Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. 2024/03/28 06:25:33 fuzzer started 2024/03/28 06:25:33 dialing manager at 10.128.0.169:30012 [ 155.654138][ T5014] cgroup: Unknown subsys name 'net' [ 155.879195][ T5014] cgroup: Unknown subsys name 'rlimit' [ 157.714660][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.721947][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/28 06:26:21 syscalls: 3852 2024/03/28 06:26:21 code coverage: enabled 2024/03/28 06:26:21 comparison tracing: enabled 2024/03/28 06:26:21 extra coverage: enabled 2024/03/28 06:26:21 delay kcov mmap: enabled 2024/03/28 06:26:21 setuid sandbox: enabled 2024/03/28 06:26:21 namespace sandbox: enabled 2024/03/28 06:26:21 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/28 06:26:21 fault injection: enabled 2024/03/28 06:26:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/28 06:26:21 net packet injection: enabled 2024/03/28 06:26:21 net device setup: enabled 2024/03/28 06:26:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/28 06:26:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/28 06:26:21 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/28 06:26:21 USB emulation: enabled 2024/03/28 06:26:21 hci packet injection: enabled 2024/03/28 06:26:21 wifi device emulation: enabled 2024/03/28 06:26:21 802.15.4 emulation: enabled 2024/03/28 06:26:21 swap file: enabled [ 202.903675][ T5014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/28 06:26:22 starting 5 executor processes [ 204.766409][ T5035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.806163][ T5035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.822320][ T5035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.843908][ T5035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.876578][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.886168][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.904451][ T5039] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.926292][ T5039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.986774][ T5039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.071714][ T5039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.084022][ T5039] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.094515][ T5039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.357756][ T5035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.372985][ T5035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.404605][ T5035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.494635][ T5035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.525206][ T5035] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.563187][ T5035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.655622][ T5039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.673623][ T5039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.734233][ T5039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.743513][ T4400] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.753421][ T4400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.762964][ T4400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.776204][ T4400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.787456][ T4400] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.796714][ T4400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.900733][ T4400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.912868][ T4400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.922489][ T4400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.237059][ T5033] chnl_net:caif_netlink_parms(): no params data found [ 206.256633][ T5037] chnl_net:caif_netlink_parms(): no params data found [ 206.973760][ T4400] Bluetooth: hci0: command tx timeout [ 207.058131][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.066614][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.074531][ T5037] bridge_slave_0: entered allmulticast mode [ 207.083708][ T5037] bridge_slave_0: entered promiscuous mode [ 207.164020][ T4400] Bluetooth: hci1: command tx timeout [ 207.166200][ T5044] chnl_net:caif_netlink_parms(): no params data found [ 207.256978][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.265608][ T5037] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.273503][ T5037] bridge_slave_1: entered allmulticast mode [ 207.281764][ T5037] bridge_slave_1: entered promiscuous mode [ 207.527514][ T5033] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.535658][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.543658][ T5033] bridge_slave_0: entered allmulticast mode [ 207.552790][ T5033] bridge_slave_0: entered promiscuous mode [ 207.586951][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 207.618938][ T5037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.671965][ T5033] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.679711][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.687607][ T5033] bridge_slave_1: entered allmulticast mode [ 207.696768][ T5033] bridge_slave_1: entered promiscuous mode [ 207.701873][ T4400] Bluetooth: hci2: command tx timeout [ 207.760799][ T5037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.861765][ T4400] Bluetooth: hci4: command tx timeout [ 208.006798][ T5033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.016819][ T5048] chnl_net:caif_netlink_parms(): no params data found [ 208.091741][ T4400] Bluetooth: hci3: command tx timeout [ 208.163063][ T5033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.234448][ T5037] team0: Port device team_slave_0 added [ 