last executing test programs: 2.479195306s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@commit={'commit', 0x3d, 0x10001}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x21, 0x4be, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) getuid() r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) r7 = socket(0x1e, 0x805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r6, 0x0, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000300)=@name, 0x10, 0x0}, 0x0) 2.014974319s ago: executing program 3 (id=4): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b4, &(0x7f0000002640)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0xffeffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x51, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1.763826052s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000001640)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f1b4fc851faf8228c2eb860e73d800000000fc8f28daf7b92d399638f3725b771bae16409426ba68f49ea9bc3f00000009000000af03f86e3850000000000000000000006fb7eb6e741aefc8dcea14cf372aa94362bb72d286ef49ca7100a2ab5ee798265a3fdbfc1304f534906c81748f507aee574b8a29d8c6d2ee"], 0x1, 0xa12, &(0x7f00000020c0)="$eJzs3U2MG1cdAPBn73rTfJQ4JaFLGtqEQls+uttslvARQVM1F6Km4lap4hKlaYlIAyKVoFUPSU7caFWFKx/i1EtFERK9oKgnLpVoJC49FQ4ciIJUiQMUkkXxvuf1/mNr7M3uer3+/aTZ55n/s98b73g8npn3XgLGVr31d35+upbS5XfeOPaPh/6+9daSx9s5mq2/kx1zjZRSLc9Phtf7cGIxvfHRq6e6pbU01/pb5tPT19vP3Z5SupD2pyupmfZevvr6e3NPnbh4/NKB9988cm1t1h4AAMbLd64cmd/z1z/ft+vjt+4/mra0l5fj82ae35GP+4/mA/9y/F9Py+drHVOnqZBvMk/1kG+iS77Ochoh32SP8qfC6zZ65NtSUf5Ex7Ju6w2jrGzHzVSrzyybr9dnZhZ/k6fW7/qp2sy5M2efPz+kigKr7l8PpJT2m0ymcZwWdg57DwSwKF4vvM2FeGbhzrRfbbK/8q8/Ue/+fFgF6739K3+0yv/NRXscVs9m3ZrKepXP0Y48H68jxPuXBv38l9eL1yMafdaz13WEUbm+0KueE+tcj5XqVf+4XWxW38xpeR++FeKdn5/4Px2V/zHQ3b+d/zeZxnZaGPYOCNiw4n1zC1mJx/v6YnxLRfyuivjWivi2ivj2ijiMs9+99LP0Wm3pd378TT/o+bBynu3unH5iwPrE85GDlh/v+x3UnZYf7yeGjewPJ585/bXnnr26eP9/rb3938zb+/4838yfrSs5QzlfGM+rt+/9by4vp94j3z2hPnd3yd96vHt5vtrupddJHfuZ2+oxvfx5O3vl27c8XzPk25qnu0J94/HJtvC8cvxR9qvl/ZoM69sI6zEV6lH2K7tyGusBK1G2x173/5ftczo1as+fOXv6sTxfttM/TTS23Fp+cJ3rDdy5ftv/TKfl7X92tJc36p37hZ1Ly2ud+4VmWD7XY/mhPF++5743sbW1fObUD84+t9orD2Pu/MuvfP/k2bOnf+SBBxv7wYWNUY1xeTDsPROw1mZfevGHs+dffuXRMy+efOH0C6fPHTp8+NDc3OGvH5qfbR3Xz3Ye3QObydKX/rBrAgAAAAAAAAAAAPTrx8ePXf3Lu1/9YLH9/1L7v9L+v9z5W9r//zS0/4/t5Es7+NIOcFeXeCtP6GB1KuRr5OmTob67Qzl7wvM+ldP2OH65/X8pLvbrWupzb1ge++8t+UJ3Arf1lzIV+iCJ4wV+NqeXcvrrBENU29p9cU6r+rcu23rpn0K/FKOp/N/K1lD6MSntv3v161T2/7vWoY6svvVoTjjsdQS6+6f+v8d7ensD1ME0tGlhwSgewMYw7PE/y3nPkp7747fvujWVbNefWL6/jP2Xwp3Y6ONPKn9zjf/ZHv+u7/1fGDGvubJy//OLax90FJv29lt+XP/SD/Tuwcr/OJdf1ubh1F/5C78K5ccLQn36byh/W5/l37b++1ZW/v9y+eVte+TBfstfrHGtvrwe8bxxuf4XzxsXN8L6l749B17/FQ7UeDOXD+NsVMaZHdSojP/bS7wP4yt5vuwIy30OcbyTQetf7q8o3wN7wuvXKr7fjP872r6R06rPQxn/t2yPzS7z9Y75Rpf3drPua2BUfej6n8k0ttPCwsLantCqMNTCGfr7P+zfCcMuf9jvf5U4/m88ho/j/8Z4HP83xuP4vzEex9eL8Tj+b3w/4/i/MX5veN04PvB0RfzTFfG9FfH7KuL7KuKfqYgfqIjfXxF/oCJ+T0X8wYr45yrin6+IP1QRf6Qi/oWK+GZX2qOM6/rDOIvt83z+YXyU6z+9Pv+7K+LA6Pr5WweffPbt7zYX2/9Ptc6HbOm4jnc052vk384/yfPxunfqmL8VezfP/y3EN/r5Dhgnsf+M+P3+cEUcGF3lPi+fbxhDte499vTbb1Wv43xGyxdz+qWcfjmnj+Z0JqezOT2Y07l1qh9r48nf/v7Ia7Wl3/s7Q7zf+8lje6DYT9ShPusTzw8Mej977MdvUHda/gqbgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxNvfV3fn66ltLld9449syJM7O3ljzeztFs/Z3smGu0n5fSYzmdyOkv84MbH716qjO9mdNamku1VGsvT09fb5e0PaV0Ie1PV1Iz7b189fX35p46cfH4pQPvv3nk2tq9AwAAALD5/T8AAP//iNsORA==") sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x4, 0xfffffffffffffffe, &(0x7f0000000140)=0x19) 1.52860709s ago: executing program 4 (id=5): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8995, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@private1}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@private}, 0x0, @in=@rand_addr=0xffffffff}}, 0xe8) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x62, 0xa, 0xff00}, [@call={0x71, 0x0, 0x408}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.476966604s ago: executing program 0 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000180)={0x0, @raw_data="7abf295bcabd6a76f1092bfe2074c8a8d24ae2eaedc2dd17a25f86ad9b2e4b74ea9096be7ba96d7df34cb7e9dea1bd1b193d6a227bf71c350f70317a2a34d18f7bbf02298af499eff3d9dfb501094dc7e18482bc8cf9ba252518ade4877109ef5db38925317f032c65f04ab68fe09c0c40d09fbab702da74d51e84c1380db97625f364a0c772c2dcaf02458c12074c11417885201cdb872053e45a07ccb27cf4ae7b3d67f18279d886856b80a3a8c7fd792fd8da5bb92efb848f964888ac4ffecb26b6256cfcb011"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) close(r4) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) 0s ago: executing program 1 (id=7): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)=ANY=[@ANYBLOB="0800010000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x200000, &(0x7f0000000440)={[{}]}, 0x0, 0x25b, &(0x7f0000000580)="$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") ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/81) socket(0x0, 0x0, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x9, 0x82e81) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x68, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0x0, 0x0, 0x0]}]]}, 0x68}}, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={'\x00', 0x201, 0x0, 0x7, 0x80000000, 0xffffffffffffff00, r2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x0, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 