last executing test programs: 1m6.472710166s ago: executing program 1 (id=158): setresuid(0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000b00)={[{@noload}, {@test_dummy_encryption}, {@data_err_ignore}, {@debug}, {@dax_never}, {@nodiscard}]}, 0x1, 0x4eb, &(0x7f0000000600)="$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") getrusage(0xffffffffffffffff, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESOCT=0x0], 0x3, 0x249, &(0x7f0000000bc0)="$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") r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105}, 0x38) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x0, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0x7}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0xffffffff}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000e40)) mq_open(0x0, 0x42, 0x48, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000300)=0x7, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff7, @remote, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) 1m0.007287974s ago: executing program 1 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x404c051) 58.512524581s ago: executing program 1 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="5a28ad33f107f6176a1f5cbf9b8be41f0d36542973b0", 0x16}], 0x1) 56.749595009s ago: executing program 1 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) 54.61568551s ago: executing program 1 (id=176): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 51.652553015s ago: executing program 1 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc0, 0x39, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 35.304241879s ago: executing program 32 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc0, 0x39, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 25.898591271s ago: executing program 4 (id=236): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r2, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 24.292722017s ago: executing program 4 (id=241): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 21.521607852s ago: executing program 4 (id=247): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) syz_emit_ethernet(0x3c, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x0, 0x0]}}}}}}}, 0x0) 19.44337754s ago: executing program 3 (id=250): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 16.724943442s ago: executing program 2 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000340)="5a28ad33f107f6176a1f5cbf9b8be41f0d36542973b0", 0x16}], 0x2) 16.524613369s ago: executing program 3 (id=259): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 16.297393331s ago: executing program 0 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x26, 0x109, 0x870bd22, 0xffffffe9, {0x94}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0xc814) 13.496406979s ago: executing program 3 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f", 0x10}, {&(0x7f0000000340)="5a28ad33f107f6176a1f5cbf9b8be41f0d36542973b0", 0x16}], 0x2) 13.003625317s ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) pread64(r1, &(0x7f0000000300)=""/216, 0xd8, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002"], 0x12c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 13.001334696s ago: executing program 5 (id=265): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r2, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 12.75948035s ago: executing program 2 (id=266): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d6163286165732900"/223], 0x158}}, 0x0) 11.339703549s ago: executing program 2 (id=267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 10.985470271s ago: executing program 5 (id=268): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.919834653s ago: executing program 4 (id=269): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x5, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x0, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x3ff, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x7, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x268}, 0x1, 0x0, 0x0, 0x4048002}, 0x4000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.903756564s ago: executing program 2 (id=270): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 9.785148206s ago: executing program 0 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 9.592144214s ago: executing program 3 (id=272): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r3, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 8.418558395s ago: executing program 5 (id=273): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x868, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x83c, 0x2, [@TCA_BPF_ACT={0x838, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x308, 0x13, 0x0, 0x0, {{0x7}, {0x1b4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xbd, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f5"}}, @TCA_IPT_TARG={0x54, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07"}}]}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x868}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.12071366s ago: executing program 3 (id=274): setresuid(0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000b00)={[{@noload}, {@test_dummy_encryption}, {@data_err_ignore}, {@debug}, {@dax_never}, {@nodiscard}]}, 0x1, 0x4eb, &(0x7f0000000600)="$eJzs3M9vFGUfAPDvbLu0wAv05eUlAVELaGxMbKGgcPCCiYkHTYx4kGPTFlJZwNAehDSyJAbPJN6NR+NNE696NJ78A/DgwcSQEOUCeFozuzPb7f7s0tKm7eeTLDzPzPPM8zw788w+M09nAti2RtN/koj/RMS9iNhXiy5PMFr77/HDxeknDxeno1ypnP8rqaZ7lMYzeb7dWWSsEFH4PGnaYM38jZuXp0ql2etRrsYnFq58MjF/4+Zrc1emLs1emr06efbs6VMnz7wx+Xpz1uGejWpTXtquR4c/u3bk0DsX7r43Pdi8scZ2dJTn+rvcM2nk320HLzdubwvY0xBOWtt1a10rw4oNZ4dhMe3/i6VjFza6QsC6qVQqlaHOq8uVZrdblgCbVhIbXQNgY+Q/9On1b/6pLSmux/Bjwz04V7sAevRwsXIrYvpxvf2DUcjSFJuub1Ndxkx9GY2Ij8r/fJV+ott9iN/XqEAAYNv76Vw2DEyiafxXiIOxdDN/bzaHMhIR/42I/RHxv4g4EBH/j6ilbSeJqHQp/0Dzgnr532ezCIX7q2pgD+n4781sbiv/ZOXmSUYGstieiHzAPHsi+07Gojh0ca40e7LD9nf0KL9x/Jd+0vLzsWBWj/uDTYPNmamFqadrbasHtyMODza3P93pSX16KomIQxFxuI/tjjSE51795kg90nRZ0bv9VZU2U3prMn9W+Trildr+L8ey/b9UYtI4P1lomZ+cGI7S7ImJ9Cg40baMX369836n8nu2/4c/mrO8febH86ttdl26/3c1HP+Rz98utX8kiUjq87XzEZWB/sq489sX1e2OHm9d97TH/47kw2o471+fTi0sXD8ZsSN5t3X55FLePJ6nT9s/drx9/9+f5Um/ieciIj2In4+IFyIG8rofjYhjEdGmaXU/v/XSx53WrfD4f2bS9s+0Pf8t2/9L8/UrDOSZ0yUDl4/ee9Lh5JG1f1/3/X+6GhrLlrQ//yXLThErrenqvj0AAADYHApR/dv/wng9XCiMj9fuAR2IXYXStfmFFyPi6kztGYGRKBYuzpVm8xtyI1FM8vufIw3xyab4qey+8ZcDO6vx8elrpZmNbjxsc7urfT5p6f+pP/u8zwtsQlvoOTSgT736/8G761QRYN35/Yftq6H/d3qzRdlfysDW5Pcftq92/f9WfNv12QXnDNj8KvoybGvd+3/v920Cm9dgfFAPVx97bvu0LbAVGf/DttTvc/39BSpD7VcNR5s3Bgw/m2rsbFPWhgTSkdUabrAYEStLvLN7mr1tV+VDwM5veCj0V+ehaF01EN1yJe3f4xAR5Y650m+lZ30uHVzzgz9/J8paHzbfLfXT4gp392oDrvcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAt5d8AAAD//2pKzZ4=") getrusage(0xffffffffffffffff, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x249, &(0x7f0000000bc0)="$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") syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000e40)) mq_open(0x0, 0x42, 0x48, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000300)=0x7, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff7, @remote, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) 8.118006571s ago: executing program 4 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005}, [@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.941198664s ago: executing program 5 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='vim2m.0', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/bind\x00', 0x1, 0x0) 7.48090477s ago: executing program 0 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0xfffffffd}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) 7.079399383s ago: executing program 5 (id=278): setresuid(0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000b00)={[{@noload}, {@test_dummy_encryption}, {@data_err_ignore}, {@debug}, {@dax_never}, {@nodiscard}]}, 0x1, 0x4eb, &(0x7f0000000600)="$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") getrusage(0xffffffffffffffff, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x249, &(0x7f0000000bc0)="$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") r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105}, 0x38) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x7, 0x0, 0x32315559, 0x8, 0xc, [{0x9, 0x4000008}, {0x3, 0x7}, {0x6c02412a, 0xd}, {0x6, 0x10000007}, {0x3, 0x3}, {0x2, 0x5}, {0x406, 0xffffffff}, {0xd, 0x3}], 0xcb, 0x9, 0x6, 0x0, 0x1}}) getrusage(0xffffffffffffffff, &(0x7f0000000e40)) mq_open(0x0, 0x42, 0x48, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000300)=0x7, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff7, @remote, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) 5.730648289s ago: executing program 2 (id=279): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee61", 0x96}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x204}, {{0x0, 0x0, 0x0}, 0x646a}], 0x2, 0x0, 0x0) 5.723326986s ago: executing program 4 (id=280): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) pread64(r1, &(0x7f0000000300)=""/216, 0xd8, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a010100000000000000000700"], 0x12c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 5.605990476s ago: executing program 0 (id=281): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000000)="91167ffe"}, 0x20) 4.997044374s ago: executing program 2 (id=282): sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b", 0xb, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) listen(0xffffffffffffffff, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) 4.782285504s ago: executing program 3 (id=283): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r0, 0x80, 0x80, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000200)={0x6, 'netdevsim0\x00', {}, 0x8005}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000003c0)={0x0, 'batadv0\x00', {}, 0x10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_io_uring_submit(r8, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 4.340257916s ago: executing program 0 (id=284): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000880)={{0x3, 0x3, 0x6c32, 0x3, '\x00', 0x3}, 0x3, 0x100, 0x5, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000000440)=['\'{@&^\x00', '\\*+,-@U@{\x00', '\x1d\x00', '\x00', '\x00'], 0x14}) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f00000000000000', 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='net_cls.classid\x00', 0x2, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4) 0s ago: executing program 5 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x3000000, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3841816c}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 91.417143][ T5608] cgroup: Unknown subsys name 'net' [ 91.539203][ T5608] cgroup: Unknown subsys name 'cpuset' [ 91.548955][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.258782][ T29] cfg80211: failed to load regulatory.db [ 93.117650][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.897659][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.909855][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.924394][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.929737][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.935588][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.941272][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.949188][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.960133][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.960595][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.969240][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.982997][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.985716][ T5651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.992167][ T5649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.001039][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.013745][ T5651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.022202][ T5649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.022987][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.030043][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.046056][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.055088][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.056355][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.062735][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.070129][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.076854][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.085797][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.091571][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.100639][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.107796][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.119766][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.129434][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.173419][ T5645] Bluetooth: hci4: command tx timeout [ 98.174034][ T5652] Bluetooth: hci5: command tx timeout [ 98.179364][ T5640] Bluetooth: hci2: command tx timeout [ 98.191731][ T5649] Bluetooth: hci1: command tx timeout [ 98.255640][ T5640] Bluetooth: hci0: command tx timeout [ 98.261422][ T5649] Bluetooth: hci3: command tx timeout [ 98.766391][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.773747][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.781041][ T5633] bridge_slave_0: entered allmulticast mode [ 98.789041][ T5633] bridge_slave_0: entered promiscuous mode [ 98.868079][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.875380][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.883896][ T5633] bridge_slave_1: entered allmulticast mode [ 98.892577][ T5633] bridge_slave_1: entered promiscuous mode [ 98.962846][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.970035][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.977937][ T5628] bridge_slave_0: entered allmulticast mode [ 98.985706][ T5628] bridge_slave_0: entered promiscuous mode [ 99.030195][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.037842][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.045283][ T5629] bridge_slave_0: entered allmulticast mode [ 99.053343][ T5629] bridge_slave_0: entered promiscuous mode [ 99.079770][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.087181][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.094866][ T5628] bridge_slave_1: entered allmulticast mode [ 99.102649][ T5628] bridge_slave_1: entered promiscuous mode [ 99.125323][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.132705][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.139961][ T5631] bridge_slave_0: entered allmulticast mode [ 99.148208][ T5631] bridge_slave_0: entered promiscuous mode [ 99.165834][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.173503][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.180803][ T5629] bridge_slave_1: entered allmulticast mode [ 99.189904][ T5629] bridge_slave_1: entered promiscuous mode [ 99.251451][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.261291][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.270510][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.277857][ T5631] bridge_slave_1: entered allmulticast mode [ 99.285797][ T5631] bridge_slave_1: entered promiscuous mode [ 99.322723][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.360536][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.402415][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.428251][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.454908][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.464574][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.471905][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.480380][ T5630] bridge_slave_0: entered allmulticast mode [ 99.488330][ T5630] bridge_slave_0: entered promiscuous mode [ 99.509867][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.517233][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.524739][ T5632] bridge_slave_0: entered allmulticast mode [ 99.532783][ T5632] bridge_slave_0: entered promiscuous mode [ 99.544686][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.570677][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.594857][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.602072][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.609684][ T5630] bridge_slave_1: entered allmulticast mode [ 99.617564][ T5630] bridge_slave_1: entered promiscuous mode [ 99.640382][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.647671][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.655719][ T5632] bridge_slave_1: entered allmulticast mode [ 99.663661][ T5632] bridge_slave_1: entered promiscuous mode [ 99.686479][ T5633] team0: Port device team_slave_0 added [ 99.725370][ T5629] team0: Port device team_slave_0 added [ 99.760216][ T5633] team0: Port device team_slave_1 added [ 99.768328][ T5631] team0: Port device team_slave_0 added [ 99.790776][ T5629] team0: Port device team_slave_1 added [ 99.814090][ T5628] team0: Port device team_slave_0 added [ 99.836397][ T5631] team0: Port device team_slave_1 added [ 99.845744][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.873305][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.884973][ T5628] team0: Port device team_slave_1 added [ 99.923916][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.953286][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.977680][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.984806][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.012001][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.053495][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.060609][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.086860][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.127959][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.135189][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.161250][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.176366][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.183384][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.210021][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.235540][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.242954][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.252701][ T5645] Bluetooth: hci4: command tx timeout [ 100.269414][ T5640] Bluetooth: hci2: command tx timeout [ 100.274625][ T5645] Bluetooth: hci5: command tx timeout [ 100.274947][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.281000][ T5649] Bluetooth: hci1: command tx timeout [ 100.329014][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.337257][ T5649] Bluetooth: hci3: command tx timeout [ 100.337313][ T5640] Bluetooth: hci0: command tx timeout [ 100.344398][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.376448][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.399533][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.406661][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.433585][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.447136][ T5630] team0: Port device team_slave_0 added [ 100.472851][ T5632] team0: Port device team_slave_0 added [ 100.479517][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.486824][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.513090][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.545324][ T5630] team0: Port device team_slave_1 added [ 100.579598][ T5632] team0: Port device team_slave_1 added [ 100.617997][ T5629] hsr_slave_0: entered promiscuous mode [ 100.625097][ T5629] hsr_slave_1: entered promiscuous mode [ 100.688799][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.696286][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.722581][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.735513][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.742544][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.768540][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.812979][ T5633] hsr_slave_0: entered promiscuous mode [ 100.820341][ T5633] hsr_slave_1: entered promiscuous mode [ 100.827906][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 100.833813][ T5633] Cannot create hsr debugfs directory [ 100.864544][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.871558][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.897691][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.930764][ T5628] hsr_slave_0: entered promiscuous mode [ 100.937893][ T5628] hsr_slave_1: entered promiscuous mode [ 100.944437][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 100.950162][ T5628] Cannot create hsr debugfs directory [ 100.976123][ T5631] hsr_slave_0: entered promiscuous mode [ 100.983359][ T5631] hsr_slave_1: entered promiscuous mode [ 100.989710][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 100.995714][ T5631] Cannot create hsr debugfs directory [ 101.005395][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.012456][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.038817][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.177061][ T5630] hsr_slave_0: entered promiscuous mode [ 101.184042][ T5630] hsr_slave_1: entered promiscuous mode [ 101.190404][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 101.196268][ T5630] Cannot create hsr debugfs directory [ 101.333687][ T5632] hsr_slave_0: entered promiscuous mode [ 101.340367][ T5632] hsr_slave_1: entered promiscuous mode [ 101.346875][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 101.352772][ T5632] Cannot create hsr debugfs directory [ 102.038920][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.061421][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.070785][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.081717][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.090016][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.101010][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.119572][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.130563][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.194133][ T5633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.208787][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.217608][ T5633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.228429][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.243856][ T5633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.255567][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.265451][ T5633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.277544][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.332876][ T5640] Bluetooth: hci1: command tx timeout [ 102.334061][ T5649] Bluetooth: hci5: command tx timeout [ 102.338352][ T5652] Bluetooth: hci4: command tx timeout [ 102.342639][ T5640] Bluetooth: hci2: command tx timeout [ 102.412819][ T5640] Bluetooth: hci0: command tx timeout [ 102.413282][ T5649] Bluetooth: hci3: command tx timeout [ 