845322][ T5385] ksys_write+0x15c/0x26c [ 97.846498][ T5385] __arm64_sys_write+0x7c/0x90 [ 97.847740][ T5385] invoke_syscall+0x98/0x2b8 [ 97.848978][ T5385] el0_svc_common+0x138/0x258 [ 97.850205][ T5385] do_el0_svc+0x58/0x14c [ 97.851298][ T5385] el0_svc+0x7c/0x1f0 [ 97.852303][ T5385] el0t_64_sync_handler+0x84/0xe4 [ 97.853630][ T5385] el0t_64_sync+0x1a0/0x1a4 [ 97.951005][ T5197] Bluetooth: hci3: command 0x041b tx timeout [ 97.953174][ T5283] device hsr_slave_0 entered promiscuous mode [ 98.021366][ T5283] device hsr_slave_1 entered promiscuous mode [ 98.121263][ T5283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.125475][ T5283] Cannot create hsr debugfs directory [ 99.004334][ T5406] loop3: detected capacity change from 0 to 8 [ 99.077757][ T5404] device syzkaller0 entered promiscuous mode [ 99.083007][ T5409] loop4: detected capacity change from 0 to 512 [ 99.142177][ T5409] udc-core: couldn't find an available UDC or it's busy [ 99.144111][ T5409] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.504380][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 100.111346][ T4069] Bluetooth: hci3: command 0x040f tx timeout [ 100.365658][ T5431] loop0: detected capacity change from 0 to 512 [ 100.409581][ T5435] loop1: detected capacity change from 0 to 512 [ 100.448843][ T5435] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 100.455570][ T5431] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 100.518493][ T5431] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 100.663224][ T5440] loop1: detected capacity change from 0 to 128 [ 100.669353][ T5440] UDF-fs: bad mount option "w_ÐJüÇH‡ÿ^øºTT“äå:µÀq0c‹‡Z·<úÓUè’·œ" or missing value [ 100.672061][ T5442] cgroup: fork rejected by pids controller in /syz4 [ 100.725475][ T5283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.892600][ T5507] loop3: detected capacity change from 0 to 512 [ 100.904472][ T5283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.539338][ T5283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.561245][ T5507] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 101.568434][ T5507] FAULT_INJECTION: forcing a failure. [ 101.568434][ T5507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.591246][ T5507] CPU: 0 PID: 5507 Comm: syz.3.418 Not tainted 5.15.165-syzkaller #0 [ 101.593516][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.596126][ T5507] Call trace: [ 101.596984][ T5507] dump_backtrace+0x0/0x530 [ 101.598143][ T5507] show_stack+0x2c/0x3c [ 101.599214][ T5507] dump_stack_lvl+0x108/0x170 [ 101.600401][ T5507] dump_stack+0x1c/0x58 [ 101.601480][ T5507] should_fail+0x3b8/0x514 [ 101.602658][ T5507] should_fail_usercopy+0x20/0x30 [ 101.603967][ T5507] filldir64+0x750/0x9e4 [ 101.605111][ T5507] ext2_readdir+0x41c/0x798 [ 101.606276][ T5507] iterate_dir+0x1f4/0x4ec [ 101.607446][ T5507] __arm64_sys_getdents64+0x1c4/0x4c4 [ 101.608932][ T5507] invoke_syscall+0x98/0x2b8 [ 101.610119][ T5507] el0_svc_common+0x138/0x258 [ 101.611362][ T5507] do_el0_svc+0x58/0x14c [ 101.612513][ T5507] el0_svc+0x7c/0x1f0 [ 101.613536][ T5507] el0t_64_sync_handler+0x84/0xe4 [ 101.614932][ T5507] el0t_64_sync+0x1a0/0x1a4 [ 101.628119][ T5283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.843010][ T5515] device syzkaller0 entered promiscuous mode [ 101.898296][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 101.956884][ T5569] loop3: detected capacity change from 0 to 512 [ 101.987960][ T5569] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.084192][ T5575] loop0: detected capacity change from 0 to 512 [ 102.108998][ T5575] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 102.148666][ T5575] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 102.153786][ T5569] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 102.190744][ T4065] Bluetooth: hci3: command 0x0419 tx timeout [ 102.193563][ T346] device hsr_slave_0 left promiscuous mode [ 102.231798][ T346] device hsr_slave_1 left promiscuous mode [ 102.322373][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.324682][ T346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.327737][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.330157][ T346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.355015][ T5588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.426'. [ 102.361228][ T346] device bridge_slave_1 left promiscuous mode [ 102.364038][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.425056][ T346] device bridge_slave_0 left promiscuous mode [ 102.426973][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.665612][ T5576] loop1: detected capacity change from 0 to 128 [ 102.681374][ T346] device veth1_macvtap left promiscuous mode [ 102.683583][ T346] device veth0_macvtap left promiscuous mode [ 102.685650][ T346] device veth1_vlan left promiscuous mode [ 102.687581][ T346] device veth0_vlan left promiscuous mode [ 103.315167][ T5576] FAT-fs (loop1): Unrecognized mount option "obj_type=]-%:!.-^" or missing value [ 104.055228][ T346] team0 (unregistering): Port device team_slave_1 removed [ 104.078115][ T346] team0 (unregistering): Port device team_slave_0 removed [ 104.095524][ T346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.138401][ T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.331498][ T346] bond0 (unregistering): Released all slaves [ 104.480560][ T5625] device syzkaller0 entered promiscuous mode [ 104.509269][ T5632] loop3: detected capacity change from 0 to 512 [ 104.553982][ T5633] loop0: detected capacity change from 0 to 1024 [ 104.568566][ T5632] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 104.579443][ T5632] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 104.597490][ T5633] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 104.599941][ T5633] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 104.602494][ T5633] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.629373][ T5633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 104.658845][ T5633] System zones: 0-1, 3-36 [ 104.667965][ T5283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.678860][ T5283] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.703937][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.706850][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.752024][ T5633] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 104.758588][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.791982][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.802643][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.804576][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.820833][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.825722][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.833367][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.835174][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.859335][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.867426][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.871637][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.883076][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.889490][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.896054][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.901755][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.908352][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.970472][ T5633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 104.987223][ T5633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 104.989538][ T5633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 105.010946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.243677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.801345][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.804043][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.872639][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.914452][ T5661] FAULT_INJECTION: forcing a failure. [ 105.914452][ T5661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.918013][ T5661] CPU: 0 PID: 5661 Comm: syz.3.440 Not tainted 5.15.165-syzkaller #0 [ 105.920206][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 105.922809][ T5661] Call trace: [ 105.923660][ T5661] dump_backtrace+0x0/0x530 [ 105.924942][ T5661] show_stack+0x2c/0x3c [ 105.926145][ T5661] dump_stack_lvl+0x108/0x170 [ 105.927391][ T5661] dump_stack+0x1c/0x58 [ 105.928493][ T5661] should_fail+0x3b8/0x514 [ 105.929698][ T5661] should_fail_usercopy+0x20/0x30 [ 105.931098][ T5661] simple_read_from_buffer+0xd8/0x26c [ 105.932553][ T5661] proc_fail_nth_read+0x1a0/0x248 [ 105.933905][ T5661] vfs_read+0x278/0xb18 [ 105.935006][ T5661] ksys_read+0x15c/0x26c [ 105.936118][ T5661] __arm64_sys_read+0x7c/0x90 [ 105.937327][ T5661] invoke_syscall+0x98/0x2b8 [ 105.938531][ T5661] el0_svc_common+0x138/0x258 [ 105.939813][ T5661] do_el0_svc+0x58/0x14c [ 105.940891][ T5661] el0_svc+0x7c/0x1f0 [ 105.941952][ T5661] el0t_64_sync_handler+0x84/0xe4 [ 105.943283][ T5661] el0t_64_sync+0x1a0/0x1a4 [ 106.158578][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.160639][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.776969][ T5283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.801302][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.804030][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.828576][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.849259][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.861721][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.871796][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.882115][ T5283] device veth0_vlan entered promiscuous mode [ 106.926101][ T5677] loop0: detected capacity change from 0 to 512 [ 106.948498][ T5283] device veth1_vlan entered promiscuous mode [ 106.985058][ T5677] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 106.991394][ T4069] Bluetooth: hci4: command 0x0409 tx timeout [ 107.035236][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.037979][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.042624][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.064027][ T5677] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 107.074822][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.138365][ T5687] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 107.140543][ T5687] netlink: 'syz.1.444': attribute type 2 has an invalid length. [ 107.145374][ T5689] syz.3.445 uses obsolete (PF_INET,SOCK_PACKET) [ 107.175426][ T5283] device veth0_macvtap entered promiscuous mode [ 107.201466][ T5283] device veth1_macvtap entered promiscuous mode [ 107.240454][ T5693] loop0: detected capacity change from 0 to 512 [ 107.272767][ T5693] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 107.310274][ T5693] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 107.310553][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.316688][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.319298][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.331042][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.333661][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.336481][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.342181][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.345058][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.349661][ T5283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.373740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.376467][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.380146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.389080][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.408375][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.420927][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.423523][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.426256][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.435509][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.446954][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.450453][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.455229][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.458989][ T5283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.487165][ T5696] device syzkaller0 entered promiscuous mode [ 