last executing test programs: 23.157281469s ago: executing program 0 (id=202): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000b, 0x13, r0, 0xffffc000) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0xa808, &(0x7f0000000000), 0x1, 0x768, &(0x7f0000000540)="$eJzs3c1rHGUYAPBnNknTptVUELSeAoIGSjemxlbBQ8WDCBYKerYum22o2WRLdlOaENAighdBxYOgl579qDdv4sdV/wsP0lI1LVY9SGQ2s+m2u9t8NNnF5veDaZ93ZjbvPPvOvPPuzrATwK41kv6TizgUER8kEcPZ/CQiBupRf8SJ1fVuLi8V0ymJlZVXf0/q69xYXipG02tS+7PCoxHxw7sRh3Ot9VYXFqcL5XJpLiuP1WbOjVUXFo+cnSlMlaZKs8fGJyaOHn/m+LHty/XPnxcPXP3wpSe/OvHPO49cfv/HJE7EgWxZcx7bZSRGsvdkIH0Lb/PidlfWY0mvN4AtSQ/NvtWjPA7FcPTVIwDgfvZWRKwAALtM4vwPALtM43uAG8tLxcbU228kuuvaCxGxdzX/xvXN1SX92TW7vfXroEM3ktuujCQRcXAb6h+JiM++ef2LdIodug4J0M7b32ZBS/+ftNyzsFlPbWCdkTvK+j/onu/S8c+z7cZ/ubXxT7QZ/wy2OXa3Yv3jP3dlG6rpKB3/Pd90b9vNpvwzB/uy0gP1Md9AcuZsuZT2bQ9GxGgMDKbl8bvUMXr93+udljWP//746M3P0/rT/2+tkbvSP3j7ayYLtcK95Nzs2sWIx/rb5Z+stX/SYfx7aoN1vPzce592Wpbmn+bbmFrz31krlyKeaNv+t+5oS+56f+JYfXcYa+wUbXz9yydDnepvbv90SutvfBbohrT9h+6e/8Gk+X7N6ubr+OnS8Pedlq2ff/v9f0/yWj3ek827UKjV5sYj9iSvtM4/euu1jXJj/TT/0cfr+e/LVmnp/9rt/+lnwjfWSzzbiP6rv3259fx3Vpr/5Kbaf/PB5ZvTfZ3q31j7T9Sj0WzORvq/jW7gvbx3AAAAAAAAAAAAAAAAAAAAAAAAALBRuYg4EEkuvxbncvn86jO8H46hXLlSrR0+U5mfnYz6s7IvRkTjpy6Hm34PdTz7PfxG+egd5acj4qGI+HhwX72cL1bKk71OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy+zs8/z/162Cvtw4A2DF7e70BAEDXtZ7/+3qyHQBA92zu8//fvi8AgPuA8zkA7D7O/wCw+zj/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMNOnTyZTit/LS8V0/Lk+YX56cr5I5Ol6nR+Zr6YL1bmzuWnKpWpcilfrMys9/fKlcq5iZidvzBWK1VrY9WFxdMzlfnZ2umzM4Wp0unSQFeyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDNqS4sThfK5dKcQCAQrAW97pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h/+CwAA//9z0yTZ") r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0x10000) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000, 0x3e0000}, {0x0, 0x0, 0x3e0000}], 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0046b310405936ecf0e9be8ee8eb06530bb70ea5a28fc7f519b8b8b42b0996f548355833fc58331440cf2059e2442e92b8ab483d857d4deda37f0130e456078c389deee645303507abb4ba0e68c3ffea05332f2ea4ef10427f18eec890b83a9231758491822b043e8480380e39aaf75e761000a78660bf11a0b0799de624552f46d8d0c694ca2445d849033826fcb4498718629da4a7d4b2bd2546d7b0b14d15a41a7766af70e3f76919c8ff77ff5cf7de957431db4d64"], 0xfd, 0xa39, &(0x7f0000000a80)="$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") syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="005bdefa8134", @ANYRESDEC], 0x4, 0x5bd, &(0x7f0000000680)="$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") r3 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r3, &(0x7f0000000300)='_', 0x1, 0x6a4b32cf) vmsplice(r1, &(0x7f0000002d00)=[{&(0x7f00000004c0)="5cc305a971114ec360082e270d0c7b9916", 0x11}, {&(0x7f00000018c0)="43cf02", 0x3}, {&(0x7f0000001900)="510978344eed25818805589c9b06a73c504ff9f07bae734359", 0x19}, {&(0x7f0000001940)="3ac37ec658d6a5337b4ea718ef42cb3f779e76fa598e6da51e1750c2a29aad767cb66279216624aae0db55f92d1fac09712229a90b8a2956b9362955a650465370ccf4f1eb13ad7f9822992446e058a1fc52cdc8764cb902ee4654cde27fe04c4d883c9c76d5c2b491b3fdc330bca0a3e28a36ea9e1f0beca182eabd5324f0761ce6950596c79705315f888d955354c07a196f6eca0d256a1b808b16dd990ad9b0b96c86722832982e862cb07d3686a5f3938cdcb419fcd7f46628b2604bd0", 0xbf}, {&(0x7f0000001a00)="6e7c38aaa19333441d595b432d9c45d29b274e2ed8e3de17303b6cc373530dc46480502e7eb7bd556e9a5f082f94004a20071950662abf6beaa5106b9436133622c03345bb651e0c2626c549d5d42f58b7ce34eb0e4aaf1a5c00f0c6f0d6a6771820603e456e5231a46727a84dbda7d79ba7eba38b0d85e69f", 0x79}, {&(0x7f0000001a80)="5d136b454f008d4be11712893438196ad5bf55d9608b98241b8bb6cfa8a6f380a5f937de94a8671cd3d853ad556ccf5acc7864028c4fdeb66b5e09752d22a2ec99d8669e511d129eafb421587bc63ef8524a01f8af6aa64adfc8cba80d1729e4e4d789251a7a33b8e962fc439b96e586766755c110540b18dc1a1519f5db8e", 0x7f}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="d2c4ef925e872acdcd6dcd13dc26972e4d5486b5e2aa4b5360dafcb8ed58d3ccc47d291398804bcfeaa838a9d7d94d945ed6bab557b8ac9b933a60bd877a1d9bc7b284f44e323222e38cb479a01b55227d5a0d76ffabd1991a262b610da1e30a6bfeca5ea1810978974403be095341251640b8e78e2aba4169e57d8c474a261db5e402fe87d075c52508167703ce0c9a00779be53e0a3e188d9644e54f7893cb322f2f3cd3b4e50bec5a68ecad92d737ae59683aa2d4a56f8807b0365ed85ed9956694b0cd38", 0xc6}, {&(0x7f0000001d00)="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", 0x1000}], 0x9, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x41, 0x1}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000668000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/22, 0x16, 0x1, &(0x7f00000017c0)=""/236, 0xec}, &(0x7f0000000400)=0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'pim6reg1\x00', &(0x7f0000000140)=@ethtool_cmd={0x25, 0x9, 0x2, 0x6, 0x0, 0x7, 0xa7, 0xb, 0x81, 0x8, 0x4, 0x26, 0xf33d, 0x1, 0x2, 0xffff, [0x0, 0x9]}}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 21.530281533s ago: executing program 0 (id=204): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x82, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_insert_range\x00'}, 0x10) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r6) socket(0x25, 0x801, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aabbaaaaaaaa0180c200000008004500002c000000000006907800000000e000000100000000001890787fc439cb480d966f09ca140400000000"], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000000000008500000031000000b70000000000000095000000000000009ae3f2d897a2a3bb70968b09a91fd9d8491de583e8118525fec1caa835166b9ab142394fd702998b9977b9da87b83275d230a19f03740ed80bf8b830290f16be991f558f2d9600fdaef6686305e7d7da8a4bef45f017ca5f78d3b597e5e8565e6edc9ce14e140018a9be9240cadf2e4aeb6fe31692f493bcc3bd5b5fd52c52"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, 0x0) io_setup(0x9f8, &(0x7f0000000700)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x548, &(0x7f00000010c0)="$eJzs3U1oHGUYAOB3ZrPWttG0oKDSQ1GhQukm6Y9WT+lVLBR6ELzUZbMNIZtsyG5qE3JI70UsKCq91JsePCoePIgXj169KJ4F0aDQ9CCRye6mbf5ca5OtmeeB2f1+lrzfl5l3st8wQwLIraPZSxrxbERcSCIG7unri3bn0dbnlpcWKneWFipJrKxc/C2JJCJuLy1UOp9P2u8HI2IxIp6JiG+LEcfTjXEbc/MT5VqtOtOuDzYnpwcbc/MnxifLY9Wx6tSpV149c/b0meGTww9trtd/uvHu9e9fv3Xjs8+PLFY+KCcxEv3tvnvn8TC1fifFGFnXfnongvVQ0usB8EAK7TwvRsTTMRCFdtYDe9/KvogVIKcS+Q851fkekK1/O9tufv/49VxrAZLFXW5vrZ6+1rWJeHx1bXLgj+S+lUm23jy0mwNlT1q8FhFDfX0bj/+kffw9uKGHMUB21DfnWjtq4/5P184/scn5p79z7fQ/6pz/ljec/+7GL2xx/rvQZYy/3vr54y3jX4t4btP4yVr8ZJP4aUS83WX8m29+dXarvpVPIo7F5vE7ku2vDw9eHq9Vh1qvm8b4+tiR17ab/4Et4o9sM/+sbbrL+X/53RfPL24T/6UXtt//m8XfHxHvdRn/8O1P39iqL4s/usX8t4uftd3qMv7LI0d/7PKjAAAAAAAAAADAv5Cu3suWpKW1cpqWSq1neJ+KA2mt3mgev1yfnRpt3fN2KIpp506rgVY9yerD7ftxO/WT6+qnIuJwRLxf2L9aL1XqtdFeTx4AAAAAAAAAAAAAAAAAAAAeEQfXPf//Z6H1/D+QE/7lN+SX/If8uj//k56NA9h9/v5Dfsl/yC/5D/kl/yG/5D/kl/yH/JL/kF/yHwAAAAAAAAAAAAAAAAAAAAAAAAAAdsSF8+ezbeXO0kIlq49emZudqF85MVptTJQmZyulSn1mujRWr4/VqqVKffKffl6tXp8eiqnZq4PNaqM52JibvzRZn51qXhqfLI9VL1WLuzIrAAAAAAAAAAAAAAAAAAAA+H/pX92StBQR6Wo5TUuliCci4lAUk8vjtepQRDwZET8Uivuy+nCvBw0AAAAAAAAAAAAAAAAAAAB7TGNufqJcq1VnFDYWImLxERiGgkJPDn4AAAAAAAAAAAAAAAAAAGBX3X3ot9cjAQAAAAAAAAAAAAAAAAAAgDxLf0kiItuODbzYv773sWS5sPoeEe/cvPjh1XKzOTOctf++1t78qN1+shfjB7rVydNOHgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3NebmJ8q1WnVmBwu9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAg/g7AAD//4zf2Wg=") add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000280)="b4e67eb70532cfd02fd6b6f293805ab60a1d231ae38569ee0b6974e8688d622bc73db00019a88f3bc8c7a66d0e859a4096d09074d31dea0e71bebc5d4e28f4228d72c5be763492f41adf7af89f4ab58dfad66cce6fed699ff9c9", 0x5a, 0xfffffffffffffff8) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 10.214195942s ago: executing program 2 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002740)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8684c88a8", 0x12, 0x0, &(0x7f0000002780)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'bridge_slave_0\x00', &(0x7f0000000540)=@ethtool_ringparam={0x18}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000c0071d3c0d6290000a9bac01591bbe7626d85706f20f7aa7731eeb35bb7107ca6fc06c88071"], 0x18}}], 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0008dd6910efffe6edba182ea6e0e71f00000000ffdbdf2505000000050038000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000fde2e072dfe697e77b75c41ac55cd58b962e4dca9a019cdd22f27076be5385d72a7f3b89842e6037eb571d9949fc8ece5dffb8891a06b0dddbe985426f03b2f8ee7c174c51", @ANYRES16=r10, @ANYBLOB="20002dbd7000fddbdf250f000000080032007863ffff08000300", @ANYRES32=r1, @ANYBLOB="08003200a2000000"], 0x2c}, 0x1, 0x0, 0x0, 0x22004081}, 0x8010) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x1c, {[@main=@item_012={0x1, 0x0, 0xa, "97"}, @local=@item_4={0x3, 0x2, 0x0, "91d71d5e"}, @global=@item_012={0x2, 0x1, 0x3, "49d1"}, @local=@item_012={0x2, 0x2, 0x1, 'J\v'}, @main=@item_4={0x3, 0x0, 0xc, "73da729f"}, @local=@item_4={0x3, 0x2, 0x1, "9a000053"}, @main=@item_012={0x1, 0x0, 0xa, "b2"}, @global=@item_012={0x2, 0x1, 0x6, "a2fa"}]}}, 0x0}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) 8.912672148s ago: executing program 3 (id=243): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001480)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000000ac0)=0xe8) r4 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x21000849, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r6, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861727365743d69736f3838350200312c6769643d00000000000000", @ANYRESHEX=r7, @ANYBLOB="2cd0d5fdd8", @ANYRES32=r5, @ANYBLOB="a962f20b0200c42eef2bff723985e38ebb4c85273417d5167d453983b75bc05633861fefb4e0a24811e37543ecc7c3cf877dd04261c1a3ceedefdbb2bf31f2d6e7588ec25957013f58454d8c50865b0cb56b63f27d"], 0x81, 0x14f5, &(0x7f0000004140)="$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") sendmmsg$unix(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="6e46ac88face9284b2e38c61d86ce5d1997b8e869c22973170bae039a7cc347c509659d3ae0abe5aa5196186a21e106a5203f4964cc4b2afa85285c578376dd67888e8d3b05b3b05734f872a97e665a79bcd3add3e3e5f4e03528fb50b0ec962781e10f8cb7a1985209c435732e1e5d25089", 0x72}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000005c0)="e3e39123ee2f88e9c07531bb557800e5e7a38a37ee230f38495536508652f54ea244df2d614eca5512bb0ca53f635e6a4a007e033b8687e540282f7cab42938c2b97ff6a746fb21edd64aebfbff2896e76677a298161ccad1ba2caf123eac3324115ede989cf46a7d65cf445078298aa657f643546999ec65c3b4acfe22d0f3c670e326b06cdbf914d133191c2a84c922be3e076c78604625ded34a2a402d796cfdb9e6e79ddbc86f9ac525a4d470afa0722ef72bddb299975cc6dfd2e76e782db56f65b16f62aab1bd602", 0xcb}, {&(0x7f00000004c0)="4c5d6103b41ed51df7eeec1711fc2a51586d0bddf90432a8df0f3b73b69db27f0f08d07fba6aa63d89ab8574d2a6f92ac735b0ecc5c598964bddbcb39c46a620cebf395902508aa7b72eb48be6b1bab956d9e01ca29dc99903d192f09296afa2a04e8da30e0da5b1b79caecba19404b0b5379242f06db6cbd76ca61b0e3f96123cde75955cbd7a4abf5c1383869478", 0x8f}, {&(0x7f00000006c0)="808c4a93b4adca83d7a0e680f83c912c28c59883029ce4de6c6fb9ff7da29a6afff468a7c9bdfa35aadccb2113182dee5b1584b02de05239772022dc2107bcf5719cd7eb1138e90fa6f3c31d68", 0x4d}, {&(0x7f0000000740)="1d6264878b3a6f2d1168154929de275b18fd5cbbf50057b1e68ff67392c17e", 0x1f}, {&(0x7f0000000780)="d17bb4ee7291dd567aed33183a9f399567b9d20fa5e40bc73b243e6217e024297dcbb416f5b9fdcbbf", 0x29}, {&(0x7f0000000940)}, {&(0x7f00000007c0)="8a2fc6ebc1ea2e2fb1970120146428eacd1556312e7be35b1a9eddae8cd16a1cf67658bf6d5c1ec07a2cfbfa78638c9c1c32bb6fa7b9882cac918f9452a65e34a7", 0x41}], 0x9, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r7}}}], 0x60, 0x8}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000020109ffff0000000000000002020000"], 0x14}}, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000840), 0x24, 0x0) 7.913306161s ago: executing program 3 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x3c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x25, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0d9908216ded8a223b473fe77f3"]}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000340)=0x1b) 6.896051604s ago: executing program 0 (id=205): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000005c0)=""/156, 0x9c}], 0x2, &(0x7f0000008640), 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11}, &(0x7f00000001c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) dup(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1}) r4 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x31) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000240)={"89334957", 0x0, 0x0, 0x0, 0x8, 0x0, "ddc65fbb23fea261896b699c0a0a8c", "0dabf5d6", "84ec4500", "b8ea2700", ["1a475e1f925abfe0d25668c9", "3d5d1dc2d1c96ef8089fab7e", "1b2b6b9ccc0ef9bc0fafac7e", "e7d52b69c3304927cdfc24fb"]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) fstatfs(r0, &(0x7f0000000680)=""/169) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x222c00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x4000000000000119, 0x0, 0x0, r7}) socket$inet_udp(0x2, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x20800) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x125301, 0x0) mount(&(0x7f0000000340)=@nullb, 0x0, &(0x7f0000000040)='bdev\x00', 0x82003, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 6.298284203s ago: executing program 2 (id=247): r0 = socket$packet(0x11, 0x2, 0x300) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x28}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008810) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0xa, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='percpu_destroy_chunk\x00', r2}, 0x10) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async, rerun: 32) r7 = eventfd(0x0) (rerun: 32) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/228, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) (async) write$eventfd(r7, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x1, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c1}, 0x8040) syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x5b, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810032000011aaaa0b957cae0689177d947635e5496ed49ca49b42d2d5911cdf75883603daa23fcef01cc57db2fa4926202aae78ffea3663a2ae635d67eba309f63558aa65766e64b2814cd5d2ee90"], 0x0) 6.253543237s ago: executing program 4 (id=248): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty, 0xb4}, {@multicast1}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@private]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.186578022s ago: executing program 2 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x10, 0x3}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000a73aea742b700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write(r1, &(0x7f0000000040)="09000000010001", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0) mincore(&(0x7f0000376000/0x10000)=nil, 0x10000, &(0x7f0000000000)=""/131) 5.643776807s ago: executing program 3 (id=251): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@minixdf}, {@resgid}, {@nomblk_io_submit}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="e82f1463cf49ccf2"}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x835, 0x0) 5.36441924s ago: executing program 4 (id=252): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001c0011060000001400000f0007000000", @ANYRES8=r0, @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x3000c004}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket(0xa, 0xa, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000015000400000000000000000030f089407dd4a20000000015000300000000000000000064a4c4f6afee410b0000000204b6674b2c9bdecc0c1ee5e070702af464e9635f4fd7946d00"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='_', 0x1}], 0x1) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000005c0)={0x0, "c65a4018ea3d6211b728f262abc20214"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r6, 0x1, 0x45, 0xffffffffffffffff, &(0x7f0000000000)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair(0x28, 0xa, 0x0, &(0x7f0000000340)) r7 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$binfmt_script(r7, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac1414bb000000000000000000000000fe80000000000000003fcf190481a5e13de9e260aa91d514758436412d464ee7826d416af19318eed7d629544d42ad831e62ce1598427bd09c68ae5738a7790e"], 0x38}}, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000680), 0x2) r9 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r9, 0x0) close(r9) write$binfmt_script(r2, &(0x7f00000016c0)={'#! ', './file0', [{0x20, '#\x0f!\xe7\xda vvH;\x94\x81q\xb3\xb1m/\xd8\xa2\xf4\x10\xcf\xb3\v\x15w\xb56\x11\x00\x00\x00\x00\x14\x00\x00\x00\x02\x00a\x17\xef6j\xea\x8e4\x06Qnaa\xfc9\xad)\xdfUx>\x00\x00'}, {0x20, '#! \xdcv\xe2\xdc\xd2\xd6\\,\xcc\xbd%\x02\xf9\xfb\xba\x82\a3\xe9\x05\xfa~G\xbd\x0ft\an@O2;\xde\x8c\x1f!\xd5\xe9\x19@6\xd8[a\xf1\xe9&\xdf\xa1V\xcbD\xc5\xc3\xd4\xda\xc6\xd9u]|\xc7\xa8\vl\xc4G\xebo\xb6=9=\xed\x93\xf13oo\x90ks\xc6\x82`{\x91\x06\nNZ(\x1a\x83\x13\xb8Mb\xaeI.