last executing test programs: 47.631984356s ago: executing program 2 (id=556): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 46.235850631s ago: executing program 2 (id=560): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) unshare(0x24000200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) (fail_nth: 4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x2, 0x25, 0x28, 0x1, 0x0, 0x3, 0x0, 0xa, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x90d9c302f7ecfd05, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="e67afec5c3c4368f"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @void}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/13], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000018110000009ebf05e1b78072ce1cc68f9886eacd0a8acf6bfcc1f4b7de9d4f8a56a9ec42c0e236428d54038ba1f11ad3fff88ed69d1c33cee5b4dad825ab8d0e5df6ee94725525fb19", @ANYRES32=r10, @ANYRES32=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 45.757016963s ago: executing program 2 (id=567): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x300, 0x20}, @exit], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x18) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 45.668817287s ago: executing program 2 (id=573): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x439, 0x8}, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095b05199c5bdffffffffffffff7f7b2a23", @ANYRESOCT=r1, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r5, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 44.74900013s ago: executing program 2 (id=596): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800e9ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000400000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x1, 0x5, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000001c0)={0x80000002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r8, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x45, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="b9d803bd0ecbc97d3c3c4b3379b10c29df93def68bad8750e4cd1f334a3551ca814e2be2b0b4e53b9b70286eef4dc9", 0x2f}, {&(0x7f0000000240)="9b5988f29245aae833adc4626acbeef72df15989c51bba682a0bc90822c2d5acb4054e2d2dce6423765d9378dc7919bac986953c3bed9857b6e98442e68c8d61bef1e5fbb1e2b8969e30efe738f57795c521acae4ab54530fcac2073a9c545d30572c472c5ee09467c3fde18c46efef1af6c0a90ae", 0x75}, {&(0x7f00000002c0)="b7253c320e199e92b969fbd3cf5799c5e6154cbabe9d5641bdb9b4632b402bccf52cdf1ad7f84061c313e2c2ed7d5c053252a620e8d6af46fb2110344b", 0x3d}, {&(0x7f0000000380)="0baa4695b688eba30b6e43cb862eb85cee58c46b1b70a13e98a637e02689394be91635310dd7024d0a250b2c36f5752013cccd48e8992791cd8e86d91537e8c0823b817d9370f79a8fe27e6cc1ddde462020de95820cb49d61", 0x59}, {&(0x7f0000000300)="ff05091fde524a0899ddea7d7bfe", 0xe}, {&(0x7f0000000540)="5372ef7cfe37be8eea858494ff3d65f4103615079dd968513919160fb4c00bd2bcb5e693930e5671687536dc9cc7c206eb12215d9194752e5c48749ded3934c40f31", 0x42}, {&(0x7f0000000600)="05cd6ee936d94926a6165d97f26f0bf84a218eb50dc5b2066b12a61a24fd00d2262a85f18f94951be792f11a37903c86edcbc7415efb4779deca8be4f43d7e7ccf257014d5fa6d19e6c10267c87af880df52f200e95e9f99ce8038115d549e31b097bf0dd4c072a035d91d1f0778f338527d9e6b85fed89c7e7bc37af9ef4b97e4a8ac1a1f1c188626f899263805ef85ca8f3adba6c5cb8d5382d6966147c22391c2993928b13f2aaf72900e662eec3cc3e7072dd688b0b086d5be867a5b3c5957503753b5ee3a89c909c77e8fbd22f6af43e86e7d64", 0xd6}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000700)="90def2cd7d5d2c306fc7e1f0a3c5d19e6031ce6af3693829c5c4bb747509d464f3c944b8415af6fe1f0356d7ee91458d352977d7f6dc43272dc17b7d93c7e3778fc803ece99d6ebe91c36fe37d859be5fb2a04075a4e80ba752ec74281fbd99f7c4e008e4736eb304bcc780f741cac248ed01413d2f05bf0eb92ec5b97f4a5b9636b1d01c4c9b2137152b6b492718a0e696a7d4b1909433fca6ff9510736daea4ce930d3e4d0fc28d9b00099817d61db7f2b66cce8168d985a99aacf4ff8b4bd1b9b66635995060536c4caca8bcc420ad42b6cf7430ee91a06a7b6c77415076c709caea65d6ebcb3dcd5135567ae6d6c2b9a077a51a4d383df", 0xf9}], 0x9, &(0x7f0000000c00)=ANY=[@ANYBLOB="c80000000000000029000000360000008715000000000000098804954ea4fd3db39d92860f492ddee6b36db4a0bc95382a15a2dcf18cf11905432a312f0a209125ee365b23494b9c80a78b2f7da372e64ca16b5336c4e6009a455ad3b5475aa5ee8ecf2e5be08691facea6cbd1c0e6a4c6f08d1ab39fb16bb450baac2c000c04959342be04f25c57fac6c3e0e67bde7f2efdcabc2e64c48dc76024c9c20400000003000100c910fe8000000000000000000000000000aac20400000006000100000024000000000000002900000032000000fe8000"/232, @ANYRES32=0x0, @ANYBLOB="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"], 0x228}}, {{&(0x7f0000000940)={0xa, 0x4e20, 0x80, @remote, 0x5e}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000980)="02b497", 0x3}, {&(0x7f0000000e40)="84a2e430f03bb8dc5822a65bbe4539c22ba805562927b5cd827e939f6c9db2a9997631de1704e4c914c1aa9ff9c57f42ec460c59b056176334f913f0e428760c53e6503819a7b979b2f1621456b3322bf58edaef832cf072fb6d36b7ffde7d2bffec8077f2b01ea57cdd0a8cd719a53d987af1d4c18607e1d344d51d0d1a7cb4a2637764f9b4c320a7542334a9c32a286d44e8e056b883d0bb576a34254c146c32b596b698bce39b0f8bedda71860665e16977084a33434a03a75d22c40b292cf840dc397bc6af9aaa979b95f1128d3ed660f4569925fe01aa85a10331a94c0fb959c11ec7b6d2b07bd265bc12c365bfbc3a90", 0xf3}, {&(0x7f0000000f40)="502651bb44bbc1106cd87444067733497d09e0414fa420ead05ad949dde3891d8c94b5fa63d534aff17234c5ee5f29de6e1073700c62cdc87e383b9445d8aae9c5cb6ddab137b9ad6430ada096c706dc572368c98d56afe91bd3634eac1418002397f8e0ee2dd08417f7b8bceefeb968110046091764872bf35877e2d9815460765f95a5a808c9970b12aa75dc475dde8414c4795c8584a551b5e04cac0b0aa07559", 0xa2}, {&(0x7f0000000a00)="ea0c3dc41249fa5cf8cf03ea3ef3010492fdbeda75de40", 0x17}, {&(0x7f0000001000)="242e7d66d2f40e2ea7e8a76c6942ce3b47368bf747057804f72f2ac9de0e2a30b358762484a7b4f0cb861d699b1b4776104a4f66a8e6234c120fbf9b9ac6110b1fb775834f9c35fb028fc7ca54e815f65d373cd196ab3c8f865a3f498124c5ac7c4f40209688f81820799f99fc09d520c98f95bda0a3088cf5c44df6a0f012accb10139849ce6113eb", 0x89}, {&(0x7f00000010c0)="6af0454ce0aeefeb3a66668048d50cb67d48b0c66b4ab3276b7d24ef45dc9f75487e9d4fd0dd7bba9f3bac720a4743a0bd1317266f35947fd9a8840139d58dcfa9c1f18639298a203f44a2cd48daf758b7cf8c9d7542b80dd86941aefab2a49b3184c5b3c419274af6e56d9e3f68baa023eae025c076e6ac29b904717be9da625fb72f79a8c9aa5b705ecc28d3e48021", 0x90}, {&(0x7f0000000b40)='UB(\n', 0x4}, {&(0x7f0000001180)="129380abd28e404208dff3d400ca48b850781af4f462527c72fffae005a6d1dd0c6f607e417431515ecdeebbc701712a0dbc01687131425c33483aa83ae32fb87047b8b3538026bba08c5b16fad7bb2c790aa55f50ff8e52a2fa1ecb3a1a5fa3d4b1d904", 0x64}, {&(0x7f00000023c0)="beb7c87f7b8be5fe06e02579ab835e21c461e89d0600ab2ff62876ec214a51bcf47cfa43742af476109e0fc0a0b5e9532c08bbdb6592761d75705c637c7b098e1d3df59580a9058b3c754c8072102214816bdb4b059765d277fe4f32798798ef7ed569f599aa829b2e192ac9ce15f348459dc5d75b12073923b5f2b53621778f22a34836c1bcefc48d403065d361bc3ce00b8fef075e500478286433e58ff6fea49be2d957ed832c53e9b8e4368c1e3a4c4da8544d68d0e232c48d3d2d3deebf4a4c76e938d407ab64dbca49d65d81b1fbda82fc6c2199f68058b5a5a8d4da7310987b7fc59f82e9a7bd6877e37c318e51eb53e4d13b7e7f701d4591c3c9eb1bd5c8b2456e31e30182efe6c098a0196dc9c9d780f4ffdb813401e3b44176d74736bbbe1fd9d897576c86afd12c6acc7682a0f94a8495c17d6f28bf885f39b1f2284cd14a7123321925026521b0731bf9a1c90806a818f3d3ed506113a4027b125ace4c893bf0d1cc38f747253f3005e1a04541b3a8c01500bf1e5f0669445e71e6946ea25216b143e596c039f9d7df8aa749127ecb409698488f7905f3a30b7e2d6645b97a289e95a746713e2b3e46c58b4211249265c5ed6d01e36a89d2bea200ff11c27b975fb650d004f6f7ce61d8a06f0ceccfe5fec0afd656b42438bc38e174824ca7c892f8c2a92c9a26ca31187765dba48a956de7fc3b3d134971bd749730df28e49b8337cfe9383986251b678dd5c3934a1403c00df24f65010dd16acb96b89348f671058ff0024b2572b9347b7ff5665abd0750c8b33e6224ac9187160efc0f445b50edf779ce1fd85fc80394236b9c848c82d5eed6db6a9f572cdab1694883928d16f9b412c90d9703233f73426c528ae720c8f4afe4687090ecfa5e9a88b6de9d36269ecedeffbc52978a7aa170d334c93326b442fa3db50266fcc79dde9328d0ccd30d9410eb1515b88dea08b24a50e0fa1593f679eac6c42dc59bf437aace1400f40798cab2807c1b0440c5d76dd483d0836c43863b186f5d837ce9a6cea9bfa98c01df3b2a16e1749c4470648aaaf7cc0a2026dd11291cc9d6b45a3f32920dc1c0d0b41f74a068ac09c13f842c91b57eb6fc5d26657674e565b303bffc6852c0679cd83c25c282bfcc454e9325b4e1ecf25e4596ab2000e6c9cdf6febb06dca6af0d302a22de563be27269f3cd4bc3dac10b3c0b91e8c47a9ecc4768d9ce678d05c5d496740ab8c4f5a489ea3d836d0f4afa98c70b836f4b5afb3161452b213e8c4ea48010d33c066f9b57e50c4ba01aa64e5d573e396e44c0d74bece2f767e358281964abb1d1fc07c6d0a386ab1ba4ba236fa8b4ee9127125c3692ee3a22ad330ddb1cb81acba5ce0adca8e06ae414bf13669f34f6dfee0199ae68298386c7b6192c7d8012f7fa04cd8f67710e3f57f11b7be52ece225fa203892adfb2498c73519164085070e25418c57ed19758fb2fc1b41fa9465e0bac09d20200c3f06bcf8700541e33d74d85d5bfef8ee16613703df38c605e7ebba041c79a3aed46daae9b8adfbc7551195e2fa89b885073c3a2ea4b4374949bcad2125192d869cffaaaaa437591b7032b077390dbb3eed2289af714399882dc23908c5c1c3233f5739e3bfde4ec7d3ca4c6d9f198bb033271073f8d06a5bc64c31c7d976729689c8e111f1d7c309d0171d9e343e8716e7a3cd12e04840302ddabae710f533514c21559cced7d40b712d09a54c8891cd55aeaa1e2f1448c4807c503699392877da10ab28ef1655b868e6a68a209829df3b6ac7bf91469328378f4c2a1ab229041db1365862b66fb4386af4aabb5d37abfad5f206aca7c2acc7e367e4950704de5974c02c78c66a02661624b72e03fd6849473d7120e3b6c8e915bca6e7b8e984e8bf21450791ea341d21bff11a5524532b951fad4789c09d93e28ceb86fda2d96123493570abfe3dd40a58c12967d238de786f707d1a9eb069c69de0b328c4305af39c572343afc1b41a968de1f82d11420e7d2e3d1a804ed640671bdd7ac9f97aae27e376aafe5fcf74635867164b3ed435d994d2baf65f418a03e204c1db7d8fb7f02a5c5788ebcc7d250375b4dd7a2230d0ff194f801af036cccccb60eb43e14e73946630117c94f76605b4ea0dd2797475910e6309ec9cb4f41b48eec7904d60ed5955dbf1a037f7fbb924431ceace59537d52ee0558c6b990c803ea30e9c6ce16cfc878296f6724c415af130da32f9575f6866c05d7f1463fbf9db0ac25d4b4b8d048f8e4e6488952859d6ec9cd8a57d0e8f35a8ecc5a1751e893b84048ebf2da38c3981ec7abc934093374072859241f64777b30542e8edae5e14974114f9b60df75bf0dcc353223f9efac16da9181f77b8ff94997ad7e2ea30785a6f18efce835cc38d1e5606c336195860fd135b4dccc97bde4480c6ca59871949cd82e7ed08dcc3bc6669202013cefbff0c8901967716df5efa6adf575fac548e81cd16c1480cd680763d54c945bd657212e7af1b26c74c09be7c8c6bf4f7c378097ab5a967778d16cea03ba433859cff5af341a73dd91961c1f7af2ef0cbe67a4690c13e6225526e98675d05edd40a5b7969870ec45d4013cb9dbb76b5d5ec79ad7c3dace651cec247ebe97c05057b78fe780ac744a16ec111c6594a37d47c662d78eb0b033af631ec7375eb20d35cb644b2eee0976d08644d6ab03adc910485260ad1940982ae17da67a4345f8f9eeb1bd588d1c91b33c87e6e1f1e90ba2c930ff99c2d6ff0d6a3d56b96d7f49082bd8c296aeaa3fbf9cc675d7ed47ca5f385f70f47eea5d6895fbc852652ddf0053cd6b508dff5da85afc203d3ff2b465a3e04bbc3c609ab51db7a3c1347367e2f26a3a1b4e8a51ab5da6ddb44c5871d69040abcc92d5291763205b5c3c2f2655c76654cd74ef79226f20be6407ac47fa254d85672434d0352a71d89caff654c18bd1d699dd130f61d531e9bd429d1a4e3be998d50c155285f58dd1a141cd10375caa045c397bccc816d8b123a2b3094f1f57dd487df5ca16189c5914515dc7c064a12120d22e0321a4bbd570c816b5e776b52b1935adc1ef09f5bbfb7f294cec1deb81f6131fd70430b97eecaa02d3a9a6048662116d558aa812d0704487767a6c96bb576aabda599c36876e1b4603015864c4b570d76dd7de64723f0bf68b3e6660b89513d361c8a8fa1a472d5b1f1874651d06c16d751ca62731626129e2607c8e81ddb3a7f0940ea56511efe77aed89f3e9270374568a8d330749e7bdee07e6617650a96f7ce6fbbb3cc801c4a0bae2af84d3ae02bba4e8d5b2b075448c07eafdedaecea5a2d614d12fce029acbada9a8a332be6de0677949172651ae63716f5a648a97688a1311dd469850814947b7e4456ee2b0e49e34f0dc6b76eb1cd944ce8bf7cc5b97502228175bf36e0c2f64cdad451704733a1b3b31a5cfa5676b9f1d4dac057b81c32bb3d17366cc781476f5bf5cc4883cb328bf6816bd0a5a9b398d9522d65b7441abb4786523b1cf3cdd44257c079e4b3d68536de620188bde65a393a2bee7a7f42ca50f85dcc506c390c70dd1e5ac0e43464f646d9d2644fdda21cd9a135310a1949d09234b6cccab917c1844b4b2b55ac1556ec28138ef96c65c8a97c13333f350f30af481a20d26676765e53af6c802d2c40d91f5d0c4f4785e0012c2fbab16a11912e2b329aa3ff836ba1a1f595ac08db89264417a8dbe07e3b3f1cd00093e0e570d638ed384f3b20b26f76fc08ffd437d3982c786d700ae1cb1ca4e6bd353cee364e407ced54226da25b03c9c80c1d20ac4b742582f98013b577a581666586bf4f87432e9e3934527e249b157f18740fd5513307703d4ce7b41f8d88140439bd9e31ad9b65979e316c61328a0719cddf4d8d9b2eb7233de0e64f7aa1abffff93dc425fce600028390bcc95070d6a1e9d8a07eaf29a114bf12cd20e1cca04efcb52c1e6070dffb026093def778edc8b4751d4dbac1d729425cd372f08f0c419148c37a18843a380b8b01fb6f3f1b0257c32206eb1ce07387100c79c89cbf70fced0b2aed14f949599554c1703808513dd27b740c958a16ce7a146db20ffd5975f2ca824bbc5817b1f10ab776239a96611590e5117cdb6b65385bc066dca77ba870453b576831b9a032e05fdd0a10cc2971a3da3893c6c0300478f455df629592f1c8d7521e05d930b47e05e8487ddfa1832b4a22a65b42edb9b289b23b7b13549795b59479cecbb913da34a9cd2f7544784559f5e69f9e487f0e826ecff0a3c4e540dc47cf1ae6f18b537c0c2d44db2b2ae393cb5441af1fc13cc244e243f265bb4c074b173e180a6e7f81a92e7fd8fe64dbe928cb0c097897936a3a7bca898d3cea310f89feb46d67c8eb114bcc7494ff3ef39294529febaf3dc0e3172337b757590edbe1d0813a94e1e225c6e005b0615a98413202d36b272f782490e9acfe4705c6e0c9312b92e6cec910775abebed4c55bbb3b532e644c88cbfaba16fb896c0a22972ea332d2cb1d96b72eef7a3fa6024b1c2c5cba17b055b35b8810b1e53c645703d2d3bef6ea1e885db0aff05e25660a41dfdc0dbce4b63b15f1768c36aee6ba1da7aa1d5e14b1124a3228be908e2a5d3c6b8a6cd87aee28908d10ee68b95c5d28db28b6687e2f3b2eef81d2ae899c933477572c225905bb826285b0d013af268dbef786d7021afe1a466984ffbade8c8e4eebfc935c575812f9721ba2d17fa5af7244ff204ebacc0aac08987e5616ad2c81bddcc2d26f62f5d13bb5a269252bd9a296d62098788e31b9c91d0067d5f8287cf69fa3f7b5d3bed605dcbaec8fcb09212d0533ff0616f10259ae120b94b088c7f283786659bf482cb8ec07825eeddfe5636eb97647e80b05cc6ecebb72e53f87923a42df44e63376afec674ac0ef500565b64f6c71c5eb53d95e8460b060ec8df992390b57d0884b1a15f328a7a1c699e78dfeb7ac2c5eb087d791c793f826e9130f45b9d517fef1bdc12ed5c971c56e253aafc8cabb22a1594a600c8384e0ef9b68cae162751a818514d46750fea13a4087e0905eedf400422743fb6dd1cce901e530898bcd299569be2c856063064d0aa5107d80f115427eb683f83b758c3f008d6e2ed1198c0b4fcd7dcf325e6c3768bf58165e6b904aac66e0960cf0801b41b6a76d6abd6085bc2ed85c7f211f569500fe23895ef23eaf043196c5a886153aa5acd7693092bb8bd6dafc3c943a877c6ffb31417afb04915deb3675f17222855f0de7372b0f3e3d83c617ba4ec70008dccf34c16aad137c504dc1e3122162d8c0dd6ee4a666c500c7958a27913a2da98c7907c47847e2f9d8fab87462dd19c85bca778396d675ac0143abea2b16ca2be5da63409c46de7bfd673110d59e12283ceaf57c263343633e76c4638767b4ae9242d969b035ca81d33a3a7192ce7d380d7c96db74df6a8c88d62ab58b7966f65ff9f1abc60f5243fa4c46e2acde80b9e32ffe96218e3630d76fd0455440b4f5790b8d69fff91dedee471a6266d5c3638b086dc1e0de160b7c8a9fbc9aaf77a228b8b25b7503da1aabd9a6d90d600b53386d557b9c48644a51e5b13c751adb145ae457a373dc9b540a3cf1995925f8544f425aa4474c36ca43c700524f941908a5f7767578e4c84b4deb9c1fd2cbcd9facd475087030b2e0374cdd8cfc334e681ccfe385e5a8b06322d32a3ab0593cb111f2d2b71c9500df016b59964448408871c2026f9e9ca2d46abcb68129a2b8f46ec51f498402e6cae348382070eb03d", 0x1000}], 0x9, &(0x7f00000033c0)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x21, 0x10, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0xe0, 0x10, 0x0, 0xac, 0x0, [@remote, @rand_addr=' \x01\x00', @local, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2c, 0x3, '\x00', [@hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0xa}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, r8}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000003580)="f2a72c4f180506228b9c1e6f112aff797705e1fd65d107c957c2760e4249e78c0708792e1e9b4fa909fefa59df793353ac055629d0e183f2356dbf8b4b1cedf244f0c6d353d1b3f04729de66a85c81d8a15b65e12b34ed2dcea41c43d0e1a15981e838aa8a125c85c5220fffb1691f23ec6d39ed7b7121bcfc6d44498129bf65a9c6bba90ff07a3e600cc7471c4feb5ef3d5dd6b1f8af67917fac7d48ee5623df994df65f4b50c58d98a8e9854974e71b1a0d6db05e6cfe0d20d46fd3c5618d54a8fad0db8894024f276ef1a11ca5a8b", 0xd0}, {&(0x7f0000003680)="194f78efadeb62c37fdda34d05f53f8d42704f33bb980984a8f9e885033bc03613b37ffe57f29a56483ca86830c03bec738f247fa8ab5cb253f35e3312cc8a11ebcfdf81e6d0a1c6b7e455900509e8498255fd6e5e9e7c05eb8dcb73f638d09d0e837e3216078d48c701f81aa9c94fa791011fb5511e8b7701a989b9ec359d3522f654100c298017dd8f1a3e7b01225e0ea6164c30e0a8f0bf190bb82d9d035e3112e6533a72a8e36f8c4849306294598b81063d4a6fe8d27640f68a744ecd5c04b3277fc9885d4a3408a62a78e9de", 0xcf}, {&(0x7f0000003780)="38c5720ee19d48b7f2ec5f47cee06be445b74eda18dd4ff51787787433673ee567e00b3e32b9a897beb9f3aa19be9c3cf91e01a9a2568cdee25fa3a5ccb2ffaef82e225f625c83699ef9baf37806a4a5f5058f2ce0d78972644367c10a9ec486b7b2fa5adb3634619cc426fc890bca29b0fbd5b699639f6e1a4a9da7745da33167ea2220fd795a24b6fa32859728e929f9c2ce019c3372024d3bd319bc25a598f048f90f0c0200400d3b846dfdf1491e87e5d1ff16b35060e659ab9361ec4e27fd769ba947f029078f94b580e320c3dfaddfa3f256b633090197bf3516327dcd61905c386d02c2e8", 0xe8}, {&(0x7f0000003880)="36b8bd2a6c05f973b72f741e932de9cf6415a0afd56717c7f367c3f291897eccd44fc0e2bbd56593162b246e29584b6e487f796a7d41ca7d71ea178fb9143a73e6ad21e3b00723dd78837b3ad2562462ba66c3cd8cb7377f0e71e972dbca4053788238d289a472461d2736eb68cbdcf24ed3ddfa59b14edf19ba782c20c0d6f40898e5a4ab56978407a1d8738a79720eb5aa97c3546ad5ed4ba5b37569c8a5c59d778ead1b2115d685e47c56fd72bbf07113d999395cb45ad885442d5b875176934fcfd82596473b9366543ea9a83efcbf5970816d9e2f912eb169a6ae94f92536a54cbc2ea9e3473d6fffd47e98949e9dc96576c04d", 0xf6}], 0x4, &(0x7f0000003980)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x0, 0x0, [@private0, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00']}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf1c0}}, @hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x0, 0x53, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x110}}], 0x3, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) bind$bt_hci(r9, &(0x7f0000000140), 0x6) 42.205475368s ago: executing program 2 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 35.628742414s ago: executing program 1 (id=739): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x300, 0x20}, @exit], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 35.4986192s ago: executing program 1 (id=742): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="91", 0x1, 0x4004094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xff7fffff}, 0x1c) 35.454774202s ago: executing program 1 (id=744): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000c9f71711412eac6d5e661b84b9", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x24}, 0x94) 35.361206086s ago: executing program 1 (id=745): r0 = syz_open_dev$loop(&(0x7f0000001f80), 0x6, 0x22000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007f0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000400), &(0x7f0000000340)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) exit(0x7) statx(r5, 0x0, 0x1000, 0x10, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r4, &(0x7f0000000340)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000002000)) 34.477067007s ago: executing program 1 (id=750): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800e9ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000400000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x1, 