107.518531][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.521438][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.353549][ T5283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.355849][ T5283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.360966][ T5283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.363248][ T5283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.543591][ T5712] device macvlan2 entered promiscuous mode [ 109.327029][ T5196] Bluetooth: hci4: command 0x041b tx timeout [ 109.344464][ T5718] loop0: detected capacity change from 0 to 256 [ 109.359386][ T5638] chnl_net:caif_netlink_parms(): no params data found [ 109.450456][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.454517][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.527703][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.576568][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.579202][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.653505][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.711207][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.713210][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.715939][ T5638] device bridge_slave_0 entered promiscuous mode [ 109.719421][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.747323][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.752897][ T5638] device bridge_slave_1 entered promiscuous mode [ 109.845680][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.850298][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.943869][ T5638] team0: Port device team_slave_0 added [ 109.947986][ T5638] team0: Port device team_slave_1 added [ 109.979471][ T5742] loop3: detected capacity change from 0 to 512 [ 110.069547][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.078470][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.098765][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.123662][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.125574][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.164727][ T5742] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 110.210037][ T5742] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 110.479485][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.838380][ T5747] input: syz1 as /devices/virtual/input/input5 [ 110.995562][ T5638] device hsr_slave_0 entered promiscuous mode [ 111.031630][ T5638] device hsr_slave_1 entered promiscuous mode [ 111.091323][ T5638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.093294][ T5638] Cannot create hsr debugfs directory [ 111.414742][ T4065] Bluetooth: hci4: command 0x040f tx timeout [ 112.005892][ T5767] cgroup: fork rejected by pids controller in /syz3 [ 112.059362][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 112.078916][ T5770] device bond0 entered promiscuous mode [ 112.080369][ T5770] device bond_slave_0 entered promiscuous mode [ 112.089155][ T5770] device bond_slave_1 entered promiscuous mode [ 112.137455][ T5638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.185777][ T5776] device syzkaller0 entered promiscuous mode [ 112.393893][ T5638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.494569][ T5782] loop1: detected capacity change from 0 to 512 [ 112.502095][ T5638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.536960][ T5782] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 112.550830][ T5782] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 112.563405][ T5638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.688651][ T5780] loop2: detected capacity change from 0 to 32768 [ 112.717563][ T5780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.468 (5780) [ 112.768593][ T5780] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 112.770929][ T5780] BTRFS info (device loop2): using free space tree [ 112.772627][ T5780] BTRFS info (device loop2): has skinny extents [ 112.798479][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.872817][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.028162][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.064692][ T5780] BTRFS info (device loop2): enabling ssd optimizations [ 113.131863][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.434925][ T5787] loop1: detected capacity change from 0 to 32768 [ 113.471311][ T4065] Bluetooth: hci4: command 0x0419 tx timeout [ 113.493514][ T5787] jfs: Unrecognized mount option "jfs" or missing value [ 113.537908][ C1] net_ratelimit: 140 callbacks suppressed [ 113.537922][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 114.362838][ T5787] loop1: detected capacity change from 0 to 2048 [ 114.422610][ T5787] UDF-fs: bad mount option "uid=܈ü.4ŽÛ. EÂ:"MâúUÕNfïäŒuJX¯¬&Nÿ*1ˆüŸ±3ð%¡6_fÂ纰" or missing value [ 114.446203][ T346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.542952][ T5820] loop0: detected capacity change from 0 to 512 [ 114.581744][ T5820] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 114.586218][ T5820] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 114.628862][ T5820] FAULT_INJECTION: forcing a failure. [ 114.628862][ T5820] name failslab, interval 1, probability 0, space 0, times 0 [ 114.633084][ T5820] CPU: 1 PID: 5820 Comm: syz.0.475 Not tainted 5.15.165-syzkaller #0 [ 114.635208][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 114.637827][ T5820] Call trace: [ 114.638706][ T5820] dump_backtrace+0x0/0x530 [ 114.639959][ T5820] show_stack+0x2c/0x3c [ 114.641067][ T5820] dump_stack_lvl+0x108/0x170 [ 114.642358][ T5820] dump_stack+0x1c/0x58 [ 114.643510][ T5820] should_fail+0x3b8/0x514 [ 114.644725][ T5820] __should_failslab+0xbc/0x110 [ 114.645993][ T5820] should_failslab+0x10/0x28 [ 114.647223][ T5820] slab_pre_alloc_hook+0x64/0xe8 [ 114.648531][ T5820] kmem_cache_alloc+0x98/0x45c [ 114.649907][ T5820] __d_alloc+0x3c/0x6a8 [ 114.651072][ T5820] d_alloc+0x54/0x18c [ 114.652131][ T5820] lookup_one_qstr_excl+0xbc/0x230 [ 114.653523][ T5820] filename_create+0x230/0x468 [ 114.654765][ T5820] do_mkdirat+0xac/0x610 [ 114.655959][ T5820] __arm64_sys_mkdirat+0x90/0xa8 [ 114.657336][ T5820] invoke_syscall+0x98/0x2b8 [ 114.658628][ T5820] el0_svc_common+0x138/0x258 [ 114.659907][ T5820] do_el0_svc+0x58/0x14c [ 114.661024][ T5820] el0_svc+0x7c/0x1f0 [ 114.662130][ T5820] el0t_64_sync_handler+0x84/0xe4 [ 114.663416][ T5820] el0t_64_sync+0x1a0/0x1a4 [ 114.742577][ T346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.856426][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 114.892425][ T346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.898940][ T5827] loop0: detected capacity change from 0 to 1024 [ 114.920166][ T5827] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 114.922916][ T5827] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 114.925695][ T5827] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.966610][ T5832] loop1: detected capacity change from 0 to 512 [ 114.983705][ T5827] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 114.985933][ T5827] System zones: 0-1, 3-36 [ 115.025723][ T346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.044058][ T5827] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 115.059884][ T5832] EXT4-fs warning (device loop1): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 115.068548][ T5832] EXT4-fs warning (device loop1): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 115.096358][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.163533][ T4691] Bluetooth: hci2: command 0x0409 tx timeout [ 115.179971][ T5827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.182875][ T5827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.185260][ T5827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.208874][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.221160][ T5832] loop1: detected capacity change from 0 to 1024 [ 115.836162][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.838946][ T5802] device bridge_slave_0 entered promiscuous mode [ 115.843585][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.846198][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.848981][ T5802] device bridge_slave_1 entered promiscuous mode [ 115.937013][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.958006][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.008423][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.012465][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.019381][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.066641][ T5802] team0: Port device team_slave_0 added [ 116.068687][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.072308][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.081213][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.083153][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.092594][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.099222][ T5802] team0: Port device team_slave_1 added [ 116.135911][ T5832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.137702][ T5832] EXT4-fs (loop1): Ignoring removed orlov option [ 116.162137][ T5832] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 116.275832][ T5852] mmap: syz.1.478 (5852) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 116.316681][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.318575][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.325970][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.343068][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.345964][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.350423][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.352356][ T4079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.153962][ T5845] device syzkaller0 entered promiscuous mode [ 117.160469][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.163376][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.170079][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.241243][ T5197] Bluetooth: hci2: command 0x041b tx timeout [ 117.295989][ T5869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.483'. [ 117.303616][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.304379][ T5871] loop1: detected capacity change from 0 to 8 [ 117.306574][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.309944][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.316505][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.320012][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.380745][ T5871] unable to read inode lookup table [ 117.413899][ T5802] device hsr_slave_0 entered promiscuous mode [ 117.461140][ T5802] device hsr_slave_1 entered promiscuous mode [ 117.466498][ T5871] loop1: detected capacity change from 0 to 256 [ 117.488666][ T5871] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 117.491963][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.494054][ T5802] Cannot create hsr debugfs directory [ 117.511952][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.514786][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.515131][ T5871] exFAT-fs (loop1): failed to load alloc-bitmap [ 117.517511][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.536350][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.563886][ T5871] exFAT-fs (loop1): failed to recognize exfat type [ 117.573712][ T5638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.577144][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.584830][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.602138][ T4079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.820340][ T5891] loop0: detected capacity change from 0 to 512 [ 117.874791][ T5891] EXT2-fs (loop0): (no)user_xattr optionsnot supported [ 117.877582][ T5891] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 117.967922][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.970254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.011177][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.340581][ T5871] loop1: detected capacity change from 0 to 32768 [ 118.409692][ T5871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.482 (5871) [ 118.441861][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.446301][ T5871] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 118.448817][ T5871] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.457406][ T5871] BTRFS info (device loop1): use zstd