last executing test programs: 10.03302133s ago: executing program 4 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 9.9188172s ago: executing program 0 (id=289): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000c0003"], 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x91) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3\x89f\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0xa400, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x90}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000900)={0x1, 0x0, @stop_pts=0x81}) 9.836012747s ago: executing program 4 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.877715775s ago: executing program 4 (id=293): r0 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000780)={0x8, 0x0, '\x00', {0x0, @reserved}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYRES8=r1], &(0x7f0000000380)=""/140, 0x4c, 0x8c, 0x80002001}, 0x20) r3 = socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c391be71d3a811fa472271be417d7b2b528"], 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0xd, @empty, 0x4e22, 0x2, 'none\x00', 0x22, 0x858, 0x71}, 0x2c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x0, 0xffffffffffffffff) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 8.705900869s ago: executing program 0 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xb) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x238}}, 0x8800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.69872786s ago: executing program 1 (id=295): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="9e1a9d19bd1a"}, 0x80) 8.563165191s ago: executing program 1 (id=296): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1", 0x95}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001680)=""/4103, 0x1007}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0xb4}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="240000000000000000000000000000000000000395d3275ab21852d34a762be671afac90e550666d2df81da5f2b059e83f14ec1211321683234b116c789c477af54032a0e6dce50509c96fa9f9ffffffffffffffcccf000000"], 0x28}, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x7d6, 0x101}}, 0x30) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0xc1e, &(0x7f00000026c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x80000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x7800}], 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x52142, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r6, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)='p', 0x8200, 0x600}]) 7.766760856s ago: executing program 4 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f089061be0ffff00fe4000631177fbac141416e000000162079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.752188617s ago: executing program 0 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 7.639366256s ago: executing program 4 (id=301): r0 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xe8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb8, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0xe]}}]}}]}, 0xe8}}, 0x0) 7.606392849s ago: executing program 0 (id=303): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000c0003"], 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x91) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3\x89f\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0xa400, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x90}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000900)={0x1, 0x0, @stop_pts=0x81}) 2.08645883s ago: executing program 0 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 1) 2.074071431s ago: executing program 4 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xb) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x238}}, 0x8800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.000952737s ago: executing program 1 (id=310): r0 = syz_open_dev$video(0x0, 0x9, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000780)={0x8, 0x0, '\x00', {0x0, @reserved}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYRES8=r1], &(0x7f0000000380)=""/140, 0x4c, 0x8c, 0x80002001}, 0x20) r3 = socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c391be71d3a811fa472271be417d7b2b528"], 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0xd, @empty, 0x4e22, 0x2, 'none\x00', 0x22, 0x858, 0x71}, 0x2c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x0, 0xffffffffffffffff) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 1.999249717s ago: executing program 2 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f089061be0ffff00fe4000631177fbac141416e000000162079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.854072009s ago: executing program 2 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.817026782s ago: executing program 0 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.568935682s ago: executing program 2 (id=314): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff5000/0x1000)=nil, 0x5000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec7000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil) 1.404844636s ago: executing program 2 (id=315): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1406, 0x2, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000}, 0x20040000) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x9, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) 1.240756539s ago: executing program 2 (id=316): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x54fe, &(0x7f0000006000)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3000000}, 0x5000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x806}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x7c}}, 0x8880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.155475926s ago: executing program 3 (id=214): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f000035a000/0x4000)=nil, 0xffffdfca6000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '#'}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x9, "111fad2ea74348"}, @generic={0x0, 0xb, "e58d4e2e04257603cb"}]}}}}}}}}, 0x0) 1.029887617s ago: executing program 3 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000880)="52e6e37165", 0x5}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, &(0x7f00000007c0)=0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r4, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x13, &(0x7f00000000c0)={@local}, 0x14) connect$can_j1939(r8, &(0x7f0000000080)={0x1d, r9}, 0x18) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000300)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x2, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @null]}) r11 = dup(r8) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000000000000000000000003cd8aab25b9c5f288dd5f99d22621000000c27462998bf9e11e4a39f4ac1c421ec7113b165ecd7fb5db2b58666763eb6515485e1c7da4252"], 0x14}}, 0x0) read$FUSE(r11, &(0x7f0000007c80)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0xd, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x48) 907.386906ms ago: executing program 1 (id=318): r0 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xe8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb8, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0xe]}}]}}]}, 0xe8}}, 0x0) 778.506397ms ago: executing program 1 (id=319): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000c0003"], 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x91) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3\x89f\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0xa400, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x90}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000900)={0x1, 0x0, @stop_pts=0x81}) 670.067845ms ago: executing program 3 (id=320): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="d9", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002040)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000002080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000940), 0x8) 555.256715ms ago: executing program 3 (id=321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f089061be0ffff00fe4000631177fbac141416e000000162079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 434.769145ms ago: executing program 1 (id=322): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x816, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x552a, &(0x7f0000000c40)="$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") 386.134799ms ago: executing program 3 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 131.659689ms ago: executing program 3 (id=324): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff5000/0x1000)=nil, 0x5000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec7000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil) 0s ago: executing program 2 (id=325): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1406, 0x2, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000}, 0x20040000) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x9, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) kernel console output (not intermixed with test programs): ady [ 41.022017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.025152][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.041880][ T4313] device veth1_vlan entered promiscuous mode [ 41.075705][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.078657][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.082365][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.093138][ T4312] Bluetooth: hci1: command tx timeout [ 41.093667][ T4308] Bluetooth: hci3: command tx timeout [ 41.094758][ T4312] Bluetooth: hci2: command tx timeout [ 41.112029][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.112311][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.115066][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.119369][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.122029][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.122058][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.127317][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.130116][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.133184][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.137428][ T4313] device veth0_macvtap entered promiscuous mode [ 41.141133][ T4310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.149613][ T4310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.152107][ T4310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.156125][ T4310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.162015][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.164249][ T4312] Bluetooth: hci4: command tx timeout [ 41.168942][ T4313] device veth1_macvtap entered promiscuous mode [ 41.210809][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.213813][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.216658][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.229838][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.232058][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.232990][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.237969][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.249118][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.254028][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.256773][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.259636][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.265656][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.269812][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.272243][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.275971][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.278719][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.281542][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.293336][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.296255][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.298890][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.301662][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.315829][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.321772][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.325552][ T4305] device veth0_vlan entered promiscuous mode [ 41.329733][ T4313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.332069][ T4313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.342311][ T4313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.345330][ T4313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.350678][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.353859][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.356376][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.359211][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.373921][ T1645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.376451][ T1645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.400585][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.409022][ T4305] device veth1_vlan entered promiscuous mode [ 41.443563][ T1645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.445967][ T1645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.449717][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.493244][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.496157][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.513615][ T4305] device veth0_macvtap entered promiscuous mode [ 41.531169][ T4305] device veth1_macvtap entered promiscuous mode [ 41.561160][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.578187][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.580979][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.584575][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.587356][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.590379][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.598171][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.609733][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.613621][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.616343][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.620102][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.636785][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.639116][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.656709][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.659671][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.662399][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.673341][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.676058][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.678805][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.707106][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.720519][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 