0x5, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000001c0)={0x80000002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r8, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x45, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="b9d803bd0ecbc97d3c3c4b3379b10c29df93def68bad8750e4cd1f334a3551ca814e2be2b0b4e53b9b70286eef4dc9", 0x2f}, {&(0x7f0000000240)="9b5988f29245aae833adc4626acbeef72df15989c51bba682a0bc90822c2d5acb4054e2d2dce6423765d9378dc7919bac986953c3bed9857b6e98442e68c8d61bef1e5fbb1e2b8969e30efe738f57795c521acae4ab54530fcac2073a9c545d30572c472c5ee09467c3fde18c46efef1af6c0a90ae", 0x75}, {&(0x7f00000002c0)="b7253c320e199e92b969fbd3cf5799c5e6154cbabe9d5641bdb9b4632b402bccf52cdf1ad7f84061c313e2c2ed7d5c053252a620e8d6af46fb2110344b", 0x3d}, {&(0x7f0000000380)="0baa4695b688eba30b6e43cb862eb85cee58c46b1b70a13e98a637e02689394be91635310dd7024d0a250b2c36f5752013cccd48e8992791cd8e86d91537e8c0823b817d9370f79a8fe27e6cc1ddde462020de95820cb49d61", 0x59}, {&(0x7f0000000300)="ff05091fde524a0899ddea7d7bfe", 0xe}, {&(0x7f0000000540)="5372ef7cfe37be8eea858494ff3d65f4103615079dd968513919160fb4c00bd2bcb5e693930e5671687536dc9cc7c206eb12215d9194752e5c48749ded3934c40f31", 0x42}, {&(0x7f0000000600)="05cd6ee936d94926a6165d97f26f0bf84a218eb50dc5b2066b12a61a24fd00d2262a85f18f94951be792f11a37903c86edcbc7415efb4779deca8be4f43d7e7ccf257014d5fa6d19e6c10267c87af880df52f200e95e9f99ce8038115d549e31b097bf0dd4c072a035d91d1f0778f338527d9e6b85fed89c7e7bc37af9ef4b97e4a8ac1a1f1c188626f899263805ef85ca8f3adba6c5cb8d5382d6966147c22391c2993928b13f2aaf72900e662eec3cc3e7072dd688b0b086d5be867a5b3c5957503753b5ee3a89c909c77e8fbd22f6af43e86e7d64", 0xd6}, {&(0x7f00000013c0)="c4b6d9de554852d22a33d38744f8bf68a6476d2cdd5583e1d86959de108f648e5a07b1d346ce22f3ff401c537565f776ff507f785bdc75de288f4495ebde9754d3e5c1ba68cc9e70279aa770d64b4843a6ff3e71dbe684140db712534d867b169874a9b0d5c12c6e25c03ed6241df3282980d015f0e99fef79eab5e7db6c318cabaf0cae45b9d698a4c1f0f198cbaa297ccf134e1579db64bfb15e9f8e2a6d730531b7e4ee8d40f3111af4ad43b78dffaabcef47ee1b2bb2bba1ed7be22ffb491475f52b6b5896a5b365e921a1e7dcc29fcecaef6df109b9484a84dc331f82f636a0486a5487b0a7de58a86c6e2fe891ac5ef8d16472718b65283aa1bf1446b500ff3d9fa389f03e98dc0fff4af301f8c2fb9e996091c9d0669b2a6e1626762b298325b44cfd331963e41ef73ffd2f738d6010d0b198182a8ddc2b9ace74a541b852c26ff55a13336d1215c829ea1cfc48e41bd6c205a606c260b3be7f8b0c541563b425056ef5db86752d482fea4e3e1d8387cb0e6756a19c8109b274115728ed39b1a1c0c7ef6d5d62218f30021248e942a17bb93d04f7265acfb6a49f36bccf96f4104fe7a006e9b040f235a911ff651f684821757a0cba5279f0f4bd96588a8eb02dc66aeb5022cf76e7e8fc15bc4c7c3d6f23eb37e897b34f48c13ab55cfab12c1e8e9ea2a178551f454ed4555c1455a7c05e8cd92d454adea7450bae63552758e71cfc5719387f4756ba463b3e4f2637428e28547f797382d5cad74783cf595de65c84238c699fc3dbad41d6e9bb38e954a089c01b2091bba6a8f084043113db6c0c0bef6962e0911ad4583eaf0937e27f91eb09561cdb9079434997e0b321c2711e14d8d03995e8f8b63ef3b29b838f927a884fcd44e0533ed89378a845ce57cd9a305a56e2b9d47e186b8856786db10d7e36a618fda1f80c6ec756e62eaafc0a4858ad2c92cecba601ece2ddbc0e08cff6d4fcadbefc038e79b1c0a9740fcf3e094de39fccf9289d0de8e5c0d85ba3a116655a643ad8b751541a88c06c582a8229fa83dbaa88a5e8136b64322b0d0041986a026152d6f5ae6fbb475b8dcb3a954e9f7feb483af7215fd30a5820446f470347ae12bb25fb2985b5904fb34452a29a25cd07e5639524bca699e6529a48cbd7663d6cd7ee7cf7fb2f370d8904a23ddb51309f73c8fd2ad69081306329e43fdf7e9755919c81512f1a0d3eae46d685098229a2322bdada6d45425adc51bb2303e8e43f6c6404fe1e2d6a1d36c037dc90aea1b3b262d7933b07070609569f0966b25be8320e54a3f3bdad41a93bdca6679169132b126a22f78ac49eca4a81bf0fee5e6f8c468d4a310e41f84171340e3decaf8323eb453378c7efdd2dfbdadea560ef8020d5ac9caf6510d3f989fd646906d3b8c75b67e854666372020ed4e3bf2ef2aa36793e49874a2833c9201d4f293870ec1293c92a5880bbac7af5135c0ac8ab3a3dc12aebdef52b94e7d17135b2ee98d0e2310de4269a72ddcbf0b4768ed20d65bb35ab565f720294987eb8d7697908b6c1f733cacb518c4b6330c500cab47f76e95170433584f3d758bc11013c3697cfd4d8f33b986a595d64e68965ad5e01a215b501a5b2b4c911b3393718a726744edf3040b13ff51626551f14d86551c9c2446d097f84bf0c3819e4c3ac14561cbdc8c42828fc316db6788bbb6e9171e786eebb8cae6c8f6b77c08cbba0d3e8bf9805743e438924c1dc7bd004ae968dbaf463772a1dc7f17034ac85c8740e00b6d139f554c40837bc8941ab977b9a0f1ed05ac068d6b0aa4c921dff181c3b6c5a8579011f40366928e542d2ef142425e62fe8162242db182a2fbc4a331daaee687733655f38d3c4b603ef8a72889b0c53d2a99a8361feaf5bde35f573de7112aeb7ed601dbfc2c3a52ea198c051416cdb5b8db6a5a28613ac1a179ec6139f499fc7b0e073cf163fdc141bc8031449ea4953f5cf0278f129ba0ca1b789238a7b66e706aad9bd4b4c9a1babfc050f7fe5924c3c5b283ce177029f2bf85df02995f13d8b4298e00f05f07062fe24a22aababad5a4a165843096f1cfd4f11c4f1bb131ab2c995f9f3aeea47c97bb0bf88b8272bfd09735d71f442f79db2ac945d38406c573b0b6625cef7798b4b8e2f2769e8e8df8e994782b57865c41d52fe0c042349e3c5e26061754917dc9ebe280a9adce6cb064c504e7761695676e02d00d3a80a1b2d499b0acaf6582a9628d97d996e884ddf020e9de497b08cecefdc8f6ec51a2e1182d7c862215ded0ad9320c63bce4312ca9a409ebf76e4ebfe8e989b259edee57e1fe2342c0270f2bfad1dc4b83dd89dacc52c541d4c3e58dfdb503e1bb2c8402b32813630685fd562e17f598e0211cb10039304ee0329a64d36f88879c54437026f38d6dc265d0f0f827a4a80cda8efb85cd6403dd492c73ff60d8c27b7f864d86aec39c66d40286b5bf23f25e28cfb36e48adbdbf9e81019457e6fd06075c3dbab353881a9717b28b12e626fb85da61bb8f253106115e4ef8a2854326b0ad08b69578ef6bf1f17f8ce470f48b12046f734ef0ccec09a3983e9211c933e15b0a4ad5750f54dd395b2577bbbac80c81454a118c7bffa2ddf30b37d9336ba87ea1a40a46596dd85b24688aebad3e20da97e7338215f43e5d0526159f67e836e5506ce00e31d039403ed30c0f70e14103119abd164e717c714348a5bf44c2b743e8139f167b44c34e571698c256b364c60863b2d86e423c7b70359f29a450ce813970c3fdd57d82cb5bb615db64e2290be913ad063a88d903960498714470bcbb02ca9b0d4117f8112f87484a2215704f88c677d77da9088c8ca9403a89da64d3a971ba9448d96b9a8611133d7949436284799b2a5528468f75a2b5a7d76386c77241ca9516a1690f82f1224e30f180fbc361fa9fe80b684002447d9f840f3ddb9a6967fdda14b6855357c74b39f530eace68bccab707f190e6ef82affc271f478cab6fdf83f58bee6b2232a0c11c4a3617e926c0bebf31f6ae23748f0ef721e5bdf749a8cb2cd0dd1b2e30b07b4eb43d32a1bb57709b27af206bd4e0b87afd6e4daca4880da69c12991cc63f2dcd0f9746f7b084ae2bd1b03e34a5078870e27549e02c15f9cc2f4655a34102e68881fa2bde7aaef444cb42b34540c73451d181ede736efc6619805fe68e0e3f522fa9787548fdce105fd860fe58a2a064e9a7302b1d9dbdd03a65fbaa49fd91babf616d4e3a109757b74d06ef69a9ad9cd8db389780709edbbf836889d475db4b1f2824d40a6ce7260cedc0fe2cae4c9af77ce8172249706bc0eeef6c16770feaddff04ae31724bc7896b819ab3dc45240516ea482bb44e44f1fa41bf8d6a9ab810180021cd1a1e69553dae60ea876c772ca53ecad61162bb0b0b1839293691a21fc91580ce71595d4cf691cae3ffae35da9bf880716cbac4dd582d598268fa8c4fc42b95e391f88af83901ed0f6faaad54bb13b503d0af18787f518c91f5345a84a795d7c6241093829356c6a43a9eb1d6ed2670becab7f2e850916c054b0a97655e31baafe856143d3db4da32724a6ad65e2aa266b0b21a554549ca7a8e0dd6a14a2d7b589481e197f169459ce4329ea2c308697e07786f847cf8683d1fe7d03d976c6367e4192c7be8f3a210e8cce706df54ce94de8e66a72fe64582decfa3aff0094f94aa1400f489a9836fcf14a63808861047760fe28131dc92ce9b70e95a2d5e840ac116c2bde9446d0a0ae0d314973c2cdb1e8434fa5d6cb085cd867486d8eb4e74c4a2294f1b3f50132187857fc96fac009c22a4b5923c0e3f978ef1447782744d1ced29edebb72574822b6c80c89ed293ebd14139defb35071b717f50b639a6210fcca237e36188d582e4a678d0871a6242d6dda1645639d1abff79f5ba07322635d46a7dea575eaa00c2ba6e5a38fc0330b2bfe566df814e254f2b644abda5bab1a37f256938842ae3051c0e05e8303ca83154d60d4bad65cb5ccabe4580e0046d4bb513afa14c64b064f4f84c65efd2645a32accbdf71b0504aec808f44adcc62feee3f181e3ee82333a94ad02b16ed528a5e76e033f380f189c4179546b030deddb72f9811363c7c2849b482c4def4a9acc656167318e2e555f00b397b4689c2348112cb5b995ed2688de16ef00d87f52063183e7755d7231c55748467a11e5c63ac00472cffea84bb84082ecfae389b61df142f9b44901f3a4b8490fa5bfca255268ee83fd5bc73929e148f810fc793cac7ad402c8acf6724f46f8e61459bcb9023d4332f4a397fe1ca15ee3a88aed10ab1c2ab33e9b7a49d127e89e02c9e0bbbbaf8e743eee0e8c2a3e677ffc17669ca1bfe86f5ca895f4d99c393edae544d4bc3e83cc3ffd7f48d23b7d4c64fbacc603405b50bb6977f47da432a0705c82878976051a601e40abb114abb31bb5e8e7d442388d298ccf609e4f3784b73bb6f34224fe035d0d7c3902c97200ec4c7a93e522418005e56144c65d120f62cc31dc618bf49c88401afdc5cdf500800151838ebb0f900de682e76187deabe84b7ac0614fcc1c1e714ebd9445e0a94bf272e3ee4eddcd9fb8b5b7e15b166a2da7f4f6e1fc8589ca55f70e25ee2c0bdc56a70e74f73eba8c5a342e819670fde05c469bd19d2ec903fbc46fca4cddf3a61d1be6055c610416ed1c8612641a86287a58bfae89d89d0b86be3112deb1d6c84086f4cf599e42c5afa6268135a101e20d1330bf20f501fcb4d7df5c67a4abe4ff13b2afd284e7695abc77e72ddcf16ec858f36ee1e6d03b5c76a29b6248c260a368ad85dfe3fe2e43733262f6bf850fc6cf1fda2bd6c1cfd7bd20207fadba8882bfcc40a2f8b8d9b9c248e4e7228100322036e51f1d564651ecb1944b24700c8812d4072e48ecb88e44c9c6cec13fdd46303f677f3cf37e901abd7c0f899019be731fa7d0530b542d89ebfe0d9a4cad59df4d55e8cff031667b3a532988645a7841c15b4364b717f8aa570ed985e0747979f020a0acf74f7981bc0d988571d55faf4dcc5485a327752c89c7129357058ce356a709cf3003be39d4c795501569b23176b1f1828ce60c7963e95bed56959265d85dbddd9b9e8ce8cf08ca2eb2fd5b49c0ab9422beadf3272726544db804a1b816eff304788a0158d9184611847b5bd8040f9894246cb5a648ca84004a8c405f245c145321ed3dd09d70c975bc9d756271dfc29a326a65cc96bc5abd88a0cc567b0ac46f37b6590195836233867cadf923764070d9c0be466956c7ec95cd8e109b4a0c48a90af83af6dd7181dcf5c52d05829f0d65804ef1b90db49441ccd0b1b643a6d3b018d0678bb4710e869828ecc5709768d5d693ab42986539ea308b55a34c4fe0ecf732f5702404d905e1c6fc08ab2f30baded261e244ec436ebc501f109c9870a3147532c0cfa7bcdf49776fd2a484d76ee9b9761a30dd007ebc5ea81273377a4ce2de1a9e511567caad3da1dad09b7769f6d2bb6a6678c70e0f44f61b5dd95e26b97163f1740348f4d61f87be7251f71a66a7876b3d32cd39fed41b878de7369faa2be7b8267b5bc88a12352e7dfb5619d0936352d312cb57c9b1a62292d4c396e7414428fe6005a287b37f064d8eabd89273d1e9c25f54a14fd5a067055d11ab353660e1cb9e8a4c39363c957b2e0b76ec7e2a9ced9df790a2c5e507305861dd3d3d6e1239bb6e1cc38b9cf2583c5ead6adb184c73d6f20eb9b95ed2e58eeeaf26c2443f8dbcd6457343605cd1943b987b3cfbbb3fe543b64b12056487e823", 0x1000}, {&(0x7f0000000700)="90def2cd7d5d2c306fc7e1f0a3c5d19e6031ce6af3693829c5c4bb747509d464f3c944b8415af6fe1f0356d7ee91458d352977d7f6dc43272dc17b7d93c7e3778fc803ece99d6ebe91c36fe37d859be5fb2a04075a4e80ba752ec74281fbd99f7c4e008e4736eb304bcc780f741cac248ed01413d2f05bf0eb92ec5b97f4a5b9636b1d01c4c9b2137152b6b492718a0e696a7d4b1909433fca6ff9510736daea4ce930d3e4d0fc28d9b00099817d61db7f2b66cce8168d985a99aacf4ff8b4bd1b9b66635995060536c4caca8bcc420ad42b6cf7430ee91a06a7b6c77415076c709caea65d6ebcb3dcd5135567ae6d6c2b9a077a51a4d383df", 0xf9}], 0x9, &(0x7f0000000c00)=ANY=[@ANYBLOB="c80000000000000029000000360000008715000000000000098804954ea4fd3db39d92860f492ddee6b36db4a0bc95382a15a2dcf18cf11905432a312f0a209125ee365b23494b9c80a78b2f7da372e64ca16b5336c4e6009a455ad3b5475aa5ee8ecf2e5be08691facea6cbd1c0e6a4c6f08d1ab39fb16bb450baac2c000c04959342be04f25c57fac6c3e0e67bde7f2efdcabc2e64c48dc76024c9c20400000003000100c910fe8000000000000000000000000000aac20400000006000100000024000000000000002900000032000000fe8000"/232, @ANYRES32=0x0, @ANYBLOB="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"], 0x228}}, {{&(0x7f0000000940)={0xa, 0x4e20, 0x80, @remote, 0x5e}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000980)="02b497", 0x3}, {&(0x7f0000000e40)="84a2e430f03bb8dc5822a65bbe4539c22ba805562927b5cd827e939f6c9db2a9997631de1704e4c914c1aa9ff9c57f42ec460c59b056176334f913f0e428760c53e6503819a7b979b2f1621456b3322bf58edaef832cf072fb6d36b7ffde7d2bffec8077f2b01ea57cdd0a8cd719a53d987af1d4c18607e1d344d51d0d1a7cb4a2637764f9b4c320a7542334a9c32a286d44e8e056b883d0bb576a34254c146c32b596b698bce39b0f8bedda71860665e16977084a33434a03a75d22c40b292cf840dc397bc6af9aaa979b95f1128d3ed660f4569925fe01aa85a10331a94c0fb959c11ec7b6d2b07bd265bc12c365bfbc3a90", 0xf3}, {&(0x7f0000000f40)="502651bb44bbc1106cd87444067733497d09e0414fa420ead05ad949dde3891d8c94b5fa63d534aff17234c5ee5f29de6e1073700c62cdc87e383b9445d8aae9c5cb6ddab137b9ad6430ada096c706dc572368c98d56afe91bd3634eac1418002397f8e0ee2dd08417f7b8bceefeb968110046091764872bf35877e2d9815460765f95a5a808c9970b12aa75dc475dde8414c4795c8584a551b5e04cac0b0aa07559", 0xa2}, {&(0x7f0000000a00)="ea0c3dc41249fa5cf8cf03ea3ef3010492fdbeda75de40", 0x17}, {&(0x7f0000001000)="242e7d66d2f40e2ea7e8a76c6942ce3b47368bf747057804f72f2ac9de0e2a30b358762484a7b4f0cb861d699b1b4776104a4f66a8e6234c120fbf9b9ac6110b1fb775834f9c35fb028fc7ca54e815f65d373cd196ab3c8f865a3f498124c5ac7c4f40209688f81820799f99fc09d520c98f95bda0a3088cf5c44df6a0f012accb10139849ce6113eb", 0x89}, {&(0x7f00000010c0)="6af0454ce0aeefeb3a66668048d50cb67d48b0c66b4ab3276b7d24ef45dc9f75487e9d4fd0dd7bba9f3bac720a4743a0bd1317266f35947fd9a8840139d58dcfa9c1f18639298a203f44a2cd48daf758b7cf8c9d7542b80dd86941aefab2a49b3184c5b3c419274af6e56d9e3f68baa023eae025c076e6ac29b904717be9da625fb72f79a8c9aa5b705ecc28d3e48021", 0x90}, {&(0x7f0000000b40)='UB(\n', 0x4}, {&(0x7f0000001180)="129380abd28e404208dff3d400ca48b850781af4f462527c72fffae005a6d1dd0c6f607e417431515ecdeebbc701712a0dbc01687131425c33483aa83ae32fb87047b8b3538026bba08c5b16fad7bb2c790aa55f50ff8e52a2fa1ecb3a1a5fa3d4b1d904", 0x64}, {&(0x7f00000023c0)="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", 0x1000}], 0x9, &(0x7f00000033c0)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x21, 0x10, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0xe0, 0x10, 0x0, 0xac, 0x0, [@remote, @rand_addr=' \x01\x00', @local, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2c, 0x3, '\x00', [@hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0xa}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, r8}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000003580)="f2a72c4f180506228b9c1e6f112aff797705e1fd65d107c957c2760e4249e78c0708792e1e9b4fa909fefa59df793353ac055629d0e183f2356dbf8b4b1cedf244f0c6d353d1b3f04729de66a85c81d8a15b65e12b34ed2dcea41c43d0e1a15981e838aa8a125c85c5220fffb1691f23ec6d39ed7b7121bcfc6d44498129bf65a9c6bba90ff07a3e600cc7471c4feb5ef3d5dd6b1f8af67917fac7d48ee5623df994df65f4b50c58d98a8e9854974e71b1a0d6db05e6cfe0d20d46fd3c5618d54a8fad0db8894024f276ef1a11ca5a8b", 0xd0}, {&(0x7f0000003680)="194f78efadeb62c37fdda34d05f53f8d42704f33bb980984a8f9e885033bc03613b37ffe57f29a56483ca86830c03bec738f247fa8ab5cb253f35e3312cc8a11ebcfdf81e6d0a1c6b7e455900509e8498255fd6e5e9e7c05eb8dcb73f638d09d0e837e3216078d48c701f81aa9c94fa791011fb5511e8b7701a989b9ec359d3522f654100c298017dd8f1a3e7b01225e0ea6164c30e0a8f0bf190bb82d9d035e3112e6533a72a8e36f8c4849306294598b81063d4a6fe8d27640f68a744ecd5c04b3277fc9885d4a3408a62a78e9de", 0xcf}, {&(0x7f0000003780)="38c5720ee19d48b7f2ec5f47cee06be445b74eda18dd4ff51787787433673ee567e00b3e32b9a897beb9f3aa19be9c3cf91e01a9a2568cdee25fa3a5ccb2ffaef82e225f625c83699ef9baf37806a4a5f5058f2ce0d78972644367c10a9ec486b7b2fa5adb3634619cc426fc890bca29b0fbd5b699639f6e1a4a9da7745da33167ea2220fd795a24b6fa32859728e929f9c2ce019c3372024d3bd319bc25a598f048f90f0c0200400d3b846dfdf1491e87e5d1ff16b35060e659ab9361ec4e27fd769ba947f029078f94b580e320c3dfaddfa3f256b633090197bf3516327dcd61905c386d02c2e8", 0xe8}, {&(0x7f0000003880)="36b8bd2a6c05f973b72f741e932de9cf6415a0afd56717c7f367c3f291897eccd44fc0e2bbd56593162b246e29584b6e487f796a7d41ca7d71ea178fb9143a73e6ad21e3b00723dd78837b3ad2562462ba66c3cd8cb7377f0e71e972dbca4053788238d289a472461d2736eb68cbdcf24ed3ddfa59b14edf19ba782c20c0d6f40898e5a4ab56978407a1d8738a79720eb5aa97c3546ad5ed4ba5b37569c8a5c59d778ead1b2115d685e47c56fd72bbf07113d999395cb45ad885442d5b875176934fcfd82596473b9366543ea9a83efcbf5970816d9e2f912eb169a6ae94f92536a54cbc2ea9e3473d6fffd47e98949e9dc96576c04d", 0xf6}], 0x4, &(0x7f0000003980)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0x0, 0x0, [@private0, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00']}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf1c0}}, @hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x0, 0x53, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x110}}], 0x3, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) bind$bt_hci(r9, &(0x7f0000000140), 0x6) 32.068613469s ago: executing program 1 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000c9f71711412eac6d5e661b84b9", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x24}, 0x94) 27.128385479s ago: executing program 32 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 16.952824232s ago: executing program 33 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000c9f71711412eac6d5e661b84b9", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x24}, 0x94) 3.581563344s ago: executing program 6 (id=1088): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0xff, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0xfffffffffffffffe, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x400, 0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x10, @vifc_lcl_ifindex=r3, @multicast2}, 0x10) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', '', [{0x20, 'cgroup.freeze\x00'}, {0x20, 'cgroup.freeze\x00'}], 0xa, "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"}, 0x1bd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800f5ff00008000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r5], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x50}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 3.275915158s ago: executing program 4 (id=1094): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) (fail_nth: 20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 3.156989274s ago: executing program 4 (id=1096): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040017) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="7e15399a76ec7db9de0f935c44f1ee5448f24853ca78fd62c6a9096931f23fe5fed7f8d50389febe4df54086a3e2c89c6c1c7dbf551d4bff85087f12d3017d45e9ffa045de6a41216631501991f0a1e0e0131676ca854d240955a7d1cd5fb764"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x9}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r8}, 0x10) time(0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000000000000007464757673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r10) 3.087248017s ago: executing program 4 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x850) r1 = socket$inet_icmp(0x2, 0x2, 0x1) writev(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000c9f71711412eac6d5e661b84b9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a150000000000000000000000000007020000f8fff6ffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r5}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x24}, 0x94) 2.751749642s ago: executing program 6 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @multicast1}, "a93a88c19c640ec98e51b5683ee58e25bfcdb2ba"}}}}}, 0x3e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4050, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0xc00, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2.332433112s ago: executing program 4 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @multicast1}, "a93a88c19c640ec98e51b5683ee58e25bfcdb2ba"}}}}}, 