last executing test programs: 4.076084365s ago: executing program 1 (id=2): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x19, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x7d, &(0x7f0000000480)=""/125, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540)={0x5, 0x5, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) unshare(0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) futex(&(0x7f0000000e00), 0x0, 0x1, 0x0, &(0x7f0000000e80), 0x1) open(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x80, 0xa}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000780)={r5, 0x0, 0xffffffffffffffff, 0x2, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00'}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005400), 0x0) getuid() 3.912976109s ago: executing program 1 (id=6): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000280)={[{}, {@device={'device', 0x3d, './file0'}}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@fragment_metadata}, {@noautodefrag}, {@nobarrier}, {@check_int_data}, {@autodefrag}]}, 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x47, 0xd00}, 0x7) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 3.505118651s ago: executing program 3 (id=4): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xc}, {0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8}]}) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x80, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x4000037, 0x0) 3.16978334s ago: executing program 0 (id=1): unshare(0x68040200) unshare(0x180) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x5, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000400000001000000080009000d090000", 0x24) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) 2.577336928s ago: executing program 2 (id=3): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = getuid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000380), 0x0) sendmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r0]}}], 0x58, 0x4040800}, 0x0) 2.471326956s ago: executing program 1 (id=7): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000800050000e200f3080006"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0x4000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.410407496s ago: executing program 3 (id=8): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES16=0x0], 0x1, 0x1a3, &(0x7f0000000440)="$eJzs0bFrE2EYx/Hv896b5CJUiYpDBRuweF6o9C5VB6fgVCEHDi6CQUN6NsWrkl4GW1roIgWp9l/QQXRUQScRBefiIDhoXbpJMxQHcZDIJW8E/wbfDxy/e57j7t73edtpJy0Av/dXW9QYcDjIRwQNTMiwp9QwX5v6u8mtYXDR1Jsmn5kcT5dXbjWTJF4qXyhT+qcB/CgXSvC3lb7gmKIo1JDP+6utptyI6NdYVHMRpTqVBzgNOv5DxvUYR6/j0Pc2uaToiFeHQ9Ndl+l0eeXMwmJzPp6Pb1erM+eDs0FwLlt/EgevEP++KB6xhh9RiCj6a+Qa3NvWB5gSxG+rHUcqPfINtrad0yeneih/jz7CO69H4atul9UVTuFeyzY0yxHhMU7EZJ2iQnNzIYmDWeSyeimh/qR/5hTuuuO4rTvJ3MZVJb/yT2uy50q4S84LqVZCZrLRcJj3bOywbobK7jcm5E32l9Fc9eDZc1Md5wRP8txtdrtLYR4+iBdRza4SjA0+pyImswPmrXnHBF9GN5ZlWZZlWZZlWdZ/4E8AAAD//4rdXjc=") syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x8090, &(0x7f0000000a40), 0x26, 0x761, &(0x7f0000001200)="$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") chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = timerfd_create(0x8, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getdents(r0, &(0x7f0000001980)=""/4096, 0x1000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.626411882s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000024000900000000001f00000006000000"], 0x14}}, 0x0) 1.553566852s ago: executing program 2 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x8a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x198}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) lseek(r3, 0x8, 0x0) 1.395518782s ago: executing program 4 (id=5): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x0, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x7ffffffe, 0x0, &(0x7f0000001fc0)=0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) open(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) pipe2$9p(&(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x9, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x3}, 0x0) 111.416301ms ago: executing program 1 (id=11): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3}, 0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='xprtrdma_frwr_sgerr\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b22, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) 0s ago: executing program 2 (id=12): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xff, 0x4a5, &(0x7f0000000b40)="$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") r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, 0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$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") listxattr(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 58.618833][ T5216] cgroup: Unknown subsys name 'net' [ 