last executing test programs: 8m32.753339622s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000140)='./file2\x00', 0x810418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x1d6, &(0x7f0000000200)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020660b, 0x0) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m28.623425479s ago: executing program 0 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(0x0, 0x6000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 8m27.540848347s ago: executing program 2 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) close(0xffffffffffffffff) mknod$loop(0x0, 0x6000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) connect$netrom(r5, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 8m24.955049304s ago: executing program 0 (id=24): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESDEC], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file5\x00') syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x315, &(0x7f00000009c0)="$eJzs3TFv00wYB/D/2U7qvq36mrYIiQVUqARLRYEBsYBQVsTKhIAmlSqsItoiAQuhYkR8AHZWRgY+AhPiCwBLJzaWbkb3+OzYydlJoImb8P9Jiezzne85HNvPWaIGEf2zbjW+vb9yoD8KcOECuA44AHzAA3ASp/yn23tbe2GrWbYjV1roj0LcUvXU2dhu2ZrqdtLCCPSah/lsGY1GFEU3v1cdBFVOzn4LB5gx56Fs98cc11Exg5tJ1tvAmQrDqUT2AKtDHOIZFioMh4iIjgG5/386gLlNzEuRguMAq+a2P9H3/26HVQdwtK6GPUVRaYPM/V+yu0jp4/u/bOrM92QKp7c7ySxxkGBqXet1xIlkLsFU9lnljyhmYnFmN7c8rG28QtPBPm4YmQbL8t2M56yJPtGuWOamRXTGWLi3Gm7/F49GZ5Sz3ZuTkDa3wpZknpb4l2ydDvOvPSz1WX1R95SPd2im+Z8X/dKHSY5U0HWknJqO/1LxHuekla6lh6zicTq5Kiekk9OmB6PPKH37jCS7z+QBQTuNwBLnfrIgfS8i/1ghHt26rQPV2fmSrVWQrvW2lb6Wc61c80tY23gclj5KGY1kiOqtuqtW8BMf0cjk/46ObxWZM7PsUq+kpvllxOOp22t6UjPouXO006WzaQTGzNBjI2DIp2Vv8BDXsLD7/MUjNwxbO3rhgWXhyfyOMiW114C1zugXXJTUQbtTIjePl1E06J4jWbCNS1/V/jL4i3/Qql64SV8/0hJ9+tia67MsLXHGfZimb8GDbVOjbv1t3PkwhhMkSV2GbO5bN+lEq6DVSK5RdMzsquSgm4KeJJamnM67VDz/k0zeZHVyndFfQUmebplktnNrmT2upzO4fCq4aMtd+swN5opncJkeLxfMGWXOde4CcD5TqFDaYyBxTg3VwFfc5/N/IiIiIiIiIiIiIiIiIiIiIiIiIqJJM47/SlH1GImIiIiIiIiIiIiIiIiIiIiIiIiIiIiIJt3g7/+d7bypyfY34uX9v0Hf9//mXgBsXhTF9/8SVeN3AAAA//8LKXqM") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000280)=""/67, 0x43, 0x0, &(0x7f0000000400)=""/166, 0xa6}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 8m23.245591305s ago: executing program 2 (id=25): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a0101000000000000000000000000000a01010000000000000000000000000000000006000000000000169f000000003c000000000000000a000a00"], 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x2) 8m21.906299701s ago: executing program 0 (id=29): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) getsockname$packet(r4, 0x0, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xf00) 8m20.322696411s ago: executing program 2 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(0x0, 0x6000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000180)) connect$netrom(r5, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 8m16.042065877s ago: executing program 0 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(0x0, 0x6000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 8m15.979487763s ago: executing program 2 (id=36): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESDEC], 0x11, 0x1d6, &(0x7f0000000bc0)="$eJzs289ulFAUx/EfDANa/9S/GzddaKIbS0cT0Z19lElL66SMNtZNGxPjA/gQvoE+kQu3nUR3rsTMZToOSIVhOtDpfD9Jw71wD/fcUJjDAgFYWjckWbLUlhTH8YdXD2ytNZ0UgFq09DsGsKz0459dXlIMALjYBpstUwfsS/r28/3W8eivPVEh/M9g0zbbl5KOJ+LdkvXH4KNltvecdPzwEXSpRHz8OYl/mJn/8pTzr2TiV0rHJ+t/dD8df0XSVUnXJF2XtDp617op6VbO/NuZ+e8Od34tmQRQkaX1bD+1w9ZOLwo3xv226Xcmxqe55vjTcd8z/fWtN9H22ScPYCZ2wf3fytz/Tub+B7C4Dg6P9rpRFL7Nb3w5/VDNDbsoVdPwVO6E338VjLHPwZJnbgxf3c7khG6J/5bCMWsVZj95+Zw655O6tOlLkDQcSVXDndFKcsf0Z83Qy71e7l43Ou2J4czvYQSgVv67/r5/cHj0uNfv7oa74esnwYsg6DzvPAt8U/n7Oz1po+k0AczB3x/98jHx6jwzAgAAAAAAAAAAAAAA07ot6U6FuDj74Q8AAACAc6+OT6DGk31qdKkAAAAAAAAAAAAAAAAAAADAwvsTAAD//2QeNU0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file5\x00') syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x315, &(0x7f00000009c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000280)=""/67, 0x43, 0x0, &(0x7f0000000400)=""/166, 0xa6}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 8m11.955572244s ago: executing program 2 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(0x0, 0x6000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 8m9.611062205s ago: executing program 0 (id=43): socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1, @ANYBLOB], 0x58}}, 0x0) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01"], 0x2c}}, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 8m7.455390118s ago: executing program 2 (id=48): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) getsockname$packet(r4, 0x0, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xf00) 7m54.135789827s ago: executing program 32 (id=43): socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1, @ANYBLOB], 0x58}}, 0x0) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01"], 0x2c}}, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 7m51.332565655s ago: executing program 33 (id=48): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) getsockname$packet(r4, 0x0, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xf00) 7m17.232489888s ago: executing program 3 (id=105): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) unshare(0x480) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card3/oss_mixer\x00', 0x400000, 0x0) copy_file_range(r4, 0x0, r5, &(0x7f0000000100)=0x5, 0x2bf2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xddf, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xfffffffb, 0x0, 0x0, 0xffffffff, 0x2, 0x84, 0x7, 0x3, 0x8, 0x4c76, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x0, 0x7, 0x15, 0x1, 0x7, 0x200, 0x8003e, 0x8f, 0x4, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x205, 0x6, 0xc7d3, 0x4, 0x1, 0x40], [0x7, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xa, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x4000003, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x4, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x800000b, 0x1, 0x80009, 0x8, 0xa, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x400, 0x7fff, 0xd9a, 0x6, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0x8, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x8, 0x6d06, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x403, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x3, 0x1c, 0x120000, 0x0, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0xfffffffe, 0x2, 0x14c, 0x60a7, 0xe0000, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m14.215578213s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)=0x0) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0xe4c}}, 0x0) timer_delete(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_getoverrun(r6) 7m12.0431832s ago: executing program 3 (id=112): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESDEC], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file5\x00') syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x315, &(0x7f00000009c0)="$eJzs3TFv00wYB/D/2U7qvq36mrYIiQVUqARLRYEBsYBQVsTKhIAmlSqsItoiAQuhYkR8AHZWRgY+AhPiCwBLJzaWbkb3+OzYydlJoImb8P9Jiezzne85HNvPWaIGEf2zbjW+vb9yoD8KcOECuA44AHzAA3ASp/yn23tbe2GrWbYjV1roj0LcUvXU2dhu2ZrqdtLCCPSah/lsGY1GFEU3v1cdBFVOzn4LB5gx56Fs98cc11Exg5tJ1tvAmQrDqUT2AKtDHOIZFioMh4iIjgG5/386gLlNzEuRguMAq+a2P9H3/26HVQdwtK6GPUVRaYPM/V+yu0jp4/u/bOrM92QKp7c7ySxxkGBqXet1xIlkLsFU9lnljyhmYnFmN7c8rG28QtPBPm4YmQbL8t2M56yJPtGuWOamRXTGWLi3Gm7/F49GZ5Sz3ZuTkDa3wpZknpb4l2ydDvOvPSz1WX1R95SPd2im+Z8X/dKHSY5U0HWknJqO/1LxHuekla6lh6zicTq5Kiekk9OmB6PPKH37jCS7z+QBQTuNwBLnfrIgfS8i/1ghHt26rQPV2fmSrVWQrvW2lb6Wc61c80tY23gclj5KGY1kiOqtuqtW8BMf0cjk/46ObxWZM7PsUq+kpvllxOOp22t6UjPouXO006WzaQTGzNBjI2DIp2Vv8BDXsLD7/MUjNwxbO3rhgWXhyfyOMiW114C1zugXXJTUQbtTIjePl1E06J4jWbCNS1/V/jL4i3/Qql64SV8/0hJ9+tia67MsLXHGfZimb8GDbVOjbv1t3PkwhhMkSV2GbO5bN+lEq6DVSK5RdMzsquSgm4KeJJamnM67VDz/k0zeZHVyndFfQUmebplktnNrmT2upzO4fCq4aMtd+swN5opncJkeLxfMGWXOde4CcD5TqFDaYyBxTg3VwFfc5/N/IiIiIiIiIiIiIiIiIiIiIiIiIqJJM47/SlH1GImIiIiIiIiIiIiIiIiIiIiIiIiIiIiIJt3g7/+d7bypyfY34uX9v0Hf9//mXgBsXhTF9/8SVeN3AAAA//8LKXqM") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000280)=""/67, 0x43, 0x0, &(0x7f0000000400)=""/166, 0xa6}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) 7m9.318114671s ago: executing program 3 (id=115): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x294}}, 0x4048014) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 7m4.696171029s ago: executing program 3 (id=121): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r1, 0x400000) 6m59.604145925s ago: executing program 3 (id=127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40, 0x800000000000000}, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a0101000000000000000000000000000a01010000000000000000000000000000000006000000000000169f000000003c000000000000000a000a00"], 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) 6m43.551989725s ago: executing program 34 (id=127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40, 0x800000000000000}, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a0101000000000000000000000000000a01010000000000000000000000000000000006000000000000169f000000003c000000000000000a000a00"], 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) 4m17.763278712s ago: executing program 1 (id=307): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0x2}, 0xa) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 4m16.194688155s ago: executing program 1 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000140)='./file2\x00', 0x810418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x1d6, &(0x7f0000000200)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, 0x0) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m14.553131766s ago: executing program 1 (id=311): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2) 4m11.974452611s ago: executing program 1 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) set_tid_address(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x8105}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) 4m10.380952911s ago: executing program 1 (id=316): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) 4m8.042371488s ago: executing program 1 (id=319): r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x14000, 0x0) pread64(r0, 0x0, 0x0, 0x2b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.777929113s ago: executing program 35 (id=319): r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x14000, 0x0) pread64(r0, 0x0, 0x0, 0x2b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 3.435545s ago: executing program 8 (id=1061): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2}, 0x10) 3.262099369s ago: executing program 6 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 3.117863128s ago: executing program 9 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 3.037872874s ago: executing program 8 (id=1069): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) 2.937988117s ago: executing program 6 (id=1071): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200), 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) 2.723696869s ago: executing program 5 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) 2.723054368s ago: executing program 9 (id=1073): socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, 0x0, 0x0, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 2.339356276s ago: executing program 5 (id=1076): socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.164974785s ago: executing program 6 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d5}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.928196809s ago: executing program 8 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.891579539s ago: executing program 6 (id=1080): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x300) 1.600030379s ago: executing program 8 (id=1082): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.586987614s ago: executing program 5 (id=1083): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 1.533039949s ago: executing program 6 (id=1084): setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "e124299180b3f309", "9eab1d8602e34055550c3fd07f72bca2f9ab3f2cb61a0a9dea29a87ad0cbe3ef", "a37cbead", "dc3120f4c87877a1"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd2d, 0x25dfdbfc, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x4c}}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x34}}, 0x20008080) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_netdev_private(r7, 0x8914, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @default, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @bcast, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffff4f7, 0x0, 0x0, 0x6, 0x8, 0x2}, 0x20) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x4000}) 1.451820942s ago: executing program 7 (id=1085): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.443018636s ago: executing program 9 (id=1086): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 1.402699125s ago: executing program 4 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x24, r1, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2406400c}, 0x0) 1.239402577s ago: executing program 5 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2b003300d0430000ffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x20028801}, 0x24008846) 1.167523914s ago: executing program 8 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.122387449s ago: executing program 6 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) recvmmsg(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/192, 0xc0}, 0x8}], 0x1, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40900}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = epoll_create(0x2) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r5, 0xa51bd000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) 1.110778971s ago: executing program 9 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 1.050178292s ago: executing program 7 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000080)=0x7fb, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 988.310073ms ago: executing program 4 (id=1093): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) 894.174861ms ago: executing program 5 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 846.770168ms ago: executing program 8 (id=1095): socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 763.377633ms ago: executing program 7 (id=1096): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) 743.163862ms ago: executing program 4 (id=1097): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 671.442782ms ago: executing program 9 (id=1098): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000700000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000001feffffff0000000039f30000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 557.7395ms ago: executing program 5 (id=1099): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r2}, 0x10) 478.468913ms ago: executing program 4 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 434.828936ms ago: executing program 7 (id=1101): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 289.61534ms ago: executing program 9 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(r0) 216.871808ms ago: executing program 4 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 152.684633ms ago: executing program 7 (id=1104): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 606.688µs ago: executing program 7 (id=1105): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x980) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 0s ago: executing program 4 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2b003300d0430000ffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x20028801}, 0x24008846) kernel console output (not intermixed with test programs): es+0x4ad/0xd90 [ 439.853967][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.854018][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.854062][ T1155] ? __lock_acquire+0xb8a/0x1c90 [ 439.854111][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.854153][ T1155] do_writepages+0x27a/0x600 [ 439.854211][ T1155] ? __pfx_do_writepages+0x10/0x10 [ 439.854261][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.854306][ T1155] ? reacquire_held_locks+0xcd/0x1f0 [ 439.854354][ T1155] ? writeback_sb_inodes+0x3b0/0xfa0 [ 439.854421][ T1155] __writeback_single_inode+0x160/0xfb0 [ 439.854490][ T1155] ? __pfx___writeback_single_inode+0x10/0x10 [ 