\x18\xbfp~\x16>@\x13\xd9\x113\xf1\x90\xdf\x14\x96\xa1\xd2\xeco\x82\x0f\xd7\xc7\au)`|O,\x9f\xb5\xc6\fBK\x8e)O\x11\td\x0e\xe0c\xdd/'}], 0xa, "27e495b5c00a63e4b904f3547cea21d65deba7228112a2dba029188928f4775b8342a29125268fccc9c4db11f71504e10d70d5"}, 0x116) sendmmsg$sock(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="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", 0xfa}], 0x1}}, {{&(0x7f0000000700)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xe68f}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}], 0x2, 0x20000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5.034241897s ago: executing program 0 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x204, &(0x7f00000000c0)="$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") statx(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x0, 0x0, &(0x7f0000000340)) rmdir(&(0x7f0000000040)='./control\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000003d000000", 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_RTT={0x8}]}}]}, 0x44}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x2f, &(0x7f0000000000), 0x4) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f00000004c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}}, 0x0) 4.120365022s ago: executing program 1 (id=255): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000002200)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000b00)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 3.848853444s ago: executing program 2 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) connect$unix(r5, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = dup2(r4, r4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="087c6d03b416cd98da3657d6a2a90992d5388a10542398", @ANYRES16=r8, @ANYBLOB="01002bbd7000000000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x24}, 0x4000091) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r8, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8049}, 0x4000044) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000cad000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESHEX=r8], 0x0, 0x2d, 0x0, 0x0, 0xffffffff}, 0x20) 3.848462504s ago: executing program 3 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000900000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x7, 0x10, 0x3, 0xffffffff, {{0x18, 0x4, 0x3, 0x5, 0x60, 0x65, 0x0, 0x5, 0x4, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x1b, 0x9a, [@broadcast, @empty, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote]}, @generic={0x44, 0xd, "b7a7629dc306e30a3cba31"}, @timestamp_addr={0x44, 0x14, 0x71, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xde13}, {@local, 0xffff}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x68}]}}}}}) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x10000, 0x0, 0x6, 0xb60, r1, 0x0, '\x00', r2, r3, 0x3, 0x1, 0x1, 0x4}, 0x48) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="8554ee0073e9a7fcc0c4c73450e99855aaced42bad7231e91962a00affee334b4c45d065978e00dcbb0967f8bca55beee4f0a20ebf389060f1"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="74fcf6", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000002c0)={0x1, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000800)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1000}, 0x48) 3.666336589s ago: executing program 1 (id=258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000403d74cd470d"]) 3.576061767s ago: executing program 1 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x418, 0x330, 0x2000000, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@multicast2, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'vcan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @private, @multicast2}}}, {{@arp={@private, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'pimreg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="9165272eb668", @empty, @remote, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_da_update_reserve_space\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002700)={0x34, r7, 0x407, 0x0, 0x0, {0x10}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f00000002c0), &(0x7f00000000c0)=""/151}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000300)={r8, &(0x7f0000000000), 0x20000000}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000d901"]) 3.516198582s ago: executing program 1 (id=260): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5524, &(0x7f0000007200)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle={0x77682a85, 0x0, 0x73682a85}}, &(0x7f0000000240)={0x38, 0x18, 0x84}}}], 0x0, 0x0, 0x0}) unlink(&(0x7f0000000180)='./file1\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') 2.878238874s ago: executing program 3 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x3c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x25, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0d9908216ded8a223b473fe77f3"]}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000340)=0x1b) 2.583454888s ago: executing program 4 (id=262): bpf$PROG_LOAD(0x5, 0x0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) pipe2(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8000c00080004000400040000000000"], 0x11) dup(0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x0, r2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1c0b560000005630da2c26b034eb01477ff43ec5c9c331eba9a4224d0b884dfb278595c0a34d17f7e2f0c854cdb0fefdaffbaf3e4acc60dcc88aa2c8405d9e375c40f2a016e8adf28539be1e9482a4445d6a846b748295f7b6fa043169321d5fcfe25fde92e6a66c6d77bff6099a61015449bd8550764c56f57b493fd33b58e114d4e47907a20f"], &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="200eed00000077104f62a1c9ab3fc6ac42c576cd3a28437ed4b94ec5973939b5b1abc7f3c1e08123bd74401486ccbbe32628e4d0eb803355a95aa492759ed76ddc46a0e6709f464a27ca5981d4b65e89414f405a6a0fc5e11fee1214a33c8b94e4c82954490d963931bf4bc9d81299fdc93494f2c84266b94c4a0e070394b0240b223edbec6a7a488feb81f41689a19a852a15fff1993a40bb3981513a4ea1cbb70298cdf832aa0e0fb9bb47cd51516bb6424de84e4fae59423582a188bc4dc679addfa04f4b5bc5fa383b025700c00f53e66717fc13117cc5dd22c1730eef5e7da0c58793dbd6a2fea6d8ef584318df6d8a9a"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}}) eventfd2(0x8001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x22a000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @local, 0x7f}, 0x1c) 2.521337523s ago: executing program 0 (id=263): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty, 0xb4}, {@multicast1}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@private]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.242378246s ago: executing program 1 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) semget$private(0x0, 0x1, 0x0) (fail_nth: 2) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') 2.033188043s ago: executing program 2 (id=265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4008744b, 0x0) (fail_nth: 2) 1.513204936s ago: executing program 0 (id=266): setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001880)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f2, &(0x7f0000000200)="$eJzs28tPM1UYx/FfuVgultYbCInhRDe6mUDduWsIJIYmGqQGNDEZZKpNxxY7DabGCDsX/ifEpTuN8R9gw869u27ciYl5581cgBZKU3h7ocn3s+npPH06Z+Y5M3kWM829hMpFzyradU0kjKakU11KGU1oUpFEsC2W1Etqdar39r+9eOuT/c+2c/n85o4xW7nd97PGmIXVP7774Ze3/6zPf/rrwm9JnWe+aP6T/ft88Xy5+Wz365JnSp6pVOvGNgfVat0+cB1zWPLKljEfu47tOaZU8ZzadTwZ7/GoYezKYWruqOZ4nrErDVN2GqZeNfVaw9hf2aWKsSxrOjUn3Fi66LS1cLazY+eGPxsMU62WszckrdyJFM5GMiEAADBSzb3ENz30/6GJcDyq/j+IF93qUW/9v6H/j/3VJfYC/X/y0RPCkAX9/+fx9duO/h8AAAAAAAAAAAAAAAAAAAAAgHGwkfTTvu+nL/3oc1oK3/Dx4++zkuYkzQfbTqKcBUlpSRlJr0h6VdJrkl6X9IakRUlLkt6UtNzyX6M+Vtx1Vfde6v+ypFSX+l+9EnS3/tOi/k9V/+rP9T9++nn9U//x0/Li7ozk/nRcOC5En1E8V1RJrhytKa3/w1rGovHWh/nNNRPK6Gf3JM4/OS5MtuevKx0smE7561G+ac9PhuvuOj+rdLDAwtQP4snH+dmO+TN6952WfEtpXXypqlwdhqk3+/9x3ZiNj/K38lfC33U3O8jSDIVlrnWsn2XdF4/yH7A+bp3fKa1MjfbYIXmN78u26zq1QQyuGsKW0L/x6hjcTvsw0L2hxP2h/g6C0/ZEzsaYDlL/+X4wSHT8TXB3e/wuEvp99AfYdqH1/597un1sD/LehMG7KfrDc2cGMSEAAAAAAAAAAAAAAAAAQE8G+Vhit+fDgtjqEI8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBWzwMAAP//yJRR4w==") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0, @ANYBLOB="05"], 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES8=r6, @ANYRESHEX=r0, @ANYRESHEX=r6], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 1.231122449s ago: executing program 3 (id=267): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)='3', 0x1}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='umask=000000000000000000000040xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003240), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000004c0)='./file0\x00', 0x40, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000002900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) io_submit(r5, 0x2, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000040)="e4", 0x1, 0x18000000000000}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x40600) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x0, @any, 0x82, 0x2}, 0xe) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000540)={0x0, @pix={0x80000000, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 1.10176648s ago: executing program 2 (id=269): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xfe, 0x54f6, &(0x7f0000005800)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x800, 0x2343) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0, 0x3, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000200)={0x0, r5, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6e58, 0x6, 0xb, 0x800, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0xe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) keyctl$update(0x2, r2, &(0x7f0000000240)='K', 0x1) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 758.302208ms ago: executing program 4 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1e040600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 710.400472ms ago: executing program 4 (id=271): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000240)=ANY=[], 0x1, 0xac0, &(0x7f00000013c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x6, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40203, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x41292}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x28) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 0s ago: executing program 4 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xd6, [@private=0xa010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) kernel console output (not intermixed with test programs): sb 5-1: No valid video chain found. [ 68.556989][ T7] usb 5-1: USB disconnect, device number 4 [ 68.575831][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.839996][ T3549] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 68.867607][ T3549] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.978553][ T3549] usb 1-1: config 0 has no interface number 0 [ 69.154207][ T3735] device veth0_macvtap entered promiscuous mode [ 69.187599][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.198221][ T3735] device veth1_macvtap entered promiscuous mode [ 69.199554][ T3549] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 69.237298][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.278724][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.281240][ T3549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.296321][ T3956] FAULT_INJECTION: forcing a failure. [ 69.296321][ T3956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.319465][ T3549] usb 1-1: Product: syz [ 69.323667][ T3549] usb 1-1: Manufacturer: syz [ 69.324213][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.338474][ T3549] usb 1-1: SerialNumber: syz [ 69.349904][ T3956] CPU: 0 PID: 3956 Comm: syz.2.70 Not tainted 5.15.162-syzkaller #0 [ 69.357901][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.367952][ T3956] Call Trace: [ 69.369103][ T3549] usb 1-1: config 0 descriptor?? [ 69.371224][ T3956] [ 69.371233][ T3956] dump_stack_lvl+0x1e3/0x2d0 [ 69.371257][ T3956] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 69.389949][ T3956] ? panic+0x860/0x860 [ 69.394020][ T3956] ? validate_chain+0x112/0x5930 [ 69.398955][ T3956] ? validate_chain+0x112/0x5930 [ 69.403893][ T3956] should_fail+0x38a/0x4c0 [ 69.408308][ T3956] _copy_from_user+0x2d/0x170 [ 69.412985][ T3956] __copy_msghdr_from_user+0xaf/0x7c0 [ 69.418361][ T3956] ? __ia32_sys_shutdown+0x60/0x60 [ 69.423490][ T3956] ___sys_sendmsg+0x166/0x2e0 [ 69.428168][ T3956] ? __sys_sendmsg+0x260/0x260 [ 69.432964][ T3956] ? __fdget+0x191/0x220 [ 69.437204][ T3956] __se_sys_sendmsg+0x19a/0x260 [ 69.442054][ T3956] ? __x64_sys_sendmsg+0x80/0x80 [ 69.446994][ T3956] ? syscall_enter_from_user_mode+0x2e/0x240 [ 69.452969][ T3956] ? lockdep_hardirqs_on+0x94/0x130 [ 69.458168][ T3956] ? syscall_enter_from_user_mode+0x2e/0x240 [ 69.464153][ T3956] do_syscall_64+0x3b/0xb0 [ 69.468569][ T3956] ? clear_bhb_loop+0x15/0x70 [ 69.473252][ T3956] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.479145][ T3956] RIP: 0033:0x7fa926eeda19 [ 69.483573][ T3956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.499330][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.503195][ T3956] RSP: 002b:00007fa92596e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.503220][ T3956] RAX: ffffffffffffffda RBX: 00007fa92707bf60 RCX: 00007fa926eeda19 [ 69.529336][ T3956] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 69.533512][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.537402][ T3956] RBP: 00007fa92596e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.537418][ T3956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.537428][ T3956] R13: 000000000000000b R14: 00007fa92707bf60 R15: 00007ffe0c468d28 [ 69.537451][ T3956] [ 69.558397][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.609820][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.629085][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.660820][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.682735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.697712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.731302][ T7] usb 1-1: USB disconnect, device number 3 [ 69.767813][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.801232][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.841530][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.872483][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.901953][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.949520][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.969464][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.999847][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.038930][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.078386][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.090545][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.131514][ T3735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.169424][ T3735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.207603][ T3735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.238523][ T3735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454573][ T144] attempt to access beyond end of device [ 70.454573][ T144] loop0: rw=1, want=153, limit=128 [ 70.528381][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.549654][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.559922][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.609983][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.618162][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.671001][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.826264][ T3987] loop0: detected capacity change from 0 to 1024 [ 71.081041][ T3987] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 71.136603][ T3972] loop2: detected capacity change from 0 to 32768 [ 71.165031][ T3987] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 71.195725][ T1068] cfg80211: failed to load regulatory.db [ 71.210417][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216971][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388105][ T3970] loop1: detected capacity change from 0 to 40427 [ 71.480991][ T3972] XFS: attr2 mount option is deprecated. [ 71.486658][ T3972] XFS: ikeep mount option is deprecated. [ 71.519499][ T3972] XFS: noikeep mount option is deprecated. [ 71.887109][ T3970] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.075941][ T3972] XFS (loop2): Mounting V5 Filesystem [ 72.195377][ T3970] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.269019][ T3972] XFS (loop2): Ending clean mount [ 72.330100][ T3972] XFS (loop2): Quotacheck needed: Please wait. [ 72.346553][ T4009] loop3: detected capacity change from 0 to 1024 [ 72.357526][ T4011] sp0: Synchronizing with TNC [ 72.423708][ T3972] XFS (loop2): Quotacheck: Done. [ 72.632116][ T4009] hfsplus: xattr searching failed [ 72.753744][ T4009] hfsplus: xattr searching failed [ 72.999381][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.329943][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 73.346846][ T3511] XFS (loop2): Unmounting Filesystem [ 73.438071][ T4029] loop4: detected capacity change from 0 to 128 [ 73.450425][ T21] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 73.466293][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.515199][ T21] usb 1-1: config 0 descriptor?? [ 73.580884][ T21] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 73.636220][ T4029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.732308][ T4032] loop3: detected capacity change from 0 to 1024 [ 73.765249][ T4029] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 74.039265][ T4035] loop2: detected capacity change from 0 to 256 [ 74.200326][ T4037] vivid-004: disconnect [ 74.229991][ T4034] vivid-004: reconnect [ 74.713540][ T4043] loop3: detected capacity change from 0 to 256 [ 75.060557][ T4045] loop1: detected capacity change from 0 to 2048 [ 75.079549][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.109465][ T4045] loop1: p2 < > [ 75.309844][ T21] usb 1-1: Detected FT8U232AM [ 75.326315][ T4047] loop2: detected capacity change from 0 to 1024 [ 75.326527][ T21] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 75.343161][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 75.423763][ T21] usb 1-1: USB disconnect, device number 4 [ 75.449472][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 75.462377][ T4049] loop1: detected capacity change from 0 to 1024 [ 75.469824][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.503342][ T4047] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 75.529193][ T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 75.552126][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.576360][ T4047] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 75.608696][ T4049] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 75.646984][ T4049] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 75.785462][ T21] ftdi_sio 1-1:0.0: device disconnected [ 75.791221][ T26] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.808585][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.818943][ T26] usb 4-1: config 0 descriptor?? [ 75.834699][ T4058] binder: 4057:4058 ioctl c0306201 200001c0 returned -14 [ 76.269390][ T25] audit: type=1326 audit(1721231590.428:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4057 comm="syz.0.93" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30c29aca19 code=0x0 [ 76.445656][ T26] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 76.454093][ T4058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 76.467700][ T4058] Zero length message leads to an empty skb [ 76.477089][ T26] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 76.495117][ T26] microsoft 0003:045E:07DA.0001: no inputs found [ 76.544841][ T26] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 76.982574][ T4069] FAULT_INJECTION: forcing a failure. [ 76.982574][ T4069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.995836][ T4069] CPU: 1 PID: 4069 Comm: syz.0.95 Not tainted 5.15.162-syzkaller #0 [ 77.003818][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 77.013867][ T4069] Call Trace: [ 77.017144][ T4069] [ 77.020064][ T4069] dump_stack_lvl+0x1e3/0x2d0 [ 77.024751][ T4069] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 77.030377][ T4069] ? panic+0x860/0x860 [ 77.034460][ T4069] should_fail+0x38a/0x4c0 [ 77.038888][ T4069] _copy_from_user+0x2d/0x170 [ 77.043561][ T4069] __copy_msghdr_from_user+0xaf/0x7c0 [ 77.048933][ T4069] ? __ia32_sys_shutdown+0x60/0x60 [ 77.054042][ T4069] ? rcu_is_watching+0x11/0xa0 [ 77.058798][ T4069] ? ___sys_sendmsg+0x27b/0x2e0 [ 77.063641][ T4069] ? mark_lock+0x98/0x340 [ 77.067967][ T4069] ___sys_sendmsg+0x166/0x2e0 [ 77.072643][ T4069] ? __sys_sendmsg+0x260/0x260 [ 77.077435][ T4069] ? __might_fault+0xb4/0x110 [ 77.082107][ T4069] __sys_sendmmsg+0x2bf/0x560 [ 77.086783][ T4069] ? __ia32_sys_sendmsg+0x80/0x80 [ 77.091806][ T4069] ? __lock_acquire+0x1ff0/0x1ff0 [ 77.096843][ T4069] ? print_irqtrace_events+0x210/0x210 [ 77.102306][ T4069] ? vtime_user_exit+0x2d1/0x400 [ 77.107243][ T4069] ? syscall_enter_from_user_mode+0x2e/0x240 [ 77.113220][ T4069] __x64_sys_sendmmsg+0x9c/0xb0 [ 77.118073][ T4069] do_syscall_64+0x3b/0xb0 [ 77.122488][ T4069] ? clear_bhb_loop+0x15/0x70 [ 77.127162][ T4069] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.133051][ T4069] RIP: 0033:0x7f30c29aca19 [ 77.137465][ T4069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.157060][ T4069] RSP: 002b:00007f30c13eb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 77.165467][ T4069] RAX: ffffffffffffffda RBX: 00007f30c2b3b110 RCX: 00007f30c29aca19 [ 77.173428][ T4069] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000006 [ 77.181389][ T4069] RBP: 00007f30c13eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.189347][ T4069] R10: 000000000000ffd8 R11: 0000000000000246 R12: 0000000000000001 [ 77.197306][ T4069] R13: 000000000000006e R14: 00007f30c2b3b110 R15: 00007ffd4458bb18 [ 77.205284][ T4069] [ 77.992429][ T4077] loop0: detected capacity change from 0 to 256 [ 78.222334][ T4063] loop4: detected capacity change from 0 to 40427 [ 78.266497][ T4081] vivid-000: disconnect [ 78.271669][ T4075] vivid-000: reconnect [ 78.365756][ T4063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.383545][ T4090] FAULT_INJECTION: forcing a failure. [ 78.383545][ T4090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.425416][ T4090] CPU: 1 PID: 4090 Comm: syz.0.100 Not tainted 5.15.162-syzkaller #0 [ 78.433519][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 78.439614][ T4083] loop1: detected capacity change from 0 to 2048 [ 78.443570][ T4090] Call Trace: [ 78.443580][ T4090] [ 78.443587][ T4090] dump_stack_lvl+0x1e3/0x2d0 [ 78.460717][ T4090] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 78.466448][ T4090] ? panic+0x860/0x860 [ 78.470542][ T4090] ? __lock_acquire+0x1295/0x1ff0 [ 78.475582][ T4090] should_fail+0x38a/0x4c0 [ 78.480007][ T4090] _copy_from_user+0x2d/0x170 [ 78.484683][ T4090] iovec_from_user+0x13b/0x390 [ 78.489450][ T4090] __import_iovec+0x72/0x4b0 [ 78.494044][ T4090] ? __ia32_sys_shutdown+0x60/0x60 [ 78.499167][ T4090] import_iovec+0xe6/0x120 [ 78.503595][ T4090] ___sys_sendmsg+0x215/0x2e0 [ 78.508283][ T4090] ? __sys_sendmsg+0x260/0x260 [ 78.513084][ T4090] ? __fdget+0x191/0x220 [ 78.517326][ T4090] __sys_sendmmsg+0x2bf/0x560 [ 78.522016][ T4090] ? __ia32_sys_sendmsg+0x80/0x80 [ 78.527050][ T4090] ? __lock_acquire+0x1ff0/0x1ff0 [ 78.532170][ T4090] ? print_irqtrace_events+0x210/0x210 [ 78.537632][ T4090] ? vtime_user_exit+0x2d1/0x400 [ 78.542605][ T4090] ? syscall_enter_from_user_mode+0x2e/0x240 [ 78.548617][ T4090] __x64_sys_sendmmsg+0x9c/0xb0 [ 78.553468][ T4090] do_syscall_64+0x3b/0xb0 [ 78.557881][ T4090] ? clear_bhb_loop+0x15/0x70 [ 78.562554][ T4090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.568447][ T4090] RIP: 0033:0x7f30c29aca19 [ 78.572872][ T4090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.592474][ T4090] RSP: 002b:00007f30c142d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.600888][ T4090] RAX: ffffffffffffffda RBX: 00007f30c2b3af60 RCX: 00007f30c29aca19 [ 78.608854][ T4090] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 78.616820][ T4090] RBP: 00007f30c142d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.624786][ T4090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.632753][ T4090] R13: 000000000000000b R14: 00007f30c2b3af60 R15: 00007ffd4458bb18 [ 78.640736][ T4090] [ 78.750834][ T4083] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 78.803046][ T4063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.836151][ T3550] usb 4-1: USB disconnect, device number 4 [ 78.906196][ T4083] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 79.157631][ T4104] loop3: detected capacity change from 0 to 512 [ 79.343494][ T4104] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.409546][ T4104] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 79.440510][ T3508] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 79.587763][ T3508] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 79.798330][ T4120] loop3: detected capacity change from 0 to 1024 [ 79.861331][ T4122] loop1: detected capacity change from 0 to 1024 [ 79.871950][ T4118] loop0: detected capacity change from 0 to 2048 [ 79.893746][ T4120] EXT4-fs (loop3): Ignoring removed orlov option [ 79.908167][ T4120] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 79.980918][ T4120] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 80.051071][ T4122] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 80.065743][ T4118] netlink: 664 bytes leftover after parsing attributes in process `syz.0.106'. [ 80.083238][ T4122] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 80.164200][ T4128] loop2: detected capacity change from 0 to 1024 [ 80.181975][ T4120] process 'syz.3.105' launched './file0/file0' with NULL argv: empty string added [ 80.298095][ T4128] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 80.343065][ T4128] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff) [ 80.983515][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 81.657894][ T4147] loop4: detected capacity change from 0 to 128 [ 81.737573][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 82.722262][ T4160] FAULT_INJECTION: forcing a failure. [ 82.722262][ T4160] name fail_futex, interval 1, probability 0, space 0, times 1 [ 82.735126][ T4160] CPU: 1 PID: 4160 Comm: syz.2.113 Not tainted 5.15.162-syzkaller #0 [ 82.743192][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.753251][ T4160] Call Trace: [ 82.756524][ T4160] [ 82.759446][ T4160] dump_stack_lvl+0x1e3/0x2d0 [ 82.764136][ T4160] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 82.769772][ T4160] ? panic+0x860/0x860 [ 82.773846][ T4160] ? validate_chain+0x112/0x5930 [ 82.778940][ T4160] ? validate_chain+0x112/0x5930 [ 82.783890][ T4160] should_fail+0x38a/0x4c0 [ 82.788319][ T4160] get_futex_key+0x1e2/0x1500 [ 82.793011][ T4160] ? futex_wait_restart+0x250/0x250 [ 82.798214][ T4160] ? register_lock_class+0x100/0x9a0 [ 82.803498][ T4160] ? reacquire_held_locks+0x660/0x660 [ 82.808880][ T4160] futex_wake+0x139/0x750 [ 82.813211][ T4160] ? mark_lock+0x98/0x340 [ 82.817550][ T4160] ? __lock_acquire+0x1295/0x1ff0 [ 82.822575][ T4160] ? futex_wait+0x740/0x740 [ 82.827086][ T4160] ? mark_lock+0x98/0x340 [ 82.831426][ T4160] do_futex+0x1394/0x1810 [ 82.835784][ T4160] ? futex_exit_release+0x1e0/0x1e0 [ 82.840994][ T4160] ? __might_sleep+0xc0/0xc0 [ 82.845589][ T4160] ? __might_fault+0xb8/0x110 [ 82.850266][ T4160] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 82.856246][ T4160] ? __lock_acquire+0x1ff0/0x1ff0 [ 82.861283][ T4160] mm_release+0x2b7/0x420 [ 82.865621][ T4160] ? exit_mm_release+0x30/0x30 [ 82.870387][ T4160] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.875590][ T4160] ? lockdep_hardirqs_on+0x94/0x130 [ 82.880802][ T4160] exit_mm+0xad/0x7f0 [ 82.884785][ T4160] ? _raw_spin_unlock+0x40/0x40 [ 82.889637][ T4160] ? acct_collect+0x5e3/0x7a0 [ 82.894321][ T4160] ? do_exit+0x2480/0x2480 [ 82.898746][ T4160] ? taskstats_exit+0x491/0xa10 [ 82.903595][ T4160] ? mm_trace_rss_stat+0x8e/0x1f0 [ 82.908714][ T4160] ? sync_mm_rss+0x26b/0x420 [ 82.913309][ T4160] do_exit+0x626/0x2480 [ 82.917473][ T4160] ? put_task_struct+0x80/0x80 [ 82.922228][ T4160] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 82.928206][ T4160] do_group_exit+0x144/0x310 [ 82.932788][ T4160] ? lockdep_hardirqs_on+0x94/0x130 [ 82.938058][ T4160] get_signal+0xc66/0x14e0 [ 82.942464][ T4160] arch_do_signal_or_restart+0xc3/0x1890 [ 82.948097][ T4160] ? __sys_recvmmsg+0x270/0x270 [ 82.952928][ T4160] ? preempt_schedule_irq+0x136/0x1c0 [ 82.958277][ T4160] ? lockdep_hardirqs_off+0x70/0x100 [ 82.963636][ T4160] ? get_sigframe_size+0x10/0x10 [ 82.968558][ T4160] ? print_irqtrace_events+0x210/0x210 [ 82.974008][ T4160] ? __x64_sys_recvmmsg+0x195/0x240 [ 82.979191][ T4160] ? exit_to_user_mode_loop+0x39/0x130 [ 82.984717][ T4160] exit_to_user_mode_loop+0x97/0x130 [ 82.989979][ T4160] exit_to_user_mode_prepare+0xb1/0x140 [ 82.995505][ T4160] syscall_exit_to_user_mode+0x5d/0x240 [ 83.001033][ T4160] do_syscall_64+0x47/0xb0 [ 83.005429][ T4160] ? clear_bhb_loop+0x15/0x70 [ 83.010083][ T4160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.015952][ T4160] RIP: 0033:0x7fa926eeda19 [ 83.020346][ T4160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.039929][ T4160] RSP: 002b:00007fa92592c048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 83.048327][ T4160] RAX: fffffffffffffe00 RBX: 00007fa92707c110 RCX: 00007fa926eeda19 [ 83.056276][ T4160] RDX: 000000000000045b RSI: 0000000020008880 RDI: 0000000000000005 [ 83.064226][ T4160] RBP: 00007fa92592c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.072174][ T4160] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000001 [ 83.080121][ T4160] R13: 000000000000006e R14: 00007fa92707c110 R15: 00007ffe0c468d28 [ 83.088080][ T4160] [ 83.962467][ T4193] loop1: detected capacity change from 0 to 1024 [ 84.023572][ T4195] loop0: detected capacity change from 0 to 2048 [ 84.058252][ T4199] FAULT_INJECTION: forcing a failure. [ 84.058252][ T4199] name failslab, interval 1, probability 0, space 0, times 0 [ 84.066017][ T4154] loop3: detected capacity change from 0 to 40427 [ 84.080405][ T4193] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 84.101740][ T4193] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 84.113543][ T4199] CPU: 0 PID: 4199 Comm: syz.2.123 Not tainted 5.15.162-syzkaller #0 [ 84.121620][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.131666][ T4199] Call Trace: [ 84.134943][ T4199] [ 84.137861][ T4199] dump_stack_lvl+0x1e3/0x2d0 [ 84.142528][ T4199] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 84.148141][ T4199] ? panic+0x860/0x860 [ 84.152190][ T4199] ? __might_sleep+0xc0/0xc0 [ 84.156764][ T4199] should_fail+0x38a/0x4c0 [ 84.161182][ T4199] should_failslab+0x5/0x20 [ 84.165666][ T4199] slab_pre_alloc_hook+0x53/0xc0 [ 84.170583][ T4199] __kmalloc+0x6e/0x300 [ 84.174715][ T4199] ? tomoyo_encode+0x26b/0x530 [ 84.179461][ T4199] tomoyo_encode+0x26b/0x530 [ 84.184036][ T4199] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 84.189653][ T4199] tomoyo_path_number_perm+0x225/0x810 [ 84.195116][ T4199] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 84.200592][ T4199] ? __fget_files+0x413/0x480 [ 84.205280][ T4199] security_file_ioctl+0x6d/0xa0 [ 84.210206][ T4199] __se_sys_ioctl+0x47/0x160 [ 84.214783][ T4199] do_syscall_64+0x3b/0xb0 [ 84.219180][ T4199] ? clear_bhb_loop+0x15/0x70 [ 84.223840][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.229718][ T4199] RIP: 0033:0x7fa926eeda19 [ 84.234114][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.253695][ T4199] RSP: 002b:00007fa92596e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.262089][ T4199] RAX: ffffffffffffffda RBX: 00007fa92707bf60 RCX: 00007fa926eeda19 [ 84.270039][ T4199] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 84.277989][ T4199] RBP: 00007fa92596e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.285935][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.293883][ T4199] R13: 000000000000000b R14: 00007fa92707bf60 R15: 00007ffe0c468d28 [ 84.301846][ T4199] [ 84.422870][ T4199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.485272][ T4195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.906259][ T4154] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.066931][ T4195] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.090413][ T4195] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 85.104166][ T4195] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.104166][ T4195] [ 85.120400][ T4195] EXT4-fs (loop0): Total free blocks count 0 [ 85.126405][ T4195] EXT4-fs (loop0): Free/Dirty block details [ 85.132575][ T4195] EXT4-fs (loop0): free_blocks=2415919104 [ 85.138365][ T4195] EXT4-fs (loop0): dirty_blocks=16 [ 85.143647][ T4195] EXT4-fs (loop0): Block reservation details [ 85.149681][ T4195] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 85.190630][ T4216] loop2: detected capacity change from 0 to 512 [ 85.306359][ T4216] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 85.306359][ T4216] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 85.306359][ T4216] [ 85.320999][ T4223] loop1: detected capacity change from 0 to 512 [ 85.362758][ T4195] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 870758 with max blocks 1 with error 28 [ 85.460199][ T4195] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.460199][ T4195] [ 85.475577][ T4223] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.488955][ T4216] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 85.499713][ T4223] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 85.889400][ T3548] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.149385][ T3548] usb 1-1: Using ep0 maxpacket: 8 [ 86.274822][ T3548] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 86.307873][ T4216] loop2: detected capacity change from 0 to 32768 [ 86.321206][ T3548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.340955][ T3548] usb 1-1: config 0 descriptor?? [ 86.395940][ T3548] hso 1-1:0.0: Can't find BULK IN endpoint [ 86.610091][ T1068] usb 1-1: USB disconnect, device number 5 [ 87.302757][ T4254] loop3: detected