last executing test programs: 21.505229034s ago: executing program 3 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) 21.411764542s ago: executing program 3 (id=3423): recvmmsg(0xffffffffffffffff, &(0x7f0000004080)=[{{&(0x7f0000000580)=@l2, 0x80, 0x0}, 0x10001}, {{0x0, 0x5e, &(0x7f0000003f80)=[{0x0, 0xffffffffffffff60}, {&(0x7f00000001c0)=""/47, 0x34}], 0x2}, 0x6}], 0x2, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @mcast1, 0xffffffff}, 0x1c) r3 = accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x80000) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x310, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x12f) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x18) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 21.079966985s ago: executing program 3 (id=3431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 21.007518003s ago: executing program 3 (id=3432): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000001580)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file2\x00'}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x30000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010ef5ef7e0ecc36f570000000500000a44000000090a016608b343d5467f5c5ebaca203a562632641a06b8e40400000000000000000a0000040900010073797a31020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a0101882258cd5474f7bb0a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) setresuid(0xee00, 0xee00, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 20.824515631s ago: executing program 3 (id=3436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x238, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 20.259482886s ago: executing program 3 (id=3441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) (fail_nth: 3) 20.259084836s ago: executing program 32 (id=3441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) (fail_nth: 3) 2.624839672s ago: executing program 5 (id=3782): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00006c0200000000000000000000000000002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x1c3202, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000000002, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x97}, 0x18) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socketpair(0x1, 0x1, 0x8000, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) gettid() r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r7, 0x400, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 2.414331183s ago: executing program 5 (id=3785): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_getevents(0x0, 0x2, 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=0x0, @ANYRES16=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r5, 0x0, 0x4ab}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x113) shutdown(0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.798534814s ago: executing program 5 (id=3792): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000200), 0x0, 0x0, 0x800000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.669835007s ago: executing program 1 (id=3796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00006c0200000000000000000000000000002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x1c3202, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x20000000000002, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x97}, 0x18) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socketpair(0x1, 0x1, 0x8000, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) gettid() r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r7, 0x400, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 1.660880597s ago: executing program 5 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f00000005c0)=ANY=[], 0x1, 0x371, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0xfff7) r3 = open(&(0x7f0000000280)='./file1\x00', 0x14dc7e, 0x1) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x800000, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 1.298168193s ago: executing program 5 (id=3800): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 1.280080894s ago: executing program 1 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 1.22329829s ago: executing program 1 (id=3805): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000004) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0xac9, &(0x7f0000000380)={0x0, 0xb338, 0x2, 0x0, 0x235}, &(0x7f0000000040), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f00000002c0)="b3395af893e8cd5a5accc42ac3d149093348aabcf6f4cc7dae0d91c9fabdb9dff9db62bb0e09b497b894d4ef12eaf383a92b209259e50093694e3957747bd74d1e4b31e686f5dd20e5d1d5eaf6c1838f2fc814813fa025f1fdceceb338956d", 0x5f) 1.156294197s ago: executing program 1 (id=3808): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) alarm(0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad0601", 0x6c}, {&(0x7f0000004480)="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", 0xda9}, {&(0x7f0000001040)="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", 0x1bc}], 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r3, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x1c75}], 0x17) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) syz_clone3(&(0x7f0000000740)={0x400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000000)={0x2}) 1.147839008s ago: executing program 5 (id=3809): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_open_dev$vcsa(&(0x7f00000000c0), 0x870, 0x8ca80) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) setns(r1, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x8000, 0x3) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") 1.134088949s ago: executing program 0 (id=3810): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48) 1.087553844s ago: executing program 2 (id=3811): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x181, 0xfffffffb}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c000000040000000400000011fdffff00000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 1.02321859s ago: executing program 0 (id=3812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 1.011265161s ago: executing program 2 (id=3813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_read_part_table(0x631, &(0x7f0000003080)="$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") 937.426578ms ago: executing program 0 (id=3814): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0x0, 0xa9, 0x3, 0x2, 0x1}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, 0x0, 0x42094) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 936.858938ms ago: executing program 0 (id=3815): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 919.88004ms ago: executing program 0 (id=3816): syz_read_part_table(0x5de, &(0x7f0000000ec0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000957ba37102", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000a90c0000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000050000f958f33f0000000000560901000000000027000000000000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000d3cb834d2e65e03977bc3742b9b827f2a2e01fa24dfefb376aed6265a212089a500a526056f88c40377b0a55e341a28f71cdc70d8cc2ac1e1a3655e9e777dd9ff9becc"], &(0x7f0000000400)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000100)='9p_client_req\x00'}, 0x18) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000780)={@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, {&(0x7f0000000600)=""/225, 0xe1}, &(0x7f0000000740), 0x45}, 0xa0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='mmap_lock_acquire_returned\x00', r8}, 0x18) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x4, 0xfe, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x4040, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x79827d8d5763a7cb) 717.26819ms ago: executing program 4 (id=3819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000580)="414b16526bfaba6cb0009d523375889cac9c9a3417f47278458d0aa6b7ed40f93c56781da585dc2200e8ea74c8155c715f204dd0e2c484ef5df0412a3cc2128b8c1be58ac45568ba0d1a5ec34f39d48ec69a998afa8086e874bea3b86484b4ec204223b2e3c16b371ecd916cbeeb4064a3d9fc2575830c6729830898cc17ae92567b05520b430c7934c8995846a83fb8140364cdc73aea3756c50a56f21225852d57da22364a476db52411b96815e328088500068442f7558be77c4842b0e1f2434edb1859e2dfd93c2ae9cc3c", 0xcd}], 0x1, &(0x7f0000000280)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0xf, [{@rand_addr=0x64010100}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xe0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x48}, 0x4000) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) 657.604536ms ago: executing program 4 (id=3820): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 656.670826ms ago: executing program 0 (id=3821): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getuid() r0 = getgid() prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) setregid(r0, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchmodat(r2, &(0x7f0000000000)='.\x00', 0x71) 644.403417ms ago: executing program 2 (id=3822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000958943f6927b5154abf5fb80b8f7dda6e4956c464301ee785123b7ecc50ed1a8ec17b3ace7c7d83f200686a1eaa2af7f37472f3154e182f8e78ba0dbf4dbb38aad1fdac1ea0d39b3cf6878a561e040bd20ee9fefc0f8cdcb70185faeb4d24a3fa62813d9eb4af7711cc80e2d19d10d586a3f785a49db89fe0ae499026da705123d51d8bc9859d5963fe0ac8b7854583b2696ce669918e2eb965c408bbdc3771edf7bf565a91dc0e6675c5bbf958610aee262e71a1a57e99ed5a9a00ec583f41c1324a4e4"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) 535.146598ms ago: executing program 4 (id=3823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000d8fe6a4c0ffffff8000000000000090fd", @ANYBLOB="e75e75eead72300adfc8215756474013a507fef0143a", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005cb200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000680)='sched_pi_setprio\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000680)='sched_pi_setprio\x00', r2}, 0x18) mknodat$null(0xffffffffffffffff, 0x0, 0x1, 0x103) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r4, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='ext4_fc_stats\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x1, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x800}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8020004}, 0xc, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fbdbdf2564000000080001002a000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc890}, 0x2000c001) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x7}, 0x18) getpid() (async) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r10, r9, 0x0, 0xd, &(0x7f0000000280)='sched_switch\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r10, r9, 0x0, 0xd, &(0x7f0000000280)='sched_switch\x00'}, 0x30) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000080), 0x1c) (async) connect$inet6(r11, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e900757c2498e33fe93a0c9001c5c65f7107d0d0000000000000000000037", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, '\x00', "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "000000f0", "fffffe159ba4e800"}, 0x38) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 509.97088ms ago: executing program 2 (id=3824): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 463.974855ms ago: executing program 2 (id=3825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 463.489735ms ago: executing program 4 (id=3826): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) r8 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r9, 0x0) ftruncate(r9, 0xc17a) mq_timedsend(r8, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r8, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 387.845413ms ago: executing program 2 (id=3827): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) alarm(0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad0601", 0x6c}, {&(0x7f0000004480)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce66848b7392445ffb232c6b70bff2783564b2a62fa6cf3783f6cf6e84c90162b7cbf0192971f05c597dc20b3c879bd342e9e29e93c8240e8dbb137d3d8fcc8f49b37938a52ef12f7d963ff76b91f1473369d06d500d9b88c4f0e0b0ca9049d6b2f3c1886ff41404fab2855eaf1310fa65425a3e9513e33cee970a08de795368e9fe8055fdc5786010c764b3d3ccebec687d242267e932df33cf50c665ea82f1dcf1af952b0e4bf2e35d3c1bdead12e22b371543769fc19a0d893ebb9d71c4da000e2d18a572fdf7c23d921d959caebfbe3ab9157fc9ab6e3dcb88eaa5a5a8af223d7a25a8f198b10dedf68b6d2759a806b6a5bcf3693734ceebeea16b995304511db8d97b62f548213c614bc2dd9b843450eb575c8a8f290af70331a269f1cab6fd6e1f9ef687d80952ba7f14da8cf892d0a5b16dd181d8a7b780055d3b79782a2f4c29c6b9c64bdcde1175ef26c75d0bca19e2be27acb3fdf22a7cff8a659899de59fb2d3e4920881a0900958685263b3fb8dafa6402f5812f16de9e53eda3c86520d5267df729d2add8724d7541b60a3e9a4b70b5f1af83e81071d7e3eb6a9817383632008fbfff89f1c1ab39d9d898d555a0190fa11c8bdfd2d1b49d06fc56acdc426568ccbebbf6f3ce278148f319a1f84adcfb49a675c6d119f52e10386cdd0740199b20087f7c8f75d93959e39d2948a17789f6c6fda65dcb42743b466bcdd06bbe7afccd2b59c0c3f4dc62b8cee2a785ce704bbc47f480079b5f21ace7e5f2f149360370e866565af026b14ec4d9214884661156b5313c233ef1abd2807eb9b586845e3df8001e56b8d4f7c5c9b7e46b81e278ea0a7afb8286183285c390558d750277a7d72a6dab2cf1f29b0d4c847991ec65dd1757889dc9a6e94ce22b58e25cfac06c73532a53663a27208daaf3b4ad5a8c74e4e62b160219f49b6983674f7a71e56f45c3df8c13c93b2ed468749843dd8954a0d03acc61e5008ccc5a5db5a42d04abdf112e71e4d5876c3ea0db715648a5bb55b5ffd2377aea32f19a07e610456b5a6dda7ab4e6d11a88a5910f7f394c7a53d7c032e5506c3b26d54cbe73bfb37cda2439b23c785566668d8111570b7004fa565a156e45c9b672c6ebfb4d08bc681de9ea0215a43a1eefe7a0fb72caf494414c61510c00a8c5e37c4efeca3a1d171f44abbca94a9899b299363bbd1ecdc91d19d6a179f00bd958e372916fde873aaa167bb6be50219c76e6bee7a207f43b729eea5c00052eccb9986b6c137019c47f3fc1d69d68569f8c1d97ecc6b3dec37813f358778edfa2515fd9c4ca7e73966942f65c1a3cc9770065836625671725e3617030df067961c50d2e53a1c69d0e116eb9e0c052e71b3bcc85354829b71295cae5ffbcd5c2794fd16f8601ff5d7278693e384d477920e4619be578ac11f4ef327e5c5298d24ba29fddc7317fc90c69ddc991ee2f3a34c40c2afcd77350c008b9f70b76c97f51bd1359d376cfc83ec0f14a183cef8eccc014bf36d8384262edd4bb03f743c4628bccfef1050deafd13bdcbd73a356a8c630cc4f0665420d414c59276ff1d85ef058069a1ea280b9ae476ea9aa64652c4a83b9b086fd02a3372ae9683521d81ce846ce9b030e81b7523e8f5355c26c66d9182b9b3e089917089a07bf5159f1439200ad74d735b020ccb78225a015c76a57c19344556bce75da0d44e88e2227f5f4a90bb00eb27decf0d0dcf1b6dd0f9146f0191a7f58e3c6a1568e747ba674c33fd6715678232ea1385e8e54955e70ce306fad514235c8bc2576e84444a674c149a67d8db5fea81813aa311fa701bc401101b14661b0f091dad3a1895f3d32fc7012e59e090f487fc9f19e878e04c40eb906deedb29cf65839486f11c4fb7d9c1be6a1c95471d939cc0c85f6fead85e4d081ccc6e2a51784ec4d3f0b13796609161bfcb38a029c10b084e87ceff5483ec6c9691b0ad6a3d05e13e8c48d0700cc58b9436d8011c48381d6ca0ac279c3c71a625585c8b257c54fcb9e9d07183ee0d90b0b5255d153fae38c6c25636846c31142f269229ac4a1d35df88eeaa9413dde791642c9b0ce903cef64609886d18df63515de769df208c9db2acda7db5181f52bb99e74f84b01106c8419543ec2b5106623789316cd825995e42d0cf9f8296f2e5155dbaae8113de5c7a1dddfe42770064e2aae3f100f97d890e3e7eb63ca80d1a8c672ae8e8eaee5b838653a20a58171dc78509a55ea2c590bcffe3f0ca7731edecc2cf3e63c8e8ce335a4f9541691282df4f24a208cd1400dce5e40ddde35dd22c9e75ded061cb349d8cbc92bc00f9c9c4ff49fe887ea630ffc66a087065a90e072b56c9386f3cccda4acb0f10538f361cd860a7efec0eb83ea5165d6a6612800a8d6c7426b0916fc6aec0e7d81ee1a57657ac5c32b58d4e573bf820bc67cc0896012ccff2ace1de0b13f70a744e116a300aaffd1a6ad24513532fb9b9452454874a432cb5f5f6fa2f35668e6e3eb98fdc5c15dc5513c44a26d318d2b7372d6dc1da69d342b95ecb05777716264c79f4a3b953d6acc1006318fd352eb92621360d62b1c651c1fa0dec9a9fe674347902228373bed540251eebb2a8ede5e4f47bacf6acde6f8c5b95dc8b8214175d5649994c710709a5bfdd73360c35af7fc2ea4d35f14994bdccce242be14bff1ce7010b1c353479a1f038dc52e76d5d97340d98e3ad783a4ad95a469eee9193c7e5f93d84f847a6710230fb26f6e0122cb3f0400e7c485b704e3916c4fb0340bed2b4e7640b3ea40a9741f32f81e761119919e9e3fe16aba0b691e9d4e8fc959ae97dad37225a0d3fff627d6241fc0826cc863ec6e0a6c78956dc8878bb8c34dec173161c844462baf2a0d40fb6ea7c6bcf6a4501b92b1bf35c9b1c7d09ad3ee84b5c846404062d6fef2e53f4121b3a04341b58c05460bfa09ff6b92275923798897293e4cc80e6ee6facbab718550e838724ac19c2f86ee656fd607106951936eb56a3263819a69525b9d8bd4b1196ae503b6ee7071f881d740c5781040a78168037ccf819e24a9e3b55dc629aa788972a018d72371e2d64905bcc52b68977a5be41c52dfd42c6dd106a073682ef6c1b09c3d6004436bb6f59c06445768c217b3f36cf8f231e5128944f15fca908e1340cb4d175e9da1f15d5cbdf8fdc2493620b62dee93dfcaf1a56f781b04ef16d0b33e774d89deb827c6ccc4cb83d510c5ba6029317379896b3880f1b2d9f08e6aaf1518b9378f87b135c526782c09eb28b5d74d09cae156dc1809ae258753a59a6b453f28580c3f8ca41cd2977fb2c8f78159e5b5360417b2a72e359e8dc3ee76bed00cce7018286ddd88ee211457683b8136380c1f6281c23308dc08943bdcc36a4bd310d097ac2f5603b214fc3616e1092f3f4c2cda3e098709cf98cbfbd20995c8daa7ece6bb4349c17f07c591eebf1a94c94f1211c6e52837c1e75409c7e7c115b3871fc5cdf1262ece5894a9a4cb264931047074ddc6b4cccf6707b160be4558c6cc0d8c7dc2de6b86af7489815c84517d106ba538c1f4ea22ec6fd29cbc76f94467c51684778649d867041e2c952f4717c6d20345c94ad67f343985f7db04bf6010f6f9308d4ec9ed41620efc7c95fd8c596d22d0302654f81f96a31a05b954768deb359c624537a6fdb450ad54324618b14df9e03f82cbf3f7b73f3535bfe44553c0a37dad2070b5c0565111da8ecf31d412b744d897ebc8e98fbb1e25312686539fd021b68ce5cfada2682a617932911350326eab213b43f436b0d65922bfbc459238d54708f39bdff1ee745aa1bf072670fa55a13e146df08c157927326556667f98002b54fe3ed150a59d359c2b481708b92e204dc3b9a30aae1489cfdc37a17669f5b5077945e0a8ae33c8c1c228486a313560773b32b05aec13f3fd9c42a1824d7c82c7b0b04d55064cf7a0924b243cf184567d26bd4095fbe0dc326ca71b0a3dba3b66511ad69cfb9dabcf71b85342db0bb9d23f29b7d1f1213d48e215eaf70e132e8ce34cf5e2dfd93bbbe7420a6db52641d1be52abeccb216193a993a18f0620a70b479776ccc705f095e915b9cc4a0fb62d11228fb1e5bcc0efa78969639969799dbe63f5f27be3d3fd7f2f5134f5ac3abf3a0a5601480296a6b85bea2090bf13c8f3d3c3a7ffa858b20775f249aaea7d753e9129bae065332bad8d783f9967322a2c358147f450fb5d6a7176c8015b33333106d30d2c690781703c18afb5e88423ffd8b6da20901db90e28647cb4727dbed71210db7ab7c9909b6a142e26757f22f742f84148ac2d88c6ec3bb24832a4b9889705571ced0e0d541a6ae909e3aa854c7f52e939c7062563711890e7046f0736b92188fdbae304953dc5e0bf9de92558ef9d41524ea68ec5f380902fd00719afd0bbc77e9b5034004f0820f22cac8ba92557c9186050a8aa7065a5d5d06b7d8b7bd0fcc4a30aaff5fa0bb2fdd85e801b53859dad6151be7c00f68c34ca8fcd96ddf9980d809d28730d1a86d057f2716637bea7ae9c34dcbf69a9e400cf42dfbbea8b03dc34683df85b3696c7570bed2bfee77bcbbaf3035d81a0308371ff1df315c53c66198221e3be1046eab7e71903dea93c388de23a13848d4b1d6109c067f40f67b17ab3dd7554ba9c51fc7b715acf04ff50d5588898c2db0f83c7b3948fe7ce0dbb6fde93de2d6bd3b27487a3f85ae7aa000000000000", 