last executing test programs: 4.902334921s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = syz_open_dev$vcsa(0x0, 0x0, 0xa00) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 3.656457422s ago: executing program 2 (id=5): r0 = socket$kcm(0x10, 0x3, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) 3.265423181s ago: executing program 1 (id=6): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}]}}) 3.139362344s ago: executing program 2 (id=7): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x10000, 0x9, 0x1b) 2.539339169s ago: executing program 2 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.466114121s ago: executing program 3 (id=4): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x1, 0x379, &(0x7f0000000580)="$eJzs3U9rHGUYAPAnsdm00WRzEEFFfKkXvSxJ/AIN0oIYUGJXqgdhaja6ZJsNO0tki2hvXv0cxaM3QfwCOejdm7dcPPZQOrL/8t94aDZj7e8Hyfsk8z6zz8zODO9lePbv/HBvazOvbWbdmL6RYjoiph9FLA6ioanROD2IK3HUg3ineuePNz7+9LMPVtfWbq6ndGv19rsrKaWFN3/5+psfr//affGTnxZ+no29xc/3/1r5c++VvVf3n9z+qpmnZp62292Upbvtdje722qkjWa+VUvpo1YjyxupuZ03Ose2b7baOzu9lG1vzM/tdBp5nrLtXtpq9FK3nbqdXsq+zJrbqVarpfm54N/UH66vZ6vD+Oo5824Mh8qlFMUF63RWs/49PHtqS/1hKQUBAKV62vV/5ULX/zNh/X+Zjq7/+b/qr/8ro/v3OOt/AAAAAAAAAAAAAAB4FjwqimpRFNXxWIxfEh79XXJ5TNip7//ET9n1MVkHL+6NX+ur79YjWt/3f/etbkYzWtGIpajG4/5jYWwY33p/7eZSGliM+Xvf7fbzr/8WUX/heP5yVGPx7PzlYX46yI/+OBNzR/NXohovn52/cmZ+Jd5+60h+Larx+xfRjlZsDB5vh/nfLqf03odrJ/JnB/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeD7U0tjrMex7v1uPuBa7o/79tcMJi8f74w/zD/rrL0U1Hp/dn3/pzP78V+K1K+UeOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM5b37W1mr1ehMLKiOPmn0n3HP/8Gcyjj45/Sp4fQHJzZdi0nWfDqYvqgdPimKYlKlXp382YiYupAzPxNx3n6K0VXy9DW/FBHnzJk9vDLP3c/CZV5s/4mgjKcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlOuw6XfZlQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCmvHd/K2u1Gp0JBmUfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLPk7wAAAP//mnAKcw==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb8a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000840) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fff) 2.408046682s ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x20, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r1, &(0x7f0000000140)='n', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xeed9) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) close(0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f22000/0x2000)=nil, 0x2000, &(0x7f0000000180)='sysfs\x00') write(r0, &(0x7f0000000080)='4', 0x1) 1.955000443s ago: executing program 1 (id=9): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{}]}, 0x3, 0x5fe, &(0x7f0000000d40)="$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") open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 1.904180434s ago: executing program 3 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 1.889158544s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(0x0, 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000003480)=[{&(0x7f0000000340)="c4f5ce4e", 0x4}, {0x0}], 0x2, 0x7f, 0xc63, 0x8) 1.594414162s ago: executing program 0 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.505948514s ago: executing program 3 (id=13): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00008cc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x4060, 0xc000, 0xa, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0xb8e1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.373243577s ago: executing program 2 (id=14): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='r:tes_/event1 ./file0:0', 0x17) 1.25910062s ago: executing program 0 (id=15): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x8000, @multicast2=0xe0000001}, 0x10, 0x0}, 0x20002800) 1.230384521s ago: executing program 1 (id=16): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.161858852s ago: executing program 3 (id=17): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_DELOBJ={0x158, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xfe, 0x8, "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"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e0}}, 0x4004050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) 981.861456ms ago: executing program 0 (id=18): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x5, ' \x00\x00\x00\x00'}}, 0xb) 873.075519ms ago: executing program 2 (id=19): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getown(r0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x1c0, 0x3a, 0x100, 0x8000, 0x25dfdbfa, {0xff}, [@typed={0xc, 0x130, 0x0, 0x0, @u64=0xfffffffffffffff6}, @generic="07d38e59d83f43d1bbc6b2d857f15c097f2c0061bc48", @generic, @nested={0x144, 0x57, 0x0, 0x1, [@nested={0x140, 0x8c, 0x0, 0x1, [@nested={0x4, 0xed}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@local}, @generic="c8a973863e6688e98bbb9651914582aee9b9a321156bb67db13e464c5925a719325326b26ba12700d16428ccb7c6e2bbd0d6ccdd2ad785cee79867749b1556150bdcdde2b71322a3837073bd41ea552b8b7fc7e39c7434217aed", @generic, @typed={0x8, 0xdf, 0x0, 0x0, @uid}, @typed={0x4, 