0x3e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4050, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0xc00, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2.144616721s ago: executing program 5 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x850) r1 = socket$inet_icmp(0x2, 0x2, 0x1) writev(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000c9f71711412eac6d5e661b84b9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a150000000000000000000000000007020000f8fff6ffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r5}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x24}, 0x94) 1.702276631s ago: executing program 5 (id=1116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0xffff}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1.692645041s ago: executing program 6 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) rename(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4890) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x0, 0x5, 0x84, @mcast1, @empty, 0x40, 0x7800, 0x1, 0x5eeb}}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5100230000b57497bd8844", @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.613474405s ago: executing program 5 (id=1119): r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = io_uring_setup(0x6ed5, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000440)=""/253, 0xfd, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000001ada00006b110e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.613190495s ago: executing program 0 (id=1120): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) r0 = io_uring_setup(0x10aa, &(0x7f00000000c0)={0x0, 0x861e, 0x40, 0x0, 0x40}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) 1.582872817s ago: executing program 0 (id=1122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@nouid32}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0/file0\x00', 0x1008411, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1, 0x316, &(0x7f0000000a00)="$eJzs3M9PE1sUwPHT0pYCgeni5b28l7xwoxvdTKDuDY0BY2wiQWr8kRgHOtWmY0s6DabGCKzcuDD+ES4IS3Ykyj/Axp0rN+7YmLiQhXFMZ6Y/gFZwoFTk+0nInPTeM3PvTGnOnWRm+/arx4WcreeMioTjSkIiIjsiCQlLXcjfht04Jq2W5eLQlw//37xz93oqnZ6cUWoqNXspqZQaGX375NmA322jX7YS97c/Jz9t/b317/b32Ud5W+VtVSxVlKHmSh8rxpxlqmzeLuhKTVumYZsqX7TNstfuLIlYpspZpYWFqjKK2eHBhbJp28ooVlXBvCqVkqqUq8p4aOSLStd1NTwoOEhmdWbGSAVMnj/mwaBLyuWU0SciA/taMqs9GRAAAOgpv/5vVPvhWkkfpP6PtK3/185tVoZurY/49f9GrFb/i7TU/w+a+zJVNtyo/+Mi0qz/S976oFP9X1XB6v/9FdHp9nL3xRHHaYSxdv2PVP/jVGh+xxv/0Sv31sbcgPofAAAAAAAAAAAAAAAAAAAAAIDTYMdxNMdxNG/b53/qaP0iEnefIPHaezxMdMnu69/84/qfDc0Xd0RGRKwXi5nFjLf1O2yKiCWmjIkm39zvg68Wx5aV20nVJOSdteTnLy1mvN+SVE7ybv64aJLYm+84U9fSk+PKszs/KoOt+UnR5K/2+cm9+dHaNiYXzrfk66LJ+3kpiSVZ/8m4ev7zcaWu3EjvOf6A2w8AAAAAgD+Brhoa6/f+1nZ9f7u3PvbavfV1RNrfH/DW12Nt1/cR+S/Sq1kDAAAAAHC22NWnBcOyzHKXghUR6fIhOgT1GR42q/6C3A59QhLq1OQGE0cac/3gwdJrYzu2Uxc91BkLBxrqaOwXL0rboH7bqFMfmQ6yZ0cTOeo5/Of1m68/7+PdGRM5zA4vr8cPmGnQIHbQTKMn9gMEAAAA4MQ0i/76JxO9HRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfQSbyKr9dzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH4XPwIAAP//Ymn+PQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x42, 0x103) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28001, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c73713d3078303030303030303030303031303030302c74696d656f75743d3078303030303030303030303030303030332c00b13fe026a3afe58bf3380ac11b8f52f69527c7ac92807dd5126593f5990749d888f1fa29b7e4faa407da82bc1d855cf667f6fc080ae2fd9b310d107457a2f48ae5db70fb9be5a971b41894a2f92e957c5d81bef684b3bb7ce0260f77f9f616a29fe8a89c768be81996577165"]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x69, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 1.555769468s ago: executing program 6 (id=1123): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.504600221s ago: executing program 5 (id=1124): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000007c0)=',#\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="183c7613b01d66571e583e7c88a8", 0xe, 0x40080, &(0x7f0000000200)={0x11, 0x1c, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6gre0\x00', r5, 0x29, 0xe, 0x1, 0x1, 0x5, @private0, @mcast2, 0x20, 0x700, 0x1, 0x1}}) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8, 0x5063}], 0x1, 0xffffffffffbffff8) dup2(r7, r8) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r9, 0x0, 0xfffffffff7fffffc}, 0xc) io_setup(0x8f0, &(0x7f0000002400)) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000008c0)={[{@overriderock}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@showassoc}, {@unhide}, {@nojoliet}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x0, 0x688, &(0x7f0000000100)="$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") 1.500377381s ago: executing program 6 (id=1125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x439, 0x8}, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095b05199c5bdffffffffffffff7f7b2a23", @ANYRESOCT=r1, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$SHM_UNLOCK(r5, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 1.283544521s ago: executing program 5 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x850) r1 = socket$inet_icmp(0x2, 0x2, 0x1) writev(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000c9f71711412eac6d5e661b84b9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a150000000000000000000000000007020000f8fff6ffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r5}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x24}, 0x94) 1.282893651s ago: executing program 6 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @multicast1}, "a93a88c19c640ec98e51b5683ee58e25bfcdb2ba"}}}}}, 0x3e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4050, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0xc00, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 1.166093086s ago: executing program 3 (id=1131): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x200) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) (fail_nth: 3) 909.362538ms ago: executing program 3 (id=1132): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) r0 = io_uring_setup(0x10aa, &(0x7f00000000c0)={0x0, 0x861e, 0x40, 0x0, 0x40}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) 844.546521ms ago: executing program 4 (id=1133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0xffff}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 741.582736ms ago: executing program 3 (id=1134): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$P9_RLERRORu(r3, &(0x7f0000000100)={0x10, 0x7, 0x2, {{0x3, '9p\x00'}, 0x400}}, 0x10) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000640)=ANY=[], 0xe) 731.791386ms ago: executing program 0 (id=1135): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x200) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 688.311428ms ago: executing program 0 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="dd5bc25da0fe0a7d15c2931800000000000000fff200000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) 657.35473ms ago: executing program 4 (id=1137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 616.692222ms ago: executing program 3 (id=1138): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x220400, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000280)=0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x2b, 0x1, 0x0, 0x0, "cdcaaaef38dee914f20f0f5363bb724084fad0657d64d45fb8f282cefa8e1aec803f550b6f46c2bf03591379626579be7f41b6c04d5bc3b4d8fca8f9b8f55dae"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040001) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x20, r5, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)=':$\'\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @func_proto, @fwd={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x65}, 0x20) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x110) 616.296852ms ago: executing program 0 (id=1139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x439, 0x8}, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095b05199c5bdffffffffffffff7f7b2a23", @ANYRESOCT=r1, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmctl$SHM_UNLOCK(r5, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 525.511576ms ago: executing program 3 (id=1140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x96}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0xa, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749d, 0x4, 0x0, 0x0, 0x0) 351.864454ms ago: executing program 3 (id=1141): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) getsockopt$inet_mreq(r1, 0x0, 0x24, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0x9}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xed}, 0x4c58, 0xd, 0xfffffffe, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(0x0, &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="a96a4284", 0x4}], 0x1}}], 0x1, 0x4044805) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) 291.967387ms ago: executing program 5 (id=1142): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x300}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x10000001}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) kernel console output (not intermixed with test programs): 5: 00007fff9d8ef838 [ 77.905443][ T5400] [ 78.269763][ T5410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.316265][ T5410] EXT4-fs (loop3): 1 truncate cleaned up [ 78.363815][ T5410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.452362][ T5420] netlink: 'syz.3.660': attribute type 12 has an invalid length. [ 78.514680][ T5423] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.568590][ T5425] smc: net device bond0 erased user defined pnetid SYZ0 [ 78.761396][ T5427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.780694][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.798045][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.819451][ T5428] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.847153][ T5428] ext4: Unknown parameter 'uid<00000000000000000000' [ 78.857668][ T3852] IPVS: starting estimator thread 0... [ 78.864754][ T5427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.896959][ T5428] EXT4-fs: dax option not supported [ 78.926032][ T5427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.952065][ T5432] IPVS: using max 2016 ests per chain, 100800 per kthread [ 78.993064][ T5427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.078489][ T2489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086913][ T2489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.097988][ T5443] syz.4.671 uses obsolete (PF_INET,SOCK_PACKET) [ 79.102060][ T2489] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.122068][ T2489] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.127111][ T5444] EXT4-fs: Ignoring removed nobh option [ 79.135926][ T5444] EXT4-fs: Ignoring removed bh option [ 79.164516][ T5444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.237208][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.265014][ T5457] EXT4-fs: inline encryption not supported [ 79.270862][ T5457] EXT4-fs: Ignoring removed orlov option [ 79.277133][ T5457] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 79.292843][ T5457] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 79.301155][ T5457] System zones: 0-1, 3-12 [ 79.306578][ T5457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.333945][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.384858][ T5462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.676'. [ 79.394352][ T5462] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 79.404434][ T5462] SELinux: failed to load policy [ 79.409990][ T5462] tmpfs: Unknown parameter 'md' [ 79.548924][ T5477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.560876][ T5477] EXT4-fs (loop1): 1 truncate cleaned up [ 79.567412][ T5477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.635793][ T5479] netlink: 'syz.1.682': attribute type 12 has an invalid length. [ 79.755859][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.881860][ T5487] set_capacity_and_notify: 7 callbacks suppressed [ 79.881875][ T5487] loop3: detected capacity change from 0 to 1024 [ 79.895441][ T5487] EXT4-fs: Ignoring removed nobh option [ 79.901045][ T5487] EXT4-fs: Ignoring removed bh option [ 79.914320][ T5487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.943045][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.029893][ T5493] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.039849][ T5493] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.075601][ T5495] random: crng reseeded on system resumption [ 80.089158][ T5497] FAULT_INJECTION: forcing a failure. [ 80.089158][ T5497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.102322][ T5497] CPU: 0 UID: 0 PID: 5497 Comm: syz.3.689 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.102349][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.102361][ T5497] Call Trace: [ 80.102367][ T5497] [ 80.102373][ T5497] __dump_stack+0x1d/0x30 [ 80.102448][ T5497] dump_stack_lvl+0xe8/0x140 [ 80.102474][ T5497] dump_stack+0x15/0x1b [ 80.102575][ T5497] should_fail_ex+0x265/0x280 [ 80.102665][ T5497] should_fail+0xb/0x20 [ 80.102818][ T5497] should_fail_usercopy+0x1a/0x20 [ 80.102846][ T5497] _copy_from_user+0x1c/0xb0 [ 80.102874][ T5497] kstrtouint_from_user+0x69/0xf0 [ 80.102895][ T5497] ? 0xffffffff81000000 [ 80.102987][ T5497] ? selinux_file_permission+0x1e2/0x320 [ 80.103020][ T5497] proc_fail_nth_write+0x50/0x160 [ 80.103056][ T5497] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.103140][ T5497] vfs_write+0x269/0x960 [ 80.103160][ T5497] ? vfs_read+0x4e6/0x770 [ 80.103179][ T5497] ? __rcu_read_unlock+0x4f/0x70 [ 80.103196][ T5497] ? __fget_files+0x184/0x1c0 [ 80.103217][ T5497] ? mutex_lock+0x58/0x90 [ 80.103284][ T5497] ksys_write+0xda/0x1a0 [ 80.103358][ T5497] __x64_sys_write+0x40/0x50 [ 80.103376][ T5497] x64_sys_call+0x2847/0x3000 [ 80.103400][ T5497] do_syscall_64+0xd8/0x2c0 [ 80.103433][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.103515][ T5497] RIP: 0033:0x7f58e6b6e1ff [ 80.103532][ T5497] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 80.103550][ T5497] RSP: 002b:00007f58e55d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 80.103566][ T5497] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58e6b6e1ff [ 80.103577][ T5497] RDX: 0000000000000001 RSI: 00007f58e55d70a0 RDI: 0000000000000004 [ 80.103645][ T5497] RBP: 00007f58e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.103657][ T5497] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 80.103670][ T5497] R13: 00007f58e6dc6038 R14: 00007f58e6dc5fa0 R15: 00007fff9d8ef838 [ 80.103694][ T5497] [ 80.387665][ T5504] loop4: detected capacity change from 0 to 512 [ 80.405752][ T5505] usb usb7: usbfs: process 5505 (syz.3.690) did not claim interface 0 before use [ 80.422387][ T5504] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.441981][ T5504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.468481][ T5504] EXT4-fs (loop4): 1 truncate cleaned up [ 80.476746][ T5504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.503662][ T5504] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 80.572568][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.699406][ T5525] netlink: 15 bytes leftover after parsing attributes in process `syz.1.700'. [ 80.766056][ T5530] netlink: 212 bytes leftover after parsing attributes in process `syz.1.702'. [ 81.343318][ T5540] netlink: 'syz.0.705': attribute type 12 has an invalid length. [ 81.474161][ T5543] FAULT_INJECTION: forcing a failure. [ 81.474161][ T5543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.487341][ T5543] CPU: 0 UID: 0 PID: 5543 Comm: syz.3.706 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.487373][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.487389][ T5543] Call Trace: [ 81.487426][ T5543] [ 81.487435][ T5543] __dump_stack+0x1d/0x30 [ 81.487465][ T5543] dump_stack_lvl+0xe8/0x140 [ 81.487494][ T5543] dump_stack+0x15/0x1b [ 81.487519][ T5543] should_fail_ex+0x265/0x280 [ 81.487621][ T5543] should_fail+0xb/0x20 [ 81.487644][ T5543] should_fail_usercopy+0x1a/0x20 [ 81.487668][ T5543] _copy_from_iter+0xcf/0xe70 [ 81.487742][ T5543] ? __alloc_skb+0x3bb/0x4d0 [ 81.487786][ T5543] ? __alloc_skb+0x24d/0x4d0 [ 81.487853][ T5543] netlink_sendmsg+0x471/0x6b0 [ 81.487921][ T5543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.488026][ T5543] __sock_sendmsg+0x145/0x180 [ 81.488045][ T5543] ____sys_sendmsg+0x31e/0x4a0 [ 81.488072][ T5543] ___sys_sendmsg+0x17b/0x1d0 [ 81.488119][ T5543] __x64_sys_sendmsg+0xd4/0x160 [ 81.488272][ T5543] x64_sys_call+0x17ba/0x3000 [ 81.488385][ T5543] do_syscall_64+0xd8/0x2c0 [ 81.488422][ T5543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.488440][ T5543] RIP: 0033:0x7f58e6b6f749 [ 81.488452][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.488510][ T5543] RSP: 002b:00007f58e55d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.488531][ T5543] RAX: ffffffffffffffda RBX: 00007f58e6dc5fa0 RCX: 00007f58e6b6f749 [ 81.488546][ T5543] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 81.488561][ T5543] RBP: 00007f58e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.488574][ T5543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.488645][ T5543] R13: 00007f58e6dc6038 R14: 00007f58e6dc5fa0 R15: 00007fff9d8ef838 [ 81.488667][ T5543] [ 81.733663][ T5546] loop3: detected capacity change from 0 to 512 [ 81.740502][ T5546] EXT4-fs: Mount option(s) incompatible with ext2 [ 81.927512][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 81.927532][ T29] audit: type=1400 audit(1766132645.955:3694): avc: denied { remount } for pid=5560 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.963055][ T5561] Process accounting resumed [ 81.980204][ T5563] ip6gretap0: entered promiscuous mode [ 81.987514][ T5563] ip6gretap0: left promiscuous mode [ 82.042388][ T29] audit: type=1326 audit(1766132646.075:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.065763][ T29] audit: type=1326 audit(1766132646.075:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.099176][ T29] audit: type=1326 audit(1766132646.125:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.122399][ T29] audit: type=1326 audit(1766132646.125:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.145713][ T29] audit: type=1326 audit(1766132646.125:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.169030][ T29] audit: type=1326 audit(1766132646.125:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.195018][ T5567] netlink: 44 bytes leftover after parsing attributes in process `syz.0.713'. [ 82.300382][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 82.559202][ T29] audit: type=1326 