41.723663][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.726259][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.729441][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.746516][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.749014][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.751439][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.757146][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.761803][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.773194][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.779471][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.827344][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.830348][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.851499][ T4304] device veth0_vlan entered promiscuous mode [ 41.865566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.868658][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.883138][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.885704][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.889210][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.891974][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.911000][ T4304] device veth1_vlan entered promiscuous mode [ 41.919662][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.923288][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.969557][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.973640][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.976639][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.978341][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.981609][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.991105][ T4304] device veth0_macvtap entered promiscuous mode [ 42.002059][ T4394] FAULT_INJECTION: forcing a failure. [ 42.002059][ T4394] name failslab, interval 1, probability 0, space 0, times 1 [ 42.002521][ T4304] device veth1_macvtap entered promiscuous mode [ 42.013368][ T4394] CPU: 1 PID: 4394 Comm: syz.2.3 Not tainted 6.1.102-syzkaller #0 [ 42.015650][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.018452][ T4394] Call trace: [ 42.019329][ T4394] dump_backtrace+0x1c8/0x1f4 [ 42.020635][ T4394] show_stack+0x2c/0x3c [ 42.021650][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.021800][ T4394] dump_stack_lvl+0x108/0x170 [ 42.021819][ T4394] dump_stack+0x1c/0x5c [ 42.021828][ T4394] should_fail_ex+0x3c0/0x51c [ 42.024554][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.025080][ T4394] __should_failslab+0xc8/0x128 [ 42.030330][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.030838][ T4394] should_failslab+0x10/0x28 [ 42.034209][ T4394] slab_pre_alloc_hook+0x6c/0x33c [ 42.035687][ T4394] kmem_cache_alloc_lru+0x64/0x2f8 [ 42.037202][ T4394] sock_alloc_inode+0x2c/0xcc [ 42.038573][ T4394] new_inode_pseudo+0x68/0x1d0 [ 42.039934][ T4394] do_accept+0x16c/0x5d0 [ 42.041126][ T4394] __sys_accept4+0xb4/0x12c [ 42.042388][ T4394] __arm64_sys_accept4+0x9c/0xb8 [ 42.043786][ T4394] invoke_syscall+0x98/0x2c0 [ 42.045100][ T4394] el0_svc_common+0x138/0x258 [ 42.046417][ T4394] do_el0_svc+0x64/0x218 [ 42.047613][ T4394] el0_svc+0x58/0x168 [ 42.048771][ T4394] el0t_64_sync_handler+0x84/0xf0 [ 42.050175][ T4394] el0t_64_sync+0x18c/0x190 [ 42.069092][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.101494][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.112926][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.127041][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.136706][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.148259][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.151593][ T4402] FAULT_INJECTION: forcing a failure. [ 42.151593][ T4402] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.158821][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.175384][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.178444][ T4402] CPU: 0 PID: 4402 Comm: syz.0.8 Not tainted 6.1.102-syzkaller #0 [ 42.180572][ T4402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.183366][ T4402] Call trace: [ 42.184299][ T4402] dump_backtrace+0x1c8/0x1f4 [ 42.185567][ T4402] show_stack+0x2c/0x3c [ 42.186829][ T4402] dump_stack_lvl+0x108/0x170 [ 42.188111][ T4402] dump_stack+0x1c/0x5c [ 42.189325][ T4402] should_fail_ex+0x3c0/0x51c [ 42.190854][ T4402] should_fail+0x14/0x24 [ 42.192210][ T4402] should_fail_usercopy+0x20/0x30 [ 42.193776][ T4402] move_addr_to_kernel+0xa8/0x270 [ 42.195206][ T4402] __sys_bind+0x140/0x284 [ 42.196452][ T4402] __arm64_sys_bind+0x7c/0x94 [ 42.196797][ T4404] sctp: [Deprecated]: syz.2.9 (pid 4404) Use of int in max_burst socket option. [ 42.196797][ T4404] Use struct sctp_assoc_value instead [ 42.197857][ T4402] invoke_syscall+0x98/0x2c0 [ 42.197883][ T4402] el0_svc_common+0x138/0x258 [ 42.204679][ T4402] do_el0_svc+0x64/0x218 [ 42.205910][ T4402] el0_svc+0x58/0x168 [ 42.207139][ T4402] el0t_64_sync_handler+0x84/0xf0 [ 42.208591][ T4402] el0t_64_sync+0x18c/0x190 [ 42.218090][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.238833][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.242183][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.247325][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.252182][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.257106][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.260146][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.275538][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.284462][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.287210][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.290090][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.313950][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.331361][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.338942][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.368665][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.380882][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 42.398589][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.401285][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.412975][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.524903][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 42.530097][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 42.548187][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.550472][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.583991][ T4425] team0: Device vlan2 is already an upper device of the team interface [ 42.609052][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.627765][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.630183][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.634212][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.687561][ T4429] FAULT_INJECTION: forcing a failure. [ 42.687561][ T4429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.704270][ T4429] CPU: 1 PID: 4429 Comm: syz.1.16 Not tainted 6.1.102-syzkaller #0 [ 42.706599][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.709388][ T4429] Call trace: [ 42.710321][ T4429] dump_backtrace+0x1c8/0x1f4 [ 42.711639][ T4429] show_stack+0x2c/0x3c [ 42.712838][ T4429] dump_stack_lvl+0x108/0x170 [ 42.714151][ T4429] dump_stack+0x1c/0x5c [ 42.715388][ T4429] should_fail_ex+0x3c0/0x51c [ 42.716679][ T4429] should_fail+0x14/0x24 [ 42.717848][ T4429] should_fail_usercopy+0x20/0x30 [ 42.719373][ T4429] copy_msghdr_from_user+0xb8/0x59c [ 42.720950][ T4429] __sys_sendmsg+0x200/0x33c [ 42.722268][ T4429] __arm64_sys_sendmsg+0x80/0x94 [ 42.723716][ T4429] invoke_syscall+0x98/0x2c0 [ 42.725020][ T4429] el0_svc_common+0x138/0x258 [ 42.726274][ T4429] do_el0_svc+0x64/0x218 [ 42.727451][ T4429] el0_svc+0x58/0x168 [ 42.728562][ T4429] el0t_64_sync_handler+0x84/0xf0 [ 42.729983][ T4429] el0t_64_sync+0x18c/0x190 [ 42.930756][ T4448] FAULT_INJECTION: forcing a failure. [ 42.930756][ T4448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.934835][ T4448] CPU: 0 PID: 4448 Comm: syz.1.20 Not tainted 6.1.102-syzkaller #0 [ 42.937085][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.939911][ T4448] Call trace: [ 42.940844][ T4448] dump_backtrace+0x1c8/0x1f4 [ 42.942224][ T4448] show_stack+0x2c/0x3c [ 42.943492][ T4448] dump_stack_lvl+0x108/0x170 [ 42.944877][ T4448] dump_stack+0x1c/0x5c [ 42.946062][ T4448] should_fail_ex+0x3c0/0x51c [ 42.947378][ T4448] should_fail+0x14/0x24 [ 42.948576][ T4448] should_fail_usercopy+0x20/0x30 [ 42.949995][ T4448] copy_msghdr_from_user+0xb8/0x59c [ 42.951444][ T4448] __sys_sendmsg+0x200/0x33c [ 42.952785][ T4448] __arm64_sys_sendmsg+0x80/0x94 [ 42.954140][ T4448] invoke_syscall+0x98/0x2c0 [ 42.955401][ T4448] el0_svc_common+0x138/0x258 [ 42.956742][ T4448] do_el0_svc+0x64/0x218 [ 42.957966][ T4448] el0_svc+0x58/0x168 [ 42.959037][ T4448] el0t_64_sync_handler+0x84/0xf0 [ 42.960561][ T4448] el0t_64_sync+0x18c/0x190 [ 43.037228][ T4432] loop0: detected capacity change from 0 to 32768 [ 43.040510][ T4450] binder: 4449:4450 ioctl 40046210 0 returned -14 [ 43.082846][ T4312] Bluetooth: hci0: command tx timeout [ 43.100261][ T4292] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.163511][ T4312] Bluetooth: hci2: command tx timeout [ 43.163539][ T4317] Bluetooth: hci3: command tx timeout [ 43.165034][ T4312] Bluetooth: hci1: command tx timeout [ 43.211829][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 43.245831][ T4312] Bluetooth: hci4: command tx timeout [ 43.287882][ T4432] loop0: detected capacity change from 0 to 1024 [ 43.340007][ T4432] team0: Device vlan2 is already an upper device of the team interface [ 43.371024][ T4452] loop1: detected capacity change from 0 to 8192 [ 43.394185][ T4452] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.402018][ T4452] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 43.411839][ T4452] REISERFS (device loop1): using ordered data mode [ 43.417565][ T4452] reiserfs: using flush barriers [ 43.421579][ T4452] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.426647][ T4452] REISERFS (device loop1): checking transaction log (loop1) [ 43.433282][ T4452] REISERFS (device loop1): Using r5 hash to sort names [ 43.436245][ T4452] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 43.440871][ T4452] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 43.471839][ T11] hfsplus: b-tree write err: -5, ino 4 [ 43.486496][ T4468] FAULT_INJECTION: forcing a failure. [ 43.486496][ T4468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.490609][ T4468] CPU: 0 PID: 4468 Comm: syz.2.28 Not tainted 6.1.102-syzkaller #0 [ 43.492889][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 43.495806][ T4468] Call trace: [ 43.496744][ T4468] dump_backtrace+0x1c8/0x1f4 [ 43.498122][ T4468] show_stack+0x2c/0x3c [ 43.499340][ T4468] dump_stack_lvl+0x108/0x170 [ 43.500728][ T4468] dump_stack+0x1c/0x5c [ 43.501965][ T4468] should_fail_ex+0x3c0/0x51c [ 43.503329][ T4468] should_fail+0x14/0x24 [ 43.504650][ T4468] should_fail_usercopy+0x20/0x30 [ 43.506196][ T4468] copy_msghdr_from_user+0xb8/0x59c [ 43.507758][ T4468] __sys_sendmsg+0x200/0x33c [ 43.509074][ T4468] __arm64_sys_sendmsg+0x80/0x94 [ 43.510491][ T4468] invoke_syscall+0x98/0x2c0 [ 43.511782][ T4468] el0_svc_common+0x138/0x258 [ 43.513073][ T4468] do_el0_svc+0x64/0x218 [ 43.514394][ T4468] el0_svc+0x58/0x168 [ 43.515620][ T4468] el0t_64_sync_handler+0x84/0xf0 [ 43.517102][ T4468] el0t_64_sync+0x18c/0x190 [ 43.794354][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 43.860531][ T4493] FAULT_INJECTION: forcing a failure. [ 43.860531][ T4493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.873760][ T4493] CPU: 1 PID: 4493 Comm: syz.1.33 Not tainted 6.1.102-syzkaller #0 [ 43.875999][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 43.878810][ T4493] Call trace: [ 43.879738][ T4493] dump_backtrace+0x1c8/0x1f4 [ 43.881099][ T4493] show_stack+0x2c/0x3c [ 43.882278][ T4493] dump_stack_lvl+0x108/0x170 [ 43.883620][ T4493] dump_stack+0x1c/0x5c [ 43.884751][ T4493] should_fail_ex+0x3c0/0x51c [ 43.886035][ T4493] should_fail+0x14/0x24 [ 43.887203][ T4493] should_fail_usercopy+0x20/0x30 [ 43.888561][ T4493] sctp_getsockopt_context+0xd8/0x75c [ 43.889983][ T4493] sctp_getsockopt+0x6a8/0x9a8 [ 43.891448][ T4493] sock_common_getsockopt+0xa8/0xc4 [ 43.892893][ T4493] __sys_getsockopt+0x1e8/0x484 [ 43.894248][ T4493] __arm64_sys_getsockopt+0xb8/0xd4 [ 43.895718][ T4493] invoke_syscall+0x98/0x2c0 [ 43.896996][ T4493] el0_svc_common+0x138/0x258 [ 43.898336][ T4493] do_el0_svc+0x64/0x218 [ 43.899531][ T4493] el0_svc+0x58/0x168 [ 43.900626][ T4493] el0t_64_sync_handler+0x84/0xf0 [ 43.902015][ T4493] el0t_64_sync+0x18c/0x190 [ 43.940068][ T4495] FAULT_INJECTION: forcing a failure. [ 43.940068][ T4495] name failslab, interval 1, probability 0, space 0, times 0 [ 43.957544][ T4495] CPU: 0 PID: 4495 Comm: syz.0.38 Not tainted 6.1.102-syzkaller #0 [ 43.959893][ T4495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 43.962617][ T4495] Call trace: [ 43.963491][ T4495] dump_backtrace+0x1c8/0x1f4 [ 43.964751][ T4495] show_stack+0x2c/0x3c [ 43.965927][ T4495] dump_stack_lvl+0x108/0x170 [ 43.967254][ T4495] dump_stack+0x1c/0x5c [ 43.968428][ T4495] should_fail_ex+0x3c0/0x51c [ 43.969768][ T4495] __should_failslab+0xc8/0x128 [ 43.971141][ T4495] should_failslab+0x10/0x28 [ 43.972439][ T4495] __kmem_cache_alloc_node+0x80/0x388 [ 43.973974][ T4495] __kmalloc+0xc4/0x1c4 [ 43.975159][ T4495] tomoyo_realpath_from_path+0xc8/0x4cc [ 43.976775][ T4495] tomoyo_path_number_perm+0x1dc/0x688 [ 43.978319][ T4495] tomoyo_file_ioctl+0x2c/0x3c [ 43.979621][ T4495] security_file_ioctl+0x80/0xbc [ 43.981015][ T4495] __arm64_sys_ioctl+0xa8/0x1c8 [ 43.982417][ T4495] invoke_syscall+0x98/0x2c0 [ 43.983715][ T4495] el0_svc_common+0x138/0x258 [ 43.985090][ T4495] do_el0_svc+0x64/0x218 [ 43.986227][ T4495] el0_svc+0x58/0x168 [ 43.987307][ T4495] el0t_64_sync_handler+0x84/0xf0 [ 43.988724][ T4495] el0t_64_sync+0x18c/0x190 [ 44.068572][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.071215][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.078906][ T4507] loop4: detected capacity change from 0 to 256 [ 44.092096][ T4495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 44.294778][ T4506] loop1: detected capacity change from 0 to 8192 [ 44.320560][ T4506] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.324490][ T4506] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 44.327260][ T4506] REISERFS (device loop1): using ordered data mode [ 44.329206][ T4506] reiserfs: using flush barriers [ 44.339343][ T4483] loop3: detected capacity change from 0 to 32768 [ 44.341288][ T4506] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.346379][ T4522] FAULT_INJECTION: forcing a failure. [ 44.346379][ T4522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 