50.988366][ T5216] cgroup: Unknown subsys name 'net' [ 51.120021][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.359866][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.426208][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.434761][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.441501][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.442368][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.450195][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.464379][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.466339][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.472682][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.479766][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.485684][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.493210][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.500137][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.507545][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.514425][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.521578][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.528204][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.535008][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.542245][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.548948][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.556069][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.562754][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.575188][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.576534][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.594073][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.615575][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.632764][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.640290][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.648359][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.656292][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.663710][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.975803][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 55.014592][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 55.135912][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 55.159180][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 55.169132][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.176378][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.183707][ T5229] bridge_slave_0: entered allmulticast mode [ 55.190727][ T5229] bridge_slave_0: entered promiscuous mode [ 55.228941][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.236185][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.243281][ T5229] bridge_slave_1: entered allmulticast mode [ 55.250023][ T5229] bridge_slave_1: entered promiscuous mode [ 55.269757][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.276877][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.284670][ T5226] bridge_slave_0: entered allmulticast mode [ 55.291162][ T5226] bridge_slave_0: entered promiscuous mode [ 55.302552][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.309706][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.317187][ T5226] bridge_slave_1: entered allmulticast mode [ 55.324020][ T5226] bridge_slave_1: entered promiscuous mode [ 55.400209][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.415684][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.427714][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.440833][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.521565][ T5229] team0: Port device team_slave_0 added [ 55.527706][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 55.538530][ T5226] team0: Port device team_slave_0 added [ 55.559887][ T5229] team0: Port device team_slave_1 added [ 55.570621][ T5226] team0: Port device team_slave_1 added [ 55.576791][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.584064][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.591196][ T5227] bridge_slave_0: entered allmulticast mode [ 55.597841][ T5227] bridge_slave_0: entered promiscuous mode [ 55.606198][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.613282][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.620471][ T5227] bridge_slave_1: entered allmulticast mode [ 55.627308][ T5227] bridge_slave_1: entered promiscuous mode [ 55.633763][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.640964][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.648163][ T5235] bridge_slave_0: entered allmulticast mode [ 55.655281][ T5235] bridge_slave_0: entered promiscuous mode [ 55.693085][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.700528][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.708094][ T5235] bridge_slave_1: entered allmulticast mode [ 55.717956][ T5235] bridge_slave_1: entered promiscuous mode [ 