compression, level 3 [ 118.465999][ T5871] BTRFS info (device loop1): using free space tree [ 118.475649][ T5871] BTRFS info (device loop1): has skinny extents [ 118.572857][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.354799][ T5871] BTRFS info (device loop1): enabling ssd optimizations [ 119.418398][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.422668][ T5196] Bluetooth: hci2: command 0x040f tx timeout [ 119.465546][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.600835][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.603560][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.700274][ T5953] Cannot find del_set index 0 as target [ 120.410645][ T5638] device veth0_vlan entered promiscuous mode [ 120.445665][ T5638] device veth1_vlan entered promiscuous mode [ 120.501335][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.508872][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.512312][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.516016][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.604599][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.626522][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.715138][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.718028][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.721671][ T5956] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 120.729061][ T5638] device veth0_macvtap entered promiscuous mode [ 120.762952][ T5638] device veth1_macvtap entered promiscuous mode [ 120.881543][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.884250][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.886800][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.889468][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.909491][ T5973] loop1: detected capacity change from 0 to 128 [ 120.930936][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.933767][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.936731][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.939954][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.949838][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.953093][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.977897][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.988398][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.997593][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.001286][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.010578][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.014967][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 121.030533][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.046516][ T5959] loop2: detected capacity change from 0 to 32768 [ 121.110426][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.122473][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.131034][ T5984] loop0: detected capacity change from 0 to 512 [ 121.132198][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.152375][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.165304][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.168162][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.181973][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.196389][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.199308][ T5973] loop1: detected capacity change from 0 to 4096 [ 121.238362][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.251482][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.258480][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.284668][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.305760][ T5984] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 121.356736][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.359837][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.367325][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.369954][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.373566][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.377169][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.379680][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.381573][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.384362][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.387181][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.389692][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.391671][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.394341][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.397343][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.400417][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.972652][ T5973] block nbd1: shutting down sockets [ 121.993743][ T5802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.996556][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.065668][ T5990] loop1: detected capacity change from 0 to 512 [ 122.091536][ T5990] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 122.101953][ T5990] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 122.123847][ T5990] FAULT_INJECTION: forcing a failure. [ 122.123847][ T5990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.137867][ T5990] CPU: 1 PID: 5990 Comm: syz.1.497 Not tainted 5.15.165-syzkaller #0 [ 122.139983][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 122.142788][ T5990] Call trace: [ 122.143662][ T5990] dump_backtrace+0x0/0x530 [ 122.144916][ T5990] show_stack+0x2c/0x3c [ 122.146039][ T5990] dump_stack_lvl+0x108/0x170 [ 122.147312][ T5990] dump_stack+0x1c/0x58 [ 122.148600][ T5990] should_fail+0x3b8/0x514 [ 122.149913][ T5990] should_fail_alloc_page+0x74/0xa8 [ 122.151438][ T5990] prepare_alloc_pages+0x160/0x460 [ 122.152776][ T5990] __alloc_pages+0x138/0x674 [ 122.154091][ T5990] alloc_pages+0x368/0x5d4 [ 122.155360][ T5990] new_slab+0xec/0x56c [ 122.156217][ T5196] Bluetooth: hci2: command 0x0419 tx timeout [ 122.156498][ T5990] ___slab_alloc+0x6bc/0xdbc [ 122.159327][ T5990] __kmalloc+0x31c/0x4c8 [ 122.160505][ T5990] tomoyo_realpath_from_path+0xd0/0x508 [ 122.161991][ T5990] tomoyo_path_perm+0x208/0x568 [ 122.163442][ T5990] tomoyo_path_rmdir+0xd4/0x118 [ 122.164842][ T5990] security_path_rmdir+0xe4/0x134 [ 122.166374][ T5990] do_rmdir+0x24c/0x84c [ 122.167604][ T5990] __arm64_sys_unlinkat+0xe0/0xfc [ 122.169067][ T5990] invoke_syscall+0x98/0x2b8 [ 122.170315][ T5990] el0_svc_common+0x138/0x258 [ 122.171644][ T5990] do_el0_svc+0x58/0x14c [ 122.172822][ T5990] el0_svc+0x7c/0x1f0 [ 122.173909][ T5990] el0t_64_sync_handler+0x84/0xe4 [ 122.175299][ T5990] el0t_64_sync+0x1a0/0x1a4 [ 122.191611][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.213199][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.216145][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.219171][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.239902][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.245127][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.248100][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.250991][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.253705][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.256306][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.263692][ T5638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.266083][ T5638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.268409][ T5638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.294682][ T5638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.457220][ T6000] loop2: detected capacity change from 0 to 1024 [ 122.464974][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.467010][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.484230][ T6000] hfsplus: unable to parse mount options [ 122.507838][ T6006] FAULT_INJECTION: forcing a failure. [ 122.507838][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.508674][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.511333][ T6006] CPU: 0 PID: 6006 Comm: syz.1.502 Not tainted 5.15.165-syzkaller #0 [ 122.511371][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 122.511379][ T6006] Call trace: [ 122.511383][ T6006] dump_backtrace+0x0/0x530 [ 122.511397][ T6006] show_stack+0x2c/0x3c [ 122.511405][ T6006] dump_stack_lvl+0x108/0x170 [ 122.511416][ T6006] dump_stack+0x1c/0x58 [ 122.511425][ T6006] should_fail+0x3b8/0x514 [ 122.511434][ T6006] should_fail_usercopy+0x20/0x30 [ 122.511444][ T6006] copy_page_from_iter_atomic+0x3c8/0xffc [ 122.511454][ T6006] generic_perform_write+0x2d0/0x520 [ 122.511466][ T6006] __generic_file_write_iter+0x230/0x454 [ 122.511476][ T6006] generic_file_write_iter+0xb4/0x1b8 [ 122.511486][ T6006] vfs_write+0x884/0xb44 [ 122.511496][ T6006] ksys_write+0x15c/0x26c [ 122.511504][ T6006] __arm64_sys_write+0x7c/0x90 [ 122.511513][ T6006] invoke_syscall+0x98/0x2b8 [ 122.511524][ T6006] el0_svc_common+0x138/0x258 [ 122.511534][ T6006] do_el0_svc+0x58/0x14c [ 122.511544][ T6006] el0_svc+0x7c/0x1f0 [ 122.511553][ T6006] el0t_64_sync_handler+0x84/0xe4 [ 122.511563][ T6006] el0t_64_sync+0x1a0/0x1a4 [ 122.512412][ T6006] loop1: detected capacity change from 0 to 164 [ 122.727031][ T6000] loop2: detected capacity change from 0 to 1024 [ 123.553691][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.556506][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.626857][ T136] hfsplus: b-tree write err: -5, ino 4 [ 123.693373][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.695681][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.492083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.500361][ T5802] device veth0_vlan entered promiscuous mode [ 124.564572][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.566788][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.649256][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.652471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.655167][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.660578][ T5802] device veth1_vlan entered promiscuous mode [ 124.759045][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.763104][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.845590][ T346] device hsr_slave_0 left promiscuous mode [ 124.871918][ T346] device hsr_slave_1 left promiscuous mode [ 124.916574][ T6041] loop0: detected capacity change from 0 to 1024 [ 124.971700][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.973860][ T346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.976531][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.978557][ T346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.990363][ T346] device bridge_slave_1 left promiscuous mode [ 124.993166][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.998008][ T6041] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 125.020295][ T6041] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,minixdf,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 125.042112][ T346] device bridge_slave_0 left promiscuous mode [ 125.043815][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.116463][ T346] device hsr_slave_0 left promiscuous mode [ 125.119560][ T6028] loop1: detected capacity change from 0 to 65536 [ 125.161675][ T346] device hsr_slave_1 left promiscuous mode [ 125.198055][ T6028] XFS (loop1): Mounting V5 Filesystem [ 125.231373][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.233447][ T346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.236547][ T346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.239019][ T346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.244128][ T346] device bridge_slave_1 left promiscuous mode [ 125.255043][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.279857][ T6028] XFS (loop1): Ending clean mount [ 125.292376][ T346] device bridge_slave_0 left promiscuous mode [ 125.294234][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.451046][ T346] device veth1_macvtap left promiscuous mode [ 125.452740][ T346] device veth0_macvtap left promiscuous mode [ 125.454409][ T346] device veth1_vlan left promiscuous mode [ 125.456126][ T346] device veth0_vlan left promiscuous mode [ 125.566037][ T346] device veth1_macvtap left promiscuous mode [ 125.567672][ T346] device veth0_macvtap left promiscuous mode [ 125.569465][ T346] device veth1_vlan left promiscuous mode [ 125.589828][ T346] device veth0_vlan left promiscuous