0x91}, @generic="6d82140239a7ba920f9bb8d44cc1caf19ad8c4a2088b571ec72255c0d998e4304f98fbb9af56cd1f54fa0a580b7a2d4a2256a2fd3947fdcf7f0f14f243fff1f495926093940a41c214407fde16247dac5d05132c2bfec03780442cf46c1f46d8dcc67f15caafd9ea0c6cfd0fe2b569af3721da8e17c2cba16f21f6378ac1b08ba4bf0d2e90c2198fe31a2aac1bf4d0073d967095e54c96a056262a0bb206e2d2b41e41098758cf3c2ee7bd97eeafac2f9b84fbf625bc758fe1f1154b8a6a"]}]}, @nested={0x4, 0xf1}, @nested={0x40, 0x132, 0x0, 0x1, [@typed={0xc, 0xdd, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xd0}, @nested={0x29, 0x48, 0x0, 0x1, [@nested={0x4, 0x59}, @nested={0x4, 0xd5}, @typed={0x8, 0xcc, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x16b, 0x0, 0x0, @u64=0x5}, @generic="ecb55eecae", @typed={0x4, 0x4d}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 1 (id=20): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008480, &(0x7f0000000200)={[{@grpjquota}, {@nodioread_nolock}, {@noquota}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x2}}, {@grpid}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r0, 0x0, 0x0, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x4, 0xef4d, 0x4, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 89.738146][ T5762] cgroup: Unknown subsys name 'net' [ 89.883844][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.630815][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.610793][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.625542][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.635254][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.636287][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.651744][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.659125][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.666351][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.668139][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.679178][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.689811][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.695524][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.701542][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.712277][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.720628][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.728057][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.752428][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.759878][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.772974][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.780556][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.792931][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.800181][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.818556][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.820007][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.835434][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.389001][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 94.463298][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 94.474795][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 94.533900][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 94.714967][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.722598][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.730083][ T5777] bridge_slave_0: entered allmulticast mode [ 94.738307][ T5777] bridge_slave_0: entered promiscuous mode [ 94.748023][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.755345][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.763356][ T5778] bridge_slave_0: entered allmulticast mode [ 94.770828][ T5778] bridge_slave_0: entered promiscuous mode [ 94.816962][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.824307][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.831535][ T5777] bridge_slave_1: entered allmulticast mode [ 94.839348][ T5777] bridge_slave_1: entered promiscuous mode [ 94.847592][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.855208][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.862962][ T5778] bridge_slave_1: entered allmulticast mode [ 94.870145][ T5778] bridge_slave_1: entered promiscuous mode [ 94.887575][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.897386][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.905819][ T5780] bridge_slave_0: entered allmulticast mode [ 94.913174][ T5780] bridge_slave_0: entered promiscuous mode [ 94.924382][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.932839][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.940376][ T5780] bridge_slave_1: entered allmulticast mode [ 94.948382][ T5780] bridge_slave_1: entered promiscuous mode [ 94.979112][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.986540][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.994787][ T5779] bridge_slave_0: entered allmulticast mode [ 95.002444][ T5779] bridge_slave_0: entered promiscuous mode [ 95.045989][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.056111][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.063490][ T5779] bridge_slave_1: entered allmulticast mode [ 95.070591][ T5779] bridge_slave_1: entered promiscuous mode [ 95.093257][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.118596][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.140301][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.156095][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.167764][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.191316][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.203258][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.261107][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.288837][ T5777] team0: Port device team_slave_0 added [ 95.298278][ T5778] team0: Port device team_slave_0 added [ 95.321017][ T5780] team0: Port device team_slave_0 added [ 95.333321][ T5777] team0: Port device team_slave_1 added [ 95.341217][ T5778] team0: Port device team_slave_1 added [ 95.370255][ T5780] team0: Port device team_slave_1 added [ 95.415505][ T5779] team0: Port device team_slave_0 added [ 95.445391][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.455204][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.481619][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.494990][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.504539][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.531421][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.545315][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.552459][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.588644][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.601684][ T5779] team0: Port device team_slave_1 added [ 95.618932][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.628483][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.654763][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.667236][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.674666][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.701951][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.768559][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.776665][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.806588][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.838454][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.845757][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.871909][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.883852][ T51] Bluetooth: hci1: command tx timeout [ 95.883872][ T5787] Bluetooth: hci3: command tx timeout [ 95.895180][ T51] Bluetooth: hci2: command tx timeout [ 95.895367][ T51] Bluetooth: hci0: command tx timeout [ 95.906437][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.916234][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.945385][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.986428][ T5778] hsr_slave_0: entered promiscuous mode [ 95.993133][ T5778] hsr_slave_1: entered promiscuous mode [ 96.085205][ T5777] hsr_slave_0: entered promiscuous mode [ 96.091899][ T5777] hsr_slave_1: entered promiscuous mode [ 96.099784][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.108448][ T5777] Cannot create hsr debugfs directory [ 96.172585][ T5780] hsr_slave_0: entered promiscuous mode [ 96.179462][ T5780] hsr_slave_1: entered promiscuous mode [ 96.186264][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.194115][ T5780] Cannot create hsr debugfs directory [ 96.215910][ T5779] hsr_slave_0: entered promiscuous mode [ 96.222796][ T5779] hsr_slave_1: entered promiscuous mode [ 96.229282][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.238545][ T5779] Cannot create hsr debugfs directory [ 96.662988][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.688227][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.702981][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.715293][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.798650][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.812804][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.828487][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.841764][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.982582][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.994224][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.007188][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.018459][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.050972][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.114165][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.149158][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.156672][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.196751][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.209792][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.228151][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.235493][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.255465][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.268876][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.427136][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.495658][ T8] cfg80211: failed to load regulatory.db [ 97.534817][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.557114][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.581562][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.636835][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.644080][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.656609][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.663904][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.717969][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.744598][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.768448][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.775703][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.825427][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.832700][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.866270][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.873548][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.889843][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.897174][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.940689][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.964457][ T5787] Bluetooth: hci0: command tx timeout [ 97.964521][ T51] Bluetooth: hci1: command tx timeout [ 97.971277][ T5086] Bluetooth: hci3: command tx timeout [ 97.977801][ T5795] Bluetooth: hci2: command tx timeout [ 98.222184][ T5778] veth0_vlan: entered promiscuous mode [ 98.279765][ T5778] veth1_vlan: entered promiscuous mode [ 98.319688][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.480971][ T5778] veth0_macvtap: entered promiscuous mode [ 98.515974][ T5778] veth1_macvtap: entered promiscuous mode [ 98.545937][ T5780] veth0_vlan: entered promiscuous mode [ 98.589287][ T5780] veth1_vlan: entered promiscuous mode [ 98.609554][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.629144][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.659780][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.669046][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.678198][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.687975][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.736889][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.758839][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.857026][ T5780] veth0_macvtap: entered promiscuous mode [ 98.891343][ T5780] veth1_macvtap: entered promiscuous mode [ 98.946114][ T5779] veth0_vlan: entered promiscuous mode [ 98.964299][ T5777] veth0_vlan: entered promiscuous mode [ 98.983572][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.995287][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.008532][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.018790][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.031474][ T5777] veth1_vlan: entered promiscuous mode [ 99.043966][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.077106][ T5779] veth1_vlan: entered promiscuous mode [ 99.100641][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.109759][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.110869][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.135332][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.150052][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.163120][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.171928][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.181993][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.191104][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.342669][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.350677][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.375673][ T5779] veth0_macvtap: entered promiscuous mode [ 99.401111][ T5777] veth0_macvtap: entered promiscuous mode [ 99.428258][ T5777] veth1_macvtap: entered promiscuous mode [ 99.442405][ T5779] veth1_macvtap: entered promiscuous mode [ 99.510255][ T5844] syz.1.2[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.520476][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.535413][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.538294][ T5844] loop1: detected capacity change from 0 to 512 [ 99.549444][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.564513][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.579379][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.581603][ T5844] EXT4-fs (loop1): Test dummy encryption mode enabled [ 99.598314][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.616479][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.635951][ T5844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.651926][ T5844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.676803][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.703936][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.707106][ T5844] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.738290][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.751089][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.752952][ T5844] EXT4-fs (loop1): 1 truncate cleaned up [ 99.761646][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.777903][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.785980][ T5844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.803023][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.818051][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.839428][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.859849][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.870840][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.885507][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.918094][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.944247][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.962240][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.971061][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.016251][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.029407][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.039807][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.051348][ T5795] Bluetooth: hci2: command tx timeout [ 100.057072][ T5795] Bluetooth: hci1: command tx timeout [ 100.062626][ T51] Bluetooth: hci3: command tx timeout [ 100.063554][ T5086] Bluetooth: hci0: command tx timeout [ 100.077580][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.087680][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.106349][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.184884][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.864252][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.908794][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.962466][ T5853] netlink: 'syz.2.5': attribute type 9 has an invalid length. [ 100.970092][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.970277][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.979360][ T5853] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5'. [ 101.063401][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.284786][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.312710][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.352266][ T5856] loop2: detected capacity change from 0 to 8192 [ 101.402934][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.421810][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.430740][ T5856] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.503949][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.536519][ T5856] ======================================================= [ 101.536519][ T5856] WARNING: The mand mount option has been deprecated and [ 101.536519][ T5856] and is ignored by this kernel. Remove the mand [ 101.536519][ T5856] option from the mount to silence this warning. [ 101.536519][ T5856] ======================================================= [ 101.551485][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.592394][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.604804][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.622755][ T28] audit: type=1804 audit(1787321551.722:2): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7" name="/newroot/2/file0/bus" dev="loop2" ino=1048586 res=1 errno=0 [ 101.697215][ T28] audit: type=1800 audit(1787321551.752:3): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="bus" dev="loop2" ino=1048586 res=0 errno=0 [ 101.793138][ T5780] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 101.801365][ T5780] FAT-fs (loop2): Filesystem has been set read-only [ 101.978345][ T5861] loop3: detected capacity change from 0 to 512 [ 102.129198][ T5086] Bluetooth: hci1: command tx timeout [ 102.135276][ T5787] Bluetooth: hci3: command tx timeout [ 102.135297][ T5795] Bluetooth: hci2: command tx timeout [ 102.140943][ T5787] Bluetooth: hci0: command tx timeout [ 102.569490][ T5872] loop1: detected capacity change from 0 to 1024 [ 102.610091][ T5874] loop2: detected capacity change from 0 to 4096 [ 102.640192][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.703295][ T5874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.738333][ T28] audit: type=1800 audit(1787321552.842:4): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 102.879766][ T5872] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 102.911408][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.112986][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.479662][ T5897] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 104.212924][ T5858] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 104.226974][ T5858] wiimote 0005:057E:0306.0001: New device registered [ 104.444110][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.563076][ T5908] ------------[ cut here ]------------ [ 104.569016][ T5908] WARNING: CPU: 0 PID: 5908 at net/core/flow_dissector.c:1107 __skb_flow_dissect+0xb05/0x6e70 [ 104.579746][ T5908] Modules linked in: [ 104.583784][ T5908] CPU: 0 PID: 5908 Comm: syz.2.19 Not tainted