capacity change from 0 to 64 [ 87.322514][ T4256] loop2: detected capacity change from 0 to 1024 [ 87.368080][ T4258] loop1: detected capacity change from 0 to 128 [ 87.401467][ T4256] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 87.422120][ T4256] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff) [ 87.471830][ T4266] FAULT_INJECTION: forcing a failure. [ 87.471830][ T4266] name failslab, interval 1, probability 0, space 0, times 0 [ 87.485345][ T4266] CPU: 0 PID: 4266 Comm: syz.0.138 Not tainted 5.15.162-syzkaller #0 [ 87.493423][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 87.503483][ T4266] Call Trace: [ 87.506758][ T4266] [ 87.509679][ T4266] dump_stack_lvl+0x1e3/0x2d0 [ 87.514545][ T4266] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 87.520183][ T4266] ? panic+0x860/0x860 [ 87.524259][ T4266] ? __might_sleep+0xc0/0xc0 [ 87.528848][ T4266] ? __lock_acquire+0x1295/0x1ff0 [ 87.533876][ T4266] should_fail+0x38a/0x4c0 [ 87.538299][ T4266] should_failslab+0x5/0x20 [ 87.542805][ T4266] slab_pre_alloc_hook+0x53/0xc0 [ 87.547743][ T4266] __kmalloc+0x6e/0x300 [ 87.551890][ T4266] ? bpf_test_init+0xf8/0x1b0 [ 87.556567][ T4266] bpf_test_init+0xf8/0x1b0 [ 87.561069][ T4266] bpf_prog_test_run_skb+0x268/0x1420 [ 87.566540][ T4266] ? cpu_online+0x70/0x70 [ 87.570954][ T4266] ? cpu_online+0x70/0x70 [ 87.575285][ T4266] bpf_prog_test_run+0x32f/0x3a0 [ 87.580224][ T4266] __sys_bpf+0x3ac/0x670 [ 87.584476][ T4266] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 87.589857][ T4266] ? syscall_enter_from_user_mode+0x2e/0x240 [ 87.595833][ T4266] ? lockdep_hardirqs_on+0x94/0x130 [ 87.601025][ T4266] __x64_sys_bpf+0x78/0x90 [ 87.605440][ T4266] do_syscall_64+0x3b/0xb0 [ 87.609847][ T4266] ? clear_bhb_loop+0x15/0x70 [ 87.614516][ T4266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.620400][ T4266] RIP: 0033:0x7f30c29aca19 [ 87.624817][ T4266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.627046][ T4258] attempt to access beyond end of device [ 87.627046][ T4258] loop1: rw=2049, want=241, limit=128 [ 87.644421][ T4266] RSP: 002b:00007f30c142d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.644447][ T4266] RAX: ffffffffffffffda RBX: 00007f30c2b3af60 RCX: 00007f30c29aca19 [ 87.644457][ T4266] RDX: 000000000000004c RSI: 0000000020000640 RDI: 000000000000000a [ 87.644467][ T4266] RBP: 00007f30c142d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.644477][ T4266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.690275][ T4258] attempt to access beyond end of device [ 87.690275][ T4258] loop1: rw=524288, want=193, limit=128 [ 87.695485][ T4266] R13: 000000000000000b R14: 00007f30c2b3af60 R15: 00007ffd4458bb18 [ 87.714458][ T4266] [ 87.990441][ T3549] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.399586][ T3549] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.407867][ T3549] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.510421][ T4279] loop0: detected capacity change from 0 to 512 [ 88.572549][ T3549] usb 2-1: config 0 has no interface number 0 [ 88.592780][ T4279] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.759465][ T3549] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 88.778803][ T3549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.787231][ T3549] usb 2-1: Product: syz [ 88.791875][ T3549] usb 2-1: Manufacturer: syz [ 88.797361][ T4279] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.141: invalid block [ 88.799614][ T3549] usb 2-1: SerialNumber: syz [ 88.817619][ T3549] usb 2-1: config 0 descriptor?? [ 88.999772][ T4279] EXT4-fs (loop0): Remounting filesystem read-only [ 89.059658][ T4279] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.141: invalid indirect mapped block 4294967295 (level 1) [ 89.089153][ T4270] loop3: detected capacity change from 0 to 40427 [ 89.118687][ T3549] usb 2-1: USB disconnect, device number 2 [ 89.133252][ T4279] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.141: invalid indirect mapped block 4294967295 (level 1) [ 89.174529][ T4279] EXT4-fs (loop0): 2 truncates cleaned up [ 89.194686][ T4279] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 89.303326][ T4270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.539092][ T4270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.713347][ T4161] attempt to access beyond end of device [ 89.713347][ T4161] loop1: rw=1, want=153, limit=128 [ 89.969549][ T4309] team0: Port device team_slave_0 removed [ 90.162696][ T4316] FAULT_INJECTION: forcing a failure. [ 90.162696][ T4316] name failslab, interval 1, probability 0, space 0, times 0 [ 90.175548][ T4316] CPU: 0 PID: 4316 Comm: syz.2.149 Not tainted 5.15.162-syzkaller #0 [ 90.183624][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.193684][ T4316] Call Trace: [ 90.196958][ T4316] [ 90.199880][ T4316] dump_stack_lvl+0x1e3/0x2d0 [ 90.204562][ T4316] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 90.210197][ T4316] ? panic+0x860/0x860 [ 90.214270][ T4316] ? __might_sleep+0xc0/0xc0 [ 90.218866][ T4316] should_fail+0x38a/0x4c0 [ 90.223285][ T4316] should_failslab+0x5/0x20 [ 90.227784][ T4316] slab_pre_alloc_hook+0x53/0xc0 [ 90.232727][ T4316] __kmalloc+0x6e/0x300 [ 90.236881][ T4316] ? tomoyo_encode+0x26b/0x530 [ 90.241654][ T4316] tomoyo_encode+0x26b/0x530 [ 90.246253][ T4316] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 90.251893][ T4316] tomoyo_path_number_perm+0x225/0x810 [ 90.257359][ T4316] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 90.262852][ T4316] ? __fget_files+0x413/0x480 [ 90.267537][ T4316] security_file_ioctl+0x6d/0xa0 [ 90.272478][ T4316] __se_sys_ioctl+0x47/0x160 [ 90.277075][ T4316] do_syscall_64+0x3b/0xb0 [ 90.281491][ T4316] ? clear_bhb_loop+0x15/0x70 [ 90.286171][ T4316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.292062][ T4316] RIP: 0033:0x7fa926eeda19 [ 90.296472][ T4316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.316078][ T4316] RSP: 002b:00007fa92594d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.324523][ T4316] RAX: ffffffffffffffda RBX: 00007fa92707c038 RCX: 00007fa926eeda19 [ 90.332500][ T4316] RDX: 0000000000000000 RSI: 0000000080044584 RDI: 0000000000000003 [ 90.340472][ T4316] RBP: 00007fa92594d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.348453][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.356429][ T4316] R13: 000000000000006e R14: 00007fa92707c038 R15: 00007ffe0c468d28 [ 90.364414][ T4316] [ 90.369330][ T4316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.465038][ T4320] loop2: detected capacity change from 0 to 1024 [ 90.571865][ T4320] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 90.622897][ T4320] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 90.698836][ T4326] loop4: detected capacity change from 0 to 512 [ 90.902741][ T4326] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.929461][ T4326] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.199552][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.382117][ T4326] EXT4-fs (loop4): 1 orphan inode deleted [ 91.387880][ T4326] EXT4-fs (loop4): 1 truncate cleaned up [ 91.439682][ T4326] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 91.549624][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 91.562210][ T4326] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 91.595619][ T4326] EXT4-fs (loop4): Remounting filesystem read-only [ 91.695740][ T21] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.742031][ T21] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.774400][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 91.791109][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.856955][ T21] hub 4-1:4.0: USB hub found [ 91.929373][ T3547] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.076140][ T4334] loop0: detected capacity change from 0 to 32768 [ 92.140414][ T4334] XFS: ikeep mount option is deprecated. [ 92.178356][ T4346] loop1: detected capacity change from 0 to 32768 [ 92.213602][ T4334] XFS (loop0): Mounting V5 Filesystem [ 92.224933][ T21] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 92.240071][ T4346] XFS: ikeep mount option is deprecated. [ 92.247096][ T4349] loop2: detected capacity change from 0 to 40427 [ 92.299592][ T3547] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.311382][ T3547] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.320887][ T3547] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 92.332396][ T3547] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.335125][ T4346] XFS (loop1): Mounting V5 Filesystem [ 92.355353][ T4334] XFS (loop0): Ending clean mount [ 92.374869][ T4334] XFS (loop0): Quotacheck needed: Please wait. [ 92.415969][ T4349] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.433008][ T3547] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.475725][ T3547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.480792][ T4349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.488017][ T3547] usb 5-1: SerialNumber: syz [ 92.526489][ T4346] XFS (loop1): Ending clean mount [ 92.546481][ T4346] XFS (loop1): Quotacheck needed: Please wait. [ 92.561556][ T4334] XFS (loop0): Quotacheck: Done. [ 92.630280][ T1068] usb 4-1: USB disconnect, device number 5 [ 92.662897][ T4346] XFS (loop1): Quotacheck: Done. [ 92.668205][ T3627] XFS (loop0): Unmounting Filesystem [ 92.682932][ T4346] FAULT_INJECTION: forcing a failure. [ 92.682932][ T4346] name failslab, interval 1, probability 0, space 0, times 0 [ 92.705971][ T4346] CPU: 0 PID: 4346 Comm: syz.1.158 Not tainted 5.15.162-syzkaller #0 [ 92.714280][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.724672][ T4346] Call Trace: [ 92.728173][ T4346] [ 92.731111][ T4346] dump_stack_lvl+0x1e3/0x2d0 [ 92.735896][ T4346] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 92.741538][ T4346] ? panic+0x860/0x860 [ 92.745711][ T4346] ? __might_sleep+0xc0/0xc0 [ 92.750316][ T4346] should_fail+0x38a/0x4c0 [ 92.754745][ T4346] should_failslab+0x5/0x20 [ 92.759251][ T4346] slab_pre_alloc_hook+0x53/0xc0 [ 92.764189][ T4346] ? getname_flags+0xb8/0x4e0 [ 92.768873][ T4346] kmem_cache_alloc+0x3f/0x280 [ 92.773643][ T4346] getname_flags+0xb8/0x4e0 [ 92.778149][ T4346] ? __context_tracking_exit+0x4c/0x80 [ 92.783615][ T4346] user_path_at_empty+0x2a/0x180 [ 92.788566][ T4346] path_setxattr+0xae/0x2a0 [ 92.793077][ T4346] ? simple_xattr_list_add+0xf0/0xf0 [ 92.798373][ T4346] ? syscall_enter_from_user_mode+0x2e/0x240 [ 92.803452][ T4371] FAULT_INJECTION: forcing a failure. [ 92.803452][ T4371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.804357][ T4346] __x64_sys_setxattr+0xb7/0xd0 [ 92.822174][ T4346] do_syscall_64+0x3b/0xb0 [ 92.826582][ T4346] ? clear_bhb_loop+0x15/0x70 [ 92.831247][ T4346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.837128][ T4346] RIP: 0033:0x7f4d8efcda19 [ 92.841529][ T4346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.861206][ T4346] RSP: 002b:00007f4d8da4e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 92.869608][ T4346] RAX: ffffffffffffffda RBX: 00007f4d8f15bf60 RCX: 00007f4d8efcda19 [ 92.877566][ T4346] RDX: 0000000020000200 RSI: 0000000020000180 RDI: 00000000200000c0 [ 92.885628][ T4346] RBP: 00007f4d8da4e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.893583][ T4346] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 92.901541][ T4346] R13: 000000000000000b R14: 00007f4d8f15bf60 R15: 00007fff27ab3808 [ 92.909607][ T4346] [ 92.922480][ T4371] CPU: 1 PID: 4371 Comm: syz.2.159 Not tainted 5.15.162-syzkaller #0 [ 92.922539][ T4326] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz.4.151: lblock 0 mapped to illegal pblock 13 (length 1) [ 92.930578][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.930594][ T4371] Call Trace: [ 92.930602][ T4371] [ 92.930609][ T4371] dump_stack_lvl+0x1e3/0x2d0 [ 92.930632][ T4371] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 92.930648][ T4371] ? panic+0x860/0x860 [ 92.930666][ T4371] ? validate_chain+0x112/0x5930 [ 92.930682][ T4371] ? validate_chain+0x112/0x5930 [ 92.930701][ T4371] should_fail+0x38a/0x4c0 [ 92.930722][ T4371] _copy_from_user+0x2d/0x170 [ 92.930740][ T4371] iovec_from_user+0x13b/0x390 [ 92.930763][ T4371] __import_iovec+0x72/0x4b0 [ 92.930780][ T4371] ? __ia32_sys_shutdown+0x60/0x60 [ 92.930807][ T4371] import_iovec+0xe6/0x120 [ 92.930830][ T4371] ___sys_sendmsg+0x215/0x2e0 [ 92.930852][ T4371] ? __sys_sendmsg+0x260/0x260 [ 92.930900][ T4371] ? __fdget+0x191/0x220 [ 92.974677][ T4326] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz.4.151: lblock 0 mapped to illegal pblock 13 (length 1) [ 92.975345][ T4371] __se_sys_sendmsg+0x19a/0x260 [ 92.975380][ T4371] ? __x64_sys_sendmsg+0x80/0x80 [ 93.050326][ T4371] ? syscall_enter_from_user_mode+0x2e/0x240 [ 93.056382][ T4371] ? lockdep_hardirqs_on+0x94/0x130 [ 93.061560][ T4371] ? syscall_enter_from_user_mode+0x2e/0x240 [ 93.067521][ T4371] do_syscall_64+0x3b/0xb0 [ 93.071915][ T4371] ? clear_bhb_loop+0x15/0x70 [ 93.076571][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.082440][ T4371] RIP: 0033:0x7fa926eeda19 [ 93.086834][ T4371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.106416][ T4371] RSP: 002b:00007fa92596e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.114935][ T4371] RAX: ffffffffffffffda RBX: 00007fa92707bf60 RCX: 00007fa926eeda19 [ 93.122888][ T4371] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 93.130838][ T4371] RBP: 00007fa92596e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.138785][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.146732][ T4371] R13: 000000000000000b R14: 00007fa92707bf60 R15: 00007ffe0c468d28 [ 93.154693][ T4371] [ 93.174026][ T3508] XFS (loop1): Unmounting Filesystem [ 93.182155][ T3547] usb 5-1: 0:2 : does not exist [ 93.187499][ T3547] usb 5-1: unit 5 not found! [ 93.235145][ T4373] loop2: detected capacity change from 0 to 512 [ 93.275259][ T4373] EXT4-fs (loop2): user quota file already specified [ 93.295540][ T3547] usb 5-1: USB disconnect, device number 5 [ 93.520150][ T3709] udevd[3709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.655112][ T4383] FAULT_INJECTION: forcing a failure. [ 93.655112][ T4383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.668268][ T4383] CPU: 1 PID: 4383 Comm: syz.2.162 Not tainted 5.15.162-syzkaller #0 [ 93.676337][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 93.686386][ T4383] Call Trace: [ 93.689675][ T4383] [ 93.692596][ T4383] dump_stack_lvl+0x1e3/0x2d0 [ 93.697272][ T4383] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 93.702904][ T4383] ? panic+0x860/0x860 [ 93.706972][ T4383] ? __lock_acquire+0x1ff0/0x1ff0 [ 93.711998][ T4383] should_fail+0x38a/0x4c0 [ 93.716599][ T4383] strncpy_from_user+0x32/0x370 [ 93.721622][ T4383] getname_flags+0xf5/0x4e0 [ 93.726149][ T4383] user_path_at_empty+0x2a/0x180 [ 93.731102][ T4383] path_removexattr+0xb3/0x320 [ 93.735904][ T4383] ? bpf_send_signal_common+0x2d8/0x420 [ 93.741560][ T4383] ? listxattr+0x2e0/0x2e0 [ 93.745979][ T4383] ? release_firmware_map_entry+0x190/0x190 [ 93.751887][ T4383] ? __context_tracking_exit+0x4c/0x80 [ 93.757355][ T4383] ? preempt_schedule_notrace+0x11b/0x140 [ 93.763070][ T4383] ? preempt_schedule_common+0xd0/0xd0 [ 93.768526][ T4383] ? bpf_trace_run1+0x2f0/0x2f0 [ 93.773372][ T4383] ? print_irqtrace_events+0x210/0x210 [ 93.778826][ T4383] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 93.784896][ T4383] ? rcu_is_watching+0x11/0xa0 [ 93.789658][ T4383] __x64_sys_removexattr+0x5c/0x70 [ 93.794769][ T4383] do_syscall_64+0x3b/0xb0 [ 93.799179][ T4383] ? clear_bhb_loop+0x15/0x70 [ 93.803849][ T4383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.809734][ T4383] RIP: 0033:0x7fa926eeda19 [ 93.814143][ T4383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.833747][ T4383] RSP: 002b:00007fa92592c048 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 93.842167][ T4383] RAX: ffffffffffffffda RBX: 00007fa92707c110 RCX: 00007fa926eeda19 [ 93.850135][ T4383] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 93.858100][ T4383] RBP: 00007fa92592c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.866074][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.874051][ T4383] R13: 000000000000006e R14: 00007fa92707c110 R15: 00007ffe0c468d28 [ 93.882040][ T4383] [ 94.126927][ T3506] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 94.154889][ T3506] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 94.581206][ T4146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.581539][ T4392] loop3: detected capacity change from 0 to 1024 [ 94.670987][ T4146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.694732][ T4392] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 94.735197][ T4392] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 94.791772][ T4146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.477478][ T4146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.646346][ T4404] loop2: detected capacity change from 0 to 128 [ 95.765724][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.789614][ T4404] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 