0xda9}, {&(0x7f0000001040)="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", 0x1bc}], 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r3, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x1c75}], 0x17) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) syz_clone3(&(0x7f0000000740)={0x400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000000)={0x2}) 53.969765ms ago: executing program 4 (id=3828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 37.752807ms ago: executing program 4 (id=3829): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nodioread_nolock}, {@usrjquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcd}}, {@resgid}, {@minixdf}, {@debug}, {@grpquota}, {@nombcache}, {@minixdf}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@i_version}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f00000024c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100), &(0x7f0000000140)={'L-'}, 0x16, 0x1) 26.878698ms ago: executing program 1 (id=3830): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 1 (id=3831): perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xf1, 0x22, 0x0, 0x5, 0x0, 0x8, 0x28, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x38a6c687, 0x100000001}, 0x10000, 0x8, 0x8, 0x6, 0x6, 0x8e9, 0x8000, 0x0, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="a040b758af3736790334e765eac69c59ff2b3d8356df61a91c3443660e60d4b28a5ca33abcb776eb1ee15b1d1c000000c1915353e23b86df1ed022d557e1c0812985f87a4f91a3de4590af1e016679d0d8f7ff0fdb5fe9e882cb878c63344a65fa605fd8477d0add840b64ae3830d3f032ff84d43658b5db53a8afdcf731bdc311b976f563fcf150efd54f3d3390129c6446501b85f708324e311eed1cd66feb86babd507567874a311dbfede36588b63899a145ea065fbd292182f0379c2b917ef6129a6fe76c26b22dbf7877414b80ea64aafeb8e8382e670878ccc3e973e54c1e98d9cd08ca1188b7830b26135238b51978ae2268adf5ddd38c722e09822793127983b391b74d50e5f69ce6019a00e54073cddc7924e2562ca73ca0f3e0351921054497a670b252b36c7ad51c3c055ba55529bda5df4fb77f0dab01c480c4001aea4286ed97a5aeb7c360446eaae4df1c637f83accfe53d53bbf6287e7c599e8460e66700", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x1411, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044014}, 0x40000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="290b000000000000000020000000050003"], 0x1c}}, 0x2404c044) kernel console output (not intermixed with test programs): ut here ]------------ [ 178.240162][ T4022] WARNING: CPU: 0 PID: 4022 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 178.249981][ T4022] Modules linked in: [ 178.253885][ T4022] CPU: 0 UID: 0 PID: 4022 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.263889][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.274033][ T4022] Workqueue: netns cleanup_net [ 178.278817][ T4022] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 178.284546][ T4022] Code: 48 8d bb 70 0e 00 00 e8 85 aa b7 fc 48 8b bb 70 0e 00 00 e8 09 56 c4 fc 5b 41 5e 41 5f 5d e9 3e 5f b0 00 cc e8 58 53 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 53 9c fc 90 0f 0b 90 4c 89 f7 e8 4e [ 178.304193][ T4022] RSP: 0018:ffffc90010463c60 EFLAGS: 00010293 [ 178.310332][ T4022] RAX: ffffffff84baec28 RBX: ffff88810b341780 RCX: ffff88810a704200 [ 178.318365][ T4022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810b3425c0 [ 178.326437][ T4022] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 178.334439][ T4022] R10: ffffc90010463be8 R11: 0001c90010463be8 R12: ffffffff86c91020 [ 178.342448][ T4022] R13: ffff88810b3417a8 R14: ffff88810b3425c0 R15: ffff88810b341780 [ 178.350502][ T4022] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 178.359542][ T4022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.366219][ T4022] CR2: 00007f1743247dac CR3: 0000000126ff2000 CR4: 00000000003506f0 [ 178.374345][ T4022] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 178.382334][ T4022] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 178.390480][ T4022] Call Trace: [ 178.393774][ T4022] [ 178.396720][ T4022] xfrm_net_exit+0x2d/0x60 [ 178.397609][T12597] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 178.397609][T12597] program syz.4.3137 not setting count and/or reply_len properly [ 178.401248][ T4022] ops_undo_list+0x27b/0x410 [ 178.422526][ T4022] cleanup_net+0x2f4/0x4f0 [ 178.426960][ T4022] process_scheduled_works+0x4ce/0x9d0 [ 178.432555][ T4022] worker_thread+0x582/0x770 [ 178.437195][ T4022] kthread+0x489/0x510 [ 178.441329][ T4022] ? finish_task_switch+0xad/0x2b0 [ 178.446466][ T4022] ? __pfx_worker_thread+0x10/0x10 [ 178.451676][ T4022] ? __pfx_kthread+0x10/0x10 [ 178.456294][ T4022] ret_from_fork+0x122/0x1b0 [ 178.460961][ T4022] ? __pfx_kthread+0x10/0x10 [ 178.465594][ T4022] ret_from_fork_asm+0x1a/0x30 [ 178.470394][ T4022] [ 178.473615][ T4022] ---[ end trace 0000000000000000 ]--- [ 178.479954][ T4022] ------------[ cut here ]------------ [ 178.485498][ T4022] WARNING: CPU: 0 PID: 4022 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 178.495125][ T4022] Modules linked in: [ 178.499032][ T4022] CPU: 0 UID: 0 PID: 4022 Comm: kworker/u8:28 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.510708][ T4022] Tainted: [W]=WARN [ 178.514511][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.524678][ T4022] Workqueue: netns cleanup_net [ 178.529462][ T4022] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 178.535057][ T4022] Code: aa b7 fc 4d 8b 3e e9 06 ff ff ff e8 31 53 9c fc 90 0f 0b 90 4c 89 f7 e8 35 aa b7 fc 4d 8b 3e e9 24 ff ff ff e8 18 53 9c fc 90 <0f> 0b 90 4c 89 f7 e8 1c aa b7 fc 4d 8b 3e e9 42 ff ff ff e8 ff 52 [ 178.554755][ T4022] RSP: 0018:ffffc90010463c60 EFLAGS: 00010293 [ 178.560883][ T4022] RAX: ffffffff84baec68 RBX: ffff88810b341780 RCX: ffff88810a704200 [ 178.568958][ T4022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881193bb640 [ 178.577071][ T4022] RBP: 0000000000000040 R08: 000188810b3425df R09: 0000000000000000 [ 178.585099][ T4022] R10: ffff8881193bb6c0 R11: 00018881193bb6bf R12: ffffffff86c91020 [ 178.593097][ T4022] R13: ffff88810b3417a8 R14: ffff88810b3425d8 R15: ffff8881193bb640 [ 178.601102][ T4022] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 178.610122][ T4022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.616721][ T4022] CR2: 00007f1743247dac CR3: 0000000006834000 CR4: 00000000003506f0 [ 178.624812][ T4022] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 178.632817][ T4022] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 178.640838][ T4022] Call Trace: [ 178.644124][ T4022] [ 178.647056][ T4022] xfrm_net_exit+0x2d/0x60 [ 178.651543][ T4022] ops_undo_list+0x27b/0x410 [ 178.656239][ T4022] cleanup_net+0x2f4/0x4f0 [ 178.660757][ T4022] process_scheduled_works+0x4ce/0x9d0 [ 178.666251][ T4022] worker_thread+0x582/0x770 [ 178.670915][ T4022] kthread+0x489/0x510 [ 178.675011][ T4022] ? finish_task_switch+0xad/0x2b0 [ 178.680170][ T4022] ? __pfx_worker_thread+0x10/0x10 [ 178.685331][ T4022] ? __pfx_kthread+0x10/0x10 [ 178.689979][ T4022] ret_from_fork+0x122/0x1b0 [ 178.694628][ T4022] ? __pfx_kthread+0x10/0x10 [ 178.699271][ T4022] ret_from_fork_asm+0x1a/0x30 [ 178.704133][ T4022] [ 178.707152][ T4022] ---[ end trace 0000000000000000 ]--- [ 178.713469][ T4022] ------------[ cut here ]------------ [ 178.718924][ T4022] WARNING: CPU: 0 PID: 4022 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 178.728665][ T4022] Modules linked in: [ 178.732695][ T4022] CPU: 0 UID: 0 PID: 4022 Comm: kworker/u8:28 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.744271][ T4022] Tainted: [W]=WARN [ 178.748075][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.751296][T12622] usb usb7: usbfs: process 12622 (syz.2.3141) did not claim interface 0 before use [ 178.758224][ T4022] Workqueue: netns cleanup_net [ 178.772324][ T4022] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 178.777898][ T4022] Code: aa b7 fc 4d 8b 3e e9 24 ff ff ff e8 18 53 9c fc 90 0f 0b 90 4c 89 f7 e8 1c aa b7 fc 4d 8b 3e e9 42 ff ff ff e8 ff 52 9c fc 90 <0f> 0b 90 4c 89 f7 e8 03 aa b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 178.797666][ T4022] RSP: 0018:ffffc90010463c60 EFLAGS: 00010293 [ 178.803810][ T4022] RAX: ffffffff84baec81 RBX: ffff88810b341780 RCX: ffff88810a704200 [ 178.811832][ T4022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881193bb600 [ 178.819848][ T4022] RBP: 0000000000000040 R08: 000188810b3425d7 R09: 0000000000000000 [ 178.827839][ T4022] R10: ffff8881193bb680 R11: 00018881193bb67f R12: ffffffff86c91020 [ 178.835855][ T4022] R13: ffff88810b3417a8 R14: ffff88810b3425d0 R15: ffff8881193bb600 [ 178.843863][ T4022] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 178.852807][ T4022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.859418][ T4022] CR2: 00007f1743247dac CR3: 0000000006834000 CR4: 00000000003506f0 [ 178.867393][ T4022] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 178.875393][ T4022] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 178.883404][ T4022] Call Trace: [ 178.886694][ T4022] [ 178.889653][ T4022] xfrm_net_exit+0x2d/0x60 [ 178.894118][ T4022] ops_undo_list+0x27b/0x410 [ 178.898730][ T4022] cleanup_net+0x2f4/0x4f0 [ 178.903203][ T4022] process_scheduled_works+0x4ce/0x9d0 [ 178.908712][ T4022] worker_thread+0x582/0x770 [ 178.913414][ T4022] kthread+0x489/0x510 [ 178.917504][ T4022] ? finish_task_switch+0xad/0x2b0 [ 178.922670][ T4022] ? __pfx_worker_thread+0x10/0x10 [ 178.927812][ T4022] ? __pfx_kthread+0x10/0x10 [ 178.932456][ T4022] ret_from_fork+0x122/0x1b0 [ 178.937114][ T4022] ? __pfx_kthread+0x10/0x10 [ 178.941751][ T4022] ret_from_fork_asm+0x1a/0x30 [ 178.946613][ T4022] [ 178.949693][ T4022] ---[ end trace 0000000000000000 ]--- [ 178.976836][T12615] netlink: 'syz.1.3138': attribute type 3 has an invalid length. [ 179.009330][T12426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.018731][T12426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.077027][T12426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.100013][T12426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.133139][T12650] loop2: detected capacity change from 0 to 128 [ 179.142168][T12642] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 179.142168][T12642] program syz.1.3148 not setting count and/or reply_len properly [ 179.155899][T12426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.187061][T12650] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.188113][T12652] netlink: 'syz.4.3151': attribute type 3 has an invalid length. [ 179.214065][T12426] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.227040][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.234117][ T4022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.256339][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.263403][ T4022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.296463][T12659] loop1: detected capacity change from 0 to 128 [ 179.297165][T12426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.320663][T12659] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.366478][ T4002] kworker/u8:10: attempt to access beyond end of device [ 179.366478][ T4002] loop2: rw=1, sector=249, nr_sectors = 1 limit=128 [ 179.399061][T12426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.507144][T12426] veth0_vlan: entered promiscuous mode [ 179.523974][T12426] veth1_vlan: entered promiscuous mode [ 179.543381][T12426] veth0_macvtap: entered promiscuous mode [ 179.550846][T12426] veth1_macvtap: entered promiscuous mode [ 179.567810][T12426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.577956][T12694] loop2: detected capacity change from 0 to 128 [ 179.585807][T12692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3159'. [ 179.595712][T12426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.610793][T12694] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.623832][ T3508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.637148][ T3508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.647210][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 179.647224][ T29] audit: type=1326 audit(1760298876.998:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 179.653735][T12696] loop1: detected capacity change from 0 to 256 [ 179.689577][ T29] audit: type=1326 audit(1760298877.038:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 179.690260][ T3508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.713232][ T29] audit: type=1326 audit(1760298877.038:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 179.745416][ T29] audit: type=1326 audit(1760298877.048:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12693 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 179.777629][ T3508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.798646][T12696] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 179.798646][T12696] program syz.1.3162 not setting count and/or reply_len properly [ 179.860194][ T4002] kworker/u8:10: attempt to access beyond end of device [ 179.860194][ T4002] loop2: rw=1, sector=249, nr_sectors = 1 limit=128 [ 179.958542][ T29] audit: type=1326 audit(1760298877.298:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12708 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80eca5eec9 code=0x7ffc0000 [ 179.982220][ T29] audit: type=1326 audit(1760298877.298:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12708 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80eca5eec9 code=0x7ffc0000 [ 180.005857][ T29] audit: type=1326 audit(1760298877.308:17343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12708 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80eca5eec9 code=0x7ffc0000 [ 180.029678][ T29] audit: type=1326 audit(1760298877.308:17344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12708 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80eca5eec9 code=0x7ffc0000 [ 180.056109][ T29] audit: type=1326 audit(1760298877.358:17345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12708 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80eca5eec9 code=0x7ffc0000 [ 180.079815][ T29] audit: type=1326 audit(1760298877.358:17346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12708 comm="syz.3.