last executing test programs: 1m22.998375926s ago: executing program 3 (id=2886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) setxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)=@known='trusted.overlay.redirect\x00', &(0x7f00000003c0)='\x00', 0x1, 0x1) 1m22.909455315s ago: executing program 3 (id=2887): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x8, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x80, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) keyctl$get_security(0x11, r8, &(0x7f0000000000)=""/161, 0xa1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x30925) 1m21.911103214s ago: executing program 3 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) write$ppp(r1, &(0x7f0000000700)="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", 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x8c8, 0xf7, 0x8, 0x80000001, 0x3, 0x8, 0x7, 0x1, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r5, 0x13, 0x3, 0xff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000000)={0x93, [0x0, 0x7a06db6d], 0x7fdf}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r7, r11, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 1m17.101564492s ago: executing program 3 (id=2920): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x792, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) 1m16.71393293s ago: executing program 3 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400006000000000340000000000800024000000006240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='GPL\x00', 0x6a58, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x7}, 0x18) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$unlink(0x9, r2, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = open$dir(&(0x7f0000000040)='./file0\x00', 0x480, 0x4) mkdirat(r10, &(0x7f0000000080)='./file0/../file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m14.930459957s ago: executing program 3 (id=2974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x60000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r2, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x40000a4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x114, 0x0, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xec, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) 1m14.930189267s ago: executing program 32 (id=2974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x60000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x2c, r2, 0xcd3a991b146a25f, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x40000a4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x114, 0x0, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xec, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) 14.881454173s ago: executing program 4 (id=4223): set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) r0 = socket(0xa, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 14.786324892s ago: executing program 4 (id=4224): socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) (async, rerun: 32) syz_clone(0x100000, &(0x7f0000000440)="1854041eceb0b9250f784518b0dd635acb9f96a5c10331559a26e9", 0x1b, &(0x7f0000000480), &(0x7f0000000600), &(0x7f0000000640)="c994bc17f38d740f33a37515ac4cbcd372ed1c98f4595b8e01e6e9b396d3866aa6f8326cfea3b8e98748b8280f23cd5281788f92bac00d7d1055d86b2f48ed95c511946f0ffcbd46f9b1f0dee4ef569785760fc93159efba8b43e4a3924ce315a47d5615a335999d4dc03a1c38c267ecf66b77d8bc937c406a44e880455d45c4fafd79dd3e4ac939c1d2b1de4162df7b5a83a1408c97dd892b0f06825ad1e90b070e25e8c64989883ed9767ef5052bbb097d64908704cf96f194ac348bee7d33a82ea7f95dfd777f667c01504ccf0a3f28dfadc716301d3055ac0dcb4df886375ea64a83b0398d7e6ea5797d1533bf75") (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) open_tree(r3, &(0x7f0000000400)='./file0\x00', 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e00000001900010000000000000000001c140000fe0000010000000005001a0005000000840013"], 0xe0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x80}, 0x18) (async) syz_pidfd_open(0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='ext4_ext_remove_space\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) dup2(r8, r7) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) sendmmsg(r7, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r9, 0x0, 0x3}, 0x18) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x4fee, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) setpriority(0x1, 0xffffffffffffffff, 0xa) 13.812950469s ago: executing program 4 (id=4250): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800400004d5945a9001500be73", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 13.130556237s ago: executing program 4 (id=4261): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xfff2, 0x10}, {0xd, 0x8}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 11.677117781s ago: executing program 4 (id=4279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.917914564s ago: executing program 0 (id=4338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400006000000000340000000000800024000000006240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r6, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='GPL\x00', 0x6a58, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x7}, 0x18) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$unlink(0x9, r2, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = open$dir(&(0x7f0000000040)='./file0\x00', 0x480, 0x4) mkdirat(r10, &(0x7f0000000080)='./file0/../file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 7.851011921s ago: executing program 0 (id=4339): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) 6.971613918s ago: executing program 0 (id=4357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), 0x0}, 0x20) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) 6.816222323s ago: executing program 0 (id=4359): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/65, 0x219000, 0x800}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0x26e, &(0x7f0000000b00)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)="d7bb33", 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4058040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0, 0xccf}, 0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@delqdisc={0x94, 0x25, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x10, 0xfff1}, {0xffe0, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xa}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x3ff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x20000, 0xfffffff7}}]}}]}, 0xfccc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.664230648s ago: executing program 0 (id=4366): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000004c0)=0xfffffff9, 0x4) socket$inet(0x2, 0x3, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000280)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@stripe={'stripe', 0x3d, 0xfffffffffffffffc}}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r3, 0x0, 0x3, 0x800000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_io_uring_submit(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r7, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 6.373799318s ago: executing program 4 (id=4372): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000019400)=@delchain={0x1ba8, 0x65, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xfff1}, {0xa, 0xffff}}, [@f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xe6f8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}]}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xffffffff, 0x7}, {0x8000, 0x1, 0x80000000}, 0x16, 0x17, 0x2}}]}}, @f_rsvp6={{0xa}, {0x838, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1ffe6, 0x8}}, @TCA_RSVP_POLICE={0x824, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x2, 0x3ff, 0x3d, 0x2, 0xf7, 0x7, 0xffff7fff, 0xfffffff9, 0x80, 0x10, 0x8, 0xf90, 0xb4e, 0x9, 0x8, 0x9, 0x6, 0xffffffc0, 0x4, 0x101, 0x14c1, 0x1, 0x0, 0x80000001, 0x4, 0x1ff, 0x7, 0x0, 0xffff, 0x2, 0xff, 0x2, 0x3, 0xbb, 0x0, 0x4, 0x100, 0x7, 0x7, 0x61, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x4, 0xffff, 0x7fb4, 0x3, 0x0, 0x9, 0xd819, 0x0, 0x9, 0x80000001, 0x7, 0x4dbc263c, 0x336d, 0xfffffffb, 0x1, 0x2, 0x1, 0x1, 0x685c, 0x100, 0x3, 0x200, 0xb9, 0x1, 0x8000, 0xffffffff, 0x924, 0x1, 0x4, 0x4, 0x4, 0xfffffffb, 0xff, 0x2, 0x3, 0x405, 0x0, 0x1000, 0xffff, 0xb, 0xffffffff, 0x5, 0x6, 0x4, 0x3, 0x3, 0xb66, 0x7fff, 0x5, 0x4, 0xfffffff9, 0x3, 0x8, 0x400, 0x20c3, 0x9, 0x469, 0x4, 0x8, 0x2, 0xfffffffb, 0x5, 0x0, 0x7, 0xfc, 0x4, 0x4, 0x4410, 0x788, 0x4, 0x0, 0xfffffffa, 0x0, 0x40, 0x5, 0x0, 0x9, 0x8, 0x1, 0x7f, 0x8, 0x5e83, 0x9, 0x8001, 0x3, 0x2, 0x0, 0x9, 0x2, 0x8, 0x5, 0x8001, 0x7, 0xa61f, 0x800, 0x1ff, 0x3, 0x9, 0xfffffc01, 0x100, 0xc9e6, 0x2, 0x5, 0x200, 0x0, 0x0, 0x5, 0x6, 0x2, 0x200, 0x0, 0x0, 0x4, 0x1, 0x9, 0x2, 0xffff, 0x3, 0x12, 0x6, 0x0, 0x8, 0x7, 0x2, 0x1, 0x80000001, 0x100, 0x3, 0x101, 0x7fff, 0x6, 0x7, 0x2, 0x3, 0x2, 0x9, 0x4, 0x2, 0x3f26406, 0xa, 0x10001, 0x5, 0x9, 0x4, 0x10, 0x4, 0x2, 0x3, 0x1, 0x5, 0x6, 0x6, 0x4, 0xae26, 0x3697, 0x3, 0x1, 0x8001, 0x7, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x4, 0x7, 0xd1, 0x8, 0x5, 0x7, 0x2, 0x7fffffff, 0xfffffffe, 0xb, 0x7, 0xd, 0x8, 0x6, 0x1, 0xd, 0x3, 0x8, 0x2, 0x532, 0xffffff3e, 0x6, 0xff, 0x5b96000, 0x4, 0x1, 0x5, 0x5, 0x4, 0x4, 0x3, 0x70ea, 0x10, 0xffffffff, 0x100, 0x4, 0xd, 0x1, 0xfff, 0x0, 0x7fff, 0xae, 0x416efdef, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc9e5, 0x80000001, 0x101, 0x0, 0xa9, 0x7, 0x4, 0x94, 0x49b, 0x7ff, 0x1, 0x81, 0xb8, 0x8001, 0x10, 0x3, 0x4, 0x991, 0xfffffffd, 0x7ff, 0x6, 0x5, 0x4, 0x8001, 0x3, 0x7, 0x5, 0xced, 0xfffffc00, 0x6, 0x101, 0x7fff, 0x8, 0x7, 0x1, 0x3, 0xb, 0x0, 0xb, 0x8, 0x7, 0x8d2, 0x80, 0x47e, 0x4918, 0xc43, 0x80000001, 0x4, 0x8, 0xfffffff9, 0x3, 0x6dbb, 0x6, 0xfffffff8, 0xe2, 0x3, 0x7, 0x9, 0x4, 0x1, 0x3, 0x0, 0xf3523b20, 0x6, 0x0, 0x2, 0x2, 0x80000000, 0x21dce07, 0x3ff, 0x4, 0x0, 0x6, 0x9, 0x10, 0x10000, 0x5, 0x2, 0x3, 0xe51, 0x8, 0x7fff, 0x5, 0x6, 0x80, 0x50, 0x9, 0x40, 0x0, 0x575e, 0x400, 0x9, 0x5, 0x9, 0x0, 0x6, 0x5c, 0x2, 0x40, 0x6, 0x6, 0x401, 0x0, 0x0, 0x401, 0x0, 0xfffffff3, 0x2, 0xf478, 0x2, 0x5, 0x401, 0x6, 0x2, 0x6, 0x400, 0xffffffff, 0x1000, 0x8, 0x2, 0x96f3, 0x1ff, 0x6, 0x6, 0xffffffff, 0x2, 0x1, 0x1000, 0x3, 0x6, 0x8001, 0x1ff, 0x3, 0x4a, 0xa, 0x8, 0x400, 0xffffffff, 0x0, 0xa, 0x7, 0x50000, 0xb, 0x2, 0x834, 0x1, 0x9, 0x2, 0x1, 0x2, 0x3, 0xffffffff, 0x8, 0x7, 0x8, 0x38f04e17, 0x9, 0x5, 0x81, 0x0, 0xaa02, 0x0, 0xa2, 0x9, 0x7fff, 0x3, 0xc, 0xfffffffe, 0x6, 0xa6, 0xd, 0x3, 0x7, 0x2f, 0x7, 0xce, 0x4db4acbc, 0x9, 0x0, 0xb01, 0x40, 0x4, 0x599, 0x5, 0x8, 0x8, 0x5, 0x8, 0xff, 0x2, 0x101, 0x0, 0xd104, 0x7fff, 0x9, 0x9, 0x30, 0x5, 0x380, 0x9, 0x7, 0x5, 0xa, 0xff, 0xfffffffc, 0x5, 0x1, 0x1, 0xe, 0x4, 0xfff, 0x1, 0x0, 0x401, 0x8, 0x4, 0x81, 0xb9c, 0x0, 0x6, 0x8, 0xa0, 0x8, 0x4, 0x8, 0x26, 0x9, 0x1, 0x8000, 0x0, 0x2, 0x6, 0x40, 0x0, 0x1, 0xcd0, 0x1, 0x10000, 0x0, 0x2, 0x5, 0xfffffffd, 0x50, 0x4, 0x54, 0x200, 0x200, 0x9, 0xffff8000, 0xb, 0x8000, 0x80, 0x2, 0x4, 0x1, 0x5]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xc}}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xfff2}}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010100}]}}, @f_rsvp6={{0xa}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_RSVP_DST={0x14, 0x2, @remote}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}]}}, @f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff0000, 0x0, 0x100, 0x8000, 0x3, 0x4, 0x9c, 0x3, 0x10000, 0xffffc66e, 0x1ca1, 0x7, 0x6, 0x8, 0x3, 0x40, 0x401, 0xfffffff9, 0x4, 0x1000, 0x637a800, 0x3f, 0x5, 0x59d, 0x8, 0x8000, 0x3, 0xdb96, 0x2, 0xf, 0xf26, 0x1d, 0x0, 0x80, 0x1, 0xffff, 0x8, 0x5d, 0xb91, 0x40, 0x1000, 0x0, 0x5296, 0xffff, 0x40000000, 0xf229, 0xd5, 0x6, 0x5, 0xf, 0x0, 0x4, 0x1, 0x3, 0x1000, 0xffffffff, 0x6, 0x3, 0x7, 0x80, 0x6, 0xffff, 0x1, 0xe, 0x9, 0x10, 0x9, 0x5, 0x3, 0xccc, 0x7, 0x0, 0x17d8, 0x4, 0x8001, 0x30a, 0x200, 0x7, 0x3, 0x8, 0xd8, 0x1, 0x2, 0x7, 0x7fff, 0x8, 0x1, 0x41, 0x0, 0x7fffffff, 0x9a2, 0x2, 0x7, 0x8, 0xffffffff, 0x0, 0x7, 0x4c20, 0x1, 0x6, 0x0, 0x6, 0x5d64, 0x7f, 0x4f, 0x1000, 0x4, 0x2, 0x6, 0x1c, 0xa, 0x8, 0x22, 0x5, 0xe4f1, 0x7, 0x9, 0x40, 0x8001, 0x6, 0x80000001, 0x30c, 0xc0000, 0xfffffffc, 0x10001, 0x1, 0x2, 0x80000001, 0x3, 0x4, 0x8, 0xfffffff9, 0x8, 0x1, 0x5, 0x7, 0x6, 0x613, 0x10, 0x7fffffff, 0xd, 0x9, 0x1, 0x9, 0x8, 0x4, 0x5, 0x8, 0x0, 0x2, 0xb8, 0xa, 0x0, 0x7f, 0x7, 0x9, 0x0, 0x6, 0x86d1, 0xffff, 0x4, 0x0, 0x885, 0x9, 0x7, 0x88, 0x10, 0x1000, 0x1, 0xfffffff7, 0x8, 0x10000, 0x1, 0x5, 0x3129c99f, 0x1, 0x3, 0x4, 0x2a1a639d, 0x4, 0x2e, 0xa, 0x7, 0x3ff, 0x81, 0x8001, 0x8c45, 0x3, 0x9, 0x3, 0xee, 0x3, 0x4, 0x7, 0x8c, 0x6, 0xfffffffc, 0x57, 0xaa, 0x5, 0x8, 0x3, 0xe0000, 0x3c, 0x8, 0x4, 0x7a77ba12, 0x3ff80000, 0x8001, 0x8, 0x1, 0x9, 0xefa, 0x5, 0xda7b, 0x6, 0xec, 0x0, 0x7, 0x9, 0x6, 0x400, 0x6, 0x7fffffff, 0x1, 0x7fffffff, 0x7, 0x8, 0xf, 0x1, 0xff, 0x100, 0x101, 0x0, 0x10, 0x6, 0x0, 0x3, 0x1, 0x3, 0x4, 0x80000000, 0x9, 0x2, 0x3000, 0x6, 0x2, 0x3, 0x6, 0x1, 0x6, 0x9, 0x8, 0x7f, 0x2, 0x8]}]}]}}, @f_rsvp={{0x9}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x16, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0x2, 0xffffffffffffffff, 0x7, 0x68000000}, 0x6, 0x6}, [{0xfff, 0x4, 0x81, 0x0, 0x2, 0x4}, {0x9, 0x9, 0xd, 0x5, 0x5, 0x8}, {0x9db, 0x401, 0x74e9, 0x0, 0x5, 0x1}, {0x4bd9, 0x8001, 0xd, 0x1, 0x8, 0x4}, {0x7, 0x5, 0x3, 0x3, 0xffffffff, 0xffffffff}, {0x401, 0x6c, 0x6, 0x7, 0x3ff, 0xcc4}, {0x7, 0xffff, 0xff, 0x0, 0x6, 0x8}, {0xfe7c, 0x80000000, 0x3, 0x0, 0x5, 0xffffff18}, {0xcc7b, 0x8, 0x1, 0x9, 0x10, 0x9}, {0x51, 0x5, 0x0, 0x4, 0x500, 0xffffffff}, {0x101, 0xc5, 0x9, 0x5, 0x4, 0x5}, {0x8, 0x101, 0x7, 0x3, 0x89, 0x3}, {0x6c, 0x9, 0xa1f2, 0x8, 0x9ef, 0x8}, {0x2, 0x8, 0x4, 0x7, 0x2, 0x8c}, {0x101, 0xc0000, 0xb8, 0x2, 0x2, 0x3}, {0x100, 0x6, 0x1, 0x0, 0x2, 0x8}, {0x5, 0x3, 0x9, 0x0, 0x9, 0x1}, {0x7, 0xa9, 0x8, 0x610, 0x6, 0x9d}, {0x34, 0x3, 0x0, 0x3, 0xff8, 0x10001}, {0x6, 0x9b54, 0x56b, 0xd, 0xc4, 0x3ff}, {0x7f, 0x9, 0x1, 0x465, 0xfff, 0xf}, {0x5ecf, 0x5, 0x1, 0x0, 0x5, 0x10001}, {0x7, 0x8001, 0x5b, 0x8, 0x31, 0x7fff}, {0x200, 0x8, 0x4721, 0xfffffffc, 0x3, 0xbfdf}, {0x53a, 0xffffffff, 0x7b5, 0x9, 0x10001, 0x3}, {0x6, 0x79, 0x9, 0x0, 0x2, 0x4}, {0xffff, 0x8, 0xe6, 0x2, 0xb0f, 0x6}, {0xa, 0x2117, 0x5, 0x9, 0xffffffcf, 0x80000001}, {0x5, 0x4, 0x4, 0x5, 0x1}, {0x2, 0x6, 0xff, 0x9, 0x2e, 0x6}, {0xdc, 0xffffff36, 0x3, 0x7, 0x0, 0x6}, {0x4, 0x9, 0x5b, 0x6, 0x7, 0x7}, {0x1, 0x9, 0xfffeffff, 0xbf, 0x3, 0x1000}, {0x3, 0x1b8c, 0x7, 0x7, 0x5, 0x5}, {0xd821d52, 0x401, 0x1, 0x0, 0x4, 0xce}, {0x3, 0x1, 0x4, 0x400, 0x5}, {0x4d4f, 0x80000001, 0x1, 0x6, 0x9, 0x2}, {0x8, 0x3, 0x49a9, 0xd, 0x8, 0x401}, {0x10001, 0xbcfd, 0x80, 0x5, 0x6c}, {0x1, 0xfb0, 0xde95, 0x9, 0x6, 0x7}, {0x2, 0x1, 0xfffffc00, 0x0, 0x8, 0x9125}, {0x2000200, 0x9, 0x0, 0x1, 0x21ac, 0x87e9}, {0x6, 0x101, 0x7, 0x4, 0x0, 0x1}, {0x9, 0x94a, 0x7, 0x2, 0x0, 0x7}, {0x6, 0x9, 0x1e00000, 0x5, 0x9, 0x2}, {0x3, 0x7, 0xb7, 0x7, 0x9, 0x6e}, {0x5, 0x6, 0x9, 0xda, 0x5}, {0x80000000, 0x2b, 0x80000000, 0x2, 0x1ff}, {0x1, 0x400, 0x3, 0x4, 0x0, 0xd5}, {0x1000, 0x0, 0x0, 0x80, 0x4, 0x7}, {0x101, 0x69de841, 0x0, 0x6, 0x7, 0x7}, {0x8, 0x7, 0x5, 0xf, 0x5, 0x109}, {0x3, 0x9, 0xfffffffc, 0x687, 0x101, 0x1}, {0x2, 0x5, 0x3, 0x8, 0xbb6, 0x7}, {0x1, 0x8, 0x3, 0x7, 0x3ff, 0x8}, {0x5, 0x7, 0x5ff0087b, 0x4, 0x7, 0x3}, {0x7, 0x4, 0x7, 0x0, 0x7ff}, {0x9, 0x8f22, 0x5, 0x73b00000, 0x6, 0xffffff70}, {0x3, 0x1060b654, 0xfffffffd, 0x7, 0x9, 0x1}, {0xfffffc00, 0x3, 0x3, 0x3fd, 0x5, 0x4}, {0xfffffbff, 0x6, 0x81, 0x401, 0x4, 0x10000}, {0x0, 0x8, 0x1ff, 0x6ca4, 0x9, 0x8}, {0x8, 0xd, 0x2, 0xdfb3, 0x6, 0x4}, {0x2, 0xd, 0x6, 0x2, 0x10000, 0x3}, {0x0, 0x3, 0x2, 0x8, 0xffffff49, 0x6}, {0xffffffc0, 0xe, 0x7, 0x9, 0x1000, 0x5}, {0x1e, 0x3ff, 0x10, 0xf, 0x0, 0x2}, {0x8, 0x7, 0xe, 0x8, 0x2ab4000, 0x1}, {0x0, 0xad9a, 0x5, 0x7fff, 0x7, 0x8000}, {0xb, 0x7f, 0x1, 0x8, 0x7, 0x3}, {0x5, 0x9, 0x1dfb, 0x5, 0x1000, 0x1}, {0xffffffff, 0x7, 0x7, 0x5, 0x1, 0x10001}, {0xa6ae, 0x0, 0x6, 0x9, 0x10, 0x3}, {0x9, 0x79c, 0x1, 0x401, 0x5, 0x400}, {0x8f, 0xa35, 0x5, 0x40, 0xffff, 0x40}, {0x3, 0x3, 0x6, 0x5, 0x9, 0x8}, {0x4, 0x51, 0x5b2a69d2, 0x7fffffff, 0xf6, 0x9}, {0x1, 0x5, 0x6, 0x3ff, 0x1, 0x7fffffff}, {0xfffffffd, 0x6, 0x800, 0x2, 0x0, 0x1}, {0x0, 0x5, 0x6, 0x453b, 0xc6, 0x101}, {0xfffffff4, 0x1, 0xfff, 0x0, 0xce80, 0x3}, {0x7ff, 0x2, 0xfffffff8, 0x200, 0x7, 0x10}, {0x7, 0x50f, 0x6, 0xa000, 0xb8, 0x76d}, {0x3, 0x528610, 0x9, 0x9, 0x4, 0x7}, {0x3dd3e249, 0x0, 0x800, 0x5, 0x8a9, 0x7ff}, {0x7, 0x0, 0xc94, 0x0, 0x4, 0x428}, {0x0, 0xcffc, 0x5, 0x3, 0x1, 0xb}, {0x3, 0x2, 0xdd08, 0x5, 0x1, 0x3}, {0xfffffffa, 0x8, 0x3, 0xef65, 0x40, 0x4}, {0x81, 0x6, 0x4, 0x1000, 0xa9fd, 0x2}, {0x2, 0x200, 0xcd9, 0x3, 0x8, 0x1}, {0x7, 0x6, 0x38000000, 0x4, 0x8, 0x3}, {0x80, 0x7, 0x7, 0x9, 0x1, 0x1}, {0x2, 0x2a5c, 0xe, 0x7, 0x3, 0x2}, {0x6834, 0x6, 0x800, 0x1, 0xd7d, 0x3}, {0x1, 0xff, 0x5, 0x9, 0x9, 0x5}, {0x9, 0xe, 0x5, 0x1000, 0x40, 0x5f}, {0x5, 0x9, 0x80000001, 0xd, 0x9e1, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x7, 0x1}, {0xfffffffa, 0x2, 0x400, 0x1, 0x61c3, 0x3db0}, {0xb, 0x1d, 0x1ff, 0xffffff7f, 0x4, 0x3}, {0xffff8001, 0xe, 0x80000000, 0xfffffc0c, 0x80000000, 0x401}, {0x7, 0x28000, 0x9, 0x31827040, 0xa, 0x71}, {0xe123a784, 0x2, 0x1, 0x3, 0x3, 0x3}, {0xc31, 0x0, 0xfffff801, 0x7, 0x7fff, 0x10}, {0x2, 0xf, 0x4, 0x401, 0x1, 0x10001}, {0x3, 0x0, 0x36, 0x0, 0x5, 0xf}, {0x3, 0x4, 0x9, 0x5, 0x67, 0x7}, {0x5, 0x0, 0x3, 0x7, 0x8, 0xff}, {0x7, 0x7, 0x80000000, 0x2, 0xf644, 0x3}, {0x57, 0x400, 0x7, 0x80000001, 0x1, 0x5}, {0xff, 0x10001, 0x1, 0x6, 0x0, 0x800}, {0x100, 0x7, 0x3, 0xfffff801, 0x1, 0x9589}, {0x8, 0x8, 0xd810, 0x3ee, 0x4, 0x3}, {0x2, 0x4, 0x7, 0x9, 0x5949357, 0x1e}, {0x24ef, 0x9, 0xdb2, 0x8001, 0x7ff, 0x5}, {0x401, 0x10001, 0x2, 0x40, 0x5914a2fb, 0xc7b}, {0xe, 0x4, 0x78fc, 0x80000001, 0x6, 0x5}, {0x0, 0xc, 0x49, 0x4, 0x0, 0x7}, {0x6, 0xe000, 0x5, 0x1000, 0x9, 0xe2e}, {0xb, 0x8000, 0x2d619c7c, 0xba5, 0x4, 0x28bb}, {0x7, 0x4, 0x2, 0x800000, 0x7, 0x8001}, {0x845, 0xff, 0xd1c, 0xe1ae, 0x1, 0x10}, {0x3, 0xfffffff2, 0x4, 0x8}, {0x5, 0x7, 0x6, 0x15a, 0x6b, 0x4}, {0xa8, 0x7, 0x7fffffff, 0xfffffff7, 0x2, 0x10}, {0x7, 0x5, 0x8, 0x0, 0x0, 0x7}, {0x80, 0xbdf7, 0x54, 0xb, 0x4, 0x3}], [{}, {0x5}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0xb29f7634f3aba25}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0xb1b1fe6788f7187c}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0xe04166e180f52591, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x3}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1ba8}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.373202427s ago: executing program 0 (id=4373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd"], 0x18}}, 0x2000) 6.372891628s ago: executing program 33 (id=4373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd"], 0x18}}, 0x2000) 1.80968463s ago: executing program 2 (id=4421): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.764601215s ago: executing program 2 (id=4423): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.763156935s ago: executing program 1 (id=4424): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x81) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, ':^\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000480)="ec6e19bd54281773306c7068de24e25a0aa361de432b9021c71656e102b7cba33a6b5a63eba5e693abfc043ef6c783d6500bf14ed2beac7dadf57e66040825e4de4ef48fef92ccc9634214c98a378505787a7f290ff263df9ad928266986", 0x5e}, {&(0x7f0000000500)="1aeae8e24b99465bedcc5474d6e5d9379bc771646d9bc5973b08feea337512ce19c5df06bc80", 0x26}, {&(0x7f0000000540)="54864aa132554c31999418458a28a1fc49908d3aded2c2a773b49ac1ee986b3b67b78106793a1743de3c11a5a364ef36cd658f41f7447efb07d0dab79330448889c52896807f78a4f16120b52dbdfe506adc32e25c1b20e20b0e2f1aaab0a12eb4776e0cda5979389b49bb24f2f8ccc5432355db8ae9972641c71002adc89ec05a27d875803f52565114b4dffbf08da3e9feaa8faf5afca24668053fbddb371a8f1ad63be0bc8c000669b80a98e85c8c7221242635b43c2f1d9dc9099c26b2baba04771a6b7d077e87dfc32a72cfa0b3efb2314e8d0fd46417c4763aae4360fe4b057cd31baafa", 0xe7}, {&(0x7f0000000640)="f3cc3520981b05dcdb7bb39f6308cdccf593b2b06504c88e1da7291997b9090c7efaac90d0d45207195c3e4c4218350ee45f6a2e58618d198e3087f081a4c547946cdd7bab6981d3754b9844bc75c29dae748b749c7ab6f69c16dea83e4c72e2e8922ea7b5e6e7e50a42911131f8b0767f2c2d3b70d38872bfbd088542e05df42d24ff5a064c031e7f9538ef4b3b53605763e45d738aea128aceba979df1ed834755b594211532c2a963373e7d45cf22aec33aa699d03f72d1", 0xb9}, {&(0x7f0000000700)="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", 0x1000}], 0x5, &(0x7f0000001780)=[@mark={{0x14, 0x1, 0x24, 0x77a43d8f}}, @timestamping={{0x14, 0x1, 0x25, 0xce35}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x20000000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}, 0x20048044) (async) close(r6) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008841) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x70, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x2204c000}, 0x800) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x80, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x1) (async) setxattr$security_ima(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), &(0x7f0000001c80)=@v2={0x3, 0x2, 0x4, 0x400, 0x40, "5177d855b72363dcd6ccd430b69eff11d7f955bcf5d9dd18de6c2cb92baee63bd1ecd10c1697d26212d385e21ba311f0fb07b8efb85d5dda9aeb02f53ca6b316"}, 0x49, 0x3) (async) r9 = fspick(0xffffffffffffffff, &(0x7f0000001d00)='./file0/file0\x00', 0x1) r10 = fsmount(0xffffffffffffffff, 0x1, 0x71) fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000001d40)='nl802154\x00', &(0x7f0000001d80)='./file0\x00', r10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={r10, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0x0, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x1c, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x1, 0x2, 0x0, 0x7f, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001ec0)='GPL\x00', 0x8, 0xc7, &(0x7f0000001f00)=""/199, 0x40f00, 0x4, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002000)={0x4, 0xc, 0x7, 0x557e2856}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000020c0)=[r10, r10, r10, r10, r10, r11, r10, r12, r10], &(0x7f0000002100)=[{0x3, 0x2, 0x1, 0x3}, {0x1, 0x2, 0x8, 0x7}, {0x1, 0x4, 0xe, 0x3}]}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002200)={0x1a}, 0x8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x48, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xaa}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) r13 = accept4$packet(r10, &(0x7f0000002380), &(0x7f00000023c0)=0x14, 0x180800) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000002400)=@req3={0x6, 0x4, 0x3, 0x6, 0x48c, 0x1, 0x6}, 0x1c) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x20008000) 1.356875525s ago: executing program 2 (id=4426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_load(0xffffffffffffffff, 0x0, 0x9ae6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.227716488s ago: executing program 1 (id=4427): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) 1.030283888s ago: executing program 2 (id=4430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r1, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 1.029683178s ago: executing program 2 (id=4431): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0xc3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000080)=""/131, 0x83) pread64(r3, &(0x7f00000024c0)=""/209, 0x23, 0x697) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) ioperm(0x4, 0x1, 0x6) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x54, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9ee}]}, 0x2c}}, 0x40004) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000203010200000000000000000300000608000340000000050900020000000b38010000000066ffffffffffff020000000800054000000050"], 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff6000/0x2000)=nil) r11 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$GIO_UNIMAP(r11, 0x4b66, &(0x7f0000000280)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) 799.598921ms ago: executing program 5 (id=4433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0x288, 0xe8, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 689.681372ms ago: executing program 1 (id=4435): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000004c0)=0xfffffff9, 0x4) socket$inet(0x2, 0x3, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000280)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@stripe={'stripe', 0x3d, 0xfffffffffffffffc}}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r2, 0x0, 0x3, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_io_uring_submit(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r6, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 