208.337569][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.345444][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.353249][ T5044] bridge_slave_0: entered allmulticast mode [ 208.362346][ T5044] bridge_slave_0: entered promiscuous mode [ 208.412619][ T5037] team0: Port device team_slave_1 added [ 208.469903][ T5033] team0: Port device team_slave_0 added [ 208.479672][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.487550][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.497818][ T5044] bridge_slave_1: entered allmulticast mode [ 208.509568][ T5044] bridge_slave_1: entered promiscuous mode [ 208.584735][ T5033] team0: Port device team_slave_1 added [ 208.655282][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.663668][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.690330][ T5037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.787255][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.794593][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.822399][ T5037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.888554][ T5033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.896026][ T5033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.922554][ T5033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.952213][ T5044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.050266][ T5033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.051760][ T4400] Bluetooth: hci0: command tx timeout [ 209.057421][ T5033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.089083][ T5033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.108928][ T5044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.221592][ T4400] Bluetooth: hci1: command tx timeout [ 209.259896][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.267706][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.275767][ T5048] bridge_slave_0: entered allmulticast mode [ 209.284870][ T5048] bridge_slave_0: entered promiscuous mode [ 209.364314][ T5044] team0: Port device team_slave_0 added [ 209.372824][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.380527][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.388357][ T5049] bridge_slave_0: entered allmulticast mode [ 209.397249][ T5049] bridge_slave_0: entered promiscuous mode [ 209.420052][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.429612][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.437537][ T5048] bridge_slave_1: entered allmulticast mode [ 209.446706][ T5048] bridge_slave_1: entered promiscuous mode [ 209.464259][ T5044] team0: Port device team_slave_1 added [ 209.564182][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.572255][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.580154][ T5049] bridge_slave_1: entered allmulticast mode [ 209.589570][ T5049] bridge_slave_1: entered promiscuous mode [ 209.698887][ T5037] hsr_slave_0: entered promiscuous mode [ 209.710263][ T5037] hsr_slave_1: entered promiscuous mode [ 209.776414][ T4400] Bluetooth: hci2: command tx timeout [ 209.854143][ T5033] hsr_slave_0: entered promiscuous mode [ 209.865134][ T5033] hsr_slave_1: entered promiscuous mode [ 209.873866][ T5033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.881825][ T5033] Cannot create hsr debugfs directory [ 209.900446][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.913885][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.921650][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.948070][ T5044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.949468][ T4400] Bluetooth: hci4: command tx timeout [ 209.974583][ T5048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.027216][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.066627][ T5044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.074002][ T5044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.100486][ T5044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.135534][ T5048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.171936][ T4400] Bluetooth: hci3: command tx timeout [ 210.460266][ T5049] team0: Port device team_slave_0 added [ 210.488606][ T5048] team0: Port device team_slave_0 added [ 210.518275][ T5048] team0: Port device team_slave_1 added [ 210.545998][ T5049] team0: Port device team_slave_1 added [ 210.638421][ T5044] hsr_slave_0: entered promiscuous mode [ 210.648424][ T5044] hsr_slave_1: entered promiscuous mode [ 210.658693][ T5044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.666614][ T5044] Cannot create hsr debugfs directory [ 210.854302][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.861611][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.888034][ T5048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.953955][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.961141][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.989388][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.009576][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.016969][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.043426][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.058899][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.066142][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.092645][ T5048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.131774][ T4400] Bluetooth: hci0: command tx timeout [ 211.291786][ T4400] Bluetooth: hci1: command tx timeout [ 211.524907][ T5049] hsr_slave_0: entered promiscuous mode [ 211.535443][ T5049] hsr_slave_1: entered promiscuous mode [ 211.544142][ T5049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.552120][ T5049] Cannot create hsr debugfs directory [ 211.638734][ T5037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.690802][ T5048] hsr_slave_0: entered promiscuous mode [ 211.700107][ T5048] hsr_slave_1: entered promiscuous mode [ 211.708969][ T5048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.717311][ T5048] Cannot create hsr debugfs directory [ 211.762478][ T5037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.781957][ T5037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.852038][ T4400] Bluetooth: hci2: command tx timeout [ 211.897366][ T5037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.024266][ T4400] Bluetooth: hci4: command tx timeout [ 212.103169][ T5033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.124434][ T5033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.233628][ T5033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.251763][ T4400] Bluetooth: hci3: command tx timeout [ 212.309636][ T5033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.605027][ T5044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.626675][ T5044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.700413][ T5044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.737412][ T5044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.232599][ T4400] Bluetooth: hci0: command tx timeout [ 213.371618][ T4400] Bluetooth: hci1: command tx timeout [ 213.392753][ T5048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.443387][ T5049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.470547][ T5048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.495691][ T5048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.515876][ T5048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.561110][ T5049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.610017][ T5037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.634632][ T5049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.733139][ T5049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.793272][ T5037] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.834745][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.842610][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.929082][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.937079][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.955229][ T4400] Bluetooth: hci2: command tx timeout [ 214.092150][ T4400] Bluetooth: hci4: command tx timeout [ 214.164008][ T5033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.331882][ T4400] Bluetooth: hci3: command tx timeout [ 214.474525][ T5044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.589371][ T5033] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.674617][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.682440][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.769663][ T5044] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.825324][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.833332][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.015713][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.023530][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.043933][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.051737][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.186882][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.240683][ T5044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.251675][ T5044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.463270][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.505244][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.679432][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.687238][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.772839][ T5048] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.838161][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.846078][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.046122][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.053942][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.078727][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.086564][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.675975][ T5037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.275270][ T5037] veth0_vlan: entered promiscuous mode [ 217.417601][ T5037] veth1_vlan: entered promiscuous mode [ 217.544384][ T5044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.597587][ T5033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.784009][ T5037] veth0_macvtap: entered promiscuous mode [ 217.888970][ T5037] veth1_macvtap: entered promiscuous mode [ 218.157136][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.196906][ T5044] veth0_vlan: entered promiscuous mode [ 218.244337][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.256793][ T5033] veth0_vlan: entered promiscuous mode [ 218.331262][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.349778][ T5044] veth1_vlan: entered promiscuous mode [ 218.383021][ T5037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.392173][ T5037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.401203][ T5037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.410419][ T5037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.451017][ T5033] veth1_vlan: entered promiscuous mode [ 218.657443][ T5048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.769198][ T5033] veth0_macvtap: entered promiscuous mode [ 218.862715][ T5044] veth0_macvtap: entered promiscuous mode [ 218.883522][ T5033] veth1_macvtap: entered promiscuous mode [ 218.989392][ T5044] veth1_macvtap: entered promiscuous mode [ 