102.423449][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.437118][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.446163][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.456154][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.464347][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.475795][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.483883][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.497504][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.640049][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.654720][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.677385][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.690868][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.708103][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.719078][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.728163][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.741020][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.783885][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.856132][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.911668][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.919358][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.969288][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.976651][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.001377][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.016910][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.025797][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.037750][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.046207][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.060469][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.069338][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.081850][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.202720][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.265122][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.306636][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.338150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.345339][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.369898][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.382916][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.391079][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.404703][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.435238][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.449505][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.458068][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.470212][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.499089][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.506348][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.569309][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.609697][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.616983][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.672900][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.706673][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.713945][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.776858][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.821885][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.829091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.917434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.924811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.059555][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.110737][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.201066][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.208353][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.268009][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.275214][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.351649][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.415834][ T5649] Bluetooth: hci2: command tx timeout [ 104.417228][ T5652] Bluetooth: hci4: command tx timeout [ 104.421337][ T5645] Bluetooth: hci5: command tx timeout [ 104.426860][ T5640] Bluetooth: hci1: command tx timeout [ 104.493966][ T5640] Bluetooth: hci0: command tx timeout [ 104.496115][ T5645] Bluetooth: hci3: command tx timeout [ 104.507124][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.571335][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.578590][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.655934][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.690317][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.697575][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.589421][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.844038][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.871164][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.886090][ T5629] veth0_vlan: entered promiscuous mode [ 105.968744][ T5629] veth1_vlan: entered promiscuous mode [ 106.085605][ T5631] veth0_vlan: entered promiscuous mode [ 106.143281][ T5631] veth1_vlan: entered promiscuous mode [ 106.322781][ T5629] veth0_macvtap: entered promiscuous mode [ 106.373082][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.389575][ T5629] veth1_macvtap: entered promiscuous mode [ 106.404888][ T5628] veth0_vlan: entered promiscuous mode [ 106.509850][ T5631] veth0_macvtap: entered promiscuous mode [ 106.518481][ T5628] veth1_vlan: entered promiscuous mode [ 106.538403][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.553529][ T5631] veth1_macvtap: entered promiscuous mode [ 106.580264][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.605676][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.713454][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.741695][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.779516][ T5628] veth0_macvtap: entered promiscuous mode [ 106.804894][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.850779][ T5628] veth1_macvtap: entered promiscuous mode [ 106.875004][ T5633] veth0_vlan: entered promiscuous mode [ 106.888037][ T5632] veth0_vlan: entered promiscuous mode [ 106.933979][ T5630] veth0_vlan: entered promiscuous mode [ 106.975415][ T5632] veth1_vlan: entered promiscuous mode [ 106.997936][ T5633] veth1_vlan: entered promiscuous mode [ 107.022072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.023764][ T5630] veth1_vlan: entered promiscuous mode [ 107.038763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.108362][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.147019][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.203700][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.217303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.228223][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.294869][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.309236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.324805][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.362029][ T5630] veth0_macvtap: entered promiscuous mode [ 107.389114][ T5632] veth0_macvtap: entered promiscuous mode [ 107.407193][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.456048][ T5630] veth1_macvtap: entered promiscuous mode [ 107.478795][ T5632] veth1_macvtap: entered promiscuous mode [ 107.490574][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.491292][ T5633] veth0_macvtap: entered promiscuous mode [ 107.503170][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.540719][ T5633] veth1_macvtap: entered promiscuous mode [ 107.574159][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.590718][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.711719][ T5860] jffs2: notice: (5860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.744777][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.773412][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.798234][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.800133][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.810273][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.836661][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.869050][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.893193][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.915117][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.042526][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.078626][ T5866] jffs2: notice: (5866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.133005][ T138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.161798][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.170249][ T1154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.181138][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.192538][ T1154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.303715][ T138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.436619][ T5874] netlink: 'syz.4.10': attribute type 1 has an invalid length. [ 108.496876][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.506207][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 108.570558][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 108.655598][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.667816][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.690916][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.497812][ T5884] loop3: detected capacity change from 0 to 256 [ 109.513347][ T5884] vfat: Unknown parameter 'obj_user' [ 109.519825][ T5875] 8021q: VLANs not supported on ip6tnl0 [ 109.529160][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.025633][ T5888] gadgetfs: bound to dummy_udc driver [ 110.459490][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.490567][ T1163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.577514][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.691630][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.727200][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.736091][ T5891] loop0: detected capacity change from 0 to 512 [ 110.909067][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.960776][ T5891] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.12: inode has both inline data and extents flags [ 110.987957][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.024958][ T5891] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.025750][ T5891] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.12: couldn't read orphan inode 15 (err -117) [ 111.035398][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 111.035500][ C1] EXT4-fs (loop0): initial error at time 1785932175: ext4_orphan_get:1399: inode 15 [ 111.035541][ C1] EXT4-fs (loop0): last error at time 1785932175: ext4_orphan_get:1399: inode 15 [ 111.077629][ T5891] loop0: lost filesystem error report for type 5 error -117 [ 111.902704][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.922641][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.064402][ T1098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.098242][ T5891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.724460][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.781636][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.870176][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.895682][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.004445][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.017663][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.066072][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.159624][ T1163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.059178][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.283625][ T5916] loop4: detected capacity change from 0 to 512 [ 114.365584][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.498125][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.596297][ T5922] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 114.611060][ T5922] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 114.674529][ T5916] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.16: inode has both inline data and extents flags [ 114.743639][ T5916] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.752344][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 114.769104][ C0] EXT4-fs (loop4): initial error at time 1785932179: ext4_orphan_get:1399: inode 15 [ 114.778552][ C0] EXT4-fs (loop4): last error at time 1785932179: ext4_orphan_get:1399: inode 15 [ 114.794051][ T5916] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.16: couldn't read orphan inode 15 (err -117) [ 114.841013][ T5916] loop4: lost filesystem error report for type 5 error -117 [ 114.900519][ T5922] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 114.943306][ T5916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.015968][ T5922] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.125368][ T5922] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.647376][ T5928] loop1: detected capacity change from 0 