55.725343][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.732342][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.758501][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.793193][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.810647][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.817646][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.843603][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.857636][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.864655][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.890545][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.903308][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.941590][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.948828][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.975436][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.995281][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.007481][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.025588][ T5227] team0: Port device team_slave_0 added [ 56.069906][ T5227] team0: Port device team_slave_1 added [ 56.092687][ T5229] hsr_slave_0: entered promiscuous mode [ 56.099668][ T5229] hsr_slave_1: entered promiscuous mode [ 56.108573][ T5235] team0: Port device team_slave_0 added [ 56.116193][ T5235] team0: Port device team_slave_1 added [ 56.122082][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.129521][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.144154][ T5240] bridge_slave_0: entered allmulticast mode [ 56.150757][ T5240] bridge_slave_0: entered promiscuous mode [ 56.158528][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.165718][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.172835][ T5240] bridge_slave_1: entered allmulticast mode [ 56.179566][ T5240] bridge_slave_1: entered promiscuous mode [ 56.191824][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.201132][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.227573][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.268536][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.277449][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.303747][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.340008][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.351906][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.375806][ T5226] hsr_slave_0: entered promiscuous mode [ 56.381928][ T5226] hsr_slave_1: entered promiscuous mode [ 56.390237][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.398049][ T5226] Cannot create hsr debugfs directory [ 56.411414][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.418419][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.444606][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.471878][ T5227] hsr_slave_0: entered promiscuous mode [ 56.478291][ T5227] hsr_slave_1: entered promiscuous mode [ 56.484455][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.492025][ T5227] Cannot create hsr debugfs directory [ 56.506191][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.513165][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.539180][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.559277][ T5240] team0: Port device team_slave_0 added [ 56.591861][ T5240] team0: Port device team_slave_1 added [ 56.614697][ T5233] Bluetooth: hci3: command tx timeout [ 56.614768][ T54] Bluetooth: hci1: command tx timeout [ 56.625970][ T5241] Bluetooth: hci2: command tx timeout [ 56.693647][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.698965][ T54] Bluetooth: hci4: command tx timeout [ 56.700738][ T5241] Bluetooth: hci0: command tx timeout [ 56.706295][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.740719][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.756295][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.763250][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.789549][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.827733][ T5235] hsr_slave_0: entered promiscuous mode [ 56.834271][ T5235] hsr_slave_1: entered promiscuous mode [ 56.840241][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.848386][ T5235] Cannot create hsr debugfs directory [ 56.931523][ T5240] hsr_slave_0: entered promiscuous mode [ 56.938591][ T5240] hsr_slave_1: entered promiscuous mode [ 56.944847][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.952400][ T5240] Cannot create hsr debugfs directory [ 57.040643][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.056880][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.066804][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.097039][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.166826][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.182968][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.191986][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.215623][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.280502][ T5227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.290386][ T5227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.300452][ T5227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.314989][ T5227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.392681][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.426080][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.439319][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.448323][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.491141][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.524823][ T5240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.546699][ T5240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.559609][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.581482][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.588982][ T5240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.599139][ T5240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.644881][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.652667][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.675727][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.682881][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.711695][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.718828][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.729570][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.736699][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.747595][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.754673][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.815589][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.838163][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.853866][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.893360][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.900487][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.912089][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.919205][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.928769][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.935850][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.944827][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.951938][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.002914][ T5227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.019925][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.123363][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.168413][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.200340][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.207459][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.257906][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.265296][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.318486][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.452613][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.500806][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.513494][ T5226] veth0_vlan: entered promiscuous mode [ 58.559676][ T5226] veth1_vlan: entered promiscuous mode [ 58.578897][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.688490][ T5226] veth0_macvtap: entered promiscuous mode [ 58.695105][ T5241] Bluetooth: hci3: command tx timeout [ 58.700525][ T5241] Bluetooth: hci1: command tx timeout [ 58.705385][ T5235] veth0_vlan: entered promiscuous mode [ 58.707833][ T54] Bluetooth: hci2: command tx timeout [ 58.734408][ T5229] veth0_vlan: entered promiscuous mode [ 58.750578][ T5226] veth1_macvtap: entered promiscuous mode [ 58.764276][ T5229] veth1_vlan: entered promiscuous mode [ 58.772040][ T5235] veth1_vlan: entered promiscuous mode [ 58.774984][ T54] Bluetooth: hci4: command tx timeout [ 58.782903][ T5241] Bluetooth: hci0: command tx timeout [ 58.833215][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.857123][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.869619][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.908342][ T5227] veth0_vlan: entered promiscuous mode [ 58.920777][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.930339][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.940556][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.949830][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.967300][ T5227] veth1_vlan: entered promiscuous mode [ 58.996116][ T5229] veth0_macvtap: entered promiscuous mode [ 59.006484][ T5235] veth0_macvtap: entered promiscuous mode [ 59.037986][ T5229] veth1_macvtap: entered promiscuous mode [ 59.049906][ T5235] veth1_macvtap: entered promiscuous mode [ 59.082206][ T5227] veth0_macvtap: entered promiscuous mode [ 59.092778][ T5240] veth0_vlan: entered promiscuous mode [ 59.114959][ T5227] veth1_macvtap: entered promiscuous mode [ 59.136826][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.149529][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.160609][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.169465][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.180590][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.192581][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.203661][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.215315][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.232181][ T5240] veth1_vlan: entered promiscuous mode [ 