439.854552][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.854597][ T1155] ? do_raw_spin_unlock+0x172/0x230 [ 439.854655][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.854706][ T1155] writeback_sb_inodes+0x60d/0xfa0 [ 439.854789][ T1155] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 439.854914][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.854959][ T1155] ? rcu_is_watching+0x12/0xc0 [ 439.854995][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855039][ T1155] ? queue_io+0x3f6/0x520 [ 439.855098][ T1155] wb_writeback+0x419/0xb70 [ 439.855169][ T1155] ? __pfx_wb_writeback+0x10/0x10 [ 439.855227][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855284][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855328][ T1155] ? mark_held_locks+0x49/0x80 [ 439.855383][ T1155] wb_workfn+0x14d/0xbe0 [ 439.855422][ T1155] ? try_to_wake_up+0x160/0x1870 [ 439.855490][ T1155] ? __pfx_wb_workfn+0x10/0x10 [ 439.855530][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855579][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855629][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855673][ T1155] ? rcu_is_watching+0x12/0xc0 [ 439.855716][ T1155] process_one_work+0x9cf/0x1b70 [ 439.855786][ T1155] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 439.855851][ T1155] ? __pfx_process_one_work+0x10/0x10 [ 439.855907][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.855963][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.856007][ T1155] ? assign_work+0x1a0/0x250 [ 439.856063][ T1155] worker_thread+0x6c8/0xf10 [ 439.856139][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 439.856195][ T1155] kthread+0x3c5/0x780 [ 439.856246][ T1155] ? __pfx_kthread+0x10/0x10 [ 439.856300][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.856344][ T1155] ? rcu_is_watching+0x12/0xc0 [ 439.856380][ T1155] ? __pfx_kthread+0x10/0x10 [ 439.856433][ T1155] ret_from_fork+0x675/0x7d0 [ 439.856485][ T1155] ? __pfx_kthread+0x10/0x10 [ 439.856537][ T1155] ret_from_fork_asm+0x1a/0x30 [ 439.856603][ T1155] [ 439.856617][ T1155] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 440.100540][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 440.317685][ T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 440.679113][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.686268][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.694221][ T7686] bridge_slave_0: entered allmulticast mode [ 440.702583][ T7686] bridge_slave_0: entered promiscuous mode [ 440.919539][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.926705][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.956798][ T7686] bridge_slave_1: entered allmulticast mode [ 441.005012][ T7686] bridge_slave_1: entered promiscuous mode [ 441.325905][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 441.371145][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.401051][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.248320][ T7686] team0: Port device team_slave_0 added [ 444.770077][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 444.852485][ T7686] team0: Port device team_slave_1 added [ 444.980028][ T7882] loop5: detected capacity change from 0 to 256 [ 445.045621][ T7882] FAT-fs (loop5): Directory bread(block 64) failed [ 445.058335][ T7882] FAT-fs (loop5): Directory bread(block 65) failed [ 445.072653][ T7882] FAT-fs (loop5): Directory bread(block 66) failed [ 445.086420][ T7882] FAT-fs (loop5): Directory bread(block 67) failed [ 445.106352][ T7882] FAT-fs (loop5): Directory bread(block 68) failed [ 445.115988][ T7882] FAT-fs (loop5): Directory bread(block 69) failed [ 445.132439][ T7882] FAT-fs (loop5): Directory bread(block 70) failed [ 445.173128][ T7882] FAT-fs (loop5): Directory bread(block 71) failed [ 445.211361][ T7882] FAT-fs (loop5): Directory bread(block 72) failed [ 445.235777][ T7882] FAT-fs (loop5): Directory bread(block 73) failed [ 445.584511][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.651764][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.684894][ T7717] bridge_slave_0: entered allmulticast mode [ 445.802282][ T7717] bridge_slave_0: entered promiscuous mode [ 446.068743][ T30] audit: type=1800 audit(1761116960.531:64): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.365" name="bus" dev="loop5" ino=1048630 res=0 errno=0 [ 446.158330][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.165995][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.174259][ T7717] bridge_slave_1: entered allmulticast mode [ 446.187814][ T7717] bridge_slave_1: entered promiscuous mode [ 446.196399][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 446.311325][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.328515][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.387328][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.454730][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.473706][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.503522][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.332919][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.991228][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.573980][ T7912] loop4: detected capacity change from 0 to 256 [ 448.642336][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.683507][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.726146][ T7912] FAT-fs (loop4): Directory bread(block 64) failed [ 448.734533][ T7745] bridge_slave_0: entered allmulticast mode [ 448.750648][ T7912] FAT-fs (loop4): Directory bread(block 65) failed [ 448.757240][ T7912] FAT-fs (loop4): Directory bread(block 66) failed [ 448.778219][ T7745] bridge_slave_0: entered promiscuous mode [ 448.806257][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.813777][ T7912] FAT-fs (loop4): Directory bread(block 67) failed [ 448.829770][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.836963][ T7745] bridge_slave_1: entered allmulticast mode [ 448.846480][ T7912] FAT-fs (loop4): Directory bread(block 68) failed [ 448.867308][ T7745] bridge_slave_1: entered promiscuous mode [ 448.873199][ T7912] FAT-fs (loop4): Directory bread(block 69) failed [ 448.881396][ T7912] FAT-fs (loop4): Directory bread(block 70) failed [ 448.887932][ T7912] FAT-fs (loop4): Directory bread(block 71) failed [ 448.907227][ T7912] FAT-fs (loop4): Directory bread(block 72) failed [ 448.920456][ T7912] FAT-fs (loop4): Directory bread(block 73) failed [ 449.506255][ T30] audit: type=1800 audit(1761116963.941:65): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.369" name="bus" dev="loop4" ino=1048632 res=0 errno=0 [ 449.622931][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.639281][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.116670][ T7686] hsr_slave_0: entered promiscuous mode [ 450.139983][ T7686] hsr_slave_1: entered promiscuous mode [ 450.146373][ T7686] debugfs: 'hsr0' already exists in 'hsr' [ 450.213522][ T7686] Cannot create hsr debugfs directory [ 450.245711][ T7717] team0: Port device team_slave_0 added [ 450.280009][ T7924] loop5: detected capacity change from 0 to 40427 [ 450.282572][ T7717] team0: Port device team_slave_1 added [ 450.317850][ T7924] F2FS-fs (loop5): invalid crc value [ 450.326227][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.368751][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.406956][ T7711] bridge_slave_0: entered allmulticast mode [ 450.423941][ T7924] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 450.444586][ T7924] F2FS-fs (loop5): Start checkpoint disabled! [ 450.452396][ T7924] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 450.464785][ T7711] bridge_slave_0: entered promiscuous mode [ 450.490532][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.507839][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.515489][ T7711] bridge_slave_1: entered allmulticast mode [ 450.527267][ T7711] bridge_slave_1: entered promiscuous mode [ 450.551536][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.563953][ T7924] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 451.589682][ T30] audit: type=1800 audit(1761116965.061:66): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.370" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 451.699132][ T7933] netlink: 348 bytes leftover after parsing attributes in process `syz.5.370'. [ 451.708093][ T7933] netlink: 348 bytes leftover after parsing attributes in process `syz.5.370'. [ 451.976788][ T7934] bio_check_eod: 362 callbacks suppressed [ 451.976814][ T7934] syz.5.370: attempt to access beyond end of device [ 451.976814][ T7934] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 451.996802][ T7934] syz.5.370: attempt to access beyond end of device [ 451.996802][ T7934] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 452.010985][ T7934] syz.5.370: attempt to access beyond end of device [ 452.010985][ T7934] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 452.025137][ T7934] syz.5.370: attempt to access beyond end of device [ 452.025137][ T7934] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 452.039298][ T7934] syz.5.370: attempt to access beyond end of device [ 452.039298][ T7934] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 452.053615][ T7934] syz.5.370: attempt to access beyond end of device [ 452.053615][ T7934] loop5: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 452.067866][ T7934] syz.5.370: attempt to access beyond end of device [ 452.067866][ T7934] loop5: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 452.082020][ T7934] syz.5.370: attempt to access beyond end of device [ 452.082020][ T7934] loop5: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 452.096147][ T7934] syz.5.370: attempt to access beyond end of device [ 452.096147][ T7934] loop5: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 452.219151][ T7934] syz.5.370: attempt to access beyond end of device [ 452.219151][ T7934] loop5: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 452.423038][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.431554][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.458717][ T7717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.561602][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.640322][ T4398] CPU: 0 UID: 0 PID: 4398 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 452.640370][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.640395][ T4398] Workqueue: writeback wb_workfn (flush-7:5) [ 452.640441][ T4398] Call Trace: [ 452.640452][ T4398] [ 452.640466][ T4398] dump_stack_lvl+0x16c/0x1f0 [ 452.640517][ T4398] f2fs_handle_critical_error+0x624/0x9f0 [ 452.640573][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.640619][ T4398] ? f2fs_build_fault_attr+0x53/0x1f0 [ 452.640675][ T4398] f2fs_write_end_io+0x958/0xcf0 [ 452.640741][ T4398] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 452.640805][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.640860][ T4398] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 452.640916][ T4398] bio_endio+0x713/0x860 [ 452.640958][ T4398] submit_bio_noacct+0x306/0x1f60 [ 452.641022][ T4398] __submit_merged_bio+0x33c/0x770 [ 452.641085][ T4398] __submit_merged_write_cond+0x319/0x3f0 [ 452.641155][ T4398] f2fs_write_cache_pages+0x2067/0x2570 [ 452.641221][ T4398] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 452.641262][ T4398] ? __kernel_text_address+0xd/0x40 [ 452.641318][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641364][ T4398] ? unwind_get_return_address+0x59/0xa0 [ 452.641424][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641469][ T4398] ? arch_stack_walk+0x88/0x100 [ 452.641537][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641662][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641711][ T4398] ? rcu_is_watching+0x12/0xc0 [ 452.641753][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641798][ T4398] ? trace_pelt_se_tp+0xf1/0x160 [ 452.641851][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641896][ T4398] ? __update_load_avg_se+0x3fb/0x940 [ 452.641940][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.641993][ T4398] f2fs_write_data_pages+0x4ad/0xd90 [ 452.642041][ T4398] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 452.642091][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.642137][ T4398] ? __lock_acquire+0xb8a/0x1c90 [ 452.642186][ T4398] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 452.642229][ T4398] do_writepages+0x27a/0x600 [ 452.642288][ T4398] ? __pfx_do_writepages+0x10/0x10 [ 452.642339][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.642385][ T4398] ? reacquire_held_locks+0xcd/0x1f0 [ 452.642433][ T4398] ? writeback_sb_inodes+0x3b0/0xfa0 [ 452.642501][ T4398] __writeback_single_inode+0x160/0xfb0 [ 452.642570][ T4398] ? __pfx___writeback_single_inode+0x10/0x10 [ 452.642633][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.642678][ T4398] ? do_raw_spin_unlock+0x172/0x230 [ 452.642741][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.642793][ T4398] writeback_sb_inodes+0x60d/0xfa0 [ 452.642878][ T4398] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 452.643010][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643055][ T4398] ? rcu_is_watching+0x12/0xc0 [ 452.643090][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643134][ T4398] ? queue_io+0x3f6/0x520 [ 452.643192][ T4398] wb_writeback+0x419/0xb70 [ 452.643264][ T4398] ? __pfx_wb_writeback+0x10/0x10 [ 452.643321][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643378][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643422][ T4398] ? mark_held_locks+0x49/0x80 [ 452.643476][ T4398] wb_workfn+0x14d/0xbe0 [ 452.643516][ T4398] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.643564][ T4398] ? __pfx_wb_workfn+0x10/0x10 [ 452.643604][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643654][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643705][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643753][ T4398] ? rcu_is_watching+0x12/0xc0 [ 452.643796][ T4398] process_one_work+0x9cf/0x1b70 [ 452.643870][ T4398] ? __pfx_process_one_work+0x10/0x10 [ 452.643925][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.643981][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.644026][ T4398] ? assign_work+0x1a0/0x250 [ 452.644081][ T4398] worker_thread+0x6c8/0xf10 [ 452.644156][ T4398] ? __pfx_worker_thread+0x10/0x10 [ 452.644212][ T4398] kthread+0x3c5/0x780 [ 452.644263][ T4398] ? __pfx_kthread+0x10/0x10 [ 452.644317][ T4398] ? srso_alias_return_thunk+0x5/0xfbef5 [ 452.644362][ T4398] ? rcu_is_watching+0x12/0xc0 [ 452.644397][ T4398] ? __pfx_kthread+0x10/0x10 [ 452.644450][ T4398] ret_from_fork+0x675/0x7d0 [ 452.644496][ T4398] ? __pfx_kthread+0x10/0x10 [ 452.644547][ T4398] ret_from_fork_asm+0x1a/0x30 [ 452.644612][ T4398] [ 452.647067][ T4398] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 452.647740][ T7937] loop4: detected capacity change from 0 to 64 [ 453.102340][ T7937] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 453.191549][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.198507][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.228504][ T7717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.302509][ T7717] hsr_slave_0: entered promiscuous mode [ 453.309668][ T7717] hsr_slave_1: entered promiscuous mode [ 453.316180][ T7717] debugfs: 'hsr0' already exists in 'hsr' [ 453.322475][ T7717] Cannot create hsr debugfs directory [ 453.421627][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.513925][ T7939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.372'. [ 453.775259][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.805353][ T7745] team0: Port device team_slave_0 added [ 453.897373][ T7711] team0: Port device team_slave_0 added [ 453.916626][ T7745] team0: Port device team_slave_1 added [ 454.045480][ T7711] team0: Port device team_slave_1 added [ 454.387049][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.421654][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.448336][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.416570][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.434829][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.468161][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.498618][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.506995][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.533205][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.096635][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.141685][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.236344][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.347132][ T7976] loop4: detected capacity change from 0 to 256 [ 458.376091][ T7976] FAT-fs (loop4): Directory bread(block 64) failed [ 458.382765][ T7976] FAT-fs (loop4): Directory bread(block 65) failed [ 458.389849][ T7976] FAT-fs (loop4): Directory bread(block 66) failed [ 458.396374][ T7976] FAT-fs (loop4): Directory bread(block 67) failed [ 458.403550][ T7976] FAT-fs (loop4): Directory bread(block 68) failed [ 458.410336][ T7976] FAT-fs (loop4): Directory bread(block 69) failed [ 458.417025][ T7976] FAT-fs (loop4): Directory bread(block 70) failed [ 458.424046][ T7976] FAT-fs (loop4): Directory bread(block 71) failed [ 458.434107][ T7976] FAT-fs (loop4): Directory bread(block 72) failed [ 458.559149][ T7976] FAT-fs (loop4): Directory bread(block 73) failed [ 459.596924][ T30] audit: type=1800 audit(1761116974.071:67): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.378" name="bus" dev="loop4" ino=1048634 res=0 errno=0 [ 459.599236][ T7745] hsr_slave_0: entered promiscuous mode [ 459.630204][ T7745] hsr_slave_1: entered promiscuous mode [ 459.636647][ T7745] debugfs: 'hsr0' already exists in 'hsr' [ 459.642897][ T7745] Cannot create hsr debugfs directory [ 460.132784][ T7711] hsr_slave_0: entered promiscuous mode [ 460.160093][ T7711] hsr_slave_1: entered promiscuous mode [ 460.166588][ T7711] debugfs: 'hsr0' already exists in 'hsr' [ 460.179917][ T7711] Cannot create hsr debugfs directory [ 460.312888][ T7686] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 460.357934][ T7686] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 460.680817][ T7686] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 460.709040][ T7686] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 461.683071][ T7999] loop5: detected capacity change from 0 to 256 [ 461.734285][ T7999] FAT-fs (loop5): Directory bread(block 64) failed [ 461.760623][ T7999] FAT-fs (loop5): Directory bread(block 65) failed [ 461.767223][ T7999] FAT-fs (loop5): Directory bread(block 66) failed [ 461.809571][ T7999] FAT-fs (loop5): Directory bread(block 67) failed [ 461.816257][ T7999] FAT-fs (loop5): Directory bread(block 68) failed [ 461.832708][ T7999] FAT-fs (loop5): Directory bread(block 69) failed [ 461.858863][ T7999] FAT-fs (loop5): Directory bread(block 70) failed [ 461.878967][ T7999] FAT-fs (loop5): Directory bread(block 71) failed [ 461.886030][ T7999] FAT-fs (loop5): Directory bread(block 72) failed [ 461.926308][ T7999] FAT-fs (loop5): Directory bread(block 73) failed [ 462.080793][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.239578][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.315418][ T30] audit: type=1800 audit(1761116977.071:68): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.382" name="bus" dev="loop5" ino=1048636 res=0 errno=0 [ 463.698866][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.851019][ T7717] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 463.884749][ T7717] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.513230][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.538081][ T7717] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.870849][ T7717] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.191739][ T7745] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 468.556864][ T7745] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 468.616005][ T7745] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.111494][ T5838] Bluetooth: hci7: command 0x041b tx timeout [ 469.762610][ T7745] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.782379][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.796927][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.808847][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.764287][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.772524][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.379019][ T13] bridge_slave_1: left allmulticast mode [ 471.391127][ T13] bridge_slave_1: left promiscuous mode [ 471.397001][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.409889][ T13] bridge_slave_0: left allmulticast mode [ 471.415544][ T13] bridge_slave_0: left promiscuous mode [ 471.421939][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.436289][ T13] bridge_slave_1: left allmulticast mode [ 471.442712][ T13] bridge_slave_1: left promiscuous mode [ 471.448457][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.460150][ T13] bridge_slave_0: left allmulticast mode [ 471.465795][ T13] bridge_slave_0: left promiscuous mode [ 471.474889][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.487470][ T13] bridge_slave_1: left allmulticast mode [ 471.493374][ T13] bridge_slave_1: left promiscuous mode [ 471.499596][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.510837][ T13] bridge_slave_0: left allmulticast mode [ 471.516478][ T13] bridge_slave_0: left promiscuous mode [ 471.524171][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.537117][ T13] bridge_slave_1: left allmulticast mode [ 471.542796][ T13] bridge_slave_1: left promiscuous mode [ 471.548534][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.558995][ T13] bridge_slave_0: left allmulticast mode [ 471.565270][ T13] bridge_slave_0: left promiscuous mode [ 471.574985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.309984][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.322090][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.428788][ T13] bond0 (unregistering): Released all slaves [ 472.837665][ T8077] loop4: detected capacity change from 0 to 64 [ 472.858791][ T5850] Bluetooth: hci2: command tx timeout [ 472.929706][ T8077] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 474.365796][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.451487][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.460141][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.467762][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.475998][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.484002][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.539063][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.551350][ T13] bond0 (unregistering): Released all slaves [ 474.837253][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.854082][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.918981][ T5851] Bluetooth: hci2: command tx timeout [ 474.950394][ T13] bond0 (unregistering): Released all slaves [ 476.519351][ T5851] Bluetooth: hci0: command tx timeout [ 476.638277][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.647220][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.656217][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.849082][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.907753][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.999038][ T5851] Bluetooth: hci2: command tx timeout [ 478.689727][ T5851] Bluetooth: hci0: command tx timeout [ 479.331270][ T5142] Bluetooth: hci1: command tx timeout [ 479.337461][ T5142] Bluetooth: hci2: command tx timeout [ 479.757968][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.774037][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.794976][ T13] bond0 (unregistering): Released all slaves [ 480.090748][ T8115] loop5: detected capacity change from 0 to 64 [ 480.207095][ T8115] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 480.668458][ T8121] netlink: 68 bytes leftover after parsing attributes in process `syz.5.403'. [ 480.758968][ T5851] Bluetooth: hci0: command tx timeout [ 481.418785][ T5851] Bluetooth: hci1: command tx timeout [ 482.839256][ T5142] Bluetooth: hci0: command tx timeout [ 484.291811][ T5142] Bluetooth: hci1: command tx timeout [ 484.529914][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.541141][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.558746][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.571559][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.587214][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.360461][ T5142] Bluetooth: hci1: command tx timeout [ 486.391327][ T8157] loop5: detected capacity change from 0 to 64 [ 486.489446][ T8157] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 486.810933][ T8160] loop4: detected capacity change from 0 to 40427 [ 486.848003][ T8160] F2FS-fs (loop4): invalid crc value [ 486.858765][ T5142] Bluetooth: hci5: command tx timeout [ 486.941045][ T8160] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 486.951183][ T8160] F2FS-fs (loop4): Start checkpoint disabled! [ 486.958801][ T8160] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 487.076084][ T8160] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 487.356401][ T30] audit: type=1800 audit(1761117001.831:69): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.410" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 487.764218][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 487.773158][ T8170] netlink: 348 bytes leftover after parsing attributes in process `syz.4.410'. [ 487.782272][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 487.791124][ T8170] netlink: 348 bytes leftover after parsing attributes in process `syz.4.410'. [ 487.800759][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 487.926877][ T8171] bio_check_eod: 176 callbacks suppressed [ 487.926931][ T8171] syz.4.410: attempt to access beyond end of device [ 487.926931][ T8171] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 487.949048][ T8171] syz.4.410: attempt to access beyond end of device [ 487.949048][ T8171] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 487.967976][ T8171] syz.4.410: attempt to access beyond end of device [ 487.967976][ T8171] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 487.986264][ T8171] syz.4.410: attempt to access beyond end of device [ 487.986264][ T8171] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 488.004045][ T8171] syz.4.410: attempt to access beyond end of device [ 488.004045][ T8171] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 488.022687][ T8171] syz.4.410: attempt to access beyond end of device [ 488.022687][ T8171] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 488.073877][ T8171] syz.4.410: attempt to access beyond end of device [ 488.073877][ T8171] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 488.092341][ T8171] syz.4.410: attempt to access beyond end of device [ 488.092341][ T8171] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 488.110833][ T8171] syz.4.410: attempt to access beyond end of device [ 488.110833][ T8171] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 488.128673][ T8171] syz.4.410: attempt to access beyond end of device [ 488.128673][ T8171] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 488.599611][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 488.599661][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.599686][ T1155] Workqueue: writeback wb_workfn (flush-7:4) [ 488.599732][ T1155] Call Trace: [ 488.599747][ T1155] [ 488.599761][ T1155] dump_stack_lvl+0x16c/0x1f0 [ 488.599812][ T1155] f2fs_handle_critical_error+0x624/0x9f0 [ 488.599869][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.599915][ T1155] ? f2fs_build_fault_attr+0x53/0x1f0 [ 488.599971][ T1155] f2fs_write_end_io+0x958/0xcf0 [ 488.600033][ T1155] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 488.600096][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.600151][ T1155] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 488.600207][ T1155] bio_endio+0x713/0x860 [ 488.600249][ T1155] submit_bio_noacct+0x306/0x1f60 [ 488.600312][ T1155] __submit_merged_bio+0x33c/0x770 [ 488.600376][ T1155] __submit_merged_write_cond+0x319/0x3f0 [ 488.600447][ T1155] f2fs_write_cache_pages+0x2067/0x2570 [ 488.600512][ T1155] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 488.600555][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.600601][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.600645][ T1155] ? find_held_lock+0x2b/0x80 [ 488.600683][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.600733][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.600780][ T1155] ? do_raw_spin_unlock+0x172/0x230 [ 488.600854][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.600900][ T1155] ? f2fs_available_free_memory+0x279/0xa30 [ 488.601010][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.601054][ T1155] ? lock_acquire+0x179/0x350 [ 488.601103][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.601156][ T1155] f2fs_write_data_pages+0x4ad/0xd90 [ 488.601202][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 488.601253][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.601299][ T1155] ? __lock_acquire+0xb8a/0x1c90 [ 488.601348][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 488.601389][ T1155] do_writepages+0x27a/0x600 [ 488.601449][ T1155] ? __pfx_do_writepages+0x10/0x10 [ 488.601499][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.601544][ T1155] ? reacquire_held_locks+0xcd/0x1f0 [ 488.601593][ T1155] ? writeback_sb_inodes+0x3b0/0xfa0 [ 488.601662][ T1155] __writeback_single_inode+0x160/0xfb0 [ 488.601729][ T1155] ? __pfx___writeback_single_inode+0x10/0x10 [ 488.601796][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.601841][ T1155] ? do_raw_spin_unlock+0x172/0x230 [ 488.601900][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.601952][ T1155] writeback_sb_inodes+0x60d/0xfa0 [ 488.602036][ T1155] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 488.602097][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602142][ T1155] ? find_held_lock+0x2b/0x80 [ 488.602239][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602284][ T1155] ? rcu_is_watching+0x12/0xc0 [ 488.602320][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602365][ T1155] ? queue_io+0x3f6/0x520 [ 488.602425][ T1155] wb_writeback+0x419/0xb70 [ 488.602497][ T1155] ? __pfx_wb_writeback+0x10/0x10 [ 488.602557][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602616][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602661][ T1155] ? mark_held_locks+0x49/0x80 [ 488.602716][ T1155] wb_workfn+0x14d/0xbe0 [ 488.602761][ T1155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 488.602812][ T1155] ? __pfx_wb_workfn+0x10/0x10 [ 488.602852][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602902][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602953][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.602999][ T1155] ? rcu_is_watching+0x12/0xc0 [ 488.603042][ T1155] process_one_work+0x9cf/0x1b70 [ 488.603117][ T1155] ? __pfx_process_one_work+0x10/0x10 [ 488.603178][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.603235][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.603280][ T1155] ? assign_work+0x1a0/0x250 [ 488.603339][ T1155] worker_thread+0x6c8/0xf10 [ 488.603416][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 488.603472][ T1155] kthread+0x3c5/0x780 [ 488.603524][ T1155] ? __pfx_kthread+0x10/0x10 [ 488.603578][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.603623][ T1155] ? rcu_is_watching+0x12/0xc0 [ 488.603659][ T1155] ? __pfx_kthread+0x10/0x10 [ 488.603713][ T1155] ret_from_fork+0x675/0x7d0 [ 488.603764][ T1155] ? __pfx_kthread+0x10/0x10 [ 488.603816][ T1155] ret_from_fork_asm+0x1a/0x30 [ 488.603882][ T1155] [ 488.603896][ T1155] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 488.928899][ T5142] Bluetooth: hci5: command tx timeout [ 489.086112][ T13] hsr_slave_0: left promiscuous mode [ 489.092862][ T13] hsr_slave_1: left promiscuous mode [ 489.109622][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.126122][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.156216][ T13] hsr_slave_0: left promiscuous mode [ 489.166712][ T13] hsr_slave_1: left promiscuous mode [ 489.181356][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.190138][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.199462][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.208793][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.286390][ T13] veth1_macvtap: left promiscuous mode [ 489.308862][ T13] veth0_macvtap: left promiscuous mode [ 489.314542][ T13] veth1_vlan: left promiscuous mode [ 489.320205][ T13] veth0_vlan: left promiscuous mode [ 489.385202][ T8183] loop5: detected capacity change from 0 to 64 [ 489.423958][ T8183] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 489.909813][ T8188] netlink: 68 bytes leftover after parsing attributes in process `syz.5.414'. [ 490.280622][ T13] team0 (unregistering): Port device team_slave_0 removed [ 491.160215][ T5851] Bluetooth: hci5: command tx timeout [ 492.509401][ T13] team0 (unregistering): Port device team_slave_1 removed [ 492.841298][ T13] team0 (unregistering): Port device team_slave_0 removed [ 494.110706][ T5851] Bluetooth: hci5: command 0x0419 tx timeout [ 495.999014][ T8211] loop4: detected capacity change from 0 to 40427 [ 496.558767][ T5851] Bluetooth: hci5: command 0x0419 tx timeout [ 496.779277][ T8211] F2FS-fs (loop4): invalid crc value [ 497.165986][ T8211] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 497.180343][ T8211] F2FS-fs (loop4): Start checkpoint disabled! [ 497.190652][ T8211] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 497.198309][ T8211] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 497.225641][ T30] audit: type=1800 audit(1761117011.701:70): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 497.578274][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 497.587966][ T8221] netlink: 348 bytes leftover after parsing attributes in process `syz.4.421'. [ 497.597674][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 497.606553][ T8221] netlink: 348 bytes leftover after parsing attributes in process `syz.4.421'. [ 497.616120][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 497.738049][ T8222] bio_check_eod: 176 callbacks suppressed [ 497.738098][ T8222] syz.4.421: attempt to access beyond end of device [ 497.738098][ T8222] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 497.759922][ T8222] syz.4.421: attempt to access beyond end of device [ 497.759922][ T8222] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 497.777129][ T8222] syz.4.421: attempt to access beyond end of device [ 497.777129][ T8222] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 497.795284][ T8222] syz.4.421: attempt to access beyond end of device [ 497.795284][ T8222] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 497.865218][ T8222] syz.4.421: attempt to access beyond end of device [ 497.865218][ T8222] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 497.883681][ T8222] syz.4.421: attempt to access beyond end of device [ 497.883681][ T8222] loop4: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 497.902477][ T8222] syz.4.421: attempt to access beyond end of device [ 497.902477][ T8222] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 497.919744][ T8222] syz.4.421: attempt to access beyond end of device [ 497.919744][ T8222] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 497.936973][ T8222] syz.4.421: attempt to access beyond end of device [ 497.936973][ T8222] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 497.954298][ T8222] syz.4.421: attempt to access beyond end of device [ 497.954298][ T8222] loop4: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 498.401889][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 498.401940][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.401965][ T50] Workqueue: writeback wb_workfn (flush-7:4) [ 498.402012][ T50] Call Trace: [ 498.402024][ T50] [ 498.402038][ T50] dump_stack_lvl+0x16c/0x1f0 [ 498.402090][ T50] f2fs_handle_critical_error+0x624/0x9f0 [ 498.402147][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.402193][ T50] ? f2fs_build_fault_attr+0x53/0x1f0 [ 498.402250][ T50] f2fs_write_end_io+0x958/0xcf0 [ 498.402313][ T50] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 498.402377][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.402434][ T50] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 498.402491][ T50] bio_endio+0x713/0x860 [ 498.402533][ T50] submit_bio_noacct+0x306/0x1f60 [ 498.402599][ T50] __submit_merged_bio+0x33c/0x770 [ 498.402662][ T50] __submit_merged_write_cond+0x319/0x3f0 [ 498.402733][ T50] f2fs_write_cache_pages+0x2067/0x2570 [ 498.402804][ T50] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 498.402839][ T50] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.402892][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.402948][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.403015][ T50] ? __lock_acquire+0xb8a/0x1c90 [ 498.403127][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.403172][ T50] ? finish_task_switch.isra.0+0x221/0xc10 [ 498.403239][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.403287][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.403332][ T50] ? rcu_is_watching+0x12/0xc0 [ 498.403372][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.403425][ T50] f2fs_write_data_pages+0x4ad/0xd90 [ 498.403472][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 498.403521][ T50] ? __pfx___schedule+0x10/0x10 [ 498.403564][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.403610][ T50] ? __lock_acquire+0xb8a/0x1c90 [ 498.403658][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 498.403699][ T50] do_writepages+0x27a/0x600 [ 498.403762][ T50] ? __pfx_do_writepages+0x10/0x10 [ 498.403816][ T50] ? preempt_schedule_thunk+0x16/0x30 [ 498.403872][ T50] __writeback_single_inode+0x160/0xfb0 [ 498.403934][ T50] ? preempt_schedule_thunk+0x16/0x30 [ 498.403985][ T50] ? __pfx___writeback_single_inode+0x10/0x10 [ 498.404053][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404104][ T50] writeback_sb_inodes+0x60d/0xfa0 [ 498.404189][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 498.404252][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404297][ T50] ? mark_held_locks+0x49/0x80 [ 498.404403][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404449][ T50] ? rcu_is_watching+0x12/0xc0 [ 498.404483][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404529][ T50] ? queue_io+0x3f6/0x520 [ 498.404589][ T50] wb_writeback+0x419/0xb70 [ 498.404661][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 498.404720][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404782][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404827][ T50] ? mark_held_locks+0x49/0x80 [ 498.404882][ T50] wb_workfn+0x14d/0xbe0 [ 498.404923][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.404972][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 498.405011][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405061][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405108][ T50] ? preempt_schedule_thunk+0x16/0x30 [ 498.405168][ T50] process_one_work+0x9cf/0x1b70 [ 498.405244][ T50] ? __pfx_process_one_work+0x10/0x10 [ 498.405300][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405357][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405403][ T50] ? assign_work+0x1a0/0x250 [ 498.405460][ T50] worker_thread+0x6c8/0xf10 [ 498.405526][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405576][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405622][ T50] ? __kthread_parkme+0x19e/0x250 [ 498.405663][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405712][ T50] ? __pfx_worker_thread+0x10/0x10 [ 498.405772][ T50] kthread+0x3c5/0x780 [ 498.405825][ T50] ? __pfx_kthread+0x10/0x10 [ 498.405879][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.405925][ T50] ? rcu_is_watching+0x12/0xc0 [ 498.405961][ T50] ? __pfx_kthread+0x10/0x10 [ 498.406016][ T50] ret_from_fork+0x675/0x7d0 [ 498.406063][ T50] ? __pfx_kthread+0x10/0x10 [ 498.406116][ T50] ret_from_fork_asm+0x1a/0x30 [ 498.406183][ T50] [ 499.099367][ T50] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 499.680631][ T13] team0 (unregistering): Port device team_slave_1 removed [ 499.786983][ T13] team0 (unregistering): Port device team_slave_0 removed [ 500.927833][ T8237] loop5: detected capacity change from 0 to 256 [ 501.228089][ T8237] FAT-fs (loop5): Directory bread(block 64) failed [ 501.287487][ T8237] FAT-fs (loop5): Directory bread(block 65) failed [ 501.340510][ T8237] FAT-fs (loop5): Directory bread(block 66) failed [ 501.391433][ T8237] FAT-fs (loop5): Directory bread(block 67) failed [ 501.452990][ T8237] FAT-fs (loop5): Directory bread(block 68) failed [ 501.523284][ T8237] FAT-fs (loop5): Directory bread(block 69) failed [ 501.580283][ T8237] FAT-fs (loop5): Directory bread(block 70) failed [ 501.656698][ T8237] FAT-fs (loop5): Directory bread(block 71) failed [ 501.766645][ T8237] FAT-fs (loop5): Directory bread(block 72) failed [ 501.819358][ T8237] FAT-fs (loop5): Directory bread(block 73) failed [ 502.006943][ T30] audit: type=1800 audit(1761117016.481:71): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.427" name="bus" dev="loop5" ino=1048638 res=0 errno=0 [ 502.147968][ T8240] loop4: detected capacity change from 0 to 16 [ 502.156956][ T8240] erofs (device loop4): mounted with root inode @ nid 36. [ 502.484681][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 503.652176][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 503.952914][ T8262] loop4: detected capacity change from 0 to 64 [ 503.958845][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 504.012807][ T8262] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 504.389698][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 505.145085][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.196160][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.209115][ T8046] bridge_slave_0: entered allmulticast mode [ 505.217111][ T8046] bridge_slave_0: entered promiscuous mode [ 505.268503][ T8279] loop4: detected capacity change from 0 to 256 [ 505.315744][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.353035][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.395560][ T8085] bridge_slave_0: entered allmulticast mode [ 505.398144][ T8279] FAT-fs (loop4): Directory bread(block 64) failed [ 505.404181][ T8085] bridge_slave_0: entered promiscuous mode [ 505.417218][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.425564][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.431805][ T8279] FAT-fs (loop4): Directory bread(block 65) failed [ 505.432873][ T8085] bridge_slave_1: entered allmulticast mode [ 505.447982][ T8085] bridge_slave_1: entered promiscuous mode [ 505.455391][ T8279] FAT-fs (loop4): Directory bread(block 66) failed [ 505.463752][ T8279] FAT-fs (loop4): Directory bread(block 67) failed [ 505.479210][ T8279] FAT-fs (loop4): Directory bread(block 68) failed [ 505.486435][ T8279] FAT-fs (loop4): Directory bread(block 69) failed [ 505.494717][ T8279] FAT-fs (loop4): Directory bread(block 70) failed [ 505.502202][ T8279] FAT-fs (loop4): Directory bread(block 71) failed [ 505.527510][ T8279] FAT-fs (loop4): Directory bread(block 72) failed [ 505.539702][ T8279] FAT-fs (loop4): Directory bread(block 73) failed [ 506.083409][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.324534][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.338974][ T8046] bridge_slave_1: entered allmulticast mode [ 507.687626][ T8046] bridge_slave_1: entered promiscuous mode [ 507.852150][ T8297] loop5: detected capacity change from 0 to 64 [ 507.950622][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.963727][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.009180][ T8297] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 508.173178][ T8085] team0: Port device team_slave_0 added [ 508.183337][ T8085] team0: Port device team_slave_1 added [ 510.880711][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 510.919811][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.957559][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.973066][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.987889][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.999787][ T8323] loop4: detected capacity change from 0 to 16 [ 511.005240][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.012371][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.023552][ T8323] erofs (device loop4): mounted with root inode @ nid 36. [ 511.038984][ T8140] bridge_slave_0: entered allmulticast mode [ 511.041529][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 511.091870][ T8140] bridge_slave_0: entered promiscuous mode [ 511.114828][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.136137][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.177502][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.231593][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 511.249364][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.285651][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.348404][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.481370][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.499049][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.506239][ T8099] bridge_slave_0: entered allmulticast mode [ 511.517666][ T8099] bridge_slave_0: entered promiscuous mode [ 511.567377][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.574779][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.582917][ T8140] bridge_slave_1: entered allmulticast mode [ 511.591820][ T8140] bridge_slave_1: entered promiscuous mode [ 511.675211][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.694682][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.712166][ T8099] bridge_slave_1: entered allmulticast mode [ 511.732697][ T8099] bridge_slave_1: entered promiscuous mode [ 511.912197][ T8085] hsr_slave_0: entered promiscuous mode [ 511.921213][ T8085] hsr_slave_1: entered promiscuous mode [ 511.927626][ T8085] debugfs: 'hsr0' already exists in 'hsr' [ 512.899668][ T8085] Cannot create hsr debugfs directory [ 513.095000][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.219815][ T8046] team0: Port device team_slave_0 added [ 513.241904][ T8046] team0: Port device team_slave_1 added [ 513.734152][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.778424][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.822825][ T8347] loop5: detected capacity change from 0 to 64 [ 513.893328][ T8347] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 514.232088][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.276941][ T30] audit: type=1800 audit(1761117029.611:72): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.442" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 515.688818][ T30] audit: type=1800 audit(1761117029.611:73): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.442" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 515.846090][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.861055][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.924037][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.957806][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.974570][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.041023][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.999713][ T8099] team0: Port device team_slave_0 added [ 517.751872][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 517.771986][ T8099] team0: Port device team_slave_1 added [ 518.565018][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 518.572697][ T8140] team0: Port device team_slave_0 added [ 518.712389][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.735539][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.777938][ T8099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.846876][ T8384] loop5: detected capacity change from 0 to 16 [ 518.860049][ T8384] erofs (device loop5): mounted with root inode @ nid 36. [ 519.073278][ T8140] team0: Port device team_slave_1 added [ 519.180964][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.207951][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.248345][ T8099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.374094][ T8046] hsr_slave_0: entered promiscuous mode [ 519.439360][ T8046] hsr_slave_1: entered promiscuous mode [ 519.571268][ T8046] debugfs: 'hsr0' already exists in 'hsr' [ 519.594230][ T8046] Cannot create hsr debugfs directory [ 520.269761][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.318700][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.452901][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.516362][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.864974][ T8407] loop4: detected capacity change from 0 to 64 [ 520.883411][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.909355][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.277496][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.289744][ T8407] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 521.677833][ T8413] loop5: detected capacity change from 0 to 64 [ 521.695212][ T8413] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 521.764555][ T8414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.453'. [ 522.435391][ T8418] netlink: 68 bytes leftover after parsing attributes in process `syz.5.454'. [ 523.152095][ T8099] hsr_slave_0: entered promiscuous mode [ 523.228471][ T8099] hsr_slave_1: entered promiscuous mode [ 523.265468][ T8099] debugfs: 'hsr0' already exists in 'hsr' [ 523.277370][ T8099] Cannot create hsr debugfs directory [ 524.560129][ T8435] loop5: detected capacity change from 0 to 16 [ 524.589414][ T8435] erofs (device loop5): mounted with root inode @ nid 36. [ 524.824504][ T8140] hsr_slave_0: entered promiscuous mode [ 524.840628][ T8140] hsr_slave_1: entered promiscuous mode [ 524.849910][ T8140] debugfs: 'hsr0' already exists in 'hsr' [ 524.856067][ T8140] Cannot create hsr debugfs directory [ 524.867194][ T8442] loop5: detected capacity change from 0 to 256 [ 524.951639][ T8442] FAT-fs (loop5): Directory bread(block 64) failed [ 524.969912][ T8442] FAT-fs (loop5): Directory bread(block 65) failed [ 524.976533][ T8442] FAT-fs (loop5): Directory bread(block 66) failed [ 524.986955][ T8442] FAT-fs (loop5): Directory bread(block 67) failed [ 525.043303][ T8442] FAT-fs (loop5): Directory bread(block 68) failed [ 525.051154][ T8442] FAT-fs (loop5): Directory bread(block 69) failed [ 525.057873][ T8442] FAT-fs (loop5): Directory bread(block 70) failed [ 525.064601][ T8442] FAT-fs (loop5): Directory bread(block 71) failed [ 525.071316][ T8442] FAT-fs (loop5): Directory bread(block 72) failed [ 525.077983][ T8442] FAT-fs (loop5): Directory bread(block 73) failed [ 525.142427][ T30] audit: type=1800 audit(1761117039.621:74): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.459" name="bus" dev="loop5" ino=1048640 res=0 errno=0 [ 529.021577][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 529.030473][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 529.038103][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 529.046362][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 529.054397][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 530.131686][ T8085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.164684][ T8085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.246710][ T8085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.262498][ T8085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 531.118766][ T5142] Bluetooth: hci6: command tx timeout [ 532.762277][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.457073][ T5142] Bluetooth: hci6: command tx timeout [ 534.030579][ T8472] chnl_net:caif_netlink_parms(): no params data found [ 534.300872][ T13] bridge_slave_1: left allmulticast mode [ 534.319797][ T13] bridge_slave_1: left promiscuous mode [ 534.325606][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.459984][ T13] bridge_slave_0: left allmulticast mode [ 534.460164][ T8522] loop4: detected capacity change from 0 to 16 [ 534.472409][ T13] bridge_slave_0: left promiscuous mode [ 534.478179][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.570458][ T8522] erofs (device loop4): mounted with root inode @ nid 36. [ 534.595837][ T13] bridge_slave_1: left allmulticast mode [ 534.632418][ T13] bridge_slave_1: left promiscuous mode [ 534.683331][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.771899][ T13] bridge_slave_0: left allmulticast mode [ 534.806230][ T13] bridge_slave_0: left promiscuous mode [ 534.820983][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.876606][ T13] bridge_slave_1: left allmulticast mode [ 534.885290][ T13] bridge_slave_1: left promiscuous mode [ 535.148262][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.161291][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.172543][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.180973][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.189916][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.191402][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.221569][ T13] bridge_slave_0: left allmulticast mode [ 535.227286][ T13] bridge_slave_0: left promiscuous mode [ 535.233269][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.095008][ T5851] Bluetooth: hci6: command tx timeout [ 536.181897][ T13] bridge_slave_1: left allmulticast mode [ 536.243768][ T13] bridge_slave_1: left promiscuous mode [ 536.269100][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.319038][ T13] bridge_slave_0: left allmulticast mode [ 536.334903][ T13] bridge_slave_0: left promiscuous mode [ 536.342557][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.378892][ T5851] Bluetooth: hci0: command tx timeout [ 538.299689][ T5851] Bluetooth: hci6: command tx timeout [ 538.546376][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.555996][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.564572][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.573233][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.586546][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.911695][ T5851] Bluetooth: hci0: command tx timeout [ 540.095189][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.697644][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.715239][ T13] bond0 (unregistering): Released all slaves [ 540.984634][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.002805][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.013164][ T13] bond0 (unregistering): Released all slaves [ 541.123648][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.134785][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.145909][ T13] bond0 (unregistering): Released all slaves [ 541.308029][ T8558] loop4: detected capacity change from 0 to 256 [ 541.354080][ T8558] FAT-fs (loop4): Directory bread(block 64) failed [ 541.370938][ T8558] FAT-fs (loop4): Directory bread(block 65) failed [ 541.378272][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.378351][ T8558] FAT-fs (loop4): Directory bread(block 66) failed [ 541.416655][ T8558] FAT-fs (loop4): Directory bread(block 67) failed [ 541.423709][ T8558] FAT-fs (loop4): Directory bread(block 68) failed [ 541.426791][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.438101][ T8558] FAT-fs (loop4): Directory bread(block 69) failed [ 541.481606][ T8558] FAT-fs (loop4): Directory bread(block 70) failed [ 541.500122][ T8558] FAT-fs (loop4): Directory bread(block 71) failed [ 541.507804][ T8558] FAT-fs (loop4): Directory bread(block 72) failed [ 541.529597][ T8558] FAT-fs (loop4): Directory bread(block 73) failed [ 541.563710][ T13] bond0 (unregistering): Released all slaves [ 541.969438][ T5851] Bluetooth: hci0: command tx timeout [ 541.976566][ T5142] Bluetooth: hci2: command tx timeout [ 542.127996][ T30] audit: type=1800 audit(1761117056.601:75): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.474" name="bus" dev="loop4" ino=1048642 res=0 errno=0 [ 542.346488][ T8566] loop5: detected capacity change from 0 to 256 [ 542.427827][ T8566] FAT-fs (loop5): Directory bread(block 64) failed [ 542.455444][ T8566] FAT-fs (loop5): Directory bread(block 65) failed [ 542.468801][ T8566] FAT-fs (loop5): Directory bread(block 66) failed [ 542.475418][ T8566] FAT-fs (loop5): Directory bread(block 67) failed [ 542.500579][ T8566] FAT-fs (loop5): Directory bread(block 68) failed [ 542.507115][ T8566] FAT-fs (loop5): Directory bread(block 69) failed [ 542.532611][ T8566] FAT-fs (loop5): Directory bread(block 70) failed [ 542.544061][ T8566] FAT-fs (loop5): Directory bread(block 71) failed [ 542.551820][ T8566] FAT-fs (loop5): Directory bread(block 72) failed [ 542.562137][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.571448][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.571642][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.578718][ T8566] FAT-fs (loop5): Directory bread(block 73) failed [ 542.594030][ T8472] bridge_slave_0: entered allmulticast mode [ 542.594101][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.604970][ T8472] bridge_slave_0: entered promiscuous mode [ 542.613160][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.630912][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.639325][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.652441][ T13] hsr_slave_0: left promiscuous mode [ 542.659850][ T13] hsr_slave_1: left promiscuous mode [ 542.665973][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.690734][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.724651][ T13] hsr_slave_0: left promiscuous mode [ 542.732220][ T13] hsr_slave_1: left promiscuous mode [ 542.738420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.761044][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.785245][ T13] hsr_slave_0: left promiscuous mode [ 542.799725][ T13] hsr_slave_1: left promiscuous mode [ 542.811250][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.834638][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.855631][ T13] hsr_slave_0: left promiscuous mode [ 542.868903][ T13] hsr_slave_1: left promiscuous mode [ 542.875127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.893504][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.444110][ T13] team0 (unregistering): Port device team_slave_1 removed [ 543.563520][ T13] team0 (unregistering): Port device team_slave_0 removed [ 544.537406][ T5851] Bluetooth: hci0: command tx timeout [ 544.542918][ T5142] Bluetooth: hci2: command tx timeout [ 544.707511][ T5851] Bluetooth: hci7: command tx timeout [ 546.950012][ T5851] Bluetooth: hci2: command tx timeout [ 546.950013][ T5142] Bluetooth: hci7: command tx timeout [ 548.662148][ T13] team0 (unregistering): Port device team_slave_1 removed [ 548.982599][ T13] team0 (unregistering): Port device team_slave_0 removed [ 548.998971][ T5142] Bluetooth: hci2: command tx timeout [ 549.004613][ T5851] Bluetooth: hci7: command tx timeout [ 550.173861][ T8601] loop4: detected capacity change from 0 to 64 [ 550.185216][ T8601] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 550.513998][ T13] team0 (unregistering): Port device team_slave_1 removed [ 550.539409][ T13] team0 (unregistering): Port device team_slave_0 removed [ 550.626558][ T8603] netlink: 68 bytes leftover after parsing attributes in process `syz.4.485'. [ 551.078752][ T5851] Bluetooth: hci7: command tx timeout [ 551.430850][ T13] team0 (unregistering): Port device team_slave_1 removed [ 551.457159][ T13] team0 (unregistering): Port device team_slave_0 removed [ 551.630008][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.637411][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.645547][ T8472] bridge_slave_1: entered allmulticast mode [ 551.655627][ T8472] bridge_slave_1: entered promiscuous mode [ 551.750746][ T8472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.765771][ T8472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.905914][ T8472] team0: Port device team_slave_0 added [ 551.924962][ T8472] team0: Port device team_slave_1 added [ 552.073714][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.087052][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.116182][ T8472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.195852][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.226281][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.258074][ T8472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.514973][ T8472] hsr_slave_0: entered promiscuous mode [ 552.524714][ T8472] hsr_slave_1: entered promiscuous mode [ 552.531700][ T8472] debugfs: 'hsr0' already exists in 'hsr' [ 552.537455][ T8472] Cannot create hsr debugfs directory [ 553.014492][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 553.095439][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 553.429479][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 553.602157][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.609966][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.617163][ T8545] bridge_slave_0: entered allmulticast mode [ 553.627953][ T8545] bridge_slave_0: entered promiscuous mode [ 553.637276][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.650325][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.657558][ T8545] bridge_slave_1: entered allmulticast mode [ 553.667436][ T8545] bridge_slave_1: entered promiscuous mode [ 553.801430][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.809884][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.817425][ T8529] bridge_slave_0: entered allmulticast mode [ 553.831338][ T8529] bridge_slave_0: entered promiscuous mode [ 553.867741][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.940660][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.947814][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.956857][ T8529] bridge_slave_1: entered allmulticast mode [ 553.965461][ T8529] bridge_slave_1: entered promiscuous mode [ 554.016767][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.030374][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.037600][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.046045][ T8567] bridge_slave_0: entered allmulticast mode [ 554.054374][ T8567] bridge_slave_0: entered promiscuous mode [ 554.064380][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.072026][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.079483][ T8567] bridge_slave_1: entered allmulticast mode [ 554.087544][ T8567] bridge_slave_1: entered promiscuous mode [ 554.118430][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.176701][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.220363][ T8545] team0: Port device team_slave_0 added [ 554.290655][ T8545] team0: Port device team_slave_1 added [ 554.315673][ T8529] team0: Port device team_slave_0 added [ 554.332513][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.374293][ T8529] team0: Port device team_slave_1 added [ 554.380544][ T8472] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 554.391623][ T8472] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 554.405283][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.449343][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.456298][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.482678][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.526662][ T8472] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 554.537358][ T8472] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 554.553990][ T8567] team0: Port device team_slave_0 added [ 554.563024][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.570126][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.596303][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.608154][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.616197][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.643460][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.657297][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.664290][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.690243][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.705802][ T8567] team0: Port device team_slave_1 added [ 554.801434][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.808405][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.838097][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.905892][ T8529] hsr_slave_0: entered promiscuous mode [ 554.912717][ T8529] hsr_slave_1: entered promiscuous mode [ 554.919089][ T8529] debugfs: 'hsr0' already exists in 'hsr' [ 554.924831][ T8529] Cannot create hsr debugfs directory [ 554.937179][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.945832][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.972372][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.997390][ T8545] hsr_slave_0: entered promiscuous mode [ 555.006482][ T8545] hsr_slave_1: entered promiscuous mode [ 555.012931][ T8545] debugfs: 'hsr0' already exists in 'hsr' [ 555.019899][ T8545] Cannot create hsr debugfs directory [ 555.208279][ T8567] hsr_slave_0: entered promiscuous mode [ 555.217331][ T8567] hsr_slave_1: entered promiscuous mode [ 555.224042][ T8567] debugfs: 'hsr0' already exists in 'hsr' [ 555.230846][ T8567] Cannot create hsr debugfs directory [ 555.656961][ T7011] bridge_slave_1: left allmulticast mode [ 555.662938][ T7011] bridge_slave_1: left promiscuous mode [ 555.668952][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.678317][ T7011] bridge_slave_0: left allmulticast mode [ 555.684367][ T7011] bridge_slave_0: left promiscuous mode [ 555.690974][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.703512][ T7011] bridge_slave_1: left allmulticast mode [ 555.709270][ T7011] bridge_slave_1: left promiscuous mode [ 555.715076][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.726109][ T7011] bridge_slave_0: left allmulticast mode [ 555.731786][ T7011] bridge_slave_0: left promiscuous mode [ 555.737478][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.750358][ T7011] bridge_slave_1: left allmulticast mode [ 555.755985][ T7011] bridge_slave_1: left promiscuous mode [ 555.764216][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.773351][ T7011] bridge_slave_0: left allmulticast mode [ 555.779050][ T7011] bridge_slave_0: left promiscuous mode [ 555.784747][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.796287][ T7011] bridge_slave_1: left allmulticast mode [ 555.801971][ T7011] bridge_slave_1: left promiscuous mode [ 555.807665][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.817416][ T7011] bridge_slave_0: left allmulticast mode [ 555.823086][ T7011] bridge_slave_0: left promiscuous mode [ 555.830525][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.374723][ T8659] loop4: detected capacity change from 0 to 40427 [ 556.710018][ T8659] F2FS-fs (loop4): invalid crc value [ 556.849412][ T8659] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 556.859444][ T8659] F2FS-fs (loop4): Start checkpoint disabled! [ 556.868121][ T8659] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 556.878058][ T8659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 556.904100][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.924253][ T30] audit: type=1800 audit(1761117071.401:76): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.486" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 557.325157][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 557.334066][ T8668] netlink: 348 bytes leftover after parsing attributes in process `syz.4.486'. [ 557.343095][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 557.351889][ T8668] netlink: 348 bytes leftover after parsing attributes in process `syz.4.486'. [ 557.361013][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 558.216814][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.470548][ T7011] bond0 (unregistering): Released all slaves [ 559.489159][ T1155] bio_check_eod: 176 callbacks suppressed [ 559.489182][ T1155] kworker/u8:6: attempt to access beyond end of device [ 559.489182][ T1155] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 559.528711][ T1155] CPU: 0 UID: 0 PID: 1155 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 559.528758][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 559.528784][ T1155] Workqueue: writeback wb_workfn (flush-7:4) [ 559.528833][ T1155] Call Trace: [ 559.528845][ T1155] [ 559.528858][ T1155] dump_stack_lvl+0x16c/0x1f0 [ 559.528909][ T1155] f2fs_handle_critical_error+0x624/0x9f0 [ 559.528968][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.529013][ T1155] ? f2fs_build_fault_attr+0x53/0x1f0 [ 559.529072][ T1155] f2fs_write_end_io+0x958/0xcf0 [ 559.529135][ T1155] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 559.529200][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.529258][ T1155] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 559.529315][ T1155] bio_endio+0x713/0x860 [ 559.529358][ T1155] submit_bio_noacct+0x306/0x1f60 [ 559.529424][ T1155] __submit_merged_bio+0x33c/0x770 [ 559.529490][ T1155] __submit_merged_write_cond+0x319/0x3f0 [ 559.529567][ T1155] f2fs_write_cache_pages+0x2067/0x2570 [ 559.529639][ T1155] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 559.529683][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.529729][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.529774][ T1155] ? find_held_lock+0x2b/0x80 [ 559.529811][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.529862][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.529906][ T1155] ? do_raw_spin_unlock+0x172/0x230 [ 559.529983][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.530027][ T1155] ? f2fs_available_free_memory+0x279/0xa30 [ 559.530151][ T1155] ? __lock_acquire+0x1053/0x1c90 [ 559.530204][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.530258][ T1155] f2fs_write_data_pages+0x4ad/0xd90 [ 559.530307][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 559.530360][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.530404][ T1155] ? __lock_acquire+0xb8a/0x1c90 [ 559.530453][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 559.530496][ T1155] do_writepages+0x27a/0x600 [ 559.530560][ T1155] ? __pfx_do_writepages+0x10/0x10 [ 559.530610][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.530655][ T1155] ? reacquire_held_locks+0xcd/0x1f0 [ 559.530703][ T1155] ? writeback_sb_inodes+0x3b0/0xfa0 [ 559.530772][ T1155] __writeback_single_inode+0x160/0xfb0 [ 559.530840][ T1155] ? __pfx___writeback_single_inode+0x10/0x10 [ 559.530902][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.530947][ T1155] ? do_raw_spin_unlock+0x172/0x230 [ 559.531004][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.531057][ T1155] writeback_sb_inodes+0x60d/0xfa0 [ 559.531146][ T1155] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 559.531208][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.531253][ T1155] ? mark_held_locks+0x49/0x80 [ 559.531371][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.531415][ T1155] ? rcu_is_watching+0x12/0xc0 [ 559.531451][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.531495][ T1155] ? queue_io+0x3f6/0x520 [ 559.531560][ T1155] wb_writeback+0x419/0xb70 [ 559.531634][ T1155] ? __pfx_wb_writeback+0x10/0x10 [ 559.531693][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.531751][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.531795][ T1155] ? mark_held_locks+0x49/0x80 [ 559.531850][ T1155] wb_workfn+0x14d/0xbe0 [ 559.531890][ T1155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 559.531941][ T1155] ? __pfx_wb_workfn+0x10/0x10 [ 559.531982][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.532033][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.532085][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.532130][ T1155] ? rcu_is_watching+0x12/0xc0 [ 559.532174][ T1155] process_one_work+0x9cf/0x1b70 [ 559.532253][ T1155] ? __pfx_process_one_work+0x10/0x10 [ 559.532310][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.532368][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.532413][ T1155] ? assign_work+0x1a0/0x250 [ 559.532471][ T1155] worker_thread+0x6c8/0xf10 [ 559.532563][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 559.532620][ T1155] kthread+0x3c5/0x780 [ 559.532673][ T1155] ? __pfx_kthread+0x10/0x10 [ 559.532727][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 559.532772][ T1155] ? rcu_is_watching+0x12/0xc0 [ 559.532809][ T1155] ? __pfx_kthread+0x10/0x10 [ 559.532863][ T1155] ret_from_fork+0x675/0x7d0 [ 559.532910][ T1155] ? __pfx_kthread+0x10/0x10 [ 559.532962][ T1155] ret_from_fork_asm+0x1a/0x30 [ 559.533034][ T1155] [ 559.963076][ T1155] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 560.401348][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.412021][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.422512][ T7011] bond0 (unregistering): Released all slaves [ 561.041192][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.104651][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.122439][ T7011] bond0 (unregistering): Released all slaves [ 563.555766][ T8688] loop4: detected capacity change from 0 to 64 [ 563.569834][ T8688] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 565.418085][ T7011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.705035][ T7011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.715930][ T7011] bond0 (unregistering): Released all slaves [ 567.457712][ T8472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.742837][ T8472] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.930434][ T8472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.962177][ T8472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.981300][ T8707] loop5: detected capacity change from 0 to 256 [ 568.071056][ T8707] FAT-fs (loop5): Directory bread(block 64) failed [ 568.097988][ T8707] FAT-fs (loop5): Directory bread(block 65) failed [ 568.105938][ T8705] loop4: detected capacity change from 0 to 40427 [ 568.111592][ T8707] FAT-fs (loop5): Directory bread(block 66) failed [ 568.122219][ T8705] F2FS-fs (loop4): invalid crc value [ 568.136426][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.143628][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.154855][ T8707] FAT-fs (loop5): Directory bread(block 67) failed [ 568.162641][ T8707] FAT-fs (loop5): Directory bread(block 68) failed [ 568.200794][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.207957][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.246261][ T8705] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 568.260228][ T8705] F2FS-fs (loop4): Start checkpoint disabled! [ 568.261417][ T8707] FAT-fs (loop5): Directory bread(block 69) failed [ 568.268033][ T8705] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 568.291472][ T8707] FAT-fs (loop5): Directory bread(block 70) failed [ 568.298013][ T8707] FAT-fs (loop5): Directory bread(block 71) failed [ 568.304680][ T8705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 568.314896][ T8707] FAT-fs (loop5): Directory bread(block 72) failed [ 568.323099][ T8707] FAT-fs (loop5): Directory bread(block 73) failed [ 568.336325][ T30] audit: type=1800 audit(1761117082.811:77): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.498" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 568.369632][ T7011] hsr_slave_0: left promiscuous mode [ 568.375824][ T7011] hsr_slave_1: left promiscuous mode [ 568.382824][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.411611][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.436397][ T7011] hsr_slave_0: left promiscuous mode [ 568.482455][ T7011] hsr_slave_1: left promiscuous mode [ 568.503961][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.544898][ T30] audit: type=1800 audit(1761117083.021:78): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.497" name="bus" dev="loop5" ino=1048644 res=0 errno=0 [ 568.576637][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.624018][ T7011] hsr_slave_0: left promiscuous mode [ 568.648481][ T7011] hsr_slave_1: left promiscuous mode [ 568.656268][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.664298][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.679229][ T7011] hsr_slave_0: left promiscuous mode [ 568.685454][ T7011] hsr_slave_1: left promiscuous mode [ 568.703006][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.730212][ T7011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.753612][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 568.762582][ T8715] netlink: 348 bytes leftover after parsing attributes in process `syz.4.498'. [ 568.771658][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 568.780533][ T8715] netlink: 348 bytes leftover after parsing attributes in process `syz.4.498'. [ 568.790074][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 569.308868][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 569.337847][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 569.376199][ T13] kworker/u8:1: attempt to access beyond end of device [ 569.376199][ T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 569.443544][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 569.443591][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.443616][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 569.443662][ T13] Call Trace: [ 569.443673][ T13] [ 569.443687][ T13] dump_stack_lvl+0x16c/0x1f0 [ 569.443738][ T13] f2fs_handle_critical_error+0x624/0x9f0 [ 569.443799][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.443846][ T13] ? f2fs_build_fault_attr+0x53/0x1f0 [ 569.443903][ T13] f2fs_write_end_io+0x958/0xcf0 [ 569.443966][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 569.444030][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.444086][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 569.444142][ T13] bio_endio+0x713/0x860 [ 569.444184][ T13] submit_bio_noacct+0x306/0x1f60 [ 569.444248][ T13] __submit_merged_bio+0x33c/0x770 [ 569.444311][ T13] __submit_merged_write_cond+0x319/0x3f0 [ 569.444382][ T13] f2fs_write_cache_pages+0x2067/0x2570 [ 569.444448][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 569.444492][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.444537][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.444583][ T13] ? find_held_lock+0x2b/0x80 [ 569.444621][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.444671][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.444717][ T13] ? do_raw_spin_unlock+0x172/0x230 [ 569.444795][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.444840][ T13] ? f2fs_available_free_memory+0x279/0xa30 [ 569.444952][ T13] ? __lock_acquire+0xb8a/0x1c90 [ 569.445003][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.445057][ T13] f2fs_write_data_pages+0x4ad/0xd90 [ 569.445104][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 569.445155][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.445199][ T13] ? __lock_acquire+0xb8a/0x1c90 [ 569.445248][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 569.445290][ T13] do_writepages+0x27a/0x600 [ 569.445350][ T13] ? __pfx_do_writepages+0x10/0x10 [ 569.445401][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.445447][ T13] ? reacquire_held_locks+0xcd/0x1f0 [ 569.445495][ T13] ? writeback_sb_inodes+0x3b0/0xfa0 [ 569.445564][ T13] __writeback_single_inode+0x160/0xfb0 [ 569.445631][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 569.445694][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.445739][ T13] ? do_raw_spin_unlock+0x172/0x230 [ 569.445801][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.445853][ T13] writeback_sb_inodes+0x60d/0xfa0 [ 569.445938][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 569.445999][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446044][ T13] ? find_held_lock+0x2b/0x80 [ 569.446141][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446187][ T13] ? rcu_is_watching+0x12/0xc0 [ 569.446223][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446268][ T13] ? queue_io+0x3f6/0x520 [ 569.446328][ T13] wb_writeback+0x419/0xb70 [ 569.446400][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 569.446459][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446517][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446561][ T13] ? mark_held_locks+0x49/0x80 [ 569.446616][ T13] wb_workfn+0x14d/0xbe0 [ 569.446657][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.446708][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 569.446748][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446802][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446854][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.446899][ T13] ? rcu_is_watching+0x12/0xc0 [ 569.446943][ T13] process_one_work+0x9cf/0x1b70 [ 569.447018][ T13] ? __pfx_process_one_work+0x10/0x10 [ 569.447075][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.447132][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.447177][ T13] ? assign_work+0x1a0/0x250 [ 569.447234][ T13] worker_thread+0x6c8/0xf10 [ 569.447311][ T13] ? __pfx_worker_thread+0x10/0x10 [ 569.447367][ T13] kthread+0x3c5/0x780 [ 569.447420][ T13] ? __pfx_kthread+0x10/0x10 [ 569.447477][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 569.447523][ T13] ? rcu_is_watching+0x12/0xc0 [ 569.447560][ T13] ? __pfx_kthread+0x10/0x10 [ 569.447614][ T13] ret_from_fork+0x675/0x7d0 [ 569.447661][ T13] ? __pfx_kthread+0x10/0x10 [ 569.447713][ T13] ret_from_fork_asm+0x1a/0x30 [ 569.447783][ T13] [ 569.887638][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 570.325689][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 570.450040][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 571.576966][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 571.613486][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 572.469377][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.475716][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.743155][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 575.923284][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 577.099285][ T5142] Bluetooth: hci7: command 0x0405 tx timeout [ 577.743055][ T8529] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 577.792379][ T8529] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 577.815769][ T8529] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 577.836738][ T8529] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 578.473054][ T8472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.576930][ T8766] loop4: detected capacity change from 