219.155483][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.157966][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.162310][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.172900][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.194280][ T5033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.270212][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.281088][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.291518][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.303270][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.318250][ T5044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.389518][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.400531][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.415899][ T5033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.521721][ T5048] veth0_vlan: entered promiscuous mode [ 219.535873][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.548259][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.558661][ T5044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.569560][ T5044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.584805][ T5044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.623900][ T5033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.633179][ T5033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.642394][ T5033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.651543][ T5033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.700688][ T5048] veth1_vlan: entered promiscuous mode [ 219.866957][ T5044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.878316][ T5044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.888535][ T5044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.897740][ T5044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.177072][ T5048] veth0_macvtap: entered promiscuous mode [ 220.282370][ T5048] veth1_macvtap: entered promiscuous mode [ 220.516326][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.527928][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.538285][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.549153][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.559388][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.570277][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.586614][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.794745][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.807156][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.818140][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.828974][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.840255][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.852526][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.869133][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.032391][ T5048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.041706][ T5048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.050740][ T5048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.060882][ T5048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.626902][ T5049] veth0_vlan: entered promiscuous mode [ 221.735261][ T5049] veth1_vlan: entered promiscuous mode [ 222.057581][ T5049] veth0_macvtap: entered promiscuous mode [ 222.156441][ T5049] veth1_macvtap: entered promiscuous mode [ 222.360699][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.371682][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.381944][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.392726][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.402997][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.414804][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.424999][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.435805][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.451187][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.728523][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.742053][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.752318][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.763198][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.773470][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.784257][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.794489][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.805309][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.826545][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.029771][ T5049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.039143][ T5049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.049909][ T5049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.061589][ T5049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.589654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.597857][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.750566][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.759881][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:45 executing program 2: open(&(0x7f0000000340)='./file0\x00', 0x20a, 0x0) rename(&(0x7f0000000780)='./file0\x00', 0x0) 06:26:45 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 226.561628][ T2463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.569726][ T2463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.854235][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.863248][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.960546][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.968869][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) [ 227.156522][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.164729][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}}, 