645.684266ms ago: executing program 5 (id=4436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 641.382406ms ago: executing program 1 (id=4437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400006000000000340000000000800024000000006240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r6, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='GPL\x00', 0x6a58, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x7}, 0x18) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a608004500ac1414bb60898023cc16e797422d79f61dca5c781711f2c371d2a6c536e9e11b75d4a097c5fe4bd3ae5b7f1e9df85ba1ba16c8d77e328ce03aecf0c78a6236d287abcc278a8d7c97bf5a52db47a0ba2a5ef58c6586642a06ae27356a6d656146187da5454db7"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$unlink(0x9, r2, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = open$dir(&(0x7f0000000040)='./file0\x00', 0x480, 0x4) mkdirat(r10, &(0x7f0000000080)='./file0/../file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 620.588478ms ago: executing program 5 (id=4438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 559.121945ms ago: executing program 6 (id=4439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (fail_nth: 6) 371.733853ms ago: executing program 6 (id=4440): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r10, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x37, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018430000fdffffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0200000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000004ac07000400000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000bc40900b607000018190000", @ANYRES32=r4, @ANYBLOB="000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000160e000000000000ff7f0000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x9, 0xfd, &(0x7f00000008c0)=""/253, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000a00)=[{0x3, 0x4, 0xa, 0x1}, {0x5, 0x3, 0x4, 0x6}, {0x0, 0x5, 0xe, 0x1}, {0x1, 0x4, 0x5, 0x7}, {0x1, 0x3, 0x7, 0x2}, {0x0, 0x5, 0x9, 0xc}, {0x3, 0x3, 0x7, 0x5}, {0x4, 0x2, 0x3, 0xa}, {0x2, 0x5, 0x2, 0x7}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, 0x0, &(0x7f0000000080)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=r8], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r12, 0x0, 0x40008003}, 0x18) r13 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x280040, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r13, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 235.516307ms ago: executing program 1 (id=4441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r1, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 231.315357ms ago: executing program 5 (id=4442): syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 187.362641ms ago: executing program 6 (id=4443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0x8, 0x60000000}, 0x50) 185.931921ms ago: executing program 1 (id=4444): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000004700)=@newtaction={0x4510, 0x58, 0x284f, 0x0, 0x0, {}, [{0x5c0, 0x1, [@m_xt={0x23c, 0x1c, 0x0, 0x0, {{0x7}, {0x178, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x11a, 0x6, {0x6, 'security\x00', 0x40, 0x6, "5373e2f14dfa4cc4467a0e72a31aca0f8dc07b255743fa5dce5ade7dcac83120dc61c54dd96a70ab4c1fd0374152283412292be6040fa3db1f3e81101410c3bd2e5902b4e4649d654b8f1687865d6953be60dbf0f9b4441b9af7788f0ab21d215132e60aad12ebee0b937b4ee8130f02d131f64c4b06c57130d4446de3ffd22ea875820f5240ce6e827223b744e439371ce706db18c7e36f2302bbaf34f46ed9cffcb5e46236bc79d27a246bb6d42d7527e343e42f105ef19122c7ec55006a9571c23613f9a5907e3fd85facdb332c5c2f3c136359de53e0a5fabaace1612bebb6edf09cac848e022d304346ded45e2f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x9e, 0x6, "bcbc585d2fbff4f8471dea69c5761e66f75aa007c2cecab5b24e7d47b77c5f7c9c917d497e3fd3332e3bdf3a07dfabc9bd71bc3d0c363e7cbf7eda7b0a9148633400cce3d2bc88fb1080e0d8e7f9d09bc702c8938a383cfe9ad77293bf69eb865a6517d0d4fb4df7f2e336703d1b39c8ca4dbeffb77c0cdbeb931a2e606df43dafdaaf2fc3a05169cceb83ee8271a9e23e65c04ba8457b820686"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xc0, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xb1a}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x113ea2e1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffff4, 0x2, 0x1, 0x21, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x9, 0x2, 0xc, 0x84cb}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfe7}]}, {0x31, 0x6, "e46fbc36459f7a480bcda51f6207433ee2cdd7204bb36156ddd1d06119486850239737ad36c19bd15c53e1bc5d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0xc4814ca22e5bcaf4}}}}, @m_xt={0xcc, 0x16, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x9c, 0x6, "fb5957c6e4ac0cf40799166d9606a22913ed8a178eaa57a694def04f9646143b66857e4f75b71fe052c9e59a43d10530e6fec95e4edd20d85e065a7a3701e6444898d04bd89260398392c51266b392d06dadaadd6b5d07a8435b4301e44112d923f8b14e9f8611e17eb0dab431d4d1e0a31d8233c02ad15ed0549128518fcc2e864eda9e78b663f931cefe551a9663c3a886dd520e6de8d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x11c, 0xe, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x14, 0x3, 'kmem_cache_free\x00'}]}, {0xda, 0x6, "b0965bc16726a9e2c65a8229515d6772ba764187960322051ea36f29e718b2862e0871e209ad4f32312e5a4b4606ba44ee4e8bfa41e55d85efc0651a8086fa69ce6c967200ad7659b20751927a71f13644424ef70ccb5a3156c3a190a10012ffbf5408eff858f584a09e712a16c6d78ca5a36553ee1b1a93d53f627cf521eb54ad02e90108e486eb4d1ff7d56944c0bae9546710c62ff2126aea7d0705cd67cae9effc45b63bf5a08ffc0ca5de49f2ed3ade69a4a4649569e07b8fdd2a33a0a885ffac4794fb66c8481d506e03bbf3b27bf4cf736d61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xd8, 0x1d, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x80, 0x10000000, 0x7106, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0xa0000, 0x10000000, 0x80000001}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x30d}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6000}]}, {0x53, 0x6, "4389a78d1a7729c19054b4a8794b8342925735fac3560df30924f472f0857bb9e6ad04c9cead14d88e84648c8ddb0c6dd3a8746cf6bb1dd686f15b3a134e1909ce4f673f71fdd61b476a75974f77e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x4}, {0x3608, 0x1, [@m_xt={0x74, 0x19, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x15, 0x6, "1a077cd5799ebda29b897361e2e5b3cdd4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x90, 0xa, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2428, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x83, 0x0, 0x8, 0x7fff}}]}, {0x3f, 0x6, "bd3eed09d6e52d7d4cfa8a97c8c75cf2bfaeffef8005c731e1e32f3ca8b492e3ca8a0ff2777fe588534377c97b246d8b95d5f706ffcd42b115f76c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xec, 0xf, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8001, 0x9, 0x20000000, 0x8, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x87, 0x6, "7e019d77c3aafe8d5a6c599de70390211b187b0ac1827442b8f86133556eea2e20d3122d1d69bd84a7a88adf742a9c754d2c7a6ced41c07a68f25d99cafbfc4db4035d9870520b487ff44cb835a163f29222108b1697f4b76a37a4815173cd74e3b5f95cfa0e53fe97dd9ddeef928772e6de35ae0b3825ea0dced7a2397b37d63c33b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2dac, 0xa, 0x0, 0x0, {{0xb}, {0x1d80, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x4, 0x7ff, 0x80000000, {0x81, 0x2, 0xb7, 0x9, 0x2, 0x3}, {0x8, 0x0, 0x683, 0x2, 0x6, 0x3}, 0x9, 0xb, 0x40}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xcba}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x10000000, 0x7fff, 0x8, 0x0, {0x7, 0x1, 0x4, 0x5, 0x3000, 0x7f}, {0x0, 0x2, 0xfffb, 0x40de, 0x7, 0x9}, 0x3, 0x5, 0x800}}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_RATE={0x404, 0x2, [0x7653, 0x193f5f8f, 0x9, 0x6, 0x7, 0x3, 0x5, 0x4, 0x100, 0x0, 0x7fffffff, 0x9, 0x3, 0x7, 0x346, 0x9, 0x6, 0x3ff, 0x491b95d, 0x5, 0x80000000, 0x200, 0x7, 0x7fffffff, 0x5, 0x3ff, 0x1, 0x4, 0x4, 0x4, 0xb72, 0xc8d, 0x9, 0x8, 0x9, 0xf2, 0x612e, 0x1, 0xfffffffa, 0x3, 0x10000, 0x10, 0x1ff, 0x9, 0x7fffffff, 0xffff669f, 0x9, 0xfffffffa, 0x2, 0x5, 0x0, 0x5, 0x8, 0x10, 0xeda3, 0x800, 0x80000000, 0x3, 0xf, 0x2, 0x2, 0x1, 0x7ff, 0x1, 0x2, 0x10001, 0x9, 0xfffffffc, 0x2, 0x0, 0xbd2, 0xd, 0x4, 0x2, 0x896, 0x0, 0x1000, 0x3, 0x9, 0x8, 0x8, 0x6, 0x9, 0xffff, 0x0, 0x7ff, 0x2d5, 0x8001, 0x8, 0x80000001, 0xd, 0x9, 0x9ead, 0x7f, 0x1, 0x4, 0x1, 0x0, 0x0, 0x7, 0x1ff, 0x4, 0xb9, 0x8, 0x8001, 0x2, 0xe, 0xfff, 0xb, 0x3, 0xb0df, 0x3ea7, 0x93f70, 0x5, 0x7, 0x46c, 0x6, 0x4, 0x0, 0x0, 0xdb, 0x4, 0x6, 0x5c8, 0x3ff, 0x6, 0x7fff, 0xfffffff7, 0x40, 0x6, 0x2, 0x4, 0x2, 0x1e0, 0x3, 0x8, 0x2, 0x0, 0x1, 0x1, 0xe2, 0xc, 0x80000001, 0x4, 0x0, 0x1, 0xfffffff7, 0xaf, 0xfffff4d6, 0x7, 0x6, 0xc, 0x9, 0x200, 0x682b, 0xe1b1, 0x9, 0x9, 0x81, 0x7, 0x1, 0x2, 0x7, 0x8, 0xe0000000, 0x8e83, 0x6, 0x9, 0x1d, 0x49e8, 0x7, 0x5, 0x6, 0x7, 0xa6, 0xfffffffa, 0xb, 0x7, 0x446b, 0x90, 0x3, 0x3, 0xc, 0x516a, 0x0, 0x80000001, 0xd, 0x0, 0x4, 0x3, 0x6a, 0x3, 0x800, 0x4, 0x5, 0x5f55, 0x8, 0x0, 0xa2, 0x1, 0x8, 0xd, 0x40, 0x7, 0xbc, 0x4, 0xff, 0x5, 0x45a, 0xa7de, 0xbd95, 0x6, 0x100, 0xf, 0x5, 0x10000, 0xfffe00, 0x8, 0xfe18, 0x1, 0x0, 0xf, 0x9, 0x207, 0xb7a, 0x56, 0x32, 0x2, 0x8, 0x8, 0xfff, 0xb6f, 0x40000000, 0xfffffffc, 0x6, 0xe0000000, 0x8, 0x2, 0x2, 0x2, 0x77b, 0x2, 0x5, 0x6, 0x3, 0x4, 0x100, 0x0, 0x3, 0x5, 0x6, 0x5, 0x0, 0x3, 0xb44, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x72}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0xa54, 0x8, 0x4, 0x2, 0x6, 0x8, 0x0, 0x9, 0x8, 0x400, 0x5da, 0x6, 0x7f, 0x0, 0x400, 0x6, 0xfff, 0x4, 0xffff00c2, 0xb2bf, 0x6, 0x10000, 0x5, 0xf14, 0x4, 0x7, 0x100, 0x8, 0xcf9f, 0x6, 0x7, 0x4, 0x10, 0x1, 0x1, 0x1170000, 0x4, 0x4, 0xfffeffff, 0x7, 0x2, 0x3, 0x6, 0x35e, 0x7, 0x4, 0x81, 0x1f1f, 0xab, 0x1, 0x4, 0x5, 0x7, 0x2, 0x0, 0x0, 0x5, 0xb, 0x80000000, 0x8, 0x0, 0x4, 0xe, 0x70, 0x6, 0x7, 0xfffffff9, 0xff, 0x40, 0x9, 0x9, 0x800, 0xd62, 0x3, 0x5, 0x6, 0xc, 0x8, 0x71f3, 0x450, 0x100, 0x7, 0x5, 0x2, 0x3, 0x5, 0x75f, 0x26b, 0x93, 0xffff, 0x1, 0x9, 0x6, 0x9, 0x2, 0x1, 0xa, 0xd95, 0x56d, 0x6, 0x7, 0x9, 0xe3, 0x8fe8, 0x55, 0xe, 0x4, 0x4, 0x5, 0x7, 0x1ff, 0x2, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x4, 0x7, 0x6, 0xfffffffa, 0x7, 0x6, 0x10001, 0x101, 0xfffffff7, 0xfffffff9, 0x5, 0x6, 0x4, 0x7, 0xffffffff, 0x7, 0x6, 0x10000, 0x9, 0x8, 0x3, 0xfffffffe, 0x2800000, 0x5, 0x6, 0xe, 0x63c, 0x6, 0x8001, 0x7ff, 0x101, 0x1, 0x64, 0x200, 0x6, 0x1, 0x4, 0x7, 0x5, 0x4, 0x401, 0x6, 0x7f, 0xfffffffa, 0x8000, 0x6, 0x8, 0x5, 0x0, 0x5, 0x1, 0x10000, 0x0, 0x6, 0xcfd4, 0xe1, 0x188, 0x10000, 0x5, 0x200, 0x2, 0x38e0000, 0xc786, 0x400, 0x5, 0x6, 0x2, 0xba9f, 0x4, 0x3, 0x3, 0x0, 0xb9, 0x1000, 0x400, 0xd, 0x7e, 0x6, 0x101, 0x0, 0xfffff655, 0x4, 0x401, 0x7, 0x1, 0xf, 0x7, 0x10000, 0x7fffffff, 0x4, 0x6, 0x1, 0x3000000, 0x8, 0xfffffffc, 0x81, 0x8, 0x9, 0xffffa033, 0xbb8, 0x9, 0x3, 0x6, 0x2, 0xffffffb0, 0x3, 0x4, 0x4, 0xc, 0xc, 0x0, 0x3, 0x0, 0x3, 0x6, 0x1, 0x7, 0x7f, 0xab2, 0x1ff, 0x1, 0x0, 0x5, 0x3, 0x0, 0x7, 0xa, 0x28f8, 0x400, 0x2, 0x1, 0x4a3, 0x3, 0x4, 0x100, 0xa]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7f, 0x2, 0xc1, 0x8, 0x8, 0x0, 0x400, 0x9, 0x64f5, 0x8, 0x1, 0x4, 0xe, 0x1, 0xdd, 0x6, 0x3, 0x4, 0x7, 0x8, 0x85, 0x101, 0x1, 0x6, 0x200, 0x1, 0xcb0, 0x1, 0x5, 0x8, 0x3, 0x0, 0x0, 0x9, 0xe864, 0x9, 0xd7, 0x0, 0x2d, 0x81, 0x1, 0x20, 0x9, 0xfffffff9, 0x2, 0x100, 0x400, 0xfffffffa, 0x81, 0x7e02, 0xc, 0x9, 0x80ce, 0x2, 0x3, 0x10000, 0x2e, 0x0, 0x4, 0x100, 0x0, 0x2, 0xc, 0x49, 0x5dc, 0x5, 0x3ff, 0x3, 0x152e, 0x10001, 0x5, 0xfffff7dd, 0x8b88, 0x40, 0x100, 0x42, 0x3, 0x2, 0x4, 0xd, 0x9, 0x7, 0x8001, 0xea, 0xfffffffe, 0x3719533a, 0x7, 0x8, 0x0, 0xda4, 0xb7f, 0x1000, 0x3, 0x1, 0x3, 0x2, 0x1, 0xe5e, 0x3, 0x6, 0x4, 0x3a8, 0xe0000000, 0x400, 0x8, 0x6, 0x9, 0xbb67, 0x79168, 0x3, 0x2, 0x3, 0x3, 0x2, 0x5, 0x3a96, 0x8, 0x9, 0xffffffff, 0x4, 0x4, 0x10001, 0x9, 0x6, 0xfffffffb, 0x100, 0x9, 0x9, 0x101, 0x800, 0x6, 0x9, 0x8000, 0x1e26, 0x7, 0x4, 0x2, 0xb, 0x10, 0x7, 0x1, 0x5, 0x7, 0x3, 0x6, 0x1e5, 0xb8d, 0x0, 0x7, 0x76, 0x9, 0x743e9938, 0x9, 0x2, 0xffffffff, 0x6, 0x4, 0x80000000, 0x9, 0x75, 0x2, 0x5f93, 0x4, 0x3, 0x7, 0x1, 0x10, 0x7, 0x0, 0x2, 0x81, 0x0, 0x100, 0x81, 0x2, 0x10001, 0x70, 0xe, 0x5, 0x8, 0x5, 0xa7, 0x3, 0x40, 0x3, 0x4, 0x4c, 0x7, 0xbd, 0x6, 0x7, 0x1, 0x1, 0x8001, 0x3, 0x7, 0x7, 0x7ff, 0x3f, 0xf, 0x44e, 0x8, 0x6c, 0x6, 0x2, 0x5, 0x0, 0x401, 0x1e9, 0x41, 0x1, 0x4000000, 0x100, 0x8, 0x1, 0x7, 0x4, 0x8001, 0x4, 0xfffffffa, 0x0, 0x9, 0x8, 0x9, 0xb, 0x1, 0xdac, 0x305a, 0xdf0e, 0x1ff, 0x8, 0x7, 0x7, 0x4, 0x7, 0x9, 0xe, 0x3, 0xa, 0xfffffffc, 0xc8bf, 0x3, 0x5, 0xf, 0x2, 0x1, 0x5, 0x1, 0x8001, 0x8, 0x9, 0x5, 0x0, 0xffffffff, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x800, 0x5, 0x7, 0x225af593, 0x7, 0x7, 0x400, 0x3, 0x8, 0x4, 0x3ff, 0xc76, 0xffffffff, 0xe, 0x7, 0xe, 0x4, 0xd, 0x6790, 0xf3e5, 0x400, 0x7c4d, 0x9, 0x4, 0xfffffff4, 0x9f, 0xb4, 0xc00, 0x2, 0x7, 0x2, 0x4587, 0x9, 0x9, 0x1, 0x6, 0xfe, 0x9, 0x7, 0x7ff, 0x8001, 0x1, 0x8, 0x100, 0x1d67, 0xfffc0000, 0x1, 0x100, 0x5, 0x2, 0x5, 0x6, 0x7, 0x39a8, 0xfffffffc, 0xe316, 0xd76, 0xff, 0x9, 0x3, 0x6, 0x6, 0xe, 0x6, 0x10, 0x1, 0x6, 0x0, 0xf, 0x8, 0x4, 0x7, 0x5, 0x7, 0x7ff, 0x3, 0x1ee66b93, 0x9, 0x65, 0x6, 0x1, 0x6, 0x7, 0x1d47, 0x1, 0xa, 0x1, 0x4, 0x10, 0xc72, 0x4, 0x2, 0xd, 0x6, 0x3295, 0xe3ca, 0x9, 0x5, 0x9, 0x9, 0x8000, 0xd8, 0x1, 0x8, 0x7, 0x7, 0xffffffff, 0x0, 0x4c6, 0x7, 0x144, 0x66cd, 0x9, 0xfffff7dc, 0x94, 0x2, 0x5, 0x8, 0x7, 0xffffffff, 0x8, 0x3, 0x700000, 0xe, 0x2, 0x7, 0x100, 0x8, 0x518, 0xa, 0x1, 0x5, 0x9fc, 0x1, 0x80000000, 0x10001, 0x1, 0xa0, 0x2, 0xffff, 0x400, 0x53d, 0x40, 0xdb, 0x8, 0x5, 0xa, 0x5, 0x8000, 0x0, 0x4, 0x400, 0x9, 0x7fff, 0x2, 0x9, 0x2b5aaaba, 0x7000, 0x80000000, 0x2, 0x0, 0x1, 0x6f36, 0x5, 0x0, 0x7, 0x2, 0x1000, 0x100, 0x4, 0x80, 0x7ff, 0x5, 0x4, 0xfffffff9, 0x7fff, 0x101, 0x44af, 0x0, 0x7, 0x400, 0x0, 0x9, 0xe456, 0x5, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x1, 0x8, 0x8, 0x7fff, 0x6, 0x5, 0x4, 0x401, 0x5, 0x8, 0xd37, 0x1, 0x800, 0xc, 0xff, 0x9, 0x7, 0xfffffffc, 0x8, 0x9, 0x180, 0x6c, 0x0, 0x4, 0x3, 0x800, 0x1, 0x7e, 0x80000001, 0x4, 0x7d, 0x181d4d0d, 0x2, 0xfffffffb, 0x3c, 0x6, 0x9, 0x100, 0x3, 0x1, 0x5, 0xa513, 0xfffff4df, 0x8, 0x1, 0x10, 0x2, 0xfffffff8, 0x3, 0x70aa, 0x8, 0x5, 0x0, 0x0, 0x2, 0x4, 0x7, 0x2, 0x10, 0x800, 0x4, 0x1, 0x8000, 0x74b8, 0xfb]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x7, 0x7, 0x8001, 0x4, 0x6, 0xa, 0x6, 0x0, 0x9, 0x5a5, 0x4, 0xb4, 0x7ff, 0x1375, 0x200, 0x9, 0x3, 0x0, 0xfff, 0x7f, 0xb, 0x6, 0x1, 0x51a7, 0x7, 0x2, 0x1, 0x7fff, 0x3, 0x9, 0xffff, 0x4, 0x3, 0x1, 0x6, 0x9, 0x0, 0x8, 0x2, 0xa, 0x7b8, 0x800, 0x101, 0x566b, 0x5, 0x5, 0x6eaf, 0xc, 0xffffffff, 0x2, 0x3, 0xf5b6, 0x5265b3dd, 0x0, 0x6, 0x1, 0x2, 0x5, 0x6, 0x8, 0xfffff410, 0xffffffff, 0x3, 0x67201a96, 0x58, 0x0, 0x1, 0x2, 0xfffffff9, 0x0, 0x4, 0x8, 0xda, 0x3, 0x40, 0x7f, 0x8, 0xe2, 0x6, 0x1f67f679, 0x234, 0xfffffff7, 0x100, 0x2, 0x88, 0xb111, 0x1, 0x81, 0xf, 0xfffffffa, 0x10000, 0xffffffcd, 0x2, 0x3, 0xe51a, 0xfffffff7, 0x10, 0x4, 0x100, 0x6, 0x1, 0x206393a5, 0x9, 0xf7, 0xdb4, 0x3, 0x5, 0x7f, 0x3, 0x3, 0x15a, 0x6, 0x8000, 0x1, 0x0, 0x5, 0x2, 0x8dda, 0x4, 0x6, 0xfffff9a4, 0x7, 0x1, 0xfffffff8, 0x9, 0x40, 0x3, 0x7be, 0x8d, 0x2, 0x4, 0x8, 0x358f, 0x1, 0x10001, 0x40, 0xcc, 0x0, 0x0, 0x7, 0xf59, 0x9, 0x21e, 0x7, 0xfffffffa, 0x880f, 0x1, 0xffffff1c, 0xd8, 0x7, 0x401, 0x3, 0x5, 0x100, 0x5, 0x9, 0x800, 0x800, 0x4, 0x36, 0x9, 0x8, 0x1, 0x5, 0x2cac, 0x8, 0x2, 0x1, 0x7, 0x8, 0x7, 0xfffffff7, 0xffffa3b9, 0x86, 0xe, 0x9, 0x958, 0x9, 0x6, 0xb610, 0x7, 0x1, 0x4000000, 0x7, 0x8, 0x1ff, 0x3ff, 0x7f, 0x800, 0x8, 0x5, 0xf, 0xe4, 0x7, 0xf2, 0x8, 0x2, 0x5a, 0xe, 0x1ff, 0x2, 0x2, 0x6, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffb, 0x2, 0x6, 0x6, 0x8, 0xfffffbff, 0x49e9d487, 0x5, 0x7f, 0x8, 0x3, 0x6, 0xfffffff8, 0x0, 0x7, 0x2, 0x0, 0x7, 0xfffffff6, 0x5, 0x80000001, 0xffff8001, 0x5, 0x7, 0x8, 0xb84, 0x3, 0x7, 0x7, 0x1, 0x1000, 0xb, 0x4cf, 0x4, 0x7, 0x2, 0x3, 0xd522, 0xfffffff1, 0x3, 0x4, 0x7f, 0xa, 0x1, 0x8d5, 0xb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0xfff, 0x2, 0x8, 0xaa, 0x8, 0x3, 0x80000001, 0x8, 0x3, 0x6, 0x400, 0x401, 0xc, 0xb, 0x4, 0xfffffff4, 0x6, 0x9, 0x3, 0x3, 0x9, 0x8000, 0x5, 0x5, 0x11, 0x3, 0x1, 0x8, 0xfffffff9, 0x7, 0x8, 0x6, 0x2, 0x0, 0x1, 0xa, 0x10, 0x5e5, 0x3, 0x52f, 0xfffffe00, 0x7, 0xe, 0xb, 0x6, 0x0, 0x8, 0xbbbe, 0x1ff, 0x2, 0x5, 0xf70, 0x2c38, 0x8f3, 0x0, 0x3, 0x7, 0x3, 0x8, 0x0, 0x4, 0x7b3b, 0x101, 0x4, 0x69ce, 0xffffffff, 0x1, 0x8, 0xb4, 0x6, 0x64, 0x80000001, 0x1, 0x1, 0xa, 0xff, 0xd0fd, 0x9, 0x7fffffff, 0xffffff0b, 0x8, 0x4, 0x1, 0x0, 0x6, 0x3, 0x7, 0x8, 0xcc364e1, 0x2, 0x2, 0x8, 0xfff, 0x1, 0x6, 0x4, 0x400, 0xb0f, 0x5, 0x1, 0x1db3, 0x6, 0x6, 0x1, 0x0, 0x8, 0xe, 0x1, 0x1, 0x2, 0x4, 0xfe00000, 0x3, 0x3, 0x3, 0x970, 0x9152, 0x9, 0x4, 0x8, 0x2, 0x400, 0x1, 0xb, 0xa0400d7, 0x6, 0x9ed, 0x100000, 0xffffffff, 0x7fff, 0x3, 0xfffffffd, 0x2, 0x1, 0xf2, 0x7, 0x7, 0x1, 0x0, 0x9, 0x7, 0x5, 0x0, 0x4, 0x7c, 0x2, 0x9, 0x1, 0x4, 0x0, 0x1000, 0x1, 0xdf5f, 0x1f, 0x7, 0x9, 0x6, 0x5, 0x47, 0x9, 0x8, 0x3, 0x0, 0x0, 0xe336, 0x8, 0x6, 0x50, 0x22, 0x80000001, 0x100, 0x2, 0x5, 0xffffff81, 0x7, 0x3, 0xf, 0x2bb476f, 0xacd, 0x2, 0x1, 0xaa1012a, 0x7, 0x4, 0x8, 0x2, 0x0, 0xd, 0x0, 0x8, 0x0, 0x8, 0x0, 0x8, 0xff, 0x7, 0x7, 0x8000, 0x500, 0x9, 0x5, 0x400, 0x0, 0x5, 0x1800000, 0x2, 0x7, 0x7, 0x0, 0xe8, 0x2377c0, 0x73800, 0x2, 0x18000, 0xfff, 0x7fffffff, 0x8, 0xd, 0x20000000, 0x8c, 0x5, 0x3ff, 0x6, 0x40, 0x80, 0x401, 0x10001, 0x0, 0xc7d9, 0x3, 0xbcec, 0x0, 0x0, 0x6, 0x0, 0x5, 0xff, 0x2e, 0xe, 0xfff, 0x2, 0xc, 0x0, 0x4, 0xfffffff8, 0x2, 0x73f, 0x3, 0xf, 0x10001, 0x0, 0x36, 0x4, 0xef9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x4, 0x2, 0x1, 0x400, 0x3, 0x1, 0x7, 0x3000000, 0x0, 0x7fff, 0x8, 0x7, 0x7, 0x401, 0x4, 0x1, 0x6, 0x23ad, 0x2, 0x5, 0x4, 0x1, 0x7a, 0x9, 0x3, 0x12d8, 0x6, 0x1, 0x75a1, 0x7, 0x9, 0x80000, 0xc5a, 0x8000, 0x6, 0x4, 0x1, 0x2942, 0x7, 0xf8b, 0x6, 0x9, 0x8, 0x5, 0x8, 0x6, 0x8000, 0xf19b, 0xa2, 0x5, 0xbb8, 0x1, 0x8, 0x5, 0x3ff, 0x1, 0x0, 0x7fff, 0x101, 0xffffffa3, 0x8, 0x4, 0x8, 0x4, 0x0, 0x3, 0x7fffffff, 0x7, 0x6, 0x8, 0x100, 0x0, 0x3ff, 0xfffffffc, 0xb, 0x5, 0x80, 0x8, 0x4, 0x6, 0xfacc, 0x9, 0x7, 0xfffffff9, 0x4, 0x2, 0x0, 0x2, 0xac, 0x649f, 0x2, 0x9, 0x400, 0x4c8, 0xfff, 0xffff0000, 0x5, 0x417, 0xfff, 0x100, 0x8000, 0x6, 0x8, 0x0, 0x5, 0x8001, 0x8, 0x1864, 0x8, 0x8, 0x3759, 0x0, 0x7fffffff, 0x0, 0x8, 0xaf19, 0x1, 0x9b340000, 0x1, 0x40, 0x80000000, 0x3, 0xc, 0xbed8, 0x1000, 0xffffffff, 0x6, 0xc075, 0x0, 0x400, 0x3, 0x0, 0xd, 0x870, 0x6, 0x2d6, 0x2, 0xfff, 0x1, 0x10, 0x4, 0xffff, 0xfff, 0x4, 0x10, 0x7f80, 0x4, 0x5, 0xfffffffa, 0x4, 0x9, 0x2, 0x6, 0x80, 0x7, 0x81, 0x7ff, 0x1, 0x94ac4995, 0x0, 0xd, 0xfffffff8, 0x5, 0x3ff, 0x5, 0x1, 0x4, 0x5, 0x9, 0x5, 0x4, 0x147a, 0x0, 0x5, 0x6, 0x6, 0xc, 0x8000, 0xffffffff, 0x5b5d, 0x9, 0x8, 0x0, 0x6, 0x7, 0x6, 0x9, 0x9, 0x8, 0x6, 0x9, 0xda, 0x401, 0x3ff, 0x4, 0x2, 0x5, 0xd, 0xff, 0x8, 0xc800, 0x5, 0x4, 0x5, 0x8, 0x8, 0x5, 0x7, 0xa, 0x8fc, 0x2, 0x8, 0x0, 0x8, 0x0, 0x2, 0x8, 0x3ff, 0x0, 0x9d, 0x2065, 0x1, 0x101, 0xd, 0xfffffc01, 0x1, 0x2, 0x0, 0x80000000, 0x8000, 0x6, 0x9, 0x3, 0x40, 0xfffffff8, 0x40, 0x2, 0xf, 0xff, 0x4, 0x5, 0x0, 0x7, 0x2, 0x5, 0x4, 0x7fffffff, 0x3, 0x738, 0x5, 0x3, 0xf, 0x3, 0x3, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x6, 0x8, 0x80000001, {0xd, 0x0, 0x9, 0x1, 0x8001, 0x863}, {0x8, 0x1, 0xe6, 0x5, 0x7, 0xfffffff9}, 0x1, 0x101, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_police={0x4e0, 0x1c, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4e6443b9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x3, 0xfffffffb, 0x3ff, 0x7ca8, 0x8, 0x81, 0x3, 0x7, 0x5, 0x6, 0x1, 0xff, 0x7fff, 0x0, 0x4, 0x8, 0x2, 0x9, 0x5, 0x0, 0x8, 0x7, 0x7, 0x7, 0x2, 0x6, 0x3, 0x80000, 0x71108, 0x0, 0xa241, 0x8, 0x5, 0x7ff, 0x5, 0x9, 0xfffffff9, 0x4, 0x3, 0x3, 0x3, 0xf159, 0x2, 0x0, 0x6, 0x9d6, 0x2, 0x64, 0x7, 0x10, 0xeb9, 0xa6f, 0x34, 0xfffffff1, 0x1e9, 0x2, 0x80000000, 0x5, 0x1, 0x2b, 0x1, 0x5d, 0x0, 0x8, 0x200, 0x8, 0x4, 0xe13, 0x3304, 0x0, 0x5, 0x5, 0x7, 0xfff, 0x6, 0x1, 0x5, 0x15, 0x2, 0x1, 0x2, 0x8, 0x6, 0x9, 0x8, 0x5, 0x8, 0x1, 0x6, 0x5, 0xfffffe01, 0x4, 0x10001, 0x7, 0x7, 0x10000, 0x8, 0x94a8, 0x457, 0xfffffffe, 0xba0f, 0xfffffff7, 0x4, 0xba91, 0x4, 0x6, 0x9, 0x6, 0x1, 0x9, 0xfff, 0x499f, 0x61e, 0x3e46, 0x9, 0x2, 0x60, 0x100, 0xb, 0x6, 0x4, 0x0, 0x1, 0x80000000, 0x2, 0x9, 0x5, 0x3, 0x84, 0x80000000, 0xff4, 0xfff, 0x3, 0x80, 0x7, 0x6, 0x1, 0x8, 0x9, 0x8, 0x9, 0x7, 0x4, 0x5, 0x5, 0x5a9, 0x8, 0x8cb, 0x0, 0x40, 0xc, 0x8, 0xffffffff, 0xa, 0x7, 0x6, 0x6, 0xab, 0x6, 0x6, 0x3, 0x1, 0x6, 0x38, 0x6, 0x8000, 0x4, 0xa1a, 0x8, 0xfffff21f, 0x49a, 0xfffffffa, 0x40000000, 0x5, 0x131b, 0x3, 0xff, 0x4214, 0x80000000, 0x3, 0x6, 0x8, 0x6, 0x1ff, 0x5, 0x2, 0x4, 0x1ff, 0x40, 0x3, 0x5, 0x3ff, 0xf86, 0xc85f, 0xaf, 0x4, 0x10, 0x1, 0x81, 0xb7d8, 0x5, 0xff, 0x1, 0x9, 0x91, 0xfff, 0x1, 0x3, 0x5, 0x8f, 0x3, 0xffffffff, 0x6, 0x44, 0xb6, 0xfffffe00, 0x5, 0xda6, 0x6, 0x2, 0x80000000, 0xfffffffa, 0x5, 0xfff, 0xfffffffa, 0x4, 0x5, 0x1ff, 0x937, 0x8, 0x1, 0x100, 0x5, 0x6, 0x800, 0x200, 0x6283, 0x7, 0x5, 0x9, 0x260, 0x4, 0x3d96, 0x4, 0x83b32b0, 0x6, 0x8, 0x8001, 0x473, 0x8, 0x8, 0xff, 0x2, 0x10]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x3, 0x3, 0x3, 0x1, {0x6, 0x2, 0xfffe, 0x80, 0x6, 0x10001}, {0x7, 0x0, 0x8d, 0x1, 0xf0a2, 0x800}, 0xfffff000, 0xbc7, 0x57d1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x62}, @TCA_POLICE_RESULT={0x8, 0x5, 0x49}]]}, {0x30, 0x6, "dc6a98682243d072b7fb476f20fc8be7de87e7d3b589a98a22e6ae92bf00e823bc55b8b8fb128780f5e7250e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x188, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x7, 0x6, 0x81}, @rand_addr=0x64010100, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x5a73, 0xdc2525c8ec2d1856, 0x9bb, 0x8}, @loopback, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x1, 0x5, 0x9, 0x9}, @empty, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x2, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x8, 0xffffffffffffffff, 0x3, 0x81}, @remote, @remote, 0xffffffff, 0x1}}]}, {0x95, 0x6, "45e7f09f5f4320d3605466dac39a484838bf7951bea1e3ba60d7863ed6a089480daec02a436eeafe8a9be44d1c92a85b5eca165410eacb5ac3de03cf7ccf319c39f858ecf4bb6061d53f5ae649e612ed8b84c95705ab1283b9b30f34009e034b9e83bd5fdad03a972025cbac5fe0bab1c80694c66b2c0f4621bcfefa9dd46c216ee42b4d82dfe7f21974362444ec6aacad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x290, 0x1, [@m_mirred={0xd4, 0x18, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0xfffffbff, 0x5, 0xf7, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x10000, 0x4, 0xfffffff7, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x7, 0x40, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x373, 0x20000000, 0x8, 0x8}, 0x3}}]}, {0x25, 0x6, "8d01b9e0268c694a3e7fe3fe31a6207a55a5d51441e2fe63f34656ce37d39d1fe2"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x74, 0x1f, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd15}]}, {0x36, 0x6, "f631773a5043f72182e5bcb9fc5f826b633816cded7a5c0adbdc5e325094d8ae026c0aa2862c1a315619bc46ec43fc16493e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x80, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x53, 0x6, "71693428c3769b1b97165af41c2ed8805694eab627ed1331e9991624ca680630c81017252ce2dd1e95312724bacdff36c9a472d2c2e231da1e332c46eef385d6e378be03af98f4c32964c3c05aa65b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0xc4, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x99, 0x6, "968de1110d84135203265063b51841b3813a4decff5f88a09aa4e8078519f07b1da1a987c7e19bbd5b9cc0cc92d44a5f0c2f64611bc2c529a1fcf971fa52f207db2271656f78b23b47c39154bddc9539b2b393f59ec7ca9b5742b8397ebb4c524a1a02742ad7b7f4946e50b5ecb32655e546d2be1655649e615aeeace11423508f412b72ff0dadf83fa6385b5f15e5507627ff30d7"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x598, 0x1, [@m_mirred={0x138, 0x1f, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x80000000, 0xffffffffffffffff, 0x6, 0xffffff81}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8, 0x3, 0x6, 0x276}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0xc, 0x1, 0xb, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x7, 0x10000000, 0x10001, 0x70c}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x5, 0xd0ae}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9188, 0x200, 0x9b15824567a25b4d, 0x6, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x3, 0x5, 0x6f9, 0x3}, 0x4}}]}, {0x2b, 0x6, "4824423366d3b5a9df4e608ef0dcd15c342ebf899a5494287fc81d8a5e61dc7ff13e2d494781b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x68, 0x8, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0xffffffffffffffff, 0xffffffff, 0x100}, 0x2}}]}, {0x1b, 0x6, "3844df8fbb79687d18ded5e77c740b4b1e6069d4e91502"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x128, 