last executing test programs: 16m4.204433174s ago: executing program 32 (id=3365): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 15m41.021469596s ago: executing program 33 (id=4097): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e63, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 14m53.86680371s ago: executing program 34 (id=5022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) 14m48.796396593s ago: executing program 35 (id=5428): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r0, 0x10, 0x6, 0x10001) creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x443, 0x0) fchown(r1, 0x0, 0xee01) 14m18.343409009s ago: executing program 36 (id=6019): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m14.903865493s ago: executing program 37 (id=7073): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r1 = syz_io_uring_setup(0x4ec6, &(0x7f0000000140)={0x0, 0x7144, 0x8, 0x2, 0x3a2}, &(0x7f0000000ac0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x40, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 12m52.018005748s ago: executing program 38 (id=7927): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 12m37.649855525s ago: executing program 2 (id=8247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12m37.57240036s ago: executing program 2 (id=8250): pipe(&(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt6_stats\x00') fchdir(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 12m37.524174363s ago: executing program 2 (id=8254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 12m37.381882071s ago: executing program 2 (id=8258): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@user_xattr}, {@nouid32}, {@nojournal_checksum}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) inotify_init() finit_module(r0, 0x0, 0x0) open(0x0, 0x145142, 0x50) 12m37.22867249s ago: executing program 2 (id=8263): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 12m37.153422855s ago: executing program 2 (id=8266): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x810, {[@eol]}}}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@rand_addr=0x64010101, 0x4e21, 0x0, 0x4e21, 0x81, 0x2, 0xd0, 0x80, 0x84}, {0x53, 0x1, 0x8, 0x200, 0x81, 0x6, 0x101, 0x11}, {0x5, 0xec53, 0x5, 0x10000}, 0x6, 0x8, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x1, 0x3, 0xe, 0x7fff, 0x10, 0x3}}, 0xe8) 12m22.792733461s ago: executing program 39 (id=8266): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x810, {[@eol]}}}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@rand_addr=0x64010101, 0x4e21, 0x0, 0x4e21, 0x81, 0x2, 0xd0, 0x80, 0x84}, {0x53, 0x1, 0x8, 0x200, 0x81, 0x6, 0x101, 0x11}, {0x5, 0xec53, 0x5, 0x10000}, 0x6, 0x8, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x1, 0x3, 0xe, 0x7fff, 0x10, 0x3}}, 0xe8) 12m11.342579324s ago: executing program 8 (id=8754): r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x2c, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 12m11.136112767s ago: executing program 8 (id=8760): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 12m10.888737762s ago: executing program 8 (id=8765): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) 12m10.872421943s ago: executing program 8 (id=8767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 12m10.847235954s ago: executing program 8 (id=8768): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 12m10.75694117s ago: executing program 8 (id=8769): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) rt_sigtimedwait(&(0x7f0000000080)={[0x5]}, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) read(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) 12m10.735044731s ago: executing program 40 (id=8769): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) rt_sigtimedwait(&(0x7f0000000080)={[0x5]}, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x8) read(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) 12m0.738593737s ago: executing program 9 (id=8963): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7586, &(0x7f0000000440)={0x0, 0xf657, 0x40, 0x2, 0x7ffff}, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) 12m0.706416479s ago: executing program 9 (id=8965): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) 12m0.632773013s ago: executing program 9 (id=8967): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 12m0.631682284s ago: executing program 9 (id=8968): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 12m0.588245826s ago: executing program 9 (id=8980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) close(r0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) 12m0.467100543s ago: executing program 9 (id=8973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ac0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0xd4b, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5b, '\x00', @empty, [{0x5, 0x1a6, "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"}]}}}}}}, 0x0) 12m0.440341475s ago: executing program 41 (id=8973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000ac0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0xd4b, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5b, '\x00', @empty, [{0x5, 0x1a6, "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"}]}}}}}}, 0x0) 10m16.370030312s ago: executing program 0 (id=11269): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xdf45, 0xb8}, 0x80b0, 0x2, 0x800020, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000240)=""/173, 0xad) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) 10m16.311080506s ago: executing program 0 (id=11270): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3514, 0xfdd5, 0x8, 0x0, 0x0) 10m16.169374904s ago: executing program 0 (id=11271): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = mq_open(0x0, 0x800, 0x8, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) dup3(r2, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10m15.705360172s ago: executing program 0 (id=11273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000240)=""/173, 0xad) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) 10m15.636697886s ago: executing program 0 (id=11275): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 10m15.57555953s ago: executing program 0 (id=11279): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 10m1.025066858s ago: executing program 42 (id=11279): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 9m51.969772298s