59.245857][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.262532][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.273473][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.293155][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.301169][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.314619][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.329697][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.339800][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.353839][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.365005][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.376587][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.387254][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.397770][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.408530][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.418793][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.429922][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.441337][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.450210][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.459149][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.468373][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.477498][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.500816][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.509633][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.518411][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.527377][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.549410][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.560281][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.570625][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.583344][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.593348][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.604613][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.615564][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.637917][ T5227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.648727][ T5227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.658891][ T5227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.667871][ T5227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.680548][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.691215][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.732804][ T5240] veth0_macvtap: entered promiscuous mode [ 59.791737][ T5240] veth1_macvtap: entered promiscuous mode [ 59.815766][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.829694][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.901119][ T5311] loop0: detected capacity change from 0 to 512 [ 59.909291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.922078][ T5311] EXT4-fs: Mount option(s) incompatible with ext2 [ 59.934083][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.952505][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.963561][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.978699][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.986319][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.997340][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.007884][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.017837][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.028380][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.038269][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.048775][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.060794][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.105141][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.117088][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.127706][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.140772][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.150698][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.161225][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.173353][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.188450][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.199513][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.213206][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.214747][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.243331][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.251698][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.284711][ T5240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.291334][ T5314] loop3: detected capacity change from 0 to 164 [ 60.321068][ T5240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.330350][ T5240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.340033][ T5240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.474330][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.519324][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.658196][ T5317] loop1: detected capacity change from 0 to 2048 [ 60.671145][ T5317] NILFS (loop1): invalid segment: Sequence number mismatch [ 60.678822][ T5317] NILFS (loop1): trying rollback from an earlier position [ 60.708069][ T5317] NILFS (loop1): recovery complete [ 60.718344][ T5318] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.725012][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.777782][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.799269][ T5241] Bluetooth: hci2: command tx timeout [ 60.809948][ T54] Bluetooth: hci1: command tx timeout [ 60.811741][ T5241] Bluetooth: hci3: command tx timeout [ 60.837381][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.846262][ T5315] rock: directory entry would overflow storage [ 60.863032][ T5241] Bluetooth: hci0: command tx timeout [ 60.868635][ T5241] Bluetooth: hci4: command tx timeout [ 60.879624][ T5315] rock: sig=0x4f50, size=4, remaining=3 [ 60.885707][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.901021][ T5315] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 61.824517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 