44.348530][ T4506] REISERFS (device loop1): checking transaction log (loop1) [ 44.367371][ T4483] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.32 (4483) [ 44.369184][ T4522] CPU: 1 PID: 4522 Comm: syz.0.44 Not tainted 6.1.102-syzkaller #0 [ 44.373160][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 44.376067][ T4522] Call trace: [ 44.377016][ T4522] dump_backtrace+0x1c8/0x1f4 [ 44.378321][ T4522] show_stack+0x2c/0x3c [ 44.379483][ T4522] dump_stack_lvl+0x108/0x170 [ 44.380763][ T4522] dump_stack+0x1c/0x5c [ 44.381989][ T4522] should_fail_ex+0x3c0/0x51c [ 44.383319][ T4522] should_fail_alloc_page+0x74/0xb8 [ 44.384777][ T4522] prepare_alloc_pages+0x1c0/0x508 [ 44.386320][ T4522] __alloc_pages+0x150/0x730 [ 44.387635][ T4522] __folio_alloc+0x1c/0x48 [ 44.389203][ T4522] vma_alloc_folio+0x394/0x8d8 [ 44.390891][ T4522] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 44.392756][ T4522] handle_mm_fault+0x1e44/0x3ef0 [ 44.394186][ T4522] do_page_fault+0x330/0x890 [ 44.395426][ T4522] do_translation_fault+0x94/0xc8 [ 44.396974][ T4522] do_mem_abort+0x74/0x200 [ 44.398190][ T4522] el1_abort+0x3c/0x5c [ 44.399423][ T4522] el1h_64_sync_handler+0x60/0xac [ 44.400883][ T4522] el1h_64_sync+0x64/0x68 [ 44.402109][ T4522] filldir64+0x380/0x948 [ 44.403294][ T4522] proc_pident_readdir+0x160/0x458 [ 44.404801][ T4522] proc_tid_base_readdir+0x34/0x44 [ 44.406359][ T4522] iterate_dir+0x1f4/0x4ec [ 44.407640][ T4522] __arm64_sys_getdents64+0x1c4/0x4a0 [ 44.409189][ T4522] invoke_syscall+0x98/0x2c0 [ 44.411187][ T4522] el0_svc_common+0x138/0x258 [ 44.412499][ T4522] do_el0_svc+0x64/0x218 [ 44.414061][ T4522] el0_svc+0x58/0x168 [ 44.415274][ T4522] el0t_64_sync_handler+0x84/0xf0 [ 44.416704][ T4522] el0t_64_sync+0x18c/0x190 [ 44.527935][ T4483] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 44.549668][ T4483] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 44.549847][ T4506] REISERFS (device loop1): Using tea hash to sort names [ 44.552456][ T4483] BTRFS error (device loop3): unrecognized mount option 'fragment=data' [ 44.559833][ T4506] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 44.570730][ T4506] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 44.575298][ T4483] BTRFS error (device loop3): open_ctree failed [ 44.641609][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 44.763584][ T4541] FAULT_INJECTION: forcing a failure. [ 44.763584][ T4541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.767509][ T4541] CPU: 0 PID: 4541 Comm: syz.3.50 Not tainted 6.1.102-syzkaller #0 [ 44.769720][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 44.772428][ T4541] Call trace: [ 44.773309][ T4541] dump_backtrace+0x1c8/0x1f4 [ 44.774548][ T4541] show_stack+0x2c/0x3c [ 44.775624][ T4541] dump_stack_lvl+0x108/0x170 [ 44.776954][ T4541] dump_stack+0x1c/0x5c [ 44.778104][ T4541] should_fail_ex+0x3c0/0x51c [ 44.779395][ T4541] should_fail+0x14/0x24 [ 44.780541][ T4541] should_fail_usercopy+0x20/0x30 [ 44.781943][ T4541] copy_msghdr_from_user+0xb8/0x59c [ 44.783423][ T4541] __sys_sendmsg+0x200/0x33c [ 44.784707][ T4541] __arm64_sys_sendmsg+0x80/0x94 [ 44.786056][ T4541] invoke_syscall+0x98/0x2c0 [ 44.787388][ T4541] el0_svc_common+0x138/0x258 [ 44.788761][ T4547] loop2: detected capacity change from 0 to 512 [ 44.788856][ T4541] do_el0_svc+0x64/0x218 [ 44.792081][ T4541] el0_svc+0x58/0x168 [ 44.793187][ T4541] el0t_64_sync_handler+0x84/0xf0 [ 44.794547][ T4541] el0t_64_sync+0x18c/0x190 [ 44.861918][ T4547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.103685][ T4313] EXT4-fs (loop2): unmounting filesystem. [ 45.122148][ T4561] loop3: detected capacity change from 0 to 256 [ 45.163072][ T4312] Bluetooth: hci0: command tx timeout [ 45.179235][ T4561] FAT-fs (loop3): Directory bread(block 64) failed [ 45.181288][ T4561] FAT-fs (loop3): Directory bread(block 65) failed [ 45.191437][ T4566] loop0: detected capacity change from 0 to 8 [ 45.214923][ T4561] FAT-fs (loop3): Directory bread(block 66) failed [ 45.216882][ T4561] FAT-fs (loop3): Directory bread(block 67) failed [ 45.218737][ T4561] FAT-fs (loop3): Directory bread(block 68) failed [ 45.220485][ T4561] FAT-fs (loop3): Directory bread(block 69) failed [ 45.222292][ T4561] FAT-fs (loop3): Directory bread(block 70) failed [ 45.245350][ T4317] Bluetooth: hci1: command tx timeout [ 45.246120][ T4312] Bluetooth: hci3: command tx timeout [ 45.246926][ T4317] Bluetooth: hci2: command tx timeout [ 45.266998][ T4561] FAT-fs (loop3): Directory bread(block 71) failed [ 45.268901][ T4561] FAT-fs (loop3): Directory bread(block 72) failed [ 45.269476][ T4572] loop2: detected capacity change from 0 to 256 [ 45.270686][ T4561] FAT-fs (loop3): Directory bread(block 73) failed [ 45.320757][ T4572] FAT-fs (loop2): Directory bread(block 64) failed [ 45.322957][ T4312] Bluetooth: hci4: command tx timeout [ 45.323854][ T4572] FAT-fs (loop2): Directory bread(block 65) failed [ 45.326766][ T4572] FAT-fs (loop2): Directory bread(block 66) failed [ 45.328736][ T4572] FAT-fs (loop2): Directory bread(block 67) failed [ 45.345324][ T4572] FAT-fs (loop2): Directory bread(block 68) failed [ 45.347177][ T4572] FAT-fs (loop2): Directory bread(block 69) failed [ 45.349000][ T4572] FAT-fs (loop2): Directory bread(block 70) failed [ 45.350875][ T4572] FAT-fs (loop2): Directory bread(block 71) failed [ 45.369567][ T4572] FAT-fs (loop2): Directory bread(block 72) failed [ 45.371442][ T4572] FAT-fs (loop2): Directory bread(block 73) failed [ 45.407330][ T4572] FAULT_INJECTION: forcing a failure. [ 45.407330][ T4572] name failslab, interval 1, probability 0, space 0, times 0 [ 45.410819][ T4572] CPU: 1 PID: 4572 Comm: syz.2.57 Not tainted 6.1.102-syzkaller #0 [ 45.413015][ T4572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.415860][ T4572] Call trace: [ 45.416811][ T4572] dump_backtrace+0x1c8/0x1f4 [ 45.418106][ T4572] show_stack+0x2c/0x3c [ 45.419271][ T4572] dump_stack_lvl+0x108/0x170 [ 45.420584][ T4572] dump_stack+0x1c/0x5c [ 45.421860][ T4572] should_fail_ex+0x3c0/0x51c [ 45.423201][ T4572] __should_failslab+0xc8/0x128 [ 45.423404][ T4574] loop4: detected capacity change from 0 to 4096 [ 45.424520][ T4572] should_failslab+0x10/0x28 [ 45.427504][ T4572] kmem_cache_alloc+0x8c/0x37c [ 45.428882][ T4572] getname_flags+0xd0/0x48c [ 45.430185][ T4572] getname+0x28/0x38 [ 45.431311][ T4572] do_sys_openat2+0xd4/0x3e0 [ 45.432674][ T4572] __arm64_sys_openat+0x1f0/0x240 [ 45.434276][ T4572] invoke_syscall+0x98/0x2c0 [ 45.435581][ T4572] el0_svc_common+0x138/0x258 [ 45.436892][ T4572] do_el0_svc+0x64/0x218 [ 45.438126][ T4572] el0_svc+0x58/0x168 [ 45.439299][ T4572] el0t_64_sync_handler+0x84/0xf0 [ 45.440665][ T4572] el0t_64_sync+0x18c/0x190 [ 45.449114][ T4574] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 45.457191][ T4576] loop1: detected capacity change from 0 to 256 [ 45.460008][ T4576] FAT-fs (loop1): Unrecognized mount option "ioch" or missing value [ 45.504615][ T4578] loop3: detected capacity change from 0 to 256 [ 45.506780][ T4578] ======================================================= [ 45.506780][ T4578] WARNING: The mand mount option has been deprecated and [ 45.506780][ T4578] and is ignored by this kernel. Remove the mand [ 45.506780][ T4578] option from the mount to silence this warning. [ 45.506780][ T4578] ======================================================= [ 45.560631][ T4578] FAT-fs (loop3): Directory bread(block 64) failed [ 45.562522][ T4578] FAT-fs (loop3): Directory bread(block 65) failed [ 45.578739][ T4578] FAT-fs (loop3): Directory bread(block 66) failed [ 45.580547][ T4578] FAT-fs (loop3): Directory bread(block 67) failed [ 45.605267][ T4578] FAT-fs (loop3): Directory bread(block 68) failed [ 45.607171][ T4578] FAT-fs (loop3): Directory bread(block 69) failed [ 45.608980][ T4578] FAT-fs (loop3): Directory bread(block 70) failed [ 45.621203][ T4578] FAT-fs (loop3): Directory bread(block 71) failed [ 45.629615][ T4578] FAT-fs (loop3): Directory bread(block 72) failed [ 45.631714][ T4578] FAT-fs (loop3): Directory bread(block 73) failed [ 45.840863][ T4578] Zero length message leads to an empty skb [ 45.949989][ T4584] loop2: detected capacity change from 0 to 4096 [ 45.956665][ T4584] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 46.366949][ T4385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.445457][ T4312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.449353][ T4312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.452104][ T4312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.455753][ T4312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.459494][ T4312] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 46.462527][ T4312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.499966][ T4587] loop1: detected capacity change from 0 to 32768 [ 46.611937][ T4385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.619652][ T4587] XFS (loop1): Mounting V5 Filesystem [ 46.654399][ T4588] loop4: detected capacity change from 0 to 40427 [ 46.658784][ T4588] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 46.661039][ T4588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.679572][ T4588] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.712027][ T4588] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.716572][ T4588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.719809][ T4587] XFS (loop1): Ending clean mount [ 46.770581][ T4350] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 46.778154][ T4350] XFS (loop1): Unmount and run xfs_repair [ 46.782129][ T4350] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 46.790254][ T4350] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 46.795520][ T4350] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 46.798394][ T4350] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 46.801338][ T4350] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 46.802953][ T4304] syz-executor: attempt to access beyond end of device [ 46.802953][ T4304] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 46.807599][ T4350] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 46.810124][ T4350] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 46.815123][ T4350] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 46.817478][ T4350] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 46.820732][ T4587] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 46.829248][ T4587] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 46.836483][ T4587] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 46.876500][ T4300] XFS (loop1): Unmounting Filesystem [ 47.247127][ T4626] FAULT_INJECTION: forcing a failure. [ 47.247127][ T4626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.251523][ T4626] CPU: 1 PID: 4626 Comm: syz.1.73 Not tainted 6.1.102-syzkaller #0 [ 47.254013][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.256968][ T4626] Call trace: [ 47.257958][ T4626] dump_backtrace+0x1c8/0x1f4 [ 47.259318][ T4626] show_stack+0x2c/0x3c [ 47.260521][ T4626] dump_stack_lvl+0x108/0x170 [ 47.261836][ T4626] dump_stack+0x1c/0x5c [ 47.262973][ T4626] should_fail_ex+0x3c0/0x51c [ 47.264281][ T4626] should_fail+0x14/0x24 [ 47.265557][ T4626] should_fail_usercopy+0x20/0x30 [ 47.267063][ T4626] move_addr_to_kernel+0xa8/0x270 [ 47.268565][ T4626] __sys_connect+0xc8/0x290 [ 47.269884][ T4626] __arm64_sys_connect+0x7c/0x94 [ 47.271350][ T4626] invoke_syscall+0x98/0x2c0 [ 47.272660][ T4626] el0_svc_common+0x138/0x258 [ 47.274035][ T4626] do_el0_svc+0x64/0x218 [ 47.275245][ T4626] el0_svc+0x58/0x168 [ 47.276400][ T4626] el0t_64_sync_handler+0x84/0xf0 [ 47.277797][ T4626] el0t_64_sync+0x18c/0x190 [ 47.335529][ T4385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.371315][ T4628] FAULT_INJECTION: forcing a failure. [ 47.371315][ T4628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.379146][ T4628] CPU: 1 PID: 4628 Comm: syz.1.76 Not tainted 6.1.102-syzkaller #0 [ 47.381441][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.384260][ T4628] Call trace: [ 47.385141][ T4628] dump_backtrace+0x1c8/0x1f4 [ 47.386436][ T4628] show_stack+0x2c/0x3c [ 47.387639][ T4628] dump_stack_lvl+0x108/0x170 [ 47.388893][ T4628] dump_stack+0x1c/0x5c [ 47.390058][ T4628] should_fail_ex+0x3c0/0x51c [ 47.391401][ T4628] should_fail+0x14/0x24 [ 47.392605][ T4628] should_fail_usercopy+0x20/0x30 [ 47.393995][ T4628] get_fd_set+0x74/0x1e8 [ 47.395241][ T4628] core_sys_select+0x408/0x6f8 [ 47.396627][ T4628] __arm64_sys_pselect6+0x41c/0x628 [ 47.398180][ T4628] invoke_syscall+0x98/0x2c0 [ 47.399508][ T4628] el0_svc_common+0x138/0x258 [ 47.400891][ T4628] do_el0_svc+0x64/0x218 [ 47.402137][ T4628] el0_svc+0x58/0x168 [ 47.403240][ T4628] el0t_64_sync_handler+0x84/0xf0 [ 47.404735][ T4628] el0t_64_sync+0x18c/0x190 [ 47.419103][ T4312] Bluetooth: hci4: command tx timeout [ 47.492313][ T4385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.535209][ T4637] loop3: detected capacity change from 0 to 64 [ 47.611368][ T4637] MINIX-fs: bad superblock or unable to read bitmaps [ 47.620583][ T4647] loop4: detected capacity change from 0 to 512 [ 47.660800][ T4598] chnl_net:caif_netlink_parms(): no params data found [ 47.669437][ T4637] netem: unknown loss type 5 [ 47.671585][ T4637] netem: change failed [ 47.698491][ T4652] FAULT_INJECTION: forcing a failure. [ 47.698491][ T4652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 47.702319][ T4652] CPU: 1 PID: 4652 Comm: syz.1.84 Not tainted 6.1.102-syzkaller #0 [ 47.704538][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.707273][ T4652] Call trace: [ 47.708192][ T4652] dump_backtrace+0x1c8/0x1f4 [ 47.709452][ T4652] show_stack+0x2c/0x3c [ 47.710638][ T4652] dump_stack_lvl+0x108/0x170 [ 47.711943][ T4652] dump_stack+0x1c/0x5c [ 47.713053][ T4652] should_fail_ex+0x3c0/0x51c [ 47.714354][ T4652] should_fail_alloc_page+0x74/0xb8 [ 47.715812][ T4652] prepare_alloc_pages+0x1c0/0x508 [ 47.717202][ T4652] __alloc_pages+0x150/0x730 [ 47.718512][ T4652] __folio_alloc+0x1c/0x48 [ 47.719733][ T4652] vma_alloc_folio+0x394/0x8d8 [ 47.721092][ T4652] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 47.722795][ T4652] handle_mm_fault+0x1e44/0x3ef0 [ 47.724120][ T4652] do_page_fault+0x330/0x890 [ 47.725439][ T4652] do_translation_fault+0x94/0xc8 [ 47.726876][ T4652] do_mem_abort+0x74/0x200 [ 47.728091][ T4652] el0_da+0x70/0x184 [ 47.729183][ T4652] el0t_64_sync_handler+0xcc/0xf0 [ 47.730571][ T4652] el0t_64_sync+0x18c/0x190 [ 47.731854][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.732980][ T4652] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 47.951871][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 48.073598][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.090398][ T4661] FAULT_INJECTION: forcing a failure. [ 48.090398][ T4661] name failslab, interval 1, probability 0, space 0, times 0 [ 48.094918][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.102275][ T4598] device bridge_slave_0 entered promiscuous mode [ 48.107370][ T4661] CPU: 0 PID: 4661 Comm: syz.3.86 Not tainted 6.1.102-syzkaller #0 [ 48.109536][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 48.112176][ T4661] Call trace: [ 48.113041][ T4661] dump_backtrace+0x1c8/0x1f4 [ 48.114370][ T4661] show_stack+0x2c/0x3c [ 48.115572][ T4661] dump_stack_lvl+0x108/0x170 [ 48.116884][ T4661] dump_stack+0x1c/0x5c [ 48.118044][ T4661] should_fail_ex+0x3c0/0x51c [ 48.119382][ T4661] __should_failslab+0xc8/0x128 [ 48.120739][ T4661] should_failslab+0x10/0x28 [ 48.122147][ T4661] kmem_cache_alloc_node+0x90/0x3b4 [ 48.123699][ T4661] __alloc_skb+0x114/0x580 [ 48.124939][ T4661] netlink_sendmsg+0x634/0xb18 [ 48.126264][ T4661] sock_write_iter+0x2d8/0x414 [ 48.127591][ T4661] vfs_write+0x610/0x91c [ 48.128757][ T4661] ksys_write+0x15c/0x26c [ 48.129969][ T4661] __arm64_sys_write+0x7c/0x90 [ 48.131306][ T4661] invoke_syscall+0x98/0x2c0 [ 48.132572][ T4661] el0_svc_common+0x138/0x258 [ 48.133890][ T4661] do_el0_svc+0x64/0x218 [ 48.135062][ T4661] el0_svc+0x58/0x168 [ 48.136163][ T4661] el0t_64_sync_handler+0x84/0xf0 [ 48.137607][ T4661] el0t_64_sync+0x18c/0x190 [ 48.144754][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.151041][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.154935][ T4598] device bridge_slave_1 entered promiscuous mode [ 48.360339][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 48.363664][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 48.408074][ T4691] loop3: detected capacity change from 0 to 4096 [ 48.410608][ T4691] ntfs3: Invalid value for dmask. [ 48.448062][ T4292] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.501185][ T4695] loop1: detected capacity change from 0 to 4096 [ 48.517330][ T4695] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 48.523075][ T4308] Bluetooth: hci3: command tx timeout [ 48.697164][ T4702] loop1: detected capacity change from 0 to 4096 [ 48.701095][ T4702] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 48.730506][ T4702] FAULT_INJECTION: forcing a failure. [ 48.730506][ T4702] name failslab, interval 1, probability 0, space 0, times 0 [ 48.740448][ T4702] CPU: 0 PID: 4702 Comm: syz.1.94 Not tainted 6.1.102-syzkaller #0 [ 48.742707][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 48.745528][ T4702] Call trace: [ 48.746362][ T4702] dump_backtrace+0x1c8/0x1f4 [ 48.747644][ T4702] show_stack+0x2c/0x3c [ 48.748842][ T4702] dump_stack_lvl+0x108/0x170 [ 48.750158][ T4702] dump_stack+0x1c/0x5c [ 48.751403][ T4702] should_fail_ex+0x3c0/0x51c [ 48.752690][ T4702] __should_failslab+0xc8/0x128 [ 48.754093][ T4702] should_failslab+0x10/0x28 [ 48.755402][ T4702] kmem_cache_alloc+0x8c/0x37c [ 48.756722][ T4702] getname_flags+0xd0/0x48c [ 48.758090][ T4702] user_path_at_empty+0x40/0x84 [ 48.759501][ T4702] do_sys_truncate+0xb4/0x1b4 [ 48.760784][ T4702] __arm64_sys_truncate+0x5c/0x70 [ 48.762208][ T4702] invoke_syscall+0x98/0x2c0 [ 48.763524][ T4702] el0_svc_common+0x138/0x258 [ 48.764850][ T4702] do_el0_svc+0x64/0x218 [ 48.766072][ T4702] el0_svc+0x58/0x168 [ 48.767171][ T4702] el0t_64_sync_handler+0x84/0xf0 [ 48.768575][ T4702] el0t_64_sync+0x18c/0x190 [ 48.835246][ T4706] loop1: detected capacity change from 0 to 64 [ 48.845951][ T4706] MINIX-fs: bad superblock or unable to read bitmaps [ 49.055062][ T4706] netem: unknown loss type 5 [ 49.056554][ T4706] netem: change failed [ 49.093642][ T51] block nbd4: Attempted send on invalid socket [ 49.095515][ T51] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.098819][ T4711] qnx6: unable to read the first superblock [ 49.100869][ T51] block nbd4: Attempted send on invalid socket [ 49.103291][ T51] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.106760][ T4711] qnx6: unable to read the first superblock [ 49.108455][ T4711] qnx6: unable to read the first superblock [ 49.108560][ T4598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.118059][ T4598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.208928][ T4598] team0: Port device team_slave_0 added [ 49.277332][ T4598] team0: Port device team_slave_1 added [ 49.321664][ T4722] FAULT_INJECTION: forcing a failure. [ 49.321664][ T4722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.332001][ T4722] CPU: 0 PID: 4722 Comm: syz.4.101 Not tainted 6.1.102-syzkaller #0 [ 49.334395][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 49.337254][ T4722] Call trace: [ 49.338177][ T4722] dump_backtrace+0x1c8/0x1f4 [ 49.339401][ T4722] show_stack+0x2c/0x3c [ 49.340690][ T4722] dump_stack_lvl+0x108/0x170 [ 49.342104][ T4722] dump_stack+0x1c/0x5c [ 49.343288][ T4722] should_fail_ex+0x3c0/0x51c [ 49.344698][ T4722] should_fail+0x14/0x24 [ 49.345987][ T4722] should_fail_usercopy+0x20/0x30 [ 49.347397][ T4722] simple_read_from_buffer+0xd4/0x248 [ 49.348908][ T4722] proc_fail_nth_read+0x198/0x234 [ 49.350422][ T4722] vfs_read+0x280/0x8b4 [ 49.351668][ T4722] ksys_read+0x15c/0x26c [ 49.352921][ T4722] __arm64_sys_read+0x7c/0x90 [ 49.354266][ T4722] invoke_syscall+0x98/0x2c0 [ 49.355516][ T4722] el0_svc_common+0x138/0x258 [ 49.356902][ T4722] do_el0_svc+0x64/0x218 [ 49.358037][ T4722] el0_svc+0x58/0x168 [ 49.359138][ T4722] el0t_64_sync_handler+0x84/0xf0 [ 49.360508][ T4722] el0t_64_sync+0x18c/0x190 [ 49.361890][ C0] vkms_vblank_simulate: vblank timer overrun [ 49.386724][ T4720] 9pnet_fd: Insufficient options for proto=fd [ 49.468562][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.470639][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.503658][ T4598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.641526][ T4751] FAULT_INJECTION: forcing a failure. [ 49.641526][ T4751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.662939][ T4751] CPU: 0 PID: 4751 Comm: syz.4.107 Not tainted 6.1.102-syzkaller #0 [ 49.665292][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 49.668136][ T4751] Call trace: [ 49.669066][ T4751] dump_backtrace+0x1c8/0x1f4 [ 49.670393][ T4751] show_stack+0x2c/0x3c [ 49.671608][ T4751] dump_stack_lvl+0x108/0x170 [ 49.672915][ T4751] dump_stack+0x1c/0x5c [ 49.674085][ T4751] should_fail_ex+0x3c0/0x51c [ 49.675364][ T4751] should_fail+0x14/0x24 [ 49.676522][ T4751] should_fail_usercopy+0x20/0x30 [ 49.677889][ T4751] do_ip_getsockopt+0x17c/0x2168 [ 49.679317][ T4751] ip_getsockopt+0xac/0x394 [ 49.680622][ T4751] sock_common_getsockopt+0xa8/0xc4 [ 49.682155][ T4751] __sys_getsockopt+0x1e8/0x484 [ 49.683474][ T4751] __arm64_sys_getsockopt+0xb8/0xd4 [ 49.684946][ T4751] invoke_syscall+0x98/0x2c0 [ 49.686193][ T4751] el0_svc_common+0x138/0x258 [ 49.687579][ T4751] do_el0_svc+0x64/0x218 [ 49.688777][ T4751] el0_svc+0x58/0x168 [ 49.689949][ T4751] el0t_64_sync_handler+0x84/0xf0 [ 49.691414][ T4751] el0t_64_sync+0x18c/0x190 [ 49.692789][ C0] vkms_vblank_simulate: vblank timer overrun [ 49.787590][ T4762] loop3: detected capacity change from 0 to 64 [ 49.817467][ T4762] MINIX-fs: bad superblock or unable to read bitmaps [ 50.383276][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.385209][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.403531][ T4598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.511777][ T4762] netem: unknown loss type 5 [ 50.513364][ T4762] netem: change failed [ 50.570422][ T4773] loop1: detected capacity change from 0 to 47 [ 50.602829][ T4308] Bluetooth: hci3: command tx timeout [ 50.606967][ T4773] MINIX-fs: deleted inode referenced: 9 [ 50.608973][ T4773] MINIX-fs: deleted inode referenced: 9 [ 50.638673][ T4776] FAULT_INJECTION: forcing a failure. [ 50.638673][ T4776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.642021][ T4773] process 'syz.1.113' launched './file0' with NULL argv: empty string added [ 50.650561][ T4773] MINIX-fs: deleted inode referenced: 9 [ 50.658015][ T4776] CPU: 1 PID: 4776 Comm: syz.3.114 Not tainted 6.1.102-syzkaller #0 [ 50.660156][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 50.660948][ T4773] MINIX-fs: deleted inode referenced: 9 [ 50.662929][ T4776] Call trace: [ 50.662986][ T4776] dump_backtrace+0x1c8/0x1f4 [ 50.666878][ T4776] show_stack+0x2c/0x3c [ 50.668015][ T4776] dump_stack_lvl+0x108/0x170 [ 50.669389][ T4776] dump_stack+0x1c/0x5c [ 50.670548][ T4776] should_fail_ex+0x3c0/0x51c [ 50.671982][ T4776] should_fail_alloc_page+0x74/0xb8 [ 50.673532][ T4776] prepare_alloc_pages+0x1c0/0x508 [ 50.674981][ T4776] __alloc_pages+0x150/0x730 [ 50.676335][ T4776] __folio_alloc+0x1c/0x48 [ 50.677602][ T4776] vma_alloc_folio+0x394/0x8d8 [ 50.678949][ T4776] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 50.680703][ T4776] handle_mm_fault+0x1e44/0x3ef0 [ 50.682072][ T4776] do_page_fault+0x330/0x890 [ 50.683395][ T4776] do_translation_fault+0x94/0xc8 [ 50.684810][ T4776] do_mem_abort+0x74/0x200 [ 50.686056][ T4776] el0_da+0x70/0x184 [ 50.687128][ T4776] el0t_64_sync_handler+0xcc/0xf0 [ 50.688598][ T4776] el0t_64_sync+0x18c/0x190 [ 50.692315][ T4776] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 50.758901][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.761463][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.769154][ T4598] device hsr_slave_0 entered promiscuous mode [ 50.773137][ T4780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.778610][ T4780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.786917][ T4778] loop3: detected capacity change from 0 to 64 [ 50.802950][ T4598] device hsr_slave_1 entered promiscuous mode [ 50.842336][ T4785] FAULT_INJECTION: forcing a failure. [ 50.842336][ T4785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.846873][ T4598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.849000][ T4598] Cannot create hsr debugfs directory [ 50.862278][ T4778] hfs: unable to open catalog tree [ 50.872108][ T4785] CPU: 0 PID: 4785 Comm: syz.1.117 Not tainted 6.1.102-syzkaller #0 [ 50.874436][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 50.877287][ T4785] Call trace: [ 50.878222][ T4785] dump_backtrace+0x1c8/0x1f4 [ 50.879521][ T4785] show_stack+0x2c/0x3c [ 50.880765][ T4785] dump_stack_lvl+0x108/0x170 [ 50.882092][ T4785] dump_stack+0x1c/0x5c [ 50.882211][ T4778] hfs: can't find a HFS filesystem on dev loop3 [ 50.883318][ T4785] should_fail_ex+0x3c0/0x51c [ 50.883338][ T4785] should_fail+0x14/0x24 [ 50.883349][ T4785] should_fail_usercopy+0x20/0x30 [ 50.883360][ T4785] iovec_from_user+0xcc/0x5e0 [ 50.883374][ T4785] __import_iovec+0x84/0x448 [ 50.883384][ T4785] import_iovec+0x88/0xa4 [ 50.883395][ T4785] do_preadv+0x1b8/0x324 [ 50.883405][ T4785] __arm64_sys_preadv+0xa0/0xb8 [ 50.883417][ T4785] invoke_syscall+0x98/0x2c0 [ 50.883431][ T4785] el0_svc_common+0x138/0x258 [ 50.883443][ T4785] do_el0_svc+0x64/0x218 [ 50.883454][ T4785] el0_svc+0x58/0x168 [ 50.883464][ T4785] el0t_64_sync_handler+0x84/0xf0 [ 50.902043][ T4785] el0t_64_sync+0x18c/0x190 [ 50.903337][ C0] vkms_vblank_simulate: vblank timer overrun [ 51.049130][ T4788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 51.815602][ T4811] FAULT_INJECTION: forcing a failure. [ 51.815602][ T4811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.819324][ T4811] CPU: 1 PID: 4811 Comm: syz.1.123 Not tainted 6.1.102-syzkaller #0 [ 51.821555][ T4811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.824401][ T4811] Call trace: [ 51.825381][ T4811] dump_backtrace+0x1c8/0x1f4 [ 51.826690][ T4811] show_stack+0x2c/0x3c [ 51.827867][ T4811] dump_stack_lvl+0x108/0x170 [ 51.829175][ T4811] dump_stack+0x1c/0x5c [ 51.830311][ T4811] should_fail_ex+0x3c0/0x51c [ 51.831594][ T4811] should_fail+0x14/0x24 [ 51.832827][ T4811] should_fail_usercopy+0x20/0x30 [ 51.834275][ T4811] copy_msghdr_from_user+0xb8/0x59c [ 51.835772][ T4811] __sys_sendmsg+0x200/0x33c [ 51.837015][ T4811] __arm64_sys_sendmsg+0x80/0x94 [ 51.838505][ T4811] invoke_syscall+0x98/0x2c0 [ 51.839861][ T4811] el0_svc_common+0x138/0x258 [ 51.841260][ T4811] do_el0_svc+0x64/0x218 [ 51.842405][ T4811] el0_svc+0x58/0x168 [ 51.843560][ T4811] el0t_64_sync_handler+0x84/0xf0 [ 51.845026][ T4811] el0t_64_sync+0x18c/0x190 [ 51.887889][ T4813] loop1: detected capacity change from 0 to 64 [ 51.899003][ T4813] MINIX-fs: bad superblock or unable to read bitmaps [ 52.094885][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 52.098933][ T4798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.157844][ T4813] netem: unknown loss type 5 [ 52.159411][ T4813] netem: change failed [ 52.189964][ T4816] loop3: detected capacity change from 0 to 256 [ 52.341614][ T4823] FAULT_INJECTION: forcing a failure. [ 52.341614][ T4823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.345792][ T4823] CPU: 0 PID: 4823 Comm: syz.3.128 Not tainted 6.1.102-syzkaller #0 [ 52.348056][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.350914][ T4823] Call trace: [ 52.351842][ T4823] dump_backtrace+0x1c8/0x1f4 [ 52.353188][ T4823] show_stack+0x2c/0x3c [ 52.354414][ T4823] dump_stack_lvl+0x108/0x170 [ 52.355701][ T4823] dump_stack+0x1c/0x5c [ 52.356875][ T4823] should_fail_ex+0x3c0/0x51c [ 52.358123][ T4823] should_fail_alloc_page+0x74/0xb8 [ 52.359563][ T4823] prepare_alloc_pages+0x1c0/0x508 [ 52.360980][ T4823] __alloc_pages+0x150/0x730 [ 52.362253][ T4823] __folio_alloc+0x1c/0x48 [ 52.363448][ T4823] vma_alloc_folio+0x394/0x8d8 [ 52.364815][ T4823] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 52.366575][ T4823] handle_mm_fault+0x1e44/0x3ef0 [ 52.367937][ T4823] do_page_fault+0x330/0x890 [ 52.369207][ T4823] do_translation_fault+0x94/0xc8 [ 52.370598][ T4823] do_mem_abort+0x74/0x200 [ 52.371897][ T4823] el0_da+0x70/0x184 [ 52.373012][ T4823] el0t_64_sync_handler+0xcc/0xf0 [ 52.374459][ T4823] el0t_64_sync+0x18c/0x190 [ 52.375820][ C0] vkms_vblank_simulate: vblank timer overrun [ 52.379636][ T4823] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 52.524183][ T4818] netlink: 184 bytes leftover after parsing attributes in process `syz.1.126'. [ 52.682640][ T4312] Bluetooth: hci3: command tx timeout [ 52.713975][ T4385] device hsr_slave_0 left promiscuous mode [ 52.758856][ T4385] device hsr_slave_1 left promiscuous mode [ 52.774524][ T4846] syz.3.133 uses obsolete (PF_INET,SOCK_PACKET) [ 52.832912][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.835562][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.839743][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.841799][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.856154][ T4385] device bridge_slave_1 left promiscuous mode [ 52.859761][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.924793][ T4385] device bridge_slave_0 left promiscuous mode [ 52.926734][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.073297][ T4385] device veth1_macvtap left promiscuous mode [ 53.075385][ T4385] device veth0_macvtap left promiscuous mode [ 53.079101][ T4385] device veth1_vlan left promiscuous mode [ 53.081117][ T4385] device veth0_vlan left promiscuous mode [ 54.762911][ T4308] Bluetooth: hci3: command tx timeout [ 54.825557][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 55.014490][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 55.193363][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.393452][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.808165][ T4385] bond0 (unregistering): Released all slaves [ 58.132814][ T4856] device ipip0 entered promiscuous mode [ 58.137485][ T4864] device syzkaller1 entered promiscuous mode [ 58.228344][ T4874] loop4: detected capacity change from 0 to 64 [ 58.238653][ T4874] MINIX-fs: bad superblock or unable to read bitmaps [ 58.445178][ T4874] netem: unknown loss type 5 [ 58.446657][ T4874] netem: change failed [ 59.922983][ T4892] FAULT_INJECTION: forcing a failure. [ 59.922983][ T4892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.926588][ T4892] CPU: 0 PID: 4892 Comm: syz.4.140 Not tainted 6.1.102-syzkaller #0 [ 59.928869][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 59.931542][ T4892] Call trace: [ 59.932403][ T4892] dump_backtrace+0x1c8/0x1f4 [ 59.933674][ T4892] show_stack+0x2c/0x3c [ 59.934787][ T4892] dump_stack_lvl+0x108/0x170 [ 59.936096][ T4892] dump_stack+0x1c/0x5c [ 59.937247][ T4892] should_fail_ex+0x3c0/0x51c [ 59.938489][ T4892] should_fail+0x14/0x24 [ 59.939634][ T4892] should_fail_usercopy+0x20/0x30 [ 59.941006][ T4892] iovec_from_user+0xcc/0x5e0 [ 59.942304][ T4892] __import_iovec+0x84/0x448 [ 59.943545][ T4892] import_iovec+0x88/0xa4 [ 59.944769][ T4892] do_preadv+0x1b8/0x324 [ 59.946107][ T4892] __arm64_sys_preadv2+0xd4/0x108 [ 59.947554][ T4892] invoke_syscall+0x98/0x2c0 [ 59.948849][ T4892] el0_svc_common+0x138/0x258 [ 59.950208][ T4892] do_el0_svc+0x64/0x218 [ 59.951436][ T4892] el0_svc+0x58/0x168 [ 59.952584][ T4892] el0t_64_sync_handler+0x84/0xf0 [ 59.953957][ T4892] el0t_64_sync+0x18c/0x190 [ 60.483737][ T4897] FAULT_INJECTION: forcing a failure. [ 60.483737][ T4897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.487309][ T4897] CPU: 0 PID: 4897 Comm: syz.3.143 Not tainted 6.1.102-syzkaller #0 [ 60.489614][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.492327][ T4897] Call trace: [ 60.493211][ T4897] dump_backtrace+0x1c8/0x1f4 [ 60.494473][ T4897] show_stack+0x2c/0x3c [ 60.495676][ T4897] dump_stack_lvl+0x108/0x170 [ 60.497005][ T4897] dump_stack+0x1c/0x5c [ 60.498156][ T4897] should_fail_ex+0x3c0/0x51c [ 60.499515][ T4897] should_fail+0x14/0x24 [ 60.500705][ T4897] should_fail_usercopy+0x20/0x30 [ 60.502141][ T4897] simple_read_from_buffer+0xd4/0x248 [ 60.503779][ T4897] proc_fail_nth_read+0x198/0x234 [ 60.505217][ T4897] vfs_read+0x280/0x8b4 [ 60.506390][ T4897] ksys_read+0x15c/0x26c [ 60.507515][ T4897] __arm64_sys_read+0x7c/0x90 [ 60.509011][ T4897] invoke_syscall+0x98/0x2c0 [ 60.510371][ T4897] el0_svc_common+0x138/0x258 [ 60.511725][ T4897] do_el0_svc+0x64/0x218 [ 60.512961][ T4897] el0_svc+0x58/0x168 [ 60.514244][ T4897] el0t_64_sync_handler+0x84/0xf0 [ 60.515710][ T4897] el0t_64_sync+0x18c/0x190 [ 60.531799][ T4902] loop4: detected capacity change from 0 to 512 [ 60.561816][ T4308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.572334][ T4308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.578027][ T4308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.581853][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 60.587490][ T4308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.589982][ T4308] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.592339][ T4308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.627805][ T4902] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.144: corrupted inode contents [ 60.638771][ T4902] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz.4.144: mark_inode_dirty error [ 60.651012][ T4902] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.144: corrupted inode contents [ 60.660461][ T4902] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.144: mark_inode_dirty error [ 60.675085][ T4912] device syzkaller1 entered promiscuous mode [ 60.802115][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 60.910599][ T4917] device syzkaller1 entered promiscuous mode [ 61.093172][ T4928] FAULT_INJECTION: forcing a failure. [ 61.093172][ T4928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.096906][ T4928] CPU: 0 PID: 4928 Comm: syz.1.148 Not tainted 6.1.102-syzkaller #0 [ 61.099037][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 61.101955][ T4928] Call trace: [ 61.102851][ T4928] dump_backtrace+0x1c8/0x1f4 [ 61.104235][ T4928] show_stack+0x2c/0x3c [ 61.105452][ T4928] dump_stack_lvl+0x108/0x170 [ 61.106728][ T4928] dump_stack+0x1c/0x5c [ 61.107849][ T4928] should_fail_ex+0x3c0/0x51c [ 61.109273][ T4928] should_fail+0x14/0x24 [ 61.110574][ T4928] should_fail_usercopy+0x20/0x30 [ 61.111976][ T4928] simple_read_from_buffer+0xd4/0x248 [ 61.113536][ T4928] proc_fail_nth_read+0x198/0x234 [ 61.115007][ T4928] vfs_read+0x280/0x8b4 [ 61.116236][ T4928] ksys_read+0x15c/0x26c [ 61.117458][ T4928] __arm64_sys_read+0x7c/0x90 [ 61.118760][ T4928] invoke_syscall+0x98/0x2c0 [ 61.120111][ T4928] el0_svc_common+0x138/0x258 [ 61.121412][ T4928] do_el0_svc+0x64/0x218 [ 61.122635][ T4928] el0_svc+0x58/0x168 [ 61.123806][ T4928] el0t_64_sync_handler+0x84/0xf0 [ 61.125318][ T4928] el0t_64_sync+0x18c/0x190 [ 61.142165][ T4598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.208247][ T4598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.244685][ T4598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.378123][ T4925] device syzkaller1 entered promiscuous mode [ 61.392052][ T4598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.537787][ T4904] chnl_net:caif_netlink_parms(): no params data found [ 61.625950][ T4920] loop4: detected capacity change from 0 to 32768 [ 61.713593][ T4920] XFS (loop4): Mounting V5 Filesystem [ 61.730517][ T4904] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.733440][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.736350][ T4904] device bridge_slave_0 entered promiscuous mode [ 61.797266][ T4904] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.799558][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.808565][ T4953] FAULT_INJECTION: forcing a failure. [ 61.808565][ T4953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.820655][ T4904] device bridge_slave_1 entered promiscuous mode [ 61.840239][ T4953] CPU: 1 PID: 4953 Comm: syz.1.151 Not tainted 6.1.102-syzkaller #0 [ 61.842538][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 61.845477][ T4953] Call trace: [ 61.846400][ T4953] dump_backtrace+0x1c8/0x1f4 [ 61.847715][ T4953] show_stack+0x2c/0x3c [ 61.848960][ T4953] dump_stack_lvl+0x108/0x170 [ 61.850270][ T4953] dump_stack+0x1c/0x5c [ 61.851492][ T4953] should_fail_ex+0x3c0/0x51c [ 61.852811][ T4953] should_fail+0x14/0x24 [ 61.854138][ T4953] should_fail_usercopy+0x20/0x30 [ 61.855717][ T4953] copy_from_bpfptr+0x78/0x1f0 [ 61.857051][ T4953] __sys_bpf+0x1fc/0x654 [ 61.858292][ T4953] __arm64_sys_bpf+0x80/0x98 [ 61.859599][ T4953] invoke_syscall+0x98/0x2c0 [ 61.860952][ T4953] el0_svc_common+0x138/0x258 [ 61.862324][ T4953] do_el0_svc+0x64/0x218 [ 61.863527][ T4953] el0_svc+0x58/0x168 [ 61.864710][ T4953] el0t_64_sync_handler+0x84/0xf0 [ 61.866088][ T4953] el0t_64_sync+0x18c/0x190 [ 61.896317][ T4920] XFS (loop4): Ending clean mount [ 61.910854][ T4920] XFS (loop4): Quotacheck needed: Please wait. [ 61.930589][ T4904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.946238][ T4598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.949817][ T4904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.976297][ T4920] XFS (loop4): Quotacheck: Done. [ 62.022088][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.027865][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.043026][ T4598] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.048966][ T4904] team0: Port device team_slave_0 added [ 62.073256][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.076105][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.078618][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.080533][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.096823][ T4904] team0: Port device team_slave_1 added [ 62.112388][ T4304] XFS (loop4): Unmounting Filesystem [ 62.129731][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.132392][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.143163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.145835][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.148644][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.151087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.163426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.213974][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.217815][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.242024][ T4598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.282895][ T4598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.305094][ T4904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.307049][ T4904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.322888][ T4904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.328138][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.330741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.334401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.337171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.339936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.362985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.365818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.382153][ T4904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.384488][ T4904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.391870][ T4904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.439531][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.548864][ T4981] syz.1.155 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.601832][ T27] audit: type=1326 audit(62.550:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.1.155" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb91449a8 code=0x0 [ 62.610036][ T4904] device hsr_slave_0 entered promiscuous mode [ 62.612215][ T4308] Bluetooth: hci5: command tx timeout [ 62.661216][ T4986] loop4: detected capacity change from 0 to 164 [ 62.713120][ T4904] device hsr_slave_1 entered promiscuous mode [ 62.743007][ T4904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.745212][ T4904] Cannot create hsr debugfs directory [ 62.823885][ T4986] sctp: [Deprecated]: syz.4.153 (pid 4986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.823885][ T4986] Use struct sctp_sack_info instead [ 62.934464][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.936740][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.957662][ T4598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.023526][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.026541][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.152243][ T4904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.181291][ T4598] device veth0_vlan entered promiscuous mode [ 63.193683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.196590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.200193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.211139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.222168][ T4598] device veth1_vlan entered promiscuous mode [ 63.368338][ T4904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.399792][ T4598] device veth0_macvtap entered promiscuous mode [ 63.405922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.410098][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.424869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.437727][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.439337][ T5004] FAULT_INJECTION: forcing a failure. [ 63.439337][ T5004] name failslab, interval 1, probability 0, space 0, times 0 [ 63.444862][ T4598] device veth1_macvtap entered promiscuous mode [ 63.458955][ T5004] CPU: 1 PID: 5004 Comm: syz.1.156 Not tainted 6.1.102-syzkaller #0 [ 63.461195][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.463867][ T5004] Call trace: [ 63.464776][ T5004] dump_backtrace+0x1c8/0x1f4 [ 63.466012][ T5004] show_stack+0x2c/0x3c [ 63.467179][ T5004] dump_stack_lvl+0x108/0x170 [ 63.468486][ T5004] dump_stack+0x1c/0x5c [ 63.469647][ T5004] should_fail_ex+0x3c0/0x51c [ 63.470922][ T5004] __should_failslab+0xc8/0x128 [ 63.472357][ T5004] should_failslab+0x10/0x28 [ 63.473624][ T5004] __kmem_cache_alloc_node+0x80/0x388 [ 63.475146][ T5004] __kmalloc+0xc4/0x1c4 [ 63.476276][ T5004] tomoyo_realpath_from_path+0xc8/0x4cc [ 63.477866][ T5004] tomoyo_path_number_perm+0x1dc/0x688 [ 63.479352][ T5004] tomoyo_file_ioctl+0x2c/0x3c [ 63.480658][ T5004] security_file_ioctl+0x80/0xbc [ 63.482030][ T5004] __arm64_sys_ioctl+0xa8/0x1c8 [ 63.483384][ T5004] invoke_syscall+0x98/0x2c0 [ 63.484700][ T5004] el0_svc_common+0x138/0x258 [ 63.486044][ T5004] do_el0_svc+0x64/0x218 [ 63.487229][ T5004] el0_svc+0x58/0x168 [ 63.488385][ T5004] el0t_64_sync_handler+0x84/0xf0 [ 63.489743][ T5004] el0t_64_sync+0x18c/0x190 [ 63.505131][ T4904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.518390][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.528367][ T5004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.530473][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.534309][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.537334][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.540017][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.543433][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.546137][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.549130][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.569497][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.571942][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.575131][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.577756][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.580501][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.675950][ T4904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.684320][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.687435][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.690164][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.704340][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.706996][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.726470][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.729132][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.752403][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.759077][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.761856][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.771384][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.914705][ T4598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.917154][ T4598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.919557][ T4598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.921940][ T4598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.029232][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.031620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.037625][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.261075][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.266500][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.273102][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.335317][ T4904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.378548][ T4904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.525415][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.527316][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.562517][ T4904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.604509][ T4904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.692663][ T4308] Bluetooth: hci5: command tx timeout [ 64.693513][ T5042] loop0: detected capacity change from 0 to 32768 [ 64.738031][ T5042] XFS (loop0): Mounting V5 Filesystem [ 64.797707][ T5042] XFS (loop0): Ending clean mount [ 64.884909][ T5042] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 64.888091][ T5042] XFS (loop0): Unmount and run xfs_repair [ 64.889651][ T5042] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 64.891598][ T5042] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 64.898928][ T5042] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 64.901378][ T5042] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 64.906781][ T5042] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 64.909271][ T5042] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 64.911722][ T5042] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 64.914256][ T5042] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 64.918107][ T5042] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 64.930536][ T4904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.933846][ T5042] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 64.938036][ T5042] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1b20/0x24c0 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 64.948579][ T5042] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 64.951681][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.954967][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.983657][ T4598] XFS (loop0): Unmounting Filesystem [ 65.019261][ T4904] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.033731][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.036570][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.039182][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.041197][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.070432][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.073886][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.076713][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.079328][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.081515][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.084810][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.097855][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.161857][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.167016][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.182173][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.185576][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.188573][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.246789][ T4904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.249675][ T4904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.262848][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.265737][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.268684][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.286295][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.289906][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.336850][ T5086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.158'. [ 65.432024][ T5086] loop0: detected capacity change from 0 to 1024 [ 65.449279][ T5086] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.452354][ T5086] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.473953][ T5086] JBD2: no valid journal superblock found [ 65.475531][ T5086] EXT4-fs (loop0): error loading journal [ 65.490775][ T5091] netlink: 'syz.1.159': attribute type 4 has an invalid length. [ 65.524463][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.526572][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.549631][ T4904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.570296][ T5093] FAULT_INJECTION: forcing a failure. [ 65.570296][ T5093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.577702][ T5093] CPU: 1 PID: 5093 Comm: syz.1.162 Not tainted 6.1.102-syzkaller #0 [ 65.580000][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.582780][ T5093] Call trace: [ 65.583721][ T5093] dump_backtrace+0x1c8/0x1f4 [ 65.585166][ T5093] show_stack+0x2c/0x3c [ 65.586395][ T5093] dump_stack_lvl+0x108/0x170 [ 65.587743][ T5093] dump_stack+0x1c/0x5c [ 65.588945][ T5093] should_fail_ex+0x3c0/0x51c [ 65.590330][ T5093] should_fail+0x14/0x24 [ 65.591515][ T5093] should_fail_usercopy+0x20/0x30 [ 65.593086][ T5093] copy_msghdr_from_user+0xb8/0x59c [ 65.594626][ T5093] __sys_sendmsg+0x200/0x33c [ 65.596026][ T5093] __arm64_sys_sendmsg+0x80/0x94 [ 65.597441][ T5093] invoke_syscall+0x98/0x2c0 [ 65.598755][ T5093] el0_svc_common+0x138/0x258 [ 65.600071][ T5093] do_el0_svc+0x64/0x218 [ 65.601317][ T5093] el0_svc+0x58/0x168 [ 65.602449][ T5093] el0t_64_sync_handler+0x84/0xf0 [ 65.603928][ T5093] el0t_64_sync+0x18c/0x190 [ 65.614644][ T5099] netlink: 'syz.4.160': attribute type 4 has an invalid length. [ 65.684859][ T5104] FAULT_INJECTION: forcing a failure. [ 65.684859][ T5104] name failslab, interval 1, probability 0, space 0, times 0 [ 65.691883][ T5104] CPU: 1 PID: 5104 Comm: syz.4.165 Not tainted 6.1.102-syzkaller #0 [ 65.694150][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.696967][ T5104] Call trace: [ 65.697892][ T5104] dump_backtrace+0x1c8/0x1f4 [ 65.699193][ T5104] show_stack+0x2c/0x3c [ 65.700315][ T5104] dump_stack_lvl+0x108/0x170 [ 65.701642][ T5104] dump_stack+0x1c/0x5c [ 65.702759][ T5104] should_fail_ex+0x3c0/0x51c [ 65.704021][ T5104] __should_failslab+0xc8/0x128 [ 65.705316][ T5104] should_failslab+0x10/0x28 [ 65.706502][ T5104] __kmem_cache_alloc_node+0x80/0x388 [ 65.708003][ T5104] kmalloc_trace+0x48/0x94 [ 65.709242][ T5104] sctp_datamsg_from_user+0x90/0xe68 [ 65.710710][ T5104] sctp_sendmsg_to_asoc+0xcc8/0x13b8 [ 65.712150][ T5104] sctp_sendmsg+0x196c/0x2844 [ 65.713406][ T5104] inet_sendmsg+0x15c/0x290 [ 65.714636][ T5104] sock_write_iter+0x2d8/0x414 [ 65.715896][ T5104] vfs_write+0x610/0x91c [ 65.717059][ T5104] ksys_write+0x15c/0x26c [ 65.718212][ T5104] __arm64_sys_write+0x7c/0x90 [ 65.719504][ T5104] invoke_syscall+0x98/0x2c0 [ 65.720775][ T5104] el0_svc_common+0x138/0x258 [ 65.722122][ T5104] do_el0_svc+0x64/0x218 [ 65.723319][ T5104] el0_svc+0x58/0x168 [ 65.724430][ T5104] el0t_64_sync_handler+0x84/0xf0 [ 65.725883][ T5104] el0t_64_sync+0x18c/0x190 [ 65.753024][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.756815][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.803196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.806046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.809395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.818010][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.830905][ T4904] device veth0_vlan entered promiscuous mode [ 65.843746][ T4904] device veth1_vlan entered promiscuous mode [ 66.017566][ T5119] loop0: detected capacity change from 0 to 512 [ 66.038672][ T5119] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 66.058488][ T5119] EXT2-fs (loop0): error: ext2_iget: bad extended attribute block 1 [ 66.214404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.217274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.220104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.229176][ T5110] loop1: detected capacity change from 0 to 32768 [ 66.231669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.251616][ T5110] XFS (loop1): Mounting V5 Filesystem [ 66.305144][ T5110] XFS (loop1): Ending clean mount [ 66.308934][ T5110] XFS (loop1): Quotacheck needed: Please wait. [ 66.328170][ T5110] XFS (loop1): Quotacheck: Done. [ 66.356408][ T5110] cgroup2: Unknown parameter 'cpuset' [ 66.393231][ T4300] XFS (loop1): Unmounting Filesystem [ 66.824911][ T4312] Bluetooth: hci5: command tx timeout [ 67.285168][ T4904] device veth0_macvtap entered promiscuous mode [ 67.289758][ T4904] device veth1_macvtap entered promiscuous mode [ 67.352411][ T5150] FAULT_INJECTION: forcing a failure. [ 67.352411][ T5150] name failslab, interval 1, probability 0, space 0, times 0 [ 67.369864][ T5150] CPU: 0 PID: 5150 Comm: syz.4.180 Not tainted 6.1.102-syzkaller #0 [ 67.372313][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.375165][ T5150] Call trace: [ 67.376088][ T5150] dump_backtrace+0x1c8/0x1f4 [ 67.377459][ T5150] show_stack+0x2c/0x3c [ 67.378605][ T5150] dump_stack_lvl+0x108/0x170 [ 67.379964][ T5150] dump_stack+0x1c/0x5c [ 67.381121][ T5150] should_fail_ex+0x3c0/0x51c [ 67.382461][ T5150] __should_failslab+0xc8/0x128 [ 67.383860][ T5150] should_failslab+0x10/0x28 [ 67.385167][ T5150] __kmem_cache_alloc_node+0x80/0x388 [ 67.386708][ T5150] __kmalloc+0xc4/0x1c4 [ 67.387835][ T5150] tomoyo_realpath_from_path+0xc8/0x4cc [ 67.389492][ T5150] tomoyo_path_number_perm+0x1dc/0x688 [ 67.391063][ T5150] tomoyo_file_ioctl+0x2c/0x3c [ 67.392449][ T5150] security_file_ioctl+0x80/0xbc [ 67.393874][ T5150] __arm64_sys_ioctl+0xa8/0x1c8 [ 67.395427][ T5150] invoke_syscall+0x98/0x2c0 [ 67.396804][ T5150] el0_svc_common+0x138/0x258 [ 67.398282][ T5150] do_el0_svc+0x64/0x218 [ 67.399737][ T5150] el0_svc+0x58/0x168 [ 67.400859][ T5150] el0t_64_sync_handler+0x84/0xf0 [ 67.402245][ T5150] el0t_64_sync+0x18c/0x190 [ 67.451251][ T5150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.471329][ T5152] FAULT_INJECTION: forcing a failure. [ 67.471329][ T5152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.475600][ T5152] CPU: 0 PID: 5152 Comm: syz.1.181 Not tainted 6.1.102-syzkaller #0 [ 67.477868][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.480886][ T5152] Call trace: [ 67.481780][ T5152] dump_backtrace+0x1c8/0x1f4 [ 67.483096][ T5152] show_stack+0x2c/0x3c [ 67.484308][ T5152] dump_stack_lvl+0x108/0x170 [ 67.485903][ T5152] dump_stack+0x1c/0x5c [ 67.487143][ T5152] should_fail_ex+0x3c0/0x51c [ 67.488526][ T5152] should_fail_alloc_page+0x74/0xb8 [ 67.489988][ T5152] prepare_alloc_pages+0x1c0/0x508 [ 67.491461][ T5152] __alloc_pages+0x150/0x730 [ 67.492826][ T5152] __folio_alloc+0x1c/0x48 [ 67.494083][ T5152] vma_alloc_folio+0x394/0x8d8 [ 67.495485][ T5152] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 67.497302][ T5152] handle_mm_fault+0x1e44/0x3ef0 [ 67.498744][ T5152] do_page_fault+0x330/0x890 [ 67.500126][ T5152] do_translation_fault+0x94/0xc8 [ 67.501617][ T5152] do_mem_abort+0x74/0x200 [ 67.502930][ T5152] el0_da+0x70/0x184 [ 67.503998][ T5152] el0t_64_sync_handler+0xcc/0xf0 [ 67.505409][ T5152] el0t_64_sync+0x18c/0x190 [ 67.549049][ T5152] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 67.555994][ T5156] loop4: detected capacity change from 0 to 128 [ 67.614397][ T5156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.695668][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.698650][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.707780][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.762645][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.784561][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.802300][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.822776][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.841789][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.861608][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.881625][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.897235][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.921089][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.948264][ T4904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.948599][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 67.961255][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.989030][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.002870][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.015490][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.025399][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.034950][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.041395][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.056143][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.062375][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.109579][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.113715][ T4904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.165192][ T55] device hsr_slave_0 left promiscuous mode [ 68.237624][ T55] device hsr_slave_1 left promiscuous mode [ 68.323105][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.325507][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.334677][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.338460][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.341457][ T55] device bridge_slave_1 left promiscuous mode [ 68.350264][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.394074][ T55] device bridge_slave_0 left promiscuous mode [ 68.396203][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.542791][ T55] device veth1_macvtap left promiscuous mode [ 68.544712][ T55] device veth0_macvtap left promiscuous mode [ 68.546835][ T55] device veth1_vlan left promiscuous mode [ 68.549301][ T55] device veth0_vlan left promiscuous mode [ 68.860364][ T4308] Bluetooth: hci5: command tx timeout [ 69.250398][ T5195] FAULT_INJECTION: forcing a failure. [ 69.250398][ T5195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.322764][ T5195] CPU: 1 PID: 5195 Comm: syz.1.193 Not tainted 6.1.102-syzkaller #0 [ 69.325180][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.328142][ T5195] Call trace: [ 69.329038][ T5195] dump_backtrace+0x1c8/0x1f4 [ 69.330381][ T5195] show_stack+0x2c/0x3c [ 69.331811][ T5195] dump_stack_lvl+0x108/0x170 [ 69.333177][ T5195] dump_stack+0x1c/0x5c [ 69.334385][ T5195] should_fail_ex+0x3c0/0x51c [ 69.335745][ T5195] should_fail+0x14/0x24 [ 69.337087][ T5195] should_fail_usercopy+0x20/0x30 [ 69.338533][ T5195] iovec_from_user+0xcc/0x5e0 [ 69.339863][ T5195] __import_iovec+0x84/0x448 [ 69.341233][ T5195] import_iovec+0x88/0xa4 [ 69.342520][ T5195] do_preadv+0x1b8/0x324 [ 69.343715][ T5195] __arm64_sys_preadv+0xa0/0xb8 [ 69.345200][ T5195] invoke_syscall+0x98/0x2c0 [ 69.346506][ T5195] el0_svc_common+0x138/0x258 [ 69.347859][ T5195] do_el0_svc+0x64/0x218 [ 69.349090][ T5195] el0_svc+0x58/0x168 [ 69.350148][ T5195] el0t_64_sync_handler+0x84/0xf0 [ 69.351596][ T5195] el0t_64_sync+0x18c/0x190 [ 70.472567][ C0] sched: RT throttling activated [ 70.534517][ T1516] cfg80211: failed to load regulatory.db [ 71.253896][ T27] audit: type=1326 audit(71.