0x15, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "8c2d0a7d8717009719c9637a49bbd6ee"}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x8001, 0x6, 0x3ff, 0xfc6}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x1e}}, @TCA_CT_MARK={0x8, 0x5, 0x7}]}, {0x95, 0x6, "79a12aab00b82557aad21bcfc13a0e733d4fab68ff61a7719829383536f99da857df32e79e447ec5d6885217747a16636a450cf39145ec0aaa45bf4905be63ab285504f29fbd8b73a68abb81ed82b78fcefca0ef7e6a3adb0830c2c241cd468e6d9f7427c621e5e43e8fba8e7a4b56dcb4bbfee0199c3a8ed4653be647d27de11726945bb54fa8135eb052acc0030a1261"}, {0xc, 0x7, {0x0, 0x29f8af3d3fb46e7f}}, {0xc}}}, @m_vlan={0x7c, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x4f, 0x6, "c37b88fa800073cda073eada8e92130a92a67ef6d83755d18cd9dae39db366bf30ce1ca551061cfc46eba75aad5dce494d8ad9606acc7bc0b0070e15d5f82e85b74e8fbfdfc02b855acc1f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xc4, 0x14, 0x0, 0x0, {{0xa}, {0x4}, {0x95, 0x6, "c4cb39f2deddc6dcbfb4a156fcb2aed2128dd6eb4f8db1dbf947df633303a517d97f1eba68037e486dd5a76d3e3c480ccf3204e6ff76dcb015fba147bf84aa03206d1a5aead958ba6c24ac47891469daf900e941c38800285e0ff532d32a0d10e2d4042d673e991a1df605b9a5032e2de7e2aa1cc5ae40a47b5a4f7aa65d71a3070c50bdd24f425b7af5943df1d99718ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0xb4, 0xb, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x36}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0xe80}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}]}, {0x3a, 0x6, "065cd433da90b8c2392cc4288916462961a54910c9bde7a5781a8769b20f87b4ab1545b5283a658b7e02ca07694d20ab6700e8f00405"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xd8, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x200}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xf139}]}, {0x8a, 0x6, "a80383aad10ac9f1a54133039401902a1180296e79037b5597233ab7e55bb9ba193fe8bae99ccd05168fe8d623e0166bebfc1c7514e5c49b70dfb5821e0d76a11c77445041226bfb6659e5488649f14341c48e943bf7856af4b20d1fa156e5a7200b6cd2ad36120c222f8836f56c1707ec92c6e07e36fbfdd31d24061ce2f53bf271ebbab3ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x104, 0x1, [@m_vlan={0x100, 0x12, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x611}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0xc, 0x3, 0xfffff000, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7dd}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x246}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x80, 0x6, "3c278bbb64907922e8fa57be429e40cea59e4cad5d4038c5a89c20189a114917d4b95f73ca8b48442c3f8b9a22eecd6d6709ff3070518512c2bc4e31cb8d1c6ace14de2170d5abdb89acf2c21054e4e3c9e42451aa20e4e1aea79a872e2eb2c813b65d6634619e0c6e3aed2f2630e7f2295a1c9c715aa7f6bb0cc91c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x4}]}, 0x4510}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000009c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0], 0x48) open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file1/file0\x00', 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0xc288894172004171, 0x64, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) unshare(0x20060400) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 185.374981ms ago: executing program 2 (id=4445): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) 120.044468ms ago: executing program 6 (id=4446): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 119.467038ms ago: executing program 6 (id=4447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0x288, 0xe8, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 102.50656ms ago: executing program 5 (id=4448): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800400004d5945a9001500be73", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 330.92µs ago: executing program 6 (id=4449): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000954cf63e9ea71d841849e7737376652c664be1"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) personality(0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYRESHEX=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) syz_io_uring_setup(0x150e, &(0x7f0000000300)={0x0, 0x794a, 0x10100, 0x2, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000040)) 0s ago: executing program 5 (id=4450): socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000954cf63e9ea71d841849e7737376652c664be1"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) personality(0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYRESHEX=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) syz_io_uring_setup(0x150e, &(0x7f0000000300)={0x0, 0x794a, 0x10100, 0x2, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000040)) kernel console output (not intermixed with test programs): [ 231.229935][T17245] __dump_stack+0x1d/0x30 [ 231.229959][T17245] dump_stack_lvl+0xe8/0x140 [ 231.229983][T17245] dump_stack+0x15/0x1b [ 231.230048][T17245] should_fail_ex+0x265/0x280 [ 231.230067][T17245] ? nf_tables_newtable+0x375/0xea0 [ 231.230167][T17245] should_failslab+0x8c/0xb0 [ 231.230193][T17245] __kmalloc_cache_noprof+0x4c/0x4a0 [ 231.230246][T17245] ? __nla_validate_parse+0x1652/0x1d00 [ 231.230411][T17245] nf_tables_newtable+0x375/0xea0 [ 231.230458][T17245] nfnetlink_rcv+0xbc9/0x16c0 [ 231.230488][T17245] ? kmem_cache_free+0xe4/0x3d0 [ 231.230619][T17245] netlink_unicast+0x5c0/0x690 [ 231.230658][T17245] netlink_sendmsg+0x58b/0x6b0 [ 231.230678][T17245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.230696][T17245] __sock_sendmsg+0x145/0x180 [ 231.230770][T17245] ____sys_sendmsg+0x31e/0x4e0 [ 231.230809][T17245] ___sys_sendmsg+0x17b/0x1d0 [ 231.230853][T17245] __x64_sys_sendmsg+0xd4/0x160 [ 231.230904][T17245] x64_sys_call+0x191e/0x3000 [ 231.230928][T17245] do_syscall_64+0xd2/0x200 [ 231.230950][T17245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.231062][T17245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.231097][T17245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.231159][T17245] RIP: 0033:0x7f4dfdc2f6c9 [ 231.231175][T17245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.231193][T17245] RSP: 002b:00007f4dfc697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.231210][T17245] RAX: ffffffffffffffda RBX: 00007f4dfde85fa0 RCX: 00007f4dfdc2f6c9 [ 231.231224][T17245] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 231.231236][T17245] RBP: 00007f4dfc697090 R08: 0000000000000000 R09: 0000000000000000 [ 231.231282][T17245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.231360][T17245] R13: 00007f4dfde86038 R14: 00007f4dfde85fa0 R15: 00007fffec048418 [ 231.231462][T17245] [ 231.449215][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 231.449229][ T29] audit: type=1326 audit(1763140929.447:47102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.479015][ T29] audit: type=1326 audit(1763140929.447:47103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.502809][ T29] audit: type=1326 audit(1763140929.447:47104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.526422][ T29] audit: type=1326 audit(1763140929.447:47105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.550122][ T29] audit: type=1326 audit(1763140929.447:47106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.573767][ T29] audit: type=1326 audit(1763140929.447:47107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.597643][ T29] audit: type=1326 audit(1763140929.447:47108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.621158][ T29] audit: type=1326 audit(1763140929.447:47109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.644923][ T29] audit: type=1326 audit(1763140929.447:47110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.668452][ T29] audit: type=1326 audit(1763140929.447:47111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17239 comm="syz.5.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc579f6c9 code=0x7ffc0000 [ 231.696055][T17248] loop5: detected capacity change from 0 to 1024 [ 231.715344][T17248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.742045][T17255] rdma_rxe: rxe_newlink: failed to add lo [ 231.872937][T17269] loop4: detected capacity change from 0 to 1024 [ 232.003592][ T8856] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.092914][T17277] lo speed is unknown, defaulting to 1000 [ 232.099286][T17277] lo speed is unknown, defaulting to 1000 [ 232.148919][T17291] rdma_rxe: rxe_newlink: failed to add lo [ 232.225568][T17283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.237274][T17283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.300925][ T8876] failed while handling packet from 1:16385 [ 232.300950][ T8876] failed while handling packet from 1:16385 [ 232.310840][ T8876] failed while handling packet from 1:16385 [ 232.315240][T17303] loop0: detected capacity change from 0 to 1024 [ 232.318954][ T8876] failed while handling packet from 1:16385 [ 232.323375][T17303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.339448][ T8876] failed while handling packet from 1:16385 [ 232.347516][ T8876] failed while handling packet from 1:16385 [ 232.354615][ T8876] failed while handling packet from 1:16385 [ 232.364210][ T8876] failed while handling packet from 1:16385 [ 232.381914][ T8876] failed while handling packet from 1:16385 [ 232.391334][ T8876] failed while handling packet from 1:16385 [ 232.402400][ T8876] failed while handling packet from 1:16385 [ 232.409146][ T8876] failed while handling packet from 1:16385 [ 232.415153][ T8876] failed while handling packet from 1:16385 [ 232.421313][ T8876] failed while handling packet from 1:16385 [ 232.427266][ T8876] failed while handling packet from 1:16385 [ 232.433282][ T8876] failed while handling packet from 1:16385 [ 232.439230][ T8876] failed while handling packet from 1:16385 [ 232.445218][ T8876] failed while handling packet from 1:16385 [ 232.451214][ T8876] failed while handling packet from 1:16385 [ 232.457161][ T8876] failed while handling packet from 1:16385 [ 232.463274][ T8876] failed while handling packet from 1:16385 [ 232.469203][ T8876] failed while handling packet from 1:16385 [ 232.475244][ T8876] failed while handling packet from 1:16385 [ 232.481434][ T8876] failed while handling packet from 1:16385 [ 232.487483][ T8876] failed while handling packet from 1:16385 [ 232.493478][ T8876] failed while handling packet from 1:16385 [ 232.499472][ T8876] failed while handling packet from 1:16385 [ 232.505434][ T8876] failed while handling packet from 1:16385 [ 232.511432][ T8876] failed while handling packet from 1:16385 [ 232.517380][ T8876] failed while handling packet from 1:16385 [ 232.523478][ T8876] failed while handling packet from 1:16385 [ 232.538227][ T8876] failed while handling packet from 1:16385 [ 232.544261][ T8876] failed while handling packet from 1:16385 [ 232.564234][ T8876] failed while handling packet from 1:16385 [ 232.570232][ T8876] failed while handling packet from 1:16385 [ 232.579074][ T8876] failed while handling packet from 1:16385 [ 232.585325][ T8876] failed while handling packet from 1:16385 [ 232.610868][ T8876] failed while handling packet from 1:16385 [ 232.616801][ T8876] failed while handling packet from 1:16385 [ 232.630814][ T8876] failed while handling packet from 1:16385 [ 232.636909][ T8876] failed while handling packet from 1:16385 [ 232.643967][ T8876] failed while handling packet from 1:16385 [ 232.649891][ T8876] failed while handling packet from 1:16385 [ 232.655965][ T8876] failed while handling packet from 1:16385 [ 232.690909][ T8876] failed while handling packet from 1:16385 [ 232.696831][ T8876] failed while handling packet from 1:16385 [ 232.710805][ T8876] failed while handling packet from 1:16385 [ 232.716724][ T8876] failed while handling packet from 1:16385 [ 232.729506][ T8876] failed while handling packet from 1:16385 [ 232.740879][ T8876] failed while handling packet from 1:16385 [ 232.750838][ T8876] failed while handling packet from 1:16385 [ 232.756761][ T8876] failed while handling packet from 1:16385 [ 232.770827][ T8876] failed while handling packet from 1:16385 [ 232.778759][ T8876] failed while handling packet from 1:16385 [ 232.808767][T17317] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.847747][ T8876] failed while handling packet from 1:16385 [ 232.847766][ T8876] failed while handling packet from 1:16385 [ 232.859097][ T8876] failed while handling packet from 1:16385 [ 232.871201][ T8876] failed while handling packet from 1:16385 [ 232.879967][ T8876] failed while handling packet from 1:16385 [ 232.885915][ T8876] failed while handling packet from 1:16385 [ 232.893668][ T8876] failed while handling packet from 1:16385 [ 232.900282][ T8876] failed while handling packet from 1:16385 [ 232.906357][ T8876] failed while handling packet from 1:16385 [ 232.912365][ T8876] failed while handling packet from 1:16385 [ 232.918411][ T8876] failed while handling packet from 1:16385 [ 232.924495][ T8876] failed while handling packet from 1:16385 [ 232.930580][ T8876] failed while handling packet from 1:16385 [ 232.936536][ T8876] failed while handling packet from 1:16385 [ 232.942490][ T8876] failed while handling packet from 1:16385 [ 232.948561][ T8876] failed while handling packet from 1:16385 [ 232.954740][ T8876] failed while handling packet from 1:16385 [ 232.960664][ T8876] failed while handling packet from 1:16385 [ 232.969391][T17324] rdma_rxe: rxe_newlink: failed to add lo [ 232.984375][ T8876] failed while handling packet from 1:16385 [ 232.984393][ T8876] failed while handling packet from 1:16385 [ 232.990458][ T8876] failed while handling packet from 1:16385 [ 233.005521][ T8876] failed while handling packet from 1:16385 [ 233.011516][ T8876] failed while handling packet from 1:16385 [ 233.017491][ T8876] failed while handling packet from 1:16385 [ 233.037115][ T8876] failed while handling packet from 1:16385 [ 233.043301][ T8876] failed while handling packet from 1:16385 [ 233.049313][ T8876] failed while handling packet from 1:16385 [ 233.056884][ T8876] failed while handling packet from 1:16385 [ 233.064387][T17328] loop1: detected capacity change from 0 to 1024 [ 233.073144][ T8876] failed while handling packet from 1:16385 [ 233.076668][ T8876] failed while handling packet from 1:16385 [ 233.083107][ T8876] failed while handling packet from 1:16385 [ 233.093421][ T8876] failed while handling packet from 1:16385 [ 233.103726][ T8876] failed while handling packet from 1:16385 [ 233.116317][ T8876] failed while handling packet from 1:16385 [ 233.123419][ T8876] failed while handling packet from 1:16385 [ 233.129397][ T8876] failed while handling packet from 1:16385 [ 233.136628][ T8876] failed while handling packet from 1:16385 [ 233.139317][T17333] lo speed is unknown, defaulting to 1000 [ 233.158986][T17333] lo speed is unknown, defaulting to 1000 [ 233.167549][ T8876] failed while handling packet from 1:16385 [ 233.167572][ T8876] failed while handling packet from 1:16385 [ 233.176900][ T8876] failed while handling packet from 1:16385 [ 233.190373][ T8876] failed while handling packet from 1:16385 [ 233.196509][ T8876] failed while handling packet from 1:16385 [ 233.204735][ T8876] failed while handling packet from 1:16385 [ 233.210719][ T8876] failed while handling packet from 1:16385 [ 233.216680][ T8876] failed while handling packet from 1:16385 [ 233.227197][ T8876] failed while handling packet from 1:16385 [ 233.233767][ T8876] failed while handling packet from 1:16385 [ 233.240032][ T8876] failed while handling packet from 1:16385 [ 233.246376][ T8876] failed while handling packet from 1:16385 [ 233.252453][ T8876] failed while handling packet from 1:16385 [ 233.258392][ T8876] failed while handling packet from 1:16385 [ 233.264493][ T8876] failed while handling packet from 1:16385 [ 233.270426][ T8876] failed while handling packet from 1:16385 [ 233.276440][ T8876] failed while handling packet from 1:16385 [ 233.282528][ T8876] failed while handling packet from 1:16385 [ 233.288537][ T8876] failed while handling packet from 1:16385 [ 233.294511][ T8876] failed while handling packet from 1:16385 [ 233.300508][ T8876] failed while handling packet from 1:16385 [ 233.306732][ T8876] failed while handling packet from 1:16385 [ 233.312925][ T8876] failed while handling packet from 1:16385 [ 233.317747][T17355] loop1: detected capacity change from 0 to 1024 [ 233.318867][ T8876] failed while handling packet from 1:16385 [ 233.318883][ T8876] failed while handling packet from 1:16385 [ 233.337046][ T8876] failed while handling packet from 1:16385 [ 233.343021][ T8876] failed while handling packet from 1:16385 [ 233.349055][ T8876] failed while handling packet from 1:16385 [ 233.355386][ T8876] failed while handling packet from 1:16385 [ 233.361396][ T8876] failed while handling packet from 1:16385 [ 233.368794][ T8876] failed while handling packet from 1:16385 [ 233.374797][ T8876] failed while handling packet from 1:16385 [ 233.380759][ T8876] failed while handling packet from 1:16385 [ 233.388678][ T8876] failed while handling packet from 1:16385 [ 233.397227][ T8876] failed while handling packet from 1:16385 [ 233.397290][T17348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.403167][ T8876] failed while handling packet from 1:16385 [ 233.403182][ T8876] failed while handling packet from 1:16385 [ 233.403200][ T8876] failed while handling packet from 1:16385 [ 233.403219][ T8876] failed while handling packet from 1:16385 [ 233.440882][T17348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.457018][ T8876] failed while handling packet from 1:16385 [ 233.457051][ T8876] failed while handling packet from 1:16385 [ 233.463418][ T8876] failed while handling packet from 1:16385 [ 233.469809][ T8876] failed while handling packet from 1:16385 [ 233.475911][ T8876] failed while handling packet from 1:16385 [ 233.481946][ T8876] failed while handling packet from 1:16385 [ 233.488123][ T8876] failed while handling packet from 1:16385 [ 233.494092][ T8876] failed while handling packet from 1:16385 [ 233.500033][ T8876] failed while handling packet from 1:16385 [ 233.506458][T17364] FAULT_INJECTION: forcing a failure. [ 233.506458][T17364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.525549][T17364] CPU: 1 UID: 0 PID: 17364 Comm: syz.5.3934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.525585][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.525596][T17364] Call Trace: [ 233.525667][T17364] [ 233.525675][T17364] __dump_stack+0x1d/0x30 [ 233.525695][T17364] dump_stack_lvl+0xe8/0x140 [ 233.525713][T17364] dump_stack+0x15/0x1b [ 233.525784][T17364] should_fail_ex+0x265/0x280 [ 233.525849][T17364] should_fail+0xb/0x20 [ 233.525866][T17364] should_fail_usercopy+0x1a/0x20 [ 233.525884][T17364] _copy_from_user+0x1c/0xb0 [ 233.525905][T17364] memdup_user+0x5e/0xd0 [ 233.525928][T17364] autofs_dev_ioctl+0x167/0x6a0 [ 233.525952][T17364] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 233.525974][T17364] __se_sys_ioctl+0xce/0x140 [ 233.526036][T17364] __x64_sys_ioctl+0x43/0x50 [ 233.526069][T17364] x64_sys_call+0x1816/0x3000 [ 233.526089][T17364] do_syscall_64+0xd2/0x200 [ 233.526106][T17364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.526134][T17364] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.526274][T17364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.526297][T17364] RIP: 0033:0x7fbdc579f6c9 [ 233.526313][T17364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.526332][T17364] RSP: 002b:00007fbdc41ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.526363][T17364] RAX: ffffffffffffffda RBX: 00007fbdc59f5fa0 RCX: 00007fbdc579f6c9 [ 233.526377][T17364] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000007 [ 233.526388][T17364] RBP: 00007fbdc41ff090 R08: 0000000000000000 R09: 0000000000000000 [ 233.526435][T17364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.526445][T17364] R13: 00007fbdc59f6038 R14: 00007fbdc59f5fa0 R15: 00007ffc07bc5eb8 [ 233.526463][T17364] [ 233.531986][ T8876] failed while handling packet from 1:16385 [ 233.545641][T17361] loop1: detected capacity change from 0 to 512 [ 233.551482][ T8876] failed while handling packet from 1:16385 [ 233.589545][T17369] netlink: 'syz.4.3936': attribute type 1 has an invalid length. [ 233.593268][ T8876] failed while handling packet from 1:16385 [ 233.597910][T17369] netlink: 'syz.4.3936': attribute type 1 has an invalid length. [ 233.602496][T17369] loop4: detected capacity change from 0 to 512 [ 233.603496][ T8876] failed while handling packet from 1:16385 [ 233.636763][T17374] loop1: detected capacity change from 0 to 512 [ 233.639568][ T8876] failed while handling packet from 1:16385 [ 233.661589][T17372] loop5: detected capacity change from 0 to 1024 [ 233.663505][ T8876] failed while handling packet from 1:16385 [ 233.672506][T17369] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.679998][ T8876] failed while handling packet from 1:16385 [ 233.690477][T17374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.696401][T17372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.704178][ T8876] failed while handling packet from 1:16385 [ 233.714621][T17369] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3936: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 233.715219][ T8876] failed while handling packet from 1:16385 [ 233.725773][T17369] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 233.727449][ T8876] failed while handling packet from 1:16385 [ 233.727491][ T8876] failed while handling packet from 1:16385 [ 233.727503][ T8876] failed while handling packet from 1:16385 [ 233.727571][ T8876] failed while handling packet from 1:16385 [ 233.727582][ T8876] failed while handling packet from 1:16385 [ 233.727593][ T8876] failed while handling packet from 1:16385 [ 233.727605][ T8876] failed while handling packet from 1:16385 [ 233.727616][ T8876] failed while handling packet from 1:16385 [ 233.727627][ T8876] failed while handling packet from 1:16385 [ 233.727676][ T8876] failed while handling packet from 1:16385 [ 233.727690][ T8876] failed while handling packet from 1:16385 [ 233.735698][T17369] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3936: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 233.741809][ T8876] failed while handling packet from 1:16385 [ 233.755734][T17369] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 233.762867][ T8876] failed while handling packet from 1:16385 [ 233.771462][T17374] EXT4-fs (loop1): 1 truncate cleaned up [ 233.773610][ T8876] failed while handling packet from 1:16385 [ 233.810724][T17369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3936: bg 0: block 18: invalid block bitmap [ 233.817890][ T8876] failed while handling packet from 1:16385 [ 233.891608][T17369] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3936: Failed to acquire dquot type 1 [ 233.894618][ T8876] failed while handling packet from 1:16385 [ 233.894634][ T8876] failed while handling packet from 1:16385 [ 233.894647][ T8876] failed while handling packet from 1:16385 [ 233.894660][ T8876] failed while handling packet from 1:16385 [ 233.894683][ T8876] failed while handling packet from 1:16385 [ 233.894693][ T8876] failed while handling packet from 1:16385 [ 234.038015][ T8876] failed while handling packet from 1:16385 [ 234.043986][ T8876] failed while handling packet from 1:16385 [ 234.049897][ T8876] failed while handling packet from 1:16385 [ 234.055885][ T8876] failed while handling packet from 1:16385 [ 234.062454][ T8876] failed while handling packet from 1:16385 [ 234.080831][ T9823] Bluetooth: hci0: command 0x1003 tx timeout [ 234.082909][ T8876] failed while handling packet from 1:16385 [ 234.086804][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.106253][ T8876] failed while handling packet from 1:16385 [ 234.106275][ T8876] failed while handling packet from 1:16385 [ 234.112476][ T8876] failed while handling packet from 1:16385 [ 234.118398][ T8876] failed while handling packet from 1:16385 [ 234.124834][ T8876] failed while handling packet from 1:16385 [ 234.131372][ T8876] failed while handling packet from 1:16385 [ 234.137276][ T8876] failed while handling packet from 1:16385 [ 234.137488][T17387] loop4: detected capacity change from 0 to 1024 [ 234.145234][ T8876] failed while handling packet from 1:16385 [ 234.155577][ T8876] failed while handling packet from 1:16385 [ 234.162016][ T8876] failed while handling packet from 1:16385 [ 234.167941][ T8876] failed while handling packet from 1:16385 [ 234.175414][ T8876] failed while handling packet from 1:16385 [ 234.181383][ T8876] failed while handling packet from 1:16385 [ 234.187339][ T8876] failed while handling packet from 1:16385 [ 234.193281][ T8876] failed while handling packet from 1:16385 [ 234.199190][ T8876] failed while handling packet from 1:16385 [ 234.205135][ T8876] failed while handling packet from 1:16385 [ 234.211211][ T8876] failed while handling packet from 1:16385 [ 234.217280][ T8876] failed while handling packet from 1:16385 [ 234.223338][ T8876] failed while handling packet from 1:16385 [ 234.229254][ T8876] failed while handling packet from 1:16385 [ 234.235439][ T8876] failed while handling packet from 1:16385 [ 234.241379][ T8876] failed while handling packet from 1:16385 [ 234.247390][ T8876] failed while handling packet from 1:16385 [ 234.253570][ T8876] failed while handling packet from 1:16385 [ 234.260814][ T8876] failed while handling packet from 1:16385 [ 234.261206][T17392] rdma_rxe: rxe_newlink: failed to add lo [ 234.266756][ T8876] failed while handling packet from 1:16385 [ 234.266823][ T8876] failed while handling packet from 1:16385 [ 234.285006][ T8876] failed while handling packet from 1:16385 [ 234.291026][ T8876] failed while handling packet from 1:16385 [ 234.296967][ T8876] failed while handling packet from 1:16385 [ 234.303090][ T8876] failed while handling packet from 1:16385 [ 234.308991][ T8876] failed while handling packet from 1:16385 [ 234.337288][ T8876] failed while handling packet from 1:16385 [ 234.346074][ T8876] failed while handling packet from 1:16385 [ 234.352809][ T8876] failed while handling packet from 1:16385 [ 234.358981][ T8876] failed while handling packet from 1:16385 [ 234.365144][ T8876] failed while handling packet from 1:16385 [ 234.371349][ T8876] failed while handling packet from 1:16385 [ 234.377678][ T8876] failed while handling packet from 1:16385 [ 234.383714][ T8876] failed while handling packet from 1:16385 [ 234.389824][ T8876] failed while handling packet from 1:16385 [ 234.404438][T17401] loop5: detected capacity change from 0 to 512 [ 234.412100][ T8876] failed while handling packet from 1:16385 [ 234.416837][ T8876] failed while handling packet from 1:16385 [ 234.422828][ T8876] failed while handling packet from 1:16385 [ 234.428784][ T8876] failed while handling packet from 1:16385 [ 234.443555][ T8876] failed while handling packet from 1:16385 [ 234.449718][ T8876] failed while handling packet from 1:16385 [ 234.456145][ T8876] failed while handling packet from 1:16385 [ 234.462194][ T8876] failed while handling packet from 1:16385 [ 234.468133][ T8876] failed while handling packet from 1:16385 [ 234.474263][ T8876] failed while handling packet from 1:16385 [ 234.480185][ T8876] failed while handling packet from 1:16385 [ 234.486797][ T8876] failed while handling packet from 1:16385 [ 234.493072][ T8876] failed while handling packet from 1:16384 [ 234.499016][ T8876] failed while handling packet from 1:16384 [ 234.505016][ T8876] failed while handling packet from 1:16384 [ 234.511057][ T8876] failed while handling packet from 1:16384 [ 234.517048][ T8876] failed while handling packet from 1:16384 [ 234.523039][ T8876] failed while handling packet from 1:16384 [ 234.528937][ T8876] failed while handling packet from 1:16384 [ 234.540957][ T8876] failed while handling packet from 1:16384 [ 234.550534][ T8876] failed while handling packet from 1:16384 [ 234.556789][ T8876] failed while handling packet from 1:16384 [ 234.562841][ T8876] failed while handling packet from 1:16384 [ 234.569150][ T8876] failed while handling packet from 1:16384 [ 234.575167][ T8876] failed while handling packet from 1:16384 [ 234.581475][ T8876] failed while handling packet from 1:16384 [ 234.611223][ T8876] failed while handling packet from 1:16384 [ 234.617350][ T8876] failed while handling packet from 1:16384 [ 234.623604][ T8876] failed while handling packet from 1:16384 [ 234.624068][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.629635][ T8876] failed while handling packet from 1:16384 [ 234.643983][T17426] loop5: detected capacity change from 0 to 2048 [ 234.644835][ T8876] failed while handling packet from 1:16384 [ 234.650026][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.656337][ T8876] failed while handling packet from 1:16384 [ 234.670138][ T8876] failed while handling packet from 1:16384 [ 234.676203][ T8876] failed while handling packet from 1:16384 [ 234.682356][ T8876] failed while handling packet from 1:16384 [ 234.685658][T17426] EXT4-fs (loop5): failed to initialize system zone (-117) [ 234.697341][ T8876] failed while handling packet from 1:16384 [ 234.701609][ T8876] failed while handling packet from 1:16384 [ 234.701906][T17426] EXT4-fs (loop5): mount failed [ 234.707699][ T8876] failed while handling packet from 1:16384 [ 234.718365][ T8876] failed while handling packet from 1:16384 [ 234.724399][ T8876] failed while handling packet from 1:16384 [ 234.730374][ T8876] failed while handling packet from 1:16384 [ 234.736553][ T8876] failed while handling packet from 1:16384 [ 234.742627][ T8876] failed while handling packet from 1:16384 [ 234.744452][T17426] __nla_validate_parse: 6 callbacks suppressed [ 234.744468][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3954'. [ 234.748778][ T8876] failed while handling packet from 1:16384 [ 234.769905][ T8876] failed while handling packet from 1:16384 [ 234.775936][ T8876] failed while handling packet from 1:16384 [ 234.782083][ T8876] failed while handling packet from 1:16384 [ 234.788055][ T8876] failed while handling packet from 1:16384 [ 234.794235][ T8876] failed while handling packet from 1:16384 [ 234.800224][ T8876] failed while handling packet from 1:16384 [ 234.806274][ T8876] failed while handling packet from 1:16384 [ 234.812404][ T8876] failed while handling packet from 1:16384 [ 234.818438][ T8876] failed while handling packet from 1:16384 [ 234.824532][ T8876] failed while handling packet from 1:16384 [ 234.830501][ T8876] failed while handling packet from 1:16384 [ 234.836959][ T8876] failed while handling packet from 1:16384 [ 234.843068][ T8876] failed while handling packet from 1:16384 [ 234.849019][ T8876] failed while handling packet from 1:16384 [ 234.855167][ T8876] failed while handling packet from 1:16384 [ 234.861167][ T8876] failed while handling packet from 1:16384 [ 234.867176][ T8876] failed while handling packet from 1:16384 [ 234.873164][ T8876] failed while handling packet from 1:16384 [ 234.879162][ T8876] failed while handling packet from 1:16384 [ 234.885232][ T8876] failed while handling packet from 1:16384 [ 234.891321][ T8876] failed while handling packet from 1:16384 [ 234.897403][ T8876] failed while handling packet from 1:16384 [ 234.903529][ T8876] failed while handling packet from 1:16384 [ 234.909517][ T8876] failed while handling packet from 1:16384 [ 234.915636][ T8876] failed while handling packet from 1:16384 [ 234.922092][ T8876] failed while handling packet from 1:16384 [ 234.928096][ T8876] failed while handling packet from 1:16384 [ 234.934152][ T8876] failed while handling packet from 1:16384 [ 234.940215][ T8876] failed while handling packet from 1:16384 [ 234.946491][ T8876] failed while handling packet from 1:16384 [ 234.952580][ T8876] failed while handling packet from 1:16384 [ 234.958551][ T8876] failed while handling packet from 1:16384 [ 234.966220][ T8876] failed while handling packet from 1:16385 [ 234.972346][ T8876] failed while handling packet from 1:16385 [ 234.978427][ T8876] failed while handling packet from 1:16385 [ 234.984440][ T8876] failed while handling packet from 1:16385 [ 234.990538][ T8876] failed while handling packet from 1:16385 [ 234.996543][ T8876] failed while handling packet from 1:16385 [ 235.002610][ T8876] failed while handling packet from 1:16385 [ 235.008632][ T8876] failed while handling packet from 1:16385 [ 235.014983][ T8876] failed while handling packet from 1:16385 [ 235.021387][ T8876] failed while handling packet from 1:16385 [ 235.203997][T17513] netlink: 'syz.2.3957': attribute type 10 has an invalid length. [ 235.219166][T17513] team0: Device ipvlan0 failed to register rx_handler [ 235.519964][ T8842] Bluetooth: hci0: Frame reassembly failed (-84) [ 235.602848][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 235.612658][T17579] unsupported nla_type 52263 [ 235.636586][T17587] loop0: detected capacity change from 0 to 1024 [ 235.643897][T17587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.682780][T17579] lo speed is unknown, defaulting to 1000 [ 235.688942][T17579] lo speed is unknown, defaulting to 1000 [ 235.819187][T17596] netlink: 'syz.2.3969': attribute type 10 has an invalid length. [ 235.843480][T17596] team0: Device ipvlan0 failed to register rx_handler [ 235.921403][T17603] FAULT_INJECTION: forcing a failure. [ 235.921403][T17603] name failslab, interval 1, probability 0, space 0, times 0 [ 235.934148][T17603] CPU: 1 UID: 0 PID: 17603 Comm: syz.1.3973 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.934188][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.934202][T17603] Call Trace: [ 235.934208][T17603] [ 235.934216][T17603] __dump_stack+0x1d/0x30 [ 235.934293][T17603] dump_stack_lvl+0xe8/0x140 [ 235.934354][T17603] dump_stack+0x15/0x1b [ 235.934368][T17603] should_fail_ex+0x265/0x280 [ 235.934385][T17603] should_failslab+0x8c/0xb0 [ 235.934409][T17603] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 235.934519][T17603] ? __alloc_skb+0x101/0x320 [ 235.934552][T17603] __alloc_skb+0x101/0x320 [ 235.934597][T17603] pfkey_sendmsg+0xd7/0x900 [ 235.934620][T17603] ? avc_has_perm+0xf7/0x180 [ 235.934641][T17603] ? selinux_socket_sendmsg+0x175/0x1b0 [ 235.934672][T17603] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 235.934758][T17603] __sock_sendmsg+0x145/0x180 [ 235.934778][T17603] ____sys_sendmsg+0x31e/0x4e0 [ 235.934815][T17603] ___sys_sendmsg+0x17b/0x1d0 [ 235.934842][T17603] __x64_sys_sendmsg+0xd4/0x160 [ 235.934896][T17603] x64_sys_call+0x191e/0x3000 [ 235.934991][T17603] do_syscall_64+0xd2/0x200 [ 235.935059][T17603] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.935090][T17603] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 235.935125][T17603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.935148][T17603] RIP: 0033:0x7f1bcae6f6c9 [ 235.935167][T17603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.935187][T17603] RSP: 002b:00007f1bc98cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.935207][T17603] RAX: ffffffffffffffda RBX: 00007f1bcb0c5fa0 RCX: 00007f1bcae6f6c9 [ 235.935221][T17603] RDX: 0000000000040000 RSI: 0000200000000340 RDI: 0000000000000003 [ 235.935231][T17603] RBP: 00007f1bc98cf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.935241][T17603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.935276][T17603] R13: 00007f1bcb0c6038 R14: 00007f1bcb0c5fa0 R15: 00007ffe8bdab008 [ 235.935299][T17603] [ 236.217636][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 236.228178][T17620] loop0: detected capacity change from 0 to 1024 [ 236.235107][T17620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.242160][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3978'. [ 236.273904][T17616] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 236.281774][T17616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3978'. [ 236.339253][T17632] x_tables: unsorted underflow at hook 2 [ 236.361918][T17635] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3986'. [ 236.427601][T17642] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3990'. [ 236.588645][T17647] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 236.595283][T17647] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.603397][T17647] vhci_hcd vhci_hcd.0: Device attached [ 236.617984][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3991'. [ 236.663535][T17659] loop0: detected capacity change from 0 to 764 [ 236.680151][T17648] vhci_hcd: connection closed [ 236.680327][ T8876] vhci_hcd: stop threads [ 236.689295][ T8876] vhci_hcd: release socket [ 236.693765][ T8876] vhci_hcd: disconnect device [ 236.702140][T17659] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 236.734995][T17659] Symlink component flag not implemented [ 236.740829][T17659] Symlink component flag not implemented (7) [ 236.807684][T17668] loop2: detected capacity change from 0 to 1024 [ 236.822019][T17668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.904498][T17677] loop0: detected capacity change from 0 to 1024 [ 236.921144][T17677] EXT4-fs: Ignoring removed orlov option [ 236.949692][T17677] vlan2: entered promiscuous mode [ 236.954854][T17677] vlan2: entered allmulticast mode [ 236.959992][T17677] hsr_slave_1: entered allmulticast mode [ 236.990981][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'. [ 237.057611][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.085080][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.258700][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4009'. [ 237.274902][T17693] netlink: 'syz.0.4009': attribute type 1 has an invalid length. [ 237.365007][T17714] loop1: detected capacity change from 0 to 512 [ 237.520852][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.526141][ T9823] Bluetooth: hci0: command 0x1003 tx timeout [ 237.666008][T17769] loop4: detected capacity change from 0 to 512 [ 237.679751][T17769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.708838][T17769] EXT4-fs (loop4): 1 truncate cleaned up [ 237.756737][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 237.756750][ T29] audit: type=1326 audit(1763140935.927:47284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.786711][ T29] audit: type=1326 audit(1763140935.937:47285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.810378][ T29] audit: type=1326 audit(1763140935.937:47286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.833901][ T29] audit: type=1326 audit(1763140935.937:47287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.857678][ T29] audit: type=1326 audit(1763140935.937:47288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.881361][ T29] audit: type=1326 audit(1763140935.957:47289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.905041][ T29] audit: type=1326 audit(1763140935.957:47290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.928614][ T29] audit: type=1326 audit(1763140935.957:47291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.952285][ T29] audit: type=1326 audit(1763140935.957:47292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 237.975944][ T29] audit: type=1326 audit(1763140935.957:47293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.4.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfdc2f6c9 code=0x7ffc0000 [ 238.039267][T17806] netlink: 'syz.4.4015': attribute type 1 has an invalid length. [ 238.047213][T17806] netlink: 'syz.4.4015': attribute type 1 has an invalid length. [ 238.058624][T17806] loop4: detected capacity change from 0 to 512 [ 238.075444][T17806] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.087884][T17806] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.4015: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.104647][T17806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 238.113694][T17806] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.4015: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 238.130247][T17806] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 238.139990][T17806] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4015: bg 0: block 18: invalid block bitmap [ 238.152674][T17806] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4015: Failed to acquire dquot type 1 [ 238.216409][T17835] loop4: detected capacity change from 0 to 128 [ 238.230915][T17835] FAT-fs (loop4): bogus sectors per cluster 0 [ 238.237109][T17835] FAT-fs (loop4): Can't find a valid FAT filesystem [ 238.383344][T17860] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 238.431352][T17863] netlink: 'syz.0.4023': attribute type 1 has an invalid length. [ 238.497930][T17871] loop0: detected capacity change from 0 to 1024 [ 238.511229][T17871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.519909][T17843] lo speed is unknown, defaulting to 1000 [ 238.549867][T17843] lo speed is unknown, defaulting to 1000 [ 238.863601][ T1036] kernel write not supported for file bpf-map (pid: 1036 comm: kworker/1:2) [ 238.875302][T17901] loop2: detected capacity change from 0 to 512 [ 238.884839][T17901] EXT4-fs (loop2): orphan cleanup on readonly fs [ 238.893667][T17901] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4040: bg 0: block 288: padding at end of block bitmap is not set [ 238.919733][T17901] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 238.933702][T17895] loop5: detected capacity change from 0 to 512 [ 238.941532][T17901] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4040: attempt to clear invalid blocks 1024 len 1 [ 238.952535][T17895] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.967247][T17901] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4040: invalid indirect mapped block 1819239214 (level 0) [ 238.967530][T17901] EXT4-fs (loop2): 1 truncate cleaned up [ 239.009691][T17901] netlink: 'syz.2.4040': attribute type 6 has an invalid length. [ 239.033134][T17895] EXT4-fs (loop5): 1 truncate cleaned up [ 239.263172][T17923] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 239.270977][T17923] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 239.282955][T17923] loop2: detected capacity change from 0 to 512 [ 239.305331][T17923] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.327021][T17923] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4047: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.355973][T17923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 239.365438][T17923] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4047: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 239.382570][T17920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.393286][T17920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.424388][T17933] lo speed is unknown, defaulting to 1000 [ 239.430511][T17933] lo speed is unknown, defaulting to 1000 [ 239.436397][T17923] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 239.461752][T17923] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4047: bg 0: block 18: invalid block bitmap [ 239.537795][T17923] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4047: Failed to acquire dquot type 1 [ 239.658733][T17951] syz_tun: entered allmulticast mode [ 239.679843][T17949] syz_tun: left allmulticast mode [ 239.711770][T17933] lo speed is unknown, defaulting to 1000 [ 239.718308][T17933] lo speed is unknown, defaulting to 1000 [ 239.930300][T17967] rdma_rxe: rxe_newlink: failed to add lo [ 239.956387][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.965065][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.979329][T17966] loop4: detected capacity change from 0 to 512 [ 239.989663][T17966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.011235][T17966] EXT4-fs (loop4): 1 truncate cleaned up [ 240.221751][T17975] loop4: detected capacity change from 0 to 512 [ 240.253458][T17980] loop4: detected capacity change from 0 to 512 [ 240.260371][T17980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.271787][T17980] EXT4-fs (loop4): 1 truncate cleaned up [ 240.450416][ T8876] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.481503][ T8876] Bluetooth: hci1: Frame reassembly failed (-84) [ 240.576582][T17993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.587038][T17993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.609920][ T8867] Bluetooth: hci2: Frame reassembly failed (-84) [ 240.858401][T18010] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 240.865034][T18010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 240.872684][T18010] vhci_hcd vhci_hcd.0: Device attached [ 240.879631][T18011] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 240.886955][ T8867] vhci_hcd: stop threads [ 240.891217][ T8867] vhci_hcd: release socket [ 240.895631][ T8867] vhci_hcd: disconnect device [ 241.363704][T18023] __nla_validate_parse: 11 callbacks suppressed [ 241.363719][T18023] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4081'. [ 241.379865][T18023] syz_tun: entered allmulticast mode [ 241.391454][T18022] syz_tun: left allmulticast mode [ 241.413883][T18027] loop4: detected capacity change from 0 to 512 [ 241.487949][T18033] loop4: detected capacity change from 0 to 512 [ 241.497680][T18033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.512946][T18033] EXT4-fs (loop4): 1 truncate cleaned up [ 241.641561][T18041] FAULT_INJECTION: forcing a failure. [ 241.641561][T18041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.654710][T18041] CPU: 0 UID: 0 PID: 18041 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.654736][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.654787][T18041] Call Trace: [ 241.654792][T18041] [ 241.654798][T18041] __dump_stack+0x1d/0x30 [ 241.654815][T18041] dump_stack_lvl+0xe8/0x140 [ 241.654830][T18041] dump_stack+0x15/0x1b [ 241.654843][T18041] should_fail_ex+0x265/0x280 [ 241.654873][T18041] should_fail+0xb/0x20 [ 241.654885][T18041] should_fail_usercopy+0x1a/0x20 [ 241.654900][T18041] _copy_from_user+0x1c/0xb0 [ 241.655000][T18041] ___sys_sendmsg+0xc1/0x1d0 [ 241.655059][T18041] __x64_sys_sendmsg+0xd4/0x160 [ 241.655116][T18041] x64_sys_call+0x191e/0x3000 [ 241.655165][T18041] do_syscall_64+0xd2/0x200 [ 241.655190][T18041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 241.655211][T18041] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 241.655252][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.655268][T18041] RIP: 0033:0x7f4dfdc2f6c9 [ 241.655279][T18041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.655293][T18041] RSP: 002b:00007f4dfc697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.655307][T18041] RAX: ffffffffffffffda RBX: 00007f4dfde85fa0 RCX: 00007f4dfdc2f6c9 [ 241.655317][T18041] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 241.655326][T18041] RBP: 00007f4dfc697090 R08: 0000000000000000 R09: 0000000000000000 [ 241.655404][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.655413][T18041] R13: 00007f4dfde86038 R14: 00007f4dfde85fa0 R15: 00007fffec048418 [ 241.655428][T18041] [ 241.830547][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.839554][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.951145][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4091'. [ 241.960217][T18046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4091'. [ 241.971295][T18046] netlink: 'syz.4.4091': attribute type 1 has an invalid length. [ 241.979040][T18046] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4091'. [ 242.002680][T18048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 242.009248][T18048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 242.016912][T18048] vhci_hcd vhci_hcd.0: Device attached [ 242.023681][T18049] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 242.030847][ T8855] vhci_hcd: stop threads [ 242.035151][ T8855] vhci_hcd: release socket [ 242.039551][ T8855] vhci_hcd: disconnect device [ 242.460541][T18060] loop2: detected capacity change from 0 to 1024 [ 242.467500][T18060] ext4: Bad value for 'stripe' [ 242.481095][ T3707] Bluetooth: hci0: command 0x1003 tx timeout [ 242.487199][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.550725][T18064] loop5: detected capacity change from 0 to 1024 [ 242.561618][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 242.571045][ T9823] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 242.617431][T18073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4101'. [ 242.641013][ T9823] Bluetooth: hci2: command 0x1003 tx timeout [ 242.647262][ T3706] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 242.702800][T18081] netlink: 'syz.2.4103': attribute type 1 has an invalid length. [ 242.710697][T18081] netlink: 'syz.2.4103': attribute type 1 has an invalid length. [ 242.730247][T18081] loop2: detected capacity change from 0 to 512 [ 242.755207][T18081] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.780934][T18093] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 242.787615][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 242.795288][T18093] vhci_hcd vhci_hcd.0: Device attached [ 242.803948][T18081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4103: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 242.813097][T18097] netlink: 'syz.5.4111': attribute type 10 has an invalid length. [ 242.848678][ T8876] Bluetooth: hci0: Frame reassembly failed (-84) [ 242.857214][T18081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 242.866088][T18097] team0: Device ipvlan0 failed to register rx_handler [ 242.876474][T18094] vhci_hcd: connection closed [ 242.880995][ T8867] vhci_hcd: stop threads [ 242.890042][ T8867] vhci_hcd: release socket [ 242.894490][ T8867] vhci_hcd: disconnect device [ 242.909485][T18081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4103: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 242.939494][T18081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 242.941494][T18107] loop4: detected capacity change from 0 to 512 [ 242.950602][T18081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4103: bg 0: block 18: invalid block bitmap [ 242.958271][T18105] loop5: detected capacity change from 0 to 512 [ 242.967502][T18081] __quota_error: 266 callbacks suppressed [ 242.967520][T18081] Quota error (device loop2): write_blk: dquota write failed [ 242.974797][T18107] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.979289][T18081] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 242.986685][T18105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 243.006501][T18081] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4103: Failed to acquire dquot type 1 [ 243.017753][T18105] EXT4-fs (loop5): 1 truncate cleaned up [ 243.031715][T18107] EXT4-fs (loop4): 1 truncate cleaned up [ 243.115837][ T29] audit: type=1400 audit(1763140941.287:47556): avc: denied { execute } for pid=18116 comm="syz.5.4118" path="/264/cpu.stat" dev="tmpfs" ino=1437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.149873][ T29] audit: type=1400 audit(1763140941.287:47557): avc: denied { getopt } for pid=18116 comm="syz.5.