audit(2000000000.330:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.607202][ T29] audit: type=1326 audit(2000000000.330:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.630587][ T29] audit: type=1326 audit(2000000000.330:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 82.689452][ T5583] 9p: Bad value for 'rfdno' [ 82.827092][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 82.839017][ T5592] SELinux: failed to load policy [ 82.844389][ T5579] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 82.852210][ T5579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.717'. [ 82.879293][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 82.946074][ T5594] netlink: 60 bytes leftover after parsing attributes in process `syz.3.722'. [ 83.022424][ T5596] loop3: detected capacity change from 0 to 1024 [ 83.029481][ T5596] EXT4-fs: Ignoring removed nobh option [ 83.035108][ T5596] EXT4-fs: Ignoring removed bh option [ 83.069726][ T5596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.086357][ T5585] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 83.139942][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.720'. [ 83.150421][ T5585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.164702][ T5585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.174719][ T5585] bond1: (slave geneve2): making interface the new active one [ 83.192514][ T5585] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 83.210781][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.220284][ T5596] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 83.227980][ T5596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.723'. [ 83.242361][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.271214][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.279813][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.441150][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.492714][ T5614] smc: net device bond0 applied user defined pnetid SYZ0 [ 83.514541][ T5614] smc: net device bond0 erased user defined pnetid SYZ0 [ 83.634670][ T5625] Invalid ELF header type: 3 != 1 [ 84.006902][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 84.015927][ T5634] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 84.023577][ T5634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 84.052210][ T5632] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 84.085121][ T5640] loop1: detected capacity change from 0 to 1024 [ 84.112893][ T5640] EXT4-fs: Ignoring removed nobh option [ 84.118564][ T5640] EXT4-fs: Ignoring removed bh option [ 84.154949][ T5640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.173921][ T5644] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 84.189534][ T5640] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 84.242382][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.278255][ T5649] smc: net device bond0 applied user defined pnetid SYZ0 [ 84.301697][ T5649] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.346086][ T5652] 9pnet_fd: Insufficient options for proto=fd [ 84.495459][ T5661] loop1: detected capacity change from 0 to 512 [ 84.518559][ T5661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.549337][ T5661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.582273][ T5661] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.592716][ T5665] netlink: 'syz.0.746': attribute type 12 has an invalid length. [ 84.717139][ T5661] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 85.093070][ T5672] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 85.215241][ T5675] infiniband syz1: set active [ 85.220038][ T5675] infiniband syz1: added bond0 [ 85.244109][ T5675] RDS/IB: syz1: added [ 85.248339][ T5675] smc: adding ib device syz1 with port count 1 [ 85.254649][ T5675] smc: ib device syz1 port 1 has no pnetid [ 85.351434][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.454380][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.575571][ T3852] hid (null): report_id 3804673681 is invalid [ 85.581670][ T3852] hid (null): global environment stack underflow [ 85.588076][ T3852] hid (null): report_id 0 is invalid [ 85.593474][ T3852] hid (null): invalid report_size 11153 [ 85.599154][ T3852] hid (null): unknown global tag 0xe [ 85.604560][ T3852] hid (null): unknown global tag 0xc2 [ 85.609948][ T3852] hid (null): unknown global tag 0xe [ 85.616502][ T3852] hid-generic 0002:0400:01F0.0001: report_id 3804673681 is invalid [ 85.624463][ T3852] hid-generic 0002:0400:01F0.0001: item 0 4 1 8 parsing failed [ 85.632347][ T3852] hid-generic 0002:0400:01F0.0001: probe with driver hid-generic failed with error -22 [ 85.720339][ T5692] loop4: detected capacity change from 0 to 512 [ 85.733954][ T5693] 9pnet_fd: Insufficient options for proto=fd [ 85.740130][ T5692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.762556][ T5692] EXT4-fs (loop4): 1 truncate cleaned up [ 85.771751][ T5692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.851316][ T5703] netlink: 'syz.4.754': attribute type 12 has an invalid length. [ 86.166730][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.203979][ T5712] loop4: detected capacity change from 0 to 1024 [ 86.241508][ T5712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.356136][ T5717] loop3: detected capacity change from 0 to 1024 [ 86.389336][ T5717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.435279][ T5717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.729402][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.851053][ T5723] loop4: detected capacity change from 0 to 128 [ 86.880821][ T5723] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.943006][ T5723] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.004300][ T5723] Process accounting resumed [ 87.070715][ T5716] syz.3.762 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 87.081799][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: syz.3.762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.081834][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.081847][ T5716] Call Trace: [ 87.081854][ T5716] [ 87.081862][ T5716] __dump_stack+0x1d/0x30 [ 87.081891][ T5716] dump_stack_lvl+0xe8/0x140 [ 87.081918][ T5716] dump_stack+0x15/0x1b [ 87.081994][ T5716] dump_header+0x81/0x240 [ 87.082022][ T5716] oom_kill_process+0x295/0x350 [ 87.082060][ T5716] out_of_memory+0x97b/0xb80 [ 87.082138][ T5716] try_charge_memcg+0x610/0xa10 [ 87.082229][ T5716] charge_memcg+0x51/0xc0 [ 87.082348][ T5716] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 87.082397][ T5716] __read_swap_cache_async+0x17b/0x2d0 [ 87.082453][ T5716] swap_cluster_readahead+0x262/0x3c0 [ 87.082505][ T5716] swapin_readahead+0xde/0x820 [ 87.082546][ T5716] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 87.082574][ T5716] ? lruvec_stat_mod_folio+0xd6/0x120 [ 87.082644][ T5716] ? __rcu_read_unlock+0x4f/0x70 [ 87.082706][ T5716] ? swap_cache_get_folio+0x277/0x280 [ 87.082737][ T5716] do_swap_page+0x2b4/0x21e0 [ 87.082809][ T5716] ? __pfx_default_wake_function+0x10/0x10 [ 87.082888][ T5716] handle_mm_fault+0x9d8/0x2c60 [ 87.082936][ T5716] do_user_addr_fault+0x630/0x1080 [ 87.082980][ T5716] exc_page_fault+0x62/0xa0 [ 87.083048][ T5716] asm_exc_page_fault+0x26/0x30 [ 87.083069][ T5716] RIP: 0033:0x7f58e6a459ec [ 87.083161][ T5716] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 87.083180][ T5716] RSP: 002b:00007fff9d8ef9a0 EFLAGS: 00010202 [ 87.083219][ T5716] RAX: 0000000000000000 RBX: 00007f58e6dc5fa0 RCX: 0000000000000000 [ 87.083237][ T5716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556cee4808 [ 87.083254][ T5716] RBP: 00007f58e6dc7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 87.083269][ T5716] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001545e [ 87.083281][ T5716] R13: 00007f58e6dc6090 R14: ffffffffffffffff R15: 00007fff9d8efab0 [ 87.083304][ T5716] [ 87.093851][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.103127][ T5716] memory: usage 307200kB, limit 307200kB, failcnt 624 [ 87.290853][ T5726] FAULT_INJECTION: forcing a failure. [ 87.290853][ T5726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.291782][ T5716] memory+swap: usage 308252kB, limit 9007199254740988kB, failcnt 0 [ 87.300795][ T5726] CPU: 0 UID: 0 PID: 5726 Comm: syz.4.764 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.300855][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.300889][ T5726] Call Trace: [ 87.300899][ T5726] [ 87.300910][ T5726] __dump_stack+0x1d/0x30 [ 87.300945][ T5726] dump_stack_lvl+0xe8/0x140 [ 87.300979][ T5726] dump_stack+0x15/0x1b [ 87.301007][ T5726] should_fail_ex+0x265/0x280 [ 87.301092][ T5726] should_fail+0xb/0x20 [ 87.301121][ T5726] should_fail_usercopy+0x1a/0x20 [ 87.301208][ T5726] _copy_to_user+0x20/0xa0 [ 87.301251][ T5726] simple_read_from_buffer+0xb5/0x130 [ 87.301291][ T5726] proc_fail_nth_read+0x10e/0x150 [ 87.301335][ T5726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.301395][ T5726] vfs_read+0x1a8/0x770 [ 87.301419][ T5726] ? __se_sys_futex_waitv+0x173/0x1c0 [ 87.301462][ T5726] ? __rcu_read_unlock+0x4f/0x70 [ 87.301502][ T5726] ? __fget_files+0x184/0x1c0 [ 87.301535][ T5726] ? mutex_lock+0x58/0x90 [ 87.301575][ T5726] ksys_read+0xda/0x1a0 [ 87.301616][ T5726] __x64_sys_read+0x40/0x50 [ 87.301643][ T5726] x64_sys_call+0x2889/0x3000 [ 87.301709][ T5726] do_syscall_64+0xd8/0x2c0 [ 87.301793][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.301824][ T5726] RIP: 0033:0x7f83b505e15c [ 87.301845][ T5726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.301871][ T5726] RSP: 002b:00007f83b3ac7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.301956][ T5726] RAX: ffffffffffffffda RBX: 00007f83b52b5fa0 RCX: 00007f83b505e15c [ 87.301974][ T5726] RDX: 000000000000000f RSI: 00007f83b3ac70a0 RDI: 0000000000000003 [ 87.301991][ T5726] RBP: 00007f83b3ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.302008][ T5726] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 87.302026][ T5726] R13: 00007f83b52b6038 R14: 00007f83b52b5fa0 R15: 00007ffcdbdedec8 [ 87.302050][ T5726] [ 87.512057][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.516047][ T5716] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 87.524197][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 87.527078][ T5716] Memory cgroup stats for /syz3: [ 87.548951][ T5730] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.582177][ T5716] cache 8192 [ 87.585607][ T5716] rss 0 [ 87.588559][ T5716] shmem 0 [ 87.591584][ T5716] mapped_file 0 [ 87.595157][ T5716] dirty 0 [ 87.598128][ T5716] writeback 12288 [ 87.601777][ T5716] workingset_refault_anon 43 [ 87.606477][ T5716] workingset_refault_file 882 [ 87.611183][ T5716] swap 1077248 [ 87.614611][ T5716] swapcached 12288 [ 87.618342][ T5716] pgpgin 65216 [ 87.621728][ T5716] pgpgout 65210 [ 87.625243][ T5716] pgfault 72610 [ 87.628721][ T5716] pgmajfault 35 [ 87.632206][ T5716] inactive_anon 12288 [ 87.636197][ T5716] active_anon 0 [ 87.639663][ T5716] inactive_file 8192 [ 87.643607][ T5716] active_file 4096 [ 87.647351][ T5716] unevictable 0 [ 87.650817][ T5716] hierarchical_memory_limit 314572800 [ 87.656249][ T5716] hierarchical_memsw_limit 9223372036854771712 [ 87.662444][ T5716] total_cache 8192 [ 87.666191][ T5716] total_rss 0 [ 87.669492][ T5716] total_shmem 0 [ 87.673005][ T5716] total_mapped_file 0 [ 87.677003][ T5716] total_dirty 0 [ 87.680475][ T5716] total_writeback 12288 [ 87.684727][ T5716] total_workingset_refault_anon 43 [ 87.689862][ T5716] total_workingset_refault_file 882 [ 87.695088][ T5716] total_swap 1077248 [ 87.699064][ T5716] total_swapcached 12288 [ 87.703368][ T5716] total_pgpgin 65216 [ 87.707285][ T5716] total_pgpgout 65210 [ 87.711270][ T5716] total_pgfault 72610 [ 87.715289][ T5716] total_pgmajfault 35 [ 87.719283][ T5716] total_inactive_anon 12288 [ 87.723811][ T5716] total_active_anon 0 [ 87.727850][ T5716] total_inactive_file 8192 [ 87.732299][ T5716] total_active_file 4096 [ 87.736548][ T5716] total_unevictable 0 [ 87.740591][ T5716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.762,pid=5716,uid=0 [ 87.755295][ T5716] Memory cgroup out of memory: Killed process 5716 (syz.3.762) total-vm:93968kB, anon-rss:1136kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 87.791879][ T5679] Process accounting paused [ 87.814586][ T5730] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.844742][ T5734] 9pnet_fd: Insufficient options for proto=fd [ 87.884671][ T5730] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.902755][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.929335][ T5730] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.958697][ T5736] lo speed is unknown, defaulting to 1000 [ 87.968351][ T5736] lo speed is unknown, defaulting to 1000 [ 87.974618][ T5736] lo speed is unknown, defaulting to 1000 [ 88.013503][ T5742] loop3: detected capacity change from 0 to 512 [ 88.021818][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.039433][ T5742] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.053446][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.078961][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.096420][ T5742] EXT4-fs (loop3): 1 truncate cleaned up [ 88.102148][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.118219][ T5736] infiniband syz0: set active [ 88.123120][ T5736] infiniband syz0: added lo [ 88.127675][ T3389] lo speed is unknown, defaulting to 1000 [ 88.135221][ T5742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.171819][ T5736] RDS/IB: syz0: added [ 88.197566][ T5736] smc: adding ib device syz0 with port count 1 [ 88.203787][ T5749] __nla_validate_parse: 7 callbacks suppressed [ 88.203821][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 88.219248][ T5736] smc: ib device syz0 port 1 has no pnetid [ 88.226394][ T3852] lo speed is unknown, defaulting to 1000 [ 88.239421][ T5750] netlink: 'syz.3.771': attribute type 12 has an invalid length. [ 88.249828][ T5736] lo speed is unknown, defaulting to 1000 [ 88.444930][ T5736] lo speed is unknown, defaulting to 1000 [ 88.558224][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.580791][ T5753] loop3: detected capacity change from 0 to 1024 [ 88.591949][ T5736] lo speed is unknown, defaulting to 1000 [ 88.693394][ T5736] lo speed is unknown, defaulting to 1000 [ 88.730771][ T5736] lo speed is unknown, defaulting to 1000 [ 88.795526][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 88.874110][ T5759] loop4: detected capacity change from 0 to 512 [ 88.891673][ T5759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.913428][ T5759] EXT4-fs (loop4): 1 truncate cleaned up [ 89.022194][ T5763] netlink: 'syz.4.775': attribute type 12 has an invalid length. [ 89.302852][ T5772] smc: net device bond0 applied user defined pnetid SYZ0 [ 89.332165][ T5772] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.348303][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 89.348376][ T29] audit: type=1326 audit(2000000007.120:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 89.460979][ T29] audit: type=1326 audit(2000000007.160:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 89.484460][ T29] audit: type=1326 audit(2000000007.160:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 89.507824][ T29] audit: type=1326 audit(2000000007.160:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 89.531185][ T29] audit: type=1326 audit(2000000007.160:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 89.554687][ T29] audit: type=1326 audit(2000000007.160:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 89.578122][ T29] audit: type=1326 audit(2000000007.160:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7909c0f783 code=0x7ffc0000 [ 89.601353][ T29] audit: type=1326 audit(2000000007.160:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7909c0e1ff code=0x7ffc0000 [ 89.624556][ T29] audit: type=1326 audit(2000000007.160:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7909c0f7d7 code=0x7ffc0000 [ 89.647801][ T29] audit: type=1326 audit(2000000007.160:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7909c0df90 code=0x7ffc0000 [ 90.222507][ T5785] lo speed is unknown, defaulting to 1000 [ 90.264864][ T3480] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.274037][ T3480] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.283980][ T5790] netlink: 'syz.0.784': attribute type 12 has an invalid length. [ 90.800785][ T5800] loop4: detected capacity change from 0 to 1024 [ 90.885127][ T5806] netlink: 'syz.0.787': attribute type 12 has an invalid length. [ 90.986476][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 91.229431][ T5810] loop3: detected capacity change from 0 to 512 [ 91.302393][ T5814] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.329367][ T5810] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.791: corrupted inode contents [ 91.380756][ T5814] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.400633][ T5810] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.791: mark_inode_dirty error [ 91.412631][ T5810] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.791: corrupted inode contents [ 91.424899][ T5810] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.791: mark_inode_dirty error [ 91.464319][ T5814] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.479715][ T5810] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.791: Failed to acquire dquot type 0 [ 91.512128][ T5810] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.791: corrupted inode contents [ 91.524479][ T5810] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.791: mark_inode_dirty error [ 91.536446][ T5810] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.791: corrupted inode contents [ 91.548929][ T5810] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.791: mark_inode_dirty error [ 91.559437][ T384] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.567529][ T5810] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.791: corrupted inode contents [ 91.568252][ T5814] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.579765][ T5810] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 91.591024][ T5824] Bluetooth: hci0: Frame reassembly failed (-90) [ 91.598085][ T5810] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.791: corrupted inode contents [ 91.616151][ T5810] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.791: mark_inode_dirty error [ 91.627502][ T5810] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 91.637415][ T5810] EXT4-fs (loop3): 1 truncate cleaned up [ 91.644211][ T5810] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.818398][ T5830] loop3: detected capacity change from 0 to 512 [ 91.825393][ T5830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.843325][ T5830] EXT4-fs (loop3): 1 truncate cleaned