0x0) [ 227.436149][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.444390][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) set_tid_address(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2404c7fc, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000200)) unshare(0x20400) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000040)="2e64260f796f000f01c30f9fb420b990b5a06a66b8190101c065656626266066baf80cb8969bd582ef66bafc0c66edc744240000600000c7442406000000000f0114240ff9cd260f3166baf80cb8bcc8d18a9a6b000000f00066bafc0cb82a000000ef", 0x63}], 0x1, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0xff970000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getpid() 06:26:46 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 227.734984][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.743294][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:46 executing program 2: open(&(0x7f0000000580)='./file0\x00', 0x20a, 0x151) open(&(0x7f0000000340)='./file0\x00', 0x20a, 0x0) 06:26:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fat=@check_strict}, {@utf8}]}, 0x1, 0x224, &(0x7f0000000500)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x0) 06:26:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x63, 0x7f}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="867265"]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 228.349092][ T5223] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 228.469560][ T5224] loop1: detected capacity change from 0 to 256 06:26:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000006000000ff03000000000000f558000007000000000000000100000009000000020000000010000007000000000000001900008004000000f8ffffff02000000d00000000000000000000040000400000400000009000000000000000000000008000080"]) 06:26:47 executing program 1: syz_clone(0x3065000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:26:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getresgid(0x0, 0x0, 0x0) 06:26:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}}, 0x0) 06:26:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 06:26:48 executing program 1: r0 = open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000140)) fsync(r0) [ 229.864528][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 06:26:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x1267, 0x1000000000000) 06:26:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fat=@check_strict}, {@utf8}]}, 0x1, 0x224, &(0x7f0000000500)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x0) 06:26:49 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendto$inet6(r0, &(0x7f0000000180)='.', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) 06:26:49 executing program 2: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) [ 230.494469][ T5256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.518678][ T5255] loop0: detected capacity change from 0 to 256 06:26:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000580)) [ 230.734130][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.742725][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0xc0105500, &(0x7f0000000000)=@urb_type_control={0x2, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) [ 231.050160][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.058693][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:26:50 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") openat$incfs(0xffffffffffffff9c, 0x0, 0x123042, 0x0) 06:26:50 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) unshare(0x0) preadv2(r0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x18) 06:26:50 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x60, 0x0, 0xfffffffffffffe95}, 0x0) 06:26:50 executing program 1: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 06:26:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x8, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 06:26:51 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) ftruncate(r0, 0x9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) read$FUSE(r2, &(0x7f0000001840)={0x2020}, 0x2020) [ 232.377641][ T5268] loop2: detected capacity change from 0 to 2048 06:26:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 06:26:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 232.592623][ T28] audit: type=1800 audit(1711607211.566:2): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 232.626926][ T5279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 06:26:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 06:26:52 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendto$inet6(r0, &(0x7f0000000180)='.', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) 06:26:52 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={0x0}}, 0x0) [ 233.578469][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 06:26:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r6, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) listen(r1, 0x1) r7 = socket$packet(0x11, 0x0, 0x300) mount$cgroup2(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x20, &(0x7f0000000640)={[{@memory_localevents}, {@subsystem='perf_event'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'batadv0\x00'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) setsockopt(r7, 0x40, 0x1ff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={@loopback, 0x56}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ffffffff060001000200000008000600a7"], 0x38}}, 0x0) 06:26:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r1}, 0x18) 06:26:52 