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.197560][T18124] loop5: detected capacity change from 0 to 512 [ 243.242830][T18131] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4123'. [ 243.258464][ T29] audit: type=1326 audit(1763140941.427:47558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18132 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2298cf6c9 code=0x7ffc0000 [ 243.282375][ T29] audit: type=1326 audit(1763140941.427:47559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18132 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2298cf6c9 code=0x7ffc0000 [ 243.306011][ T29] audit: type=1326 audit(1763140941.427:47560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18132 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2298cf6c9 code=0x7ffc0000 [ 243.329673][ T29] audit: type=1326 audit(1763140941.427:47561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18132 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2298cf6c9 code=0x7ffc0000 [ 243.353349][ T29] audit: type=1326 audit(1763140941.427:47562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18132 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2298cf6c9 code=0x7ffc0000 [ 243.377023][ T29] audit: type=1326 audit(1763140941.427:47563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18132 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2298cf6c9 code=0x7ffc0000 [ 243.596004][T18153] loop2: detected capacity change from 0 to 512 [ 243.614494][T18155] loop5: detected capacity change from 0 to 1024 [ 243.723245][T18170] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4139'. [ 243.744163][T18168] loop2: detected capacity change from 0 to 512 [ 243.751484][T18170] syz_tun: entered allmulticast mode [ 243.759052][T18169] syz_tun: left allmulticast mode [ 243.767769][T18168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.793720][T18168] EXT4-fs (loop2): 1 truncate cleaned up [ 243.799187][T18177] loop4: detected capacity change from 0 to 1024 [ 243.915413][T18188] loop4: detected capacity change from 0 to 512 [ 244.121388][T18213] loop5: detected capacity change from 0 to 1024 [ 244.265966][T18242] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4156'. [ 244.337019][T18256] loop5: detected capacity change from 0 to 512 [ 244.395106][T18254] loop4: detected capacity change from 0 to 512 [ 244.415348][T18254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.450179][T18254] EXT4-fs (loop4): 1 truncate cleaned up [ 244.666754][T18326] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4164'. [ 244.676867][T18326] syz_tun: entered allmulticast mode [ 244.687696][T18324] syz_tun: left allmulticast mode [ 244.881406][ T9823] Bluetooth: hci0: command 0x1003 tx timeout [ 244.887710][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 244.944662][T18377] lo speed is unknown, defaulting to 1000 [ 244.951116][T18377] lo speed is unknown, defaulting to 1000 [ 244.994664][T18376] loop5: detected capacity change from 0 to 512 [ 245.012939][T18376] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.064283][T18376] EXT4-fs (loop5): 1 truncate cleaned up [ 245.094828][T18395] loop4: detected capacity change from 0 to 512 [ 245.103154][T18395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.153453][T18396] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4175'. [ 245.174572][T18395] EXT4-fs (loop4): 1 truncate cleaned up [ 245.203559][T18396] syz_tun: entered allmulticast mode [ 245.222168][T18393] syz_tun: left allmulticast mode [ 245.257178][T18404] x_tables: unsorted underflow at hook 2 [ 245.261569][T18407] FAULT_INJECTION: forcing a failure. [ 245.261569][T18407] name failslab, interval 1, probability 0, space 0, times 0 [ 245.275586][T18407] CPU: 1 UID: 0 PID: 18407 Comm: syz.4.4178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.275619][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.275632][T18407] Call Trace: [ 245.275638][T18407] [ 245.275646][T18407] __dump_stack+0x1d/0x30 [ 245.275729][T18407] dump_stack_lvl+0xe8/0x140 [ 245.275747][T18407] dump_stack+0x15/0x1b [ 245.275791][T18407] should_fail_ex+0x265/0x280 [ 245.275808][T18407] should_failslab+0x8c/0xb0 [ 245.275833][T18407] kmem_cache_alloc_noprof+0x50/0x480 [ 245.275859][T18407] ? skb_clone+0x151/0x1f0 [ 245.275876][T18407] skb_clone+0x151/0x1f0 [ 245.275936][T18407] __netlink_deliver_tap+0x2c9/0x500 [ 245.275969][T18407] netlink_unicast+0x66b/0x690 [ 245.275997][T18407] netlink_sendmsg+0x58b/0x6b0 [ 245.276015][T18407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.276087][T18407] __sock_sendmsg+0x145/0x180 [ 245.276109][T18407] ____sys_sendmsg+0x31e/0x4e0 [ 245.276140][T18407] ___sys_sendmsg+0x17b/0x1d0 [ 245.276169][T18407] __x64_sys_sendmsg+0xd4/0x160 [ 245.276242][T18407] x64_sys_call+0x191e/0x3000 [ 245.276262][T18407] do_syscall_64+0xd2/0x200 [ 245.276290][T18407] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.276315][T18407] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 245.276345][T18407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.276363][T18407] RIP: 0033:0x7f4dfdc2f6c9 [ 245.276376][T18407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.276392][T18407] RSP: 002b:00007f4dfc697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.276413][T18407] RAX: ffffffffffffffda RBX: 00007f4dfde85fa0 RCX: 00007f4dfdc2f6c9 [ 245.276463][T18407] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 245.276474][T18407] RBP: 00007f4dfc697090 R08: 0000000000000000 R09: 0000000000000000 [ 245.276498][T18407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.276508][T18407] R13: 00007f4dfde86038 R14: 00007f4dfde85fa0 R15: 00007fffec048418 [ 245.276524][T18407] [ 245.526447][T18389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.535096][T18389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.595004][T18421] loop2: detected capacity change from 0 to 512 [ 245.648999][ T8873] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.669975][T18433] syz_tun: entered allmulticast mode [ 245.677611][T18432] syz_tun: left allmulticast mode [ 245.699891][T18435] loop2: detected capacity change from 0 to 512 [ 245.706886][T18435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.718485][T18435] EXT4-fs (loop2): 1 truncate cleaned up [ 245.809831][T18450] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 245.818633][T18452] syz_tun: entered allmulticast mode [ 245.827029][T18451] syz_tun: left allmulticast mode [ 245.843948][T18454] loop4: detected capacity change from 0 to 512 [ 245.853811][T18456] FAULT_INJECTION: forcing a failure. [ 245.853811][T18456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.863086][T18454] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.866920][T18456] CPU: 0 UID: 0 PID: 18456 Comm: syz.2.4199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.866954][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.866969][T18456] Call Trace: [ 245.867012][T18456] [ 245.867020][T18456] __dump_stack+0x1d/0x30 [ 245.867048][T18456] dump_stack_lvl+0xe8/0x140 [ 245.867072][T18456] dump_stack+0x15/0x1b [ 245.867092][T18456] should_fail_ex+0x265/0x280 [ 245.867150][T18456] should_fail+0xb/0x20 [ 245.867169][T18456] should_fail_usercopy+0x1a/0x20 [ 245.867208][T18456] _copy_to_user+0x20/0xa0 [ 245.867285][T18456] simple_read_from_buffer+0xb5/0x130 [ 245.867329][T18456] proc_fail_nth_read+0x10e/0x150 [ 245.867448][T18456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.867484][T18456] vfs_read+0x1a8/0x770 [ 245.867511][T18456] ? __rcu_read_unlock+0x4f/0x70 [ 245.867617][T18456] ? __fget_files+0x184/0x1c0 [ 245.867650][T18456] ksys_read+0xda/0x1a0 [ 245.867720][T18456] __x64_sys_read+0x40/0x50 [ 245.867750][T18456] x64_sys_call+0x27c0/0x3000 [ 245.867776][T18456] do_syscall_64+0xd2/0x200 [ 245.867863][T18456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.867885][T18456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 245.867919][T18456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.868013][T18456] RIP: 0033:0x7fd2298ce0dc [ 245.868029][T18456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.868051][T18456] RSP: 002b:00007fd228337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.868072][T18456] RAX: ffffffffffffffda RBX: 00007fd229b25fa0 RCX: 00007fd2298ce0dc [ 245.868087][T18456] RDX: 000000000000000f RSI: 00007fd2283370a0 RDI: 0000000000000006 [ 245.868101][T18456] RBP: 00007fd228337090 R08: 0000000000000000 R09: 0000000000000000 [ 245.868115][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.868129][T18456] R13: 00007fd229b26038 R14: 00007fd229b25fa0 R15: 00007ffc78329978 [ 245.868202][T18456] [ 245.928449][T18460] sz1: rxe_newlink: already configured on lo [ 245.934704][T18454] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.4198: corrupted inode contents [ 245.935781][T18454] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.4198: mark_inode_dirty error [ 246.105452][T18454] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.4198: corrupted inode contents [ 246.117472][T18454] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4198: mark_inode_dirty error [ 246.149085][T18469] netlink: 'syz.1.4203': attribute type 12 has an invalid length. [ 246.238638][T18454] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 246.244653][T18486] loop2: detected capacity change from 0 to 512 [ 246.268045][T18486] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 246.283063][T18486] EXT4-fs (loop2): mount failed [ 246.289818][T18486] FAULT_INJECTION: forcing a failure. [ 246.289818][T18486] name failslab, interval 1, probability 0, space 0, times 0 [ 246.302546][T18486] CPU: 1 UID: 0 PID: 18486 Comm: syz.2.4208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.302596][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.302609][T18486] Call Trace: [ 246.302615][T18486] [ 246.302623][T18486] __dump_stack+0x1d/0x30 [ 246.302659][T18486] dump_stack_lvl+0xe8/0x140 [ 246.302680][T18486] dump_stack+0x15/0x1b [ 246.302759][T18486] should_fail_ex+0x265/0x280 [ 246.302779][T18486] should_failslab+0x8c/0xb0 [ 246.302809][T18486] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 246.302923][T18486] ? __alloc_skb+0x101/0x320 [ 246.302955][T18486] __alloc_skb+0x101/0x320 [ 246.303035][T18486] ? pfkey_broadcast+0x223/0x240 [ 246.303069][T18486] pfkey_sendmsg+0x7e4/0x900 [ 246.303102][T18486] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 246.303162][T18486] __sock_sendmsg+0x145/0x180 [ 246.303183][T18486] ____sys_sendmsg+0x31e/0x4e0 [ 246.303215][T18486] ___sys_sendmsg+0x17b/0x1d0 [ 246.303279][T18486] __x64_sys_sendmsg+0xd4/0x160 [ 246.303299][T18486] x64_sys_call+0x191e/0x3000 [ 246.303327][T18486] do_syscall_64+0xd2/0x200 [ 246.303409][T18486] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 246.303434][T18486] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 246.303463][T18486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.303482][T18486] RIP: 0033:0x7fd2298cf6c9 [ 246.303572][T18486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.303589][T18486] RSP: 002b:00007fd228337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.303682][T18486] RAX: ffffffffffffffda RBX: 00007fd229b25fa0 RCX: 00007fd2298cf6c9 [ 246.303693][T18486] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 246.303704][T18486] RBP: 00007fd228337090 R08: 0000000000000000 R09: 0000000000000000 [ 246.303714][T18486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.303725][T18486] R13: 00007fd229b26038 R14: 00007fd229b25fa0 R15: 00007ffc78329978 [ 246.303742][T18486] [ 246.528120][T18497] sz1: rxe_newlink: already configured on lo [ 246.540267][T18499] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 246.546791][T18499] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.554397][T18499] vhci_hcd vhci_hcd.0: Device attached [ 246.561917][T18500] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 246.569002][ T8876] vhci_hcd: stop threads [ 246.573287][ T8876] vhci_hcd: release socket [ 246.577698][ T8876] vhci_hcd: disconnect device [ 246.716695][T18522] __nla_validate_parse: 4 callbacks suppressed [ 246.716711][T18522] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4222'. [ 246.742472][T18524] 9pnet: Could not find request transport: rdma [ 246.760410][T18522] syz_tun: entered allmulticast mode [ 246.772961][T18521] syz_tun: left allmulticast mode [ 246.883295][T18536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4225'. [ 246.923942][T18546] loop0: detected capacity change from 0 to 512 [ 246.930850][T18546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 246.975271][T18546] EXT4-fs (loop0): 1 truncate cleaned up [ 247.185176][T18568] sz1: rxe_newlink: already configured on lo [ 247.200019][T18572] loop1: detected capacity change from 0 to 1024 [ 247.221923][T18572] ext4: Bad value for 'barrier' [ 247.252095][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 247.268473][T18572] netlink: 660 bytes leftover after parsing attributes in process `syz.1.4235'. [ 247.286628][T18579] loop0: detected capacity change from 0 to 512 [ 247.322825][T18572] infiniband syû: set active [ 247.327464][T18572] infiniband syû: added bond_slave_0 [ 247.360533][T18590] loop2: detected capacity change from 0 to 512 [ 247.367120][T18572] RDS/IB: syû: added [ 247.371130][T18572] smc: adding ib device syû with port count 1 [ 247.377364][T18587] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 247.383961][T18587] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.391568][T18587] vhci_hcd vhci_hcd.0: Device attached [ 247.400515][T18572] smc: ib device syû port 1 has no pnetid [ 247.457060][T18588] vhci_hcd: connection closed [ 247.457335][ T8873] vhci_hcd: stop threads [ 247.466396][ T8873] vhci_hcd: release socket [ 247.470841][ T8873] vhci_hcd: disconnect device [ 247.672994][T18605] sz1: rxe_newlink: already configured on lo [ 247.680814][ T9823] Bluetooth: hci0: command 0x1003 tx timeout [ 247.686953][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.847963][T18616] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 247.888496][T18615] loop2: detected capacity change from 0 to 2048 [ 247.916816][T18615] EXT4-fs mount: 96 callbacks suppressed [ 247.916891][T18615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.950944][T18624] lo speed is unknown, defaulting to 1000 [ 247.956950][T18624] lo speed is unknown, defaulting to 1000 [ 247.972225][T18625] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4254'. [ 248.006394][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 248.006407][ T29] audit: type=1326 audit(1763140946.177:48073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.060973][T18615] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.4247: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 248.169984][T18632] rdma_rxe: rxe_newlink: failed to add lo [ 248.174578][ T29] audit: type=1326 audit(1763140946.227:48074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.199377][ T29] audit: type=1326 audit(1763140946.227:48075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.223027][ T29] audit: type=1326 audit(1763140946.227:48076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.246777][ T29] audit: type=1326 audit(1763140946.227:48077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.270561][ T29] audit: type=1326 audit(1763140946.227:48078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.294157][ T29] audit: type=1326 audit(1763140946.227:48079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.317795][ T29] audit: type=1326 audit(1763140946.227:48080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.341522][ T29] audit: type=1326 audit(1763140946.227:48081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.365152][ T29] audit: type=1326 audit(1763140946.227:48082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 248.412221][T18644] loop5: detected capacity change from 0 to 1024 [ 248.418792][T18644] EXT4-fs: Ignoring removed orlov option [ 248.436692][ T8873] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.463803][T11795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.486731][T18644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.489015][T18646] loop1: detected capacity change from 0 to 512 [ 248.543898][T18646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.686930][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.719807][T18656] loop1: detected capacity change from 0 to 512 [ 248.729120][T18656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.746947][T18656] EXT4-fs (loop1): 1 truncate cleaned up [ 248.752052][T18660] loop2: detected capacity change from 0 to 512 [ 248.753516][T18656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.759559][T18660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.810563][T18660] EXT4-fs (loop2): 1 truncate cleaned up [ 248.823574][T18660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.824284][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.863064][T11795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.883671][T18663] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 248.911283][T18665] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 248.917808][T18665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 248.925500][T18665] vhci_hcd vhci_hcd.0: Device attached [ 248.933203][T18666] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 248.940177][ T8867] vhci_hcd: stop threads [ 248.944506][ T8867] vhci_hcd: release socket [ 248.948949][ T8867] vhci_hcd: disconnect device [ 248.988819][T18670] loop1: detected capacity change from 0 to 512 [ 249.012800][T18670] EXT4-fs (loop1): orphan cleanup on readonly fs [ 249.020450][T18670] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.4267: EA inode hash validation failed [ 249.033173][T18670] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 249.055520][T18670] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.4267: corrupted inode contents [ 249.071011][T18670] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.4267: mark_inode_dirty error [ 249.082727][T18670] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.4267: corrupted inode contents [ 249.103516][T18670] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.4267: mark_inode_dirty error [ 249.131870][T18670] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.4267: mark inode dirty (error -117) [ 249.145008][T18672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18672 comm=syz.4.4261 [ 249.168989][T18670] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 249.202055][T18670] EXT4-fs (loop1): 1 orphan inode deleted [ 249.212257][T18670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 249.240216][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.255513][T18670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.278286][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.311085][T18676] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4270'. [ 249.345970][T18678] rdma_rxe: rxe_newlink: failed to add lo [ 249.423129][T18680] rdma_rxe: rxe_newlink: failed to add lo [ 249.494028][T18690] loop2: detected capacity change from 0 to 512 [ 249.504234][T18686] loop5: detected capacity change from 0 to 1024 [ 249.517715][T18688] lo speed is unknown, defaulting to 1000 [ 249.526009][T18686] ext4: Bad value for 'stripe' [ 249.531273][T18688] lo speed is unknown, defaulting to 1000 [ 249.538988][T18690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.593033][T18690] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 249.620131][T18690] EXT4-fs (loop2): 1 truncate cleaned up [ 249.629365][T18690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.733404][T11795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.866027][T18698] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 249.950023][T18702] loop1: detected capacity change from 0 to 512 [ 249.962388][T18702] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 250.068896][T18706] rdma_rxe: rxe_newlink: failed to add lo [ 250.128432][T18708] rdma_rxe: rxe_newlink: failed to add lo [ 250.324672][T18714] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 250.332567][T18714] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 250.354518][T18714] loop1: detected capacity change from 0 to 512 [ 250.383159][T18714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.395874][T18714] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.415260][T18714] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4286: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 250.439130][T18720] loop5: detected capacity change from 0 to 512 [ 250.450323][T18720] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 250.470046][T18720] EXT4-fs (loop5): 1 truncate cleaned up [ 250.479417][T18714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 250.489349][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.495515][ T9823] Bluetooth: hci0: command 0x1003 tx timeout [ 250.505414][T18720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.510932][T18714] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4286: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 250.569307][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.590216][T18714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 250.644725][T18714] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4286: bg 0: block 18: invalid block bitmap [ 250.668885][T18728] loop5: detected capacity change from 0 to 164 [ 250.675695][T18714] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4286: Failed to acquire dquot type 1 [ 250.694913][T18728] bio_check_eod: 14193 callbacks suppressed [ 250.694925][T18728] syz.5.4289: attempt to access beyond end of device [ 250.694925][T18728] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 250.720906][T18728] syz.5.4289: attempt to access beyond end of device [ 250.720906][T18728] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 250.736369][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.743273][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4289'. [ 250.814596][T18736] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 250.885835][T18738] sz1: rxe_newlink: already configured on lo [ 251.068706][ T8873] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.499759][T18776] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4307'. [ 251.613525][T18781] rdma_rxe: rxe_newlink: failed to add lo [ 251.813036][T18787] loop2: detected capacity change from 0 to 512 [ 251.823164][T18787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.894603][T18793] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4313'. [ 251.904427][T18793] syz_tun: entered allmulticast mode [ 251.912463][T18792] syz_tun: left allmulticast mode [ 251.947490][T11795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.962024][T18797] loop0: detected capacity change from 0 to 1024 [ 251.979509][T18797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.001864][T18801] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 252.042753][T12275] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.072759][T18803] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4318'. [ 252.082622][T18803] syz_tun: entered allmulticast mode [ 252.090460][T18802] syz_tun: left allmulticast mode [ 252.137850][T18809] rdma_rxe: rxe_newlink: failed to add lo [ 252.203178][T18812] 9pnet: Could not find request transport: f [ 252.451033][T18817] loop0: detected capacity change from 0 to 32768 [ 252.501904][T18817] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 252.507211][T18817] loop0: p1 start 460800 is beyond EOD, truncated [ 252.513732][T18817] loop0: p2 size 83886080 extends beyond EOD, truncated [ 252.526982][T18827] loop1: detected capacity change from 0 to 512 [ 252.543041][T18817] loop0: p5 start 460800 is beyond EOD, truncated [ 252.549514][T18817] loop0: p6 size 83886080 extends beyond EOD, truncated [ 252.568701][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4327'. [ 252.578487][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4327'. [ 252.579055][T18827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.602609][T18831] netlink: 'syz.2.4327': attribute type 1 has an invalid length. [ 252.610436][T18831] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4327'. [ 252.616912][T18538] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 252.629446][T18538] CPU: 0 UID: 0 PID: 18538 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.629479][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.629502][T18538] Call Trace: [ 252.629510][T18538] [ 252.629519][T18538] __dump_stack+0x1d/0x30 [ 252.629573][T18538] dump_stack_lvl+0xe8/0x140 [ 252.629612][T18538] dump_stack+0x15/0x1b [ 252.629629][T18538] dump_header+0x81/0x220 [ 252.629649][T18538] oom_kill_process+0x342/0x400 [ 252.629691][T18538] out_of_memory+0x979/0xb80 [ 252.629754][T18538] try_charge_memcg+0x610/0xa10 [ 252.629786][T18538] charge_memcg+0x51/0xc0 [ 252.629808][T18538] __mem_cgroup_charge+0x28/0xb0 [ 252.629838][T18538] shmem_get_folio_gfp+0x470/0xd60 [ 252.629909][T18538] shmem_write_begin+0xa8/0x190 [ 252.629964][T18538] generic_perform_write+0x184/0x490 [ 252.629989][T18538] shmem_file_write_iter+0xc5/0xf0 [ 252.630076][T18538] __kernel_write_iter+0x2d6/0x540 [ 252.630103][T18538] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 252.630130][T18538] dump_user_range+0x61e/0x8f0 [ 252.630167][T18538] elf_core_dump+0x1de7/0x1f80 [ 252.630214][T18538] ? 