to 4096 [ 115.964805][ T5928] EXT4-fs: inline encryption not supported [ 116.015808][ T5928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.135164][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.211968][ T5928] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.524357][ T5928] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 116.618804][ T5928] System zones: 0-5 [ 118.212686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 118.728911][ T5937] Set syz1 is full, maxelem 65536 reached [ 119.050783][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.078601][ T5945] jffs2: notice: (5945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.324981][ T5949] loop5: detected capacity change from 0 to 512 [ 119.788398][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.857300][ T5949] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.21: inode has both inline data and extents flags [ 119.958164][ T5949] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.960561][ T5949] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.21: couldn't read orphan inode 15 (err -117) [ 119.969842][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 119.969866][ C1] EXT4-fs (loop5): initial error at time 1785932184: ext4_orphan_get:1399: inode 15 [ 119.969896][ C1] EXT4-fs (loop5): last error at time 1785932184: ext4_orphan_get:1399: inode 15 [ 120.049112][ T5949] loop5: lost filesystem error report for type 5 error -117 [ 120.108112][ T5949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.738189][ T30] audit: type=1800 audit(1785932185.311:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="zoned" dev="configfs" ino=9459 res=0 errno=0 [ 120.850113][ T30] audit: type=1800 audit(1785932185.361:3): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="zone_nr_conv" dev="configfs" ino=9461 res=0 errno=0 [ 120.858581][ T5963] netlink: 80 bytes leftover after parsing attributes in process `syz.2.25'. [ 120.926250][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.966897][ T30] audit: type=1800 audit(1785932185.371:4): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="power" dev="configfs" ino=9462 res=0 errno=0 [ 120.989082][ T5966] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 121.146145][ T5961] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 123.746175][ T5992] kAFS: unable to lookup cell 'ÿ' [ 123.765775][ T5778] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.851234][ T6012] kAFS: unable to lookup cell 'ÿ' [ 127.195227][ T6025] loop3: detected capacity change from 0 to 1024 [ 127.203889][ T6025] EXT4-fs: Ignoring removed orlov option [ 128.445564][ T6035] loop1: detected capacity change from 0 to 256 [ 128.466863][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.638412][ T6035] vfat: Unknown parameter 'obj_user' [ 129.646446][ T6049] gadgetfs: bound to dummy_udc driver [ 130.346118][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.357465][ T6044] jffs2: notice: (6044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.349495][ T6063] loop3: detected capacity change from 0 to 512 [ 132.383115][ T6063] ======================================================= [ 132.383115][ T6063] WARNING: The mand mount option has been deprecated and [ 132.383115][ T6063] and is ignored by this kernel. Remove the mand [ 132.383115][ T6063] option from the mount to silence this warning. [ 132.383115][ T6063] ======================================================= [ 133.406483][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.418625][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.708294][ T6070] loop5: detected capacity change from 0 to 256 [ 133.845180][ T6070] vfat: Unknown parameter 'obj_user' [ 133.934223][ T6063] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.46: inode has both inline data and extents flags [ 134.749297][ T6074] gadgetfs: bound to dummy_udc driver [ 134.770021][ T6063] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.770671][ T6063] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 134.780183][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 134.780212][ C1] EXT4-fs (loop3): initial error at time 1785932199: ext4_orphan_get:1399: inode 15 [ 134.780255][ C1] EXT4-fs (loop3): last error at time 1785932199: ext4_orphan_get:1399: inode 15 [ 134.926608][ T6078] jffs2: notice: (6078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.961567][ T6079] loop4: detected capacity change from 0 to 512 [ 134.996953][ T6079] EXT4-fs: Ignoring removed bh option [ 135.197763][ T6063] loop3: lost filesystem error report for type 5 error -117 [ 135.309673][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.893196][ T6079] EXT4-fs (loop4): 1 truncate cleaned up [ 136.215767][ T6079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.604280][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.809332][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 139.131149][ T6115] loop0: detected capacity change from 0 to 512 [ 139.200055][ T6115] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.299141][ T6115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 139.310964][ T6115] System zones: 1-2, 4-12, 8-8 [ 139.320803][ T6115] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.60: iget: bad i_size value: 38620345925642 [ 139.336658][ T6115] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.341618][ T6115] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.60: couldn't read orphan inode 15 (err -117) [ 139.351059][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 139.351095][ C1] EXT4-fs (loop0): initial error at time 1785932203: ext4_orphan_get:1399: inode 15 [ 139.351137][ C1] EXT4-fs (loop0): last error at time 1785932203: ext4_orphan_get:1399: inode 15 [ 139.476558][ T6115] loop0: lost filesystem error report for type 5 error -117 [ 139.927163][ T6118] loop1: detected capacity change from 0 to 512 [ 139.971432][ T6115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.038488][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.197627][ T6118] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.63: inode has both inline data and extents flags [ 140.261586][ T6118] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.265416][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 140.281252][ C1] EXT4-fs (loop1): initial error at time 1785932204: ext4_orphan_get:1399: inode 15 [ 140.290857][ C1] EXT4-fs (loop1): last error at time 1785932204: ext4_orphan_get:1399: inode 15 [ 140.305023][ T6118] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.63: couldn't read orphan inode 15 (err -117) [ 140.340658][ T6118] loop1: lost filesystem error report for type 5 error -117 [ 140.634823][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.788687][ T6111] smbdirect: ib_dev[syz1] removed [ 142.296562][ T6131] loop5: detected capacity change from 0 to 512 [ 142.395751][ T6131] EXT4-fs (loop5): Test dummy encryption mode enabled [ 142.450771][ T6131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 142.494200][ T6131] System zones: 1-2, 4-12, 8-8 [ 142.514908][ T6131] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.66: iget: bad i_size value: 38620345925642 [ 142.573406][ T6131] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.574970][ T6131] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.66: couldn't read orphan inode 15 (err -117) [ 142.584493][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 142.584521][ C1] EXT4-fs (loop5): initial error at time 1785932207: ext4_orphan_get:1399: inode 15 [ 142.584560][ C1] EXT4-fs (loop5): last error at time 1785932207: ext4_orphan_get:1399: inode 15 [ 142.719076][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.889105][ T6131] loop5: lost filesystem error report for type 5 error -117 [ 143.626974][ T6131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.222694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 144.666341][ T6072] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 145.336964][ T6072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 145.446408][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.799293][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.080890][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'. [ 147.429385][ T6148] loop2: detected capacity change from 0 to 512 [ 147.503570][ T6148] EXT4-fs: Ignoring removed bh option [ 147.621956][ T6148] EXT4-fs (loop2): 1 truncate cleaned up [ 147.689002][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.814520][ T6161] jffs2: notice: (6161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.942132][ T6163] loop3: detected capacity change from 0 to 512 [ 149.127597][ T6163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.499549][ T6163] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.592228][ T6172] loop0: detected capacity change from 0 to 256 [ 149.620706][ T6172] vfat: Unknown parameter 'obj_user' [ 150.436537][ T6174] gadgetfs: bound to dummy_udc driver [ 150.740775][ T30] audit: type=1800 audit(1785932215.301:5): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.77" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 151.104965][ T6183] loop5: detected capacity change from 0 to 512 [ 151.156722][ T6183] EXT4-fs: Ignoring removed bh option [ 151.163444][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.203565][ T6183] EXT4-fs (loop5): 1 truncate cleaned up [ 151.338290][ T6183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.419209][ T6189] loop1: detected capacity change from 0 to 512 [ 151.461184][ T6189] EXT4-fs: Ignoring removed bh option [ 151.535120][ T6189] EXT4-fs (loop1): 1 truncate cleaned up [ 151.581408][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.001777][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.467443][ T6198] loop0: detected capacity change from 0 to 512 [ 152.685716][ T6198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 153.390920][ T6202] loop3: detected capacity change from 0 to 128 [ 153.435582][ T6203] jffs2: notice: (6203) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.456169][ T6198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 153.508047][ T6198] System zones: 1-2, 4-12, 8-8 [ 153.547524][ T6198] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.86: iget: bad i_size value: 38620345925642 [ 153.670280][ T6198] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.673676][ T6198] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.86: couldn't read orphan inode 15 (err -117) [ 153.682935][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 153.682959][ C1] EXT4-fs (loop0): initial error at time 1785932218: ext4_orphan_get:1399: inode 15 [ 153.682998][ C1] EXT4-fs (loop0): last error at time 1785932218: ext4_orphan_get:1399: inode 15 [ 153.942810][ T6198] loop0: lost filesystem error report for type 5 error -117 [ 153.961308][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.028714][ T6208] netlink: 80 bytes leftover after parsing attributes in process `syz.3.87'. [ 154.800979][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.848280][ T6215] loop2: detected capacity change from 0 to 512 [ 154.921603][ T6215] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.093788][ T5778] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.159841][ T6215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 156.417101][ T6215] System zones: 1-2, 4-12, 8-8 [ 156.664936][ T5778] usb 4-1: Using ep0 maxpacket: 16 [ 156.696914][ T6215] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.88: iget: bad i_size value: 38620345925642 [ 156.843775][ T5778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 156.861191][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.876914][ T6215] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.882349][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 156.898131][ C1] EXT4-fs (loop2): initial error at time 1785932221: ext4_orphan_get:1399: inode 15 [ 156.907632][ C1] EXT4-fs (loop2): last error at time 1785932221: ext4_orphan_get:1399: inode 15 [ 156.930549][ T6215] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.88: couldn't read orphan inode 15 (err -117) [ 156.953642][ T5778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 156.990868][ T6215] loop2: lost filesystem error report for type 5 error -117 [ 157.030600][ T5778] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.173355][ T6215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.197817][ T5778] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 157.284942][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.321057][ T6225] loop1: detected capacity change from 0 to 512 [ 157.399612][ T6225] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.514794][ T6225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 157.540748][ T5778] usb 4-1: config 0 descriptor?? [ 157.553232][ T5778] usb 4-1: can't set config #0, error -71 [ 157.566085][ T5778] usb 4-1: USB disconnect, device number 2 [ 157.614920][ T6225] System zones: 1-2, 4-12, 8-8 [ 157.674738][ T6225] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.90: iget: bad i_size value: 38620345925642 [ 157.750017][ T6229] loop5: detected capacity change from 0 to 512 [ 157.799405][ T6225] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.802355][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 157.818128][ C1] EXT4-fs (loop1): initial error at time 1785932222: ext4_orphan_get:1399: inode 15 [ 157.827613][ C1] EXT4-fs (loop1): last error at time 1785932222: ext4_orphan_get:1399: inode 15 [ 157.840226][ T6231] loop3: detected capacity change from 0 to 128 [ 157.853775][ T6225] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.90: couldn't read orphan inode 15 (err -117) [ 157.914998][ T6229] EXT4-fs (loop5): Test dummy encryption mode enabled [ 157.988635][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.998681][ T6225] loop1: lost filesystem error report for type 5 error -117 [ 158.027192][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.071157][ T6229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 158.149924][ T6229] System zones: 1-2, 4-12, 8-8 [ 158.266385][ T6072] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 158.383053][ T6229] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.91: iget: bad i_size value: 38620345925642 [ 158.395685][ T6229] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.396360][ T6229] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.91: couldn't read orphan inode 15 (err -117) [ 158.405581][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 158.405606][ C1] EXT4-fs (loop5): initial error at time 1785932222: ext4_orphan_get:1399: inode 15 [ 158.405645][ C1] EXT4-fs (loop5): last error at time 1785932222: ext4_orphan_get:1399: inode 15 [ 158.443498][ T6229] loop5: lost filesystem error report for type 5 error -117 [ 158.446374][ T6229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.702698][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.825377][ T6072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 160.848958][ T6242] jffs2: notice: (6242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.018783][ T6072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 161.486234][ T6250] loop3: detected capacity change from 0 to 512 [ 161.553569][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.704899][ T6250] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.96: inode has both inline data and extents flags [ 161.741035][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.779213][ T6250] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.779804][ T6250] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.96: couldn't read orphan inode 15 (err -117) [ 161.789120][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 161.789145][ C1] EXT4-fs (loop3): initial error at time 1785932226: ext4_orphan_get:1399: inode 15 [ 161.789184][ C1] EXT4-fs (loop3): last error at time 1785932226: ext4_orphan_get:1399: inode 15 [ 162.191455][ T6256] MTD: Couldn't look up './dev/mtdblock0': -2 [ 162.210744][ T6259] loop2: detected capacity change from 0 to 256 [ 162.232268][ T6250] loop3: lost filesystem error report for type 5 error -117 [ 162.266276][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.316879][ T6259] vfat: Unknown parameter 'obj_user' [ 163.088728][ T6266] jffs2: notice: (6266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.054633][ T6264] gadgetfs: bound to dummy_udc driver [ 164.292577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 164.702682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.994578][ T6268] loop0: detected capacity change from 0 to 1024 [ 165.451744][ T6268] EXT4-fs: Ignoring removed orlov option [ 165.772838][ T6254] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 165.826340][ T6266] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 167.738387][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.707199][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.749641][ T6282] loop2: detected capacity change from 0 to 512 [ 168.783250][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.807420][ T6281] loop1: detected capacity change from 0 to 512 [ 168.895598][ T6282] EXT4-fs: Ignoring removed bh option [ 168.904758][ T6281] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.113950][ T6281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 169.164900][ T6282] EXT4-fs (loop2): 1 truncate cleaned up [ 169.190458][ T6281] System zones: 1-2, 4-12, 8-8 [ 169.204382][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.264001][ T6281] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.103: iget: bad i_size value: 38620345925642 [ 169.325385][ T6284] overlayfs: missing 'lowerdir' [ 169.407128][ T6281] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.413284][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 169.428984][ C0] EXT4-fs (loop1): initial error at time 1785932233: ext4_orphan_get:1399: inode 15 [ 169.438462][ C0] EXT4-fs (loop1): last error at time 1785932233: ext4_orphan_get:1399: inode 15 [ 169.640799][ T6281] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 170.282620][ T6281] loop1: lost filesystem error report for type 5 error -117 [ 170.309497][ T6290] loop3: detected capacity change from 0 to 1024 [ 170.386806][ T6290] EXT4-fs: Ignoring removed orlov option [ 172.897820][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.921569][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.500986][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.318346][ T6304] loop0: detected capacity change from 0 to 1024 [ 174.361166][ T6304] EXT4-fs: Ignoring removed orlov option [ 176.472083][ T6304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.405200][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.667602][ T6315] MTD: Couldn't look up './dev/mtdblock0': -2 [ 178.445065][ T6320] loop5: detected capacity change from 0 to 512 [ 178.553512][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.555484][ T6320] EXT4-fs: Ignoring removed bh option [ 178.976827][ T6320] EXT4-fs (loop5): 1 truncate cleaned up [ 179.058096][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.091628][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.105785][ T6325] loop3: detected capacity change from 0 to 512 [ 179.163115][ T6325] EXT4-fs: Ignoring removed bh option [ 179.314216][ T6325] EXT4-fs (loop3): 1 truncate cleaned up [ 179.323076][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.867695][ T6336] loop4: detected capacity change from 0 to 1024 [ 179.908192][ T6336] EXT4-fs: Ignoring removed orlov option [ 181.640206][ T6332] loop2: detected capacity change from 0 to 512 [ 182.135794][ T6336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.309427][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.457499][ T6343] loop0: detected capacity change from 0 to 512 [ 183.719239][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.298662][ T6343] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.708399][ T6353] kAFS: unable to lookup cell 'ÿ' [ 185.265549][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.649465][ T6357] loop5: detected capacity change from 0 to 1024 [ 185.693780][ T6357] EXT4-fs: Ignoring removed orlov option [ 185.711225][ T6356] EXT4-fs (loop0): shut down requested (1) [ 187.285211][ T6357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.944240][ T30] audit: type=1800 audit(1785932252.421:6): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.118" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 189.308486][ T6374] loop4: detected capacity change from 0 to 1024 [ 189.333902][ T6374] EXT4-fs: Ignoring removed orlov option [ 190.576867][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.753848][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.963626][ T6380] jffs2: notice: (6380) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.089338][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.228785][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.871499][ T6393] kAFS: unable to lookup cell 'ÿ' [ 195.145271][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.184243][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.682238][ T6397] loop2: detected capacity change from 0 to 512 [ 196.336056][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.535625][ T6397] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.130: inode has both inline data and extents flags [ 196.572715][ T6397] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.574528][ T6399] loop0: detected capacity change from 0 to 256 [ 196.583849][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 196.583877][ C1] EXT4-fs (loop2): initial error at time 1785932261: ext4_orphan_get:1399: inode 15 [ 196.583918][ C1] EXT4-fs (loop2): last error at time 1785932261: ext4_orphan_get:1399: inode 15 [ 196.658209][ T6397] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.130: couldn't read orphan inode 15 (err -117) [ 196.692494][ T6397] loop2: lost filesystem error report for type 5 error -117 [ 196.698631][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.722211][ T6399] vfat: Unknown parameter 'obj_user' [ 196.773879][ T30] audit: type=1800 audit(1785932261.351:7): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.131" name="zoned" dev="configfs" ino=11436 res=0 errno=0 [ 197.389838][ T30] audit: type=1800 audit(1785932261.951:8): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.131" name="zone_nr_conv" dev="configfs" ino=11443 res=0 errno=0 [ 197.850229][ T30] audit: type=1800 audit(1785932262.421:9): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.131" name="power" dev="configfs" ino=11444 res=0 errno=0 [ 199.563484][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.747628][ T6417] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 199.766409][ T6416] loop0: detected capacity change from 0 to 512 [ 199.775335][ T6415] nvmet: adding nsid 1 to subsystem testnqn [ 199.819761][ T30] audit: type=1800 audit(1785932264.391:10): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.136" name="enable" dev="configfs" ino=11483 res=0 errno=0 [ 199.856567][ T6422] netlink: 'syz.5.139': attribute type 1 has an invalid length. [ 199.902275][ T6417] bond1: entered promiscuous mode [ 199.909968][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.139'. [ 199.923338][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.936707][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.139'. [ 199.967661][ T6416] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.055185][ T6428] Zero length message leads to an empty skb [ 201.087959][ T6416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 201.422989][ T6416] System zones: 1-2, 4-12, 8-8 [ 202.143416][ T6416] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.135: iget: bad i_size value: 38620345925642 [ 202.187142][ T6434] loop2: detected capacity change from 