up [ 91.912858][ T5832] netlink: 'syz.3.797': attribute type 12 has an invalid length. [ 92.149051][ T5834] loop3: detected capacity change from 0 to 512 [ 92.156331][ T5834] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.156818][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.177687][ T5834] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.798: invalid indirect mapped block 4294967295 (level 0) [ 92.198554][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211806][ T5834] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.798: invalid indirect mapped block 4294967295 (level 1) [ 92.232099][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.240327][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.248864][ T5834] EXT4-fs (loop3): 1 orphan inode deleted [ 92.254658][ T5834] EXT4-fs (loop3): 1 truncate cleaned up [ 92.271789][ T5834] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 92.292168][ T5834] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 92.300829][ T5834] SELinux: failed to load policy [ 92.396599][ T5843] netlink: 'syz.0.800': attribute type 12 has an invalid length. [ 92.605581][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 92.622283][ T5845] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 92.630016][ T5845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.801'. [ 92.882972][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 92.892115][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 92.974982][ T52] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.030614][ T5868] netlink: 'syz.0.807': attribute type 13 has an invalid length. [ 93.104672][ T52] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.150450][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 93.173835][ T52] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.197989][ T5854] lo speed is unknown, defaulting to 1000 [ 93.233687][ T52] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.360136][ T5881] loop3: detected capacity change from 0 to 1024 [ 93.380944][ T52] bridge_slave_1: left allmulticast mode [ 93.386710][ T52] bridge_slave_1: left promiscuous mode [ 93.392523][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.400415][ T5881] ext4: Unknown parameter 'uid<00000000000000000000' [ 93.410498][ T52] bridge_slave_0: left allmulticast mode [ 93.416300][ T52] bridge_slave_0: left promiscuous mode [ 93.422005][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.434386][ T5881] loop3: detected capacity change from 0 to 512 [ 93.441007][ T5881] EXT4-fs: dax option not supported [ 93.554694][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.582054][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.594179][ T52] bond0 (unregistering): Released all slaves [ 93.605148][ T52] bond1 (unregistering): left allmulticast mode [ 93.639947][ T52] dummy0: left allmulticast mode [ 93.647138][ T52] bond1 (unregistering): (slave dummy0): Releasing active interface [ 93.652480][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 93.661202][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.665536][ T52] bond1 (unregistering): Released all slaves [ 93.688068][ T5887] netlink: 'syz.0.812': attribute type 12 has an invalid length. [ 93.790789][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 93.838964][ T5893] loop4: detected capacity change from 0 to 1024 [ 93.861038][ T5893] EXT4-fs: Ignoring removed nobh option [ 93.866759][ T5893] EXT4-fs: Ignoring removed bh option [ 93.929784][ T5893] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 93.937555][ T5893] netlink: 224 bytes leftover after parsing attributes in process `syz.4.814'. [ 93.937730][ T5902] loop3: detected capacity change from 0 to 512 [ 93.974050][ T52] hsr_slave_0: left promiscuous mode [ 93.980584][ T5902] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.991024][ T52] hsr_slave_1: left promiscuous mode [ 94.003353][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.010808][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.029815][ T5902] EXT4-fs (loop3): 1 truncate cleaned up [ 94.036264][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.043769][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.059245][ T52] veth1_macvtap: left promiscuous mode [ 94.065189][ T52] veth0_macvtap: left promiscuous mode [ 94.070838][ T52] veth1_vlan: left promiscuous mode [ 94.076537][ T52] veth0_vlan: left promiscuous mode [ 94.170163][ T5919] loop3: detected capacity change from 0 to 1024 [ 94.219081][ T5922] 9pnet_fd: Insufficient options for proto=fd [ 94.241059][ T52] team0 (unregistering): Port device team_slave_1 removed [ 94.249384][ T5924] loop4: detected capacity change from 0 to 512 [ 94.266958][ T52] team0 (unregistering): Port device team_slave_0 removed [ 94.284472][ T5924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.323273][ T5924] EXT4-fs (loop4): 1 truncate cleaned up [ 94.443310][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.450430][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.472825][ T5854] bridge_slave_0: entered allmulticast mode [ 94.484256][ T5854] bridge_slave_0: entered promiscuous mode [ 94.498297][ T5927] netlink: 'syz.4.823': attribute type 12 has an invalid length. [ 94.510097][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.517428][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.525979][ T5854] bridge_slave_1: entered allmulticast mode [ 94.533440][ T5854] bridge_slave_1: entered promiscuous mode [ 94.581035][ T5934] syz.0.826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.603636][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.629426][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.659786][ T5854] team0: Port device team_slave_0 added [ 94.680532][ T5854] team0: Port device team_slave_1 added [ 94.707937][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.714973][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.741035][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.772115][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 94.772132][ T29] audit: type=1326 audit(2000000012.530:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 94.801618][ T29] audit: type=1326 audit(2000000012.530:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 94.824942][ T29] audit: type=1326 audit(2000000012.530:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 94.848375][ T29] audit: type=1326 audit(2000000012.530:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 94.872053][ T29] audit: type=1326 audit(2000000012.540:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 94.895511][ T29] audit: type=1326 audit(2000000012.540:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 94.919212][ T29] audit: type=1326 audit(2000000012.540:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 94.942622][ T29] audit: type=1326 audit(2000000012.540:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 94.966112][ T29] audit: type=1326 audit(2000000012.540:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 94.989459][ T29] audit: type=1326 audit(2000000012.540:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.4.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 95.033954][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.040940][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.067095][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.245242][ T5854] hsr_slave_0: entered promiscuous mode [ 95.270723][ T5854] hsr_slave_1: entered promiscuous mode [ 95.280611][ T5960] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.312804][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 95.318586][ T5854] Cannot create hsr debugfs directory [ 95.527536][ T5854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.550770][ T5854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.572069][ T5854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.602646][ T5854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.675432][ T5974] netlink: 4 bytes leftover after parsing attributes in process `$&\#)#('. [ 95.693225][ T5974] netlink: 16 bytes leftover after parsing attributes in process `$&\#)#('. [ 95.719017][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.761436][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.784426][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.791553][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.814031][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.821242][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.852411][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.862945][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.014873][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.095805][ T5979] lo speed is unknown, defaulting to 1000 [ 96.260575][ T5854] veth0_vlan: entered promiscuous mode [ 96.272155][ T5854] veth1_vlan: entered promiscuous mode [ 96.277861][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 96.306248][ T5854] veth0_macvtap: entered promiscuous mode [ 96.332401][ T5854] veth1_macvtap: entered promiscuous mode [ 96.352620][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.364330][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.394140][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.408355][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.434773][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.453177][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.477646][ T6012] 9pnet_fd: Insufficient options for proto=fd [ 96.501982][ T6017] smc: net device bond0 applied user defined pnetid SYZ0 [ 96.514966][ T6017] smc: net device bond0 erased user defined pnetid SYZ0 [ 96.662844][ T6030] set_capacity_and_notify: 1 callbacks suppressed [ 96.662863][ T6030] loop5: detected capacity change from 0 to 764 [ 96.694787][ T6030] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.732598][ T6030] FAULT_INJECTION: forcing a failure. [ 96.732598][ T6030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.745709][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.5.851 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.745746][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.745765][ T6030] Call Trace: [ 96.745810][ T6030] [ 96.745820][ T6030] __dump_stack+0x1d/0x30 [ 96.745853][ T6030] dump_stack_lvl+0xe8/0x140 [ 96.745880][ T6030] dump_stack+0x15/0x1b [ 96.745907][ T6030] should_fail_ex+0x265/0x280 [ 96.745939][ T6030] should_fail+0xb/0x20 [ 96.746041][ T6030] should_fail_usercopy+0x1a/0x20 [ 96.746075][ T6030] _copy_from_iter+0xcf/0xe70 [ 96.746125][ T6030] ? __alloc_skb+0x3bb/0x4d0 [ 96.746163][ T6030] ? __alloc_skb+0x24d/0x4d0 [ 96.746193][ T6030] netlink_sendmsg+0x471/0x6b0 [ 96.746266][ T6030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.746352][ T6030] __sock_sendmsg+0x145/0x180 [ 96.746380][ T6030] ____sys_sendmsg+0x31e/0x4a0 [ 96.746447][ T6030] ___sys_sendmsg+0x17b/0x1d0 [ 96.746504][ T6030] __x64_sys_sendmsg+0xd4/0x160 [ 96.746551][ T6030] x64_sys_call+0x17ba/0x3000 [ 96.746576][ T6030] do_syscall_64+0xd8/0x2c0 [ 96.746657][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.746686][ T6030] RIP: 0033:0x7f753ce1f749 [ 96.746706][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.746729][ T6030] RSP: 002b:00007f753b887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.746751][ T6030] RAX: ffffffffffffffda RBX: 00007f753d075fa0 RCX: 00007f753ce1f749 [ 96.746764][ T6030] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 96.746776][ T6030] RBP: 00007f753b887090 R08: 0000000000000000 R09: 0000000000000000 [ 96.746791][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.746808][ T6030] R13: 00007f753d076038 R14: 00007f753d075fa0 R15: 00007ffc9c26bf98 [ 96.746863][ T6030] [ 97.077979][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 97.127067][ T6019] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 97.134897][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.846'. [ 97.148381][ T6042] loop5: detected capacity change from 0 to 2048 [ 97.273678][ T6042] loop5: p2 p3 p7 [ 97.307040][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 97.327223][ T6031] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 97.334987][ T6031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.850'. [ 97.381188][ T6054] 9pnet_fd: Insufficient options for proto=fd [ 97.577876][ T6068] netlink: 'syz.0.862': attribute type 12 has an invalid length. [ 97.702608][ T6071] loop3: detected capacity change from 0 to 1024 [ 97.722573][ T6071] EXT4-fs: Ignoring removed nobh option [ 97.728276][ T6071] EXT4-fs: Ignoring removed bh option [ 97.777579][ T6071] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 97.785399][ T6071] netlink: 224 bytes leftover after parsing attributes in process `syz.3.866'. [ 98.013816][ T6081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.869'. [ 98.605281][ T6087] 9pnet_fd: Insufficient options for proto=fd [ 98.648852][ T6097] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.943111][ T6124] 9pnet_fd: Insufficient options for proto=fd [ 98.950893][ T6126] loop3: detected capacity change from 0 to 512 [ 98.959652][ T6126] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.969794][ T6126] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.976867][ T6126] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.884: Allocating blocks 41-42 which overlap fs metadata [ 98.990761][ T6126] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.884: Allocating blocks 41-42 which overlap fs metadata [ 99.005569][ T6126] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.884: Failed to acquire dquot type 1 [ 99.017222][ T6126] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 99.032076][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.884: corrupted inode contents [ 99.044074][ T6126] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.884: mark_inode_dirty error [ 99.056097][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.884: corrupted inode contents [ 99.068614][ T6126] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.884: mark_inode_dirty error [ 99.102283][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.884: corrupted inode contents [ 99.117806][ T6126] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 99.152270][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.884: corrupted inode contents [ 99.176101][ T6126] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.884: mark_inode_dirty error [ 99.195247][ T6126] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 99.214464][ T6126] EXT4-fs (loop3): 1 truncate cleaned up [ 99.228180][ T6126] EXT4-fs mount: 24 callbacks suppressed [ 99.228203][ T6126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.272472][ T6126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.407447][ T6140] xt_hashlimit: max too large, truncated to 1048576 [ 99.419453][ T6140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.605243][ T6144] __nla_validate_parse: 1 callbacks suppressed [ 99.605262][ T6144] netlink: 27 bytes leftover after parsing attributes in process `syz.3.891'. [ 100.025060][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 100.025080][ T29] audit: type=1400 audit(2000000017.800:4084): avc: denied { bind } for pid=6159 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.050866][ T29] audit: type=1400 audit(2000000017.800:4085): avc: denied { name_bind } for pid=6159 comm="syz.3.895" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 100.071801][ T29] audit: type=1400 audit(2000000017.800:4086): avc: denied { node_bind } for pid=6159 comm="syz.3.895" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 100.113059][ T6161] bond1: Removing last ns target with arp_interval on [ 100.123180][ T6163] 9pnet_fd: Insufficient options for proto=fd [ 100.129882][ T29] audit: type=1400 audit(2000000017.870:4087): avc: denied { write } for pid=6159 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.149970][ T29] audit: type=1400 audit(2000000017.920:4088): avc: denied { read } for pid=6159 comm="syz.3.895" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.183587][ T29] audit: type=1400 audit(2000000017.960:4089): avc: denied { read } for pid=6168 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.232944][ T29] audit: type=1400 audit(2000000018.010:4090): avc: denied { write } for pid=6173 comm="syz.0.899" lport=54533 faddr=::ffff:100.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.289245][ T29] audit: type=1400 audit(2000000018.040:4091): avc: denied { setopt } for pid=6173 comm="syz.0.899" lport=54533 faddr=::ffff:100.