0xffffffffff600000 [ 252.630247][T18538] coredump_write+0xb12/0xe30 [ 252.630292][T18538] vfs_coredump+0x143a/0x20d0 [ 252.630336][T18538] ? __memcg_slab_free_hook+0xbc/0x230 [ 252.630370][T18538] ? kmem_cache_free+0xe4/0x3d0 [ 252.630400][T18538] ? proc_coredump_connector+0x114/0x220 [ 252.630433][T18538] get_signal+0xd84/0xf70 [ 252.630568][T18538] arch_do_signal_or_restart+0x96/0x440 [ 252.630593][T18538] irqentry_exit_to_user_mode+0x5b/0xa0 [ 252.630637][T18538] irqentry_exit+0x12/0x50 [ 252.630675][T18538] asm_exc_page_fault+0x26/0x30 [ 252.630713][T18538] RIP: 0033:0x0 [ 252.630730][T18538] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 252.630742][T18538] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 252.630762][T18538] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 252.630779][T18538] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 252.630795][T18538] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 252.630810][T18538] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 252.630826][T18538] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 252.630904][T18538] [ 252.852891][T18538] memory: usage 307200kB, limit 307200kB, failcnt 22239 [ 252.860170][T18538] memory+swap: usage 432080kB, limit 9007199254740988kB, failcnt 0 [ 252.868290][T18538] kmem: usage 9424kB, limit 9007199254740988kB, failcnt 0 [ 252.875430][T18538] Memory cgroup stats for /syz4: [ 252.887184][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.947816][T18839] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 252.977817][T18838] sz1: rxe_newlink: already configured on lo [ 253.073703][T18538] cache 304693248 [ 253.077373][T18538] rss 192512 [ 253.080596][T18538] shmem 304660480 [ 253.084404][T18538] mapped_file 3149824 [ 253.088378][T18538] dirty 0 [ 253.091325][T18538] writeback 0 [ 253.094614][T18538] workingset_refault_anon 6050 [ 253.099370][T18538] workingset_refault_file 551 [ 253.104074][T18538] swap 127995904 [ 253.107627][T18538] swapcached 0 [ 253.111076][T18538] pgpgin 342258 [ 253.114530][T18538] pgpgout 267814 [ 253.118065][T18538] pgfault 259052 [ 253.121639][T18538] pgmajfault 1393 [ 253.125345][T18538] inactive_anon 291594240 [ 253.129687][T18538] active_anon 13258752 [ 253.131912][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.133768][T18538] inactive_file 61440 [ 253.143786][T18538] active_file 0 [ 253.147241][T18538] unevictable 0 [ 253.150749][T18538] hierarchical_memory_limit 314572800 [ 253.156142][T18538] hierarchical_memsw_limit 9223372036854771712 [ 253.162392][T18538] total_cache 304693248 [ 253.166558][T18538] total_rss 192512 [ 253.170303][T18538] total_shmem 304660480 [ 253.174475][T18538] total_mapped_file 3149824 [ 253.178965][T18538] total_dirty 0 [ 253.182465][T18538] total_writeback 0 [ 253.186322][T18538] total_workingset_refault_anon 6050 [ 253.191624][T18538] total_workingset_refault_file 551 [ 253.196889][T18538] total_swap 127995904 [ 253.200976][T18538] total_swapcached 0 [ 253.204918][T18538] total_pgpgin 342258 [ 253.208888][T18538] total_pgpgout 267814 [ 253.213013][T18538] total_pgfault 259052 [ 253.217079][T18538] total_pgmajfault 1393 [ 253.221357][T18538] total_inactive_anon 291594240 [ 253.226199][T18538] total_active_anon 13258752 [ 253.230879][T18538] total_inactive_file 61440 [ 253.235369][T18538] total_active_file 0 [ 253.239339][T18538] total_unevictable 0 [ 253.243349][T18538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18550,uid=0 [ 253.258160][T18538] Memory cgroup out of memory: Killed process 18550 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:57028kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 253.343605][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 253.343622][ T29] audit: type=1326 audit(1763140951.517:48222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.382983][ T29] audit: type=1326 audit(1763140951.517:48223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.406647][ T29] audit: type=1326 audit(1763140951.547:48224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.430297][ T29] audit: type=1326 audit(1763140951.547:48225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.453938][ T29] audit: type=1326 audit(1763140951.547:48226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.477542][ T29] audit: type=1326 audit(1763140951.547:48227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.501127][ T29] audit: type=1326 audit(1763140951.547:48228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.524770][ T29] audit: type=1326 audit(1763140951.547:48229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.548378][ T29] audit: type=1326 audit(1763140951.547:48230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.571956][ T29] audit: type=1326 audit(1763140951.547:48231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18849 comm="syz.0.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f001876f6c9 code=0x7ffc0000 [ 253.680126][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4338'. [ 253.692096][T18864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4338'. [ 253.712965][T18864] netlink: 'syz.0.4338': attribute type 1 has an invalid length. [ 253.720743][T18864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4338'. [ 253.867471][T18871] loop5: detected capacity change from 0 to 1024 [ 253.886150][T18871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.962034][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.983196][T18879] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 254.303471][T18899] lo speed is unknown, defaulting to 1000 [ 254.309996][T18899] lo speed is unknown, defaulting to 1000 [ 254.505644][T18908] loop1: detected capacity change from 0 to 1024 [ 254.518531][T18908] ext4: Bad value for 'stripe' [ 254.556662][T18911] loop1: detected capacity change from 0 to 1024 [ 254.573155][T18911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.688257][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.734853][T18921] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4358'. [ 254.801634][T18923] loop0: detected capacity change from 0 to 128 [ 254.812240][T18923] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.825697][T18923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4359'. [ 254.871455][T18931] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 254.919846][T18936] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 254.993723][T18940] syz_tun: entered allmulticast mode [ 255.010101][T18939] syz_tun: left allmulticast mode [ 255.033940][T18942] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 255.092946][T18944] loop2: detected capacity change from 0 to 512 [ 255.099837][T18944] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.112242][T18944] EXT4-fs (loop2): 1 truncate cleaned up [ 255.118437][T18944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.154294][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.193639][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.282660][T11795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.312898][ T8855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.324713][T18573] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 255.334649][T18573] CPU: 0 UID: 0 PID: 18573 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.334672][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.334683][T18573] Call Trace: [ 255.334688][T18573] [ 255.334694][T18573] __dump_stack+0x1d/0x30 [ 255.334753][T18573] dump_stack_lvl+0xe8/0x140 [ 255.334835][T18573] dump_stack+0x15/0x1b [ 255.334889][T18573] dump_header+0x81/0x220 [ 255.334918][T18573] oom_kill_process+0x342/0x400 [ 255.334950][T18573] out_of_memory+0x979/0xb80 [ 255.334976][T18573] try_charge_memcg+0x610/0xa10 [ 255.335022][T18573] charge_memcg+0x51/0xc0 [ 255.335046][T18573] __mem_cgroup_charge+0x28/0xb0 [ 255.335071][T18573] shmem_get_folio_gfp+0x470/0xd60 [ 255.335176][T18573] shmem_write_begin+0xa8/0x190 [ 255.335193][T18573] generic_perform_write+0x184/0x490 [ 255.335219][T18573] shmem_file_write_iter+0xc5/0xf0 [ 255.335241][T18573] __kernel_write_iter+0x2d6/0x540 [ 255.335335][T18573] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 255.335363][T18573] dump_user_range+0x61e/0x8f0 [ 255.335417][T18573] elf_core_dump+0x1de7/0x1f80 [ 255.335451][T18573] ? 0xffffffffff600000 [ 255.335480][T18573] coredump_write+0xb12/0xe30 [ 255.335557][T18573] vfs_coredump+0x143a/0x20d0 [ 255.335595][T18573] ? __memcg_slab_free_hook+0xbc/0x230 [ 255.335616][T18573] ? kmem_cache_free+0xe4/0x3d0 [ 255.335641][T18573] ? proc_coredump_connector+0x114/0x220 [ 255.335712][T18573] get_signal+0xd84/0xf70 [ 255.335743][T18573] arch_do_signal_or_restart+0x96/0x440 [ 255.335765][T18573] irqentry_exit_to_user_mode+0x5b/0xa0 [ 255.335850][T18573] irqentry_exit+0x12/0x50 [ 255.335909][T18573] asm_exc_page_fault+0x26/0x30 [ 255.335927][T18573] RIP: 0033:0x0 [ 255.335937][T18573] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 255.335945][T18573] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 255.336013][T18573] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 255.336026][T18573] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 255.336101][T18573] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 255.336115][T18573] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 255.336128][T18573] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 255.336149][T18573] [ 255.336164][T18573] memory: usage 307200kB, limit 307200kB, failcnt 24321 [ 255.445733][T18957] netlink: 'syz.2.4375': attribute type 1 has an invalid length. [ 255.448509][T18573] memory+swap: usage 432184kB, limit 9007199254740988kB, failcnt 0 [ 255.548270][T18962] lo speed is unknown, defaulting to 1000 [ 255.555801][T18573] kmem: usage 9076kB, limit 9007199254740988kB, failcnt 0 [ 255.571323][T18962] lo speed is unknown, defaulting to 1000 [ 255.573622][T18573] Memory cgroup stats for /syz4: [ 255.607971][T18573] cache 304648192 [ 255.616672][T18573] rss 49152 [ 255.619785][T18573] shmem 304467968 [ 255.623550][T18573] mapped_file 3149824 [ 255.627541][T18573] dirty 0 [ 255.630477][T18573] writeback 0 [ 255.633783][T18573] workingset_refault_anon 6052 [ 255.638536][T18573] workingset_refault_file 1764 [ 255.643305][T18573] swap 127897600 [ 255.646868][T18573] swapcached 4096 [ 255.650505][T18573] pgpgin 349858 [ 255.653996][T18573] pgpgout 275459 [ 255.657540][T18573] pgfault 259489 [ 255.661109][T18573] pgmajfault 1411 [ 255.664740][T18573] inactive_anon 302448640 [ 255.669113][T18573] active_anon 1511424 [ 255.673304][T18573] inactive_file 0 [ 255.676941][T18573] active_file 217088 [ 255.680864][T18573] unevictable 0 [ 255.684326][T18573] hierarchical_memory_limit 314572800 [ 255.689689][T18573] hierarchical_memsw_limit 9223372036854771712 [ 255.696016][T18573] total_cache 304648192 [ 255.700159][T18573] total_rss 49152 [ 255.703929][T18573] total_shmem 304467968 [ 255.708077][T18573] total_mapped_file 3149824 [ 255.712603][T18573] total_dirty 0 [ 255.716143][T18573] total_writeback 0 [ 255.719951][T18573] total_workingset_refault_anon 6052 [ 255.725323][T18573] total_workingset_refault_file 1764 [ 255.730653][T18573] total_swap 127897600 [ 255.734789][T18573] total_swapcached 4096 [ 255.738959][T18573] total_pgpgin 349858 [ 255.742960][T18573] total_pgpgout 275459 [ 255.747109][T18573] total_pgfault 259489 [ 255.751122][T18966] rdma_rxe: rxe_newlink: failed to add lo [ 255.751185][T18573] total_pgmajfault 1411 [ 255.761063][T18573] total_inactive_anon 302448640 [ 255.765913][T18573] total_active_anon 1511424 [ 255.770407][T18573] total_inactive_file 0 [ 255.774600][T18573] total_active_file 217088 [ 255.779115][T18573] total_unevictable 0 [ 255.783205][T18573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18564,uid=0 [ 255.797978][T18573] Memory cgroup out of memory: Killed process 18564 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:57092kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 255.833998][ T8855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.866750][T18950] lo speed is unknown, defaulting to 1000 [ 255.887049][T18950] lo speed is unknown, defaulting to 1000 [ 255.919848][ T8855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.991931][ T8855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.023371][T18985] loop5: detected capacity change from 0 to 512 [ 256.042105][T18985] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.083114][T18985] EXT4-fs (loop5): 1 truncate cleaned up [ 256.097585][T18985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.161703][ T8855] bridge_slave_1: left allmulticast mode [ 256.167382][ T8855] bridge_slave_1: left promiscuous mode [ 256.173208][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.188679][ T8855] bridge_slave_0: left allmulticast mode [ 256.194386][ T8855] bridge_slave_0: left promiscuous mode [ 256.199992][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.289729][ T8855] dvmrp8 (unregistering): left allmulticast mode [ 256.331651][T18550] syz.4.4224 (18550) used greatest stack depth: 8072 bytes left [ 256.353456][ T8855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.368717][ T8855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.389778][ T8855] bond0 (unregistering): Released all slaves [ 256.453393][T18950] chnl_net:caif_netlink_parms(): no params data found [ 256.587677][ T8855] hsr_slave_0: left promiscuous mode [ 256.593554][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.600974][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.602418][T18544] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 256.618130][T18544] CPU: 1 UID: 0 PID: 18544 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.618158][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.618172][T18544] Call Trace: [ 256.618178][T18544] [ 256.618185][T18544] __dump_stack+0x1d/0x30 [ 256.618204][T18544] dump_stack_lvl+0xe8/0x140 [ 256.618242][T18544] dump_stack+0x15/0x1b [ 256.618262][T18544] dump_header+0x81/0x220 [ 256.618282][T18544] oom_kill_process+0x342/0x400 [ 256.618316][T18544] out_of_memory+0x979/0xb80 [ 256.618342][T18544] try_charge_memcg+0x610/0xa10 [ 256.618373][T18544] charge_memcg+0x51/0xc0 [ 256.618396][T18544] __mem_cgroup_charge+0x28/0xb0 [ 256.618480][T18544] shmem_get_folio_gfp+0x470/0xd60 [ 256.618518][T18544] shmem_write_begin+0xa8/0x190 [ 256.618620][T18544] generic_perform_write+0x184/0x490 [ 256.618658][T18544] shmem_file_write_iter+0xc5/0xf0 [ 256.618685][T18544] __kernel_write_iter+0x2d6/0x540 [ 256.618711][T18544] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 256.618735][T18544] dump_user_range+0x61e/0x8f0 [ 256.618899][T18544] elf_core_dump+0x1de7/0x1f80 [ 256.618930][T18544] ? 0xffffffffff600000 [ 256.618982][T18544] coredump_write+0xb12/0xe30 [ 256.619085][T18544] vfs_coredump+0x143a/0x20d0 [ 256.619126][T18544] ? __memcg_slab_free_hook+0xbc/0x230 [ 256.619151][T18544] ? kmem_cache_free+0xe4/0x3d0 [ 256.619213][T18544] ? proc_coredump_connector+0x114/0x220 [ 256.619277][T18544] get_signal+0xd84/0xf70 [ 256.619339][T18544] arch_do_signal_or_restart+0x96/0x440 [ 256.619367][T18544] irqentry_exit_to_user_mode+0x5b/0xa0 [ 256.619406][T18544] irqentry_exit+0x12/0x50 [ 256.619459][T18544] asm_exc_page_fault+0x26/0x30 [ 256.619480][T18544] RIP: 0033:0x0 [ 256.619494][T18544] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 256.619504][T18544] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 256.619519][T18544] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 256.619529][T18544] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 256.619616][T18544] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 256.619630][T18544] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 256.619644][T18544] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 256.619664][T18544] [ 256.619671][T18544] memory: usage 307200kB, limit 307200kB, failcnt 25083 [ 256.849286][T18544] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 256.857303][T18544] kmem: usage 8888kB, limit 9007199254740988kB, failcnt 0 [ 256.864444][T18544] Memory cgroup stats for /syz4: [ 256.864881][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.873224][T18544] cache 305385472 [ 256.877361][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.881140][T18544] rss 49152 [ 256.891276][T18544] shmem 305381376 [ 256.894904][T18544] mapped_file 3149824 [ 256.898874][T18544] dirty 0 [ 256.901865][T18544] writeback 0 [ 256.905164][T18544] workingset_refault_anon 6052 [ 256.909973][T18544] workingset_refault_file 2097 [ 256.914746][T18544] swap 127995904 [ 256.918294][T18544] swapcached 0 [ 256.921714][T18544] pgpgin 352764 [ 256.925209][T18544] pgpgout 278186 [ 256.928798][T18544] pgfault 259657 [ 256.932369][T18544] pgmajfault 1414 [ 256.936010][T18544] inactive_anon 284540928 [ 256.940327][T18544] active_anon 20365312 [ 256.944483][T18544] inactive_file 0 [ 256.948118][T18544] active_file 40960 [ 256.951979][T18544] unevictable 0 [ 256.955472][T18544] hierarchical_memory_limit 314572800 [ 256.960877][T18544] hierarchical_memsw_limit 9223372036854771712 [ 256.967043][T18544] total_cache 305385472 [ 256.971305][T18544] total_rss 49152 [ 256.974932][T18544] total_shmem 305381376 [ 256.979197][T18544] total_mapped_file 3149824 [ 256.983741][T18544] total_dirty 0 [ 256.987201][T18544] total_writeback 0 [ 256.991032][T18544] total_workingset_refault_anon 6052 [ 256.996304][T18544] total_workingset_refault_file 2097 [ 257.001659][T18544] total_swap 127995904 [ 257.005719][T18544] total_swapcached 0 [ 257.009607][T18544] total_pgpgin 352764 [ 257.013601][T18544] total_pgpgout 278186 [ 257.017662][T18544] total_pgfault 259657 [ 257.021746][T18544] total_pgmajfault 1414 [ 257.025957][T18544] total_inactive_anon 284540928 [ 257.030841][T18544] total_active_anon 20365312 [ 257.035446][T18544] total_inactive_file 0 [ 257.039594][T18544] total_active_file 40960 [ 257.043946][T18544] total_unevictable 0 [ 257.047959][T18544] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18530,uid=0 [ 257.062727][T18544] Memory cgroup out of memory: Killed process 18530 (syz.4.4224) total-vm:93324kB, anon-rss:1160kB, file-rss:57128kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 257.085576][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.095455][ T8855] veth1_macvtap: left promiscuous mode [ 257.100990][ T8855] veth0_macvtap: left promiscuous mode [ 257.111604][ T8855] veth1_vlan: left promiscuous mode [ 257.119497][ T8855] veth0_vlan: left promiscuous mode [ 257.215492][ T8855] team0 (unregistering): Port device team_slave_1 removed [ 257.228355][ T8855] team0 (unregistering): Port device team_slave_0 removed [ 257.279937][T18950] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.287049][T18950] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.295690][T18950] bridge_slave_0: entered allmulticast mode [ 257.310246][T18950] bridge_slave_0: entered promiscuous mode [ 257.319909][T18950] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.327220][T18950] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.334677][T18950] bridge_slave_1: entered allmulticast mode [ 257.341463][T18950] bridge_slave_1: entered promiscuous mode [ 257.373101][T18950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.385006][T18950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.419663][T18950] team0: Port device team_slave_0 added [ 257.426457][T18950] team0: Port device team_slave_1 added [ 257.428737][T19083] loop5: detected capacity change from 0 to 512 [ 257.461648][T18950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.468614][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.480979][T19083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.494522][T18950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.498727][T18950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.522239][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.548644][T18950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.568812][T19083] EXT4-fs (loop5): 1 truncate cleaned up [ 257.582145][T19083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.684423][T18950] hsr_slave_0: entered promiscuous mode [ 257.703094][T12323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.713237][T18950] hsr_slave_1: entered promiscuous mode [ 257.730841][T18950] debugfs: 'hsr0' already exists in 'hsr' [ 257.736616][T18950] Cannot create hsr debugfs directory [ 257.888540][T18950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.906079][T18950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 257.932502][T18950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 257.959512][T18950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 258.010313][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.012738][T18950] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.025764][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.025786][T18950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.040812][T18950] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.047856][T18950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.076454][T19139] rdma_rxe: rxe_newlink: failed to add lo [ 258.110206][T18950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.121760][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.129625][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.154047][T18950] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.164486][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.171551][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.192319][T18950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.202754][T18950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.217133][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.224235][ T8842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.258804][T19141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.267475][T19141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.321353][T18950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.370873][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 258.370891][ T29] audit: type=1326 audit(1763140956.537:48369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.1.