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.262133][ T27] audit: type=1326 audit(71.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.286369][ T27] audit: type=1326 audit(71.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=32 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.328978][ T27] audit: type=1326 audit(71.207:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.374559][ T27] audit: type=1326 audit(71.207:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.410507][ T27] audit: type=1326 audit(71.207:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.417943][ T27] audit: type=1326 audit(71.207:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.424905][ T27] audit: type=1326 audit(71.207:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f449a8 code=0x7ffc0000 [ 71.430907][ T27] audit: type=1326 audit(71.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8f46e8c code=0x7ffc0000 [ 71.438892][ T27] audit: type=1326 audit(71.227:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb8f46da8 code=0x7ffc0000 [ 73.606215][ T55] team0 (unregistering): Port device team_slave_1 removed [ 73.836207][ T55] team0 (unregistering): Port device team_slave_0 removed [ 73.997751][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.055899][ T5239] loop4: detected capacity change from 0 to 8192 [ 74.069216][ T5239] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.073007][ T5239] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 74.076799][ T5239] REISERFS (device loop4): using ordered data mode [ 74.079117][ T5239] reiserfs: using flush barriers [ 74.081692][ T5239] REISERFS warning (device loop4): sh-460 journal_init: journal header magic 0 (device loop4) does not match to magic found in super block 49ce1e1e [ 74.364188][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.198056][ T5254] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 77.152951][ T5259] loop4: detected capacity change from 0 to 4096 [ 77.156530][ T5259] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 77.170362][ T5259] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 77.175297][ T55] bond0 (unregistering): Released all slaves [ 77.376995][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.379824][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.383432][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.386150][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.255584][ T5209] netlink: 'syz.0.196': attribute type 21 has an invalid length. [ 78.257825][ T5209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.196'. [ 78.260457][ T5209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 78.279186][ T5271] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 78.294370][ T4904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.296916][ T4904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.307818][ T4904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.310467][ T4904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.477995][ T4308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.483649][ T4317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.486880][ T4317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.490053][ T4317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.492623][ T4317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.495382][ T4317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.573369][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.575906][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.616011][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.637974][ T4753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.640493][ T4753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.646408][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.129353][ T5313] FAULT_INJECTION: forcing a failure. [ 80.129353][ T5313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.140175][ T5313] CPU: 0 PID: 5313 Comm: syz.0.226 Not tainted 6.1.102-syzkaller #0 [ 80.142317][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.145136][ T5313] Call trace: [ 80.146045][ T5313] dump_backtrace+0x1c8/0x1f4 [ 80.147412][ T5313] show_stack+0x2c/0x3c [ 80.148529][ T5313] dump_stack_lvl+0x108/0x170 [ 80.149834][ T5313] dump_stack+0x1c/0x5c [ 80.151126][ T5313] should_fail_ex+0x3c0/0x51c [ 80.152445][ T5313] should_fail+0x14/0x24 [ 80.153729][ T5313] should_fail_usercopy+0x20/0x30 [ 80.155192][ T5313] copy_msghdr_from_user+0xb8/0x59c [ 80.156719][ T5313] __sys_recvmsg+0x1fc/0x350 [ 80.157938][ T5313] __arm64_sys_recvmsg+0x80/0x94 [ 80.159374][ T5313] invoke_syscall+0x98/0x2c0 [ 80.160640][ T5313] el0_svc_common+0x138/0x258 [ 80.161885][ T5313] do_el0_svc+0x64/0x218 [ 80.163159][ T5313] el0_svc+0x58/0x168 [ 80.164269][ T5313] el0t_64_sync_handler+0x84/0xf0 [ 80.165692][ T5313] el0t_64_sync+0x18c/0x190 [ 80.522752][ T4317] Bluetooth: hci4: command tx timeout [ 80.540095][ T5323] loop2: detected capacity change from 0 to 32768 [ 80.578812][ T5323] XFS (loop2): Mounting V5 Filesystem [ 80.608163][ T5323] XFS (loop2): Ending clean mount [ 80.610865][ T5323] XFS (loop2): Quotacheck needed: Please wait. [ 80.633182][ T5323] XFS (loop2): Quotacheck: Done. [ 80.669334][ T5276] chnl_net:caif_netlink_parms(): no params data found [ 81.766610][ T4904] XFS (loop2): Unmounting Filesystem [ 82.581476][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.591249][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.602422][ T5276] device bridge_slave_0 entered promiscuous mode [ 82.604833][ T4317] Bluetooth: hci4: command tx timeout [ 82.620422][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.627163][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.635659][ T5276] device bridge_slave_1 entered promiscuous mode [ 82.675950][ T5360] binder: BINDER_SET_CONTEXT_MGR already set [ 82.690374][ T5360] binder: 5359:5360 ioctl 4018620d 20000040 returned -16 [ 82.693155][ T5276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.699769][ T5360] binder: tried to use weak ref as strong ref [ 82.704896][ T5276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.707290][ T5360] binder: 5359:5360 Acquire 1 refcount change on invalid ref 0 ret -22 [ 82.714845][ T5360] binder: 5359:5360 got transaction to invalid handle, 1 [ 82.721264][ T5360] binder: 5360:5359 cannot find target node [ 82.742675][ T5360] binder: 5359:5360 transaction call to 0:0 failed 3/29201/-22, size 72-24 line 3056 [ 82.753029][ T5276] team0: Port device team_slave_0 added [ 82.767009][ T5276] team0: Port device team_slave_1 added [ 82.832398][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.842673][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.875729][ T5276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.890717][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.891572][ T5369] FAULT_INJECTION: forcing a failure. [ 82.891572][ T5369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.903526][ T5369] CPU: 1 PID: 5369 Comm: syz.2.239 Not tainted 6.1.102-syzkaller #0 [ 82.905911][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.908690][ T5369] Call trace: [ 82.909644][ T5369] dump_backtrace+0x1c8/0x1f4 [ 82.911090][ T5369] show_stack+0x2c/0x3c [ 82.912216][ T5369] dump_stack_lvl+0x108/0x170 [ 82.913507][ T5369] dump_stack+0x1c/0x5c [ 82.914707][ T5369] should_fail_ex+0x3c0/0x51c [ 82.915970][ T5369] should_fail+0x14/0x24 [ 82.917138][ T5369] should_fail_usercopy+0x20/0x30 [ 82.918488][ T5369] move_addr_to_kernel+0xa8/0x270 [ 82.919956][ T5369] __sys_sendto+0x254/0x508 [ 82.921313][ T5369] __arm64_sys_sendto+0xd8/0xf8 [ 82.922656][ T5369] invoke_syscall+0x98/0x2c0 [ 82.923930][ T5369] el0_svc_common+0x138/0x258 [ 82.925255][ T5369] do_el0_svc+0x64/0x218 [ 82.926450][ T5369] el0_svc+0x58/0x168 [ 82.927625][ T5369] el0t_64_sync_handler+0x84/0xf0 [ 82.929009][ T5369] el0t_64_sync+0x18c/0x190 [ 82.957158][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.959103][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.983635][ T5276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.683114][ T4312] Bluetooth: hci4: command tx timeout [ 85.314594][ T5276] device hsr_slave_0 entered promiscuous mode [ 85.473070][ T5276] device hsr_slave_1 entered promiscuous mode [ 85.514313][ T5276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.516683][ T5276] Cannot create hsr debugfs directory [ 86.408019][ T5404] binder: 5403:5404 tried to acquire reference to desc 0, got 1 instead [ 86.431494][ T5404] binder: 5403:5404 got transaction with invalid data ptr [ 86.451165][ T5404] binder: 5403:5404 transaction call to 5403:0 failed 8/29201/-14, size 72-24 line 3343 [ 86.519764][ T5276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.616953][ T4347] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.676002][ T5276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.740291][ T5400] loop1: detected capacity change from 0 to 32768 [ 86.762879][ T4317] Bluetooth: hci4: command tx timeout [ 86.804749][ T5276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.949574][ T5406] loop4: detected capacity change from 0 to 32768 [ 87.104001][ T5400] XFS (loop1): Mounting V5 Filesystem [ 87.535648][ T5406] XFS (loop4): Mounting V5 Filesystem [ 87.783200][ T5400] XFS (loop1): Ending clean mount [ 87.795560][ T5276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.808803][ T5400] XFS (loop1): Quotacheck needed: Please wait. [ 87.844553][ T5400] XFS (loop1): Quotacheck: Done. [ 88.675413][ T5435] loop0: detected capacity change from 0 to 4096 [ 88.703027][ T5435] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 88.718490][ T4300] XFS (loop1): Unmounting Filesystem [ 88.758245][ T5406] XFS (loop4): Ending clean mount [ 88.772850][ T5406] XFS (loop4): Quotacheck needed: Please wait. [ 88.797707][ T5435] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 88.900251][ T5406] XFS (loop4): Quotacheck: Done. [ 88.934833][ T4304] XFS (loop4): Unmounting Filesystem [ 89.674781][ T5435] netlink: 104 bytes leftover after parsing attributes in process `syz.0.260'. [ 89.799541][ T4598] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 89.802304][ T4598] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 89.809838][ T4598] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 89.959070][ T5276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.075707][ T5276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.099280][ T5458] binder: 5450:5458 tried to acquire reference to desc 0, got 1 instead [ 90.111479][ T5458] binder: 5450:5458 got transaction with invalid data ptr [ 90.115651][ T5276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.127382][ T5461] FAULT_INJECTION: forcing a failure. [ 90.127382][ T5461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.131190][ T5461] CPU: 1 PID: 5461 Comm: syz.1.269 Not tainted 6.1.102-syzkaller #0 [ 90.133329][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.135958][ T5461] Call trace: [ 90.136887][ T5461] dump_backtrace+0x1c8/0x1f4 [ 90.138209][ T5461] show_stack+0x2c/0x3c [ 90.139494][ T5461] dump_stack_lvl+0x108/0x170 [ 90.140862][ T5461] dump_stack+0x1c/0x5c [ 90.142052][ T5461] should_fail_ex+0x3c0/0x51c [ 90.143479][ T5461] should_fail_alloc_page+0x74/0xb8 [ 90.144956][ T5461] prepare_alloc_pages+0x1c0/0x508 [ 90.146448][ T5461] __alloc_pages+0x150/0x730 [ 90.147730][ T5461] __folio_alloc+0x1c/0x48 [ 90.148990][ T5461] vma_alloc_folio+0x394/0x8d8 [ 90.150312][ T5461] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 90.152197][ T5461] handle_mm_fault+0x1e44/0x3ef0 [ 90.153571][ T5461] do_page_fault+0x330/0x890 [ 90.154942][ T5461] do_translation_fault+0x94/0xc8 [ 90.156349][ T5461] do_mem_abort+0x74/0x200 [ 90.157631][ T5461] el0_da+0x70/0x184 [ 90.158791][ T5461] el0t_64_sync_handler+0xcc/0xf0 [ 90.160583][ T5461] el0t_64_sync+0x18c/0x190 [ 90.170947][ T5461] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 90.215540][ T5458] binder: 5450:5458 transaction call to 5450:0 failed 13/29201/-14, size 72-24 line 3343 [ 90.275287][ T5276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.995554][ T5465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 91.111843][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 91.121237][ T5469] loop4: detected capacity change from 0 to 1024 [ 91.143620][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.154158][ T5469] hfsplus: unable to parse mount options [ 91.227047][ T5461] loop1: detected capacity change from 0 to 32768 [ 91.276792][ T5461] XFS (loop1): Mounting V5 Filesystem [ 91.318922][ T5461] XFS (loop1): Ending clean mount [ 91.334917][ T4870] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.337941][ T5461] XFS (loop1): Quotacheck needed: Please wait. [ 91.367309][ T5469] loop4: detected capacity change from 0 to 256 [ 91.371387][ T5469] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777ߦhӽ0=q" or missing value [ 91.381604][ T5461] XFS (loop1): Quotacheck: Done. [ 92.184050][ T4300] XFS (loop1): Unmounting Filesystem [ 92.207352][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.223130][ T4872] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.259198][ T5484] FAULT_INJECTION: forcing a failure. [ 92.259198][ T5484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.270941][ T5484] CPU: 0 PID: 5484 Comm: syz.2.274 Not tainted 6.1.102-syzkaller #0 [ 92.273234][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.275991][ T5484] Call trace: [ 92.277023][ T5484] dump_backtrace+0x1c8/0x1f4 [ 92.278342][ T5484] show_stack+0x2c/0x3c [ 92.279508][ T5484] dump_stack_lvl+0x108/0x170 [ 92.280887][ T5484] dump_stack+0x1c/0x5c [ 92.282082][ T5484] should_fail_ex+0x3c0/0x51c [ 92.283379][ T5484] should_fail+0x14/0x24 [ 92.284550][ T5484] should_fail_usercopy+0x20/0x30 [ 92.285992][ T5484] copy_msghdr_from_user+0xb8/0x59c [ 92.287441][ T5484] __sys_sendmsg+0x200/0x33c [ 92.288736][ T5484] __arm64_sys_sendmsg+0x80/0x94 [ 92.290137][ T5484] invoke_syscall+0x98/0x2c0 [ 92.291407][ T5484] el0_svc_common+0x138/0x258 [ 92.292721][ T5484] do_el0_svc+0x64/0x218 [ 92.293935][ T5484] el0_svc+0x58/0x168 [ 92.295050][ T5484] el0t_64_sync_handler+0x84/0xf0 [ 92.296474][ T5484] el0t_64_sync+0x18c/0x190 [ 92.298253][ T5486] loop4: detected capacity change from 0 to 512 [ 92.320261][ T5276] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.335398][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 92.339453][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.342106][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.368794][ T5486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.385475][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.388375][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.390953][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.393091][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.409642][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.429518][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.432501][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.434572][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.484176][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.486869][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.489914][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.549120][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.553982][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.563370][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.566190][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.568927][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.571578][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.630508][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.638731][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.645813][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.652127][ T5502] EXT4-fs error (device loop4): ext4_xattr_block_list:719: inode #15: comm syz.4.271: corrupted xattr block 32 [ 94.324026][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.393846][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 94.397188][ T5521] FAULT_INJECTION: forcing a failure. [ 94.397188][ T5521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.401048][ T5521] CPU: 1 PID: 5521 Comm: syz.1.284 Not tainted 6.1.102-syzkaller #0 [ 94.403234][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 94.406011][ T5521] Call trace: [ 94.406929][ T5521] dump_backtrace+0x1c8/0x1f4 [ 94.408231][ T5521] show_stack+0x2c/0x3c [ 94.409352][ T5521] dump_stack_lvl+0x108/0x170 [ 94.410708][ T5521] dump_stack+0x1c/0x5c [ 94.411877][ T5521] should_fail_ex+0x3c0/0x51c [ 94.413142][ T5521] should_fail+0x14/0x24 [ 94.414318][ T5521] should_fail_usercopy+0x20/0x30 [ 94.415652][ T5521] copy_msghdr_from_user+0xb8/0x59c [ 94.417092][ T5521] __sys_sendmsg+0x200/0x33c [ 94.418476][ T5521] __arm64_sys_sendmsg+0x80/0x94 [ 94.419869][ T5521] invoke_syscall+0x98/0x2c0 [ 94.421069][ T5521] el0_svc_common+0x138/0x258 [ 94.422346][ T5521] do_el0_svc+0x64/0x218 [ 94.423563][ T5521] el0_svc+0x58/0x168 [ 94.424705][ T5521] el0t_64_sync_handler+0x84/0xf0 [ 94.426099][ T5521] el0t_64_sync+0x18c/0x190 [ 94.498590][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 94.546947][ T5525] binder: 5524:5525 tried to acquire reference to desc 0, got 1 instead [ 94.553777][ T5525] binder: 5524:5525 got transaction with invalid data ptr [ 94.555897][ T5525] binder: 5524:5525 transaction call to 5524:0 failed 18/29201/-14, size 72-24 line 3343 [ 94.641966][ T5537] netlink: 76 bytes leftover after parsing attributes in process `syz.0.289'. [ 95.600640][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.721455][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 95.775388][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.777727][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.783789][ T5546] netlink: 'syz.1.292': attribute type 21 has an invalid length. [ 95.785944][ T5546] netlink: 'syz.1.292': attribute type 4 has an invalid length. [ 95.978321][ T55] device hsr_slave_0 left promiscuous mode [ 95.995473][ T5561] FAULT_INJECTION: forcing a failure. [ 95.995473][ T5561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.999328][ T5561] CPU: 0 PID: 5561 Comm: syz.2.297 Not tainted 6.1.102-syzkaller #0 [ 96.001573][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.004592][ T5561] Call trace: [ 96.005563][ T5561] dump_backtrace+0x1c8/0x1f4 [ 96.006890][ T5561] show_stack+0x2c/0x3c [ 96.008069][ T5561] dump_stack_lvl+0x108/0x170 [ 96.009406][ T5561] dump_stack+0x1c/0x5c [ 96.010587][ T5561] should_fail_ex+0x3c0/0x51c [ 96.011846][ T5561] should_fail+0x14/0x24 [ 96.013027][ T5561] should_fail_usercopy+0x20/0x30 [ 96.014524][ T5561] move_addr_to_kernel+0xa8/0x270 [ 96.015867][ T5561] __sys_sendto+0x254/0x508 [ 96.017106][ T5561] __arm64_sys_sendto+0xd8/0xf8 [ 96.018438][ T5561] invoke_syscall+0x98/0x2c0 [ 96.019748][ T5561] el0_svc_common+0x138/0x258 [ 96.021046][ T5561] do_el0_svc+0x64/0x218 [ 96.022250][ T5561] el0_svc+0x58/0x168 [ 96.023374][ T5561] el0t_64_sync_handler+0x84/0xf0 [ 96.024763][ T5561] el0t_64_sync+0x18c/0x190 [ 96.263274][ T55] device hsr_slave_1 left promiscuous mode [ 96.413172][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.416137][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.518378][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.602769][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.693343][ T55] device bridge_slave_1 left promiscuous mode [ 96.695167][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.751253][ T5563] loop1: detected capacity change from 0 to 2048 [ 96.787603][ T55] device bridge_slave_0 left promiscuous mode [ 96.789464][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.799721][ T5563] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 96.806555][ T5563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.963561][ T5577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.303'. [ 97.122958][ T55] device veth1_macvtap left promiscuous mode [ 97.124902][ T55] device veth0_macvtap left promiscuous mode [ 97.126605][ T55] device veth1_vlan left promiscuous mode [ 97.128317][ T55] device veth0_vlan left promiscuous mode [ 98.207895][ T5591] binder: 5589:5591 tried to acquire reference to desc 0, got 1 instead [ 98.211261][ T5591] binder: 5589:5591 got transaction with invalid data ptr [ 98.213539][ T5591] binder: 5589:5591 transaction call to 5589:0 failed 23/29201/-14, size 72-24 line 3343 [ 98.980094][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.098440][ T55] team0 (unregistering): Port device team_slave_1 removed [ 99.234885][ T55] team0 (unregistering): Port device team_slave_0 removed [ 99.413560][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.613566][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.148684][ T55] bond0 (unregistering): Released all slaves [ 102.400614][ T5276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.496478][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.499560][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.614658][ T5598] FAULT_INJECTION: forcing a failure. [ 102.614658][ T5598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.618265][ T5598] CPU: 0 PID: 5598 Comm: syz.0.308 Not tainted 6.1.102-syzkaller #0 [ 102.620477][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.623182][ T5598] Call trace: [ 102.624080][ T5598] dump_backtrace+0x1c8/0x1f4 [ 102.625297][ T5598] show_stack+0x2c/0x3c [ 102.626387][ T5598] dump_stack_lvl+0x108/0x170 [ 102.627850][ T5598] dump_stack+0x1c/0x5c [ 102.629033][ T5598] should_fail_ex+0x3c0/0x51c [ 102.630289][ T5598] should_fail+0x14/0x24 [ 102.631491][ T5598] should_fail_usercopy+0x20/0x30 [ 102.632838][ T5598] copy_from_bpfptr+0x78/0x1f0 [ 102.634237][ T5598] __sys_bpf+0x1fc/0x654 [ 102.635470][ T5598] __arm64_sys_bpf+0x80/0x98 [ 102.636788][ T5598] invoke_syscall+0x98/0x2c0 [ 102.638033][ T5598] el0_svc_common+0x138/0x258 [ 102.639386][ T5598] do_el0_svc+0x64/0x218 [ 102.640537][ T5598] el0_svc+0x58/0x168 [ 102.641649][ T5598] el0t_64_sync_handler+0x84/0xf0 [ 102.643002][ T5598] el0t_64_sync+0x18c/0x190 [ 102.650379][ T5276] device veth0_vlan entered promiscuous mode [ 102.679110][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.691666][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.707148][ T5276] device veth1_vlan entered promiscuous mode [ 102.709598][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.712163][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.741836][ T1516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.790636][ T5276] device veth0_macvtap entered promiscuous mode [ 102.803579][ T5276] device veth1_macvtap entered promiscuous mode [ 102.820252][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.829472][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.832124][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.835823][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.838452][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.841199][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.850569][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.865413][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.872258][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.890207][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.902186][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.909943][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.933540][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.936334][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.939189][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.941968][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.945054][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.949550][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.953016][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.956005][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.958994][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.961786][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.965104][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.967897][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.971603][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.975258][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.978205][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.997450][ T5276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.000390][ T5276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.007229][ T5276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.014718][ T5276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.160733][ T5482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.166556][ T5482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.189205][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.206199][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.220968][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.240366][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.396575][ T5620] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.814562][ T5629] netlink: 76 bytes leftover after parsing attributes in process `syz.1.319'. [ 104.213012][ T5618] loop2: detected capacity change from 0 to 40427 [ 104.249301][ T5618] F2FS-fs (loop2): invalid crc value [ 104.286878][ T5618] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.350540][ T5618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 104.460768][ T5618] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 104.511551][ T4904] ------------[ cut here ]------------ [ 104.513562][ T4904] kernel BUG at fs/f2fs/inode.c:848! [ 104.515203][ T4904] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 104.517373][ T4904] Modules linked in: [ 104.518465][ T4904] CPU: 1 PID: 4904 Comm: syz-executor Not tainted 6.1.102-syzkaller #0 [ 104.520844][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.523632][ T4904] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 104.525835][ T4904] pc : f2fs_evict_inode+0x13ec/0x15ac [ 104.527486][ T4904] lr : f2fs_evict_inode+0x13ec/0x15ac [ 104.528891][ T4904] sp : ffff80001eb77570 [ 104.530059][ T4904] x29: ffff80001eb77600 x28: dfff800000000000 x27: 00000000000000ff [ 104.532346][ T4904] x26: 1fffe0001c245506 x25: ffff0000e122a830 x24: ffff0000e122a3c0 [ 104.534645][ T4904] x23: ffff0000e122a3c8 x22: ffff0000c89f0087 x21: 0000000000000102 [ 104.536919][ T4904] x20: ffff0000dbdcc000 x19: ffff0000e122a380 x18: ffff80001eb76de0 [ 104.539139][ T4904] x17: ffff800018a96000 x16: ffff80000825fc6c x15: 0000000000000000 [ 104.541410][ T4904] x14: 1ffff00002b380b0 x13: dfff800000000000 x12: 0000000000000001 [ 104.543652][ T4904] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff80000a447a44 [ 104.545975][ T4904] x8 : ffff0000d9403780 x7 : ffff80000a4a4be8 x6 : 0000000000000000 [ 104.548189][ T4904] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000a4472e8 [ 104.550347][ T4904] x2 : 0000000000000001 x1 : 0000000000000002 x0 : 0000000000000000 [ 104.552565][ T4904] Call trace: [ 104.553505][ T4904] f2fs_evict_inode+0x13ec/0x15ac [ 104.554925][ T4904] evict+0x260/0x68c [ 104.555985][ T4904] evict_inodes+0x6b4/0x74c [ 104.557186][ T4904] generic_shutdown_super+0x9c/0x328 [ 104.558706][ T4904] kill_block_super+0x70/0xdc [ 104.560017][ T4904] kill_f2fs_super+0x264/0x328 [ 104.561363][ T4904] deactivate_locked_super+0xac/0x124 [ 104.562846][ T4904] deactivate_super+0xf0/0x110 [ 104.564133][ T4904] cleanup_mnt+0x394/0x41c [ 104.565368][ T4904] __cleanup_mnt+0x20/0x30 [ 104.566567][ T4904] task_work_run+0x240/0x2f0 [ 104.567834][ T4904] do_notify_resume+0x2148/0x3474 [ 104.569275][ T4904] el0_svc+0x9c/0x168 [ 104.570397][ T4904] el0t_64_sync_handler+0x84/0xf0 [ 104.571755][ T4904] el0t_64_sync+0x18c/0x190 [ 104.573140][ T4904] Code: c8097ea8 35ffffa9 17fffe2f 9782ca63 (d4210000) [ 104.575114][ T4904] ---[ end trace 0000000000000000 ]--- [ 104.609468][ T5638] loop1: detected capacity change from 0 to 40427 [ 104.641958][ T5638] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 104.648595][ T5638] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.656406][ T5638] F2FS-fs (loop1): invalid crc value [ 105.170257][ T4904] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 105.172461][ T4904] SMP: stopping secondary CPUs [ 105.173809][ T4904] Kernel Offset: disabled [ 105.175052][ T4904] CPU features: 0x00000,02070084,26017203 [ 105.176685][ T4904] Memory Limit: none [ 105.744742][ T4904] Rebooting in 86400 seconds..