mode [ 125.690991][ T6055] loop2: detected capacity change from 0 to 40427 [ 125.757850][ T6055] F2FS-fs (loop2): invalid crc value [ 125.801489][ T6055] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.859042][ T6055] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 126.159393][ T346] team0 (unregistering): Port device team_slave_1 removed [ 126.169333][ T346] team0 (unregistering): Port device team_slave_0 removed [ 126.179424][ T346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.250181][ T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.387995][ T346] bond0 (unregistering): Released all slaves [ 126.694865][ T346] team0 (unregistering): Port device team_slave_1 removed [ 126.707068][ T346] team0 (unregistering): Port device team_slave_0 removed [ 126.717498][ T346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.749271][ T346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.888502][ T346] bond0 (unregistering): Released all slaves [ 127.006448][ T5802] device veth0_macvtap entered promiscuous mode [ 127.047645][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.050472][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.071886][ T5283] attempt to access beyond end of device [ 127.071886][ T5283] loop2: rw=2049, want=45104, limit=40427 [ 127.079677][ T5802] device veth1_macvtap entered promiscuous mode [ 127.101196][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.118310][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.121706][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.131470][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.135899][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.138443][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.149702][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.155438][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.158193][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.168857][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.198567][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.207785][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.210423][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.220950][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.223543][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.247772][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.250348][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.255912][ T6064] loop0: detected capacity change from 0 to 512 [ 127.258609][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.265304][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.267458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.270456][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.301003][ T4021] XFS (loop1): Unmounting Filesystem [ 127.304321][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.306862][ T6064] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 127.326740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.337223][ T5802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.339638][ T5802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.350413][ T6064] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 127.354178][ T5802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.369735][ T5802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.468268][ T6066] loop2: detected capacity change from 0 to 512 [ 127.520014][ T6066] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 127.547718][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.550096][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.593033][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.600085][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.602745][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.607759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.023764][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.032713][ T6071] device bridge_slave_1 left promiscuous mode [ 128.035108][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=435 state=1 status=67 (errno 9: Bad file descriptor) [ 129.479128][ T6118] chnl_net:caif_netlink_parms(): no params data found [ 129.687861][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.689827][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.698472][ T6118] device bridge_slave_0 entered promiscuous mode [ 129.708418][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.710317][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.716959][ T6118] device bridge_slave_1 entered promiscuous mode [ 129.794319][ T6118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.798895][ T6118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.816789][ T6118] team0: Port device team_slave_0 added [ 129.821768][ T6118] team0: Port device team_slave_1 added [ 129.835871][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.837677][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.845083][ T6118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.849346][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.851206][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.857966][ T6118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.033589][ T6118] device hsr_slave_0 entered promiscuous mode [ 130.091330][ T6118] device hsr_slave_1 entered promiscuous mode [ 130.140970][ T6118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.142983][ T6118] Cannot create hsr debugfs directory [ 130.299186][ T6118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.349042][ T6118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.419229][ T6118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.480243][ T6118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.686389][ T6118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.734354][ T6118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.772860][ T6118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.814769][ T6118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.943817][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.952590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.960069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.983817][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.988708][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.998654][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.003742][ T588] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.005573][ T588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.008084][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.022838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.025610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.028266][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.030152][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.051215][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.054167][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.057212][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.063063][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.065767][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.068642][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.075123][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.082454][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.084172][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.091934][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.094713][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.097398][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.107047][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.111133][ T6118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.391168][ T4171] Bluetooth: hci2: command 0x0409 tx timeout [ 132.178546][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.181447][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.495570][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.504283][ T346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.522974][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.525538][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.540427][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.545051][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.547772][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.550375][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.559437][ T6118] device veth0_vlan entered promiscuous mode [ 132.573303][ T346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.590098][ T6118] device veth1_vlan entered promiscuous mode [ 132.616453][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.619157][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.622643][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.625330][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.633672][ T346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.641740][ T6118] device veth0_macvtap entered promiscuous mode [ 132.646452][ T6118] device veth1_macvtap entered promiscuous mode [ 132.658601][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.662693][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.665229][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.667842][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.670380][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.674656][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.677367][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.680219][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.684554][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.687316][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.692752][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.697137][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.699820][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.703153][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.705812][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.708455][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.711799][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.714396][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.717278][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.719909][ T6118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.723327][ T6118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.728536][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.742133][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.745845][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.748530][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.752699][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.755404][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.758113][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.767228][ T346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.773334][ T6118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.775632][ T6118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.777787][ T6118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.780045][ T6118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.840252][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.842765][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.852357][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.862728][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.871310][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.877317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.978505][ T346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.038455][ T346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.137374][ T346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.198994][ T346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.369701][ T346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.429779][ T346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.508126][ T346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.572371][ T346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.803101][ T346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.838732][ T346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.917431][ T346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.978164][ T346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0