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.400690][ T29] audit: type=1326 audit(1763140956.537:48370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.1.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.424578][ T29] audit: type=1326 audit(1763140956.537:48371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19146 comm="syz.1.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.479527][ T29] audit: type=1326 audit(1763140956.637:48372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.503260][ T29] audit: type=1326 audit(1763140956.637:48373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.526855][ T29] audit: type=1326 audit(1763140956.637:48374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.532130][T18950] veth0_vlan: entered promiscuous mode [ 258.550711][ T29] audit: type=1326 audit(1763140956.637:48375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.579735][ T29] audit: type=1326 audit(1763140956.637:48376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.603297][ T29] audit: type=1326 audit(1763140956.637:48377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.626859][ T29] audit: type=1326 audit(1763140956.637:48378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.1.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcae6f6c9 code=0x7ffc0000 [ 258.634887][T18950] veth1_vlan: entered promiscuous mode [ 258.743926][T18950] veth0_macvtap: entered promiscuous mode [ 258.760727][T19177] loop5: detected capacity change from 0 to 1024 [ 258.763732][T18950] veth1_macvtap: entered promiscuous mode [ 258.787785][T19177] ext4: Bad value for 'stripe' [ 258.796451][T19179] loop1: detected capacity change from 0 to 1024 [ 258.808800][T18950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.820067][T19179] ext4: Bad value for 'stripe' [ 258.857123][T18950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.868150][ T8856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.877006][ T8856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.886036][ T8856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.973576][ T8856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.011842][T19193] loop5: detected capacity change from 0 to 128 [ 259.048066][T19196] loop6: detected capacity change from 0 to 512 [ 259.101704][T19196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.125774][T18950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.148475][T19206] loop6: detected capacity change from 0 to 1024 [ 259.201684][T19206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.226727][T18950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.372263][T19218] loop5: detected capacity change from 0 to 1024 [ 259.378970][T19218] ext4: Bad value for 'stripe' [ 259.410611][T19215] loop1: detected capacity change from 0 to 512 [ 259.444725][T19219] rdma_rxe: rxe_newlink: failed to add lo [ 259.465174][T19215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.505517][T19215] EXT4-fs (loop1): 1 truncate cleaned up [ 259.556600][T19215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.596489][T19232] __nla_validate_parse: 7 callbacks suppressed [ 259.596502][T19232] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4417'. [ 259.686945][T19232] syz_tun: entered allmulticast mode [ 259.696492][T19232] dvmrp8: entered allmulticast mode [ 259.715555][T19231] syz_tun: left allmulticast mode [ 259.829006][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.848013][T19245] loop2: detected capacity change from 0 to 512 [ 259.856930][T19245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.870379][T19245] EXT4-fs (loop2): 1 truncate cleaned up [ 259.881150][T19245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.915098][T19254] netlink: 'syz.6.4425': attribute type 1 has an invalid length. [ 259.922890][T19254] netlink: 'syz.6.4425': attribute type 1 has an invalid length. [ 259.928815][T18538] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 259.940558][T18538] CPU: 0 UID: 0 PID: 18538 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.940586][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.940601][T18538] Call Trace: [ 259.940607][T18538] [ 259.940614][T18538] __dump_stack+0x1d/0x30 [ 259.940715][T18538] dump_stack_lvl+0xe8/0x140 [ 259.940737][T18538] dump_stack+0x15/0x1b [ 259.940760][T18538] dump_header+0x81/0x220 [ 259.940780][T18538] oom_kill_process+0x342/0x400 [ 259.940857][T18538] out_of_memory+0x979/0xb80 [ 259.940887][T18538] try_charge_memcg+0x610/0xa10 [ 259.940925][T18538] charge_memcg+0x51/0xc0 [ 259.940949][T18538] __mem_cgroup_charge+0x28/0xb0 [ 259.940975][T18538] shmem_get_folio_gfp+0x470/0xd60 [ 259.941051][T18538] shmem_write_begin+0xa8/0x190 [ 259.941208][T18538] generic_perform_write+0x184/0x490 [ 259.941230][T18538] shmem_file_write_iter+0xc5/0xf0 [ 259.941259][T18538] __kernel_write_iter+0x2d6/0x540 [ 259.941286][T18538] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 259.941311][T18538] dump_user_range+0x61e/0x8f0 [ 259.941431][T18538] elf_core_dump+0x1de7/0x1f80 [ 259.941465][T18538] ? 0xffffffffff600000 [ 259.941491][T18538] coredump_write+0xb12/0xe30 [ 259.941528][T18538] vfs_coredump+0x143a/0x20d0 [ 259.941690][T18538] ? __memcg_slab_free_hook+0xbc/0x230 [ 259.941719][T18538] ? kmem_cache_free+0xe4/0x3d0 [ 259.941791][T18538] ? proc_coredump_connector+0x114/0x220 [ 259.941855][T18538] get_signal+0xd84/0xf70 [ 259.941970][T18538] arch_do_signal_or_restart+0x96/0x440 [ 259.942009][T18538] irqentry_exit_to_user_mode+0x5b/0xa0 [ 259.942111][T18538] irqentry_exit+0x12/0x50 [ 259.942140][T18538] asm_exc_page_fault+0x26/0x30 [ 259.942159][T18538] RIP: 0033:0x0 [ 259.942171][T18538] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 259.942184][T18538] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 259.942203][T18538] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 259.942254][T18538] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 259.942269][T18538] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 259.942313][T18538] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 259.942325][T18538] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 259.942344][T18538] [ 260.163748][T18538] memory: usage 307200kB, limit 307200kB, failcnt 26902 [ 260.170939][T18538] memory+swap: usage 431276kB, limit 9007199254740988kB, failcnt 0 [ 260.178904][T18538] kmem: usage 8800kB, limit 9007199254740988kB, failcnt 0 [ 260.186141][T18538] Memory cgroup stats for /syz4: [ 260.238432][T18538] cache 304578560 [ 260.244239][T19254] loop6: detected capacity change from 0 to 512 [ 260.247060][T18538] rss 73728 [ 260.247070][T18538] shmem 304070656 [ 260.254489][T11795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.256410][T18538] mapped_file 3637248 [ 260.273130][T18538] dirty 0 [ 260.276141][T18538] writeback 106496 [ 260.279890][T18538] workingset_refault_anon 6196 [ 260.284713][T18538] workingset_refault_file 4953 [ 260.289528][T18538] swap 127156224 [ 260.293111][T18538] swapcached 839680 [ 260.296917][T18538] pgpgin 372987 [ 260.300432][T18538] pgpgout 298387 [ 260.304076][T18538] pgfault 260783 [ 260.307658][T18538] pgmajfault 1435 [ 260.311304][T18538] inactive_anon 239427584 [ 260.315628][T18538] active_anon 65273856 [ 260.319685][T18538] inactive_file 0 [ 260.323364][T18538] active_file 24576 [ 260.327219][T18538] unevictable 0 [ 260.330667][T18538] hierarchical_memory_limit 314572800 [ 260.336124][T18538] hierarchical_memsw_limit 9223372036854771712 [ 260.342293][T18538] total_cache 304578560 [ 260.346452][T18538] total_rss 73728 [ 260.350081][T18538] total_shmem 304070656 [ 260.354284][T18538] total_mapped_file 3637248 [ 260.358779][T18538] total_dirty 0 [ 260.362296][T18538] total_writeback 106496 [ 260.366544][T18538] total_workingset_refault_anon 6196 [ 260.371915][T18538] total_workingset_refault_file 4953 [ 260.377194][T18538] total_swap 127156224 [ 260.381361][T18538] total_swapcached 839680 [ 260.385680][T18538] total_pgpgin 372987 [ 260.389659][T18538] total_pgpgout 298387 [ 260.393752][T18538] total_pgfault 260783 [ 260.397823][T18538] total_pgmajfault 1435 [ 260.402044][T18538] total_inactive_anon 239427584 [ 260.406904][T18538] total_active_anon 65273856 [ 260.411517][T18538] total_inactive_file 0 [ 260.415666][T18538] total_active_file 24576 [ 260.419987][T18538] total_unevictable 0 [ 260.424001][T18538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18531,uid=0 [ 260.438689][T18538] Memory cgroup out of memory: Killed process 18531 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:57272kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 260.459098][T19254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.475788][T19264] loop2: detected capacity change from 0 to 164 [ 260.499004][T19254] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.526756][T19254] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4425: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 260.560570][T19271] FAULT_INJECTION: forcing a failure. [ 260.560570][T19271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.573806][T19271] CPU: 1 UID: 0 PID: 19271 Comm: syz.5.4429 Not tainted syzkaller #0 PREEMPT(voluntary) [ 260.573828][T19271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.573839][T19271] Call Trace: [ 260.573844][T19271] [ 260.573850][T19271] __dump_stack+0x1d/0x30 [ 260.573927][T19271] dump_stack_lvl+0xe8/0x140 [ 260.573944][T19271] dump_stack+0x15/0x1b [ 260.573992][T19271] should_fail_ex+0x265/0x280 [ 260.574014][T19271] should_fail+0xb/0x20 [ 260.574037][T19271] should_fail_usercopy+0x1a/0x20 [ 260.574059][T19271] _copy_from_user+0x1c/0xb0 [ 260.574136][T19271] __sys_bpf+0x183/0x7c0 [ 260.574160][T19271] __x64_sys_bpf+0x41/0x50 [ 260.574194][T19271] x64_sys_call+0x2aee/0x3000 [ 260.574217][T19271] do_syscall_64+0xd2/0x200 [ 260.574314][T19271] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 260.574344][T19271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 260.574445][T19271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.574540][T19271] RIP: 0033:0x7fbdc579f6c9 [ 260.574556][T19271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.574577][T19271] RSP: 002b:00007fbdc41ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.574597][T19271] RAX: ffffffffffffffda RBX: 00007fbdc59f5fa0 RCX: 00007fbdc579f6c9 [ 260.574607][T19271] RDX: 00000000000000af RSI: 00002000000000c0 RDI: 0000000000000005 [ 260.574617][T19271] RBP: 00007fbdc41ff090 R08: 0000000000000000 R09: 0000000000000000 [ 260.574640][T19271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.574653][T19271] R13: 00007fbdc59f6038 R14: 00007fbdc59f5fa0 R15: 00007ffc07bc5eb8 [ 260.574672][T19271] [ 260.691042][T19254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.770955][T19254] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4425: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 260.799840][T19273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=19273 comm=syz.2.4431 [ 260.812963][T19254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 260.822529][T19254] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4425: bg 0: block 18: invalid block bitmap [ 260.829449][T19280] x_tables: unsorted underflow at hook 2 [ 260.840713][T19254] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4425: Failed to acquire dquot type 1 [ 260.888693][T18950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.916749][T19283] loop1: detected capacity change from 0 to 1024 [ 260.923530][T19283] ext4: Bad value for 'stripe' [ 260.974663][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 260.986138][T19287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'. [ 260.997047][T19293] FAULT_INJECTION: forcing a failure. [ 260.997047][T19293] name failslab, interval 1, probability 0, space 0, times 0 [ 261.009719][T19293] CPU: 0 UID: 0 PID: 19293 Comm: syz.6.4439 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.009761][T19293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.009779][T19293] Call Trace: [ 261.009787][T19293] [ 261.009796][T19293] __dump_stack+0x1d/0x30 [ 261.009825][T19293] dump_stack_lvl+0xe8/0x140 [ 261.009848][T19293] dump_stack+0x15/0x1b [ 261.009866][T19293] should_fail_ex+0x265/0x280 [ 261.009883][T19293] ? rtnl_newlink+0x5c/0x12d0 [ 261.009935][T19293] should_failslab+0x8c/0xb0 [ 261.009962][T19293] __kmalloc_cache_noprof+0x4c/0x4a0 [ 261.010005][T19293] rtnl_newlink+0x5c/0x12d0 [ 261.010047][T19293] ? css_rstat_updated+0xb7/0x240 [ 261.010075][T19293] ? css_rstat_updated+0xb7/0x240 [ 261.010094][T19293] ? refill_stock+0x32f/0x390 [ 261.010125][T19293] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 261.010227][T19293] ? __rcu_read_unlock+0x4f/0x70 [ 261.010331][T19293] ? xas_load+0x413/0x430 [ 261.010356][T19293] ? xas_load+0x413/0x430 [ 261.010412][T19293] ? __rcu_read_unlock+0x4f/0x70 [ 261.010499][T19293] ? __rcu_read_unlock+0x4f/0x70 [ 261.010524][T19293] ? avc_has_perm_noaudit+0x1b1/0x200 [ 261.010614][T19293] ? cred_has_capability+0x210/0x280 [ 261.010654][T19293] ? selinux_capable+0x31/0x40 [ 261.010678][T19293] ? security_capable+0x83/0x90 [ 261.010718][T19293] ? ns_capable+0x7d/0xb0 [ 261.010786][T19293] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.010810][T19293] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 261.010845][T19293] netlink_rcv_skb+0x123/0x220 [ 261.010899][T19293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.011002][T19293] rtnetlink_rcv+0x1c/0x30 [ 261.011029][T19293] netlink_unicast+0x5c0/0x690 [ 261.011080][T19293] netlink_sendmsg+0x58b/0x6b0 [ 261.011102][T19293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.011121][T19293] __sock_sendmsg+0x145/0x180 [ 261.011229][T19293] ____sys_sendmsg+0x31e/0x4e0 [ 261.011326][T19293] ___sys_sendmsg+0x17b/0x1d0 [ 261.011393][T19293] __x64_sys_sendmsg+0xd4/0x160 [ 261.011468][T19293] x64_sys_call+0x191e/0x3000 [ 261.011520][T19293] do_syscall_64+0xd2/0x200 [ 261.011547][T19293] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.011661][T19293] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 261.011704][T19293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.011759][T19293] RIP: 0033:0x7f968a29f6c9 [ 261.011777][T19293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.011801][T19293] RSP: 002b:00007f9688d07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.011826][T19293] RAX: ffffffffffffffda RBX: 00007f968a4f5fa0 RCX: 00007f968a29f6c9 [ 261.011917][T19293] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 261.011934][T19293] RBP: 00007f9688d07090 R08: 0000000000000000 R09: 0000000000000000 [ 261.011950][T19293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.011966][T19293] R13: 00007f968a4f6038 R14: 00007f968a4f5fa0 R15: 00007fff703a9778 [ 261.011988][T19293] [ 261.026469][T19294] netlink: 'syz.1.4437': attribute type 1 has an invalid length. [ 261.313765][T19294] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4437'. [ 261.338833][T19297] rdma_rxe: rxe_newlink: failed to add lo [ 261.414559][T19303] netlink: 'syz.1.4444': attribute type 1 has an invalid length. [ 261.422431][T19303] netlink: 'syz.1.4444': attribute type 1 has an invalid length. [ 261.447810][T19303] loop1: detected capacity change from 0 to 512 [ 261.472567][T19303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.501785][T19313] x_tables: unsorted underflow at hook 2 [ 261.560850][T18551] ================================================================== [ 261.562976][T19303] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.568965][T18551] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 261.589146][T18551] [ 261.591468][T18551] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 261.599527][T18551] tick_do_update_jiffies64+0x113/0x1c0 [ 261.605080][T18551] tick_nohz_handler+0x7f/0x2d0 [ 261.609935][T18551] __hrtimer_run_queues+0x20f/0x5a0 [ 261.615135][T18551] hrtimer_interrupt+0x21a/0x460 [ 261.620073][T18551] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 261.625970][T18551] sysvec_apic_timer_interrupt+0x6f/0x80 [ 261.631691][T18551] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.637670][T18551] lruvec_page_state_local+0x0/0xe0 [ 261.642880][T18551] count_shadow_nodes+0x19b/0x230 [ 261.647911][T18551] do_shrink_slab+0x63/0x680 [ 261.652507][T18551] shrink_slab+0x448/0x760 [ 261.656937][T18551] shrink_node+0x6c3/0x2120 [ 261.661539][T18551] do_try_to_free_pages+0x3f6/0xcd0 [ 261.666743][T18551] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 261.672640][T18551] try_charge_memcg+0x383/0xa10 [ 261.677504][T18551] charge_memcg+0x51/0xc0 [ 261.681842][T18551] __mem_cgroup_charge+0x28/0xb0 [ 261.686793][T18551] shmem_get_folio_gfp+0x470/0xd60 [ 261.691917][T18551] shmem_write_begin+0xa8/0x190 [ 261.696772][T18551] generic_perform_write+0x184/0x490 [ 261.702053][T18551] shmem_file_write_iter+0xc5/0xf0 [ 261.707173][T18551] __kernel_write_iter+0x2d6/0x540 [ 261.712284][T18551] dump_user_range+0x61e/0x8f0 [ 261.717061][T18551] elf_core_dump+0x1de7/0x1f80 [ 261.721830][T18551] coredump_write+0xb12/0xe30 [ 261.726531][T18551] vfs_coredump+0x143a/0x20d0 [ 261.731204][T18551] get_signal+0xd84/0xf70 [ 261.735531][T18551] arch_do_signal_or_restart+0x96/0x440 [ 261.741073][T18551] irqentry_exit_to_user_mode+0x5b/0xa0 [ 261.746622][T18551] irqentry_exit+0x12/0x50 [ 261.751043][T18551] asm_exc_page_fault+0x26/0x30 [ 261.755889][T18551] [ 261.758207][T18551] read to 0xffffffff868099c0 of 8 bytes by task 18551 on cpu 0: [ 261.765824][T18551] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 261.772073][T18551] count_shadow_nodes+0x6a/0x230 [ 261.777012][T18551] do_shrink_slab+0x63/0x680 [ 261.781604][T18551] shrink_slab+0x448/0x760 [ 261.786030][T18551] shrink_node+0x6c3/0x2120 [ 261.790536][T18551] do_try_to_free_pages+0x3f6/0xcd0 [ 261.795730][T18551] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 261.801640][T18551] try_charge_memcg+0x383/0xa10 [ 261.806495][T18551] charge_memcg+0x51/0xc0 [ 261.810855][T18551] __mem_cgroup_charge+0x28/0xb0 [ 261.815885][T18551] shmem_get_folio_gfp+0x470/0xd60 [ 261.821006][T18551] shmem_write_begin+0xa8/0x190 [ 261.825872][T18551] generic_perform_write+0x184/0x490 [ 261.831171][T18551] shmem_file_write_iter+0xc5/0xf0 [ 261.836278][T18551] __kernel_write_iter+0x2d6/0x540 [ 261.841388][T18551] dump_user_range+0x61e/0x8f0 [ 261.846156][T18551] elf_core_dump+0x1de7/0x1f80 [ 261.850921][T18551] coredump_write+0xb12/0xe30 [ 261.855596][T18551] vfs_coredump+0x143a/0x20d0 [ 261.860272][T18551] get_signal+0xd84/0xf70 [ 261.864595][T18551] arch_do_signal_or_restart+0x96/0x440 [ 261.870134][T18551] irqentry_exit_to_user_mode+0x5b/0xa0 [ 261.875688][T18551] irqentry_exit+0x12/0x50 [ 261.880114][T18551] asm_exc_page_fault+0x26/0x30 [ 261.884961][T18551] [ 261.887275][T18551] value changed: 0x00000000fffff0d3 -> 0x00000000fffff0d4 [ 261.894387][T18551] [ 261.896710][T18551] Reported by Kernel Concurrency Sanitizer on: [ 261.902854][T18551] CPU: 0 UID: 0 PID: 18551 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.912671][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.922734][T18551] ================================================================== [ 261.937236][T19303] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4444: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 261.962719][T19303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 261.981339][T19303] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4444: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 262.014986][T19303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 262.024571][T19303] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4444: bg 0: block 18: invalid block bitmap [ 262.037429][T19303] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4444: Failed to acquire dquot type 1 [ 262.064025][T11658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.074442][T18538] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 262.084405][T18538] CPU: 1 UID: 0 PID: 18538 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.084507][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.084518][T18538] Call Trace: [ 262.084523][T18538] [ 262.084573][T18538] __dump_stack+0x1d/0x30 [ 262.084596][T18538] dump_stack_lvl+0xe8/0x140 [ 262.084619][T18538] dump_stack+0x15/0x1b [ 262.084655][T18538] dump_header+0x81/0x220 [ 262.084675][T18538] oom_kill_process+0x342/0x400 [ 262.084789][T18538] out_of_memory+0x979/0xb80 [ 262.084879][T18538] try_charge_memcg+0x610/0xa10 [ 262.084921][T18538] charge_memcg+0x51/0xc0 [ 262.085011][T18538] __mem_cgroup_charge+0x28/0xb0 [ 262.085036][T18538] shmem_get_folio_gfp+0x470/0xd60 [ 262.085077][T18538] shmem_write_begin+0xa8/0x190 [ 262.085168][T18538] generic_perform_write+0x184/0x490 [ 262.085197][T18538] shmem_file_write_iter+0xc5/0xf0 [ 262.085224][T18538] __kernel_write_iter+0x2d6/0x540 [ 262.085299][T18538] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 262.085330][T18538] dump_user_range+0x61e/0x8f0 [ 262.085368][T18538] elf_core_dump+0x1de7/0x1f80 [ 262.085400][T18538] ? 0xffffffffff600000 [ 262.085505][T18538] coredump_write+0xb12/0xe30 [ 262.085598][T18538] vfs_coredump+0x143a/0x20d0 [ 262.085637][T18538] ? __memcg_slab_free_hook+0xbc/0x230 [ 262.085682][T18538] ? kmem_cache_free+0xe4/0x3d0 [ 262.085710][T18538] ? proc_coredump_connector+0x114/0x220 [ 262.085754][T18538] get_signal+0xd84/0xf70 [ 262.085778][T18538] arch_do_signal_or_restart+0x96/0x440 [ 262.085807][T18538] irqentry_exit_to_user_mode+0x5b/0xa0 [ 262.085915][T18538] irqentry_exit+0x12/0x50 [ 262.086040][T18538] asm_exc_page_fault+0x26/0x30 [ 262.086193][T18538] RIP: 0033:0x0 [ 262.086206][T18538] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 262.086216][T18538] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 262.086230][T18538] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 262.086241][T18538] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 262.086252][T18538] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 262.086262][T18538] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 262.086272][T18538] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 262.086290][T18538] [ 262.086298][T18538] memory: usage 307200kB, limit 307200kB, failcnt 28094 [ 262.315720][T18538] memory+swap: usage 423812kB, limit 9007199254740988kB, failcnt 0 [ 262.323716][T18538] kmem: usage 8808kB, limit 9007199254740988kB, failcnt 0 [ 262.330835][T18538] Memory cgroup stats for /syz4: [ 262.331377][T18538] cache 297381888 [ 262.339962][T18538] rss 53248 [ 262.343126][T18538] shmem 297373696 [ 262.346813][T18538] mapped_file 3153920 [ 262.350855][T18538] dirty 0 [ 262.353839][T18538] writeback 0 [ 262.357134][T18538] workingset_refault_anon 6196 [ 262.362007][T18538] workingset_refault_file 4953 [ 262.366766][T18538] swap 127426560 [ 262.370317][T18538] swapcached 569344 [ 262.374161][T18538] pgpgin 373897 [ 262.377627][T18538] pgpgout 301134 [ 262.381202][T18538] pgfault 260844 [ 262.384747][T18538] pgmajfault 1435 [ 262.388460][T18538] inactive_anon 46886912 [ 262.392734][T18538] active_anon 249442304 [ 262.396970][T18538] inactive_file 0 [ 262.400619][T18538] active_file 45056 [ 262.404514][T18538] unevictable 0 [ 262.407966][T18538] hierarchical_memory_limit 314572800 [ 262.413351][T18538] hierarchical_memsw_limit 9223372036854771712 [ 262.419514][T18538] total_cache 297381888 [ 262.423682][T18538] total_rss 53248 [ 262.427302][T18538] total_shmem 297373696 [ 262.431472][T18538] total_mapped_file 3153920 [ 262.435995][T18538] total_dirty 0 [ 262.439449][T18538] total_writeback 0 [ 262.443273][T18538] total_workingset_refault_anon 6196 [ 262.448610][T18538] total_workingset_refault_file 4953 [ 262.453936][T18538] total_swap 127426560 [ 262.458004][T18538] total_swapcached 569344 [ 262.462356][T18538] total_pgpgin 373897 [ 262.466340][T18538] total_pgpgout 301134 [ 262.470401][T18538] total_pgfault 260844 [ 262.474545][T18538] total_pgmajfault 1435 [ 262.478692][T18538] total_inactive_anon 46886912 [ 262.483488][T18538] total_active_anon 249442304 [ 262.488190][T18538] total_inactive_file 0 [ 262.492378][T18538] total_active_file 45056 [ 262.496705][T18538] total_unevictable 0 [ 262.500674][T18538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18534,uid=0 [ 262.515576][T18538] Memory cgroup out of memory: Killed process 18534 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:57268kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 263.645956][T18551] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 263.655910][T18551] CPU: 1 UID: 0 PID: 18551 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.655984][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.655999][T18551] Call Trace: [ 263.656005][T18551] [ 263.656012][T18551] __dump_stack+0x1d/0x30 [ 263.656096][T18551] dump_stack_lvl+0xe8/0x140 [ 263.656117][T18551] dump_stack+0x15/0x1b [ 263.656138][T18551] dump_header+0x81/0x220 [ 263.656156][T18551] oom_kill_process+0x342/0x400 [ 263.656235][T18551] out_of_memory+0x979/0xb80 [ 263.656266][T18551] try_charge_memcg+0x610/0xa10 [ 263.656303][T18551] charge_memcg+0x51/0xc0 [ 263.656325][T18551] __mem_cgroup_charge+0x28/0xb0 [ 263.656404][T18551] shmem_get_folio_gfp+0x470/0xd60 [ 263.656455][T18551] shmem_write_begin+0xa8/0x190 [ 263.656483][T18551] generic_perform_write+0x184/0x490 [ 263.656520][T18551] shmem_file_write_iter+0xc5/0xf0 [ 263.656553][T18551] __kernel_write_iter+0x2d6/0x540 [ 263.656648][T18551] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 263.656677][T18551] dump_user_range+0x61e/0x8f0 [ 263.656722][T18551] elf_core_dump+0x1de7/0x1f80 [ 263.656812][T18551] ? 