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a1e5850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='task_newtask\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:26:53 executing program 4: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) [ 234.384532][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 06:26:53 executing program 2: socket$unix(0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1c}}], 0x1, 0x0, 0x0) 06:26:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 06:26:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 06:26:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) write$cgroup_int(r0, 0x0, 0x0) 06:26:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) 06:26:54 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) unshare(0x4000400) preadv2(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x18) 06:26:54 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}}, 0x0) 06:26:54 executing program 0: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000140)) fsync(r0) 06:26:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendfile(r1, r0, 0x0, 0x7f) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0x8c, 0x0, &(0x7f0000000040)) 06:26:55 executing program 2: syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x8}}}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) 06:26:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) ftruncate(r0, 0x9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) read$FUSE(r2, &(0x7f0000001840)={0x2020}, 0x2020) 06:26:55 executing program 0: socket$unix(0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1c}}], 0x1, 0x0, 0x0) 06:26:55 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) [ 236.831883][ T28] audit: type=1800 audit(1711607215.736:3): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 06:26:55 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000400, &(0x7f0000000180)=ANY=[], 0x1, 0xa2f, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents(0xffffffffffffffff, &(0x7f0000002380)=""/129, 0x18) 06:26:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x9}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000380)=0x10) 06:26:56 executing program 3: add_key(0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) unshare(0x4000400) preadv2(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x18) 06:26:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x20}}, 0x0) 06:26:56 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000140)) fsync(r0) 06:26:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x116}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) [ 237.777513][ T5336] loop2: detected capacity change from 0 to 2048 06:26:56 executing program 1: syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x8}}}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) [ 237.984526][ T5343] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 06:26:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendfile(r1, r0, 0x0, 0x7f) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xa0, 0x0, &(0x7f0000000040)) 06:26:57 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x41) write$midi(r0, 0x0, 0x0) 06:26:57 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x0, 0x0) 06:26:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendfile(r1, r0, 0x0, 0x7f) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0x8c, 0x0, &(0x7f0000000040)) 06:26:57 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000760000007d00530095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e02742e8690d85d2fdffffffffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 06:26:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x22, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_kthread_work_queue_work\x00', r4}, 0x10) recvmsg$unix(r5, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r7, 0x8943, 0x20000000) 06:26:58 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) munmap(&(0x7f0000308000/0x4000)=nil, 0x4000) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) mremap(&(0x7f0000463000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000083d000/0x2000)=nil) munmap(&(0x7f0000866000/0x3000)=nil, 0x3000) madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12) mremap(&(0x7f00003b5000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000505000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) [ 239.435077][ T5358] loop4: detected capacity change from 0 to 2048 06:26:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) [ 239.707134][ T5367] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 06:26:58 executing program 1: add_key(0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) unshare(0x4000400) preadv2(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x18) 06:26:58 executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 06:26:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) getresgid(0x0, 0x0, 0x0) 06:26:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) syz_emit_ethernet(0x8f, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 06:26:59 executing program 3: r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendto(r0, &(0x7f0000000380)='0', 0x1, 0x0, 0x0, 0x0) 06:27:00 executing program 3: r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 06:27:00 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10) 06:27:00 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) 06:27:00 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) 06:27:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50be0, 0x0) close(r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) 06:27:01 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 