62.294756][ T5329] loop0: detected capacity change from 0 to 1024 [ 62.361836][ T0] ================================================================== [ 62.369917][ T0] BUG: KASAN: slab-use-after-free in sched_core_balance+0x5e4/0x1180 [ 62.377973][ T0] Read of size 8 at addr ffff8880229bdcd8 by task swapper/0/0 [ 62.385403][ T0] [ 62.387710][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc5-next-20240827-syzkaller #0 [ 62.397486][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.407517][ T0] Call Trace: [ 62.410775][ T0] [ 62.413694][ T0] dump_stack_lvl+0x241/0x360 [ 62.418355][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.423532][ T0] ? __pfx__printk+0x10/0x10 [ 62.428099][ T0] ? _printk+0xd5/0x120 [ 62.432235][ T0] ? __virt_addr_valid+0x183/0x530 [ 62.437320][ T0] ? __virt_addr_valid+0x183/0x530 [ 62.442407][ T0] print_report+0x169/0x550 [ 62.446897][ T0] ? __virt_addr_valid+0x183/0x530 [ 62.451993][ T0] ? __virt_addr_valid+0x183/0x530 [ 62.457076][ T0] ? __virt_addr_valid+0x45f/0x530 [ 62.462160][ T0] ? __phys_addr+0xba/0x170 [ 62.466637][ T0] ? sched_core_balance+0x5e4/0x1180 [ 62.471896][ T0] kasan_report+0x143/0x180 [ 62.476379][ T0] ? sched_core_balance+0x5e4/0x1180 [ 62.481641][ T0] sched_core_balance+0x5e4/0x1180 [ 62.486725][ T0] ? sched_core_balance+0xca/0x1180 [ 62.491897][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 62.497418][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 62.502938][ T0] __balance_callbacks+0x188/0x280 [ 62.508026][ T0] finish_task_switch+0x1d3/0x870 [ 62.513027][ T0] __schedule+0x1852/0x4b30 [ 62.517512][ T0] ? __pfx___schedule+0x10/0x10 [ 62.522337][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 62.527601][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 62.533730][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 62.539352][ T0] schedule_idle+0x53/0x90 [ 62.543744][ T0] do_idle+0x56a/0x5d0 [ 62.547823][ T0] ? __pfx___schedule+0x10/0x10 [ 62.552660][ T0] ? __pfx_do_idle+0x10/0x10 [ 62.557229][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 62.563121][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 62.569433][ T0] ? rest_init+0x31/0x300 [ 62.573737][ T0] ? rest_init+0x31/0x300 [ 62.578038][ T0] cpu_startup_entry+0x42/0x60 [ 62.582779][ T0] rest_init+0x2dc/0x300 [ 62.586995][ T0] ? __pfx_x86_late_time_init+0x10/0x10 [ 62.592533][ T0] start_kernel+0x47f/0x500 [ 62.597015][ T0] x86_64_start_reservations+0x2a/0x30 [ 62.602449][ T0] x86_64_start_kernel+0x9f/0xa0 [ 62.607369][ T0] common_startup_64+0x13e/0x147 [ 62.612289][ T0] [ 62.615285][ T0] [ 62.617584][ T0] Allocated by task 5319: [ 62.621883][ T0] kasan_save_track+0x3f/0x80 [ 62.626535][ T0] __kasan_slab_alloc+0x66/0x80 [ 62.631359][ T0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 62.637227][ T0] dup_task_struct+0x57/0x8c0 [ 62.641881][ T0] copy_process+0x5d1/0x3d50 [ 62.646447][ T0] kernel_clone+0x226/0x8f0 [ 62.650929][ T0] __se_sys_clone3+0x2cb/0x350 [ 62.655670][ T0] do_syscall_64+0xf3/0x230 [ 62.660150][ T0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.666019][ T0] [ 62.668317][ T0] Freed by task 36: [ 62.672097][ T0] kasan_save_track+0x3f/0x80 [ 62.676747][ T0] kasan_save_free_info+0x40/0x50 [ 62.681744][ T0] __kasan_slab_free+0x59/0x70 [ 62.686483][ T0] kmem_cache_free+0x194/0x3d0 [ 62.691225][ T0] delayed_put_task_struct+0x125/0x300 [ 62.696656][ T0] rcu_core+0xaaa/0x17a0 [ 62.700870][ T0] handle_softirqs+0x2c5/0x980 [ 62.705627][ T0] do_softirq+0x11b/0x1e0 [ 62.709930][ T0] __local_bh_enable_ip+0x1bb/0x200 [ 62.715113][ T0] addrconf_dad_work+0x2ec/0x16f0 [ 62.720113][ T0] process_scheduled_works+0xa63/0x1850 [ 62.725636][ T0] worker_thread+0x86d/0xd10 [ 62.730213][ T0] kthread+0x2f0/0x390 [ 62.734253][ T0] ret_from_fork+0x4b/0x80 [ 62.738648][ T0] ret_from_fork_asm+0x1a/0x30 [ 62.743482][ T0] [ 62.745807][ T0] Last potentially related work creation: [ 62.751517][ T0] kasan_save_stack+0x3f/0x60 [ 62.756172][ T0] __kasan_record_aux_stack+0xac/0xc0 [ 62.761518][ T0] call_rcu+0x167/0xa70 [ 62.765649][ T0] __schedule+0x1852/0x4b30 [ 62.770129][ T0] schedule+0x14b/0x320 [ 62.774264][ T0] do_nanosleep+0x197/0x600 [ 62.778775][ T0] hrtimer_nanosleep+0x1e3/0x3f0 [ 62.783700][ T0] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 62.789222][ T0] do_syscall_64+0xf3/0x230 [ 62.793703][ T0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.799601][ T0] [ 62.801898][ T0] Second to last potentially related work creation: [ 62.808477][ T0] kasan_save_stack+0x3f/0x60 [ 62.813128][ T0] __kasan_record_aux_stack+0xac/0xc0 [ 62.818473][ T0] task_work_add+0xb8/0x450 [ 62.822950][ T0] sched_tick+0x322/0x610 [ 62.827255][ T0] update_process_times+0x202/0x230 [ 62.832426][ T0] tick_nohz_handler+0x37c/0x500 [ 62.837340][ T0] __hrtimer_run_queues+0x551/0xd50 [ 62.842513][ T0] hrtimer_interrupt+0x396/0x990 [ 62.847426][ T0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 62.853380][ T0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 62.858989][ T0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.864948][ T0] [ 62.867250][ T0] The buggy address belongs to the object at ffff8880229bda00 [ 62.867250][ T0] which belongs to the cache task_struct of size 7424 [ 62.881376][ T0] The buggy address is located 728 bytes inside of [ 