syzkaller #0 [ 104.591037][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.601376][ T5908] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 104.607735][ T5908] Code: c6 e8 7f 5c 06 f9 85 db 0f 84 9a 06 00 00 80 3d 24 d4 f5 05 01 0f 85 c0 06 00 00 e8 b5 58 06 f9 e9 d5 f9 ff ff e8 ab 58 06 f9 <0f> 0b e8 b4 46 0e 02 89 c3 31 ff 89 c6 e8 49 5c 06 f9 85 db 74 18 [ 104.630409][ T5908] RSP: 0018:ffffc900051a5e00 EFLAGS: 00010283 [ 104.637080][ T5908] RAX: ffffffff888119c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 104.645656][ T5908] RDX: ffffc9000e801000 RSI: 00000000000019c6 RDI: 00000000000019c7 [ 104.654680][ T5908] RBP: ffffc900051a6418 R08: dffffc0000000000 R09: 1ffffffff223dca0 [ 104.663031][ T5908] R10: dffffc0000000000 R11: fffffbfff223dca1 R12: ffffffff8e8ceff8 [ 104.671445][ T5908] R13: 1ffffffff1d19e00 R14: ffffffff8e8cf002 R15: dffffc0000000000 [ 104.679821][ T5908] FS: 00007ff72f5b96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 104.689497][ T5908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.696300][ T5908] CR2: 00007ff72f5b8ff8 CR3: 00000000762fc000 CR4: 00000000003506f0 [ 104.704396][ T5908] Call Trace: [ 104.707779][ T5908] [ 104.710829][ T5908] ? __skb_flow_dissect+0x1eb/0x6e70 [ 104.716297][ T5908] ? mark_lock+0x94/0x320 [ 104.720784][ T5908] ? __lock_acquire+0x1336/0x7d80 [ 104.726778][ T5908] ? bpf_flow_dissect+0x3f0/0x3f0 [ 104.731899][ T5908] ? verify_lock_unused+0x140/0x140 [ 104.737359][ T5908] ? verify_lock_unused+0x140/0x140 [ 104.742737][ T5908] ? mark_lock+0x94/0x320 [ 104.747168][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.753337][ T5908] ? read_lock_is_recursive+0x20/0x20 [ 104.758897][ T5908] ? lock_chain_count+0x20/0x20 [ 104.763865][ T5908] ? finish_task_switch+0x262/0x8f0 [ 104.769132][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 104.774449][ T5908] ? finish_task_switch+0x262/0x8f0 [ 104.779717][ T5908] ? __schedule+0x15b6/0x4660 [ 104.784587][ T5908] __skb_get_hash+0xf3/0x2e0 [ 104.789257][ T5908] ? asan.module_dtor+0x20/0x20 [ 104.794352][ T5908] ? mark_lock+0x94/0x320 [ 104.798756][ T5908] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 104.804581][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.810735][ T5908] ? mark_lock+0x94/0x320 [ 104.815197][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.821458][ T5908] ? trace_irq_disable+0x37/0xe0 [ 104.827566][ T5908] nft_trace_init+0x1bb/0x420 [ 104.832919][ T5908] ? nf_trace_fill_pkt_info+0x870/0x870 [ 104.838562][ T5908] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 104.844334][ T5908] nft_do_chain+0x1523/0x1620 [ 104.849089][ T5908] ? __local_bh_enable_ip+0x142/0x1c0 [ 104.854727][ T5908] ? _local_bh_enable+0xa0/0xa0 [ 104.860086][ T5908] ? __local_bh_enable_ip+0x13a/0x1c0 [ 104.865783][ T5908] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 104.871755][ T5908] ? ipt_do_table+0x13b3/0x15c0 [ 104.876723][ T5908] ? nf_nat_inet_fn+0x90b/0xb20 [ 104.881666][ T5908] nft_do_chain_inet+0x29b/0x380 [ 104.886717][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 104.891827][ T5908] ? ipt_do_table+0x2c5/0x15c0 [ 104.896723][ T5908] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 104.902300][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 104.907400][ T5908] nf_hook_slow+0xbd/0x200 [ 104.911979][ T5908] ? nf_hook+0x390/0x390 [ 104.916470][ T5908] nf_hook+0x228/0x390 [ 104.921221][ T5908] ? nf_hook+0xa2/0x390 [ 104.925670][ T5908] ? __ip_local_out+0x5f0/0x5f0 [ 104.931453][ T5908] ? nf_hook+0x390/0x390 [ 104.935885][ T5908] ? nf_ct_set_closing+0x23/0x230 [ 104.941062][ T5908] ? ip_fast_csum+0x1ee/0x2b0 [ 104.945896][ T5908] __ip_local_out+0x4db/0x5f0 [ 104.950633][ T5908] ? nf_hook+0x390/0x390 [ 104.955004][ T5908] ip_local_out+0x2a/0x130 [ 104.959513][ T5908] nf_send_reset+0xebd/0x16b0 [ 104.964378][ T5908] ? skb_put_data+0x30/0x30 [ 104.969170][ T5908] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 104.974955][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 104.980310][ T5908] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 104.986085][ T5908] nft_reject_inet_eval+0x3ad/0x680 [ 104.991378][ T5908] nft_do_chain+0x44b/0x1620 [ 104.996106][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.002890][ T5908] ? lock_chain_count+0x20/0x20 [ 105.007844][ T5908] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 105.013910][ T5908] ? nf_nat_inet_fn+0x90b/0xb20 [ 105.018853][ T5908] nft_do_chain_inet+0x29b/0x380 [ 105.024102][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 105.029236][ T5908] ? ipt_do_table+0x2c5/0x15c0 [ 105.034934][ T5908] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 105.040719][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 105.046242][ T5908] nf_hook_slow+0xbd/0x200 [ 105.050761][ T5908] ? nf_hook+0x390/0x390 [ 105.055164][ T5908] nf_hook+0x228/0x390 [ 105.059310][ T5908] ? nf_hook+0xa2/0x390 [ 105.063604][ T5908] ? __ip_local_out+0x5f0/0x5f0 [ 105.068533][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 