06:27:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="2cfccb8d29b2b286a43193c890a5b1d59e269a2f6306375f8915a2dfd800ef18f05911aa1c765160ca871b9ed88c19843f6961b96166b76b5c23", 0x3a}, {&(0x7f0000000900)="38eb127b7893e97fe31e1e714ff412948ec55a10c9d5b06034a850856e1bb323c29aba30e3481b0bef1e6b0883bf508b6eb64a3235019c4b7365d73dd575149489f539a6fb1cd3ea3346c6e57f18705a05a0e8ac0087aab3d291e2187a1f8d5e9774293947efbfd6bcc5b5c695e62393ac0f4d992c78539c57fa20d2bb173ab98d60a520a2f3d73fc9f06895c7a33eaba914f207dc587a25049ec755a503263c6bfb8c67321656a5fed216f02e238f441d19959a8c194ac21ca3def760fa4936f2a0e38416b4f62f34ed0f41abeda3e29205c747c3078cd6384270940a2104ed8d5ddd3f41b2933fd45612046df1c91714dfc423aea66e216dec710fccb967248e6438999096d18d2ed814f968ebbfa7015f0185c53944cb7c8cad3b7be428d280d9309620fb289b85a209ab63947ed3cf006ec63e6465542e216afdf0ae1cd4e41eae29c35b98e89ce79f543eb0119bac0cad4762764632403b843ede3d8a64e49c0a87f72ed80f218481b4c0cb1f2b99911a9758c6c002b03ade10b6587fa51538e11d281a3cd557f197dbdbe412416a8a8ccd9121733b25cfff0ee40cf243328097c4ede1547aab39c8aa38187123e17aa1f7944f1ef0465f6d16b9eed8ed6056d9036cc4b2177bb051185969815b8f6d8b11aae189a7e49dfd34958dfaf0c061bb995349d12bdcde882d76ac9275ce121d80a4d32f51349031e91139206ddb70db86cba6eb8205c1e142514085e00d2b7db65673bfe37262440b6b6357283c3b8cfe505263f67e0230dfce4474cd84567757304f5e2fd2e42b1e4d436d7ec2e8f1c7d8e980dca58eecf2198e87a9ed695d178a7dbdfea00743c32aad874986be8825db4cf529515fadd432f0d219293facd45da88e0cb77209efcf73efe1c554c1fee074d1b0211c4261d007e4ed5c606b171ec565b03a2e2f6d50f0799c36a33187e9640ca682ebb47e265566f7e31b2c974c9894270c8d5143c9c57708980bb4e8e75425dbb6fc2503fcdd8185fcadef067cbf6009119b820c3094230ebc358d2d04812153974d32c5d8d438a405b26998f2cd6ed6caa4332e319de8fe705a7a4f97fa782d234a805f0da17d3e86710b68a015680825e3b9413c9a767780f0b0946b4da3f3d181a3f0f80f46ea2d03825005dd289b39ee973b01d331022b6196b90ac48e3385e4e9990f175b815e860c9f6e460aedc8179db8ac80b3160d2502edae5c0aecd7b401abaee95488a988444d5f1f1771b6fe9a28b95bc252f25ad5cccf854314afc11e6d834d46bee2341b006245c9ffd18b193310eddbc80b0a892e72b6ae0197da826d1d618b25a9e3eb93fd30974ce2062992bcb1b94b93eda324c524a7b6ab8d41120ee8f0119ab3a30cafa757d615940cdc5c7c8396bddeca1820b995b8fba9765ef143d58d9848031e4f78bc4622965b17d1ca176b259c77567a46481a0f934f6c47a2c1ca7812520f9fb5ebbf8d91613a4de58ede946074772c522de4b877fc13abbdf506e50c025a76f4f48891ceb6397df3ff064ce99dd599d709057ac11c0ee79348ff1448e13a8c3916c2c3b7cefad3308437f23a0dd74559c90fafaa59eff83161c0418bdc59606e407c4e1cbf6d0f061290c3358695a0c2169574e7de686d2d2946a96ab1061c2eb415f8dbdf6cb1f0cc09a7d3fcf3e9e2216e8ebd7d32c29796c831692214ab30b54e09da9dad1aa5aa12e43109c6dff35ae8ac8fdb5c828ecae38a40c200cc54315f29b57d1185fecab6655cb18381805878f257f5dde34069dff628f5e9de8669cfe62a16c74e6adf0c31c9cfec835b1f3e31d715826c38c1fb865134c3ee0e6d55a761d61831beab59d52dfb3963c491a2bbb3945d17ce6a8b8c8466f1378c5c3e7f3b832ca8cecbb23c733907db97488cd5c4938e0eb69805b9b58290a308add3aaaef04dabd091b8598e98793505673a0c4416db9b516e0ba8fda2", 0x573}], 0x2}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='x', 0x1}], 0x1}, 0x0) 06:27:01 executing program 3: add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) unshare(0x4000400) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x18) 06:27:01 executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 06:27:01 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x0, 0x0) 06:27:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) getresgid(0x0, 0x0, 0x0) 06:27:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendfile(r1, r0, 0x0, 0x7f) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0x8c, 0x0, &(0x7f0000000040)) 06:27:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x22, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_kthread_work_queue_work\x00', r4}, 0x10) recvmsg$unix(r5, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r7, 0x8943, 0x20000000) 06:27:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sendfile(r1, r0, 0x0, 0x7f) getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0xa0, 0x0, &(0x7f0000000040)) [ 242.977487][ T5402] loop2: detected capacity change from 0 to 2048 06:27:02 executing program 1: ftruncate(0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)=ANY=[]) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) [ 243.099958][ T5409] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 06:27:02 executing program 0: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x8}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, 0x0) 06:27:02 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000400, &(0x7f0000000180)=ANY=[], 0x1, 0xa2f, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents(r0, 0x0, 0x0) 06:27:02 executing program 2: socket$unix(0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1c}}], 0x1, 0x0, 0x0) 06:27:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) 06:27:02 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000240)="e02742e8690d85d2fdffffffffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 243.972517][ T5419] loop4: detected capacity change from 0 to 2048 [ 244.227348][ T5426] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.337236][ T5419] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 244.365941][ T5423] ===================================================== [ 244.373651][ T5423] BUG: KMSAN: uninit-value in v9fs_evict_inode+0x109/0x130 [ 244.381073][ T5423] v9fs_evict_inode+0x109/0x130 [ 244.386382][ T5423] evict+0x3ae/0xa60 [ 244.395332][ T5423] iput+0x9ca/0xe10 [ 244.399398][ T5423] iget_failed+0x15e/0x180 [ 244.405530][ T5423] v9fs_fid_iget+0x20c/0x6d0 [ 244.410330][ T5423] v9fs_mount+0xbbf/0x12b0 [ 244.415297][ T5423] legacy_get_tree+0x114/0x290 [ 244.420295][ T5423] vfs_get_tree+0xa7/0x570 [ 244.425139][ T5423] do_new_mount+0x71f/0x15e0 [ 244.429934][ T5423] path_mount+0x742/0x1f20 [ 244.434694][ T5423] __se_sys_mount+0x725/0x810 [ 244.439588][ T5423] __x64_sys_mount+0xe4/0x150 [ 244.444657][ T5423] do_syscall_64+0xd5/0x1f0 [ 244.449514][ T5423] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 244.455882][ T5423] [ 244.458301][ T5423] Uninit was created at: [ 244.463217][ T5423] __alloc_pages+0x9d6/0xe70 [ 244.468049][ T5423] new_slab+0x2de/0x1400 [ 244.473089][ T5423] ___slab_alloc+0x1184/0x33d0 [ 244.478042][ T5423] kmem_cache_alloc_lru+0x6d7/0xbe0 [ 244.483654][ T5423] v9fs_alloc_inode+0x62/0x130 [ 244.488633][ T5423] alloc_inode+0x86/0x460 [ 244.498129][ T5423] iget_locked+0x2bf/0xee0 [ 244.504402][ T5423] v9fs_fid_iget+0x97/0x6d0 [ 244.506912][ T5419] Remounting filesystem read-only [ 244.509067][ T5423] v9fs_mount+0xbbf/0x12b0 [ 244.509188][ T5423] legacy_get_tree+0x114/0x290 [ 244.524098][ T5423] vfs_get_tree+0xa7/0x570 [ 244.528763][ T5423] do_new_mount+0x71f/0x15e0 [ 244.533724][ T5423] path_mount+0x742/0x1f20 [ 244.538343][ T5423] __se_sys_mount+0x725/0x810 [ 244.543429][ T5423] __x64_sys_mount+0xe4/0x150 [ 244.548313][ T5423] do_syscall_64+0xd5/0x1f0 [ 244.553158][ T5423] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 244.559248][ T5423] [ 244.562360][ T5423] CPU: 0 PID: 5423 Comm: syz-executor.3 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0 [ 244.573078][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 06:27:03 executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="77e3834b409d9e63", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x45) [ 244.583489][ T5423] ===================================================== [ 244.590558][ T5423] Disabling lock debugging due to kernel taint [ 244.601886][ T5423] Kernel panic - not syncing: kmsan.panic set ... [ 244.608460][ T5423] CPU: 0 PID: 5423 Comm: syz-executor.3 Tainted: G B 6.9.0-rc1-syzkaller-00021-g962490525cff #0 [ 244.620465][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 244.630682][ T5423] Call Trace: [ 244.634077][ T5423] [ 244.637108][ T5423] dump_stack_lvl+0x216/0x2d0 [ 244.641979][ T5423] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.648022][ T5423] dump_stack+0x1e/0x30 [ 244.652354][ T5423] panic+0x4e2/0xcd0 [ 244.656424][ T5423] ? kmsan_get_metadata+0xf1/0x1d0 [ 244.661715][ T5423] kmsan_report+0x2d5/0x2e0 [ 244.666447][ T5423] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.672479][ T5423] ? __msan_warning+0x95/0x120 [ 244.677443][ T5423] ? v9fs_evict_inode+0x109/0x130 [ 244.682650][ T5423] ? evict+0x3ae/0xa60 [ 244.686877][ T5423] ? iput+0x9ca/0xe10 [ 244.691052][ T5423] ? iget_failed+0x15e/0x180 [ 244.695823][ T5423] ? v9fs_fid_iget+0x20c/0x6d0 [ 244.700776][ T5423] ? v9fs_mount+0xbbf/0x12b0 [ 244.705544][ T5423] ? legacy_get_tree+0x114/0x290 [ 244.710665][ T5423] ? vfs_get_tree+0xa7/0x570 [ 244.715461][ T5423] ? do_new_mount+0x71f/0x15e0 [ 244.720421][ T5423] ? path_mount+0x742/0x1f20 [ 244.725203][ T5423] ? __se_sys_mount+0x725/0x810 [ 244.730247][ T5423] ? __x64_sys_mount+0xe4/0x150 [ 244.735285][ T5423] ? do_syscall_64+0xd5/0x1f0 [ 244.740144][ T5423] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 244.746405][ T5423] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.752449][ T5423] ? filemap_fdatawrite_wbc+0x128/0x270 [ 244.758233][ T5423] ? filemap_fdatawrite+0xbf/0xf0 [ 244.763446][ T5423] ? kmsan_get_metadata+0x146/0x1d0 [ 244.768836][ T5423] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 244.774894][ T5423] __msan_warning+0x95/0x120 [ 244.779699][ T5423] v9fs_evict_inode+0x109/0x130 [ 244.784747][ T5423] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 244.790310][ T5423] evict+0x3ae/0xa60 [ 244.794389][ T5423] iput+0x9ca/0xe10 [ 244.798412][ T5423] iget_failed+0x15e/0x180 [ 244.803020][ T5423] v9fs_fid_iget+0x20c/0x6d0 [ 244.807824][ T5423] ? kmsan_get_metadata+0x146/0x1d0 [ 244.813232][ T5423] v9fs_mount+0xbbf/0x12b0 [ 244.817884][ T5423] legacy_get_tree+0x114/0x290 [ 244.822849][ T5423] ? __pfx_v9fs_mount+0x10/0x10 [ 244.827887][ T5423] ? __pfx_legacy_get_tree+0x10/0x10 [ 244.833359][ T5423] vfs_get_tree+0xa7/0x570 [ 244.837991][ T5423] ? mount_capable+0x97/0x120 [ 244.842861][ T5423] do_new_mount+0x71f/0x15e0 [ 244.847638][ T5423] ? kmsan_get_metadata+0x146/0x1d0 [ 244.853044][ T5423] path_mount+0x742/0x1f20 [ 244.857691][ T5423] ? user_path_at_empty+0x325/0x3a0 [ 244.863125][ T5423] __se_sys_mount+0x725/0x810 [ 244.868005][ T5423] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 244.874474][ T5423] __x64_sys_mount+0xe4/0x150 [ 244.879348][ T5423] do_syscall_64+0xd5/0x1f0 [ 244.884040][ T5423] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 244.890140][ T5423] RIP: 0033:0x7fb3a5a7dda9 [ 244.894699][ T5423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 244.914608][ T5423] RSP: 002b:00007fb3a67640c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.923236][ T5423] RAX: ffffffffffffffda RBX: 00007fb3a5babf80 RCX: 00007fb3a5a7dda9 [ 244.931365][ T5423] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 244.939473][ T5423] RBP: 00007fb3a5aca47a R08: 0000000020000140 R09: 0000000000000000 [ 244.947582][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.955683][ T5423] R13: 000000000000000b R14: 00007fb3a5babf80 R15: 00007ffe0a7cf658 [ 244.963812][ T5423] [ 244.967287][ T5423] Kernel Offset: disabled [ 244.971691][ T5423] Rebooting in 86400 seconds..