0 to 256 [ 578.727060][ T8545] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 578.773732][ T8766] FAT-fs (loop4): Directory bread(block 64) failed [ 578.795343][ T8766] FAT-fs (loop4): Directory bread(block 65) failed [ 578.802518][ T8545] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 578.811190][ T8766] FAT-fs (loop4): Directory bread(block 66) failed [ 578.835091][ T8545] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 578.843126][ T8766] FAT-fs (loop4): Directory bread(block 67) failed [ 578.851125][ T8766] FAT-fs (loop4): Directory bread(block 68) failed [ 578.882719][ T8545] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 578.893259][ T8766] FAT-fs (loop4): Directory bread(block 69) failed [ 578.911299][ T8766] FAT-fs (loop4): Directory bread(block 70) failed [ 578.917929][ T8766] FAT-fs (loop4): Directory bread(block 71) failed [ 578.925023][ T8766] FAT-fs (loop4): Directory bread(block 72) failed [ 578.932199][ T8766] FAT-fs (loop4): Directory bread(block 73) failed [ 579.151664][ T30] audit: type=1800 audit(1761117093.601:79): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.508" name="bus" dev="loop4" ino=1048646 res=0 errno=0 [ 579.954114][ T8567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 579.994306][ T8567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 580.127269][ T8567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 580.179230][ T8567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 580.214277][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.543171][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.283654][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.350705][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.357871][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.389679][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.396838][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.540177][ T8795] loop5: detected capacity change from 0 to 64 [ 581.552662][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.584211][ T8795] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 581.595370][ T8472] veth0_vlan: entered promiscuous mode [ 581.886789][ T8529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.898821][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.936593][ T8472] veth1_vlan: entered promiscuous mode [ 582.422276][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.429476][ T6458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.470149][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.477319][ T6458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.826792][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.956450][ T8545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.974139][ T8545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.106286][ T8472] veth0_macvtap: entered promiscuous mode [ 583.876788][ T8472] veth1_macvtap: entered promiscuous mode [ 583.933092][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.992060][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.229637][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.236832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.302271][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.309449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.356632][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.377476][ T8472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.387392][ T8813] delete_channel: no stack [ 585.121734][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.152943][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.272565][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.309207][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.640812][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.747188][ T7011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.769382][ T7011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.912260][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.940306][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.024287][ T8529] veth0_vlan: entered promiscuous mode [ 586.102501][ T8529] veth1_vlan: entered promiscuous mode [ 586.247812][ T8529] veth0_macvtap: entered promiscuous mode [ 586.320792][ T8529] veth1_macvtap: entered promiscuous mode [ 586.348506][ T8846] loop9: detected capacity change from 0 to 256 [ 586.405781][ T8847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.411779][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.493232][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.508059][ T8846] FAT-fs (loop9): Directory bread(block 64) failed [ 586.527385][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.521'. [ 586.530859][ T8846] FAT-fs (loop9): Directory bread(block 65) failed [ 586.569240][ T8846] FAT-fs (loop9): Directory bread(block 66) failed [ 586.576458][ T8846] FAT-fs (loop9): Directory bread(block 67) failed [ 586.583656][ T8846] FAT-fs (loop9): Directory bread(block 68) failed [ 586.590569][ T8846] FAT-fs (loop9): Directory bread(block 69) failed [ 586.597250][ T8846] FAT-fs (loop9): Directory bread(block 70) failed [ 586.640910][ T8846] FAT-fs (loop9): Directory bread(block 71) failed [ 586.647533][ T8846] FAT-fs (loop9): Directory bread(block 72) failed [ 586.686768][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.708704][ T8846] FAT-fs (loop9): Directory bread(block 73) failed [ 586.731434][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.521'. [ 586.792187][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.811981][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.970024][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.092499][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.240668][ T30] audit: type=1800 audit(1761117101.641:80): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.333" name="bus" dev="loop9" ino=1048653 res=0 errno=0 [ 587.291192][ T8859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.524'. [ 587.763116][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.786316][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.830508][ T8868] syz.5.525 uses obsolete (PF_INET,SOCK_PACKET) [ 587.882152][ T8545] veth0_vlan: entered promiscuous mode [ 588.004675][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.302184][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.313113][ T8545] veth1_vlan: entered promiscuous mode [ 588.333224][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.496274][ T8889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 588.575445][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 588.624161][ T8891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.705357][ T8889] bridge_slave_1: left allmulticast mode [ 588.748643][ T8889] bridge_slave_1: left promiscuous mode [ 588.765116][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.798924][ T8889] bridge_slave_0: left allmulticast mode [ 588.828577][ T8889] bridge_slave_0: left promiscuous mode [ 588.834567][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.327663][ T8545] veth0_macvtap: entered promiscuous mode [ 589.448942][ T8907] netlink: 'syz.9.536': attribute type 1 has an invalid length. [ 589.473969][ T8907] netlink: 228 bytes leftover after parsing attributes in process `syz.9.536'. [ 590.429456][ T8915] netlink: 'syz.9.538': attribute type 25 has an invalid length. [ 590.445562][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.9.538'. [ 590.492292][ T8545] veth1_macvtap: entered promiscuous mode [ 590.575093][ T8567] veth0_vlan: entered promiscuous mode [ 590.719515][ T8924] netlink: 'syz.5.541': attribute type 1 has an invalid length. [ 590.728253][ T8924] netlink: 228 bytes leftover after parsing attributes in process `syz.5.541'. [ 590.794941][ T8567] veth1_vlan: entered promiscuous mode [ 590.837964][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.885812][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.993065][ T7011] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.021817][ T7011] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.100156][ T7011] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.123596][ T7011] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.295203][ T8567] veth0_macvtap: entered promiscuous mode [ 591.372679][ T8567] veth1_macvtap: entered promiscuous mode [ 591.430255][ T8944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.553535][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.580796][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.621678][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.682246][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.797615][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'. [ 591.823660][ T8950] netlink: zone id is out of range [ 591.834631][ T8950] netlink: zone id is out of range [ 591.845382][ T8950] netlink: zone id is out of range [ 591.875051][ T8950] netlink: zone id is out of range [ 591.999855][ T7011] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.020204][ T7011] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.111262][ T7011] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.197119][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.243592][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.290879][ T7011] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.560605][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.568023][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.708300][ T8962] bridge_slave_0: left allmulticast mode [ 592.720406][ T8962] bridge_slave_0: left promiscuous mode [ 592.726204][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.769428][ T8962] bridge_slave_1: left allmulticast mode [ 592.775135][ T8962] bridge_slave_1: left promiscuous mode [ 592.781142][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.808302][ T8962] bond0: (slave bond_slave_0): Releasing backup interface [ 592.836879][ T8962] bond0: (slave bond_slave_1): Releasing backup interface [ 592.861440][ T8962] team0: Port device team_slave_0 removed [ 592.877984][ T8962] team0: Port device team_slave_1 removed [ 592.897913][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.913017][ T8962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.939431][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.951157][ T8962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.974360][ T8962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.051088][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.092584][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.291418][ T6542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.305622][ T8981] loop7: detected capacity change from 0 to 64 [ 593.346492][ T6542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.415979][ T8981] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 593.628772][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 594.559007][ T9002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.757029][ T9013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.764435][ T9013] IPv6: NLM_F_CREATE should be set when creating new route [ 596.167768][ T9018] : entered promiscuous mode [ 596.241106][ T9027] netlink: 'syz.5.574': attribute type 1 has an invalid length. [ 596.279253][ T9027] netlink: 'syz.5.574': attribute type 3 has an invalid length. [ 596.337689][ T9027] netlink: 224 bytes leftover after parsing attributes in process `syz.5.574'. [ 596.469084][ T9031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.578788][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 596.587681][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 596.709023][ T9036] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 596.800922][ T9036] bond1 (unregistering): Released all slaves [ 597.377603][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.582'. [ 598.131395][ T9083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.232802][ T9115] warning: `syz.4.605' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 599.306329][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz.6.608'. [ 599.376046][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.608'. [ 599.752891][ T9123] bond0: (slave bond_slave_0): Releasing backup interface [ 599.810090][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.974719][ T9136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.478139][ T9154] syzkaller0: entered promiscuous mode [ 600.498823][ T9154] syzkaller0: entered allmulticast mode [ 600.912407][ T933] IPVS: starting estimator thread 0... [ 600.925181][ T9166] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 601.019653][ T9174] IPVS: using max 21 ests per chain, 50400 per kthread [ 601.178476][ T9179] syzkaller0: entered promiscuous mode [ 601.212307][ T9179] syzkaller0: entered allmulticast mode [ 601.242827][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.8.635'. [ 601.352642][ T9191] tipc: Started in network mode [ 601.363374][ T9191] tipc: Node identity ee1066474481, cluster identity 4711 [ 601.380958][ T9191] tipc: Enabled bearer , priority 0 [ 601.678219][ T9182] syzkaller0: entered promiscuous mode [ 601.707308][ T9182] syzkaller0: entered allmulticast mode [ 601.733177][ T9182] tipc: Resetting bearer [ 602.103472][ T9181] tipc: Resetting bearer [ 602.389567][ T5844] tipc: Node number set to 2861655623 [ 602.481506][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.650'. [ 602.722897][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.653'. [ 603.396364][ T9181] tipc: Disabling bearer [ 603.448800][ T9230] : entered promiscuous mode [ 603.689162][ T9242] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.912873][ T9263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 603.956216][ T9242] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.030433][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.659'. [ 604.050760][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.104575][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.160400][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.375972][ T9242] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.419758][ T9276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.457993][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.674185][ T9242] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.957318][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 605.016296][ T1155] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.038968][ T1155] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.064205][ T9292] : entered promiscuous mode [ 605.113144][ T9296] netlink: 'syz.8.672': attribute type 1 has an invalid length. [ 605.144801][ T61] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.200444][ T1155] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.762113][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'. [ 606.937771][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.8.701'. [ 606.981896][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.8.701'. [ 607.066123][ T9363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.181889][ T933] IPVS: starting estimator thread 0... [ 607.279231][ T9369] IPVS: using max 21 ests per chain, 50400 per kthread [ 607.408274][ T9374] netlink: 'syz.7.707': attribute type 1 has an invalid length. [ 607.458511][ T9374] netlink: 228 bytes leftover after parsing attributes in process `syz.7.707'. [ 608.066118][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.716'. [ 608.164013][ T9402] netlink: 'syz.7.719': attribute type 10 has an invalid length. [ 609.313201][ T9446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.649882][ T9456] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 609.673539][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.741'. [ 609.738841][ T9458] netlink: zone id is out of range [ 609.743990][ T9458] netlink: zone id is out of range [ 610.758760][ T9494] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 612.043298][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 612.058020][ T9541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 612.421244][ T9553] tipc: Started in network mode [ 612.426170][ T9553] tipc: Node identity faf11f18ce9a, cluster identity 4711 [ 612.468843][ T9553] tipc: Enabled bearer , priority 0 [ 612.514994][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 612.541545][ T9549] tipc: Disabling bearer [ 614.211487][ T9610] tipc: Started in network mode [ 614.247229][ T9610] tipc: Node identity 96c85402c2a7, cluster identity 4711 [ 614.275372][ T9610] tipc: Enabled bearer , priority 0 [ 614.403531][ T9609] tipc: Disabling bearer [ 614.500085][ T9620] netlink: 'syz.7.800': attribute type 3 has an invalid length. [ 614.570713][ T9620] netlink: 144 bytes leftover after parsing attributes in process `syz.7.800'. [ 614.602943][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.9.804'. [ 614.658758][ T9627] netlink: zone id is out of range [ 614.839878][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.806'. [ 615.077258][ T9640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.359621][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.814'. [ 615.761864][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.819'. [ 615.843643][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 616.439596][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.9.827'. [ 616.477499][ T9684] syzkaller0: entered promiscuous mode [ 616.504472][ T9684] syzkaller0: entered allmulticast mode [ 616.712398][ T9699] netlink: 'syz.7.831': attribute type 1 has an invalid length. [ 617.084473][ T9712] tipc: Enabling of bearer rejected, failed to enable media [ 617.461762][ T9723] netlink: 192 bytes leftover after parsing attributes in process `syz.9.839'. [ 617.859626][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.847'. [ 618.267132][ T9754] tipc: Enabling of bearer rejected, failed to enable media [ 618.729384][ T9775] netlink: 192 bytes leftover after parsing attributes in process `syz.8.858'. [ 618.761171][ T9779] netlink: 'syz.6.861': attribute type 1 has an invalid length. [ 619.428951][ T9801] openvswitch: netlink: Flow key attr not present in new flow. [ 619.892567][ T9818] __nla_validate_parse: 4 callbacks suppressed [ 619.892593][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.877'. [ 620.292427][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.881'. [ 620.700256][ T9844] lo: entered allmulticast mode [ 620.716568][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.889'. [ 620.733039][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.789255][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.889'. [ 620.918784][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.7.891'. [ 620.927671][ T9853] openvswitch: netlink: Flow actions attr not present in new flow. [ 621.139090][ T9859] netlink: 192 bytes leftover after parsing attributes in process `syz.9.894'. [ 621.468223][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 622.040316][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.907'. [ 622.053304][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 622.118823][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.9.909'. [ 622.159914][ T9898] openvswitch: netlink: Flow actions attr not present in new flow. [ 622.422342][ T9909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.882360][ T9928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.251981][ T9940] netlink: 'syz.4.926': attribute type 29 has an invalid length. [ 623.397572][ T9947] openvswitch: netlink: Flow actions attr not present in new flow. [ 623.418969][ T9948] openvswitch: netlink: Flow key attr not present in new flow. [ 623.588893][ T9951] netlink: 'syz.7.931': attribute type 1 has an invalid length. [ 623.720294][ T9959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.845291][ T9963] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 624.034404][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.723756][ T9991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.518816][T10021] __nla_validate_parse: 12 callbacks suppressed [ 625.518843][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 625.551496][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.958'. [ 625.835449][T10029] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.862287][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 625.902539][T10033] net_ratelimit: 2 callbacks suppressed [ 625.902569][T10033] openvswitch: netlink: Flow actions attr not present in new flow. [ 625.967067][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.963'. [ 626.190876][T10029] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.308828][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'. [ 626.348279][T10044] openvswitch: netlink: Flow key attr not present in new flow. [ 626.469003][T10050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.596292][T10029] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.773448][T10059] netlink: 104 bytes leftover after parsing attributes in process `syz.9.972'. [ 626.887955][T10029] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.948286][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.974'. [ 627.174384][ T6058] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.287535][ T6542] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.385866][ T6542] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.464470][ T6542] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.489529][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.9.978'. [ 627.498395][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.9.978'. [ 627.585575][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 627.663652][T10080] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 627.756229][T10090] : entered promiscuous mode [ 627.908998][T10095] tipc: Started in network mode [ 627.939943][T10095] tipc: Node identity 6aa26fdd4129, cluster identity 4711 [ 627.985587][T10095] tipc: Enabled bearer , priority 0 [ 628.109742][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.192142][T10106] openvswitch: netlink: Flow actions attr not present in new flow. [ 628.253286][T10100] syzkaller0: entered promiscuous mode [ 628.288704][T10100] syzkaller0: entered allmulticast mode [ 628.295228][T10100] tipc: Resetting bearer [ 628.399166][T10093] tipc: Resetting bearer [ 628.978975][ T8985] tipc: Node number set to 730558429 [ 629.569228][ T5142] Bluetooth: hci7: command 0x0405 tx timeout [ 629.799368][T10093] tipc: Disabling bearer [ 630.326988][T10157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.544985][T10164] __nla_validate_parse: 7 callbacks suppressed [ 630.545010][T10164] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1003'. [ 631.469933][T10177] team0 (unregistering): Port device team_slave_0 removed [ 631.527970][T10177] team0 (unregistering): Port device team_slave_1 removed [ 631.613812][T10190] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.658894][T10206] netlink: 'syz.6.1015': attribute type 1 has an invalid length. [ 631.807597][T10190] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.003342][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1019'. [ 632.034754][T10219] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1020'. [ 632.264870][T10216] syzkaller0: entered promiscuous mode [ 632.276988][T10216] syzkaller0: entered allmulticast mode [ 632.302705][T10190] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.224224][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1026'. [ 633.277640][T10190] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.512254][T10239] openvswitch: netlink: Flow actions attr not present in new flow. [ 633.557012][T10240] netlink: 'syz.8.1029': attribute type 9 has an invalid length. [ 633.620289][ T1155] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.786672][ T1155] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.830775][ T1155] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.853969][ T1155] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.884580][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.891043][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.251108][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1036'. [ 634.290432][T10262] netlink: zone id is out of range [ 634.334337][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1039'. [ 634.436113][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1040'. [ 634.806599][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1045'. [ 634.856640][T10287] openvswitch: netlink: Flow key attr not present in new flow. [ 634.895868][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1046'. [ 635.071520][T10297] syzkaller0: entered promiscuous mode [ 635.098723][T10297] syzkaller0: entered allmulticast mode [ 635.745969][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1056'. [ 636.078844][T10326] netlink: 'syz.9.1060': attribute type 2 has an invalid length. [ 636.182793][T10332] openvswitch: netlink: Flow actions attr not present in new flow. [ 636.871486][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1071'. [ 637.199362][T10358] netlink: 'syz.9.1073': attribute type 13 has an invalid length. [ 637.353011][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1078'. [ 637.364823][T10377] netlink: zone id is out of range [ 637.592356][T10383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.992160][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1082'. [ 638.513881][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1091'. [ 638.748449][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.080654][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.104196][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.120073][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1101'. [ 639.583541][T10415] [ 639.585901][T10415] ====================================================== [ 639.592912][T10415] WARNING: possible circular locking dependency detected [ 639.599923][T10415] syzkaller #0 Not tainted [ 639.604332][T10415] ------------------------------------------------------ [ 639.611343][T10415] syz.6.1090/10415 is trying to acquire lock: [ 639.617402][T10415] ffffffff90356038 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xd3/0x810 [ 639.626940][T10415] [ 639.626940][T10415] but task is already holding lock: [ 639.634294][T10415] ffffffff90355fd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x810 [ 639.643913][T10415] [ 639.643913][T10415] which lock already depends on the new lock. [ 639.643913][T10415] [ 639.654314][T10415] [ 639.654314][T10415] the existing dependency chain (in reverse order) is: [ 639.663318][T10415] [ 639.663318][T10415] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 639.671259][T10415] _raw_spin_lock_bh+0x33/0x40 [ 639.676558][T10415] nr_rt_ioctl+0xc66/0x29b0 [ 639.681605][T10415] nr_ioctl+0x19a/0x2d0 [ 639.686315][T10415] sock_do_ioctl+0x118/0x280 [ 639.691448][T10415] sock_ioctl+0x227/0x6b0 [ 639.696324][T10415] __x64_sys_ioctl+0x18e/0x210 [ 639.701645][T10415] do_syscall_64+0xcd/0xfa0 [ 639.706693][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.713120][T10415] [ 639.713120][T10415] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 639.721143][T10415] _raw_spin_lock_bh+0x33/0x40 [ 639.726446][T10415] nr_rt_ioctl+0x816/0x29b0 [ 639.731487][T10415] nr_ioctl+0x19a/0x2d0 [ 639.736196][T10415] sock_do_ioctl+0x118/0x280 [ 639.741331][T10415] sock_ioctl+0x227/0x6b0 [ 639.746211][T10415] __x64_sys_ioctl+0x18e/0x210 [ 639.751536][T10415] do_syscall_64+0xcd/0xfa0 [ 639.756584][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.763021][T10415] [ 639.763021][T10415] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 639.770872][T10415] __lock_acquire+0x126f/0x1c90 [ 639.776256][T10415] lock_acquire+0x179/0x350 [ 639.781288][T10415] _raw_spin_lock_bh+0x33/0x40 [ 639.786578][T10415] nr_rt_device_down+0xd3/0x810 [ 639.791956][T10415] nr_device_event+0x126/0x170 [ 639.797263][T10415] notifier_call_chain+0xbc/0x410 [ 639.802817][T10415] call_netdevice_notifiers_info+0xbe/0x140 [ 639.809246][T10415] __dev_notify_flags+0x1f7/0x2e0 [ 639.814793][T10415] netif_change_flags+0x108/0x160 [ 639.820350][T10415] dev_change_flags+0xba/0x250 [ 639.825647][T10415] dev_ifsioc+0x1498/0x1f70 [ 639.830668][T10415] dev_ioctl+0x223/0x10e0 [ 639.835516][T10415] sock_do_ioctl+0x19d/0x280 [ 639.840638][T10415] sock_ioctl+0x227/0x6b0 [ 639.845504][T10415] __x64_sys_ioctl+0x18e/0x210 [ 639.850824][T10415] do_syscall_64+0xcd/0xfa0 [ 639.855857][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.862270][T10415] [ 639.862270][T10415] other info that might help us debug this: [ 639.862270][T10415] [ 639.872482][T10415] Chain exists of: [ 639.872482][T10415] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 639.872482][T10415] [ 639.886325][T10415] Possible unsafe locking scenario: [ 639.886325][T10415] [ 639.893758][T10415] CPU0 CPU1 [ 639.899107][T10415] ---- ---- [ 639.904454][T10415] lock(nr_neigh_list_lock); [ 639.909130][T10415] lock(&nr_node->node_lock); [ 639.916412][T10415] lock(nr_neigh_list_lock); [ 639.923608][T10415] lock(nr_node_list_lock); [ 639.928196][T10415] [ 639.928196][T10415] *** DEADLOCK *** [ 639.928196][T10415] [ 639.936324][T10415] 2 locks held by syz.6.1090/10415: [ 639.941511][T10415] #0: ffffffff900fe548 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 639.950338][T10415] #1: ffffffff90355fd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x810 [ 639.960388][T10415] [ 639.960388][T10415] stack backtrace: [ 639.966263][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.6.1090 Not tainted syzkaller #0 PREEMPT(full) [ 639.966303][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.966324][T10415] Call Trace: [ 639.966334][T10415] [ 639.966347][T10415] dump_stack_lvl+0x116/0x1f0 [ 639.966392][T10415] print_circular_bug+0x275/0x350 [ 639.966437][T10415] check_noncircular+0x14c/0x170 [ 639.966486][T10415] __lock_acquire+0x126f/0x1c90 [ 639.966537][T10415] lock_acquire+0x179/0x350 [ 639.966580][T10415] ? nr_rt_device_down+0xd3/0x810 [ 639.966619][T10415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 639.966677][T10415] _raw_spin_lock_bh+0x33/0x40 [ 639.966714][T10415] ? nr_rt_device_down+0xd3/0x810 [ 639.966751][T10415] nr_rt_device_down+0xd3/0x810 [ 639.966791][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.966838][T10415] ? __local_bh_enable_ip+0xa4/0x120 [ 639.966874][T10415] nr_device_event+0x126/0x170 [ 639.966929][T10415] notifier_call_chain+0xbc/0x410 [ 639.966971][T10415] ? __pfx_nr_device_event+0x10/0x10 [ 639.967029][T10415] call_netdevice_notifiers_info+0xbe/0x140 [ 639.967080][T10415] __dev_notify_flags+0x1f7/0x2e0 [ 639.967116][T10415] ? __pfx___dev_notify_flags+0x10/0x10 [ 639.967150][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.967195][T10415] ? __pfx___dev_change_flags+0x10/0x10 [ 639.967231][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.967273][T10415] ? do_raw_spin_lock+0x12c/0x2b0 [ 639.967329][T10415] netif_change_flags+0x108/0x160 [ 639.967368][T10415] dev_change_flags+0xba/0x250 [ 639.967413][T10415] dev_ifsioc+0x1498/0x1f70 [ 639.967447][T10415] ? __pfx_dev_ifsioc+0x10/0x10 [ 639.967481][T10415] ? __pfx___mutex_lock+0x10/0x10 [ 639.967532][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.967578][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.967627][T10415] dev_ioctl+0x223/0x10e0 [ 639.967661][T10415] sock_do_ioctl+0x19d/0x280 [ 639.967709][T10415] ? __pfx_sock_do_ioctl+0x10/0x10 [ 639.967754][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.967802][T10415] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 639.967864][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.967909][T10415] sock_ioctl+0x227/0x6b0 [ 639.967958][T10415] ? __pfx_sock_ioctl+0x10/0x10 [ 639.968006][T10415] ? hook_file_ioctl_common+0x145/0x410 [ 639.968058][T10415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.968100][T10415] ? __fget_files+0x20e/0x3c0 [ 639.968143][T10415] ? __pfx_sock_ioctl+0x10/0x10 [ 639.968193][T10415] __x64_sys_ioctl+0x18e/0x210 [ 639.968251][T10415] do_syscall_64+0xcd/0xfa0 [ 639.968297][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.968331][T10415] RIP: 0033:0x7f0add98efc9 [ 639.968357][T10415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.968392][T10415] RSP: 002b:00007f0ade83e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.968424][T10415] RAX: ffffffffffffffda RBX: 00007f0addbe6090 RCX: 00007f0add98efc9 [ 639.968448][T10415] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000c [ 639.968470][T10415] RBP: 00007f0adda11f91 R08: 0000000000000000 R09: 0000000000000000 [ 639.968491][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.968513][T10415] R13: 00007f0addbe6128 R14: 00007f0addbe6090 R15: 00007ffd8abf7808 [ 639.968548][T10415] [ 640.369030][T10419] caif:caif_disconnect_client(): nothing to disconnect [ 640.391345][ T6542] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.447168][ T6542] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.477641][ T6542] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.509552][ T6542] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0