105.073942][ T5908] ? nf_hook+0x390/0x390 [ 105.078284][ T5908] __ip_local_out+0x4db/0x5f0 [ 105.083332][ T5908] ? nf_hook+0x390/0x390 [ 105.087667][ T5908] ? __ip_queue_xmit+0x5d/0x1960 [ 105.092731][ T5908] __ip_queue_xmit+0xf89/0x1960 [ 105.097681][ T5908] ? __ip_queue_xmit+0x5d/0x1960 [ 105.102769][ T5908] __tcp_transmit_skb+0x1dd6/0x3470 [ 105.108070][ T5908] ? __tcp_send_ack+0x5a0/0x5a0 [ 105.113033][ T5908] ? tcp_small_queue_check+0x1d6/0x3c0 [ 105.118619][ T5908] tcp_write_xmit+0x1550/0x6700 [ 105.123738][ T5908] tcp_sendmsg_locked+0x2676/0x4ab0 [ 105.129098][ T5908] ? tcp_set_state+0x6c0/0x6c0 [ 105.134893][ T5908] tcp_sendmsg+0x2f/0x50 [ 105.139229][ T5908] ? inet_send_prepare+0x250/0x250 [ 105.144555][ T5908] ____sys_sendmsg+0x61b/0x980 [ 105.149386][ T5908] ? __asan_memset+0x22/0x40 [ 105.154156][ T5908] ? __sys_sendmsg_sock+0x30/0x30 [ 105.159251][ T5908] ? __import_iovec+0x5f2/0x850 [ 105.165249][ T5908] ? import_iovec+0x73/0xa0 [ 105.169857][ T5908] ___sys_sendmsg+0x2a6/0x360 [ 105.174846][ T5908] ? __sys_sendmsg+0x2b0/0x2b0 [ 105.179757][ T5908] __se_sys_sendmsg+0x1d0/0x2c0 [ 105.184778][ T5908] ? __x64_sys_sendmsg+0x80/0x80 [ 105.189841][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 105.195709][ T5908] do_syscall_64+0x55/0xb0 [ 105.200204][ T5908] ? clear_bhb_loop+0x40/0x90 [ 105.205027][ T5908] ? clear_bhb_loop+0x40/0x90 [ 105.209783][ T5908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.215886][ T5908] RIP: 0033:0x7ff72e79e0d9 [ 105.220526][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.241349][ T5908] RSP: 002b:00007ff72f5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.250378][ T5908] RAX: ffffffffffffffda RBX: 00007ff72ea26180 RCX: 00007ff72e79e0d9 [ 105.258622][ T5908] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 105.266740][ T5908] RBP: 00007ff72e835024 R08: 0000000000000000 R09: 0000000000000000 [ 105.274797][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.282878][ T5908] R13: 00007ff72ea26218 R14: 00007ff72ea26180 R15: 00007fff76489438 [ 105.291024][ T5908] [ 105.294150][ T5908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.301594][ T5908] CPU: 0 PID: 5908 Comm: syz.2.19 Not tainted syzkaller #0 [ 105.308860][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.318961][ T5908] Call Trace: [ 105.322287][ T5908] [ 105.325259][ T5908] dump_stack_lvl+0x18c/0x250 [ 105.330085][ T5908] ? show_regs_print_info+0x20/0x20 [ 105.335342][ T5908] ? load_image+0x420/0x420 [ 105.339910][ T5908] panic+0x2ca/0x720 [ 105.343873][ T5908] ? bpf_jit_dump+0xd0/0xd0 [ 105.348459][ T5908] __warn+0x2e0/0x470 [ 105.352501][ T5908] ? __skb_flow_dissect+0xb05/0x6e70 [ 105.358401][ T5908] ? __skb_flow_dissect+0xb05/0x6e70 [ 105.363751][ T5908] report_bug+0x2be/0x4f0 [ 105.368337][ T5908] ? __skb_flow_dissect+0xb05/0x6e70 [ 105.373688][ T5908] ? __skb_flow_dissect+0xb05/0x6e70 [ 105.379040][ T5908] ? __skb_flow_dissect+0xb07/0x6e70 [ 105.384398][ T5908] handle_bug+0xcf/0x120 [ 105.388717][ T5908] exc_invalid_op+0x1a/0x50 [ 105.393281][ T5908] asm_exc_invalid_op+0x1a/0x20 [ 105.398191][ T5908] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 105.404148][ T5908] Code: c6 e8 7f 5c 06 f9 85 db 0f 84 9a 06 00 00 80 3d 24 d4 f5 05 01 0f 85 c0 06 00 00 e8 b5 58 06 f9 e9 d5 f9 ff ff e8 ab 58 06 f9 <0f> 0b e8 b4 46 0e 02 89 c3 31 ff 89 c6 e8 49 5c 06 f9 85 db 74 18 [ 105.423816][ T5908] RSP: 0018:ffffc900051a5e00 EFLAGS: 00010283 [ 105.430470][ T5908] RAX: ffffffff888119c5 RBX: 0000000000000000 RCX: 0000000000080000 [ 105.438504][ T5908] RDX: ffffc9000e801000 RSI: 00000000000019c6 RDI: 00000000000019c7 [ 105.445356][ T5825] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 105.455421][ T5908] RBP: ffffc900051a6418 R08: dffffc0000000000 R09: 1ffffffff223dca0 [ 105.463461][ T5908] R10: dffffc0000000000 R11: fffffbfff223dca1 R12: ffffffff8e8ceff8 [ 105.471528][ T5908] R13: 1ffffffff1d19e00 R14: ffffffff8e8cf002 R15: dffffc0000000000 [ 105.479576][ T5908] ? __skb_flow_dissect+0xb05/0x6e70 [ 105.484949][ T5908] ? __skb_flow_dissect+0x1eb/0x6e70 [ 105.490341][ T5908] ? mark_lock+0x94/0x320 [ 105.494744][ T5908] ? __lock_acquire+0x1336/0x7d80 [ 105.499819][ T5908] ? bpf_flow_dissect+0x3f0/0x3f0 [ 105.504898][ T5908] ? verify_lock_unused+0x140/0x140 [ 105.510148][ T5908] ? verify_lock_unused+0x140/0x140 [ 105.515426][ T5908] ? mark_lock+0x94/0x320 [ 105.519833][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.525902][ T5908] ? read_lock_is_recursive+0x20/0x20 [ 105.531319][ T5908] ? lock_chain_count+0x20/0x20 [ 105.536223][ T5908] ? finish_task_switch+0x262/0x8f0 [ 105.541655][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 105.546988][ T5908] ? finish_task_switch+0x262/0x8f0 [ 105.552253][ T5908] ? __schedule+0x15b6/0x4660 [ 105.557129][ T5908] __skb_get_hash+0xf3/0x2e0 [ 105.561951][ T5908] ? asan.module_dtor+0x20/0x20 [ 105.566922][ T5908] ? mark_lock+0x94/0x320 [ 105.571311][ T5908] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 