0 to 512 [ 202.227762][ T6416] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.228388][ T6416] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.135: couldn't read orphan inode 15 (err -117) [ 202.237730][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 202.237758][ C1] EXT4-fs (loop0): initial error at time 1785932266: ext4_orphan_get:1399: inode 15 [ 202.238971][ C1] EXT4-fs (loop0): last error at time 1785932266: ext4_orphan_get:1399: inode 15 [ 202.354988][ T6434] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.137: inode has both inline data and extents flags [ 202.372642][ T6416] loop0: lost filesystem error report for type 5 error -117 [ 202.381366][ T6427] bond1: (slave bridge1): making interface the new active one [ 202.388755][ T6434] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.398395][ T6427] bridge1: entered promiscuous mode [ 202.402324][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 202.420335][ C0] EXT4-fs (loop2): initial error at time 1785932266: ext4_orphan_get:1399: inode 15 [ 202.429781][ T6427] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 202.438472][ C0] EXT4-fs (loop2): last error at time 1785932266: ext4_orphan_get:1399: inode 15 [ 202.510173][ T6434] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.137: couldn't read orphan inode 15 (err -117) [ 202.572544][ T6434] loop2: lost filesystem error report for type 5 error -117 [ 202.578176][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.675163][ T6416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.095734][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.216100][ T6445] jffs2: notice: (6445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 203.453305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 203.530960][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.452597][ T6451] loop0: detected capacity change from 0 to 4096 [ 204.970515][ T6451] EXT4-fs: inline encryption not supported [ 205.088446][ T6451] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.101657][ T6458] loop1: detected capacity change from 0 to 512 [ 205.157020][ T6458] EXT4-fs: Ignoring removed bh option [ 205.164496][ T6451] EXT4-fs (loop0): Test dummy encryption mode enabled [ 205.230637][ T6451] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 205.262597][ T6451] System zones: 0-5 [ 205.406863][ T6451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.516165][ T6458] EXT4-fs (loop1): 1 truncate cleaned up [ 205.525449][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.033010][ T6451] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 206.154968][ T30] audit: type=1800 audit(1785932270.731:11): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.150" name="zoned" dev="configfs" ino=11602 res=0 errno=0 [ 206.312130][ T30] audit: type=1800 audit(1785932270.771:12): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.150" name="zone_nr_conv" dev="configfs" ino=11605 res=0 errno=0 [ 208.185714][ T30] audit: type=1800 audit(1785932270.781:13): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.150" name="power" dev="configfs" ino=11607 res=0 errno=0 [ 208.540349][ T6482] MTD: Couldn't look up './dev/mtdblock0': -2 [ 208.619472][ T6486] loop5: detected capacity change from 0 to 512 [ 208.668684][ T6486] EXT4-fs: Ignoring removed bh option [ 208.962044][ T6486] EXT4-fs (loop5): 1 truncate cleaned up [ 209.016921][ T6486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.159439][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.709337][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.782605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.849357][ T6496] gadgetfs: bound to dummy_udc driver [ 211.443925][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.702000][ T6504] jffs2: notice: (6504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.829390][ T6510] netlink: 168 bytes leftover after parsing attributes in process `syz.5.160'. [ 212.312841][ T6507] loop1: detected capacity change from 0 to 512 [ 212.864869][ T6507] EXT4-fs (loop1): Test dummy encryption mode enabled [ 213.170585][ T6507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 213.290097][ T6507] System zones: 1-2, 4-12, 8-8 [ 213.425478][ T6507] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.158: iget: bad i_size value: 38620345925642 [ 213.521267][ T6507] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.522415][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 213.538023][ C0] EXT4-fs (loop1): initial error at time 1785932278: ext4_orphan_get:1399: inode 15 [ 213.547469][ C0] EXT4-fs (loop1): last error at time 1785932278: ext4_orphan_get:1399: inode 15 [ 213.697664][ T6507] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.158: couldn't read orphan inode 15 (err -117) [ 213.758644][ T6507] loop1: lost filesystem error report for type 5 error -117 [ 213.813398][ T6507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.914691][ T6522] loop3: detected capacity change from 0 to 512 [ 215.947850][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.237876][ T6522] EXT4-fs: Ignoring removed bh option [ 216.397954][ T6522] EXT4-fs (loop3): 1 truncate cleaned up [ 216.787016][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.803364][ T6534] loop0: detected capacity change from 0 to 512 [ 216.862550][ T6534] EXT4-fs (loop0): Test dummy encryption mode enabled [ 216.927400][ T6534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 217.003829][ T6534] System zones: 1-2, 4-12, 8-8 [ 217.060181][ T6534] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.169: iget: bad i_size value: 38620345925642 [ 217.228743][ T6534] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.232341][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 217.248302][ C1] EXT4-fs (loop0): initial error at time 1785932281: ext4_orphan_get:1399: inode 15 [ 217.257787][ C1] EXT4-fs (loop0): last error at time 1785932281: ext4_orphan_get:1399: inode 15 [ 217.272736][ T6534] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.169: couldn't read orphan inode 15 (err -117) [ 217.392060][ T6534] loop0: lost filesystem error report for type 5 error -117 [ 217.422164][ T6534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.311598][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.022352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 221.289297][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.666068][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 222.673650][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 222.678647][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 222.679746][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 222.679783][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 222.679816][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 223.336179][ T6575] MTD: Couldn't look up './dev/mtdblock0': -2 [ 223.605168][ T6579] loop2: detected capacity change from 0 to 512 [ 223.671497][ T6579] EXT4-fs (loop2): Test dummy encryption mode enabled [ 223.738278][ T6579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 223.787947][ T6579] System zones: 1-2, 4-12, 8-8 [ 223.833298][ T6579] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.180: iget: bad i_size value: 38620345925642 [ 224.042672][ T6579] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.062375][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 224.078042][ C0] EXT4-fs (loop2): initial error at time 1785932288: ext4_orphan_get:1399: inode 15 [ 224.087642][ C0] EXT4-fs (loop2): last error at time 1785932288: ext4_orphan_get:1399: inode 15 [ 224.115701][ T6579] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.180: couldn't read orphan inode 15 (err -117) [ 224.187317][ T6579] loop2: lost filesystem error report for type 5 error -117 [ 224.316438][ T6579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.814000][ T6588] jffs2: notice: (6588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.627082][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.187'. [ 227.900533][ T6581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 228.613790][ T6600] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 229.035475][ T6609] MTD: Couldn't look up './dev/mtdblock0': -2 [ 230.266835][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.463600][ T6616] jffs2: notice: (6616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.856502][ T6626] loop4: detected capacity change from 0 to 256 [ 231.960361][ T6626] vfat: Unknown parameter 'obj_user' [ 232.808365][ T6632] gadgetfs: bound to dummy_udc driver [ 236.342333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #380!!! [ 239.210770][ T6676] loop4: detected capacity change from 0 to 512 [ 239.280648][ T6676] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.210: inode has both inline data and extents flags [ 239.588879][ T6676] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.589473][ T6676] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.210: couldn't read orphan inode 15 (err -117) [ 239.598868][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 239.599004][ C1] EXT4-fs (loop4): initial error at time 1785932304: ext4_orphan_get:1399: inode 15 [ 239.599051][ C1] EXT4-fs (loop4): last error at time 1785932304: ext4_orphan_get:1399: inode 15 [ 239.995228][ T6676] loop4: lost filesystem error report for type 5 error -117 [ 240.462126][ T6676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.819268][ T6685] loop2: detected capacity change from 0 to 512 [ 240.857078][ T6685] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.914686][ T6685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 240.969046][ T6662] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 241.058321][ T6685] System zones: 1-2, 4-12, 8-8 [ 241.085517][ T6685] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.212: iget: bad i_size value: 38620345925642 [ 241.251101][ T6685] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.252351][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 241.268127][ C1] EXT4-fs (loop2): initial error at time 1785932305: ext4_orphan_get:1399: inode 15 [ 241.277594][ C1] EXT4-fs (loop2): last error at time 1785932305: ext4_orphan_get:1399: inode 15 [ 241.314316][ T6685] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.212: couldn't read orphan inode 15 (err -117) [ 241.404297][ T6685] loop2: lost filesystem error report for type 5 error -117 [ 241.418415][ T6685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.523457][ T30] audit: type=1800 audit(1785932306.081:14): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.214" name="zoned" dev="configfs" ino=12159 res=0 errno=0 [ 241.621350][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.717101][ T30] audit: type=1800 audit(1785932306.091:15): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.214" name="zone_nr_conv" dev="configfs" ino=12160 res=0 errno=0 [ 242.010693][ T30] audit: type=1800 audit(1785932306.121:16): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.214" name="power" dev="configfs" ino=12161 res=0 errno=0 [ 242.785576][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.815311][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.829243][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.859956][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.877451][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.809951][ T6712] loop4: detected capacity change from 0 to 512 [ 243.880854][ T6712] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.952450][ T6712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 243.988175][ T6712] System zones: 1-2, 4-12, 8-8 [ 244.024914][ T6712] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.220: iget: bad i_size value: 38620345925642 [ 244.078092][ T6712] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.080433][ T6712] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.220: couldn't read orphan inode 15 (err -117) [ 244.089805][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 244.089834][ C1] EXT4-fs (loop4): initial error at time 1785932308: ext4_orphan_get:1399: inode 15 [ 244.089881][ C1] EXT4-fs (loop4): last error at time 1785932308: ext4_orphan_get:1399: inode 15 [ 244.230526][ T6712] loop4: lost filesystem error report for type 5 error -117 [ 244.239424][ T6712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.222442][ T4937] Bluetooth: hci6: command tx timeout [ 245.295540][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.957840][ T6725] loop3: detected capacity change from 0 to 512 [ 246.064248][ T6729] jffs2: notice: (6729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 246.120713][ T6725] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.223: inode has both inline data and extents flags [ 246.203952][ T6725] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.204780][ T6725] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.223: couldn't read orphan inode 15 (err -117) [ 246.214185][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 246.214223][ C1] EXT4-fs (loop3): initial error at time 1785932310: ext4_orphan_get:1399: inode 15 [ 246.214264][ C1] EXT4-fs (loop3): last error at time 1785932310: ext4_orphan_get:1399: inode 15 [ 246.254978][ T6680] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 246.416169][ T6725] loop3: lost filesystem error report for type 5 error -117 [ 246.440225][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.517785][ T6725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.894412][ T6741] loop5: detected capacity change from 0 to 512 [ 246.963925][ T6741] EXT4-fs (loop5): Test dummy encryption mode enabled [ 247.046924][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 247.166879][ T6741] System zones: 1-2, 4-12, 8-8 [ 247.241521][ T6741] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.228: iget: bad i_size value: 38620345925642 [ 247.329405][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.344741][ T6741] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.352336][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 247.368095][ C1] EXT4-fs (loop5): initial error at time 1785932311: ext4_orphan_get:1399: inode 15 [ 247.377625][ C1] EXT4-fs (loop5): last error at time 1785932311: ext4_orphan_get:1399: inode 15 [ 247.392865][ T4937] Bluetooth: hci6: command tx timeout [ 247.400563][ T6741] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.228: couldn't read orphan inode 15 (err -117) [ 247.484678][ T6741] loop5: lost filesystem error report for type 5 error -117 [ 247.498052][ T6741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.591773][ T6680] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 249.375500][ T6763] loop2: detected capacity change from 0 to 512 [ 249.452523][ T6763] EXT4-fs (loop2): Test dummy encryption mode enabled [ 249.482805][ T4937] Bluetooth: hci6: command tx timeout [ 249.547280][ T6763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 249.574133][ T6765] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.235'. [ 249.611912][ T6763] System zones: 1-2, 4-12, 8-8 [ 249.670522][ T6763] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.234: iget: bad i_size value: 38620345925642 [ 249.811010][ T6763] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.812361][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 249.828128][ C1] EXT4-fs (loop2): initial error at time 1785932314: ext4_orphan_get:1399: inode 15 [ 249.837652][ C1] EXT4-fs (loop2): last error at time 1785932314: ext4_orphan_get:1399: inode 15 [ 249.864047][ T6763] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.234: couldn't read orphan inode 15 (err -117) [ 250.027317][ T6763] loop2: lost filesystem error report for type 5 error -117 [ 250.074074][ T6763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.281857][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.532466][ T4937] Bluetooth: hci6: command tx timeout [ 251.813661][ T6780] netlink: 'syz.0.239': attribute type 5 has an invalid length. [ 251.866111][ T6767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 251.922879][ T6780] netlink: 'syz.0.239': attribute type 6 has an invalid length. [ 252.030539][ T6780] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.239'. [ 252.100146][ T6780] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.239'. [ 252.526907][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.604283][ T6777] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 253.581509][ T6794] jffs2: notice: (6794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.924012][ T6821] netlink: 'syz.5.248': attribute type 5 has an invalid length. [ 256.001667][ T6821] netlink: 'syz.5.248': attribute type 6 has an invalid length. [ 256.096971][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.103624][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.148736][ T6821] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.248'. [ 256.162868][ T6821] netlink: 6332 bytes leftover after parsing attributes in process `syz.5.248'. [ 257.116886][ T6832] loop3: detected capacity change from 0 to 512 [ 257.280921][ T6832] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.250: inode has both inline data and extents flags [ 257.391393][ T6832] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.392362][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 257.408168][ C1] EXT4-fs (loop3): initial error at time 1785932321: ext4_orphan_get:1399: inode 15 [ 257.417647][ C1] EXT4-fs (loop3): last error at time 1785932321: ext4_orphan_get:1399: inode 15 [ 257.448441][ T6842] jffs2: notice: (6842) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.468776][ T6832] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.250: couldn't read orphan inode 15 (err -117) [ 257.569771][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.594561][ T6832] loop3: lost filesystem error report for type 5 error -117 [ 257.606733][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.628516][ T6832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.752009][ T6693] bridge_slave_0: entered allmulticast mode [ 257.811568][ T6693] bridge_slave_0: entered promiscuous mode [ 257.895764][ T6847] netlink: 'syz.2.254': attribute type 5 has an invalid length. [ 257.922895][ T6839] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 258.042174][ T6847] netlink: 'syz.2.254': attribute type 6 has an invalid length. [ 258.057151][ T6847] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.254'. [ 258.066609][ T6847] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.254'. [ 258.295929][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.357833][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.420753][ T6693] bridge_slave_1: entered allmulticast mode [ 258.830465][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.065151][ T6693] bridge_slave_1: entered promiscuous mode [ 263.453204][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 264.184183][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.309816][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.509547][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 265.822350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 265.892336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 265.925121][ T6693] team0: Port device team_slave_0 added [ 266.046939][ T6693] team0: Port device team_slave_1 added [ 266.528366][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.781934][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.937873][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.591395][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.629641][ T6589] Set syz1 is full, maxelem 65536 reached [ 267.649193][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.868525][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.168678][ T6932] loop3: detected capacity change from 0 to 512 [ 268.216889][ T6932] EXT4-fs (loop3): Test dummy encryption mode enabled [ 268.275552][ T6932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 268.335658][ T6932] System zones: 1-2, 4-12, 8-8 [ 268.346011][ T6934] vim2m vim2m.0: Removing vim2m [ 268.376539][ T6932] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.274: iget: bad i_size value: 38620345925642 [ 268.551514][ T6932] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 268.562332][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 268.578067][ C0] EXT4-fs (loop3): initial error at time 1785932333: ext4_orphan_get:1399: inode 15 [ 268.578677][ T6693] hsr_slave_0: entered promiscuous mode [ 268.587563][ C0] EXT4-fs (loop3): last error at time 1785932333: ext4_orphan_get:1399: inode 15 [ 268.620148][ T6932] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.274: couldn't read orphan inode 15 (err -117) [ 268.672506][ T6932] loop3: lost filesystem error report for type 5 error -117 [ 268.684149][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.750225][ T6693] hsr_slave_1: entered promiscuous mode [ 268.776543][ T6693] debugfs: 'hsr0' already exists in 'hsr' [ 268.799567][ T6693] Cannot create hsr debugfs directory [ 270.337444][ T6946] loop5: detected capacity change from 0 to 512 [ 270.408509][ T6946] EXT4-fs (loop5): Test dummy encryption mode enabled [ 270.536004][ T6946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 270.608864][ T6946] System zones: 1-2, 4-12, 8-8 [ 270.640619][ T6946] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.278: iget: bad i_size value: 38620345925642 [ 270.692598][ T6956] netlink: 148 bytes leftover after parsing attributes in process `syz.4.280'. [ 270.730861][ T6946] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 270.731589][ T6946] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.278: couldn't read orphan inode 15 (err -117) [ 270.741071][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 270.741104][ C1] EXT4-fs (loop5): initial error at time 1785932335: ext4_orphan_get:1399: inode 15 [ 270.741144][ C1] EXT4-fs (loop5): last error at time 1785932335: ext4_orphan_get:1399: inode 15 [ 271.021728][ T6946] loop5: lost filesystem error report for type 5 error -117 [ 271.122170][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.162948][ T6937] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 271.324914][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.982650][ T6937] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 276.091800][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.183057][ C0] ================================================================== [ 276.191299][ C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 276.200741][ C0] Read of size 1 at addr ffff888026a6e010 by task kworker/0:2/185 [ 276.208561][ C0] [ 276.210896][ C0] CPU: 0 UID: 0 PID: 185 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.210922][ C0] Tainted: [L]=SOFTLOCKUP [ 276.210930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 276.210944][ C0] Workqueue: events_power_efficient gc_worker [ 276.210980][ C0] Call Trace: [ 276.210990][ C0] [ 276.211000][ C0] dump_stack_lvl+0xe8/0x150 [ 276.211034][ C0] print_address_description+0x55/0x1e0 [ 276.211063][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 276.211097][ C0] print_report+0x58/0x70 [ 276.211121][ C0] kasan_report+0x117/0x150 [ 276.211156][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 276.211187][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 276.211217][ C0] llc_conn_state_process+0x4fb/0x1380 [ 276.211256][ C0] llc_conn_tmr_common_cb+0x34a/0x780 [ 276.211288][ C0] call_timer_fn+0x192/0x5e0 [ 276.211308][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 276.211335][ C0] ? call_timer_fn+0xd4/0x5e0 [ 276.211351][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 276.211378][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.211400][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 276.211429][ C0] __run_timer_base+0x652/0x8b0 [ 276.211460][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.211491][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 276.211525][ C0] ? ktime_get+0x1f5/0x220 [ 276.211555][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.211580][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.211609][ C0] run_timer_softirq+0xb7/0x170 [ 276.211642][ C0] handle_softirqs+0x225/0x840 [ 276.211673][ C0] ? __irq_exit_rcu+0xca/0x220 [ 276.211703][ C0] __irq_exit_rcu+0xca/0x220 [ 276.211730][ C0] irq_exit_rcu+0x9/0x30 [ 276.211755][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 276.211784][ C0] [ 276.211791][ C0] [ 276.211799][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.211824][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 [ 276.211849][ C0] Code: 00 75 11 e8 d5 30 d6 f7 4d 85 f6 75 16 e8 cb 30 d6 f7 eb 15 e8 c4 30 d6 f7 e8 4f 63 e0 01 4d 85 f6 74 ea e8 b5 30 d6 f7 fb 5b <41> 5e e9 27 5f 1f f7 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 276.211867][ C0] RSP: 0018:ffffc900015e7990 EFLAGS: 00000293 [ 276.211886][ C0] RAX: ffffffff89f0e1db RBX: 0000000000000001 RCX: ffff88801eb70000 [ 276.211902][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.211915][ C0] RBP: ffffc900015e7af0 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 276.211932][ C0] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: ffff88801d376218 [ 276.211948][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: 0000000000006d69 [ 276.211968][ C0] ? seqcount_lockdep_reader_access+0xeb/0x100 [ 276.211997][ C0] gc_worker+0x31b/0x1890 [ 276.212022][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.212050][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.212075][ C0] ? irqentry_exit+0x218/0x8f0 [ 276.212108][ C0] ? gc_worker+0x274/0x1890 [ 276.212132][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 276.212161][ C0] ? __pfx_gc_worker+0x10/0x10 [ 276.212188][ C0] ? rcu_is_watching+0x15/0xb0 [ 276.212209][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.212235][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 276.212260][ C0] process_scheduled_works+0xa8e/0x14e0 [ 276.212302][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.212332][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.212358][ C0] ? assign_work+0x3cf/0x5d0 [ 276.212393][ C0] worker_thread+0xa47/0xfb0 [ 276.212464][ C0] kthread+0x388/0x470 [ 276.212512][ C0] ? __pfx_worker_thread+0x10/0x10 [ 276.212540][ C0] ? __pfx_kthread+0x10/0x10 [ 276.212573][ C0] ret_from_fork+0x514/0xb70 [ 276.212609][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 276.212635][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.212657][ C0] ? __switch_to+0xc89/0x1420 [ 276.212685][ C0] ? __pfx_kthread+0x10/0x10 [ 276.212713][ C0] ret_from_fork_asm+0x1a/0x30 [ 276.212740][ C0] [ 276.212748][ C0] [ 276.605905][ C0] Allocated by task 6967: [ 276.610234][ C0] kasan_save_track+0x3e/0x80 [ 276.614908][ C0] __kasan_kmalloc+0x93/0xb0 [ 276.619496][ C0] __kmalloc_cache_noprof+0x32d/0x660 [ 276.624865][ C0] llc_sap_open+0xe1/0x3b0 [ 276.629303][ C0] llc_ui_autobind+0x1f1/0x560 [ 276.634062][ C0] llc_ui_connect+0x1d7/0xd50 [ 276.638731][ C0] __sys_connect+0x323/0x460 [ 276.643305][ C0] __x64_sys_connect+0x7a/0x90 [ 276.648058][ C0] do_syscall_64+0x174/0x580 [ 276.652636][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.658530][ C0] [ 276.660829][ C0] Freed by task 23: [ 276.664647][ C0] kasan_save_track+0x3e/0x80 [ 276.669318][ C0] kasan_save_free_info+0x40/0x50 [ 276.674331][ C0] __kasan_slab_free+0x5c/0x80 [ 276.679091][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 276.684638][ C0] rcu_free_sheaf+0x31/0x200 [ 276.689245][ C0] rcu_core+0x78b/0x10a0 [ 276.693504][ C0] handle_softirqs+0x225/0x840 [ 276.698379][ C0] run_ksoftirqd+0x36/0x60 [ 276.702809][ C0] smpboot_thread_fn+0x57c/0xa80 [ 276.707807][ C0] kthread+0x388/0x470 [ 276.711881][ C0] ret_from_fork+0x514/0xb70 [ 276.716475][ C0] ret_from_fork_asm+0x1a/0x30 [ 276.721242][ C0] [ 276.723556][ C0] The buggy address belongs to the object at ffff888026a6e000 [ 276.723556][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 276.737606][ C0] The buggy address is located 16 bytes inside of [ 276.737606][ C0] freed 2048-byte region [ffff888026a6e000, ffff888026a6e800) [ 276.751426][ C0] [ 276.753756][ C0] The buggy address belongs to the physical page: [ 276.760148][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026a6b000 pfn:0x26a68 [ 276.770209][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 276.778758][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 276.788416][ C0] page_type: f5(slab) [ 276.792403][ C0] raw: 00fff00000000240 ffff88801b002000 ffffea0000ae9810 ffffea0000ac1610 [ 276.801030][ C0] raw: ffff888026a6b000 0000000800080006 00000000f5000000 0000000000000000 [ 276.809708][ C0] head: 00fff00000000240 ffff88801b002000 ffffea0000ae9810 ffffea0000ac1610 [ 276.818428][ C0] head: ffff888026a6b000 0000000800080006 00000000f5000000 0000000000000000 [ 276.827103][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 276.835864][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 276.844540][ C0] page dumped because: kasan: bad access detected [ 276.850940][ C0] page_owner tracks the page as allocated [ 276.856643][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5628, tgid 5628 (syz-executor), ts 101714912302, free_ts 59931796522 [ 276.877610][ C0] post_alloc_hook+0x1f9/0x250 [ 276.882401][ C0] get_page_from_freelist+0x21fa/0x2270 [ 276.887955][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 276.893790][ C0] allocate_slab+0x79/0x5e0 [ 276.898288][ C0] refill_objects+0x2d5/0x350 [ 276.902952][ C0] __pcs_replace_empty_main+0x2bf/0x6b0 [ 276.908484][ C0] __kmalloc_cache_noprof+0x3a7/0x660 [ 276.913972][ C0] batadv_hard_if_event+0x282a/0x3520 [ 276.919416][ C0] notifier_call_chain+0x1a5/0x3d0 [ 276.924541][ C0] register_netdevice+0x18a4/0x1eb0 [ 276.929753][ C0] ipvlan_link_new+0x3e3/0xa90 [ 276.934517][ C0] rtnl_newlink_create+0x310/0xb00 [ 276.939706][ C0] rtnl_newlink+0x167f/0x1bd0 [ 276.944399][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 276.949334][ C0] netlink_rcv_skb+0x226/0x4a0 [ 276.954090][ C0] netlink_unicast+0x7bb/0x940 [ 276.958871][ C0] page last free pid 5324 tgid 5324 stack trace: [ 276.965179][ C0] __free_frozen_pages+0xc1e/0xd10 [ 276.970292][ C0] __slab_free+0x274/0x2c0 [ 276.974711][ C0] qlist_free_all+0x99/0x100 [ 276.979298][ C0] kasan_quarantine_reduce+0x148/0x160 [ 276.984751][ C0] __kasan_slab_alloc+0x22/0x80 [ 276.989600][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 276.995052][ C0] do_getname+0x2e/0x250 [ 276.999290][ C0] do_sys_openat2+0xcc/0x200 [ 277.003878][ C0] __x64_sys_openat+0x138/0x170 [ 277.008749][ C0] do_syscall_64+0x174/0x580 [ 277.013340][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.019240][ C0] [ 277.021542][ C0] Memory state around the buggy address: [ 277.027149][ C0] ffff888026a6df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.035195][ C0] ffff888026a6df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.043252][ C0] >ffff888026a6e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.051300][ C0] ^ [ 277.055872][ C0] ffff888026a6e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.063917][ C0] ffff888026a6e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.071974][ C0] ================================================================== [ 277.080136][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 277.087372][ C0] CPU: 0 UID: 0 PID: 185 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.098217][ C0] Tainted: [L]=SOFTLOCKUP [ 277.102524][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 277.112564][ C0] Workqueue: events_power_efficient gc_worker [ 277.118630][ C0] Call Trace: [ 277.121892][ C0] [ 277.124752][ C0] vpanic+0x56c/0xa60 [ 277.128739][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.134365][ C0] ? __pfx_vpanic+0x10/0x10 [ 277.138877][ C0] panic+0xc5/0xd0 [ 277.142602][ C0] ? __pfx_panic+0x10/0x10 [ 277.147018][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 277.153743][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 277.160418][ C0] check_panic_on_warn+0x89/0xb0 [ 277.165386][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 277.172010][ C0] end_report+0x73/0x170 [ 277.176280][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 277.182901][ C0] kasan_report+0x128/0x150 [ 277.187850][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 277.194479][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 277.200906][ C0] llc_conn_state_process+0x4fb/0x1380 [ 277.206385][ C0] llc_conn_tmr_common_cb+0x34a/0x780 [ 277.212205][ C0] call_timer_fn+0x192/0x5e0 [ 277.216792][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 277.222438][ C0] ? call_timer_fn+0xd4/0x5e0 [ 277.227114][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 277.232260][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.237481][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 277.243126][ C0] __run_timer_base+0x652/0x8b0 [ 277.247984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.253623][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 277.259008][ C0] ? ktime_get+0x1f5/0x220 [ 277.263428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.269070][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.274709][ C0] run_timer_softirq+0xb7/0x170 [ 277.279576][ C0] handle_softirqs+0x225/0x840 [ 277.284476][ C0] ? __irq_exit_rcu+0xca/0x220 [ 277.289270][ C0] __irq_exit_rcu+0xca/0x220 [ 277.293881][ C0] irq_exit_rcu+0x9/0x30 [ 277.298145][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 277.303916][ C0] [ 277.306841][ C0] [ 277.309758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.315752][ C0] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100 [ 277.322540][ C0] Code: 00 75 11 e8 d5 30 d6 f7 4d 85 f6 75 16 e8 cb 30 d6 f7 eb 15 e8 c4 30 d6 f7 e8 4f 63 e0 01 4d 85 f6 74 ea e8 b5 30 d6 f7 fb 5b <41> 5e e9 27 5f 1f f7 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 277.342241][ C0] RSP: 0018:ffffc900015e7990 EFLAGS: 00000293 [ 277.349026][ C0] RAX: ffffffff89f0e1db RBX: 0000000000000001 RCX: ffff88801eb70000 [ 277.356998][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.365053][ C0] RBP: ffffc900015e7af0 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 277.373055][ C0] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: ffff88801d376218 [ 277.381045][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: 0000000000006d69 [ 277.389020][ C0] ? seqcount_lockdep_reader_access+0xeb/0x100 [ 277.395213][ C0] gc_worker+0x31b/0x1890 [ 277.399567][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.404768][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.410395][ C0] ? irqentry_exit+0x218/0x8f0 [ 277.415164][ C0] ? gc_worker+0x274/0x1890 [ 277.419699][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 277.425416][ C0] ? __pfx_gc_worker+0x10/0x10 [ 277.430178][ C0] ? rcu_is_watching+0x15/0xb0 [ 277.434931][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.440556][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 277.446270][ C0] process_scheduled_works+0xa8e/0x14e0 [ 277.451823][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.457803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.463436][ C0] ? assign_work+0x3cf/0x5d0 [ 277.468026][ C0] worker_thread+0xa47/0xfb0 [ 277.472623][ C0] kthread+0x388/0x470 [ 277.476688][ C0] ? __pfx_worker_thread+0x10/0x10 [ 277.481784][ C0] ? __pfx_kthread+0x10/0x10 [ 277.486369][ C0] ret_from_fork+0x514/0xb70 [ 277.490981][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 277.496116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.501766][ C0] ? __switch_to+0xc89/0x1420 [ 277.506461][ C0] ? __pfx_kthread+0x10/0x10 [ 277.511063][ C0] ret_from_fork_asm+0x1a/0x30 [ 277.515835][ C0] [ 277.519249][ C0] Kernel Offset: disabled [ 277.523689][ C0] Rebooting in 86400 seconds..