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.361248][ T6178] loop3: detected capacity change from 0 to 1024 [ 100.369152][ T6178] EXT4-fs: Ignoring removed orlov option [ 100.382011][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.434726][ T6183] netlink: 'syz.0.903': attribute type 12 has an invalid length. [ 100.866893][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.913195][ T6190] netlink: 27 bytes leftover after parsing attributes in process `syz.3.905'. [ 101.291604][ T29] audit: type=1326 audit(2000000019.060:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 101.443951][ T29] audit: type=1326 audit(2000000019.100:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7909c0f749 code=0x7ffc0000 [ 101.670558][ T6206] lo speed is unknown, defaulting to 1000 [ 101.677320][ T6206] lo speed is unknown, defaulting to 1000 [ 101.694465][ T6206] lo speed is unknown, defaulting to 1000 [ 101.880850][ T6206] infiniband sz1: set down [ 101.885746][ T6206] infiniband sz1: added lo [ 101.890623][ T3480] lo speed is unknown, defaulting to 1000 [ 101.914750][ T6206] RDS/IB: sz1: added [ 101.924037][ T6206] smc: adding ib device sz1 with port count 1 [ 101.936306][ T6206] smc: ib device sz1 port 1 has no pnetid [ 101.942558][ T3480] lo speed is unknown, defaulting to 1000 [ 101.955185][ T6206] lo speed is unknown, defaulting to 1000 [ 102.042577][ T6201] 9pnet_fd: Insufficient options for proto=fd [ 102.055647][ T6206] lo speed is unknown, defaulting to 1000 [ 102.151335][ T6206] lo speed is unknown, defaulting to 1000 [ 102.166234][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 102.175497][ T6219] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 102.183192][ T6219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.915'. [ 102.294112][ T6206] lo speed is unknown, defaulting to 1000 [ 102.389639][ T6206] lo speed is unknown, defaulting to 1000 [ 102.543750][ T6212] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 102.562082][ T6212] SELinux: failed to load policy [ 102.985225][ T6239] 9pnet_fd: Insufficient options for proto=fd [ 103.102476][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 103.111415][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 103.199635][ T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.209604][ T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.282105][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.928'. [ 103.323991][ T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.333902][ T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.347000][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 103.372832][ T6240] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 103.380585][ T6240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.921'. [ 103.392151][ T6241] lo speed is unknown, defaulting to 1000 [ 103.403475][ T6266] loop3: detected capacity change from 0 to 512 [ 103.430026][ T6241] lo speed is unknown, defaulting to 1000 [ 103.437809][ T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.441987][ T6266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.447637][ T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.490843][ T6266] EXT4-fs (loop3): 1 truncate cleaned up [ 103.503674][ T6266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.553730][ T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.563610][ T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 103.754164][ T6276] loop5: detected capacity change from 0 to 512 [ 103.790000][ T52] bridge_slave_1: left allmulticast mode [ 103.795825][ T52] bridge_slave_1: left promiscuous mode [ 103.801580][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.859741][ T52] bridge_slave_0: left allmulticast mode [ 103.865865][ T52] bridge_slave_0: left promiscuous mode [ 103.871614][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.984295][ T6284] 9pnet_fd: Insufficient options for proto=fd [ 103.992677][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.046779][ T52] bond1 (unregistering): (slave geneve2): Releasing active interface [ 104.144757][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.159801][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.175431][ T52] bond0 (unregistering): Released all slaves [ 104.197073][ T52] bond1 (unregistering): Released all slaves [ 104.255457][ T6241] chnl_net:caif_netlink_parms(): no params data found [ 104.273702][ T52] tipc: Disabling bearer [ 104.289277][ T52] tipc: Left network mode [ 104.327185][ T6292] loop5: detected capacity change from 0 to 1764 [ 104.343665][ T6292] iso9660: Unknown parameter '' [ 104.370218][ T6292] nft_compat: unsupported protocol 0 [ 104.419090][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.426414][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.461543][ T6241] bridge_slave_0: entered allmulticast mode [ 104.578073][ T6241] bridge_slave_0: entered promiscuous mode [ 104.587980][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.595163][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.602561][ T6241] bridge_slave_1: entered allmulticast mode [ 104.609307][ T6241] bridge_slave_1: entered promiscuous mode [ 104.627702][ T52] veth1_macvtap: left promiscuous mode [ 104.633457][ T52] veth0_macvtap: left promiscuous mode [ 104.639093][ T52] veth1_vlan: left promiscuous mode [ 104.644518][ T52] veth0_vlan: left promiscuous mode [ 104.987935][ T6309] Bluetooth: hci0: Frame reassembly failed (-90) [ 105.072301][ T1078] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.199798][ T52] team0 (unregistering): Port device team_slave_1 removed [ 105.215844][ T52] team0 (unregistering): Port device team_slave_0 removed [ 105.464833][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.491561][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.513411][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 105.513430][ T29] audit: type=1400 audit(2000000023.290:4313): avc: denied { watch } for pid=6315 comm="syz.4.944" path="/201/file0" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.560858][ T29] audit: type=1400 audit(2000000023.330:4314): avc: denied { ioctl } for pid=6315 comm="syz.4.944" path="socket:[14950]" dev="sockfs" ino=14950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.607613][ T6241] team0: Port device team_slave_0 added [ 105.630774][ T6241] team0: Port device team_slave_1 added [ 105.641740][ T6315] Process accounting resumed [ 105.648014][ T6319] sctp: [Deprecated]: syz.5.945 (pid 6319) Use of int in max_burst socket option. [ 105.648014][ T6319] Use struct sctp_assoc_value instead [ 105.682580][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.689589][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.715542][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.753700][ T6321] 9pnet_fd: Insufficient options for proto=fd [ 105.760607][ T6319] pim6reg1: entered promiscuous mode [ 105.766031][ T6319] pim6reg1: entered allmulticast mode [ 105.793909][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.800976][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.826950][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.846395][ T29] audit: type=1326 audit(2000000023.620:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 105.975526][ T29] audit: type=1326 audit(2000000023.640:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 105.999034][ T29] audit: type=1326 audit(2000000023.640:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 106.022490][ T29] audit: type=1326 audit(2000000023.640:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 106.046019][ T29] audit: type=1326 audit(2000000023.640:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 106.069512][ T29] audit: type=1326 audit(2000000023.640:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 106.092862][ T29] audit: type=1326 audit(2000000023.640:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 106.116183][ T29] audit: type=1326 audit(2000000023.640:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 106.135274][ T6241] hsr_slave_0: entered promiscuous mode [ 106.146053][ T6241] hsr_slave_1: entered promiscuous mode [ 106.152950][ T6241] debugfs: 'hsr0' already exists in 'hsr' [ 106.158758][ T6241] Cannot create hsr debugfs directory [ 106.261615][ T6325] syz.4.947 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 106.275476][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.4.947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.275512][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.275530][ T6325] Call Trace: [ 106.275539][ T6325] [ 106.275554][ T6325] __dump_stack+0x1d/0x30 [ 106.275586][ T6325] dump_stack_lvl+0xe8/0x140 [ 106.275696][ T6325] dump_stack+0x15/0x1b [ 106.275746][ T6325] dump_header+0x81/0x240 [ 106.275775][ T6325] oom_kill_process+0x295/0x350 [ 106.275807][ T6325] out_of_memory+0x97b/0xb80 [ 106.275835][ T6325] try_charge_memcg+0x610/0xa10 [ 106.275862][ T6325] obj_cgroup_charge_pages+0xa6/0x150 [ 106.275910][ T6325] __memcg_kmem_charge_page+0x9f/0x170 [ 106.275951][ T6325] __alloc_frozen_pages_noprof+0x18f/0x360 [ 106.276028][ T6325] alloc_pages_bulk_noprof+0x4b9/0x540 [ 106.276073][ T6325] ? policy_nodemask+0x2a5/0x420 [ 106.276177][ T6325] alloc_pages_bulk_mempolicy_noprof+0x2e3/0xb00 [ 106.276257][ T6325] ? alloc_pages_mpol+0x217/0x260 [ 106.276360][ T6325] __vmalloc_node_range_noprof+0x899/0x1310 [ 106.276430][ T6325] __kvmalloc_node_noprof+0x492/0x6b0 [ 106.276508][ T6325] ? ip_set_alloc+0x24/0x30 [ 106.276577][ T6325] ? ip_set_alloc+0x24/0x30 [ 106.276620][ T6325] ip_set_alloc+0x24/0x30 [ 106.276768][ T6325] hash_netiface_create+0x282/0x740 [ 106.276806][ T6325] ? __pfx_hash_netiface_create+0x10/0x10 [ 106.276847][ T6325] ip_set_create+0x3cc/0x970 [ 106.276917][ T6325] ? __nla_parse+0x40/0x60 [ 106.276945][ T6325] nfnetlink_rcv_msg+0x4c6/0x590 [ 106.277001][ T6325] netlink_rcv_skb+0x123/0x220 [ 106.277092][ T6325] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.277127][ T6325] nfnetlink_rcv+0x167/0x16c0 [ 106.277152][ T6325] ? kmem_cache_free+0xe3/0x3a0 [ 106.277258][ T6325] ? __kfree_skb+0x109/0x150 [ 106.277321][ T6325] ? nlmon_xmit+0x4f/0x60 [ 106.277342][ T6325] ? consume_skb+0x49/0x150 [ 106.277367][ T6325] ? nlmon_xmit+0x4f/0x60 [ 106.277434][ T6325] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 106.277530][ T6325] ? __dev_queue_xmit+0x138d/0x1ec0 [ 106.277574][ T6325] ? __dev_queue_xmit+0x148/0x1ec0 [ 106.277631][ T6325] ? ref_tracker_free+0x37d/0x3e0 [ 106.277661][ T6325] ? __netlink_deliver_tap+0x4dc/0x500 [ 106.277731][ T6325] netlink_unicast+0x5c0/0x690 [ 106.277773][ T6325] netlink_sendmsg+0x58b/0x6b0 [ 106.277818][ T6325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.277893][ T6325] __sock_sendmsg+0x145/0x180 [ 106.277933][ T6325] ____sys_sendmsg+0x31e/0x4a0 [ 106.278027][ T6325] ___sys_sendmsg+0x17b/0x1d0 [ 106.278074][ T6325] __x64_sys_sendmsg+0xd4/0x160 [ 106.278110][ T6325] x64_sys_call+0x17ba/0x3000 [ 106.278136][ T6325] do_syscall_64+0xd8/0x2c0 [ 106.278257][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.278283][ T6325] RIP: 0033:0x7f83b505f749 [ 106.278302][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.278327][ T6325] RSP: 002b:00007f83b3ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.278353][ T6325] RAX: ffffffffffffffda RBX: 00007f83b52b5fa0 RCX: 00007f83b505f749 [ 106.278394][ T6325] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 106.278419][ T6325] RBP: 00007f83b50e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.278435][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.278451][ T6325] R13: 00007f83b52b6038 R14: 00007f83b52b5fa0 R15: 00007ffcdbdedec8 [ 106.278475][ T6325] [ 106.278484][ T6325] memory: usage 307200kB, limit 307200kB, failcnt 201 [ 106.483548][ T6338] loop5: detected capacity change from 0 to 1024 [ 106.485581][ T6325] memory+swap: usage 307212kB, limit 9007199254740988kB, failcnt 0 [ 106.491920][ T6338] EXT4-fs: Ignoring removed nobh option [ 106.495735][ T6325] kmem: usage 306908kB, limit 9007199254740988kB, failcnt 0 [ 106.500487][ T6338] EXT4-fs: Ignoring removed bh option [ 106.505801][ T6325] Memory cgroup stats for /syz4 [ 106.584371][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.588326][ T6325] : [ 106.656673][ T6345] netlink: 'syz.5.950': attribute type 1 has an invalid length. [ 106.660312][ T6325] cache 102400 [ 106.672521][ T6345] netlink: 224 bytes leftover after parsing attributes in process `syz.5.950'. [ 106.674948][ T6325] rss 49152 [ 106.674958][ T6325] shmem 0 [ 106.701174][ T6325] mapped_file 102400 [ 106.705117][ T6325] dirty 0 [ 106.708096][ T6325] writeback 0 [ 106.711416][ T6325] workingset_refault_anon 138 [ 106.716126][ T6325] workingset_refault_file 1026 [ 106.720913][ T6325] swap 110592 [ 106.724208][ T6325] swapcached 90112 [ 106.727934][ T6325] pgpgin 71837 [ 106.731302][ T6325] pgpgout 71788 [ 106.734783][ T6325] pgfault 82635 [ 106.738243][ T6325] pgmajfault 55 [ 106.741705][ T6325] inactive_anon 0 [ 106.745367][ T6325] active_anon 94208 [ 106.749232][ T6325] inactive_file 102400 [ 106.753345][ T6325] active_file 4096 [ 106.757062][ T6325] unevictable 0 [ 106.760551][ T6325] hierarchical_memory_limit 314572800 [ 106.765954][ T6325] hierarchical_memsw_limit 9223372036854771712 [ 106.772153][ T6325] total_cache 102400 [ 106.776044][ T6325] total_rss 49152 [ 106.779681][ T6325] total_shmem 0 [ 106.783166][ T6325] total_mapped_file 102400 [ 106.787581][ T6325] total_dirty 0 [ 106.791045][ T6325] total_writeback 0 [ 106.794880][ T6325] total_workingset_refault_anon 138 [ 106.800158][ T6325] total_workingset_refault_file 1026 [ 106.805546][ T6325] total_swap 110592 [ 106.809360][ T6325] total_swapcached 90112 [ 106.813625][ T6325] total_pgpgin 71837 [ 106.817603][ T6325] total_pgpgout 71788 [ 106.821607][ T6325] total_pgfault 82635 [ 106.825611][ T6325] total_pgmajfault 55 [ 106.829687][ T6325] total_inactive_anon 0 [ 106.833933][ T6325] total_active_anon 94208 [ 106.838262][ T6325] total_inactive_file 102400 [ 106.842873][ T6325] total_active_file 4096 [ 106.847113][ T6325] total_unevictable 0 [ 106.851091][ T6325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.947,pid=6324,uid=0 [ 106.865694][ T6325] Memory cgroup out of memory: Killed process 6325 (syz.4.947) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 106.973498][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.055769][ T6354] loop5: detected capacity change from 0 to 1024 [ 107.082073][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.092469][ T6354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.098782][ T6241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.139488][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 107.142619][ T6339] syz.0.949 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 107.162114][ T6339] CPU: 0 UID: 0 PID: 6339 Comm: syz.0.949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.162142][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.162155][ T6339] Call Trace: [ 107.162227][ T6339] [ 107.162237][ T6339] __dump_stack+0x1d/0x30 [ 107.162271][ T6339] dump_stack_lvl+0xe8/0x140 [ 107.162339][ T6339] dump_stack+0x15/0x1b [ 107.162363][ T6339] dump_header+0x81/0x240 [ 107.162398][ T6339] oom_kill_process+0x295/0x350 [ 107.162434][ T6339] out_of_memory+0x97b/0xb80 [ 107.162508][ T6339] try_charge_memcg+0x610/0xa10 [ 107.162546][ T6339] obj_cgroup_charge_pages+0xa6/0x150 [ 107.162589][ T6339] __memcg_kmem_charge_page+0x9f/0x170 [ 107.162699][ T6339] __alloc_frozen_pages_noprof+0x18f/0x360 [ 107.162735][ T6339] alloc_pages_mpol+0xb3/0x260 [ 107.162816][ T6339] alloc_pages_noprof+0x90/0x130 [ 107.162924][ T6339] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 107.162971][ T6339] __kvmalloc_node_noprof+0x492/0x6b0 [ 107.163009][ T6339] ? ip_set_alloc+0x24/0x30 [ 107.163062][ T6339] ? ip_set_alloc+0x24/0x30 [ 107.163095][ T6339] ip_set_alloc+0x24/0x30 [ 107.163132][ T6339] hash_netiface_create+0x282/0x740 [ 107.163243][ T6339] ? __pfx_hash_netiface_create+0x10/0x10 [ 107.163301][ T6339] ip_set_create+0x3cc/0x970 [ 107.163401][ T6339] ? __mutex_lock_slowpath+0xa/0x10 [ 107.163466][ T6339] nfnetlink_rcv_msg+0x4c6/0x590 [ 107.163541][ T6339] netlink_rcv_skb+0x123/0x220 [ 107.163624][ T6339] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 107.163659][ T6339] nfnetlink_rcv+0x167/0x16c0 [ 107.163684][ T6339] ? kmem_cache_free+0xe3/0x3a0 [ 107.163741][ T6339] ? __kfree_skb+0x109/0x150 [ 107.163851][ T6339] ? nlmon_xmit+0x4f/0x60 [ 107.163878][ T6339] ? consume_skb+0x49/0x150 [ 107.163912][ T6339] ? nlmon_xmit+0x4f/0x60 [ 107.163965][ T6339] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 107.163997][ T6339] ? __dev_queue_xmit+0x138d/0x1ec0 [ 107.164031][ T6339] ? __dev_queue_xmit+0x148/0x1ec0 [ 107.164067][ T6339] ? ref_tracker_free+0x37d/0x3e0 [ 107.164135][ T6339] ? __netlink_deliver_tap+0x4dc/0x500 [ 107.164183][ T6339] netlink_unicast+0x5c0/0x690 [ 107.164220][ T6339] netlink_sendmsg+0x58b/0x6b0 [ 107.164341][ T6339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.164389][ T6339] __sock_sendmsg+0x145/0x180 [ 107.164417][ T6339] ____sys_sendmsg+0x31e/0x4a0 [ 107.164462][ T6339] ___sys_sendmsg+0x17b/0x1d0 [ 107.164596][ T6339] __x64_sys_sendmsg+0xd4/0x160 [ 107.164644][ T6339] x64_sys_call+0x17ba/0x3000 [ 107.164681][ T6339] do_syscall_64+0xd8/0x2c0 [ 107.164756][ T6339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.164821][ T6339] RIP: 0033:0x7f7909c0f749 [ 107.164838][ T6339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.164864][ T6339] RSP: 002b:00007f790864e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.164891][ T6339] RAX: ffffffffffffffda RBX: 00007f7909e66090 RCX: 00007f7909c0f749 [ 107.164908][ T6339] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 107.164931][ T6339] RBP: 00007f7909c93f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.164944][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.164957][ T6339] R13: 00007f7909e66128 R14: 00007f7909e66090 R15: 00007ffc7c9c80a8 [ 107.164976][ T6339] [ 107.164986][ T6339] memory: usage 307200kB, limit 307200kB, failcnt 2075 [ 107.496189][ T6339] memory+swap: usage 217412kB, limit 9007199254740988kB, failcnt 0 [ 107.504129][ T6339] kmem: usage 204224kB, limit 9007199254740988kB, failcnt 0 [ 107.511444][ T6339] Memory cgroup stats for /syz0: [ 107.512278][ T6339] cache 8388608 [ 107.517910][ T6241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.520717][ T6339] rss 4096 [ 107.520730][ T6339] shmem 8388608 [ 107.533987][ T6339] mapped_file 1642496 [ 107.538002][ T6339] dirty 0 [ 107.540952][ T6339] writeback 0 [ 107.544293][ T6339] workingset_refault_anon 332 [ 107.549034][ T6339] workingset_refault_file 2481 [ 107.553901][ T6339] swap 974848 [ 107.557212][ T6339] swapcached 12288 [ 107.560941][ T6339] pgpgin 180084 [ 107.564525][ T6339] pgpgout 178033 [ 107.568085][ T6339] pgfault 194235 [ 107.571655][ T6339] pgmajfault 189 [ 107.575251][ T6339] inactive_anon 4096 [ 107.579154][ T6339] active_anon 8192 [ 107.582907][ T6339] inactive_file 0 [ 107.586621][ T6339] active_file 0 [ 107.590092][ T6339] unevictable 8388608 [ 107.594120][ T6339] hierarchical_memory_limit 314572800 [ 107.599516][ T6339] hierarchical_memsw_limit 9223372036854771712 [ 107.605765][ T6339] total_cache 8388608 [ 107.609768][ T6339] total_rss 4096 [ 107.613364][ T6339] total_shmem 8388608 [ 107.617440][ T6339] total_mapped_file 1642496 [ 107.622046][ T6339] total_dirty 0 [ 107.625521][ T6339] total_writeback 0 [ 107.629345][ T6339] total_workingset_refault_anon 332 [ 107.634592][ T6339] total_workingset_refault_file 2481 [ 107.639893][ T6339] total_swap 974848 [ 107.643765][ T6339] total_swapcached 12288 [ 107.648026][ T6339] total_pgpgin 180084 [ 107.652064][ T6339] total_pgpgout 178033 [ 107.656208][ T6339] total_pgfault 194235 [ 107.660293][ T6339] total_pgmajfault 189 [ 107.664414][ T6339] total_inactive_anon 4096 [ 107.668870][ T6339] total_active_anon 8192 [ 107.673149][ T6339] total_inactive_file 0 [ 107.677329][ T6339] total_active_file 0 [ 107.681326][ T6339] total_unevictable 8388608 [ 107.685950][ T6339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.749,pid=5677,uid=0 [ 107.700777][ T6339] Memory cgroup out of memory: Killed process 5677 (syz.0.749) total-vm:95572kB, anon-rss:1184kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 107.729736][ T6241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.769788][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.780220][ T6241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.840601][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 107.909883][ T6381] loop5: detected capacity change from 0 to 512 [ 107.939465][ T6381] /dev/loop5: Can't open blockdev [ 107.948815][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.997019][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.011112][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.018300][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.026501][ T6389] loop3: detected capacity change from 0 to 1024 [ 108.034321][ T6389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.053997][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.063406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.073207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.133922][ T6241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.144538][ T6241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.300507][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 108.363972][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.582972][ T6428] loop5: detected capacity change from 0 to 512 [ 108.612896][ T6428] EXT4-fs (loop5): 1 truncate cleaned up [ 108.618995][ T6428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.776551][ T6241] veth0_vlan: entered promiscuous mode [ 108.827331][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.836581][ T6241] veth1_vlan: entered promiscuous mode [ 108.889678][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.896731][ T6241] veth0_macvtap: entered promiscuous mode [ 108.938248][ T6241] veth1_macvtap: entered promiscuous mode [ 108.944552][ T6438] 9pnet_fd: Insufficient options for proto=fd [ 108.978356][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.999600][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.018530][ T6446] loop5: detected capacity change from 0 to 512 [ 109.022609][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.042575][ T6446] ext4: Unknown parameter 'fsname' [ 109.070222][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.104476][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.136248][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.150041][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 109.236198][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 109.265846][ T6468] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 109.273611][ T6468] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 109.403501][ T6481] 9pnet_fd: Insufficient options for proto=fd [ 109.473429][ T3480] IPVS: starting estimator thread 0... [ 109.490857][ T6493] loop6: detected capacity change from 0 to 512 [ 109.512415][ T6493] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.549902][ T6493] EXT4-fs (loop6): 1 truncate cleaned up [ 109.568823][ T6492] IPVS: using max 2208 ests per chain, 110400 per kthread [ 109.568959][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 109.585194][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 109.606518][ T6493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.819463][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.992'. [ 109.848839][ T6504] netlink: 'syz.5.992': attribute type 1 has an invalid length. [ 109.856583][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz.5.992'. [ 109.961477][ T6241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.973277][ T6511] ip6t_srh: unknown srh match flags FF3F [ 109.995154][ T6513] loop6: detected capacity change from 0 to 1024 [ 110.015332][ T6513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.102427][ T6519] netlink: 'syz.5.997': attribute type 1 has an invalid length. [ 110.162971][ T6522] 9pnet_fd: Insufficient options for proto=fd [ 110.180742][ T6241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.209677][ T6524] loop5: detected capacity change from 0 to 512 [ 110.234650][ T6524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.251838][ T6526] 9p: Bad value for 'wfdno' [ 110.297619][ T6524] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.339658][ T6524] ext4: Unknown parameter './file0' [ 110.365735][ T6535] loop3: detected capacity change from 0 to 512 [ 110.379521][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.392173][ T6535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.424248][ T6535] EXT4-fs (loop3): 1 truncate cleaned up [ 110.446445][ T6538] loop5: detected capacity change from 0 to 512 [ 110.452825][ T6535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.466286][ T6538] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.483294][ T6538] EXT4-fs (loop5): 1 truncate cleaned up [ 110.489871][ T6538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.566739][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 110.566826][ T29] audit: type=1326 audit(2000000284.346:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.597317][ T6543] netlink: 'syz.5.1004': attribute type 12 has an invalid length. [ 110.605583][ T6542] netlink: 'syz.3.1003': attribute type 12 has an invalid length. [ 110.612755][ T6530] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 110.632923][ T29] audit: type=1326 audit(2000000284.386:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.656481][ T29] audit: type=1326 audit(2000000284.386:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.680053][ T29] audit: type=1326 audit(2000000284.386:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.732007][ T29] audit: type=1326 audit(2000000284.486:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.755636][ T29] audit: type=1326 audit(2000000284.486:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.779125][ T29] audit: type=1326 audit(2000000284.506:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.802578][ T29] audit: type=1326 audit(2000000284.506:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.826085][ T29] audit: type=1326 audit(2000000284.506:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.849628][ T29] audit: type=1326 audit(2000000284.506:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.4.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b505f749 code=0x7ffc0000 [ 110.957074][ T6558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6558 comm=syz.0.1009 [ 110.986365][ T6556] loop6: detected capacity change from 0 to 1024 [ 111.004477][ T6556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.038204][ T6556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.111677][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.136915][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.150186][ T6565] bridge0: port 3(batadv1) entered blocking state [ 111.156771][ T6565] bridge0: port 3(batadv1) entered disabled state [ 111.166163][ T6565] batadv1: entered allmulticast mode [ 111.172214][ T6565] batadv1: entered promiscuous mode [ 111.177847][ T6569] loop3: detected capacity change from 0 to 128 [ 111.189295][ T6572] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 111.217106][ T6568] 9pnet_fd: Insufficient options for proto=fd [ 111.277866][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.349882][ T6584] loop5: detected capacity change from 0 to 512 [ 111.377605][ T6584] ------------[ cut here ]------------ [ 111.383171][ T6584] EA inode 11 i_nlink=2 [ 111.383196][ T6584] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.5.1017/6584 [ 111.398257][ T6584] Modules linked in: [ 111.402350][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.5.1017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.412158][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.422317][ T6584] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 111.428947][ T6584] Code: 61 cc 9c ff 4c 8d 2d 1a b9 20 05 49 8d 7e 40 e8 c1 61 b8 ff 49 8b 6e 40 4c 89 e7 e8 d5 5c b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 5c f7 ba 03 66 66 66 2e 0f 1f 84 [ 111.448673][ T6584] RSP: 0018:ffffc900030175a0 EFLAGS: 00010246 [ 111.454852][ T6584] RAX: ffff888102079b10 RBX: ffff88811b036080 RCX: ffffffff81bb543b [ 111.462916][ T6584] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d40 [ 111.471004][ T6584] RBP: 000000000000000b R08: 000188811b036033 R09: 0000000000000000 [ 111.479101][ T6584] R10: ffffc900030174d0 R11: 0001c900030174d0 R12: ffff88811b036030 [ 111.487303][ T6584] R13: ffffffff86dc0d40 R14: ffff88811b035fe8 R15: 0000000000000001 [ 111.495345][ T6584] FS: 00007f753b8876c0(0000) GS:ffff8882aeec2000(0000) knlGS:0000000000000000 [ 111.504480][ T6584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.511090][ T6584] CR2: 00007f753ce02a60 CR3: 0000000105342000 CR4: 00000000003506f0 [ 111.519126][ T6584] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 111.527150][ T6584] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 111.535179][ T6584] Call Trace: [ 111.538488][ T6584] [ 111.541606][ T6584] ext4_xattr_set_entry+0x77f/0x1020 [ 111.547070][ T6584] ext4_xattr_ibody_set+0x184/0x3c0 [ 111.552579][ T6584] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 111.558463][ T6584] __ext4_expand_extra_isize+0x246/0x280 [ 111.564152][ T6584] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 111.569706][ T6584] ext4_evict_inode+0x7c4/0xd40 [ 111.574626][ T6584] ? __pfx_ext4_evict_inode+0x10/0x10 [ 111.580118][ T6584] evict+0x2af/0x510 [ 111.584092][ T6584] ? __dquot_initialize+0x146/0x7c0 [ 111.589446][ T6584] iput+0x4bd/0x650 [ 111.593301][ T6584] ext4_process_orphan+0x1a9/0x1c0 [ 111.598458][ T6584] ext4_orphan_cleanup+0x6a8/0xa00 [ 111.603652][ T6584] ext4_fill_super+0x3411/0x37a0 [ 111.608731][ T6584] ? set_blocksize+0x1a8/0x310 [ 111.613592][ T6584] ? sb_set_blocksize+0xfc/0x170 [ 111.618629][ T6584] ? setup_bdev_super+0x30e/0x370 [ 111.623703][ T6584] ? __pfx_ext4_fill_super+0x10/0x10 [ 111.629145][ T6584] get_tree_bdev_flags+0x291/0x300 [ 111.634316][ T6584] ? __pfx_ext4_fill_super+0x10/0x10 [ 111.639664][ T6584] get_tree_bdev+0x1f/0x30 [ 111.644669][ T6584] ext4_get_tree+0x1c/0x30 [ 111.649140][ T6584] vfs_get_tree+0x57/0x1d0 [ 111.652131][ T416] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 111.653910][ T6584] do_new_mount+0x24d/0x6a0 [ 111.662838][ T416] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 111.676618][ T6584] path_mount+0x4ab/0xb80 [ 111.677107][ T6556] syz.6.1008 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 111.680978][ T6584] ? user_path_at+0xbf/0x130 [ 111.695237][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.6.1008 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.695275][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.695292][ T6556] Call Trace: [ 111.695300][ T6556] [ 111.695309][ T6556] __dump_stack+0x1d/0x30 [ 111.695338][ T6556] dump_stack_lvl+0xe8/0x140 [ 111.695370][ T6556] dump_stack+0x15/0x1b [ 111.695420][ T6556] dump_header+0x81/0x240 [ 111.695448][ T6556] oom_kill_process+0x295/0x350 [ 111.695525][ T6556] out_of_memory+0x97b/0xb80 [ 111.695625][ T6556] try_charge_memcg+0x610/0xa10 [ 111.695664][ T6556] obj_cgroup_charge_pages+0xa6/0x150 [ 111.695714][ T6556] __memcg_kmem_charge_page+0x9f/0x170 [ 111.695756][ T6556] __alloc_frozen_pages_noprof+0x18f/0x360 [ 111.695902][ T6556] alloc_pages_mpol+0xb3/0x260 [ 111.695942][ T6556] ? alloc_pages_noprof+0x61/0x130 [ 111.696067][ T6556] alloc_pages_noprof+0x90/0x130 [ 111.696122][ T6556] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 111.696194][ T6556] __kvmalloc_node_noprof+0x492/0x6b0 [ 111.696234][ T6556] ? ip_set_alloc+0x24/0x30 [ 111.696298][ T6556] ? ip_set_alloc+0x24/0x30 [ 111.696343][ T6556] ip_set_alloc+0x24/0x30 [ 111.696383][ T6556] hash_netiface_create+0x282/0x740 [ 111.696432][ T6556] ? __pfx_hash_netiface_create+0x10/0x10 [ 111.696634][ T6556] ip_set_create+0x3cc/0x970 [ 111.696662][ T6556] ? _raw_spin_unlock+0x26/0x50 [ 111.696693][ T6556] ? finish_task_switch+0x7a/0x2a0 [ 111.696749][ T6556] ? __cond_resched+0x4e/0x90 [ 111.696814][ T6556] nfnetlink_rcv_msg+0x4c6/0x590 [ 111.696885][ T6556] netlink_rcv_skb+0x123/0x220 [ 111.696929][ T6556] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.696977][ T6556] nfnetlink_rcv+0x167/0x16c0 [ 111.697057][ T6556] ? kmem_cache_free+0xe3/0x3a0 [ 111.697155][ T6556] ? __kfree_skb+0x109/0x150 [ 111.697193][ T6556] ? nlmon_xmit+0x4f/0x60 [ 111.697219][ T6556] ? consume_skb+0x49/0x150 [ 111.697255][ T6556] ? nlmon_xmit+0x4f/0x60 [ 111.697314][ T6556] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 111.697361][ T6556] ? __dev_queue_xmit+0x138d/0x1ec0 [ 111.697407][ T6556] ? __dev_queue_xmit+0x148/0x1ec0 [ 111.697452][ T6556] ? ref_tracker_free+0x37d/0x3e0 [ 111.697494][ T6556] ? __netlink_deliver_tap+0x4dc/0x500 [ 111.697575][ T6556] netlink_unicast+0x5c0/0x690 [ 111.697622][ T6556] netlink_sendmsg+0x58b/0x6b0 [ 111.697670][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.697759][ T6556] __sock_sendmsg+0x145/0x180 [ 111.697788][ T6556] ____sys_sendmsg+0x31e/0x4a0 [ 111.697913][ T6556] ___sys_sendmsg+0x17b/0x1d0 [ 111.697977][ T6556] __x64_sys_sendmsg+0xd4/0x160 [ 111.698109][ T6556] x64_sys_call+0x17ba/0x3000 [ 111.698265][ T6556] do_syscall_64+0xd8/0x2c0 [ 111.698317][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.698350][ T6556] RIP: 0033:0x7f34daf7f749 [ 111.698373][ T6556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.698402][ T6556] RSP: 002b:00007f34d99e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.698481][ T6556] RAX: ffffffffffffffda RBX: 00007f34db1d5fa0 RCX: 00007f34daf7f749 [ 111.698499][ T6556] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 111.698517][ T6556] RBP: 00007f34db003f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.698535][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.698552][ T6556] R13: 00007f34db1d6038 R14: 00007f34db1d5fa0 R15: 00007ffe2b398118 [ 111.698632][ T6556] [ 111.698641][ T6556] memory: usage 307200kB, limit 307200kB, failcnt 76 [ 111.699652][ T6584] __se_sys_mount+0x28c/0x2e0 [ 111.709404][ T6556] memory+swap: usage 307876kB, limit 9007199254740988kB, failcnt 0 [ 111.719511][ T6584] __x64_sys_mount+0x67/0x80 [ 111.722809][ T6556] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 111.725743][ T6584] x64_sys_call+0x2cca/0x3000 [ 111.730073][ T6556] Memory cgroup stats for /syz6 [ 111.734672][ T6584] do_syscall_64+0xd8/0x2c0 [ 111.738859][ T6556] : [ 111.743153][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.768742][ T6591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.774323][ T6584] RIP: 0033:0x7f753ce20eea [ 111.774343][ T6584] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.774367][ T6584] RSP: 002b:00007f753b886e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.779976][ T6592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.784313][ T6584] RAX: ffffffffffffffda RBX: 00007f753b886ef0 RCX: 00007f753ce20eea [ 111.784330][ T6584] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f753b886eb0 [ 111.791136][ T6591] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 111.795207][ T6584] RBP: 0000200000000180 R08: 00007f753b886ef0 R09: 0000000000800718 [ 111.801674][ T6556] cache 8192 [ 111.805301][ T6584] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 111.809787][ T6556] rss 28672 [ 111.809798][ T6556] shmem 0 [ 111.814131][ T6584] R13: 00007f753b886eb0 R14: 000000000000046f R15: 0000200000000200 [ 111.814163][ T6584] [ 111.819346][ T6556] mapped_file 0 [ 111.819379][ T6556] dirty 0 [ 111.825075][ T6584] ---[ end trace 0000000000000000 ]--- [ 111.952118][ T6584] EXT4-fs (loop5): 1 orphan inode deleted [ 111.956419][ T6556] writeback 0 [ 111.956431][ T6556] workingset_refault_anon 3 [ 111.956441][ T6556] workingset_refault_file 0 [ 111.956451][ T6556] swap 692224 [ 111.956460][ T6556] swapcached 4096 [ 111.956469][ T6556] pgpgin 887 [ 111.956478][ T6556] pgpgout 877 [ 111.956488][ T6556] pgfault 1497 [ 111.990213][ T6584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.994918][ T6556] pgmajfault 3 [ 111.994929][ T6556] inactive_anon 4096 [ 111.994939][ T6556] active_anon 28672 [ 111.994948][ T6556] inactive_file 8192 [ 111.994958][ T6556] active_file 0 [ 111.994967][ T6556] unevictable 0 [ 112.283336][ T6556] hierarchical_memory_limit 314572800 [ 112.288795][ T6556] hierarchical_memsw_limit 9223372036854771712 [ 112.294967][ T6556] total_cache 8192 [ 112.298694][ T6556] total_rss 28672 [ 112.302375][ T6556] total_shmem 0 [ 112.305828][ T6556] total_mapped_file 0 [ 112.309803][ T6556] total_dirty 0 [ 112.313274][ T6556] total_writeback 0 [ 112.317177][ T6556] total_workingset_refault_anon 3 [ 112.322248][ T6556] total_workingset_refault_file 0 [ 112.327285][ T6556] total_swap 692224 [ 112.331085][ T6556] total_swapcached 4096 [ 112.335258][ T6556] total_pgpgin 887 [ 112.339048][ T6556] total_pgpgout 877 [ 112.342881][ T6556] total_pgfault 1497 [ 112.346771][ T6556] total_pgmajfault 3 [ 112.350656][ T6556] total_inactive_anon 4096 [ 112.355144][ T6556] total_active_anon 28672 [ 112.359466][ T6556] total_inactive_file 8192 [ 112.363899][ T6556] total_active_file 0 [ 112.367966][ T6556] total_unevictable 0 [ 112.371985][ T6556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1008,pid=6555,uid=0 [ 112.386768][ T6556] Memory cgroup out of memory: Killed process 6555 (syz.6.1008) total-vm:93968kB, anon-rss:1136kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 112.406537][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.483502][ T6602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6602 comm=syz.5.1020 [ 112.497027][ T6241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.585347][ T6614] 9pnet_fd: Insufficient options for proto=fd [ 112.625638][ T6617] smc: net device bond0 applied user defined pnetid SYZ0 [ 112.644358][ T6617] smc: net device bond0 erased user defined pnetid SYZ0 [ 112.693171][ T6622] xt_hashlimit: size too large, truncated to 1048576 [ 112.764781][ T6630] __nla_validate_parse: 7 callbacks suppressed [ 112.764801][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 112.780255][ T6630] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 112.788042][ T6630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1024'. [ 112.792576][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1031'. [ 112.807550][ T6625] netlink: 'syz.5.1031': attribute type 1 has an invalid length. [ 112.815342][ T6625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1031'. [ 112.901149][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6641 comm=syz.5.1035 [ 112.976215][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 113.136034][ T6647] 9pnet_fd: Insufficient options for proto=fd [ 113.195166][ T6659] EXT4-fs: Ignoring removed nobh option [ 113.200832][ T6659] EXT4-fs: Ignoring removed bh option [ 113.218538][ T6659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.238196][ T6661] netlink: 'syz.5.1042': attribute type 12 has an invalid length. [ 113.247251][ T6659] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1040'. [ 113.276858][ T6241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.306552][ T6672] veth2: entered promiscuous mode [ 113.311661][ T6672] veth2: entered allmulticast mode [ 113.320649][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1047'. [ 113.332039][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.406200][ T6680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.421763][ T3481] lo speed is