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80eca5eec9 code=0x7ffc0000 [ 180.132411][T12719] loop4: detected capacity change from 0 to 256 [ 180.151398][T12719] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 180.151398][T12719] program syz.4.3169 not setting count and/or reply_len properly [ 180.180361][T12722] loop3: detected capacity change from 0 to 128 [ 180.195380][T12722] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.260541][T12731] loop4: detected capacity change from 0 to 128 [ 180.282193][T12731] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.305144][ T3508] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.334431][T12712] chnl_net:caif_netlink_parms(): no params data found [ 180.346582][ T3508] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.370258][T12737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3173'. [ 180.387255][ T3508] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.423041][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.430197][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.437340][T12712] bridge_slave_0: entered allmulticast mode [ 180.443798][T12712] bridge_slave_0: entered promiscuous mode [ 180.451221][ T3508] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.463046][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.470271][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.478969][T12712] bridge_slave_1: entered allmulticast mode [ 180.485947][T12712] bridge_slave_1: entered promiscuous mode [ 180.513068][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.523674][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.545201][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 180.561570][T12712] team0: Port device team_slave_0 added [ 180.585643][T12712] team0: Port device team_slave_1 added [ 180.627745][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.634864][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.660835][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.672775][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.679761][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.705738][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.725504][ T3508] bridge_slave_1: left allmulticast mode [ 180.731259][ T3508] bridge_slave_1: left promiscuous mode [ 180.736959][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.744763][ T3508] bridge_slave_0: left allmulticast mode [ 180.750440][ T3508] bridge_slave_0: left promiscuous mode [ 180.756208][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.924000][T12762] loop0: detected capacity change from 0 to 128 [ 180.931243][T12762] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.944178][T12762] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.985609][T12764] 9pnet_fd: Insufficient options for proto=fd [ 181.008401][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 181.181007][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.190869][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.200631][ T3508] bond0 (unregistering): Released all slaves [ 181.281576][T12712] hsr_slave_0: entered promiscuous mode [ 181.302430][T12712] hsr_slave_1: entered promiscuous mode [ 181.314684][T12712] debugfs: 'hsr0' already exists in 'hsr' [ 181.320605][T12712] Cannot create hsr debugfs directory [ 181.332244][ T3508] hsr_slave_0: left promiscuous mode [ 181.347602][ T3508] hsr_slave_1: left promiscuous mode [ 181.354338][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.362042][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.373166][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.380613][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.404166][ T3508] veth1_macvtap: left promiscuous mode [ 181.424179][ T3508] veth0_macvtap: left promiscuous mode [ 181.457066][T12794] loop3: detected capacity change from 0 to 128 [ 181.488445][T12794] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.607224][ T4009] kworker/u8:16: attempt to access beyond end of device [ 181.607224][ T4009] loop3: rw=1, sector=249, nr_sectors = 1 limit=128 [ 181.787650][T12823] 9pnet_fd: Insufficient options for proto=fd [ 182.027086][T12712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.052199][T12712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.071405][T12712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.089715][T12712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.186569][T12864] macvtap1: entered allmulticast mode [ 182.192038][T12864] bridge0: entered allmulticast mode [ 182.197941][T12864] bridge0: port 3(macvtap1) entered blocking state [ 182.204513][T12864] bridge0: port 3(macvtap1) entered disabled state [ 182.213494][T12864] bridge0: left allmulticast mode [ 182.239401][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.255681][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.280545][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.287642][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.315449][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.322532][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.326798][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 182.344352][T12712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.354832][T12712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.414843][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 182.453399][T12901] loop0: detected capacity change from 0 to 512 [ 182.457418][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.464060][T12901] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.544383][T12901] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 182.586546][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 182.595026][T12918] bridge0: entered promiscuous mode [ 182.600760][T12918] macvtap1: entered allmulticast mode [ 182.606161][T12918] bridge0: entered allmulticast mode [ 182.616950][T12918] bridge0: port 3(macvtap1) entered blocking state [ 182.623737][T12918] bridge0: port 3(macvtap1) entered disabled state [ 182.636922][T12918] bridge0: left allmulticast mode [ 182.642042][T12918] bridge0: left promiscuous mode [ 182.666411][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 182.676570][T12712] veth0_vlan: entered promiscuous mode [ 182.742879][T12712] veth1_vlan: entered promiscuous mode [ 182.757852][T12712] veth0_macvtap: entered promiscuous mode [ 182.765203][T12712] veth1_macvtap: entered promiscuous mode [ 182.776056][T12712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.787180][T12712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.799448][ T4002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.816050][ T4002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.829375][ T4002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.842014][T12932] bridge0: entered promiscuous mode [ 182.847302][T12932] macvtap1: entered allmulticast mode [ 182.852719][T12932] bridge0: entered allmulticast mode [ 182.859716][T12932] bridge0: port 3(macvtap1) entered blocking state [ 182.866271][T12932] bridge0: port 3(macvtap1) entered disabled state [ 182.879150][T12932] bridge0: left allmulticast mode [ 182.884202][T12932] bridge0: left promiscuous mode [ 182.894329][ T4002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.895043][T12937] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.991777][T12944] loop1: detected capacity change from 0 to 512 [ 183.018606][T12944] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.051439][T12944] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 183.199400][T12946] chnl_net:caif_netlink_parms(): no params data found [ 183.269794][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.276872][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.285229][T12946] bridge_slave_0: entered allmulticast mode [ 183.292081][T12946] bridge_slave_0: entered promiscuous mode [ 183.300659][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.307729][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.318384][T12946] bridge_slave_1: entered allmulticast mode [ 183.326107][T12946] bridge_slave_1: entered promiscuous mode [ 183.353755][T12975] loop0: detected capacity change from 0 to 128 [ 183.375629][T12975] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.395060][T12946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.415634][T12946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.434060][ T4002] bridge_slave_1: left allmulticast mode [ 183.439867][ T4002] bridge_slave_1: left promiscuous mode [ 183.445565][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.456302][ T4002] bridge_slave_0: left allmulticast mode [ 183.462064][ T4002] bridge_slave_0: left promiscuous mode [ 183.467726][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.530275][ T4024] kworker/u8:30: attempt to access beyond end of device [ 183.530275][ T4024] loop0: rw=1, sector=249, nr_sectors = 1 limit=128 [ 184.151611][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.160936][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.170117][ T4002] bond0 (unregistering): Released all slaves [ 184.178150][ T4002] bond1 (unregistering): Released all slaves [ 184.196248][T12983] bridge0: entered promiscuous mode [ 184.203324][T12983] macvtap1: entered allmulticast mode [ 184.208700][T12983] bridge0: entered allmulticast mode [ 184.217216][T12983] bridge0: port 3(macvtap1) entered blocking state [ 184.223929][T12983] bridge0: port 3(macvtap1) entered disabled state [ 184.231641][T12983] bridge0: left allmulticast mode [ 184.236712][T12983] bridge0: left promiscuous mode [ 184.258616][T12996] netlink: 'syz.0.3236': attribute type 3 has an invalid length. [ 184.278390][T12946] team0: Port device team_slave_0 added [ 184.296736][T13007] loop4: detected capacity change from 0 to 256 [ 184.310560][ T4002] hsr_slave_0: left promiscuous mode [ 184.325750][T13007] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 184.325750][T13007] program syz.4.3240 not setting count and/or reply_len properly [ 184.344205][ T4002] hsr_slave_1: left promiscuous mode [ 184.358448][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.368665][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.403954][T13015] loop2: detected capacity change from 0 to 128 [ 184.411946][T13015] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.424906][T13015] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.446624][T12946] team0: Port device team_slave_1 added [ 184.459682][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3244'. [ 184.475949][T12946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.482998][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.508924][T12946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.520594][T12946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.527579][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.553644][T12946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.614166][T12946] hsr_slave_0: entered promiscuous mode [ 184.642122][T12946] hsr_slave_1: entered promiscuous mode [ 184.722818][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 184.722839][ T29] audit: type=1326 audit(1760298882.078:17873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.791412][ T29] audit: type=1326 audit(1760298882.088:17874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.815269][ T29] audit: type=1326 audit(1760298882.088:17875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.838969][ T29] audit: type=1326 audit(1760298882.088:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.862680][ T29] audit: type=1326 audit(1760298882.088:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.886268][ T29] audit: type=1326 audit(1760298882.088:17878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.909891][ T29] audit: type=1326 audit(1760298882.088:17879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.933473][ T29] audit: type=1326 audit(1760298882.088:17880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.957093][ T29] audit: type=1326 audit(1760298882.088:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 184.980723][ T29] audit: type=1326 audit(1760298882.088:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.4.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1742feeec9 code=0x7ffc0000 [ 185.017514][T13037] netlink: 'syz.4.3248': attribute type 3 has an invalid length. [ 185.025606][T13051] netlink: 'syz.2.3250': attribute type 3 has an invalid length. [ 185.093055][T13066] loop4: detected capacity change from 0 to 128 [ 185.132164][T13066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.159101][T13073] loop0: detected capacity change from 0 to 128 [ 185.166236][T13073] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.203505][T13073] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.226421][T13077] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.253111][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'. [ 185.254594][ T4009] kworker/u8:16: attempt to access beyond end of device [ 185.254594][ T4009] loop4: rw=1, sector=249, nr_sectors = 1 limit=128 [ 185.358896][T13092] loop2: detected capacity change from 0 to 256 [ 185.382508][T13092] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.382508][T13092] program syz.2.3259 not setting count and/or reply_len properly [ 185.425791][T12946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.444679][T12946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.476663][T12946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.487451][T12946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.590440][T12946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.627715][T12946] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.649634][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.656718][ T4009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.718207][T12946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.728684][T12946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.743114][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.750214][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.787014][T13138] loop2: detected capacity change from 0 to 128 [ 185.829689][T13138] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.855524][T13138] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.871958][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'. [ 185.884267][T12946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.976141][T12946] veth0_vlan: entered promiscuous mode [ 185.991672][T12946] veth1_vlan: entered promiscuous mode [ 186.025474][T12946] veth0_macvtap: entered promiscuous mode [ 186.041099][T12946] veth1_macvtap: entered promiscuous mode [ 186.057579][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.089541][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.126652][ T3508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.146614][ T4022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.166753][ T4022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.183731][ T4022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.247184][T13190] netlink: 'syz.4.3278': attribute type 3 has an invalid length. [ 186.285047][T13183] bridge0: entered promiscuous mode [ 186.306529][T13183] macvtap1: entered allmulticast mode [ 186.311976][T13183] bridge0: entered allmulticast mode [ 186.318783][T13183] bridge0: port 3(macvtap1) entered blocking state [ 186.325376][T13183] bridge0: port 3(macvtap1) entered disabled state [ 186.333574][T13183] bridge0: left allmulticast mode [ 186.338660][T13183] bridge0: left promiscuous mode [ 186.364973][T13204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3280'. [ 186.706059][T13248] loop3: detected capacity change from 0 to 128 [ 186.707158][T13233] bridge0: entered promiscuous mode [ 186.721907][T13248] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.725419][T13233] macvtap1: entered allmulticast mode [ 186.737864][T13233] bridge0: entered allmulticast mode [ 186.766082][T13233] bridge0: port 3(macvtap1) entered blocking state [ 186.772827][T13233] bridge0: port 3(macvtap1) entered disabled state [ 186.780848][T13233] bridge0: left allmulticast mode [ 186.785949][T13233] bridge0: left promiscuous mode [ 187.047783][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 187.065346][T13270] bridge0: entered promiscuous mode [ 187.071269][T13270] macvtap1: entered allmulticast mode [ 187.076678][T13270] bridge0: entered allmulticast mode [ 187.083389][T13270] bridge0: port 3(macvtap1) entered blocking state [ 187.090081][T13270] bridge0: port 3(macvtap1) entered disabled state [ 187.109833][T13270] bridge0: left allmulticast mode [ 187.114902][T13270] bridge0: left promiscuous mode [ 187.140108][T13283] loop3: detected capacity change from 0 to 512 [ 187.151324][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 187.151853][T13283] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.199069][T13279] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 187.257352][T13286] loop1: detected capacity change from 0 to 128 [ 187.276847][T13281] bridge0: entered promiscuous mode [ 187.283121][T13286] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.286585][T13281] macvtap1: entered allmulticast mode [ 187.299957][T13281] bridge0: entered allmulticast mode [ 187.308924][T13281] bridge0: port 3(macvtap1) entered blocking state [ 187.315545][T13281] bridge0: port 3(macvtap1) entered disabled state [ 187.324387][T13281] bridge0: left allmulticast mode [ 187.329458][T13281] bridge0: left promiscuous mode [ 187.513311][T13297] loop2: detected capacity change from 0 to 512 [ 187.545357][T13297] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.564354][T13297] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 187.582764][T13297] EXT4-fs (loop2): 1 truncate cleaned up [ 187.591310][T13297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.647444][T13322] loop0: detected capacity change from 0 to 128 [ 187.666454][T13324] loop4: detected capacity change from 0 to 128 [ 187.676324][T13322] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.779496][ T4768] kworker/u8:64: attempt to access beyond end of device [ 187.779496][ T4768] loop4: rw=1, sector=129, nr_sectors = 120 limit=128 [ 187.793769][ T4768] kworker/u8:64: attempt to access beyond end of device [ 187.793769][ T4768] loop4: rw=1, sector=249, nr_sectors = 1 limit=128 [ 188.041214][T13349] loop4: detected capacity change from 0 to 128 [ 188.065212][T13349] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.318104][T13384] loop3: detected capacity change from 0 to 512 [ 188.327125][T13385] loop4: detected capacity change from 0 to 512 [ 188.336978][T13384] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.339850][T13385] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.377493][T13384] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 188.407251][T13385] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 188.428295][T13393] FAULT_INJECTION: forcing a failure. [ 188.428295][T13393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.441397][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.1.3360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.441432][T13393] Tainted: [W]=WARN [ 188.441438][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.441449][T13393] Call Trace: [ 188.441454][T13393] [ 188.441461][T13393] __dump_stack+0x1d/0x30 [ 188.441486][T13393] dump_stack_lvl+0xe8/0x140 [ 188.441514][T13393] dump_stack+0x15/0x1b [ 188.441528][T13393] should_fail_ex+0x265/0x280 [ 188.441560][T13393] should_fail+0xb/0x20 [ 188.441588][T13393] should_fail_usercopy+0x1a/0x20 [ 188.441606][T13393] _copy_from_user+0x1c/0xb0 [ 188.441756][T13393] ___sys_sendmsg+0xc1/0x1d0 [ 188.441816][T13393] __x64_sys_sendmsg+0xd4/0x160 [ 188.441843][T13393] x64_sys_call+0x191e/0x3000 [ 188.441859][T13393] do_syscall_64+0xd2/0x200 [ 188.442013][T13393] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 188.442034][T13393] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 188.442132][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.442210][T13393] RIP: 0033:0x7f48948deec9 [ 188.442225][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.442299][T13393] RSP: 002b:00007f4893347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.442314][T13393] RAX: ffffffffffffffda RBX: 00007f4894b35fa0 RCX: 00007f48948deec9 [ 188.442329][T13393] RDX: 0000000020000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 188.442343][T13393] RBP: 00007f4893347090 R08: 0000000000000000 R09: 0000000000000000 [ 188.442358][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.442377][T13393] R13: 00007f4894b36038 R14: 00007f4894b35fa0 R15: 00007ffddd5a91a8 [ 188.442503][T13393] [ 188.754963][T13403] tipc: Started in network mode [ 188.759955][T13403] tipc: Node identity 1a10dca72702, cluster identity 4711 [ 188.767110][T13403] tipc: Enabled bearer , priority 0 [ 188.775016][T13403] FAULT_INJECTION: forcing a failure. [ 188.775016][T13403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.788132][T13403] CPU: 1 UID: 0 PID: 13403 Comm: syz.1.3364 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.788164][T13403] Tainted: [W]=WARN [ 188.788239][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.788250][T13403] Call Trace: [ 188.788255][T13403] [ 188.788262][T13403] __dump_stack+0x1d/0x30 [ 188.788280][T13403] dump_stack_lvl+0xe8/0x140 [ 188.788444][T13403] dump_stack+0x15/0x1b [ 188.788473][T13403] should_fail_ex+0x265/0x280 [ 188.788505][T13403] should_fail+0xb/0x20 [ 188.788533][T13403] should_fail_usercopy+0x1a/0x20 [ 188.788626][T13403] _copy_from_user+0x1c/0xb0 [ 188.788649][T13403] sock_do_ioctl+0xe6/0x220 [ 188.788668][T13403] sock_ioctl+0x41b/0x610 [ 188.788743][T13403] ? __pfx_sock_ioctl+0x10/0x10 [ 188.788796][T13403] __se_sys_ioctl+0xce/0x140 [ 188.788814][T13403] __x64_sys_ioctl+0x43/0x50 [ 188.788830][T13403] x64_sys_call+0x1816/0x3000 [ 188.788904][T13403] do_syscall_64+0xd2/0x200 [ 188.788949][T13403] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 188.788987][T13403] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 188.789007][T13403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.789025][T13403] RIP: 0033:0x7f48948deec9 [ 188.789042][T13403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.789098][T13403] RSP: 002b:00007f4893347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.789128][T13403] RAX: ffffffffffffffda RBX: 00007f4894b35fa0 RCX: 00007f48948deec9 [ 188.789144][T13403] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 188.789159][T13403] RBP: 00007f4893347090 R08: 0000000000000000 R09: 0000000000000000 [ 188.789175][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.789221][T13403] R13: 00007f4894b36038 R14: 00007f4894b35fa0 R15: 00007ffddd5a91a8 [ 188.789251][T13403] [ 188.980554][T13402] tipc: Disabling bearer [ 189.124144][T13411] loop4: detected capacity change from 0 to 128 [ 189.131744][T13411] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.144476][T13411] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.157882][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'. [ 189.205563][T13415] tipc: Enabled bearer , priority 0 [ 189.216493][T13417] tipc: Started in network mode [ 189.221564][T13417] tipc: Node identity a6198a03c22a, cluster identity 4711 [ 189.229224][T13417] tipc: Enabled bearer , priority 0 [ 189.239372][T13415] syzkaller0: MTU too low for tipc bearer [ 189.245133][T13415] tipc: Disabling bearer [ 189.252607][T13417] syzkaller0: MTU too low for tipc bearer [ 189.258349][T13417] tipc: Disabling bearer [ 189.398611][T13435] loop1: detected capacity change from 0 to 128 [ 189.422996][T13433] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.441295][T13429] bridge0: entered promiscuous mode [ 189.446608][T13429] macvtap1: entered allmulticast mode [ 189.452068][T13429] bridge0: entered allmulticast mode [ 189.460507][T13429] bridge0: port 3(macvtap1) entered blocking state [ 189.467134][T13429] bridge0: port 3(macvtap1) entered disabled state [ 189.469402][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 189.483634][T13429] bridge0: left allmulticast mode [ 189.488792][T13429] bridge0: left promiscuous mode [ 189.490673][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3376'. [ 189.512217][T13433] IPVS: Error connecting to the multicast addr [ 189.520669][ T4022] kworker/u8:28: attempt to access beyond end of device [ 189.520669][ T4022] loop1: rw=1, sector=129, nr_sectors = 120 limit=128 [ 189.534981][ T4022] kworker/u8:28: attempt to access beyond end of device [ 189.534981][ T4022] loop1: rw=1, sector=249, nr_sectors = 1 limit=128 [ 189.549091][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 189.665409][T13448] loop0: detected capacity change from 0 to 512 [ 189.693885][T13448] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.711191][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 189.728983][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 189.753231][T13448] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 190.388862][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.416555][T13462] loop2: detected capacity change from 0 to 2048 [ 190.439989][T13462] loop2: p2 < > p3 < p5 > p4 [ 190.444723][T13462] loop2: partition table partially beyond EOD, truncated [ 190.452015][T13462] loop2: p2 start 4278190080 is beyond EOD, truncated [ 190.459434][T13462] loop2: p4 size 8192 extends beyond EOD, truncated [ 190.466600][T13462] loop2: p5 size 8192 extends beyond EOD, truncated [ 190.547074][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 190.547885][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 190.567082][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 190.603880][T13471] loop2: detected capacity change from 0 to 512 [ 190.614478][T13471] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 190.624474][T13471] EXT4-fs (loop2): invalid journal inode [ 190.630787][T13471] EXT4-fs (loop2): can't get journal size [ 190.666940][T13471] EXT4-fs (loop2): 1 truncate cleaned up [ 190.672645][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 190.672656][ T29] audit: type=1326 audit(1760298888.028:18248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.702490][ T29] audit: type=1326 audit(1760298888.028:18249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.726194][ T29] audit: type=1326 audit(1760298888.028:18250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.749891][ T29] audit: type=1326 audit(1760298888.028:18251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.759727][T13471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.773605][ T29] audit: type=1326 audit(1760298888.028:18252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.806701][T13471] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.809758][ T29] audit: type=1326 audit(1760298888.158:18253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.842032][ T29] audit: type=1326 audit(1760298888.158:18254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.879068][ T29] audit: type=1326 audit(1760298888.218:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.902928][ T29] audit: type=1326 audit(1760298888.218:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.926599][ T29] audit: type=1326 audit(1760298888.218:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.0.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 190.955026][T13481] loop1: detected capacity change from 0 to 128 [ 190.974399][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 190.997698][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 191.017323][T13482] bridge0: entered promiscuous mode [ 191.022771][T13482] macvtap1: entered allmulticast mode [ 191.028164][T13482] bridge0: entered allmulticast mode [ 191.037835][T13482] bridge0: port 3(macvtap1) entered blocking state [ 191.044450][T13482] bridge0: port 3(macvtap1) entered disabled state [ 191.052012][T13482] bridge0: left allmulticast mode [ 191.057111][T13482] bridge0: left promiscuous mode [ 191.106766][ T4009] kworker/u8:16: attempt to access beyond end of device [ 191.106766][ T4009] loop1: rw=1, sector=129, nr_sectors = 120 limit=128 [ 191.125142][ T4009] kworker/u8:16: attempt to access beyond end of device [ 191.125142][ T4009] loop1: rw=1, sector=249, nr_sectors = 1 limit=128 [ 191.143137][T13494] bridge0: entered promiscuous mode [ 191.148542][T13494] macvtap1: entered allmulticast mode [ 191.154007][T13494] bridge0: entered allmulticast mode [ 191.161415][T13494] bridge0: port 3(macvtap1) entered blocking state [ 191.167986][T13494] bridge0: port 3(macvtap1) entered disabled state [ 191.176404][T13494] bridge0: left allmulticast mode [ 191.181617][T13494] bridge0: left promiscuous mode [ 191.201135][T13497] bridge0: entered promiscuous mode [ 191.206385][T13497] macvtap1: entered allmulticast mode [ 191.211959][T13497] bridge0: entered allmulticast mode [ 191.219156][T13497] bridge0: port 3(macvtap1) entered blocking state [ 191.225789][T13497] bridge0: port 3(macvtap1) entered disabled state [ 191.232382][T13504] loop4: detected capacity change from 0 to 1024 [ 191.239813][T13497] bridge0: left allmulticast mode [ 191.244870][T13497] bridge0: left promiscuous mode [ 191.250021][T13504] ext3: Unknown parameter 'noacl' [ 191.278967][T13507] FAULT_INJECTION: forcing a failure. [ 191.278967][T13507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.292395][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.2.3403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.292430][T13507] Tainted: [W]=WARN [ 191.292446][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.292457][T13507] Call Trace: [ 191.292461][T13507] [ 191.292467][T13507] __dump_stack+0x1d/0x30 [ 191.292486][T13507] dump_stack_lvl+0xe8/0x140 [ 191.292506][T13507] dump_stack+0x15/0x1b [ 191.292525][T13507] should_fail_ex+0x265/0x280 [ 191.292613][T13507] should_fail_alloc_page+0xf2/0x100 [ 191.292646][T13507] __alloc_frozen_pages_noprof+0xff/0x360 [ 191.292687][T13507] alloc_pages_mpol+0xb3/0x260 [ 191.292729][T13507] alloc_pages_noprof+0x90/0x130 [ 191.292757][T13507] __pud_alloc+0x47/0x470 [ 191.292812][T13507] handle_mm_fault+0x1882/0x2be0 [ 191.292833][T13507] ? __rcu_read_unlock+0x4f/0x70 [ 191.292909][T13507] ? mt_find+0x208/0x320 [ 191.292946][T13507] do_user_addr_fault+0x3fe/0x1080 [ 191.292969][T13507] exc_page_fault+0x62/0xa0 [ 191.293097][T13507] asm_exc_page_fault+0x26/0x30 [ 191.293122][T13507] RIP: 0010:__get_user_8+0x14/0x30 [ 191.293152][T13507] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 3f ec 01 00 90 90 90 90 90 90 90 90 90 [ 191.293168][T13507] RSP: 0018:ffffc90004fa3eb0 EFLAGS: 00050283 [ 191.293182][T13507] RAX: 0000200000000180 RBX: 0000200000000180 RCX: ffff888104029080 [ 191.293193][T13507] RDX: 00007ffffffff000 RSI: 0000200000000180 RDI: 00000000000008f0 [ 191.293214][T13507] RBP: ffffc90004fa3f48 R08: 0001c90004fa3fc7 R09: 0000000000000000 [ 191.293225][T13507] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 191.293236][T13507] R13: 0000000000000000 R14: 00000000000008f0 R15: ffff888104029080 [ 191.293277][T13507] __se_sys_io_setup+0x1d/0x1b0 [ 191.293301][T13507] __x64_sys_io_setup+0x31/0x40 [ 191.293323][T13507] x64_sys_call+0x2f0e/0x3000 [ 191.293380][T13507] do_syscall_64+0xd2/0x200 [ 191.293400][T13507] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.293424][T13507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 191.293448][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.293466][T13507] RIP: 0033:0x7f8ea86aeec9 [ 191.293479][T13507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.293495][T13507] RSP: 002b:00007f8ea7117038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 191.293512][T13507] RAX: ffffffffffffffda RBX: 00007f8ea8905fa0 RCX: 00007f8ea86aeec9 [ 191.293523][T13507] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00000000000008f0 [ 191.293552][T13507] RBP: 00007f8ea7117090 R08: 0000000000000000 R09: 0000000000000000 [ 191.293563][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.293573][T13507] R13: 00007f8ea8906038 R14: 00007f8ea8905fa0 R15: 00007ffed9722828 [ 191.293590][T13507] [ 191.721736][T13525] netlink: 'syz.4.3408': attribute type 3 has an invalid length. [ 191.729532][T13525] netlink: 'syz.4.3408': attribute type 4 has an invalid length. [ 191.737333][T13525] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.3408'. [ 