58.752247][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.288507][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.584903][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.592985][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.601437][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.609213][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.617579][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.620009][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.625253][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.640478][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.647899][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.649011][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.660458][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.664055][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.671957][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.676587][ T5248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.685717][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.691169][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.705691][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.713546][ T5248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.720835][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.728253][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.730615][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.743145][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.744300][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.751119][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.758452][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.765545][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.771675][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.786030][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.786829][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.793313][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.229551][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 63.268013][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 63.353973][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 63.387751][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 63.420960][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 63.497628][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.505689][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.512990][ T5229] bridge_slave_0: entered allmulticast mode [ 63.520847][ T5229] bridge_slave_0: entered promiscuous mode [ 63.532760][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.543802][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.551069][ T5227] bridge_slave_0: entered allmulticast mode [ 63.558312][ T5227] bridge_slave_0: entered promiscuous mode [ 63.565714][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.572789][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.580168][ T5227] bridge_slave_1: entered allmulticast mode [ 63.587236][ T5227] bridge_slave_1: entered promiscuous mode [ 63.611792][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.619311][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.626625][ T5229] bridge_slave_1: entered allmulticast mode [ 63.633277][ T5229] bridge_slave_1: entered promiscuous mode [ 63.747533][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.759421][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.783991][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.793800][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.801227][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.808518][ T5226] bridge_slave_0: entered allmulticast mode [ 63.815393][ T5226] bridge_slave_0: entered promiscuous mode [ 63.822412][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.829598][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.837183][ T5243] bridge_slave_0: entered allmulticast mode [ 63.843846][ T5243] bridge_slave_0: entered promiscuous mode [ 63.868869][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.878423][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.885787][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.893031][ T5226] bridge_slave_1: entered allmulticast mode [ 63.900200][ T5226] bridge_slave_1: entered promiscuous mode [ 63.916318][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.923491][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.931245][ T5243] bridge_slave_1: entered allmulticast mode [ 63.938095][ T5243] bridge_slave_1: entered promiscuous mode [ 63.989663][ T5229] team0: Port device team_slave_0 added [ 63.996087][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.003496][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.010883][ T5228] bridge_slave_0: entered allmulticast mode [ 64.018058][ T5228] bridge_slave_0: entered promiscuous mode [ 64.025870][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.032975][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.040222][ T5228] bridge_slave_1: entered allmulticast mode [ 64.047141][ T5228] bridge_slave_1: entered promiscuous mode [ 64.066282][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.078203][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.096246][ T5229] team0: Port device team_slave_1 added [ 64.105390][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.123730][ T5227] team0: Port device team_slave_0 added [ 64.151791][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.176339][ T5227] team0: Port device team_slave_1 added [ 64.183891][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.209203][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.216424][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.242615][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.273900][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.293429][ T5226] team0: Port device team_slave_0 added [ 64.301330][ T5226] team0: Port device team_slave_1 added [ 64.308245][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.316088][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.342563][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.386476][ T5228] team0: Port device team_slave_0 added [ 64.407760][ T5243] team0: Port device team_slave_0 added [ 64.414146][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.421794][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.448054][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.460854][ T5228] team0: Port device team_slave_1 added [ 64.501609][ T5243] team0: Port device team_slave_1 added [ 64.516967][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.523963][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.550009][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.573832][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.580892][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.606854][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.619381][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.626562][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.652742][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.668508][ T5229] hsr_slave_0: entered promiscuous mode [ 64.675589][ T5229] hsr_slave_1: entered promiscuous mode [ 64.693214][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.700421][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.726962][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.740426][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.747769][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.773981][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.785836][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.792776][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.819598][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.819710][ T5247] Bluetooth: hci0: command tx timeout [ 64.847333][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.854294][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.880437][ T5247] Bluetooth: hci4: command tx timeout [ 64.885188][ T5247] Bluetooth: hci2: command tx timeout [ 64.885932][ T5241] Bluetooth: hci1: command tx timeout [ 64.897273][ T54] Bluetooth: hci3: command tx timeout [ 64.897573][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.014150][ T5228] hsr_slave_0: entered promiscuous mode [ 65.021036][ T5228] hsr_slave_1: entered promiscuous mode [ 65.027595][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.035971][ T5228] Cannot create hsr debugfs directory [ 65.044655][ T5243] hsr_slave_0: entered promiscuous mode [ 65.051353][ T5243] hsr_slave_1: entered promiscuous mode [ 65.057753][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.065515][ T5243] Cannot create hsr debugfs directory [ 65.074412][ T5227] hsr_slave_0: entered promiscuous mode [ 65.081319][ T5227] hsr_slave_1: entered promiscuous mode [ 65.087705][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.095662][ T5227] Cannot create hsr debugfs directory [ 65.119771][ T5226] hsr_slave_0: entered promiscuous mode [ 65.126352][ T5226] hsr_slave_1: entered promiscuous mode [ 65.133504][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.141684][ T5226] Cannot create hsr debugfs directory [ 65.489194][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.500362][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.509756][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.521659][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.562669][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.574661][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.600246][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.609874][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.645127][ T5243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.668190][ T5243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.680615][ T5243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.697214][ T5243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.769594][ T5226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.799411][ T5226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.810002][ T5226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.819694][ T5226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.916893][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.941784][ T5227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.960116][ T5227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.980134][ T5227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.989780][ T5227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.003553][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.019640][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.043913][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.084057][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.095331][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.102636][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.113399][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.120535][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.161268][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.168573][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.181900][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.189006][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.225906][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.269307][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.276444][ T2589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.298483][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.308460][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.315617][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.402445][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.459882][ T2589] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.467034][ T2589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.500124][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.531095][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.538277][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.576877][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.647351][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.654559][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.678778][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.685966][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.781709][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.877141][ T54] Bluetooth: hci0: command tx timeout [ 66.884605][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.944351][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.956458][ T54] Bluetooth: hci3: command tx timeout [ 66.961919][ T54] Bluetooth: hci1: command tx timeout [ 66.968006][ T5241] Bluetooth: hci2: command tx timeout [ 66.968443][ T5247] Bluetooth: hci4: command tx timeout [ 67.034415][ T5243] veth0_vlan: entered promiscuous mode [ 67.066723][ T5243] veth1_vlan: entered promiscuous mode [ 67.106765][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.119082][ T5229] veth0_vlan: entered promiscuous mode [ 67.171692][ T5229] veth1_vlan: entered promiscuous mode [ 67.191218][ T5243] veth0_macvtap: entered promiscuous mode [ 67.208661][ T5228] veth0_vlan: entered promiscuous mode [ 67.231256][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.263890][ T5229] veth0_macvtap: entered promiscuous mode [ 67.279484][ T5243] veth1_macvtap: entered promiscuous mode [ 67.293932][ T5228] veth1_vlan: entered promiscuous mode [ 67.303876][ T5229] veth1_macvtap: entered promiscuous mode [ 67.345447][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.368555][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.390957][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.403438][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.412695][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.421604][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.444641][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.456496][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.469944][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.521230][ T5228] veth0_macvtap: entered promiscuous mode [ 67.546732][ T5227] veth0_vlan: entered promiscuous mode [ 67.560624][ T5227] veth1_vlan: entered promiscuous mode [ 67.569664][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.580512][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.594945][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.609474][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.618502][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.627985][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.637575][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.660344][ T5228] veth1_macvtap: entered promiscuous mode [ 67.746148][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.758235][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.768595][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.779836][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.790963][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.820566][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.832174][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.843037][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.854473][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.866395][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.881071][ T5226] veth0_vlan: entered promiscuous mode [ 67.882207][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.894696][ T5226] veth1_vlan: entered promiscuous mode [ 67.904199][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.922609][ T5227] veth0_macvtap: entered promiscuous mode [ 67.950482][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.959893][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.968765][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.977634][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.007169][ T5227] veth1_macvtap: entered promiscuous mode [ 