62.881376][ T0] freed 7424-byte region [ffff8880229bda00, ffff8880229bf700) [ 62.895248][ T0] [ 62.897570][ T0] The buggy address belongs to the physical page: [ 62.903983][ T0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x229b8 [ 62.912747][ T0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 62.921220][ T0] memcg:ffff88802b4c2541 [ 62.925434][ T0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 62.932960][ T0] page_type: f5(slab) [ 62.936923][ T0] raw: 00fff00000000040 ffff8880166f8500 ffffea0000870e00 dead000000000002 [ 62.945482][ T0] raw: 0000000000000000 0000000000040004 00000001f5000000 ffff88802b4c2541 [ 62.954041][ T0] head: 00fff00000000040 ffff8880166f8500 ffffea0000870e00 dead000000000002 [ 62.962690][ T0] head: 0000000000000000 0000000000040004 00000001f5000000 ffff88802b4c2541 [ 62.971349][ T0] head: 00fff00000000003 ffffea00008a6e01 ffffffffffffffff 0000000000000000 [ 62.979992][ T0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 62.988631][ T0] page dumped because: kasan: bad access detected [ 62.995021][ T0] page_owner tracks the page as allocated [ 63.000710][ T0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u8:0), ts 7129765693, free_ts 0 [ 63.020771][ T0] post_alloc_hook+0x1f3/0x230 [ 63.025517][ T0] get_page_from_freelist+0x312a/0x3270 [ 63.031040][ T0] __alloc_pages_noprof+0x29e/0x780 [ 63.036218][ T0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 63.041650][ T0] alloc_slab_page+0x6a/0x120 [ 63.046300][ T0] allocate_slab+0x5a/0x2f0 [ 63.050778][ T0] ___slab_alloc+0xcd1/0x14b0 [ 63.055428][ T0] __slab_alloc+0x58/0xa0 [ 63.059732][ T0] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 63.065605][ T0] dup_task_struct+0x57/0x8c0 [ 63.070257][ T0] copy_process+0x5d1/0x3d50 [ 63.074823][ T0] kernel_clone+0x226/0x8f0 [ 63.079301][ T0] user_mode_thread+0x132/0x1a0 [ 63.084129][ T0] call_usermodehelper_exec_work+0x5c/0x230 [ 63.090000][ T0] process_scheduled_works+0xa63/0x1850 [ 63.095521][ T0] worker_thread+0x86d/0xd10 [ 63.100087][ T0] page_owner free stack trace missing [ 63.105425][ T0] [ 63.107732][ T0] Memory state around the buggy address: [ 63.113333][ T0] ffff8880229bdb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.121363][ T0] ffff8880229bdc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.129395][ T0] >ffff8880229bdc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.137429][ T0] ^ [ 63.144335][ T0] ffff8880229bdd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.152368][ T0] ffff8880229bdd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.160406][ T0] ================================================================== [ 63.168437][ T0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 63.175603][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc5-next-20240827-syzkaller #0 [ 63.185377][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.195406][ T0] Call Trace: [ 63.198662][ T0] [ 63.201573][ T0] dump_stack_lvl+0x241/0x360 [ 63.206234][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.211410][ T0] ? __pfx__printk+0x10/0x10 [ 63.215978][ T0] ? rcu_is_watching+0x15/0xb0 [ 63.220716][ T0] ? lock_release+0xbf/0xa30 [ 63.225284][ T0] ? vscnprintf+0x5d/0x90 [ 63.229589][ T0] panic+0x349/0x880 [ 63.233460][ T0] ? check_panic_on_warn+0x21/0xb0 [ 63.238544][ T0] ? __pfx_panic+0x10/0x10 [ 63.242936][ T0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.248111][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.253982][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 63.260285][ T0] ? print_report+0x502/0x550 [ 63.264956][ T0] check_panic_on_warn+0x86/0xb0 [ 63.269876][ T0] ? sched_core_balance+0x5e4/0x1180 [ 63.275136][ T0] end_report+0x77/0x160 [ 63.279358][ T0] kasan_report+0x154/0x180 [ 63.283839][ T0] ? sched_core_balance+0x5e4/0x1180 [ 63.289102][ T0] sched_core_balance+0x5e4/0x1180 [ 63.294191][ T0] ? sched_core_balance+0xca/0x1180 [ 63.299364][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 63.304915][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 63.310437][ T0] __balance_callbacks+0x188/0x280 [ 63.315525][ T0] finish_task_switch+0x1d3/0x870 [ 63.320536][ T0] __schedule+0x1852/0x4b30 [ 63.325050][ T0] ? __pfx___schedule+0x10/0x10 [ 63.329879][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 63.335149][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 63.341277][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 63.346888][ T0] schedule_idle+0x53/0x90 [ 63.351308][ T0] do_idle+0x56a/0x5d0 [ 63.355355][ T0] ? __pfx___schedule+0x10/0x10 [ 63.360183][ T0] ? __pfx_do_idle+0x10/0x10 [ 63.364748][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.370616][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 63.376920][ T0] ? rest_init+0x31/0x300 [ 63.381223][ T0] ? rest_init+0x31/0x300 [ 63.385527][ T0] cpu_startup_entry+0x42/0x60 [ 63.390267][ T0] rest_init+0x2dc/0x300 [ 63.394484][ T0] ? __pfx_x86_late_time_init+0x10/0x10 [ 63.400037][ T0] start_kernel+0x47f/0x500 [ 63.404526][ T0] x86_64_start_reservations+0x2a/0x30 [ 63.409960][ T0] x86_64_start_kernel+0x9f/0xa0 [ 63.414881][ T0] common_startup_64+0x13e/0x147 [ 63.419796][ T0] [ 64.491158][ T0] Shutting down cpus with NMI [ 64.496089][ T0] Kernel Offset: disabled [ 64.500400][ T0] Rebooting in 86400 seconds..