95.822404][ T4390] loop0: detected capacity change from 0 to 32768 [ 95.855214][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 95.860877][ T4390] XFS: ikeep mount option is deprecated. [ 95.864596][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 95.887904][ T4410] loop3: detected capacity change from 0 to 128 [ 96.084729][ T4390] XFS (loop0): Mounting V5 Filesystem [ 96.188978][ T4424] loop3: detected capacity change from 0 to 512 [ 96.269940][ T4403] chnl_net:caif_netlink_parms(): no params data found [ 96.322390][ T4390] XFS (loop0): Ending clean mount [ 96.345056][ T4424] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 96.382195][ T4390] XFS (loop0): Quotacheck needed: Please wait. [ 97.012425][ T4390] XFS (loop0): Quotacheck: Done. [ 97.103225][ T4390] XFS (loop0): User initiated shutdown received. [ 97.117377][ T4390] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 97.133481][ T4390] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 97.142514][ T4390] FAULT_INJECTION: forcing a failure. [ 97.142514][ T4390] name failslab, interval 1, probability 0, space 0, times 0 [ 97.156364][ T4390] CPU: 0 PID: 4390 Comm: syz.0.166 Not tainted 5.15.162-syzkaller #0 [ 97.161692][ T4447] loop3: detected capacity change from 0 to 512 [ 97.164435][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.180695][ T4390] Call Trace: [ 97.183973][ T4390] [ 97.186900][ T4390] dump_stack_lvl+0x1e3/0x2d0 [ 97.191589][ T4390] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 97.197220][ T4390] ? panic+0x860/0x860 [ 97.201291][ T4390] ? __might_sleep+0xc0/0xc0 [ 97.205886][ T4390] should_fail+0x38a/0x4c0 [ 97.210299][ T4390] should_failslab+0x5/0x20 [ 97.214788][ T4390] slab_pre_alloc_hook+0x53/0xc0 [ 97.219714][ T4390] __kmalloc+0x6e/0x300 [ 97.223850][ T4390] ? tomoyo_encode+0x26b/0x530 [ 97.228600][ T4390] tomoyo_encode+0x26b/0x530 [ 97.233181][ T4390] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 97.238828][ T4390] tomoyo_path_number_perm+0x225/0x810 [ 97.244383][ T4390] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 97.249865][ T4390] ? __fget_files+0x413/0x480 [ 97.254540][ T4390] security_file_ioctl+0x6d/0xa0 [ 97.259469][ T4390] __se_sys_ioctl+0x47/0x160 [ 97.264048][ T4390] do_syscall_64+0x3b/0xb0 [ 97.268446][ T4390] ? clear_bhb_loop+0x15/0x70 [ 97.273105][ T4390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.278977][ T4390] RIP: 0033:0x7f30c29aca19 [ 97.283372][ T4390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.302955][ T4390] RSP: 002b:00007f30c142d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.311352][ T4390] RAX: ffffffffffffffda RBX: 00007f30c2b3af60 RCX: 00007f30c29aca19 [ 97.319308][ T4390] RDX: 0000000020000080 RSI: 00000000401c5820 RDI: 0000000000000004 [ 97.327265][ T4390] RBP: 00007f30c142d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.335216][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.343165][ T4390] R13: 000000000000000b R14: 00007f30c2b3af60 R15: 00007ffd4458bb18 [ 97.351125][ T4390] [ 97.376866][ T4390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.408691][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.416067][ T4447] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.417332][ T3627] XFS (loop0): Unmounting Filesystem [ 97.434254][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.435635][ T4403] device bridge_slave_0 entered promiscuous mode [ 97.448650][ T4447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.469744][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.477056][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.497982][ T4403] device bridge_slave_1 entered promiscuous mode [ 97.508197][ T4447] EXT4-fs (loop3): 1 orphan inode deleted [ 97.514321][ T3549] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.528469][ T4447] EXT4-fs (loop3): 1 truncate cleaned up [ 97.534817][ T4447] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 97.621554][ T4447] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.699843][ T4447] EXT4-fs (loop3): Remounting filesystem read-only [ 97.704041][ T4403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.749522][ T3548] Bluetooth: hci1: command 0x0409 tx timeout [ 97.768587][ T4403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.780200][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 97.888386][ T4403] team0: Port device team_slave_0 added [ 97.907588][ T4403] team0: Port device team_slave_1 added [ 97.960655][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.989248][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.036901][ T4403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.049655][ T3549] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.060669][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.078717][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.132894][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.391280][ T4403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.681274][ T3549] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.775652][ T3549] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 98.785360][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.840578][ T3549] hub 3-1:4.0: USB hub found [ 98.889989][ T4403] device hsr_slave_0 entered promiscuous mode [ 98.905417][ T4403] device hsr_slave_1 entered promiscuous mode [ 98.939259][ T4403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.988873][ T4485] loop0: detected capacity change from 0 to 1024 [ 99.001131][ T4403] Cannot create hsr debugfs directory [ 99.039746][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.067299][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.078785][ T21] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 99.091980][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.109561][ T4485] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 99.126916][ T4485] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 99.326644][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.336536][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.345593][ T21] usb 4-1: SerialNumber: syz [ 99.353912][ T4146] device hsr_slave_0 left promiscuous mode [ 99.369497][ T3549] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 99.377723][ T4146] device hsr_slave_1 left promiscuous mode [ 99.380789][ T4494] loop1: detected capacity change from 0 to 128 [ 99.391212][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.399126][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.413315][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.421119][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.435885][ T4146] device bridge_slave_1 left promiscuous mode [ 99.442900][ T4146] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.561418][ T4146] device bridge_slave_0 left promiscuous mode [ 99.568549][ T4146] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.626326][ T4146] device veth1_macvtap left promiscuous mode [ 99.632723][ T4146] device veth0_macvtap left promiscuous mode [ 99.639067][ T4146] device veth1_vlan left promiscuous mode [ 99.704792][ T4447] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 13: comm syz.3.175: lblock 0 mapped to illegal pblock 13 (length 1) [ 99.737800][ T4146] device veth0_vlan left promiscuous mode [ 99.847318][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 99.871299][ T4458] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 13: comm syz.3.175: lblock 0 mapped to illegal pblock 13 (length 1) [ 99.962170][ T21] usb 4-1: 0:2 : does not exist [ 99.977486][ T21] usb 4-1: unit 5 not found! [ 100.027867][ T26] usb 3-1: USB disconnect, device number 3 [ 100.053915][ T4494] attempt to access beyond end of device [ 100.053915][ T4494] loop1: rw=2049, want=241, limit=128 [ 100.081671][ T21] usb 4-1: USB disconnect, device number 6 [ 100.336253][ T3609] udevd[3609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.359200][ T4503] FAULT_INJECTION: forcing a failure. [ 100.359200][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 100.372966][ T4503] CPU: 1 PID: 4503 Comm: syz.0.182 Not tainted 5.15.162-syzkaller #0 [ 100.381035][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.391083][ T4503] Call Trace: [ 100.394356][ T4503] [ 100.397281][ T4503] dump_stack_lvl+0x1e3/0x2d0 [ 100.401960][ T4503] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 100.407589][ T4503] ? panic+0x860/0x860 [ 100.411657][ T4503] ? __might_sleep+0xc0/0xc0 [ 100.416240][ T4503] ? __mutex_lock_common+0x444/0x25a0 [ 100.421613][ T4503] should_fail+0x38a/0x4c0 [ 100.426037][ T4503] should_failslab+0x5/0x20 [ 100.430545][ T4503] slab_pre_alloc_hook+0x53/0xc0 [ 100.435484][ T4503] __kmalloc_node+0x71/0x390 [ 100.440174][ T4503] ? kvmalloc_node+0x80/0x140 [ 100.444854][ T4503] ? __lock_acquire+0x1ff0/0x1ff0 [ 100.449879][ T4503] kvmalloc_node+0x80/0x140 [ 100.454386][ T4503] seq_read_iter+0x1fe/0xd10 [ 100.458978][ T4503] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 100.464967][ T4503] ? preempt_schedule_irq+0x136/0x1c0 [ 100.470342][ T4503] seq_read+0x452/0x5c0 [ 100.474502][ T4503] ? seq_open+0x140/0x140 [ 100.478849][ T4503] do_iter_read+0x4ca/0x760 [ 100.483356][ T4503] do_preadv+0x211/0x350 [ 100.487591][ T4503] ? do_writev+0x470/0x470 [ 100.492013][ T4503] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 100.497987][ T4503] ? vtime_user_exit+0x2d1/0x400 [ 100.502920][ T4503] ? syscall_enter_from_user_mode+0x2e/0x240 [ 100.508895][ T4503] ? lockdep_hardirqs_on+0x94/0x130 [ 100.514088][ T4503] ? syscall_enter_from_user_mode+0x2e/0x240 [ 100.520064][ T4503] do_syscall_64+0x3b/0xb0 [ 100.524480][ T4503] ? clear_bhb_loop+0x15/0x70 [ 100.529148][ T4503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.535035][ T4503] RIP: 0033:0x7f30c29aca19 [ 100.539452][ T4503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.559050][ T4503] RSP: 002b:00007f30c13eb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 100.567557][ T4503] RAX: ffffffffffffffda RBX: 00007f30c2b3b110 RCX: 00007f30c29aca19 [ 100.575521][ T4503] RDX: 0000000000000001 RSI: 0000000020000680 RDI: 0000000000000006 [ 100.583483][ T4503] RBP: 00007f30c13eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.591445][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.599405][ T4503] R13: 000000000000006e R14: 00007f30c2b3b110 R15: 00007ffd4458bb18 [ 100.607389][ T4503] [ 100.613933][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.638267][ T4146] team0 (unregistering): Port device team_slave_1 removed [ 100.655807][ T4146] team0 (unregistering): Port device team_slave_0 removed [ 100.679786][ T4146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.696456][ T4146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.747273][ T3735] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 100.763621][ T3735] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 100.793680][ T4146] bond0 (unregistering): Released all slaves [ 100.928376][ T4505] mmap: syz.2.184 (4505) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 101.155007][ T26] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.986137][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.996639][ T26] usb 2-1: config 0 has no interface number 0 [ 102.004258][ T3546] Bluetooth: hci1: command 0x040f tx timeout [ 102.189576][ T26] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 102.208892][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.239339][ T26] usb 2-1: Product: syz [ 102.243533][ T26] usb 2-1: Manufacturer: syz [ 102.268547][ T26] usb 2-1: SerialNumber: syz [ 102.300014][ T26] usb 2-1: config 0 descriptor?? [ 102.330636][ T26] usb 2-1: can't set config #0, error -71 [ 102.360138][ T4540] loop0: detected capacity change from 0 to 1024 [ 102.387380][ T26] usb 2-1: USB disconnect, device number 3 [ 102.457662][ T4403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.473920][ T1112] attempt to access beyond end of device [ 102.473920][ T1112] loop1: rw=1, want=153, limit=128 [ 102.516005][ T4540] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 102.541417][ T4403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.559657][ T4540] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 102.581794][ T4403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.625624][ T4403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.412892][ T4529] loop2: detected capacity change from 0 to 32768 [ 103.506116][ T4541] chnl_net:caif_netlink_parms(): no params data found [ 103.606514][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.632129][ T4566] loop0: detected capacity change from 0 to 512 [ 103.685914][ T4566] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.720801][ T4403] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.727811][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.739549][ T4566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.742188][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.829760][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.842155][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.850767][ T4566] EXT4-fs (loop0): 1 orphan inode deleted [ 103.856852][ T4566] EXT4-fs (loop0): 1 truncate cleaned up [ 103.878529][ T4566] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 103.940625][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.947714][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.985665][ T4566] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 104.002136][ T4581] FAULT_INJECTION: forcing a failure. [ 104.002136][ T4581] name failslab, interval 1, probability 0, space 0, times 0 [ 104.020960][ T4581] CPU: 1 PID: 4581 Comm: syz.1.197 Not tainted 5.15.162-syzkaller #0 [ 104.029042][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.039098][ T4581] Call Trace: [ 104.042378][ T4581] [ 104.045304][ T4581] dump_stack_lvl+0x1e3/0x2d0 [ 104.049982][ T4581] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 104.055612][ T4581] ? panic+0x860/0x860 [ 104.059676][ T4581] ? __might_sleep+0xc0/0xc0 [ 104.064290][ T4581] should_fail+0x38a/0x4c0 [ 104.067697][ T4566] EXT4-fs (loop0): Remounting filesystem read-only [ 104.068712][ T4581] should_failslab+0x5/0x20 [ 104.079693][ T4581] slab_pre_alloc_hook+0x53/0xc0 [ 104.084635][ T4581] __kmalloc_node_track_caller+0x6b/0x390 [ 104.090353][ T4581] ? netlink_sendmsg+0x6f8/0xd60 [ 104.095292][ T4581] ? kmem_cache_alloc_node+0x154/0x2c0 [ 104.100747][ T4581] ? __alloc_skb+0xdd/0x590 [ 104.105256][ T4581] ? netlink_sendmsg+0x6f8/0xd60 [ 104.110184][ T4581] __alloc_skb+0x12c/0x590 [ 104.114601][ T4581] netlink_sendmsg+0x6f8/0xd60 [ 104.119369][ T4581] ? netlink_getsockopt+0x5b0/0x5b0 [ 104.124649][ T4581] ? aa_sock_msg_perm+0x91/0x150 [ 104.129584][ T4581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 104.134862][ T4581] ? security_socket_sendmsg+0x7d/0xa0 [ 104.140311][ T4581] ? netlink_getsockopt+0x5b0/0x5b0 [ 104.145505][ T4581] kernel_sendmsg+0x205/0x2e0 [ 104.150183][ T4581] ? sock_sendmsg+0x2d0/0x2d0 [ 104.154873][ T4581] sock_no_sendpage+0x156/0x1c0 [ 104.159717][ T4581] ? __receive_sock+0x90/0x90 [ 104.164392][ T4581] ? read_lock_is_recursive+0x10/0x10 [ 104.169752][ T4581] kernel_sendpage+0x2e0/0x390 [ 104.174504][ T4581] sock_sendpage+0x7f/0xb0 [ 104.178922][ T4581] pipe_to_sendpage+0x260/0x350 [ 104.183765][ T4581] ? sock_fasync+0xf0/0xf0 [ 104.188162][ T4581] ? generic_splice_sendpage+0x220/0x220 [ 104.193953][ T4581] __splice_from_pipe+0x33b/0x890 [ 104.198965][ T4581] ? generic_splice_sendpage+0x220/0x220 [ 104.204577][ T4581] generic_splice_sendpage+0x195/0x220 [ 104.210021][ T4581] ? iter_file_splice_write+0xfa0/0xfa0 [ 104.215546][ T4581] ? common_file_perm+0x17d/0x1d0 [ 104.220564][ T4581] ? fsnotify_perm+0x67/0x5a0 [ 104.225220][ T4581] ? bpf_lsm_file_permission+0x5/0x10 [ 104.230571][ T4581] ? iter_file_splice_write+0xfa0/0xfa0 [ 104.236110][ T4581] do_splice+0xfe6/0x1790 [ 104.240433][ T4581] ? __fget_files+0x413/0x480 [ 104.245088][ T4581] ? wait_for_space+0x2d0/0x2d0 [ 104.249919][ T4581] ? __fdget+0x191/0x220 [ 104.254140][ T4581] __se_sys_splice+0x340/0x420 [ 104.258884][ T4581] ? __x64_sys_splice+0xf0/0xf0 [ 104.263714][ T4581] ? syscall_enter_from_user_mode+0x2e/0x240 [ 104.269671][ T4581] ? lockdep_hardirqs_on+0x94/0x130 [ 104.274850][ T4581] ? __x64_sys_splice+0x1d/0xf0 [ 104.279680][ T4581] do_syscall_64+0x3b/0xb0 [ 104.284078][ T4581] ? clear_bhb_loop+0x15/0x70 [ 104.288733][ T4581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.294603][ T4581] RIP: 0033:0x7f4d8efcda19 [ 104.298996][ T4581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.318577][ T4581] RSP: 002b:00007f4d8da2d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 104.326967][ T4581] RAX: ffffffffffffffda RBX: 00007f4d8f15c038 RCX: 00007f4d8efcda19 [ 104.335010][ T4581] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.342961][ T4581] RBP: 00007f4d8da2d0a0 R08: 0000000000010500 R09: 0000000000000000 [ 104.350909][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.358873][ T4581] R13: 000000000000006e R14: 00007f4d8f15c038 R15: 00007fff27ab3808 [ 104.366843][ T4581] [ 104.373440][ T3546] Bluetooth: hci1: command 0x0419 tx timeout [ 104.403326][ T4578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 104.415501][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.427276][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.436490][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.445642][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.452775][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.471869][ T3549] Bluetooth: hci2: command 0x0409 tx timeout [ 104.501813][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.602989][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.627509][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.679421][ T4015] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.803239][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.811952][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.821279][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.836355][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.846561][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.891102][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.906032][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.915265][ T4541] device bridge_slave_0 entered promiscuous mode [ 104.935357][ T4403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.981376][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.006798][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.015883][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.025648][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.037470][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.065389][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.090382][ T4541] device bridge_slave_1 entered promiscuous mode [ 105.099547][ T4015] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.117774][ T4015] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.145687][ T4015] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 105.197416][ T4015] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.231784][ T4541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.263627][ T4541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.348069][ T4541] team0: Port device team_slave_0 added [ 105.359599][ T4015] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.376136][ T4015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.383154][ T4541] team0: Port device team_slave_1 added [ 105.409489][ T4015] usb 1-1: SerialNumber: syz [ 105.494502][ T4541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.523538][ T4541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.560476][ T4541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.593386][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.610753][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.623665][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.650609][ T4541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.670573][ T4541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.672641][ T4566] EXT4-fs error (device loop0): ext4_map_blocks:601: inode #2: block 13: comm syz.0.193: lblock 0 mapped to illegal pblock 13 (length 1) [ 105.759734][ T4583] EXT4-fs error (device loop0): ext4_map_blocks:601: inode #2: block 13: comm syz.0.193: lblock 0 mapped to illegal pblock 13 (length 1) [ 105.797194][ T4541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.814227][ T4612] loop1: detected capacity change from 0 to 128 [ 105.851939][ T4015] usb 1-1: 0:2 : does not exist [ 105.856866][ T4015] usb 1-1: unit 5 not found! [ 105.890914][ T4541] device hsr_slave_0 entered promiscuous mode [ 105.910850][ T4015] usb 1-1: USB disconnect, device number 6 [ 105.914618][ T4541] device hsr_slave_1 entered promiscuous mode [ 105.963122][ T4541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.006757][ T4541] Cannot create hsr debugfs directory [ 106.045301][ T4612] attempt to access beyond end of device [ 106.045301][ T4612] loop1: rw=2049, want=217, limit=128 [ 106.080039][ T4612] attempt to access beyond end of device [ 106.080039][ T4612] loop1: rw=2049, want=249, limit=128 [ 106.207829][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.217647][ T3609] udevd[3609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.237577][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.289494][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.300494][ T4146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.325354][ T4626] loop2: detected capacity change from 0 to 1024 [ 106.326485][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.365715][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.380239][ T4403] device veth0_vlan entered promiscuous mode [ 106.381149][ T3627] EXT4-fs error (device loop0): ext4_map_blocks:601: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 106.393623][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.426241][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.432200][ T3627] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 106.452588][ T4146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.467215][ T4626] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 106.485278][ T4626] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038 (0x7fffffff) [ 106.490374][ T4403] device veth1_vlan entered promiscuous mode [ 106.577854][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.586699][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.594892][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.603797][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.614690][ T4403] device veth0_macvtap entered promiscuous mode [ 106.626989][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.649775][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 106.667830][ T4403] device veth1_macvtap entered promiscuous mode [ 106.910299][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.967591][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.202485][ T21] usb 2-1: config 0 has no interface number 0 [ 107.355474][ T4146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.396525][ T21] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 107.406138][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.455092][ T21] usb 2-1: Product: syz [ 107.466037][ T21] usb 2-1: Manufacturer: syz [ 107.484838][ T21] usb 2-1: SerialNumber: syz [ 107.505571][ T21] usb 2-1: config 0 descriptor?? [ 107.535351][ T4146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.571177][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.625328][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.665361][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.692256][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.714013][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.727030][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.737268][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.748806][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.771339][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.780952][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.797075][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.809956][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.828762][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.858105][ T21] usb 2-1: USB disconnect, device number 4 [ 107.864050][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.882078][ T4648] loop2: detected capacity change from 0 to 32768 [ 107.891273][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.902920][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.913868][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.925870][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.936438][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.947744][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.961036][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.983091][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.001971][ T4403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.014436][ T4403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.027546][ T4403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.036605][ T4403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.369961][ T3870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.385780][ T3870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.424018][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.495928][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.511612][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.530086][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.578109][ T3540] attempt to access beyond end of device [ 108.578109][ T3540] loop1: rw=1, want=153, limit=128 [ 108.720405][ T1065] Bluetooth: hci2: command 0x040f tx timeout [ 108.787682][ T4686] syz.1.207[4686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.787777][ T4686] syz.1.207[4686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.826952][ T4661] chnl_net:caif_netlink_parms(): no params data found [ 109.275617][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.302550][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.338149][ T4661] device bridge_slave_0 entered promiscuous mode [ 109.407733][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.441482][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.449565][ T4661] device bridge_slave_1 entered promiscuous mode [ 109.607941][ T4661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.638152][ T4661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.658618][ T4541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.738254][ T4541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.773207][ T4661] team0: Port device team_slave_0 added [ 109.790851][ T4541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.805804][ T4146] device hsr_slave_0 left promiscuous mode [ 109.820142][ T4146] device hsr_slave_1 left promiscuous mode [ 109.826735][ T4678] loop4: detected capacity change from 0 to 40427 [ 109.836036][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.844339][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.856985][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.864832][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.873469][ T4146] device bridge_slave_1 left promiscuous mode [ 109.879980][ T4146] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.888751][ T4146] device bridge_slave_0 left promiscuous mode [ 109.906085][ T4146] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.929038][ T4146] device veth1_macvtap left promiscuous mode [ 109.935528][ T4146] device veth0_macvtap left promiscuous mode [ 109.942088][ T4146] device veth1_vlan left promiscuous mode [ 109.946804][ T4716] loop2: detected capacity change from 0 to 1024 [ 109.948084][ T4146] device veth0_vlan left promiscuous mode [ 110.067696][ T4678] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.092997][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 110.128040][ T4716] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038 (0x7fffffff) [ 110.130077][ T4678] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.229925][ T3546] Bluetooth: hci0: command 0x0409 tx timeout [ 110.448179][ T4725] loop4: detected capacity change from 0 to 2048 [ 110.833394][ T4725] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.904127][ T4725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.996169][ T4725] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 111.035134][ T3246] Bluetooth: hci2: command 0x0419 tx timeout [ 111.057924][ T4725] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.057924][ T4725] [ 111.075534][ T4725] EXT4-fs (loop4): Total free blocks count 0 [ 111.113396][ T4725] EXT4-fs (loop4): Free/Dirty block details [ 111.115867][ T4146] team0 (unregistering): Port device team_slave_1 removed [ 111.138943][ T4725] EXT4-fs (loop4): free_blocks=2415919104 [ 111.157414][ T4146] team0 (unregistering): Port device team_slave_0 removed [ 111.163111][ T4733] loop2: detected capacity change from 0 to 2048 [ 111.173224][ T4146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.181331][ T4725] EXT4-fs (loop4): dirty_blocks=16 [ 111.186865][ T4725] EXT4-fs (loop4): Block reservation details [ 111.196097][ T4725] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 111.205854][ T4731] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 870758 with max blocks 1 with error 28 [ 111.218996][ T4731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.218996][ T4731] [ 111.220720][ T4733] UDF-fs: bad mount option "¶üàK¾•lastbl" or missing value [ 111.257799][ T4146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.440044][ T4146] bond0 (unregistering): Released all slaves [ 111.494631][ T4739] loop1: detected capacity change from 0 to 8 [ 111.507302][ T4661] team0: Port device team_slave_1 added [ 111.523638][ T4541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.536239][ T4733] IPv6: Can't replace route, no match found [ 111.563609][ T4661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.573147][ T4661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.599706][ T3246] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.639555][ T4661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.685936][ T4661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.706928][ T4661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.742836][ T4661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.815001][ T4661] device hsr_slave_0 entered promiscuous mode [ 111.831160][ T4661] device hsr_slave_1 entered promiscuous mode [ 111.859457][ T3246] usb 5-1: Using ep0 maxpacket: 8 [ 111.987524][ T4541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.001667][ T3246] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 112.004654][ T4541] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.022964][ T3246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.058397][ T4747] FAULT_INJECTION: forcing a failure. [ 112.058397][ T4747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.064876][ T3246] usb 5-1: config 0 descriptor?? [ 112.072290][ T4747] CPU: 1 PID: 4747 Comm: syz.2.216 Not tainted 5.15.162-syzkaller #0 [ 112.084598][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 112.094653][ T4747] Call Trace: [ 112.097938][ T4747] [ 112.100952][ T4747] dump_stack_lvl+0x1e3/0x2d0 [ 112.105639][ T4747] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 112.111263][ T4747] ? panic+0x860/0x860 [ 112.115359][ T4747] ? __lock_acquire+0x1ff0/0x1ff0 [ 112.120244][ T3246] hso 5-1:0.0: Can't find BULK IN endpoint [ 112.120372][ T4747] should_fail+0x38a/0x4c0 [ 112.130565][ T4747] strncpy_from_user+0x32/0x370 [ 112.135424][ T4747] getname_flags+0xf5/0x4e0 [ 112.139933][ T4747] do_mq_open+0x194/0x7d0 [ 112.144265][ T4747] ? read_lock_is_recursive+0x10/0x10 [ 112.149632][ T4747] ? mq_put_mnt+0x40/0x40 [ 112.153957][ T4747] ? __lock_acquire+0x1ff0/0x1ff0 [ 112.158960][ T4747] __x64_sys_mq_open+0x160/0x1b0 [ 112.163887][ T4747] ? proc_ipc_sem_dointvec+0x340/0x340 [ 112.169345][ T4747] ? syscall_enter_from_user_mode+0x2e/0x240 [ 112.175343][ T4747] ? lockdep_hardirqs_on+0x94/0x130 [ 112.180523][ T4747] ? syscall_enter_from_user_mode+0x2e/0x240 [ 112.186494][ T4747] do_syscall_64+0x3b/0xb0 [ 112.190975][ T4747] ? clear_bhb_loop+0x15/0x70 [ 112.195641][ T4747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.201512][ T4747] RIP: 0033:0x7fa926eeda19 [ 112.205917][ T4747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.225595][ T4747] RSP: 002b:00007fa92596e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 112.234016][ T4747] RAX: ffffffffffffffda RBX: 00007fa92707bf60 RCX: 00007fa926eeda19 [ 112.241990][ T4747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.249960][ T4747] RBP: 00007fa92596e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.257930][ T4747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.265899][ T4747] R13: 000000000000000b R14: 00007fa92707bf60 R15: 00007ffe0c468d28 [ 112.273886][ T4747] [ 112.287232][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.296075][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.337110][ T3246] usb 5-1: USB disconnect, device number 6 [ 112.339538][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.363208][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.378058][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.385197][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.417325][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.426666][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.435425][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.442550][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.452435][ T3546] Bluetooth: hci0: command 0x041b tx timeout [ 112.478551][ T4661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.504566][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.513345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.535288][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.593202][ T4661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.616771][ T4767] loop2: detected capacity change from 0 to 1024 [ 112.630990][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.651726][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.670148][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.689774][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.704212][ T4541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.735171][ T4541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.766251][ T4661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.778398][ T4767] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 112.797956][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.808698][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.817225][ T4767] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038 (0x7fffffff) [ 112.827917][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.836935][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.845607][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.893479][ T4661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.122147][ T4015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.489011][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.510499][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.550325][ T4541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.602150][ T4661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.656645][ T4661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.700398][ T4015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.765514][ T4764] loop1: detected capacity change from 0 to 40427 [ 113.766508][ T4015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.809386][ T4661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.855447][ T4541] device veth0_vlan entered promiscuous mode [ 113.871656][ T4661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.890813][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.899089][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.925088][ T4541] device veth1_vlan entered promiscuous mode [ 113.957168][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.967057][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.985773][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.006555][ T4764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.101423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.130060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.138637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.160463][ T4764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.191901][ T4541] device veth0_macvtap entered promiscuous mode [ 114.263984][ T4541] device veth1_macvtap entered promiscuous mode [ 114.333628][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.361737][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.380705][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.403434][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.439408][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.479331][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.479473][ T3549] Bluetooth: hci0: command 0x040f tx timeout [ 114.499394][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.530614][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.580652][ T4541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.606857][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.623780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.654269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.696882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.746649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.775255][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.817842][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.839637][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.879508][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.926587][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.949396][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.969385][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.988183][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.013305][ T4541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.088932][ T4661] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.108004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.116158][ T4796] loop2: detected capacity change from 0 to 256 [ 115.130321][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.154336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.178751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.235332][ T4541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.249863][ T4541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.263189][ T4796] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 115.266486][ T4541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.313170][ T4541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.338790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.355157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.397392][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.404646][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.437829][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.457155][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.477176][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.484515][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.518082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.568968][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.582931][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.614308][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.645467][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.666349][ T4789] loop4: detected capacity change from 0 to 32768 [ 115.682941][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.715368][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.751073][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.819609][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.859176][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.920594][ T4661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.954577][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.987910][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.020167][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.069225][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.080745][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.193680][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.255517][ T3870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.286203][ T3870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.329562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.431009][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.432310][ T4813] loop1: detected capacity change from 0 to 1024 [ 116.438716][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.515811][ T4661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.549730][ T4015] Bluetooth: hci0: command 0x0419 tx timeout [ 116.597669][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.620220][ T4813] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 116.656354][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.678918][ T4813] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 116.780756][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.791610][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.925390][ T4661] device veth0_vlan entered promiscuous mode [ 116.967431][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.978720][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.663591][ T4661] device veth1_vlan entered promiscuous mode [ 117.897587][ T4661] device veth0_macvtap entered promiscuous mode [ 117.920260][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.935335][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.964549][ T4661] device veth1_macvtap entered promiscuous mode [ 117.997722][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.010006][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.037822][ T4835] FAULT_INJECTION: forcing a failure. [ 118.037822][ T4835] name failslab, interval 1, probability 0, space 0, times 0 [ 118.084095][ T4835] CPU: 0 PID: 4835 Comm: syz.4.235 Not tainted 5.15.162-syzkaller #0 [ 118.092462][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 118.102617][ T4835] Call Trace: [ 118.105897][ T4835] [ 118.108825][ T4835] dump_stack_lvl+0x1e3/0x2d0 [ 118.113508][ T4835] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.119157][ T4835] ? panic+0x860/0x860 [ 118.123236][ T4835] ? __mutex_lock_common+0x444/0x25a0 [ 118.128799][ T4835] should_fail+0x38a/0x4c0 [ 118.133258][ T4835] should_failslab+0x5/0x20 [ 118.137773][ T4835] slab_pre_alloc_hook+0x53/0xc0 [ 118.142723][ T4835] kmem_cache_alloc_node+0x49/0x2c0 [ 118.147929][ T4835] ? __alloc_skb+0xdd/0x590 [ 118.152460][ T4835] __alloc_skb+0xdd/0x590 [ 118.156798][ T4835] netlink_dump+0x1ef/0xc40 [ 118.161418][ T4835] ? netlink_lookup+0x1d0/0x1d0 [ 118.166329][ T4835] netlink_recvmsg+0x69d/0x1190 [ 118.171206][ T4835] ? netlink_sendmsg+0xd60/0xd60 [ 118.176580][ T4835] ? aa_af_perm+0x350/0x350 [ 118.181108][ T4835] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 118.186637][ T4835] ? security_socket_recvmsg+0x86/0xb0 [ 118.192423][ T4835] ? netlink_sendmsg+0xd60/0xd60 [ 118.197477][ T4835] ____sys_recvmsg+0x286/0x530 [ 118.202355][ T4835] ? __sys_recvmsg_sock+0x40/0x40 [ 118.207415][ T4835] ___sys_recvmsg+0x1ec/0x690 [ 118.212139][ T4835] ? __sys_recvmsg+0x260/0x260 [ 118.216943][ T4835] ? __fdget+0x191/0x220 [ 118.221373][ T4835] __x64_sys_recvmsg+0x1dc/0x2b0 [ 118.226353][ T4835] ? ___sys_recvmsg+0x690/0x690 [ 118.231297][ T4835] ? syscall_enter_from_user_mode+0x2e/0x240 [ 118.237331][ T4835] ? lockdep_hardirqs_on+0x94/0x130 [ 118.242641][ T4835] ? syscall_enter_from_user_mode+0x2e/0x240 [ 118.248769][ T4835] do_syscall_64+0x3b/0xb0 [ 118.253516][ T4835] ? clear_bhb_loop+0x15/0x70 [ 118.258224][ T4835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.264237][ T4835] RIP: 0033:0x7f33f92bda19 [ 118.268675][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.288488][ T4835] RSP: 002b:00007f33f7d1d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 118.297129][ T4835] RAX: ffffffffffffffda RBX: 00007f33f944c038 RCX: 00007f33f92bda19 [ 118.305735][ T4835] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 118.313730][ T4835] RBP: 00007f33f7d1d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.321715][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.329931][ T4835] R13: 000000000000006e R14: 00007f33f944c038 R15: 00007ffd5c47ee38 [ 118.337932][ T4835] [ 118.487322][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.507418][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.524924][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.546017][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.586819][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.617821][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.654695][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.682794][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.714281][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.736808][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.756071][ T4661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.798616][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.814313][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.865425][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.886422][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.899050][ T4844] loop1: detected capacity change from 0 to 64 [ 118.907603][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.937261][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.967738][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.011435][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.049366][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.074815][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.095005][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.116014][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.140917][ T4661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.194276][ T4661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.232760][ T4661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.256075][ T4661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.265173][ T4661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.284814][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.031001][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.194803][ T4854] loop4: detected capacity change from 0 to 2048 [ 120.385951][ T4854] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 120.428768][ T4854] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 120.507666][ T4854] fs-verity: sha256 using implementation "sha256-avx2" [ 120.526210][ T4854] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.241: bg 0: block 345: padding at end of block bitmap is not set [ 120.554492][ T4854] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0 [ 120.568434][ T4854] fs-verity (loop4, inode 13): Error -117 building Merkle tree [ 120.612545][ T4854] syz.4.241 (4854) used greatest stack depth: 19552 bytes left [ 120.688315][ T4861] loop3: detected capacity change from 0 to 1024 [ 120.820365][ T4861] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 120.842150][ T4861] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 121.389633][ T3549] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.619468][ T3549] usb 3-1: device descriptor read/64, error -71 [ 121.864526][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.886049][ T4871] loop4: detected capacity change from 0 to 512 [ 121.911606][ T3549] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.934582][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.946868][ T4871] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 122.093485][ T4873] FAULT_INJECTION: forcing a failure. [ 122.093485][ T4873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.106618][ T4873] CPU: 0 PID: 4873 Comm: syz.1.245 Not tainted 5.15.162-syzkaller #0 [ 122.114687][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 122.124831][ T4873] Call Trace: [ 122.128105][ T4873] [ 122.131029][ T4873] dump_stack_lvl+0x1e3/0x2d0 [ 122.135728][ T4873] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 122.141354][ T4873] ? panic+0x860/0x860 [ 122.145419][ T4873] ? __lock_acquire+0x1ff0/0x1ff0 [ 122.150442][ T4873] ? memset_erms+0x9/0x10 [ 122.154765][ T4873] should_fail+0x38a/0x4c0 [ 122.159180][ T4873] strncpy_from_user+0x32/0x370 [ 122.164027][ T4873] getname_flags+0xf5/0x4e0 [ 122.168526][ T4873] ? bpf_lsm_capable+0x5/0x10 [ 122.173200][ T4873] user_path_at_empty+0x2a/0x180 [ 122.178133][ T4873] __se_sys_move_mount+0x1df/0xcf0 [ 122.183240][ T4873] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 122.188866][ T4873] ? lockdep_hardirqs_on+0x94/0x130 [ 122.194061][ T4873] ? __x64_sys_move_mount+0xc0/0xc0 [ 122.199258][ T4873] ? __x64_sys_move_mount+0x1c/0xc0 [ 122.204448][ T4873] do_syscall_64+0x3b/0xb0 [ 122.208858][ T4873] ? clear_bhb_loop+0x15/0x70 [ 122.213528][ T4873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.219415][ T4873] RIP: 0033:0x7f4d8efcda19 [ 122.223825][ T4873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.243420][ T4873] RSP: 002b:00007f4d8da0c048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 122.251840][ T4873] RAX: ffffffffffffffda RBX: 00007f4d8f15c110 RCX: 00007f4d8efcda19 [ 122.259803][ T4873] RDX: 0000000000000009 RSI: 00000000200002c0 RDI: 0000000000000009 [ 122.267765][ T4873] RBP: 00007f4d8da0c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.275726][ T4873] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 122.283861][ T4873] R13: 000000000000006e R14: 00007f4d8f15c110 R15: 00007fff27ab3808 [ 122.291838][ T4873] [ 122.385377][ T4060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.401170][ T4871] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.242: inline data xattr refers to an external xattr inode [ 122.402548][ T4060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.428563][ T4871] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.242: couldn't read orphan inode 12 (err -117) [ 122.428772][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.441463][ T4871] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 122.453036][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.709823][ T3549] usb 3-1: device descriptor read/64, error -71 [ 122.839810][ T3549] usb usb3-port1: attempt power cycle [ 124.061058][ T4905] loop3: detected capacity change from 0 to 512 [ 124.137023][ T4146] device hsr_slave_0 left promiscuous mode [ 124.147700][ T4905] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 124.182050][ T4146] device hsr_slave_1 left promiscuous mode [ 