68.052844][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.074239][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.091349][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.105551][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.115594][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.126143][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.136020][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.146612][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.160159][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.170444][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.181529][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.193598][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.204742][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.214605][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.226334][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.237667][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.274300][ T5227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.283399][ T5227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.292648][ T5227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.301476][ T5227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312375][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.342027][ T5226] veth0_macvtap: entered promiscuous mode [ 68.344937][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.383337][ T5226] veth1_macvtap: entered promiscuous mode [ 68.454416][ T2589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.461217][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.473158][ T2589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.479477][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.490701][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.501361][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.511369][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.521940][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.531842][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.542333][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.555868][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.565738][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.576280][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.586208][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.597087][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.607282][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.618664][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.628770][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.639438][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.651087][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.661447][ T5226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.670219][ T5226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.686273][ T5226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.702049][ T5226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.749624][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.806646][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.851163][ T2589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.880641][ T2589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.942762][ T5315] loop1: detected capacity change from 0 to 32768 [ 68.956071][ T5247] Bluetooth: hci0: command tx timeout [ 68.991275][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.033623][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.041468][ T5247] Bluetooth: hci1: command tx timeout [ 69.047147][ T5247] Bluetooth: hci2: command tx timeout [ 69.053908][ T54] Bluetooth: hci3: command tx timeout [ 69.058072][ T5247] Bluetooth: hci4: command tx timeout [ 69.203101][ T29] audit: type=1326 audit(1724359936.394:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27f7379e79 code=0x0 [ 69.270442][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.298606][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.703282][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.750466][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.775959][ T5324] bridge0: entered allmulticast mode [ 69.791660][ T5327] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.061576][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.071703][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.916606][ T5335] loop3: detected capacity change from 0 to 8 [ 71.110895][ T5247] Bluetooth: hci0: command tx timeout [ 71.117092][ T5241] Bluetooth: hci3: command tx timeout [ 71.122563][ T54] Bluetooth: hci2: command tx timeout [ 71.128092][ T54] Bluetooth: hci1: command tx timeout [ 71.133515][ T54] Bluetooth: hci4: command tx timeout [ 71.917329][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.917434][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.298672][ T5345] tty tty25: ldisc open failed (-12), clearing slot 24 [ 72.663976][ T5354] SQUASHFS error: lzo decompression failed, data probably corrupt [ 72.672247][ T5354] SQUASHFS error: Failed to read block 0x71: -5 [ 72.678738][ T5354] ================================================================== [ 72.687000][ T5354] BUG: KASAN: slab-use-after-free in squashfs_readahead+0x210c/0x2680 [ 72.695298][ T5354] Read of size 4 at addr ffff88802b0bc040 by task syz.3.8/5354 [ 72.702961][ T5354] [ 72.705320][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.3.8 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 72.715255][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.725375][ T5354] Call Trace: [ 72.728678][ T5354] [ 72.731627][ T5354] dump_stack_lvl+0x241/0x360 [ 72.736355][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.741591][ T5354] ? __pfx__printk+0x10/0x10 [ 72.746227][ T5354] ? _printk+0xd5/0x120 [ 72.750407][ T5354] ? __virt_addr_valid+0x183/0x530 [ 72.755543][ T5354] ? __virt_addr_valid+0x183/0x530 [ 72.760722][ T5354] print_report+0x169/0x550 [ 72.765260][ T5354] ? __virt_addr_valid+0x183/0x530 [ 72.770394][ T5354] ? __virt_addr_valid+0x183/0x530 [ 72.775530][ T5354] ? __virt_addr_valid+0x45f/0x530 [ 72.780663][ T5354] ? __phys_addr+0xba/0x170 [ 72.785191][ T5354] ? squashfs_readahead+0x210c/0x2680 [ 72.790601][ T5354] kasan_report+0x143/0x180 [ 72.795149][ T5354] ? squashfs_readahead+0x210c/0x2680 [ 72.800560][ T5354] squashfs_readahead+0x210c/0x2680 [ 72.805804][ T5354] ? squashfs_readahead+0x6f0/0x2680 [ 72.811120][ T5354] ? __pfx_squashfs_readahead+0x10/0x10 [ 72.816698][ T5354] ? __pfx_squashfs_readahead+0x10/0x10 [ 72.822276][ T5354] read_pages+0x17e/0x840 [ 72.826637][ T5354] ? percpu_ref_put+0x19/0x180 [ 72.831450][ T5354] ? __pfx_read_pages+0x10/0x10 [ 72.836416][ T5354] ? filemap_add_folio+0x26d/0x650 [ 72.841558][ T5354] ? __pfx_filemap_add_folio+0x10/0x10 [ 72.847046][ T5354] page_cache_ra_unbounded+0x6ce/0x7f0 [ 72.852533][ T5354] filemap_get_pages+0x543/0x2330 [ 72.857632][ T5354] ? __pfx_filemap_get_pages+0x10/0x10 [ 72.863118][ T5354] ? rcu_is_watching+0x15/0xb0 [ 72.867902][ T5354] ? __pfx___might_resched+0x10/0x10 [ 72.873217][ T5354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.879398][ T5354] filemap_read+0x457/0xfa0 [ 72.883924][ T5354] ? __rcu_read_unlock+0xa1/0x110 [ 72.888995][ T5354] ? __pfx_filemap_read+0x10/0x10 [ 72.894066][ T5354] ? iov_iter_kvec+0x4e/0x180 [ 72.898776][ T5354] __kernel_read+0x532/0x9f0 [ 72.903385][ T5354] ? do_sys_openat2+0x13e/0x1d0 [ 72.908263][ T5354] ? __x64_sys_openat+0x247/0x2a0 [ 72.913319][ T5354] ? __pfx___kernel_read+0x10/0x10 [ 72.918460][ T5354] integrity_kernel_read+0xb0/0x100 [ 72.923689][ T5354] ? __pfx_integrity_kernel_read+0x10/0x10 [ 72.929519][ T5354] ? ima_calc_file_hash+0xab7/0x1b30 [ 72.934860][ T5354] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 72.940435][ T5354] ima_calc_file_hash+0xaef/0x1b30 [ 72.945574][ T5354] ? __pfx___schedule+0x10/0x10 [ 72.950462][ T5354] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 72.956034][ T5354] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.962062][ T5354] ? vfs_getattr_nosec+0x1ad/0x370 [ 72.967208][ T5354] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 72.973320][ T5354] ? make_vfsgid+0x46/0x90 [ 72.977779][ T5354] ? generic_fillattr+0x59c/0x840 [ 72.982845][ T5354] ima_collect_measurement+0x526/0xb20 [ 72.988346][ T5354] ? __pfx_ima_collect_measurement+0x10/0x10 [ 72.994364][ T5354] ? squashfs_xattr_handler_get+0x585/0x900 [ 73.000309][ T5354] ? ima_get_hash_algo+0x156/0x4d0 [ 73.005453][ T5354] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 73.010942][ T5354] process_measurement+0x1357/0x1fb0 [ 73.016262][ T5354] ? __pfx_process_measurement+0x10/0x10 [ 73.021927][ T5354] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 73.028645][ T5354] ? __pfx_apparmor_file_open+0x10/0x10 [ 73.034229][ T5354] ? tomoyo_file_open+0x168/0x220 [ 73.039289][ T5354] ? inode_to_bdi+0x69/0xf0 [ 73.043841][ T5354] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 73.050042][ T5354] ima_file_check+0xf2/0x170 [ 73.054665][ T5354] ? __pfx_ima_file_check+0x10/0x10 [ 73.059904][ T5354] security_file_post_open+0xb9/0x280 [ 73.065310][ T5354] path_openat+0x2cd0/0x3590 [ 73.069940][ T5354] ? __pfx_path_openat+0x10/0x10 [ 73.074911][ T5354] do_filp_open+0x235/0x490 [ 73.079441][ T5354] ? __pfx_do_filp_open+0x10/0x10 [ 73.084503][ T5354] ? _raw_spin_unlock+0x28/0x50 [ 73.089383][ T5354] ? alloc_fd+0x5a1/0x640 [ 73.093745][ T5354] do_sys_openat2+0x13e/0x1d0 [ 73.098473][ T5354] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.103719][ T5354] __x64_sys_openat+0x247/0x2a0 [ 73.108626][ T5354] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.114086][ T5354] ? do_syscall_64+0x100/0x230 [ 73.118889][ T5354] ? do_syscall_64+0xb6/0x230 [ 73.123607][ T5354] do_syscall_64+0xf3/0x230 [ 73.128151][ T5354] ? clear_bhb_loop+0x35/0x90 [ 73.132923][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.138879][ T5354] RIP: 0033:0x7f27f7379e79 [ 73.143325][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.162948][ T5354] RSP: 002b:00007f27f80fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.171362][ T5354] RAX: ffffffffffffffda RBX: 00007f27f7516130 RCX: 00007f27f7379e79 [ 73.179360][ T5354] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 73.187340][ T5354] RBP: 00007f27f73e7916 R08: 0000000000000000 R09: 0000000000000000 [ 73.195331][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.203325][ T5354] R13: 0000000000000000 R14: 00007f27f7516130 R15: 00007fff9652a548 [ 73.211330][ T5354] [ 73.214372][ T5354] [ 73.216716][ T5354] Allocated by task 5354: [ 73.221056][ T5354] kasan_save_track+0x3f/0x80 [ 73.225764][ T5354] __kasan_kmalloc+0x98/0xb0 [ 73.230393][ T5354] __kmalloc_cache_noprof+0x19c/0x2c0 [ 73.235803][ T5354] squashfs_page_actor_init_special+0x64/0x440 [ 73.241992][ T5354] squashfs_readahead+0x188f/0x2680 [ 73.247226][ T5354] read_pages+0x17e/0x840 [ 73.251578][ T5354] page_cache_ra_unbounded+0x6ce/0x7f0 [ 73.257053][ T5354] filemap_get_pages+0x543/0x2330 [ 73.262080][ T5354] filemap_read+0x457/0xfa0 [ 73.266586][ T5354] __kernel_read+0x532/0x9f0 [ 73.271176][ T5354] integrity_kernel_read+0xb0/0x100 [ 73.276420][ T5354] ima_calc_file_hash+0xaef/0x1b30 [ 73.281541][ T5354] ima_collect_measurement+0x526/0xb20 [ 73.287029][ T5354] process_measurement+0x1357/0x1fb0 [ 73.292331][ T5354] ima_file_check+0xf2/0x170 [ 73.296931][ T5354] security_file_post_open+0xb9/0x280 [ 73.302317][ T5354] path_openat+0x2cd0/0x3590 [ 73.306922][ T5354] do_filp_open+0x235/0x490 [ 73.311539][ T5354] do_sys_openat2+0x13e/0x1d0 [ 73.316256][ T5354] __x64_sys_openat+0x247/0x2a0 [ 73.321122][ T5354] do_syscall_64+0xf3/0x230 [ 73.325638][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.331545][ T5354] [ 73.333871][ T5354] Freed by task 5354: [ 73.337849][ T5354] kasan_save_track+0x3f/0x80 [ 73.342533][ T5354] kasan_save_free_info+0x40/0x50 [ 73.347573][ T5354] __kasan_slab_free+0x59/0x70 [ 73.352348][ T5354] kfree+0x196/0x3e0 [ 73.356270][ T5354] squashfs_readahead+0x195b/0x2680 [ 73.361487][ T5354] read_pages+0x17e/0x840 [ 73.365822][ T5354] page_cache_ra_unbounded+0x6ce/0x7f0 [ 73.371287][ T5354] filemap_get_pages+0x543/0x2330 [ 73.376315][ T5354] filemap_read+0x457/0xfa0 [ 73.380849][ T5354] __kernel_read+0x532/0x9f0 [ 73.385450][ T5354] integrity_kernel_read+0xb0/0x100 [ 73.390666][ T5354] ima_calc_file_hash+0xaef/0x1b30 [ 73.395793][ T5354] ima_collect_measurement+0x526/0xb20 [ 73.401263][ T5354] process_measurement+0x1357/0x1fb0 [ 73.406644][ T5354] ima_file_check+0xf2/0x170 [ 73.411240][ T5354] security_file_post_open+0xb9/0x280 [ 73.416615][ T5354] path_openat+0x2cd0/0x3590 [ 73.421219][ T5354] do_filp_open+0x235/0x490 [ 73.425728][ T5354] do_sys_openat2+0x13e/0x1d0 [ 73.430499][ T5354] __x64_sys_openat+0x247/0x2a0 [ 73.435377][ T5354] do_syscall_64+0xf3/0x230 [ 73.439903][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.445799][ T5354] [ 73.448121][ T5354] The buggy address belongs to the object at ffff88802b0bc000 [ 73.448121][ T5354] which belongs to the cache kmalloc-96 of size 96 [ 73.462086][ T5354] The buggy address is located 64 bytes inside of [ 73.462086][ T5354] freed 96-byte region [ffff88802b0bc000, ffff88802b0bc060) [ 73.475818][ T5354] [ 73.478140][ T5354] The buggy address belongs to the physical page: [ 73.484554][ T5354] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b0bc [ 73.493326][ T5354] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.500431][ T5354] page_type: 0xfdffffff(slab) [ 73.505193][ T5354] raw: 00fff00000000000 ffff888015841280 dead000000000122 0000000000000000 [ 73.513781][ T5354] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 73.522361][ T5354] page dumped because: kasan: bad access detected [ 73.528779][ T5354] page_owner tracks the page as allocated [ 73.534491][ T5354] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5354, tgid 5334 (syz.3.8), ts 72663614351, free_ts 72625281314 [ 73.554553][ T5354] post_alloc_hook+0x1f3/0x230 [ 73.559328][ T5354] get_page_from_freelist+0x3131/0x3280 [ 73.564918][ T5354] __alloc_pages_noprof+0x29e/0x780 [ 73.570120][ T5354] alloc_slab_page+0x5f/0x120 [ 73.574887][ T5354] allocate_slab+0x5a/0x2f0 [ 73.579412][ T5354] ___slab_alloc+0xcd1/0x14b0 [ 73.584088][ T5354] __slab_alloc+0x58/0xa0 [ 73.588419][ T5354] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 73.593802][ T5354] squashfs_page_actor_init_special+0x64/0x440 [ 73.599973][ T5354] squashfs_readahead+0x188f/0x2680 [ 73.605177][ T5354] read_pages+0x17e/0x840 [ 73.609522][ T5354] page_cache_ra_unbounded+0x6ce/0x7f0 [ 73.614989][ T5354] filemap_get_pages+0x543/0x2330 [ 73.620029][ T5354] filemap_read+0x457/0xfa0 [ 73.624534][ T5354] __kernel_read+0x532/0x9f0 [ 73.629131][ T5354] integrity_kernel_read+0xb0/0x100 [ 73.634331][ T5354] page last free pid 5282 tgid 5282 stack trace: [ 73.640656][ T5354] free_unref_page+0xc07/0xd90 [ 73.645427][ T5354] __put_partials+0xeb/0x130 [ 73.650017][ T5354] put_cpu_partial+0x17c/0x250 [ 73.654781][ T5354] __slab_free+0x2ea/0x3d0 [ 73.659205][ T5354] qlist_free_all+0x9e/0x140 [ 73.663823][ T5354] kasan_quarantine_reduce+0x14f/0x170 [ 73.669288][ T5354] __kasan_slab_alloc+0x23/0x80 [ 73.674146][ T5354] __kmalloc_cache_noprof+0x132/0x2c0 [ 73.679562][ T5354] nsim_fib_event_work+0x19c5/0x4130 [ 73.684862][ T5354] process_scheduled_works+0xa63/0x1850 [ 73.690427][ T5354] worker_thread+0x86d/0xd10 [ 73.695030][ T5354] kthread+0x2f0/0x390 [ 73.699100][ T5354] ret_from_fork+0x4b/0x80 [ 73.703556][ T5354] ret_from_fork_asm+0x1a/0x30 [ 73.708333][ T5354] [ 73.710654][ T5354] Memory state around the buggy address: [ 73.716287][ T5354] ffff88802b0bbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.724351][ T5354] ffff88802b0bbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.732411][ T5354] >ffff88802b0bc000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 73.740471][ T5354] ^ [ 73.746619][ T5354] ffff88802b0bc080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.754690][ T5354] ffff88802b0bc100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.762748][ T5354] ================================================================== [ 73.860308][ T5354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.867633][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.3.8 