191.747191][T13524] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 191.761895][T13527] loop1: detected capacity change from 0 to 128 [ 191.768039][T13525] netlink: 'syz.4.3408': attribute type 21 has an invalid length. [ 191.781070][T13525] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3408'. [ 191.901313][ T4002] kworker/u8:10: attempt to access beyond end of device [ 191.901313][ T4002] loop1: rw=1, sector=129, nr_sectors = 120 limit=128 [ 191.915589][ T4002] kworker/u8:10: attempt to access beyond end of device [ 191.915589][ T4002] loop1: rw=1, sector=249, nr_sectors = 1 limit=128 [ 192.003031][T13534] bridge0: entered promiscuous mode [ 192.008371][T13534] macvtap1: entered allmulticast mode [ 192.013896][T13534] bridge0: entered allmulticast mode [ 192.026476][T13534] bridge0: port 3(macvtap1) entered blocking state [ 192.033042][T13534] bridge0: port 3(macvtap1) entered disabled state [ 192.045797][T13534] bridge0: left allmulticast mode [ 192.050919][T13534] bridge0: left promiscuous mode [ 192.071534][T13558] FAULT_INJECTION: forcing a failure. [ 192.071534][T13558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.084865][T13558] CPU: 0 UID: 0 PID: 13558 Comm: syz.4.3422 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.084904][T13558] Tainted: [W]=WARN [ 192.084912][T13558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.084965][T13558] Call Trace: [ 192.084970][T13558] [ 192.084977][T13558] __dump_stack+0x1d/0x30 [ 192.085053][T13558] dump_stack_lvl+0xe8/0x140 [ 192.085095][T13558] dump_stack+0x15/0x1b [ 192.085116][T13558] should_fail_ex+0x265/0x280 [ 192.085248][T13558] should_fail+0xb/0x20 [ 192.085301][T13558] should_fail_usercopy+0x1a/0x20 [ 192.085321][T13558] _copy_from_iter+0x254/0xe80 [ 192.085393][T13558] ? __build_skb_around+0x1ab/0x200 [ 192.085427][T13558] skb_copy_datagram_from_iter+0xb1/0x490 [ 192.085535][T13558] ? __netdev_alloc_frag_align+0xd8/0x130 [ 192.085567][T13558] tun_get_user+0xafa/0x26e0 [ 192.085718][T13558] ? ref_tracker_alloc+0x1f2/0x2f0 [ 192.085781][T13558] tun_chr_write_iter+0x15e/0x210 [ 192.085877][T13558] do_iter_readv_writev+0x4a1/0x540 [ 192.085913][T13558] vfs_writev+0x2df/0x8b0 [ 192.085959][T13558] do_writev+0xe7/0x210 [ 192.085988][T13558] __x64_sys_writev+0x45/0x50 [ 192.086047][T13558] x64_sys_call+0x1e9a/0x3000 [ 192.086073][T13558] do_syscall_64+0xd2/0x200 [ 192.086099][T13558] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.086140][T13558] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 192.086165][T13558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.086185][T13558] RIP: 0033:0x7f1742feeec9 [ 192.086262][T13558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.086283][T13558] RSP: 002b:00007f1741a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 192.086300][T13558] RAX: ffffffffffffffda RBX: 00007f1743245fa0 RCX: 00007f1742feeec9 [ 192.086311][T13558] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 192.086322][T13558] RBP: 00007f1741a57090 R08: 0000000000000000 R09: 0000000000000000 [ 192.086337][T13558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.086369][T13558] R13: 00007f1743246038 R14: 00007f1743245fa0 R15: 00007ffe204e9768 [ 192.086392][T13558] [ 192.408896][T13572] loop0: detected capacity change from 0 to 256 [ 192.533008][T13589] loop3: detected capacity change from 0 to 512 [ 192.551809][T13589] EXT4-fs (loop3): 1 orphan inode deleted [ 192.558000][T13589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.571993][ T3508] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 1 [ 192.584002][T13589] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.643174][T12946] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /29/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.667044][T12946] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.668235][T13596] bridge0: entered promiscuous mode [ 192.686280][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.691209][T13596] macvtap1: entered allmulticast mode [ 192.702924][T12946] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /29/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.707858][T13596] bridge0: entered allmulticast mode [ 192.728937][T12946] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.736765][T13596] bridge0: port 3(macvtap1) entered blocking state [ 192.753128][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.759484][T13596] bridge0: port 3(macvtap1) entered disabled state [ 192.772880][T12946] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /29/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.798203][T12946] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.816951][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.817422][T13596] bridge0: left allmulticast mode [ 192.829165][T12946] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /29/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.833637][T13596] bridge0: left promiscuous mode [ 192.865066][T12946] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.885528][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.897413][T12946] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /29/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 192.918498][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.930562][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.942447][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.954372][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.966227][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 192.978386][T12946] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 193.180929][T12946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.194242][ T4002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.261896][ T4002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.301923][ T4002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.321741][T13615] loop1: detected capacity change from 0 to 512 [ 193.338406][T13615] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.360469][ T4002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.377942][T13615] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 193.433211][T13626] netlink: 'syz.0.3446': attribute type 3 has an invalid length. [ 193.496873][ T4002] bridge_slave_1: left allmulticast mode [ 193.502631][ T4002] bridge_slave_1: left promiscuous mode [ 193.508402][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.532319][ T4002] bridge_slave_0: left allmulticast mode [ 193.537976][ T4002] bridge_slave_0: left promiscuous mode [ 193.543716][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.653465][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.664965][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.675207][ T4002] bond0 (unregistering): Released all slaves [ 193.714940][ T4002] tipc: Left network mode [ 193.733031][ T4002] hsr_slave_0: left promiscuous mode [ 193.749265][ T4002] hsr_slave_1: left promiscuous mode [ 193.756683][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.764304][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.781881][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.789315][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.801082][ T4002] veth1_macvtap: left promiscuous mode [ 193.801174][T13662] loop4: detected capacity change from 0 to 128 [ 193.806630][ T4002] veth0_macvtap: left promiscuous mode [ 193.818655][ T4002] veth1_vlan: left promiscuous mode [ 193.833287][ T4002] veth0_vlan: left promiscuous mode [ 193.851741][T13665] loop2: detected capacity change from 0 to 128 [ 193.862734][T13665] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.911413][T13662] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.921987][T13665] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.975932][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 193.986964][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 194.031795][T13676] loop4: detected capacity change from 0 to 128 [ 194.049430][T13676] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.065187][T13676] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.241413][T13613] chnl_net:caif_netlink_parms(): no params data found [ 194.365704][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.372824][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.388931][T13706] __nla_validate_parse: 3 callbacks suppressed [ 194.388948][T13706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3456'. [ 194.395410][T13613] bridge_slave_0: entered allmulticast mode [ 194.421437][T13613] bridge_slave_0: entered promiscuous mode [ 194.434763][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.441877][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.456105][T13613] bridge_slave_1: entered allmulticast mode [ 194.469990][T13613] bridge_slave_1: entered promiscuous mode [ 194.522791][T13713] bridge0: entered promiscuous mode [ 194.533885][T13713] macvtap1: entered allmulticast mode [ 194.539364][T13713] bridge0: entered allmulticast mode [ 194.562008][T13713] bridge0: port 3(macvtap1) entered blocking state [ 194.568559][T13713] bridge0: port 3(macvtap1) entered disabled state [ 194.591867][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 194.606274][T13713] bridge0: left allmulticast mode [ 194.611439][T13713] bridge0: left promiscuous mode [ 194.630236][T13613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.647705][T13613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.664592][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 194.711546][T13613] team0: Port device team_slave_0 added [ 194.728859][T13613] team0: Port device team_slave_1 added [ 194.769041][T13613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.776093][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.791274][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 194.802060][T13613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.831660][T13613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.838677][T13613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.864728][T13613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.886993][T13742] loop0: detected capacity change from 0 to 512 [ 194.903115][T13742] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.923354][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 194.932044][T13740] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 194.986823][T13613] hsr_slave_0: entered promiscuous mode [ 194.993164][T13613] hsr_slave_1: entered promiscuous mode [ 195.030845][T13748] loop4: detected capacity change from 0 to 1024 [ 195.037819][T13748] EXT4-fs: Ignoring removed orlov option [ 195.066902][T13748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.090209][T13752] program syz.2.3467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.203351][T13757] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3467'. [ 195.236264][T13757] hsr_slave_0: left promiscuous mode [ 195.269050][T13748] SELinux: Context system_u:object_r:sysfs_t:s0 is not valid (left unmapped). [ 195.290771][T13613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.306789][T12132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.317719][T13613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.349697][T13613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.364883][T13762] loop4: detected capacity change from 0 to 2048 [ 195.373372][T13613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.418975][T13613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.427622][T13762] loop4: p2 < > p3 < p5 > p4 [ 195.432427][T13762] loop4: partition table partially beyond EOD, truncated [ 195.446836][T13613] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.455653][T13762] loop4: p2 start 4278190080 is beyond EOD, truncated [ 195.467010][T13762] loop4: p4 size 8192 extends beyond EOD, truncated [ 195.475179][T13762] loop4: p5 size 8192 extends beyond EOD, truncated [ 195.483635][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.490725][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.500460][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.507550][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.516978][ T3001] loop4: p2 < > p3 < p5 > p4 [ 195.521835][ T3001] loop4: partition table partially beyond EOD, truncated [ 195.529152][ T3001] loop4: p2 start 4278190080 is beyond EOD, truncated [ 195.537207][ T3001] loop4: p4 size 8192 extends beyond EOD, truncated [ 195.548446][T13613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.561621][ T3001] loop4: p5 size 8192 extends beyond EOD, truncated [ 195.591005][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 195.613013][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 195.665770][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 195.677013][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 195.688760][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3471'. [ 195.690793][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 195.708979][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 195.708996][ T29] audit: type=1326 audit(1760298893.058:18615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 195.734802][T13613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.738885][ T29] audit: type=1326 audit(1760298893.058:18616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 195.753202][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3471'. [ 195.769136][ T29] audit: type=1326 audit(1760298893.058:18617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 195.801575][ T29] audit: type=1326 audit(1760298893.058:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 195.825105][ T29] audit: type=1326 audit(1760298893.058:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13777 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8612eec9 code=0x7ffc0000 [ 195.889588][T13785] pimreg: entered allmulticast mode [ 195.896965][T13785] pimreg: left allmulticast mode [ 195.904760][ T29] audit: type=1400 audit(1760298893.238:18620): avc: denied { map } for pid=13784 comm="syz.0.3473" path="socket:[38649]" dev="sockfs" ino=38649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.928022][ T29] audit: type=1400 audit(1760298893.238:18621): avc: denied { read } for pid=13784 comm="syz.0.3473" path="socket:[38649]" dev="sockfs" ino=38649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.026415][T13796] loop2: detected capacity change from 0 to 128 [ 196.057155][T13796] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.127172][ T29] audit: type=1326 audit(1760298893.478:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 196.151000][ T29] audit: type=1326 audit(1760298893.478:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 196.174764][ T29] audit: type=1326 audit(1760298893.478:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 196.213197][T13808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3478'. [ 196.278065][ T4768] kworker/u8:64: attempt to access beyond end of device [ 196.278065][ T4768] loop2: rw=1, sector=129, nr_sectors = 120 limit=128 [ 196.299337][T13613] veth0_vlan: entered promiscuous mode [ 196.305273][ T4768] kworker/u8:64: attempt to access beyond end of device [ 196.305273][ T4768] loop2: rw=1, sector=249, nr_sectors = 1 limit=128 [ 196.319748][T13816] loop0: detected capacity change from 0 to 128 [ 196.322765][T13613] veth1_vlan: entered promiscuous mode [ 196.344656][T13817] loop4: detected capacity change from 0 to 512 [ 196.348625][T13613] veth0_macvtap: entered promiscuous mode [ 196.357457][T13817] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.374587][T13613] veth1_macvtap: entered promiscuous mode [ 196.394485][T13816] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.397556][T13817] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 196.416335][T13613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.438148][T13613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.460350][ T3508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.483098][ T3508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.509398][ T3508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.518177][ T3508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.527379][ T4768] kworker/u8:64: attempt to access beyond end of device [ 196.527379][ T4768] loop0: rw=1, sector=129, nr_sectors = 120 limit=128 [ 196.705684][T13831] bridge0: entered promiscuous mode [ 196.716153][T13831] macvtap1: entered allmulticast mode [ 196.721623][T13831] bridge0: entered allmulticast mode [ 196.729733][T13831] bridge0: port 3(macvtap1) entered blocking state [ 196.736273][T13831] bridge0: port 3(macvtap1) entered disabled state [ 196.744351][T13831] bridge0: left allmulticast mode [ 196.749439][T13831] bridge0: left promiscuous mode [ 196.778301][T13833] bridge0: entered promiscuous mode [ 196.784166][T13833] macvtap1: entered allmulticast mode [ 196.789657][T13833] bridge0: entered allmulticast mode [ 196.801454][T13833] bridge0: port 3(macvtap1) entered blocking state [ 196.808024][T13833] bridge0: port 3(macvtap1) entered disabled state [ 196.819279][T13833] bridge0: left allmulticast mode [ 196.824324][T13833] bridge0: left promiscuous mode [ 196.904790][T13840] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3490'. [ 196.971258][T13840] batadv1: entered promiscuous mode [ 196.976500][T13840] batadv1: entered allmulticast mode [ 197.000792][T13843] tipc: Enabled bearer , priority 0 [ 197.014176][T13843] syzkaller0: MTU too low for tipc bearer [ 197.019959][T13843] tipc: Disabling bearer [ 197.094349][T13847] loop1: detected capacity change from 0 to 128 [ 197.172148][T13847] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.252985][T13849] bridge0: entered promiscuous mode [ 197.258381][T13849] macvtap1: entered allmulticast mode [ 197.263883][T13849] bridge0: entered allmulticast mode [ 197.278919][ T4768] kworker/u8:64: attempt to access beyond end of device [ 197.278919][ T4768] loop1: rw=1, sector=129, nr_sectors = 120 limit=128 [ 197.280048][T13849] bridge0: port 3(macvtap1) entered blocking state [ 197.299025][T13849] bridge0: port 3(macvtap1) entered disabled state [ 197.321860][T13849] bridge0: left allmulticast mode [ 197.327037][T13849] bridge0: left promiscuous mode [ 197.452345][T13841] loop0: detected capacity change from 0 to 1024 [ 197.482538][T13841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.877101][T12426] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.064163][T13879] loop0: detected capacity change from 0 to 512 [ 198.081934][T13879] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.100243][T13883] IPVS: Error connecting to the multicast addr [ 198.109430][T13879] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 198.144019][T13887] loop2: detected capacity change from 0 to 128 [ 198.156486][T13887] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.247711][ T3508] kworker/u8:8: attempt to access beyond end of device [ 198.247711][ T3508] loop2: rw=1, sector=129, nr_sectors = 120 limit=128 [ 198.275284][T13892] bridge_slave_1: left allmulticast mode [ 198.281020][T13892] bridge_slave_1: left promiscuous mode [ 198.286649][T13892] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.306318][T13892] bridge_slave_0: left allmulticast mode [ 198.312114][T13892] bridge_slave_0: left promiscuous mode [ 198.317848][T13892] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.586654][T13922] loop1: detected capacity change from 0 to 128 [ 198.601140][T13922] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.722712][ T4002] kworker/u8:10: attempt to access beyond end of device [ 198.722712][ T4002] loop1: rw=1, sector=129, nr_sectors = 120 limit=128 [ 198.886669][T13940] Driver unsupported XDP return value 0 on prog (id 2605) dev N/A, expect packet loss! [ 199.029330][T13960] bridge0: entered promiscuous mode [ 199.034861][T13960] macvtap1: entered allmulticast mode [ 199.040314][T13960] bridge0: entered allmulticast mode [ 199.047725][T13960] bridge0: port 3(macvtap1) entered blocking state [ 199.054518][T13960] bridge0: port 3(macvtap1) entered disabled state [ 199.062581][T13960] bridge0: left allmulticast mode [ 199.067672][T13960] bridge0: left promiscuous mode [ 199.114294][T13970] bridge0: entered promiscuous mode [ 199.119921][T13970] macvtap1: entered allmulticast mode [ 199.125407][T13970] bridge0: entered allmulticast mode [ 199.134461][T13970] bridge0: port 3(macvtap1) entered blocking state [ 199.141121][T13970] bridge0: port 3(macvtap1) entered disabled state [ 199.148692][T13970] bridge0: left allmulticast mode [ 199.153868][T13970] bridge0: left promiscuous mode [ 199.177911][T13977] loop4: detected capacity change from 0 to 128 [ 199.193902][T13977] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 199.322943][ T4768] kworker/u8:64: attempt to access beyond end of device [ 199.322943][ T4768] loop4: rw=1, sector=129, nr_sectors = 120 limit=128 [ 199.337084][ T4768] kworker/u8:64: attempt to access beyond end of device [ 199.337084][ T4768] loop4: rw=1, sector=249, nr_sectors = 1 limit=128 [ 199.468022][T14026] loop1: detected capacity change from 0 to 128 [ 199.476910][T14027] loop4: detected capacity change from 0 to 512 [ 199.487966][T14027] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.507548][T14026] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.552723][T14026] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.563194][T14027] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 199.594484][T14026] __nla_validate_parse: 9 callbacks suppressed [ 199.594495][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3541'. [ 199.627078][T14045] bridge0: entered promiscuous mode [ 199.632560][T14045] macvtap1: entered allmulticast mode [ 199.637944][T14045] bridge0: entered allmulticast mode [ 199.645119][T14045] bridge0: port 3(macvtap1) entered blocking state [ 199.651799][T14045] bridge0: port 3(macvtap1) entered disabled state [ 199.669246][T14045] bridge0: left allmulticast mode [ 199.674296][T14045] bridge0: left promiscuous mode [ 199.771994][T14065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=14065 comm=syz.2.3546 [ 200.648359][T14144] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3557'. [ 200.698061][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 200.758187][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 200.781374][T14155] loop5: detected capacity change from 0 to 128 [ 200.794195][T14155] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.930441][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 200.930454][ T29] audit: type=1326 audit(1760298898.258:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 200.933314][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'. [ 200.936670][ T29] audit: type=1326 audit(1760298898.258:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 200.992754][ T29] audit: type=1326 audit(1760298898.258:18727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.016359][ T29] audit: type=1326 audit(1760298898.258:18728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.040802][ T29] audit: type=1326 audit(1760298898.268:18729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.064491][ T29] audit: type=1326 audit(1760298898.268:18730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.088101][ T29] audit: type=1326 audit(1760298898.268:18731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.111834][ T29] audit: type=1326 audit(1760298898.268:18732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.122537][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'. [ 201.135481][ T29] audit: type=1326 audit(1760298898.268:18733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.135513][ T29] audit: type=1326 audit(1760298898.268:18734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14158 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea86aeec9 code=0x7ffc0000 [ 201.350080][T14178] loop2: detected capacity change from 0 to 2048 [ 201.389387][ T3303] loop2: p2 < > p3 < p5 > p4 [ 201.394113][ T3303] loop2: partition table partially beyond EOD, truncated [ 201.401850][ T3303] loop2: p2 start 4278190080 is beyond EOD, truncated [ 201.409075][ T3303] loop2: p4 size 8192 extends beyond EOD, truncated [ 201.416595][ T3303] loop2: p5 size 8192 extends beyond EOD, truncated [ 201.425444][T14178] loop2: p2 < > p3 < p5 > p4 [ 201.430180][T14178] loop2: partition table partially beyond EOD, truncated [ 201.437381][T14178] loop2: p2 start 4278190080 is beyond EOD, truncated [ 201.447381][T14178] loop2: p4 size 8192 extends beyond EOD, truncated [ 201.454979][T14178] loop2: p5 size 8192 extends beyond EOD, truncated [ 201.585250][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 201.665204][T14190] loop2: detected capacity change from 0 to 128 [ 201.705082][T14190] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.788964][ T4002] kworker/u8:10: attempt to access beyond end of device [ 201.788964][ T4002] loop2: rw=1, sector=129, nr_sectors = 120 limit=128 [ 201.802878][ T4002] kworker/u8:10: attempt to access beyond end of device [ 201.802878][ T4002] loop2: rw=1, sector=249, nr_sectors = 1 limit=128 [ 202.345694][T14268] FAULT_INJECTION: forcing a failure. [ 202.345694][T14268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.358959][T14268] CPU: 0 UID: 0 PID: 14268 Comm: syz.1.3602 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.358994][T14268] Tainted: [W]=WARN [ 202.359001][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.359012][T14268] Call Trace: [ 202.359018][T14268] [ 202.359025][T14268] __dump_stack+0x1d/0x30 [ 202.359088][T14268] dump_stack_lvl+0xe8/0x140 [ 202.359190][T14268] dump_stack+0x15/0x1b [ 202.359203][T14268] should_fail_ex+0x265/0x280 [ 202.359233][T14268] should_fail+0xb/0x20 [ 202.359288][T14268] should_fail_usercopy+0x1a/0x20 [ 202.359364][T14268] _copy_to_user+0x20/0xa0 [ 202.359392][T14268] simple_read_from_buffer+0xb5/0x130 [ 202.359450][T14268] proc_fail_nth_read+0x10e/0x150 [ 202.359476][T14268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.359512][T14268] vfs_read+0x1a8/0x770 [ 202.359536][T14268] ? __rcu_read_unlock+0x4f/0x70 [ 202.359563][T14268] ? __fget_files+0x184/0x1c0 [ 202.359622][T14268] ksys_read+0xda/0x1a0 [ 202.359642][T14268] __x64_sys_read+0x40/0x50 [ 202.359661][T14268] x64_sys_call+0x27c0/0x3000 [ 202.359683][T14268] do_syscall_64+0xd2/0x200 [ 202.359782][T14268] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.359840][T14268] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 202.359864][T14268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.359928][T14268] RIP: 0033:0x7f48948dd8dc [ 202.359940][T14268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.360034][T14268] RSP: 002b:00007f4893347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.360056][T14268] RAX: ffffffffffffffda RBX: 00007f4894b35fa0 RCX: 00007f48948dd8dc [ 202.360070][T14268] RDX: 000000000000000f RSI: 00007f48933470a0 RDI: 0000000000000003 [ 202.360081][T14268] RBP: 00007f4893347090 R08: 0000000000000000 R09: 0000000000000000 [ 202.360101][T14268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.360114][T14268] R13: 00007f4894b36038 R14: 00007f4894b35fa0 R15: 00007ffddd5a91a8 [ 202.360135][T14268] [ 202.582488][T14271] loop5: detected capacity change from 0 to 128 [ 202.597093][T14271] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.634203][T14271] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.890453][T14291] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3607'. [ 203.245876][T14297] loop4: detected capacity change from 0 to 2048 [ 203.279359][ T3303] loop4: p2 < > p3 < p5 > p4 [ 203.284058][ T3303] loop4: partition table partially beyond EOD, truncated [ 203.292008][ T3303] loop4: p2 start 4278190080 is beyond EOD, truncated [ 203.300184][ T3303] loop4: p4 size 8192 extends beyond EOD, truncated [ 203.307277][ T3303] loop4: p5 size 8192 extends beyond EOD, truncated [ 203.317539][T14297] loop4: p2 < > p3 < p5 > p4 [ 203.322298][T14297] loop4: partition table partially beyond EOD, truncated [ 203.329700][T14297] loop4: p2 start 4278190080 is beyond EOD, truncated [ 203.336987][T14297] loop4: p4 size 8192 extends beyond EOD, truncated [ 203.344082][T14297] loop4: p5 size 8192 extends beyond EOD, truncated [ 203.384267][T14306] loop4: detected capacity change from 0 to 512 [ 203.391218][T14306] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 203.399964][T14306] EXT4-fs (loop4): invalid journal inode [ 203.406351][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 203.406923][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 203.416401][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 203.426256][T14306] EXT4-fs (loop4): can't get journal size [ 203.445944][T14306] EXT4-fs (loop4): 1 truncate cleaned up [ 203.457536][ T4002] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.460701][T14306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.484055][T14306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.568278][T14314] loop4: detected capacity change from 0 to 128 [ 203.593282][T14314] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 203.729743][ T4002] kworker/u8:10: attempt to access beyond end of device [ 203.729743][ T4002] loop4: rw=1, sector=129, nr_sectors = 120 limit=128 [ 203.748937][ T4002] kworker/u8:10: attempt to access beyond end of device [ 203.748937][ T4002] loop4: rw=1, sector=249, nr_sectors = 1 limit=128 [ 203.760554][T14328] bridge0: entered promiscuous mode [ 203.768627][T14328] macvtap1: entered allmulticast mode [ 203.774136][T14328] bridge0: entered allmulticast mode [ 203.781597][T14328] bridge0: port 3(macvtap1) entered blocking state [ 203.788151][T14328] bridge0: port 3(macvtap1) entered disabled state [ 203.804986][T14328] bridge0: left allmulticast mode [ 203.810137][T14328] bridge0: left promiscuous mode [ 203.926480][T14332] FAULT_INJECTION: forcing a failure. [ 203.926480][T14332] name failslab, interval 1, probability 0, space 0, times 0 [ 203.939277][T14332] CPU: 0 UID: 0 PID: 14332 Comm: syz.4.3625 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.939307][T14332] Tainted: [W]=WARN [ 203.939385][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.939400][T14332] Call Trace: [ 203.939407][T14332] [ 203.939415][T14332] __dump_stack+0x1d/0x30 [ 203.939439][T14332] dump_stack_lvl+0xe8/0x140 [ 203.939461][T14332] dump_stack+0x15/0x1b [ 203.939483][T14332] should_fail_ex+0x265/0x280 [ 203.939523][T14332] should_failslab+0x8c/0xb0 [ 203.939556][T14332] kmem_cache_alloc_noprof+0x50/0x480 [ 203.939587][T14332] ? audit_log_start+0x342/0x720 [ 203.939610][T14332] audit_log_start+0x342/0x720 [ 203.939630][T14332] ? kstrtouint+0x76/0xc0 [ 203.939715][T14332] audit_seccomp+0x48/0x100 [ 203.939751][T14332] ? __seccomp_filter+0x82d/0x1250 [ 203.939780][T14332] __seccomp_filter+0x83e/0x1250 [ 203.939876][T14332] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 203.939912][T14332] ? vfs_write+0x7e8/0x960 [ 203.939939][T14332] ? __rcu_read_unlock+0x4f/0x70 [ 203.939996][T14332] ? __fget_files+0x184/0x1c0 [ 203.940043][T14332] __secure_computing+0x82/0x150 [ 203.940086][T14332] syscall_trace_enter+0xcf/0x1e0 [ 203.940190][T14332] do_syscall_64+0xac/0x200 [ 203.940220][T14332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 203.940254][T14332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 203.940281][T14332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.940364][T14332] RIP: 0033:0x7f1742feeec9 [ 203.940382][T14332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.940427][T14332] RSP: 002b:00007f1741a57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 203.940451][T14332] RAX: ffffffffffffffda RBX: 00007f1743245fa0 RCX: 00007f1742feeec9 [ 203.940469][T14332] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 203.940503][T14332] RBP: 00007f1741a57090 R08: 0000000000000000 R09: 0000000000000000 [ 203.940519][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.940535][T14332] R13: 00007f1743246038 R14: 00007f1743245fa0 R15: 00007ffe204e9768 [ 203.940641][T14332] [ 203.945969][T14334] loop1: detected capacity change from 0 to 128 [ 203.957679][T14332] loop4: detected capacity change from 0 to 256 [ 204.025885][T14334] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.127207][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'. [ 204.537077][T14394] FAULT_INJECTION: forcing a failure. [ 204.537077][T14394] name failslab, interval 1, probability 0, space 0, times 0 [ 204.549845][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.1.3644 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.549910][T14394] Tainted: [W]=WARN [ 204.549917][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.549932][T14394] Call Trace: [ 204.549938][T14394] [ 204.549946][T14394] __dump_stack+0x1d/0x30 [ 204.549980][T14394] dump_stack_lvl+0xe8/0x140 [ 204.550002][T14394] dump_stack+0x15/0x1b [ 204.550020][T14394] should_fail_ex+0x265/0x280 [ 204.550058][T14394] should_failslab+0x8c/0xb0 [ 204.550114][T14394] kmem_cache_alloc_noprof+0x50/0x480 [ 204.550144][T14394] ? audit_log_start+0x342/0x720 [ 204.550166][T14394] audit_log_start+0x342/0x720 [ 204.550187][T14394] ? kstrtouint+0x76/0xc0 [ 204.550264][T14394] audit_seccomp+0x48/0x100 [ 204.550352][T14394] ? __seccomp_filter+0x82d/0x1250 [ 204.550433][T14394] __seccomp_filter+0x83e/0x1250 [ 204.550464][T14394] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 204.550563][T14394] ? vfs_write+0x7e8/0x960 [ 204.550614][T14394] __secure_computing+0x82/0x150 [ 204.550727][T14394] syscall_trace_enter+0xcf/0x1e0 [ 204.550764][T14394] do_syscall_64+0xac/0x200 [ 204.550797][T14394] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 204.550831][T14394] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 204.550892][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.550999][T14394] RIP: 0033:0x7f48948deec9 [ 204.551093][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.551117][T14394] RSP: 002b:00007f4893347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 204.551142][T14394] RAX: ffffffffffffffda RBX: 00007f4894b35fa0 RCX: 00007f48948deec9 [ 204.551217][T14394] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 204.551235][T14394] RBP: 00007f4893347090 R08: 0000000000000000 R09: 0000000000000000 [ 204.551252][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.551268][T14394] R13: 00007f4894b36038 R14: 00007f4894b35fa0 R15: 00007ffddd5a91a8 [ 204.551293][T14394] [ 204.930760][T14430] loop1: detected capacity change from 0 to 512 [ 204.937514][T14430] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 204.947551][T14430] EXT4-fs (loop1): invalid journal inode [ 204.953436][T14430] EXT4-fs (loop1): can't get journal size [ 204.972959][T14430] EXT4-fs (loop1): 1 truncate cleaned up [ 204.982134][T14430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.995977][T14430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.200768][T14448] bridge0: entered promiscuous mode [ 205.245640][T14448] macvtap1: entered allmulticast mode [ 205.251079][T14448] bridge0: entered allmulticast mode [ 205.309752][T14448] bridge0: port 3(macvtap1) entered blocking state [ 205.316380][T14448] bridge0: port 3(macvtap1) entered disabled state [ 205.334223][T14448] bridge0: left allmulticast mode [ 205.339298][T14448] bridge0: left promiscuous mode [ 205.377506][T14449] netlink: 'syz.1.3655': attribute type 3 has an invalid length. [ 205.667856][T14482] loop0: detected capacity change from 0 to 2048 [ 205.739892][ T3303] loop0: p2 < > p3 < p5 > p4 [ 205.744622][ T3303] loop0: partition table partially beyond EOD, truncated [ 205.880268][ T3303] loop0: p2 start 4278190080 is beyond EOD, truncated [ 205.969010][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 206.033826][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 206.060105][ T3303] loop0: p4 size 8192 extends beyond EOD, truncated [ 206.067369][ T3303] loop0: p5 size 8192 extends beyond EOD, truncated [ 206.083458][T14482] loop0: p2 < > p3 < p5 > p4 [ 206.088168][T14482] loop0: partition table partially beyond EOD, truncated [ 206.110453][T14482] loop0: p2 start 4278190080 is beyond EOD, truncated [ 206.118752][T14482] loop0: p4 size 8192 extends beyond EOD, truncated [ 206.133808][T14482] loop0: p5 size 8192 extends beyond EOD, truncated [ 206.183875][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 206.184495][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 206.193969][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 206.257443][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 206.257459][ T29] audit: type=1326 audit(1760298903.608:19020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.322363][ T29] audit: type=1326 audit(1760298903.608:19021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.346068][ T29] audit: type=1326 audit(1760298903.608:19022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.369707][ T29] audit: type=1326 audit(1760298903.608:19023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.393276][ T29] audit: type=1326 audit(1760298903.648:19024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.416872][ T29] audit: type=1326 audit(1760298903.668:19025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.447445][ T29] audit: type=1326 audit(1760298903.678:19026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.471130][ T29] audit: type=1326 audit(1760298903.678:19027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.495014][ T29] audit: type=1326 audit(1760298903.678:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.518694][ T29] audit: type=1326 audit(1760298903.678:19029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.5.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 206.543075][T14513] FAULT_INJECTION: forcing a failure. [ 206.543075][T14513] name failslab, interval 1, probability 0, space 0, times 0 [ 206.555792][T14513] CPU: 0 UID: 0 PID: 14513 Comm: syz.5.3670 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.555824][T14513] Tainted: [W]=WARN [ 206.555830][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.555841][T14513] Call Trace: [ 206.555848][T14513] [ 206.555854][T14513] __dump_stack+0x1d/0x30 [ 206.555891][T14513] dump_stack_lvl+0xe8/0x140 [ 206.555910][T14513] dump_stack+0x15/0x1b [ 206.555926][T14513] should_fail_ex+0x265/0x280 [ 206.555971][T14513] ? __se_sys_memfd_create+0x1cc/0x590 [ 206.555991][T14513] should_failslab+0x8c/0xb0 [ 206.556030][T14513] __kmalloc_cache_noprof+0x4c/0x4a0 [ 206.556065][T14513] ? fput+0x8f/0xc0 [ 206.556098][T14513] __se_sys_memfd_create+0x1cc/0x590 [ 206.556119][T14513] __x64_sys_memfd_create+0x31/0x40 [ 206.556187][T14513] x64_sys_call+0x2ac2/0x3000 [ 206.556230][T14513] do_syscall_64+0xd2/0x200 [ 206.556252][T14513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.556283][T14513] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.556309][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.556344][T14513] RIP: 0033:0x7fe2e979eec9 [ 206.556439][T14513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.556464][T14513] RSP: 002b:00007fe2e81fee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 206.556483][T14513] RAX: ffffffffffffffda RBX: 00000000000007e2 RCX: 00007fe2e979eec9 [ 206.556495][T14513] RDX: 00007fe2e81feef0 RSI: 0000000000000000 RDI: 00007fe2e9822960 [ 206.556509][T14513] RBP: 0000200000001740 R08: 00007fe2e81febb7 R09: 00007fe2e81fee40 [ 206.556525][T14513] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 206.556541][T14513] R13: 00007fe2e81feef0 R14: 00007fe2e81feeb0 R15: 0000200000000200 [ 206.556588][T14513] [ 206.757993][T14516] bridge0: entered promiscuous mode [ 206.763837][T14516] macvtap1: entered allmulticast mode [ 206.769310][T14516] bridge0: entered allmulticast mode [ 206.776464][T14516] bridge0: port 3(macvtap1) entered blocking state [ 206.783250][T14516] bridge0: port 3(macvtap1) entered disabled state [ 206.791632][T14516] bridge0: left allmulticast mode [ 206.796761][T14516] bridge0: left promiscuous mode [ 206.810571][T14518] pim6reg1: entered promiscuous mode [ 206.815906][T14518] pim6reg1: entered allmulticast mode [ 206.873151][T14524] loop4: detected capacity change from 0 to 128 [ 206.884555][T14524] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 206.898161][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3674'. [ 206.917455][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3674'. [ 207.105019][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'. [ 207.117109][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'. [ 207.196604][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 207.289896][T14560] loop4: detected capacity change from 0 to 512 [ 207.296871][T14560] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 207.313463][T14560] netlink: 'syz.4.3690': attribute type 10 has an invalid length. [ 207.350323][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 207.365247][T14568] FAULT_INJECTION: forcing a failure. [ 207.365247][T14568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.378391][T14568] CPU: 1 UID: 0 PID: 14568 Comm: syz.4.3690 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.378471][T14568] Tainted: [W]=WARN [ 207.378478][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.378489][T14568] Call Trace: [ 207.378495][T14568] [ 207.378500][T14568] __dump_stack+0x1d/0x30 [ 207.378521][T14568] dump_stack_lvl+0xe8/0x140 [ 207.378544][T14568] dump_stack+0x15/0x1b [ 207.378571][T14568] should_fail_ex+0x265/0x280 [ 207.378683][T14568] should_fail+0xb/0x20 [ 207.378765][T14568] should_fail_usercopy+0x1a/0x20 [ 207.378790][T14568] _copy_from_user+0x1c/0xb0 [ 207.378889][T14568] ___sys_sendmsg+0xc1/0x1d0 [ 207.378962][T14568] __x64_sys_sendmsg+0xd4/0x160 [ 207.379080][T14568] x64_sys_call+0x191e/0x3000 [ 207.379104][T14568] do_syscall_64+0xd2/0x200 [ 207.379131][T14568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.379238][T14568] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 207.379256][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.379287][T14568] RIP: 0033:0x7f1742feeec9 [ 207.379301][T14568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.379322][T14568] RSP: 002b:00007f1741a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.379343][T14568] RAX: ffffffffffffffda RBX: 00007f1743246090 RCX: 00007f1742feeec9 [ 207.379357][T14568] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000005 [ 207.379372][T14568] RBP: 00007f1741a36090 R08: 0000000000000000 R09: 0000000000000000 [ 207.379386][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.379472][T14568] R13: 00007f1743246128 R14: 00007f1743246090 R15: 00007ffe204e9768 [ 207.379492][T14568] [ 207.559594][T14560] team0: Port device dummy0 added [ 207.581606][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 207.639526][T14575] loop4: detected capacity change from 0 to 512 [ 207.646350][T14578] FAULT_INJECTION: forcing a failure. [ 207.646350][T14578] name failslab, interval 1, probability 0, space 0, times 0 [ 207.659009][T14578] CPU: 1 UID: 0 PID: 14578 Comm: syz.0.3695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.659084][T14578] Tainted: [W]=WARN [ 207.659090][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.659105][T14578] Call Trace: [ 207.659110][T14578] [ 207.659116][T14578] __dump_stack+0x1d/0x30 [ 207.659138][T14578] dump_stack_lvl+0xe8/0x140 [ 207.659231][T14578] dump_stack+0x15/0x1b [ 207.659301][T14578] should_fail_ex+0x265/0x280 [ 207.659339][T14578] should_failslab+0x8c/0xb0 [ 207.659429][T14578] kmem_cache_alloc_noprof+0x50/0x480 [ 207.659453][T14578] ? create_new_namespaces+0x3c/0x3d0 [ 207.659577][T14578] ? __rcu_read_unlock+0x4f/0x70 [ 207.659677][T14578] create_new_namespaces+0x3c/0x3d0 [ 207.659734][T14578] __se_sys_setns+0x199/0xef0 [ 207.659769][T14578] __x64_sys_setns+0x31/0x40 [ 207.659812][T14578] x64_sys_call+0x2b1a/0x3000 [ 207.659833][T14578] do_syscall_64+0xd2/0x200 [ 207.659856][T14578] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.659890][T14578] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 207.659984][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.660008][T14578] RIP: 0033:0x7fdc8612eec9 [ 207.660021][T14578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.660047][T14578] RSP: 002b:00007fdc84b8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 207.660065][T14578] RAX: ffffffffffffffda RBX: 00007fdc86385fa0 RCX: 00007fdc8612eec9 [ 207.660183][T14578] RDX: 0000000000000000 RSI: 0000000000020000 RDI: 0000000000000005 [ 207.660195][T14578] RBP: 00007fdc84b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.660206][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.660218][T14578] R13: 00007fdc86386038 R14: 00007fdc86385fa0 R15: 00007ffc5ea24488 [ 207.660240][T14578] [ 207.850051][T14575] journal_path: Non-blockdev passed as './file0' [ 207.856492][T14575] EXT4-fs: error: could not find journal device path [ 207.911832][T14576] loop4: detected capacity change from 0 to 1024 [ 207.918999][T14576] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.929921][T14576] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.006433][T14576] JBD2: no valid journal superblock found [ 208.012276][T14576] EXT4-fs (loop4): Could not load journal inode [ 208.043737][T14576] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 208.055998][T14598] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 208.071318][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3700'. [ 208.175269][T14596] loop2: detected capacity change from 0 to 4096 [ 208.185566][T14613] loop5: detected capacity change from 0 to 256 [ 208.195767][T14609] loop0: detected capacity change from 0 to 764 [ 208.213950][T14596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.247336][T14617] FAULT_INJECTION: forcing a failure. [ 208.247336][T14617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.260716][T14617] CPU: 1 UID: 0 PID: 14617 Comm: syz.4.3707 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.260756][T14617] Tainted: [W]=WARN [ 208.260764][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.260780][T14617] Call Trace: [ 208.260787][T14617] [ 208.260794][T14617] __dump_stack+0x1d/0x30 [ 208.260815][T14617] dump_stack_lvl+0xe8/0x140 [ 208.260883][T14617] dump_stack+0x15/0x1b [ 208.260904][T14617] should_fail_ex+0x265/0x280 [ 208.260950][T14617] should_fail_alloc_page+0xf2/0x100 [ 208.261002][T14617] __alloc_frozen_pages_noprof+0xff/0x360 [ 208.261050][T14617] alloc_pages_mpol+0xb3/0x260 [ 208.261073][T14617] vma_alloc_folio_noprof+0x1aa/0x300 [ 208.261158][T14617] handle_mm_fault+0xec2/0x2be0 [ 208.261229][T14617] ? vma_start_read+0x141/0x1f0 [ 208.261267][T14617] do_user_addr_fault+0x630/0x1080 [ 208.261291][T14617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.261317][T14617] exc_page_fault+0x62/0xa0 [ 208.261392][T14617] asm_exc_page_fault+0x26/0x30 [ 208.261418][T14617] RIP: 0033:0x7f1742f9c3ab [ 208.261437][T14617] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 208.261462][T14617] RSP: 002b:00007f1741a33e10 EFLAGS: 00010246 [ 208.261482][T14617] RAX: 00007f1741a35f30 RBX: 00007f1743217640 RCX: 0000000000000000 [ 208.261498][T14617] RDX: 00007f1741a35f78 RSI: 00007f174304edf8 RDI: 00007f1741a33e30 [ 208.261510][T14617] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 208.261522][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.261598][T14617] R13: 00007f1743246128 R14: 00007f1743246090 R15: 00007ffe204e9768 [ 208.261621][T14617] [ 208.261630][T14617] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 208.489251][T14625] EXT4-fs (loop5): unable to read superblock [ 208.502986][T14625] loop5: detected capacity change from 0 to 512 [ 208.514572][T14625] EXT4-fs: Ignoring removed nobh option [ 208.546734][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.567233][T14625] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #3: comm syz.5.3708: corrupted inode contents [ 208.608182][T14625] EXT4-fs (loop5): Remounting filesystem read-only [ 208.616397][T14625] EXT4-fs (loop5): 1 truncate cleaned up [ 208.630246][T14639] loop2: detected capacity change from 0 to 2048 [ 208.635495][T14625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.649242][T14625] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.669654][ T3303] loop2: p2 < > p3 < p5 > p4 [ 208.674356][ T3303] loop2: partition table partially beyond EOD, truncated [ 208.697961][ T3303] loop2: p2 start 4278190080 is beyond EOD, truncated [ 208.716641][ T3303] loop2: p4 size 8192 extends beyond EOD, truncated [ 208.724351][ T3303] loop2: p5 size 8192 extends beyond EOD, truncated [ 208.724641][T13613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.749283][T14639] loop2: p2 < > p3 < p5 > p4 [ 208.753971][T14639] loop2: partition table partially beyond EOD, truncated [ 208.790383][T14639] loop2: p2 start 4278190080 is beyond EOD, truncated [ 208.805651][T14639] loop2: p4 size 8192 extends beyond EOD, truncated [ 208.819077][T14639] loop2: p5 size 8192 extends beyond EOD, truncated [ 208.841315][T14651] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.864139][T14651] IPVS: Error connecting to the multicast addr [ 208.893963][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 208.902490][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 208.905213][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 208.973774][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 208.977320][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 208.996884][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 209.018916][T14669] loop5: detected capacity change from 0 to 128 [ 209.045140][T14669] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.166954][T14689] loop5: detected capacity change from 0 to 2048 [ 209.199467][T14689] loop5: p2 < > p3 < p5 > p4 [ 209.204210][T14689] loop5: partition table partially beyond EOD, truncated [ 209.207488][T14692] vhci_hcd: invalid port number 96 [ 209.212057][T14689] loop5: p2 start 4278190080 is beyond EOD, truncated [ 209.216480][T14692] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 209.224240][T14689] loop5: p4 size 8192 extends beyond EOD, truncated [ 209.237765][T14689] loop5: p5 size 8192 extends beyond EOD, truncated [ 209.378648][T14708] bridge0: entered promiscuous mode [ 209.384683][T14708] macvtap1: entered allmulticast mode [ 209.390144][T14708] bridge0: entered allmulticast mode [ 209.396868][T14708] bridge0: port 3(macvtap1) entered blocking state [ 209.403589][T14708] bridge0: port 3(macvtap1) entered disabled state [ 209.411388][T14708] bridge0: left allmulticast mode [ 209.416480][T14708] bridge0: left promiscuous mode [ 209.696125][T14748] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.740253][T14748] IPVS: Error connecting to the multicast addr [ 209.791675][T14759] batadv1: entered promiscuous mode [ 209.796969][T14759] batadv1: entered allmulticast mode [ 210.298175][T14807] team0 (unregistering): Port device team_slave_0 removed [ 210.307348][T14807] team0 (unregistering): Port device team_slave_1 removed [ 210.316337][T14807] team0 (unregistering): Port device dummy0 removed [ 210.432701][T14818] loop5: detected capacity change from 0 to 2048 [ 210.479469][ T3303] loop5: p2 < > p3 < p5 > p4 [ 210.484190][ T3303] loop5: partition table partially beyond EOD, truncated [ 210.493525][ T3303] loop5: p2 start 4278190080 is beyond EOD, truncated [ 210.500883][ T3303] loop5: p4 size 8192 extends beyond EOD, truncated [ 210.508084][ T3303] loop5: p5 size 8192 extends beyond EOD, truncated [ 210.523095][T14818] loop5: p2 < > p3 < p5 > p4 [ 210.527785][T14818] loop5: partition table partially beyond EOD, truncated [ 210.535677][T14818] loop5: p2 start 4278190080 is beyond EOD, truncated [ 210.542941][T14818] loop5: p4 size 8192 extends beyond EOD, truncated [ 210.550111][T14818] loop5: p5 size 8192 extends beyond EOD, truncated [ 210.595277][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 210.606552][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 210.607271][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 210.658937][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 210.852322][T14837] loop4: detected capacity change from 0 to 128 [ 210.870358][T14837] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.977558][T14843] __nla_validate_parse: 10 callbacks suppressed [ 210.977576][T14843] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3784'. [ 210.996549][T14843] batadv1: entered promiscuous mode [ 211.001840][T14843] batadv1: entered allmulticast mode [ 211.203029][T14854] loop2: detected capacity change from 0 to 512 [ 211.209772][T14854] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 211.227925][T14854] loop2: detected capacity change from 0 to 764 [ 211.389714][T14857] bridge0: entered promiscuous mode [ 211.455351][T14857] macvtap1: entered allmulticast mode [ 211.460878][T14857] bridge0: entered allmulticast mode [ 211.498026][T14860] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3788'. [ 211.523016][T14857] bridge0: port 3(macvtap1) entered blocking state [ 211.529657][T14857] bridge0: port 3(macvtap1) entered disabled state [ 211.536997][T14857] bridge0: left allmulticast mode [ 211.542086][T14857] bridge0: left promiscuous mode [ 211.553960][T14860] batadv1: entered promiscuous mode [ 211.559196][T14860] batadv1: entered allmulticast mode [ 211.608262][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 211.628697][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 211.788654][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 211.788668][ T29] audit: type=1326 audit(1760298909.138:19132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.846891][ T29] audit: type=1326 audit(1760298909.178:19133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.870539][ T29] audit: type=1326 audit(1760298909.188:19134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.894083][ T29] audit: type=1326 audit(1760298909.188:19135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.917647][ T29] audit: type=1326 audit(1760298909.188:19136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.941317][ T29] audit: type=1326 audit(1760298909.188:19137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.964797][ T29] audit: type=1326 audit(1760298909.188:19138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 211.988395][ T29] audit: type=1326 audit(1760298909.188:19139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14874 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48948deec9 code=0x7ffc0000 [ 212.018487][T14879] loop5: detected capacity change from 0 to 128 [ 212.042066][T14879] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.062513][ T29] audit: type=1326 audit(1760298909.418:19140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.5.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 212.086182][ T29] audit: type=1326 audit(1760298909.418:19141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14878 comm="syz.5.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe2e979eec9 code=0x7ffc0000 [ 212.215716][ T4768] kworker/u8:64: attempt to access beyond end of device [ 212.215716][ T4768] loop5: rw=1, sector=129, nr_sectors = 120 limit=128 [ 212.236183][ T4768] kworker/u8:64: attempt to access beyond end of device [ 212.236183][ T4768] loop5: rw=1, sector=249, nr_sectors = 1 limit=128 [ 212.297383][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 212.327439][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 212.466924][T14915] netlink: 'syz.1.3808': attribute type 3 has an invalid length. [ 212.539339][T14921] loop2: detected capacity change from 0 to 2048 [ 212.599575][T14921] loop2: p2 < > p3 < p5 > p4 [ 212.604321][T14921] loop2: partition table partially beyond EOD, truncated [ 212.613340][T14928] loop0: detected capacity change from 0 to 2048 [ 212.621354][T14921] loop2: p2 start 4278190080 is beyond EOD, truncated [ 212.629764][T14921] loop2: p4 size 8192 extends beyond EOD, truncated [ 212.636985][T14921] loop2: p5 size 8192 extends beyond EOD, truncated [ 212.741957][ T3001] loop2: p2 < > p3 < p5 > p4 [ 212.746762][ T3001] loop2: partition table partially beyond EOD, truncated [ 212.769525][ T3001] loop2: p2 start 4278190080 is beyond EOD, truncated [ 212.786046][ T3001] loop2: p4 size 8192 extends beyond EOD, truncated [ 212.800053][ T3001] loop2: p5 size 8192 extends beyond EOD, truncated [ 212.902218][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 212.957593][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3820'. [ 213.032967][ T3303] printk: udevd: 10 output lines suppressed due to ratelimiting [ 213.069073][T14955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.142272][T14955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.177933][T14961] netlink: 'syz.2.3827': attribute type 3 has an invalid length. [ 213.212041][T14955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.282095][T14955] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.397508][ T3508] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.425535][ T3508] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.433922][ T3508] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.443571][ T3508] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.542838][T14974] loop4: detected capacity change from 0 to 512 [ 213.553698][T14974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.560431][T14974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.567046][T14974] EXT4-fs: Ignoring removed i_version option [ 213.575045][T14971] netlink: 'syz.1.3831': attribute type 3 has an invalid length. [ 213.583020][T14974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 213.591183][T14974] System zones: 1-12 [ 213.595418][T14974] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.3829: corrupted in-inode xattr: invalid ea_ino [ 213.609303][T14974] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3829: couldn't read orphan inode 15 (err -117) [ 213.622155][T14974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.635598][T14974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.653803][ T3508] ================================================================== [ 213.661909][ T3508] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 213.669130][ T3508] [ 213.671452][ T3508] read-write to 0xffff88811a435468 of 8 bytes by task 14965 on cpu 0: [ 213.679598][ T3508] __xa_set_mark+0xd2/0x1a0 [ 213.684100][ T3508] __folio_mark_dirty+0x384/0x4a0 [ 213.689119][ T3508] mark_buffer_dirty+0x11e/0x210 [ 213.694053][ T3508] block_page_mkwrite+0x287/0x3d0 [ 213.699076][ T3508] ext4_page_mkwrite+0x859/0xb90 [ 213.704009][ T3508] do_wp_page+0xa77/0x2510 [ 213.708418][ T3508] handle_mm_fault+0x77d/0x2be0 [ 213.713264][ T3508] do_user_addr_fault+0x630/0x1080 [ 213.718378][ T3508] exc_page_fault+0x62/0xa0 [ 213.722875][ T3508] asm_exc_page_fault+0x26/0x30 [ 213.727717][ T3508] [ 213.730033][ T3508] read to 0xffff88811a435468 of 8 bytes by task 3508 on cpu 1: [ 213.737565][ T3508] xas_find_marked+0x218/0x620 [ 213.742328][ T3508] find_get_entry+0x5d/0x380 [ 213.746931][ T3508] filemap_get_folios_tag+0x92/0x210 [ 213.752219][ T3508] mpage_prepare_extent_to_map+0x320/0xc00 [ 213.758023][ T3508] ext4_do_writepages+0xa05/0x2750 [ 213.763141][ T3508] ext4_writepages+0x176/0x300 [ 213.767899][ T3508] do_writepages+0x1c6/0x310 [ 213.772482][ T3508] __writeback_single_inode+0x80/0x7c0 [ 213.777984][ T3508] writeback_sb_inodes+0x48f/0xa30 [ 213.783111][ T3508] __writeback_inodes_wb+0x94/0x1a0 [ 213.788402][ T3508] wb_writeback+0x266/0x5c0 [ 213.792912][ T3508] wb_workfn+0x4c9/0x910 [ 213.797172][ T3508] process_scheduled_works+0x4ce/0x9d0 [ 213.802636][ T3508] worker_thread+0x582/0x770 [ 213.807217][ T3508] kthread+0x489/0x510 [ 213.811292][ T3508] ret_from_fork+0x122/0x1b0 [ 213.815883][ T3508] ret_from_fork_asm+0x1a/0x30 [ 213.820649][ T3508] [ 213.822968][ T3508] value changed: 0xffe0000000000000 -> 0xffe00c0000000000 [ 213.830060][ T3508] [ 213.832372][ T3508] Reported by Kernel Concurrency Sanitizer on: [ 213.838521][ T3508] CPU: 1 UID: 0 PID: 3508 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.849974][ T3508] Tainted: [W]=WARN [ 213.853766][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.863830][ T3508] Workqueue: writeback wb_workfn (flush-8:0) [ 213.869818][ T3508] ================================================================== [ 213.939624][T14956] syz.2.3827 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 213.950797][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.2.3827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.950907][T14956] Tainted: [W]=WARN [ 213.950917][T14956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.950934][T14956] Call Trace: [ 213.950942][T14956] [ 213.950951][T14956] __dump_stack+0x1d/0x30 [ 213.951019][T14956] dump_stack_lvl+0xe8/0x140 [ 213.951045][T14956] dump_stack+0x15/0x1b [ 213.951068][T14956] dump_header+0x81/0x220 [ 213.951108][T14956] oom_kill_process+0x342/0x400 [ 213.951180][T14956] out_of_memory+0x979/0xb80 [ 213.951216][T14956] try_charge_memcg+0x610/0xa10 [ 213.951248][T14956] charge_memcg+0x51/0xc0 [ 213.951311][T14956] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 213.951422][T14956] __read_swap_cache_async+0x17b/0x2d0 [ 213.951459][T14956] swap_cluster_readahead+0x262/0x3c0 [ 213.951485][T14956] swapin_readahead+0xde/0x6f0 [ 213.951588][T14956] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 213.951629][T14956] ? __rcu_read_unlock+0x34/0x70 [ 213.951660][T14956] ? __rcu_read_unlock+0x4f/0x70 [ 213.951684][T14956] ? swap_cache_get_folio+0x277/0x280 [ 213.951781][T14956] do_swap_page+0x2ae/0x2370 [ 213.951806][T14956] ? __rb_insert_augmented+0x76/0x2c0 [ 213.951844][T14956] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 213.951978][T14956] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 213.952007][T14956] ? __pfx_default_wake_function+0x10/0x10 [ 213.952034][T14956] handle_mm_fault+0x9a5/0x2be0 [ 213.952080][T14956] ? vma_start_read+0x141/0x1f0 [ 213.952129][T14956] do_user_addr_fault+0x630/0x1080 [ 213.952152][T14956] ? fpregs_restore_userregs+0xe2/0x1d0 [ 213.952186][T14956] ? arch_exit_work+0x30/0x40 [ 213.952280][T14956] exc_page_fault+0x62/0xa0 [ 213.952301][T14956] asm_exc_page_fault+0x26/0x30 [ 213.952318][T14956] RIP: 0033:0x7f8ea85857cc [ 213.952331][T14956] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 213.952417][T14956] RSP: 002b:00007ffed9722990 EFLAGS: 00010206 [ 213.952514][T14956] RAX: 0000000000000000 RBX: 00007f8ea8905fa0 RCX: 0000000000000000 [ 213.952590][T14956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555c856808 [ 213.952603][T14956] RBP: 00007f8ea8907da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 213.952614][T14956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000034384 [ 213.952687][T14956] R13: 00007f8ea8906090 R14: ffffffffffffffff R15: 00007ffed9722aa0 [ 213.952708][T14956] [ 213.952716][T14956] memory: usage 307200kB, limit 307200kB, failcnt 21492 [ 214.206285][T14956] memory+swap: usage 1608kB, limit 9007199254740988kB, failcnt 0 [ 214.214096][T14956] kmem: usage 652kB, limit 9007199254740988kB, failcnt 0 [ 214.221129][T14956] Memory cgroup stats for /syz2: [ 214.221487][T14956] cache 524288 [ 214.229896][T14956] rss 12288 [ 214.232988][T14956] shmem 0 [ 214.236020][T14956] mapped_file 65536 [ 214.239910][T14956] dirty 0 [ 214.242919][T14956] writeback 4096 [ 214.246461][T14956] workingset_refault_anon 11928 [ 214.251338][T14956] workingset_refault_file 3265 [ 214.256095][T14956] swap 180224 [ 214.259400][T14956] swapcached 28672 [ 214.263120][T14956] pgpgin 227529 [ 214.266617][T14956] pgpgout 227391 [ 214.270169][T14956] pgfault 203593 [ 214.273714][T14956] pgmajfault 1662 [ 214.277392][T14956] inactive_anon 12288 [ 214.281387][T14956] active_anon 24576 [ 214.285229][T14956] inactive_file 4096 [ 214.289167][T14956] active_file 524288 [ 214.293065][T14956] unevictable 0 [ 214.296507][T14956] hierarchical_memory_limit 314572800 [ 214.301887][T14956] hierarchical_memsw_limit 9223372036854771712 [ 214.308039][T14956] total_cache 524288 [ 214.312055][T14956] total_rss 12288 [ 214.315677][T14956] total_shmem 0 [ 214.319188][T14956] total_mapped_file 65536 [ 214.323501][T14956] total_dirty 0 [ 214.326938][T14956] total_writeback 4096 [ 214.331017][T14956] total_workingset_refault_anon 11928 [ 214.336398][T14956] total_workingset_refault_file 3265 [ 214.341692][T14956] total_swap 180224 [ 214.345507][T14956] total_swapcached 28672 [ 214.349759][T14956] total_pgpgin 227529 [ 214.353732][T14956] total_pgpgout 227391 [ 214.357782][T14956] total_pgfault 203593 [ 214.361850][T14956] total_pgmajfault 1662 [ 214.366010][T14956] total_inactive_anon 12288 [ 214.370557][T14956] total_active_anon 24576 [ 214.374900][T14956] total_inactive_file 4096 [ 214.379413][T14956] total_active_file 524288 [ 214.383894][T14956] total_unevictable 0 [ 214.387888][T14956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3827,pid=14956,uid=0 [ 214.402634][T14956] Memory cgroup out of memory: Killed process 14956 (syz.2.3827) total-vm:96004kB, anon-rss:1136kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000