unknown, defaulting to 1000 [ 113.429337][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.448477][ T6683] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.448816][ T6681] 9pnet_fd: Insufficient options for proto=fd [ 113.477136][ T6689] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.550617][ T6689] ext4: Unknown parameter 'uid<00000000000000000000' [ 113.562417][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 113.585029][ T6689] EXT4-fs: dax option not supported [ 113.810893][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.858517][ T6707] set_capacity_and_notify: 4 callbacks suppressed [ 113.858574][ T6707] loop3: detected capacity change from 0 to 764 [ 113.893771][ T6707] Symlink component flag not implemented [ 113.899447][ T6707] Symlink component flag not implemented [ 114.125086][ T1078] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.144072][ T6683] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.164347][ T6721] 9p: Bad value for 'rfdno' [ 114.187859][ T6723] 9pnet_fd: Insufficient options for proto=fd [ 114.206032][ T6683] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.267120][ T6683] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.311544][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 114.321382][ T6720] validate_nla: 1 callbacks suppressed [ 114.321398][ T6720] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 114.334777][ T6720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1064'. [ 114.340011][ T6727] lo speed is unknown, defaulting to 1000 [ 114.367668][ T323] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.383681][ T323] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.399347][ T323] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.410174][ T6727] lo speed is unknown, defaulting to 1000 [ 114.412551][ T323] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.920474][ T6753] 9pnet_fd: Insufficient options for proto=fd [ 114.980339][ T6757] loop3: detected capacity change from 0 to 512 [ 114.996308][ T6757] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.002481][ T6758] netlink: 'syz.0.1077': attribute type 12 has an invalid length. [ 115.023736][ T6757] EXT4-fs (loop3): 1 truncate cleaned up [ 115.031097][ T6757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.122518][ T6761] netlink: 'syz.3.1078': attribute type 12 has an invalid length. [ 115.422984][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.444301][ T6764] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.527492][ T6764] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.583648][ T6764] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.594710][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 115.594724][ T29] audit: type=1400 audit(2000000289.376:5013): avc: denied { setcurrent } for pid=6767 comm="syz.5.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 115.644072][ T6764] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.668784][ T29] audit: type=1401 audit(2000000289.396:5014): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 115.741352][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.773393][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.811336][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.827369][ T29] audit: type=1326 audit(2000000289.606:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 115.851705][ T6776] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 115.865842][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.914156][ T29] audit: type=1326 audit(2000000289.626:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 115.937647][ T29] audit: type=1326 audit(2000000289.626:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 115.961132][ T29] audit: type=1326 audit(2000000289.626:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 115.984718][ T29] audit: type=1326 audit(2000000289.626:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 116.008164][ T29] audit: type=1326 audit(2000000289.656:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 116.031909][ T29] audit: type=1326 audit(2000000289.656:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 116.055320][ T29] audit: type=1326 audit(2000000289.656:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.3.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e6b6f749 code=0x7ffc0000 [ 116.201981][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 116.208106][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.487453][ T6793] loop5: detected capacity change from 0 to 512 [ 116.512523][ T6793] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.533109][ T6793] EXT4-fs (loop5): 1 truncate cleaned up [ 116.539275][ T6793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.596451][ T6806] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 116.634949][ T6806] team0: Failed to send options change via netlink (err -105) [ 116.642540][ T6806] team0: Port device dummy0 added [ 116.672323][ T6811] netlink: 'syz.5.1089': attribute type 12 has an invalid length. [ 116.789462][ T6815] loop3: detected capacity change from 0 to 1024 [ 116.812321][ T6815] EXT4-fs: Ignoring removed nobh option [ 116.818094][ T6815] EXT4-fs: Ignoring removed bh option [ 116.861068][ T6815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.909866][ T6815] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 116.999254][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.023984][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.065995][ T6829] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 117.167557][ T6835] loop6: detected capacity change from 0 to 1024 [ 117.185851][ T6842] FAULT_INJECTION: forcing a failure. [ 117.185851][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.189099][ T6835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.199040][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.5.1106 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.199088][ T6842] Tainted: [W]=WARN [ 117.199098][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.199120][ T6842] Call Trace: [ 117.199128][ T6842] [ 117.199141][ T6842] __dump_stack+0x1d/0x30 [ 117.199177][ T6842] dump_stack_lvl+0xe8/0x140 [ 117.199224][ T6842] dump_stack+0x15/0x1b [ 117.199252][ T6842] should_fail_ex+0x265/0x280 [ 117.199299][ T6842] should_fail+0xb/0x20 [ 117.199344][ T6842] should_fail_usercopy+0x1a/0x20 [ 117.199381][ T6842] _copy_from_user+0x1c/0xb0 [ 117.199433][ T6842] bpf_test_init+0xb9/0x140 [ 117.199477][ T6842] bpf_prog_test_run_skb+0x2b6/0xf50 [ 117.199523][ T6842] ? __rcu_read_unlock+0x4f/0x70 [ 117.199553][ T6842] ? __fget_files+0x184/0x1c0 [ 117.199601][ T6842] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.199654][ T6842] bpf_prog_test_run+0x22a/0x390 [ 117.199761][ T6842] __sys_bpf+0x4c0/0x7c0 [ 117.199802][ T6842] __x64_sys_bpf+0x41/0x50 [ 117.199847][ T6842] x64_sys_call+0x28e1/0x3000 [ 117.199882][ T6842] do_syscall_64+0xd8/0x2c0 [ 117.199970][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.200049][ T6842] RIP: 0033:0x7f753ce1f749 [ 117.200068][ T6842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.200086][ T6842] RSP: 002b:00007f753b887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.200167][ T6842] RAX: ffffffffffffffda RBX: 00007f753d075fa0 RCX: 00007f753ce1f749 [ 117.200185][ T6842] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 117.200203][ T6842] RBP: 00007f753b887090 R08: 0000000000000000 R09: 0000000000000000 [ 117.200220][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.200237][ T6842] R13: 00007f753d076038 R14: 00007f753d075fa0 R15: 00007ffc9c26bf98 [ 117.200333][ T6842] [ 117.459708][ T6835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.472682][ T6839] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 117.548668][ T6851] loop5: detected capacity change from 0 to 764 [ 117.581646][ T6851] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 117.676211][ T6860] loop5: detected capacity change from 0 to 164 [ 117.730440][ T6863] loop5: detected capacity change from 0 to 512 [ 117.748296][ T6863] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.773237][ T6863] EXT4-fs (loop5): 1 truncate cleaned up [ 117.779260][ T6863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.862662][ T6872] netlink: 'syz.5.1111': attribute type 12 has an invalid length. [ 117.912859][ T6874] __nla_validate_parse: 10 callbacks suppressed [ 117.912877][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 117.971973][ T6874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1114'. [ 118.151352][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.168843][ T6241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.232792][ T6888] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.298357][ T6896] loop3: detected capacity change from 0 to 1024 [ 118.326162][ T6896] EXT4-fs: Ignoring removed bh option [ 118.338411][ T6896] EXT4-fs: inline encryption not supported [ 118.351442][ T6896] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.373001][ T6896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 118.385560][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 118.390582][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'. [ 118.408624][ T6896] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1121: Freeing blocks not in datazone - block = 0, count = 4096 [ 118.422308][ T6896] EXT4-fs (loop3): Remounting filesystem read-only [ 118.429002][ T6896] EXT4-fs (loop3): 1 orphan inode deleted [ 118.435423][ T6896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.448179][ T37] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 118.458772][ T37] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 118.489961][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1125'. [ 118.500300][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.500527][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 118.544541][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1126'. [ 118.553625][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 118.600142][ T6917] loop5: detected capacity change from 0 to 512 [ 118.616169][ T6917] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.628781][ T6919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.653858][ T6919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.657846][ T6917] EXT4-fs (loop5): 1 truncate cleaned up [ 118.707285][ T6917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.707555][ T6926] FAULT_INJECTION: forcing a failure. [ 118.707555][ T6926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.733108][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.3.1131 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.733160][ T6926] Tainted: [W]=WARN [ 118.733169][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.733187][ T6926] Call Trace: [ 118.733195][ T6926] [ 118.733203][ T6926] __dump_stack+0x1d/0x30 [ 118.733229][ T6926] dump_stack_lvl+0xe8/0x140 [ 118.733255][ T6926] dump_stack+0x15/0x1b [ 118.733288][ T6926] should_fail_ex+0x265/0x280 [ 118.733322][ T6926] should_fail+0xb/0x20 [ 118.733356][ T6926] should_fail_usercopy+0x1a/0x20 [ 118.733390][ T6926] _copy_to_user+0x20/0xa0 [ 118.733430][ T6926] simple_read_from_buffer+0xb5/0x130 [ 118.733453][ T6926] proc_fail_nth_read+0x10e/0x150 [ 118.733540][ T6926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.733570][ T6926] vfs_read+0x1a8/0x770 [ 118.733594][ T6926] ? __rcu_read_unlock+0x4f/0x70 [ 118.733618][ T6926] ? __fget_files+0x184/0x1c0 [ 118.733669][ T6926] ? mutex_lock+0x58/0x90 [ 118.733699][ T6926] ksys_read+0xda/0x1a0 [ 118.733720][ T6926] __x64_sys_read+0x40/0x50 [ 118.733838][ T6926] x64_sys_call+0x2889/0x3000 [ 118.733864][ T6926] do_syscall_64+0xd8/0x2c0 [ 118.733903][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.734001][ T6926] RIP: 0033:0x7f58e6b6e15c [ 118.734017][ T6926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.734039][ T6926] RSP: 002b:00007f58e55d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.734065][ T6926] RAX: ffffffffffffffda RBX: 00007f58e6dc5fa0 RCX: 00007f58e6b6e15c [ 118.734155][ T6926] RDX: 000000000000000f RSI: 00007f58e55d70a0 RDI: 0000000000000004 [ 118.734173][ T6926] RBP: 00007f58e55d7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.734190][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.734208][ T6926] R13: 00007f58e6dc6038 R14: 00007f58e6dc5fa0 R15: 00007fff9d8ef838 [ 118.734234][ T6926] [ 119.284653][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 119.301164][ T6918] syz.6.1129 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 119.312314][ T6918] CPU: 1 UID: 0 PID: 6918 Comm: syz.6.1129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.312348][ T6918] Tainted: [W]=WARN [ 119.312356][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.312376][ T6918] Call Trace: [ 119.312431][ T6918] [ 119.312441][ T6918] __dump_stack+0x1d/0x30 [ 119.312473][ T6918] dump_stack_lvl+0xe8/0x140 [ 119.312549][ T6918] dump_stack+0x15/0x1b [ 119.312576][ T6918] dump_header+0x81/0x240 [ 119.312604][ T6918] oom_kill_process+0x295/0x350 [ 119.312709][ T6918] out_of_memory+0x97b/0xb80 [ 119.312745][ T6918] try_charge_memcg+0x610/0xa10 [ 119.312780][ T6918] charge_memcg+0x51/0xc0 [ 119.312814][ T6918] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 119.312862][ T6918] __read_swap_cache_async+0x17b/0x2d0 [ 119.312971][ T6918] swap_cluster_readahead+0x362/0x3c0 [ 119.313017][ T6918] swapin_readahead+0xde/0x820 [ 119.313075][ T6918] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 119.313146][ T6918] ? __rcu_read_unlock+0x34/0x70 [ 119.313241][ T6918] ? __rcu_read_unlock+0x4f/0x70 [ 119.313267][ T6918] ? swap_cache_get_folio+0x277/0x280 [ 119.313427][ T6918] do_swap_page+0x2b4/0x21e0 [ 119.313469][ T6918] ? __pfx_default_wake_function+0x10/0x10 [ 119.313554][ T6918] handle_mm_fault+0x9d8/0x2c60 [ 119.313602][ T6918] do_user_addr_fault+0x630/0x1080 [ 119.313637][ T6918] exc_page_fault+0x62/0xa0 [ 119.313702][ T6918] asm_exc_page_fault+0x26/0x30 [ 119.313728][ T6918] RIP: 0033:0x7f34dae559ec [ 119.313744][ T6918] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 119.313762][ T6918] RSP: 002b:00007ffe2b398280 EFLAGS: 00010287 [ 119.313838][ T6918] RAX: 0000000000000000 RBX: 00007f34db1d6090 RCX: 0000000000000000 [ 119.313916][ T6918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555feb8808 [ 119.313933][ T6918] RBP: 00007f34db1d7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 119.313950][ T6918] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001d26b [ 119.313966][ T6918] R13: 00007f34db1d6090 R14: ffffffffffffffff R15: 00007ffe2b398390 [ 119.313992][ T6918] [ 119.314007][ T6918] memory: usage 307200kB, limit 307200kB, failcnt 428 [ 119.383753][ T6946] validate_nla: 3 callbacks suppressed [ 119.383788][ T6946] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 119.388436][ T6918] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 119.388455][ T6918] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 119.388467][ T6918] Memory cgroup stats for /syz6: [ 119.564871][ T6946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1139'. [ 119.585702][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.602218][ T6918] cache 28672 [ 119.605559][ T6918] rss 0 [ 119.608340][ T6918] shmem 0 [ 119.611314][ T6918] mapped_file 0 [ 119.614862][ T6918] dirty 0 [ 119.617812][ T6918] writeback 0 [ 119.621119][ T6918] workingset_refault_anon 144 [ 119.625873][ T6918] workingset_refault_file 0 [ 119.630409][ T6918] swap 724992 [ 119.633744][ T6918] swapcached 0 [ 119.637149][ T6918] pgpgin 10709 [ 119.640591][ T6918] pgpgout 10702 [ 119.644092][ T6918] pgfault 12326 [ 119.647566][ T6918] pgmajfault 61 [ 119.651045][ T6918] inactive_anon 0 [ 119.654726][ T6918] active_anon 0 [ 119.658196][ T6918] inactive_file 28672 [ 119.662286][ T6918] active_file 0 [ 119.665808][ T6918] unevictable 0 [ 119.669274][ T6918] hierarchical_memory_limit 314572800 [ 119.674657][ T6918] hierarchical_memsw_limit 9223372036854771712 [ 119.680840][ T6918] total_cache 28672 [ 119.684705][ T6918] total_rss 0 [ 119.688003][ T6918] total_shmem 0 [ 119.691470][ T6918] total_mapped_file 0 [ 119.695477][ T6918] total_dirty 0 [ 119.699028][ T6918] total_writeback 0 [ 119.702893][ T6918] total_workingset_refault_anon 144 [ 119.708119][ T6918] total_workingset_refault_file 0 [ 119.713219][ T6918] total_swap 724992 [ 119.717046][ T6918] total_swapcached 0 [ 119.720977][ T6918] total_pgpgin 10709 [ 119.724936][ T6918] total_pgpgout 10702 [ 119.728921][ T6918] total_pgfault 12326 [ 119.732970][ T6918] total_pgmajfault 61 [ 119.736946][ T6918] total_inactive_anon 0 [ 119.741168][ T6918] total_active_anon 0 [ 119.745219][ T6918] total_inactive_file 28672 [ 119.749727][ T6918] total_active_file 0 [ 119.753787][ T6918] total_unevictable 0 [ 119.757763][ T6918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1129,pid=6918,uid=0 [ 119.772415][ T6918] Memory cgroup out of memory: Killed process 6918 (syz.6.1129) total-vm:93968kB, anon-rss:1136kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 119.867601][ T6959] ================================================================== [ 119.875725][ T6959] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 119.883643][ T6959] [ 119.885976][ T6959] write to 0xffff88811e8c7710 of 8 bytes by task 6960 on cpu 0: [ 119.893619][ T6959] cpu_map_kthread_run+0x529/0x1560 [ 119.898840][ T6959] kthread+0x489/0x510 [ 119.902940][ T6959] ret_from_fork+0x149/0x290 [ 119.907566][ T6959] ret_from_fork_asm+0x1a/0x30 [ 119.912352][ T6959] [ 119.914692][ T6959] read to 0xffff88811e8c7710 of 8 bytes by task 6959 on cpu 1: [ 119.922264][ T6959] bq_flush_to_queue+0x124/0x350 [ 119.927252][ T6959] __cpu_map_flush+0x38/0x80 [ 119.931862][ T6959] xdp_do_flush+0xf9/0x160 [ 119.936281][ T6959] bpf_test_run_xdp_live+0xd67/0x11d0 [ 119.941691][ T6959] bpf_prog_test_run_xdp+0x525/0x970 [ 119.947001][ T6959] bpf_prog_test_run+0x22a/0x390 [ 119.951967][ T6959] __sys_bpf+0x4c0/0x7c0 [ 119.956219][ T6959] __x64_sys_bpf+0x41/0x50 [ 119.960668][ T6959] x64_sys_call+0x28e1/0x3000 [ 119.965383][ T6959] do_syscall_64+0xd8/0x2c0 [ 119.969935][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.975846][ T6959] [ 119.978178][ T6959] value changed: 0xffff88819db88070 -> 0x0000000000000000 [ 119.985291][ T6959] [ 119.987621][ T6959] Reported by Kernel Concurrency Sanitizer on: [ 119.993775][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.0.1143 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.005160][ T6959] Tainted: [W]=WARN [ 120.008967][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.019033][ T6959] ================================================================== [ 120.107093][ T6241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.