0xffffffffff600000 [ 263.656845][T18551] coredump_write+0xb12/0xe30 [ 263.656890][T18551] vfs_coredump+0x143a/0x20d0 [ 263.656939][T18551] ? __memcg_slab_free_hook+0xbc/0x230 [ 263.656978][T18551] ? kmem_cache_free+0xe4/0x3d0 [ 263.657008][T18551] ? proc_coredump_connector+0x114/0x220 [ 263.657053][T18551] get_signal+0xd84/0xf70 [ 263.657116][T18551] arch_do_signal_or_restart+0x96/0x440 [ 263.657151][T18551] irqentry_exit_to_user_mode+0x5b/0xa0 [ 263.657187][T18551] irqentry_exit+0x12/0x50 [ 263.657249][T18551] asm_exc_page_fault+0x26/0x30 [ 263.657269][T18551] RIP: 0033:0x0 [ 263.657281][T18551] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 263.657293][T18551] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 263.657313][T18551] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 263.657328][T18551] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 263.657345][T18551] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 263.657362][T18551] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 263.657417][T18551] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 263.657456][T18551] [ 263.657463][T18551] memory: usage 307200kB, limit 307200kB, failcnt 30609 [ 263.887013][T18551] memory+swap: usage 431656kB, limit 9007199254740988kB, failcnt 0 [ 263.894919][T18551] kmem: usage 9656kB, limit 9007199254740988kB, failcnt 0 [ 263.902060][T18551] Memory cgroup stats for /syz4: [ 263.902386][T18551] cache 301801472 [ 263.911051][T18551] rss 2314240 [ 263.914328][T18551] shmem 301793280 [ 263.918015][T18551] mapped_file 3153920 [ 263.922104][T18551] dirty 0 [ 263.925047][T18551] writeback 0 [ 263.928322][T18551] workingset_refault_anon 6207 [ 263.933101][T18551] workingset_refault_file 8325 [ 263.937856][T18551] swap 127442944 [ 263.941487][T18551] swapcached 552960 [ 263.945290][T18551] pgpgin 394943 [ 263.948769][T18551] pgpgout 320557 [ 263.952333][T18551] pgfault 262519 [ 263.955875][T18551] pgmajfault 1487 [ 263.959595][T18551] inactive_anon 58392576 [ 263.963867][T18551] active_anon 246247424 [ 263.968017][T18551] inactive_file 20480 [ 263.972059][T18551] active_file 12288 [ 263.975853][T18551] unevictable 0 [ 263.979333][T18551] hierarchical_memory_limit 314572800 [ 263.984701][T18551] hierarchical_memsw_limit 9223372036854771712 [ 263.990854][T18551] total_cache 301801472 [ 263.994996][T18551] total_rss 2314240 [ 263.998785][T18551] total_shmem 301793280 [ 264.002960][T18551] total_mapped_file 3153920 [ 264.007489][T18551] total_dirty 0 [ 264.011038][T18551] total_writeback 0 [ 264.014894][T18551] total_workingset_refault_anon 6207 [ 264.020157][T18551] total_workingset_refault_file 8325 [ 264.025433][T18551] total_swap 127442944 [ 264.029498][T18551] total_swapcached 552960 [ 264.033830][T18551] total_pgpgin 394943 [ 264.037899][T18551] total_pgpgout 320557 [ 264.041989][T18551] total_pgfault 262519 [ 264.046106][T18551] total_pgmajfault 1487 [ 264.050240][T18551] total_inactive_anon 58392576 [ 264.055008][T18551] total_active_anon 246247424 [ 264.059664][T18551] total_inactive_file 20480 [ 264.064161][T18551] total_active_file 12288 [ 264.068472][T18551] total_unevictable 0 [ 264.072458][T18551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18539,uid=0 [ 264.087321][T18551] Memory cgroup out of memory: Killed process 18539 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:57196kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 264.125567][T18540] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 264.135558][T18540] CPU: 0 UID: 0 PID: 18540 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.135597][T18540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.135611][T18540] Call Trace: [ 264.135616][T18540] [ 264.135623][T18540] __dump_stack+0x1d/0x30 [ 264.135642][T18540] dump_stack_lvl+0xe8/0x140 [ 264.135661][T18540] dump_stack+0x15/0x1b [ 264.135680][T18540] dump_header+0x81/0x220 [ 264.135729][T18540] oom_kill_process+0x342/0x400 [ 264.135761][T18540] out_of_memory+0x979/0xb80 [ 264.135789][T18540] try_charge_memcg+0x610/0xa10 [ 264.135826][T18540] charge_memcg+0x51/0xc0 [ 264.135854][T18540] __mem_cgroup_charge+0x28/0xb0 [ 264.135876][T18540] shmem_get_folio_gfp+0x470/0xd60 [ 264.135937][T18540] shmem_write_begin+0xa8/0x190 [ 264.135958][T18540] generic_perform_write+0x184/0x490 [ 264.135987][T18540] shmem_file_write_iter+0xc5/0xf0 [ 264.136054][T18540] __kernel_write_iter+0x2d6/0x540 [ 264.136148][T18540] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 264.136178][T18540] dump_user_range+0x61e/0x8f0 [ 264.136234][T18540] elf_core_dump+0x1de7/0x1f80 [ 264.136264][T18540] ? 0xffffffffff600000 [ 264.136286][T18540] coredump_write+0xb12/0xe30 [ 264.136384][T18540] vfs_coredump+0x143a/0x20d0 [ 264.136425][T18540] ? __memcg_slab_free_hook+0xbc/0x230 [ 264.136524][T18540] ? kmem_cache_free+0xe4/0x3d0 [ 264.136556][T18540] ? proc_coredump_connector+0x114/0x220 [ 264.136594][T18540] get_signal+0xd84/0xf70 [ 264.136621][T18540] arch_do_signal_or_restart+0x96/0x440 [ 264.136686][T18540] irqentry_exit_to_user_mode+0x5b/0xa0 [ 264.136778][T18540] irqentry_exit+0x12/0x50 [ 264.136806][T18540] asm_exc_page_fault+0x26/0x30 [ 264.136822][T18540] RIP: 0033:0x0 [ 264.136832][T18540] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 264.136840][T18540] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 264.136924][T18540] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 264.136934][T18540] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 264.136944][T18540] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 264.136954][T18540] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 264.136964][T18540] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 264.136984][T18540] [ 264.136992][T18540] memory: usage 305700kB, limit 307200kB, failcnt 30840 [ 264.366591][T18540] memory+swap: usage 412612kB, limit 9007199254740988kB, failcnt 0 [ 264.374558][T18540] kmem: usage 9664kB, limit 9007199254740988kB, failcnt 0 [ 264.381719][T18540] Memory cgroup stats for /syz4: [ 264.384488][T18540] cache 282517504 [ 264.393095][T18540] rss 2281472 [ 264.396376][T18540] shmem 280948736 [ 264.400006][T18540] mapped_file 3608576 [ 264.404243][T18540] dirty 0 [ 264.407178][T18540] writeback 12288 [ 264.410971][T18540] workingset_refault_anon 6207 [ 264.415790][T18540] workingset_refault_file 8706 [ 264.420550][T18540] swap 127217664 [ 264.424112][T18540] swapcached 544768 [ 264.428003][T18540] pgpgin 396532 [ 264.431483][T18540] pgpgout 326859 [ 264.435022][T18540] pgfault 262599 [ 264.438557][T18540] pgmajfault 1488 [ 264.442201][T18540] inactive_anon 268038144 [ 264.446535][T18540] active_anon 15200256 [ 264.450651][T18540] inactive_file 0 [ 264.454300][T18540] active_file 1605632 [ 264.458289][T18540] unevictable 0 [ 264.461755][T18540] hierarchical_memory_limit 314572800 [ 264.467144][T18540] hierarchical_memsw_limit 9223372036854771712 [ 264.473308][T18540] total_cache 282517504 [ 264.477464][T18540] total_rss 2281472 [ 264.481313][T18540] total_shmem 280948736 [ 264.485491][T18540] total_mapped_file 3608576 [ 264.490008][T18540] total_dirty 0 [ 264.493518][T18540] total_writeback 12288 [ 264.497672][T18540] total_workingset_refault_anon 6207 [ 264.503011][T18540] total_workingset_refault_file 8706 [ 264.508292][T18540] total_swap 127217664 [ 264.512374][T18540] total_swapcached 544768 [ 264.516774][T18540] total_pgpgin 396532 [ 264.520788][T18540] total_pgpgout 326859 [ 264.524851][T18540] total_pgfault 262599 [ 264.528909][T18540] total_pgmajfault 1488 [ 264.533177][T18540] total_inactive_anon 268038144 [ 264.538072][T18540] total_active_anon 15200256 [ 264.542684][T18540] total_inactive_file 0 [ 264.546842][T18540] total_active_file 1605632 [ 264.551360][T18540] total_unevictable 0 [ 264.555333][T18540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18538,uid=0 [ 264.570277][T18540] Memory cgroup out of memory: Killed process 18538 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:57032kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 264.590182][ T8855] bridge_slave_1: left allmulticast mode [ 264.595901][ T8855] bridge_slave_1: left promiscuous mode [ 264.601592][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.609573][ T8855] bridge_slave_0: left allmulticast mode [ 264.615289][ T8855] bridge_slave_0: left promiscuous mode [ 264.621020][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.676554][ T8855] dvmrp8 (unregistering): left allmulticast mode [ 264.717863][ T8855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.728020][ T8855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.738790][ T8855] bond0 (unregistering): Released all slaves [ 264.747516][ T8855] bond1 (unregistering): Released all slaves [ 264.827083][ T8855] hsr_slave_0: left promiscuous mode [ 264.835244][ T8855] hsr_slave_1: left promiscuous mode [ 264.840811][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.848306][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.860225][ T8855] veth1_macvtap: left promiscuous mode [ 264.865854][ T8855] veth0_macvtap: left promiscuous mode [ 264.871813][ T8855] veth1_vlan: left promiscuous mode [ 264.877081][ T8855] veth0_vlan: left promiscuous mode [ 264.947746][ T8855] team0 (unregistering): Port device team_slave_1 removed [ 264.957792][ T8855] team0 (unregistering): Port device team_slave_0 removed [ 265.693516][T18573] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 265.703397][T18573] CPU: 0 UID: 0 PID: 18573 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.703426][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.703437][T18573] Call Trace: [ 265.703444][T18573] [ 265.703450][T18573] __dump_stack+0x1d/0x30 [ 265.703471][T18573] dump_stack_lvl+0xe8/0x140 [ 265.703492][T18573] dump_stack+0x15/0x1b [ 265.703511][T18573] dump_header+0x81/0x220 [ 265.703580][T18573] oom_kill_process+0x342/0x400 [ 265.703615][T18573] out_of_memory+0x979/0xb80 [ 265.703650][T18573] try_charge_memcg+0x610/0xa10 [ 265.703684][T18573] charge_memcg+0x51/0xc0 [ 265.703717][T18573] __mem_cgroup_charge+0x28/0xb0 [ 265.703736][T18573] shmem_get_folio_gfp+0x470/0xd60 [ 265.703777][T18573] shmem_write_begin+0xa8/0x190 [ 265.703806][T18573] generic_perform_write+0x184/0x490 [ 265.703827][T18573] shmem_file_write_iter+0xc5/0xf0 [ 265.703855][T18573] __kernel_write_iter+0x2d6/0x540 [ 265.703920][T18573] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 265.703946][T18573] dump_user_range+0x61e/0x8f0 [ 265.703983][T18573] elf_core_dump+0x1de7/0x1f80 [ 265.704146][T18573] ? 0xffffffffff600000 [ 265.704172][T18573] coredump_write+0xb12/0xe30 [ 265.704224][T18573] vfs_coredump+0x143a/0x20d0 [ 265.704254][T18573] ? __memcg_slab_free_hook+0xbc/0x230 [ 265.704273][T18573] ? kmem_cache_free+0xe4/0x3d0 [ 265.704400][T18573] ? proc_coredump_connector+0x114/0x220 [ 265.704436][T18573] get_signal+0xd84/0xf70 [ 265.704470][T18573] arch_do_signal_or_restart+0x96/0x440 [ 265.704580][T18573] irqentry_exit_to_user_mode+0x5b/0xa0 [ 265.704654][T18573] irqentry_exit+0x12/0x50 [ 265.704691][T18573] asm_exc_page_fault+0x26/0x30 [ 265.704711][T18573] RIP: 0033:0x0 [ 265.704722][T18573] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 265.704731][T18573] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 265.704758][T18573] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 265.704772][T18573] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 265.704783][T18573] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 265.704795][T18573] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 265.704807][T18573] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 265.704899][T18573] [ 265.704905][T18573] memory: usage 307200kB, limit 307200kB, failcnt 33685 [ 265.933754][T18573] memory+swap: usage 431916kB, limit 9007199254740988kB, failcnt 0 [ 265.941686][T18573] kmem: usage 7984kB, limit 9007199254740988kB, failcnt 0 [ 265.948794][T18573] Memory cgroup stats for /syz4: [ 265.949346][T18573] cache 305991680 [ 265.957944][T18573] rss 110592 [ 265.961146][T18573] shmem 305799168 [ 265.964780][T18573] mapped_file 3153920 [ 265.968755][T18573] dirty 0 [ 265.971694][T18573] writeback 0 [ 265.974988][T18573] workingset_refault_anon 6233 [ 265.979853][T18573] workingset_refault_file 12977 [ 265.984713][T18573] swap 127709184 [ 265.988327][T18573] swapcached 286720 [ 265.992144][T18573] pgpgin 419648 [ 265.995648][T18573] pgpgout 344844 [ 265.999181][T18573] pgfault 263465 [ 266.002813][T18573] pgmajfault 1538 [ 266.006456][T18573] inactive_anon 270819328 [ 266.010789][T18573] active_anon 35348480 [ 266.014852][T18573] inactive_file 57344 [ 266.018863][T18573] active_file 57344 [ 266.022718][T18573] unevictable 0 [ 266.026218][T18573] hierarchical_memory_limit 314572800 [ 266.031598][T18573] hierarchical_memsw_limit 9223372036854771712 [ 266.037743][T18573] total_cache 305991680 [ 266.041989][T18573] total_rss 110592 [ 266.045714][T18573] total_shmem 305799168 [ 266.049892][T18573] total_mapped_file 3153920 [ 266.054419][T18573] total_dirty 0 [ 266.057876][T18573] total_writeback 0 [ 266.061698][T18573] total_workingset_refault_anon 6233 [ 266.067026][T18573] total_workingset_refault_file 12977 [ 266.072496][T18573] total_swap 127709184 [ 266.076570][T18573] total_swapcached 286720 [ 266.080970][T18573] total_pgpgin 419648 [ 266.084947][T18573] total_pgpgout 344844 [ 266.089017][T18573] total_pgfault 263465 [ 266.093159][T18573] total_pgmajfault 1538 [ 266.097358][T18573] total_inactive_anon 270819328 [ 266.102227][T18573] total_active_anon 35348480 [ 266.106830][T18573] total_inactive_file 57344 [ 266.111340][T18573] total_active_file 57344 [ 266.115671][T18573] total_unevictable 0 [ 266.119723][T18573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18532,uid=0 [ 266.134399][T18573] Memory cgroup out of memory: Killed process 18532 (syz.4.4224) total-vm:93324kB, anon-rss:1292kB, file-rss:57380kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 266.475556][T18533] syz.4.4224 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 266.486618][T18533] CPU: 1 UID: 0 PID: 18533 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.486647][T18533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.486712][T18533] Call Trace: [ 266.486719][T18533] [ 266.486726][T18533] __dump_stack+0x1d/0x30 [ 266.486747][T18533] dump_stack_lvl+0xe8/0x140 [ 266.486803][T18533] dump_stack+0x15/0x1b [ 266.486822][T18533] dump_header+0x81/0x220 [ 266.486840][T18533] oom_kill_process+0x342/0x400 [ 266.486941][T18533] out_of_memory+0x979/0xb80 [ 266.486968][T18533] try_charge_memcg+0x610/0xa10 [ 266.487009][T18533] charge_memcg+0x51/0xc0 [ 266.487027][T18533] __mem_cgroup_charge+0x28/0xb0 [ 266.487046][T18533] filemap_add_folio+0x111/0x360 [ 266.487071][T18533] __filemap_get_folio+0x31e/0x650 [ 266.487148][T18533] filemap_fault+0x447/0xb60 [ 266.487167][T18533] __do_fault+0xbc/0x200 [ 266.487193][T18533] handle_mm_fault+0xf78/0x2be0 [ 266.487294][T18533] ? __rcu_read_lock+0x37/0x50 [ 266.487320][T18533] ? __pte_offset_map_lock+0x1d4/0x230 [ 266.487366][T18533] __get_user_pages+0x102a/0x1ed0 [ 266.487400][T18533] get_dump_page+0xb5/0x250 [ 266.487419][T18533] dump_user_range+0x145/0x8f0 [ 266.487454][T18533] elf_core_dump+0x1de7/0x1f80 [ 266.487529][T18533] ? 0xffffffffff600000 [ 266.487557][T18533] coredump_write+0xb12/0xe30 [ 266.487662][T18533] vfs_coredump+0x143a/0x20d0 [ 266.487699][T18533] ? __memcg_slab_free_hook+0xbc/0x230 [ 266.487760][T18533] ? kmem_cache_free+0xe4/0x3d0 [ 266.487793][T18533] ? proc_coredump_connector+0x114/0x220 [ 266.487844][T18533] get_signal+0xd84/0xf70 [ 266.487874][T18533] arch_do_signal_or_restart+0x96/0x440 [ 266.487901][T18533] irqentry_exit_to_user_mode+0x5b/0xa0 [ 266.487933][T18533] irqentry_exit+0x12/0x50 [ 266.488020][T18533] asm_exc_page_fault+0x26/0x30 [ 266.488112][T18533] RIP: 0033:0x0 [ 266.488181][T18533] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 266.488189][T18533] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 266.488202][T18533] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 266.488212][T18533] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 266.488222][T18533] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 266.488233][T18533] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 266.488252][T18533] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 266.488272][T18533] [ 266.488332][T18533] memory: usage 306480kB, limit 307200kB, failcnt 34907 [ 266.729511][T18533] memory+swap: usage 427412kB, limit 9007199254740988kB, failcnt 0 [ 266.737488][T18533] kmem: usage 7968kB, limit 9007199254740988kB, failcnt 0 [ 266.744612][T18533] Memory cgroup stats for /syz4: [ 266.744947][T18533] cache 301314048 [ 266.753530][T18533] rss 90112 [ 266.756632][T18533] shmem 301277184 [ 266.760326][T18533] mapped_file 3190784 [ 266.764371][T18533] dirty 0 [ 266.767310][T18533] writeback 16384 [ 266.770953][T18533] workingset_refault_anon 6233 [ 266.775706][T18533] workingset_refault_file 13826 [ 266.780542][T18533] swap 127696896 [ 266.784101][T18533] swapcached 299008 [ 266.787898][T18533] pgpgin 421913 [ 266.791368][T18533] pgpgout 348252 [ 266.794908][T18533] pgfault 263493 [ 266.798453][T18533] pgmajfault 1552 [ 266.802106][T18533] inactive_anon 237625344 [ 266.806438][T18533] active_anon 63078400 [ 266.810496][T18533] inactive_file 0 [ 266.814137][T18533] active_file 73728 [ 266.817937][T18533] unevictable 0 [ 266.821476][T18533] hierarchical_memory_limit 314572800 [ 266.826902][T18533] hierarchical_memsw_limit 9223372036854771712 [ 266.833081][T18533] total_cache 301314048 [ 266.837307][T18533] total_rss 90112 [ 266.840972][T18533] total_shmem 301277184 [ 266.845139][T18533] total_mapped_file 3190784 [ 266.849631][T18533] total_dirty 0 [ 266.853111][T18533] total_writeback 16384 [ 266.857268][T18533] total_workingset_refault_anon 6233 [ 266.862582][T18533] total_workingset_refault_file 13826 [ 266.867994][T18533] total_swap 127696896 [ 266.872158][T18533] total_swapcached 299008 [ 266.876525][T18533] total_pgpgin 421913 [ 266.880507][T18533] total_pgpgout 348252 [ 266.884586][T18533] total_pgfault 263493 [ 266.888647][T18533] total_pgmajfault 1552 [ 266.892812][T18533] total_inactive_anon 237625344 [ 266.897740][T18533] total_active_anon 63078400 [ 266.902353][T18533] total_inactive_file 0 [ 266.906544][T18533] total_active_file 73728 [ 266.910958][T18533] total_unevictable 0 [ 266.914928][T18533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18547,uid=0 [ 266.929657][T18533] Memory cgroup out of memory: Killed process 18547 (syz.4.4224) total-vm:93324kB, anon-rss:1036kB, file-rss:57344kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 268.344550][T18569] syz.4.4224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 268.354419][T18569] CPU: 1 UID: 0 PID: 18569 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.354449][T18569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.354463][T18569] Call Trace: [ 268.354471][T18569] [ 268.354479][T18569] __dump_stack+0x1d/0x30 [ 268.354499][T18569] dump_stack_lvl+0xe8/0x140 [ 268.354617][T18569] dump_stack+0x15/0x1b [ 268.354631][T18569] dump_header+0x81/0x220 [ 268.354647][T18569] oom_kill_process+0x342/0x400 [ 268.354682][T18569] out_of_memory+0x979/0xb80 [ 268.354745][T18569] try_charge_memcg+0x610/0xa10 [ 268.354775][T18569] charge_memcg+0x51/0xc0 [ 268.354795][T18569] __mem_cgroup_charge+0x28/0xb0 [ 268.354870][T18569] shmem_get_folio_gfp+0x470/0xd60 [ 268.354904][T18569] shmem_write_begin+0xa8/0x190 [ 268.354921][T18569] generic_perform_write+0x184/0x490 [ 268.354948][T18569] shmem_file_write_iter+0xc5/0xf0 [ 268.354984][T18569] __kernel_write_iter+0x2d6/0x540 [ 268.355008][T18569] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 268.355031][T18569] dump_user_range+0x61e/0x8f0 [ 268.355113][T18569] elf_core_dump+0x1de7/0x1f80 [ 268.355202][T18569] ? 0xffffffffff600000 [ 268.355304][T18569] coredump_write+0xb12/0xe30 [ 268.355347][T18569] vfs_coredump+0x143a/0x20d0 [ 268.355461][T18569] ? __memcg_slab_free_hook+0xbc/0x230 [ 268.355483][T18569] ? kmem_cache_free+0xe4/0x3d0 [ 268.355580][T18569] ? proc_coredump_connector+0x114/0x220 [ 268.355611][T18569] get_signal+0xd84/0xf70 [ 268.355635][T18569] arch_do_signal_or_restart+0x96/0x440 [ 268.355702][T18569] irqentry_exit_to_user_mode+0x5b/0xa0 [ 268.355735][T18569] irqentry_exit+0x12/0x50 [ 268.355764][T18569] asm_exc_page_fault+0x26/0x30 [ 268.355786][T18569] RIP: 0033:0x0 [ 268.355854][T18569] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 268.355862][T18569] RSP: 002b:0000200000000458 EFLAGS: 00010217 [ 268.355877][T18569] RAX: 0000000000000000 RBX: 00007f4dfde86090 RCX: 00007f4dfdc2f6c9 [ 268.355967][T18569] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000000100000 [ 268.355979][T18569] RBP: 00007f4dfdcb1f91 R08: 0000200000000640 R09: 0000200000000640 [ 268.355989][T18569] R10: 0000200000000600 R11: 0000000000000206 R12: 0000000000000000 [ 268.356003][T18569] R13: 00007f4dfde86128 R14: 00007f4dfde86090 R15: 00007fffec048418 [ 268.356038][T18569] [ 268.356044][T18569] memory: usage 307200kB, limit 307200kB, failcnt 36380 [ 268.585863][T18569] memory+swap: usage 420964kB, limit 9007199254740988kB, failcnt 0 [ 268.593772][T18569] kmem: usage 7316kB, limit 9007199254740988kB, failcnt 0 [ 268.600909][T18569] Memory cgroup stats for /syz4: [ 268.601302][T18569] cache 294785024 [ 268.610001][T18569] rss 155648 [ 268.613240][T18569] shmem 294785024 [ 268.616863][T18569] mapped_file 3153920 [ 268.620859][T18569] dirty 0 [ 268.623791][T18569] writeback 307200 [ 268.627503][T18569] workingset_refault_anon 6313 [ 268.632298][T18569] workingset_refault_file 15783 [ 268.637149][T18569] swap 127537152 [ 268.640779][T18569] swapcached 458752 [ 268.644582][T18569] pgpgin 461394 [ 268.648031][T18569] pgpgout 389251 [ 268.651597][T18569] pgfault 263998 [ 268.655172][T18569] pgmajfault 1613 [ 268.658799][T18569] inactive_anon 200568832 [ 268.663190][T18569] active_anon 94507008 [ 268.667317][T18569] inactive_file 0 [ 268.671020][T18569] active_file 36864 [ 268.674831][T18569] unevictable 0 [ 268.678290][T18569] hierarchical_memory_limit 314572800 [ 268.683689][T18569] hierarchical_memsw_limit 9223372036854771712 [ 268.689841][T18569] total_cache 294785024 [ 268.694023][T18569] total_rss 155648 [ 268.697747][T18569] total_shmem 294785024 [ 268.701917][T18569] total_mapped_file 3153920 [ 268.706481][T18569] total_dirty 0 [ 268.709965][T18569] total_writeback 307200 [ 268.714236][T18569] total_workingset_refault_anon 6313 [ 268.719581][T18569] total_workingset_refault_file 15783 [ 268.724974][T18569] total_swap 127537152 [ 268.729038][T18569] total_swapcached 458752 [ 268.733388][T18569] total_pgpgin 461394 [ 268.737358][T18569] total_pgpgout 389251 [ 268.741495][T18569] total_pgfault 263998 [ 268.745564][T18569] total_pgmajfault 1613 [ 268.749716][T18569] total_inactive_anon 200568832 [ 268.754599][T18569] total_active_anon 94507008 [ 268.759186][T18569] total_inactive_file 0 [ 268.763419][T18569] total_active_file 36864 [ 268.767781][T18569] total_unevictable 0 [ 268.771832][T18569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4224,pid=18573,uid=0 [ 268.786593][T18569] Memory cgroup out of memory: Killed process 18573 (syz.4.4224) total-vm:93324kB, anon-rss:1164kB, file-rss:59688kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 268.892711][T18551] syz.4.4224 (18551) used greatest stack depth: 7288 bytes left