105.577342][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.583630][ T5908] ? mark_lock+0x94/0x320 [ 105.588112][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.594155][ T5908] ? trace_irq_disable+0x37/0xe0 [ 105.599144][ T5908] nft_trace_init+0x1bb/0x420 [ 105.603854][ T5908] ? nf_trace_fill_pkt_info+0x870/0x870 [ 105.609432][ T5908] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 105.615737][ T5908] nft_do_chain+0x1523/0x1620 [ 105.620667][ T5908] ? __local_bh_enable_ip+0x142/0x1c0 [ 105.626092][ T5908] ? _local_bh_enable+0xa0/0xa0 [ 105.631011][ T5908] ? __local_bh_enable_ip+0x13a/0x1c0 [ 105.636444][ T5908] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 105.642396][ T5908] ? ipt_do_table+0x13b3/0x15c0 [ 105.647336][ T5908] ? nf_nat_inet_fn+0x90b/0xb20 [ 105.654434][ T5908] nft_do_chain_inet+0x29b/0x380 [ 105.659965][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 105.665048][ T5908] ? ipt_do_table+0x2c5/0x15c0 [ 105.669905][ T5908] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 105.675365][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 105.680479][ T5908] nf_hook_slow+0xbd/0x200 [ 105.685025][ T5908] ? nf_hook+0x390/0x390 [ 105.689436][ T5908] nf_hook+0x228/0x390 [ 105.693570][ T5908] ? nf_hook+0xa2/0x390 [ 105.697859][ T5908] ? __ip_local_out+0x5f0/0x5f0 [ 105.702780][ T5908] ? nf_hook+0x390/0x390 [ 105.707064][ T5908] ? nf_ct_set_closing+0x23/0x230 [ 105.712569][ T5908] ? ip_fast_csum+0x1ee/0x2b0 [ 105.717377][ T5908] __ip_local_out+0x4db/0x5f0 [ 105.722123][ T5908] ? nf_hook+0x390/0x390 [ 105.726534][ T5908] ip_local_out+0x2a/0x130 [ 105.731006][ T5908] nf_send_reset+0xebd/0x16b0 [ 105.735740][ T5908] ? skb_put_data+0x30/0x30 [ 105.740423][ T5908] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 105.746190][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 105.751436][ T5908] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 105.757598][ T5908] nft_reject_inet_eval+0x3ad/0x680 [ 105.763039][ T5908] nft_do_chain+0x44b/0x1620 [ 105.767974][ T5908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.774673][ T5908] ? lock_chain_count+0x20/0x20 [ 105.779569][ T5908] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 105.785543][ T5908] ? nf_nat_inet_fn+0x90b/0xb20 [ 105.790457][ T5908] nft_do_chain_inet+0x29b/0x380 [ 105.795465][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 105.800576][ T5908] ? ipt_do_table+0x2c5/0x15c0 [ 105.805436][ T5908] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 105.810881][ T5908] ? nft_do_chain_arp+0x110/0x110 [ 105.816156][ T5908] nf_hook_slow+0xbd/0x200 [ 105.820737][ T5908] ? nf_hook+0x390/0x390 [ 105.825030][ T5908] nf_hook+0x228/0x390 [ 105.829362][ T5908] ? nf_hook+0xa2/0x390 [ 105.833595][ T5908] ? __ip_local_out+0x5f0/0x5f0 [ 105.838497][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 105.843863][ T5908] ? nf_hook+0x390/0x390 [ 105.848773][ T5908] __ip_local_out+0x4db/0x5f0 [ 105.857184][ T5908] ? nf_hook+0x390/0x390 [ 105.861569][ T5908] ? __ip_queue_xmit+0x5d/0x1960 [ 105.866579][ T5908] __ip_queue_xmit+0xf89/0x1960 [ 105.872437][ T5908] ? __ip_queue_xmit+0x5d/0x1960 [ 105.877406][ T5908] __tcp_transmit_skb+0x1dd6/0x3470 [ 105.882776][ T5908] ? __tcp_send_ack+0x5a0/0x5a0 [ 105.887718][ T5908] ? tcp_small_queue_check+0x1d6/0x3c0 [ 105.893935][ T5908] tcp_write_xmit+0x1550/0x6700 [ 105.898886][ T5908] tcp_sendmsg_locked+0x2676/0x4ab0 [ 105.904163][ T5908] ? tcp_set_state+0x6c0/0x6c0 [ 105.908979][ T5908] tcp_sendmsg+0x2f/0x50 [ 105.913340][ T5908] ? inet_send_prepare+0x250/0x250 [ 105.918498][ T5908] ____sys_sendmsg+0x61b/0x980 [ 105.923342][ T5908] ? __asan_memset+0x22/0x40 [ 105.927980][ T5908] ? __sys_sendmsg_sock+0x30/0x30 [ 105.933036][ T5908] ? __import_iovec+0x5f2/0x850 [ 105.937947][ T5908] ? import_iovec+0x73/0xa0 [ 105.942501][ T5908] ___sys_sendmsg+0x2a6/0x360 [ 105.947225][ T5908] ? __sys_sendmsg+0x2b0/0x2b0 [ 105.952105][ T5908] __se_sys_sendmsg+0x1d0/0x2c0 [ 105.957025][ T5908] ? __x64_sys_sendmsg+0x80/0x80 [ 105.962075][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 105.967532][ T5908] do_syscall_64+0x55/0xb0 [ 105.972095][ T5908] ? clear_bhb_loop+0x40/0x90 [ 105.976909][ T5908] ? clear_bhb_loop+0x40/0x90 [ 105.981625][ T5908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.987578][ T5908] RIP: 0033:0x7ff72e79e0d9 [ 105.992123][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.011806][ T5908] RSP: 002b:00007ff72f5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.020251][ T5908] RAX: ffffffffffffffda RBX: 00007ff72ea26180 RCX: 00007ff72e79e0d9 [ 106.028555][ T5908] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000009 [ 106.036680][ T5908] RBP: 00007ff72e835024 R08: 0000000000000000 R09: 0000000000000000 [ 106.044682][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.052676][ T5908] R13: 00007ff72ea26218 R14: 00007ff72ea26180 R15: 00007fff76489438 [ 106.060688][ T5908] [ 106.064429][ T5908] Kernel Offset: disabled [ 106.069230][ T5908] Rebooting in 86400 seconds..