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 73.877552][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 73.887631][ T5354] Call Trace: [ 73.890936][ T5354] [ 73.893887][ T5354] dump_stack_lvl+0x241/0x360 [ 73.898604][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.903841][ T5354] ? __pfx__printk+0x10/0x10 [ 73.908468][ T5354] ? preempt_schedule+0xe1/0xf0 [ 73.913358][ T5354] ? vscnprintf+0x5d/0x90 [ 73.917730][ T5354] panic+0x349/0x880 [ 73.921653][ T5354] ? check_panic_on_warn+0x21/0xb0 [ 73.926794][ T5354] ? __pfx_panic+0x10/0x10 [ 73.931250][ T5354] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 73.937268][ T5354] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.943622][ T5354] ? print_report+0x502/0x550 [ 73.948332][ T5354] check_panic_on_warn+0x86/0xb0 [ 73.953297][ T5354] ? squashfs_readahead+0x210c/0x2680 [ 73.958703][ T5354] end_report+0x77/0x160 [ 73.963024][ T5354] kasan_report+0x154/0x180 [ 73.967568][ T5354] ? squashfs_readahead+0x210c/0x2680 [ 73.972978][ T5354] squashfs_readahead+0x210c/0x2680 [ 73.978229][ T5354] ? squashfs_readahead+0x6f0/0x2680 [ 73.983551][ T5354] ? __pfx_squashfs_readahead+0x10/0x10 [ 73.989135][ T5354] ? __pfx_squashfs_readahead+0x10/0x10 [ 73.994842][ T5354] read_pages+0x17e/0x840 [ 73.999298][ T5354] ? percpu_ref_put+0x19/0x180 [ 74.004280][ T5354] ? __pfx_read_pages+0x10/0x10 [ 74.009266][ T5354] ? filemap_add_folio+0x26d/0x650 [ 74.014414][ T5354] ? __pfx_filemap_add_folio+0x10/0x10 [ 74.019910][ T5354] page_cache_ra_unbounded+0x6ce/0x7f0 [ 74.025407][ T5354] filemap_get_pages+0x543/0x2330 [ 74.030588][ T5354] ? __pfx_filemap_get_pages+0x10/0x10 [ 74.036078][ T5354] ? rcu_is_watching+0x15/0xb0 [ 74.040870][ T5354] ? __pfx___might_resched+0x10/0x10 [ 74.046194][ T5354] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 74.052402][ T5354] filemap_read+0x457/0xfa0 [ 74.056938][ T5354] ? __rcu_read_unlock+0xa1/0x110 [ 74.062095][ T5354] ? __pfx_filemap_read+0x10/0x10 [ 74.067172][ T5354] ? iov_iter_kvec+0x4e/0x180 [ 74.071885][ T5354] __kernel_read+0x532/0x9f0 [ 74.076678][ T5354] ? do_sys_openat2+0x13e/0x1d0 [ 74.081591][ T5354] ? __x64_sys_openat+0x247/0x2a0 [ 74.086676][ T5354] ? __pfx___kernel_read+0x10/0x10 [ 74.091846][ T5354] integrity_kernel_read+0xb0/0x100 [ 74.097079][ T5354] ? __pfx_integrity_kernel_read+0x10/0x10 [ 74.102999][ T5354] ? ima_calc_file_hash+0xab7/0x1b30 [ 74.108436][ T5354] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 74.114025][ T5354] ima_calc_file_hash+0xaef/0x1b30 [ 74.119198][ T5354] ? __pfx___schedule+0x10/0x10 [ 74.124084][ T5354] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 74.129667][ T5354] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.135758][ T5354] ? vfs_getattr_nosec+0x1ad/0x370 [ 74.140992][ T5354] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 74.147100][ T5354] ? make_vfsgid+0x46/0x90 [ 74.151552][ T5354] ? generic_fillattr+0x59c/0x840 [ 74.156716][ T5354] ima_collect_measurement+0x526/0xb20 [ 74.162238][ T5354] ? __pfx_ima_collect_measurement+0x10/0x10 [ 74.168257][ T5354] ? squashfs_xattr_handler_get+0x585/0x900 [ 74.174209][ T5354] ? ima_get_hash_algo+0x156/0x4d0 [ 74.179352][ T5354] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 74.184848][ T5354] process_measurement+0x1357/0x1fb0 [ 74.190262][ T5354] ? __pfx_process_measurement+0x10/0x10 [ 74.195927][ T5354] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 74.202907][ T5354] ? __pfx_apparmor_file_open+0x10/0x10 [ 74.208483][ T5354] ? tomoyo_file_open+0x168/0x220 [ 74.213568][ T5354] ? inode_to_bdi+0x69/0xf0 [ 74.218108][ T5354] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 74.224300][ T5354] ima_file_check+0xf2/0x170 [ 74.228955][ T5354] ? __pfx_ima_file_check+0x10/0x10 [ 74.234201][ T5354] security_file_post_open+0xb9/0x280 [ 74.239603][ T5354] path_openat+0x2cd0/0x3590 [ 74.244235][ T5354] ? __pfx_path_openat+0x10/0x10 [ 74.249214][ T5354] do_filp_open+0x235/0x490 [ 74.253769][ T5354] ? __pfx_do_filp_open+0x10/0x10 [ 74.258839][ T5354] ? _raw_spin_unlock+0x28/0x50 [ 74.263721][ T5354] ? alloc_fd+0x5a1/0x640 [ 74.268098][ T5354] do_sys_openat2+0x13e/0x1d0 [ 74.272816][ T5354] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.278109][ T5354] __x64_sys_openat+0x247/0x2a0 [ 74.283008][ T5354] ? __pfx___x64_sys_openat+0x10/0x10 [ 74.288427][ T5354] ? do_syscall_64+0x100/0x230 [ 74.293228][ T5354] ? do_syscall_64+0xb6/0x230 [ 74.297937][ T5354] do_syscall_64+0xf3/0x230 [ 74.302475][ T5354] ? clear_bhb_loop+0x35/0x90 [ 74.307184][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.313128][ T5354] RIP: 0033:0x7f27f7379e79 [ 74.317574][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.337215][ T5354] RSP: 002b:00007f27f80fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.345675][ T5354] RAX: ffffffffffffffda RBX: 00007f27f7516130 RCX: 00007f27f7379e79 [ 74.353678][ T5354] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 74.361677][ T5354] RBP: 00007f27f73e7916 R08: 0000000000000000 R09: 0000000000000000 [ 74.369782][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.377787][ T5354] R13: 0000000000000000 R14: 00007f27f7516130 R15: 00007fff9652a548 [ 74.385810][ T5354] [ 74.389164][ T5354] Kernel Offset: disabled [ 74.393495][ T5354] Rebooting in 86400 seconds..