124.250564][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.258005][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.311963][ T4905] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.251: inode #1: comm syz.3.251: iget: illegal inode # [ 124.411497][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.424032][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.455373][ T4905] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.251: error while reading EA inode 1 err=-117 [ 124.468237][ T4146] device bridge_slave_1 left promiscuous mode [ 124.476082][ T4146] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.500086][ T4905] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.532229][ T4146] device bridge_slave_0 left promiscuous mode [ 124.549826][ T4146] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.594489][ T4905] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.251: inode #1: comm syz.3.251: iget: illegal inode # [ 124.627539][ T4916] loop0: detected capacity change from 0 to 64 [ 124.666476][ T4146] device veth1_macvtap left promiscuous mode [ 124.686981][ T4146] device veth0_macvtap left promiscuous mode [ 124.715645][ T4146] device veth1_vlan left promiscuous mode [ 124.719411][ T4905] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.251: error while reading EA inode 1 err=-117 [ 124.721556][ T4146] device veth0_vlan left promiscuous mode [ 124.740085][ T4905] EXT4-fs (loop3): 1 orphan inode deleted [ 124.759404][ T4905] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 125.472100][ T4905] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.251: deleted inode referenced: 15 [ 125.541841][ T4922] FAULT_INJECTION: forcing a failure. [ 125.541841][ T4922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.569003][ T4922] CPU: 1 PID: 4922 Comm: syz.1.255 Not tainted 5.15.162-syzkaller #0 [ 125.577102][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.587159][ T4922] Call Trace: [ 125.590441][ T4922] [ 125.593369][ T4922] dump_stack_lvl+0x1e3/0x2d0 [ 125.598051][ T4922] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 125.603699][ T4922] ? panic+0x860/0x860 [ 125.607784][ T4922] should_fail+0x38a/0x4c0 [ 125.612206][ T4922] _copy_from_user+0x2d/0x170 [ 125.616882][ T4922] kstrtouint_from_user+0xca/0x2a0 [ 125.621992][ T4922] ? kstrtol_from_user+0x310/0x310 [ 125.627108][ T4922] ? read_lock_is_recursive+0x10/0x10 [ 125.632488][ T4922] proc_fail_nth_write+0xa6/0x290 [ 125.637510][ T4922] ? rcu_read_lock_bh_held+0x110/0x110 [ 125.642971][ T4922] ? proc_fail_nth_read+0x210/0x210 [ 125.648173][ T4922] ? proc_fail_nth_read+0x210/0x210 [ 125.653375][ T4922] vfs_write+0x30c/0xe50 [ 125.657635][ T4922] ? file_end_write+0x250/0x250 [ 125.662492][ T4922] ? __fget_files+0x413/0x480 [ 125.667181][ T4922] ? mutex_lock_nested+0x17/0x20 [ 125.672116][ T4922] ? __fdget_pos+0x2cb/0x380 [ 125.676724][ T4922] ? ksys_write+0x77/0x2c0 [ 125.681144][ T4922] ksys_write+0x1a2/0x2c0 [ 125.685473][ T4922] ? print_irqtrace_events+0x210/0x210 [ 125.690938][ T4922] ? __ia32_sys_read+0x80/0x80 [ 125.695705][ T4922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 125.701685][ T4922] ? lockdep_hardirqs_on+0x94/0x130 [ 125.706887][ T4922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 125.712871][ T4922] do_syscall_64+0x3b/0xb0 [ 125.717275][ T4922] ? clear_bhb_loop+0x15/0x70 [ 125.721939][ T4922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.727821][ T4922] RIP: 0033:0x7f4d8efcc59f [ 125.732223][ T4922] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 125.751814][ T4922] RSP: 002b:00007f4d8da4e040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.760244][ T4922] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d8efcc59f [ 125.768207][ T4922] RDX: 0000000000000001 RSI: 00007f4d8da4e0b0 RDI: 0000000000000003 [ 125.776160][ T4922] RBP: 00007f4d8da4e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.784278][ T4922] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 125.792345][ T4922] R13: 000000000000000b R14: 00007f4d8f15bf60 R15: 00007fff27ab3808 [ 125.800319][ T4922] [ 126.358806][ T4146] team0 (unregistering): Port device team_slave_1 removed [ 126.510798][ T4146] team0 (unregistering): Port device team_slave_0 removed [ 126.576559][ T4146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.609644][ T4146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.797816][ T4146] bond0 (unregistering): Released all slaves [ 126.941297][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 127.625007][ T4953] FAULT_INJECTION: forcing a failure. [ 127.625007][ T4953] name failslab, interval 1, probability 0, space 0, times 0 [ 127.637946][ T4953] CPU: 1 PID: 4953 Comm: syz.1.264 Not tainted 5.15.162-syzkaller #0 [ 127.646016][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 127.656068][ T4953] Call Trace: [ 127.659340][ T4953] [ 127.662263][ T4953] dump_stack_lvl+0x1e3/0x2d0 [ 127.666934][ T4953] ? __rcu_read_unlock+0x92/0x100 [ 127.671954][ T4953] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 127.677581][ T4953] ? panic+0x860/0x860 [ 127.681641][ T4953] ? stack_trace_save+0x1c0/0x1c0 [ 127.686662][ T4953] ? __kernel_text_address+0x94/0x100 [ 127.692032][ T4953] ? unwind_get_return_address+0x49/0x80 [ 127.697659][ T4953] ? arch_stack_walk+0xf3/0x140 [ 127.702524][ T4953] should_fail+0x38a/0x4c0 [ 127.707003][ T4953] should_failslab+0x5/0x20 [ 127.711513][ T4953] slab_pre_alloc_hook+0x53/0xc0 [ 127.716450][ T4953] ? radix_tree_node_alloc+0x196/0x3b0 [ 127.721906][ T4953] kmem_cache_alloc+0x3f/0x280 [ 127.726676][ T4953] radix_tree_node_alloc+0x196/0x3b0 [ 127.731969][ T4953] idr_get_free+0x292/0xab0 [ 127.736484][ T4953] idr_alloc_cyclic+0x1ec/0x5d0 [ 127.741341][ T4953] ? idr_alloc+0x2f0/0x2f0 [ 127.745751][ T4953] ? do_raw_spin_lock+0x14a/0x370 [ 127.750777][ T4953] ? lockdep_softirqs_off+0x420/0x420 [ 127.756162][ T4953] ipc_addid+0x410/0x18a0 [ 127.760489][ T4953] ? __kmalloc_node+0x199/0x390 [ 127.765343][ T4953] ? __raw_spin_lock_init+0x41/0x100 [ 127.770621][ T4953] newary+0x4e7/0xb30 [ 127.774610][ T4953] ipcget+0x1af/0xc80 [ 127.778587][ T4953] ? release_firmware_map_entry+0x190/0x190 [ 127.784680][ T4953] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 127.790673][ T4953] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 127.796309][ T4953] ? preempt_schedule_notrace+0x11b/0x140 [ 127.802031][ T4953] ? preempt_schedule_common+0xd0/0xd0 [ 127.807489][ T4953] __x64_sys_semget+0x20c/0x2d0 [ 127.812339][ T4953] ? sem_more_checks+0x90/0x90 [ 127.817095][ T4953] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 127.823162][ T4953] ? rcu_is_watching+0x11/0xa0 [ 127.828099][ T4953] ? syscall_enter_from_user_mode+0x14b/0x240 [ 127.834171][ T4953] do_syscall_64+0x3b/0xb0 [ 127.838583][ T4953] ? clear_bhb_loop+0x15/0x70 [ 127.843262][ T4953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.849150][ T4953] RIP: 0033:0x7f4d8efcda19 [ 127.853559][ T4953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.873159][ T4953] RSP: 002b:00007f4d8da0c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 127.881576][ T4953] RAX: ffffffffffffffda RBX: 00007f4d8f15c110 RCX: 00007f4d8efcda19 [ 127.889547][ T4953] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 127.897513][ T4953] RBP: 00007f4d8da0c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.905478][ T4953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.913445][ T4953] R13: 000000000000006e R14: 00007f4d8f15c110 R15: 00007fff27ab3808 [ 127.921436][ T4953] [ 128.082958][ T4955] FAULT_INJECTION: forcing a failure. [ 128.082958][ T4955] name failslab, interval 1, probability 0, space 0, times 0 [ 128.128385][ T4955] CPU: 1 PID: 4955 Comm: syz.2.265 Not tainted 5.15.162-syzkaller #0 [ 128.136487][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 128.146543][ T4955] Call Trace: [ 128.149821][ T4955] [ 128.152748][ T4955] dump_stack_lvl+0x1e3/0x2d0 [ 128.157431][ T4955] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 128.163066][ T4955] ? panic+0x860/0x860 [ 128.167139][ T4955] ? __might_sleep+0xc0/0xc0 [ 128.171719][ T4955] should_fail+0x38a/0x4c0 [ 128.176123][ T4955] should_failslab+0x5/0x20 [ 128.180608][ T4955] slab_pre_alloc_hook+0x53/0xc0 [ 128.185528][ T4955] __kmalloc+0x6e/0x300 [ 128.189662][ T4955] ? tomoyo_encode+0x26b/0x530 [ 128.194414][ T4955] tomoyo_encode+0x26b/0x530 [ 128.198991][ T4955] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 128.204611][ T4955] tomoyo_path_number_perm+0x225/0x810 [ 128.210055][ T4955] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 128.215506][ T4955] ? __lock_acquire+0x1ff0/0x1ff0 [ 128.220527][ T4955] ? __fget_files+0x413/0x480 [ 128.225193][ T4955] security_file_ioctl+0x6d/0xa0 [ 128.230124][ T4955] __se_sys_ioctl+0x47/0x160 [ 128.234700][ T4955] do_syscall_64+0x3b/0xb0 [ 128.239092][ T4955] ? clear_bhb_loop+0x15/0x70 [ 128.243750][ T4955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.249622][ T4955] RIP: 0033:0x7fa926eeda19 [ 128.254018][ T4955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.273603][ T4955] RSP: 002b:00007fa92596e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.281998][ T4955] RAX: ffffffffffffffda RBX: 00007fa92707bf60 RCX: 00007fa926eeda19 [ 128.289948][ T4955] RDX: 0000000000000000 RSI: 000000004008744b RDI: 0000000000000003 [ 128.297899][ T4955] RBP: 00007fa92596e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.305848][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.313798][ T4955] R13: 000000000000000b R14: 00007fa92707bf60 R15: 00007ffe0c468d28 [ 128.321761][ T4955] [ 128.327685][ T4955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.734865][ T3544] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.851611][ T3547] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 128.922939][ T4969] loop4: detected capacity change from 0 to 2048 [ 129.027473][ T4970] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.073141][ T3547] usb 2-1: device descriptor read/64, error -71 [ 129.113328][ T4969] attempt to access beyond end of device [ 129.113328][ T4969] loop4: rw=0, want=343245196361802, limit=2048 [ 129.129457][ T3544] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.149587][ T4969] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 129.158372][ T3544] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.178184][ T3544] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 129.199390][ T3544] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 129.267556][ T4959] loop3: detected capacity change from 0 to 40427 [ 129.299053][ T4959] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.319620][ T3544] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.359070][ T3544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.369369][ T3547] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 129.377702][ T4959] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.393560][ T3544] usb 1-1: SerialNumber: syz [ 129.402309][ T4959] F2FS-fs (loop3): invalid crc value [ 129.464103][ T4959] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.560354][ T3547] usb 2-1: device descriptor read/64, error -71 [ 129.589208][ T4403] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 6 already freed [ 129.616804][ T4959] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.626452][ T4959] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.649908][ T4403] ------------[ cut here ]------------ [ 129.656003][ T4403] kernel BUG at fs/inode.c:599! [ 129.661542][ T4403] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 129.667631][ T4403] CPU: 1 PID: 4403 Comm: syz-executor Not tainted 5.15.162-syzkaller #0 [ 129.676029][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 129.686165][ T4403] RIP: 0010:evict+0x615/0x620 [ 129.691114][ T4403] Code: fe c1 38 c1 0f 8c de fc ff ff 4c 89 ff e8 d3 ff ec ff e9 d1 fc ff ff e8 f9 30 a3 ff 0f 0b e8 f2 30 a3 ff 0f 0b e8 eb 30 a3 ff <0f> 0b e8 e4 30 a3 ff 0f 0b 66 90 41 56 53 49 89 fe e8 d5 30 a3 ff [ 129.711322][ T4403] RSP: 0018:ffffc90003317ae8 EFLAGS: 00010293 [ 129.717476][ T4403] RAX: ffffffff81dd2a75 RBX: 0000000000000064 RCX: ffff888024d51dc0 [ 129.725446][ T4403] RDX: 0000000000000000 RSI: 0000000000000064 RDI: 0000000000000060 [ 129.733624][ T4403] RBP: ffff888062cea850 R08: ffffffff81dd2906 R09: 0000000000000003 [ 129.742244][ T4403] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888062cea7f0 [ 129.750301][ T4403] R13: ffff888062cea850 R14: dffffc0000000000 R15: ffff888062cea7c8 [ 129.758390][ T4403] FS: 00005555569cc500(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 129.767750][ T4403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.774524][ T4403] CR2: 0000001b2edf8ff8 CR3: 00000000682cc000 CR4: 00000000003506e0 [ 129.783206][ T4403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.791679][ T4403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.800560][ T4403] Call Trace: [ 129.803862][ T4403] [ 129.806787][ T4403] ? __die_body+0x5e/0xa0 [ 129.811262][ T4403] ? die+0x83/0xb0 [ 129.814991][ T4403] ? do_trap+0x11e/0x350 [ 129.819466][ T4403] ? evict+0x615/0x620 [ 129.823613][ T4403] ? evict+0x615/0x620 [ 129.827695][ T4403] ? do_error_trap+0x13d/0x1e0 [ 129.832561][ T4403] ? evict+0x615/0x620 [ 129.836628][ T4403] ? do_int3+0x30/0x30 [ 129.840871][ T4403] ? rcu_is_watching+0x11/0xa0 [ 129.845914][ T4403] ? handle_invalid_op+0x2c/0x40 [ 129.851262][ T4403] ? evict+0x615/0x620 [ 129.855305][ T4403] ? exc_invalid_op+0x2f/0x40 [ 129.860147][ T4403] ? asm_exc_invalid_op+0x16/0x20 [ 129.865150][ T4403] ? evict+0x4a6/0x620 [ 129.869192][ T4403] ? evict+0x615/0x620 [ 129.873323][ T4403] ? evict+0x615/0x620 [ 129.877462][ T4403] ? evict+0x615/0x620 [ 129.881509][ T4403] nilfs_put_root+0x93/0xb0 [ 129.886087][ T4403] nilfs_detach_log_writer+0x8c7/0xbe0 [ 129.891897][ T4403] ? nilfs_attach_log_writer+0x880/0x880 [ 129.897960][ T4403] ? hook_sb_delete+0xa05/0xb30 [ 129.903075][ T4403] ? init_wait_entry+0xd0/0xd0 [ 129.907861][ T4403] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 129.913651][ T4403] ? clear_inode+0x150/0x150 [ 129.918831][ T4403] ? nilfs_free_inode+0x70/0x70 [ 129.924182][ T4403] nilfs_put_super+0x49/0x150 [ 129.928845][ T4403] ? nilfs_free_inode+0x70/0x70 [ 129.933771][ T4403] generic_shutdown_super+0x136/0x2c0 [ 129.939465][ T4403] kill_block_super+0x7a/0xe0 [ 129.944140][ T4403] deactivate_locked_super+0xa0/0x110 [ 129.949492][ T4403] cleanup_mnt+0x44e/0x500 [ 129.953937][ T4403] ? lockdep_hardirqs_on+0x94/0x130 [ 129.959115][ T4403] task_work_run+0x129/0x1a0 [ 129.963707][ T4403] exit_to_user_mode_loop+0x106/0x130 [ 129.969329][ T4403] exit_to_user_mode_prepare+0xb1/0x140 [ 129.975025][ T4403] syscall_exit_to_user_mode+0x5d/0x240 [ 129.980667][ T4403] do_syscall_64+0x47/0xb0 [ 129.985063][ T4403] ? clear_bhb_loop+0x15/0x70 [ 129.989718][ T4403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.995704][ T4403] RIP: 0033:0x7f33f92bed47 [ 130.000101][ T4403] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 130.020045][ T4403] RSP: 002b:00007ffd5c47e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 130.028521][ T4403] RAX: 0000000000000000 RBX: 00007f33f932b515 RCX: 00007f33f92bed47 [ 130.036469][ T4403] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5c47e100 [ 130.044589][ T4403] RBP: 00007ffd5c47e100 R08: 0000000000000000 R09: 0000000000000000 [ 130.052660][ T4403] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5c47f1c0 [ 130.060606][ T4403] R13: 00007f33f932b515 R14: 000000000001f9be R15: 000000000001f745 [ 130.068556][ T4403] [ 130.071558][ T4403] Modules linked in: [ 130.075595][ T4403] ---[ end trace 710e6f6d54c01f45 ]--- [ 130.078048][ T3547] usb usb2-port1: attempt power cycle [ 130.081067][ T4403] RIP: 0010:evict+0x615/0x620 [ 130.090865][ T3544] usb 1-1: 0:2 : does not exist [ 130.091206][ T4403] Code: fe c1 38 c1 0f 8c de fc ff ff 4c 89 ff e8 d3 ff ec ff e9 d1 fc ff ff e8 f9 30 a3 ff 0f 0b e8 f2 30 a3 ff 0f 0b e8 eb 30 a3 ff <0f> 0b e8 e4 30 a3 ff 0f 0b 66 90 41 56 53 49 89 fe e8 d5 30 a3 ff [ 130.096130][ T3544] usb 1-1: unit 5 not found! [ 130.115846][ T4403] RSP: 0018:ffffc90003317ae8 EFLAGS: 00010293 [ 130.115873][ T4403] RAX: ffffffff81dd2a75 RBX: 0000000000000064 RCX: ffff888024d51dc0 [ 130.115884][ T4403] RDX: 0000000000000000 RSI: 0000000000000064 RDI: 0000000000000060 [ 130.115893][ T4403] RBP: ffff888062cea850 R08: ffffffff81dd2906 R09: 0000000000000003 [ 130.115903][ T4403] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888062cea7f0 [ 130.115918][ T4403] R13: ffff888062cea850 R14: dffffc0000000000 R15: ffff888062cea7c8 [ 130.115929][ T4403] FS: 00005555569cc500(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 130.115942][ T4403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.115953][ T4403] CR2: 0000001b2edf8ff8 CR3: 00000000682cc000 CR4: 00000000003506e0 [ 130.115967][ T4403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.115976][ T4403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.116000][ T4403] Kernel panic - not syncing: Fatal exception [ 130.116486][ T4403] Kernel Offset: disabled [ 130.218599][ T4403] Rebooting in 86400 seconds..