ago: executing program 4 (id=11639): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 9m51.907487072s ago: executing program 4 (id=11641): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) 9m50.974935277s ago: executing program 4 (id=11647): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) 9m50.743723521s ago: executing program 4 (id=11650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x3, 0x43d, &(0x7f0000000580)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 9m50.361655634s ago: executing program 4 (id=11653): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9m49.721478332s ago: executing program 4 (id=11670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 9m49.697085753s ago: executing program 43 (id=11670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3.557401302s ago: executing program 5 (id=23222): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@fat=@sys_immutable}, {@utf8}, {@numtail}]}, 0x0, 0x2b6, &(0x7f0000001640)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 3.217369772s ago: executing program 5 (id=23227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 3.068250711s ago: executing program 5 (id=23233): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 2.949057698s ago: executing program 7 (id=23236): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.109295237s ago: executing program 5 (id=23243): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r0, 0x1, 0x70bd30, 0x35dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0xbe, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) 2.023608622s ago: executing program 6 (id=23246): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x4000080) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f", 0x3c, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 1.975253215s ago: executing program 6 (id=23247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x50}}, 0x4040000) 1.974818765s ago: executing program 7 (id=23248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ptrace(0x10, 0x0) ptrace$setregs(0x1a, 0x0, 0xfbfffffffffffff8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000200)=0xe5, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29b4"], 0xdd12}], 0x1}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r8, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r9 = socket$igmp(0x2, 0x3, 0x2) unshare(0x2000400) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0xab487000) 1.974460745s ago: executing program 3 (id=23249): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='O', 0x1}], 0x1}, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x3, &(0x7f0000000400)="cd2293211e89651704bdd2da0f021da8d97e8e69e581ecfb4265db21ad35e14edfce66061496c3ed0f6e0953205a822428fd34787c45567ff7712540728c78e00f1db1613290f74658767d81c14f2af220f913997700efd10d9ce1d3e5e0bba2468543ac77ff716cfe945b784eb6a6687854d32b893b23792a6ea3cf6afa728a34c06132bce781765b") ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1.934446847s ago: executing program 6 (id=23250): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080006400000000008000f4000000004140000001000010000000000000000000084000ae6a9853f4cf46ebb0e08ff96a0651250e99027bfcc273c7e21cffdc2f877681997309c7baf0c25617e8bf90cc5c6a8ffc4cf69f7103dc546e48e77b3afaf365dcffeeb3e7f457d19419ff7d6fa145b6369f933206e75099c1d6f70b2ee073d0565395df4143d4b6b"], 0x84}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") close_range(r1, 0xffffffffffffffff, 0x0) 1.933771327s ago: executing program 3 (id=23251): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.405256229s ago: executing program 1 (id=23252): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@fat=@sys_immutable}, {@utf8}, {@numtail}]}, 0x0, 0x2b6, &(0x7f0000001640)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 1.401505439s ago: executing program 5 (id=23262): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x800003, 0x78, 0x4, 0x6}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x400, 0x9, 0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.387352569s ago: executing program 1 (id=23253): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25100000000800050011bb0000540001"], 0x8c}, 0x1, 0x0, 0x0, 0x4014}, 0xc004) 933.923716ms ago: executing program 7 (id=23254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 933.295226ms ago: executing program 1 (id=23255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x3, 0x2, 0x0, 0x40, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x74}, @jmp={0x5, 0x1, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 877.575809ms ago: executing program 6 (id=23256): syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2b72646d61202b63707573657420cc9c96f311b91bae4ae0854d6d8b221c4c474ece8efb74dc07908875000039732223ef3c95c5d43341c8"], 0xe) 877.201319ms ago: executing program 1 (id=23257): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) 877.032519ms ago: executing program 3 (id=23258): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001b31a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x7) 867.08828ms ago: executing program 7 (id=23259): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 859.47979ms ago: executing program 1 (id=23260): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 719.094708ms ago: executing program 5 (id=23261): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a64", 0x16, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) 718.191079ms ago: executing program 6 (id=23263): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) 690.60714ms ago: executing program 3 (id=23264): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@fat=@sys_immutable}, {@utf8}, {@numtail}]}, 0x0, 0x2b6, &(0x7f0000001640)="$eJzs3UFrE00cx/Ffk7ZJU9rkUB54Hnhw0Itelja+giAtiAGlNkU9CFu70ZA1KdkYSRHbm1dfR/HoSUF9A7148y5eiiB46aG40t2sTdsgbW27tfl+oLvTmfnvzmTY8N9ANht3Xj6ulj2rbDeVSBslpFVtSrntUsdAZ58IysPqtqoro98//X/77r0bhWJxetaYmcLc1bwxZvzCu6fPXl380Bydfz3+NqX13P2Nb/nP6/+s/7vxYy46el2yzUK93rQXXMcsVryqZcwt17E9x1RqntNomq72sltfWmobu7Y4lllqOJ5n7FrbVJ22adZNs9E29kO7UjOWZZmxjPpN8tARpbXZWbtwIoNBHEZ6VTYaBTvZs7G0dhqDAgAAZ0uQ/6clnXL+/6jimYpnavVd+f3+/D+hQ+T/Ul/n/4dH/t8PtvP/TOf63Y38HwAAAAAAAAAAAAAAAAAAAACAv8Gm72d9389G++gvJSktKfo/7nHiZLD+/a3ri3tpyX3RKrVK4T5sL5RVkStHk0PS1vxYWOv7vh9uZ64XpydNIKf37konfqVVSioVxUdyYUxoJ34qjDfd8SsaUqb7/HllNdE7Pt8jvlUa1uVLfio47/bWUlYfH6guV4vBDHbin08Zc+1mcU/8SNAPAAAAAIDzwDK/7Lt/D9otEz02ZE97WLnz+YCy2up9fz7Z8/58UP8NxjdvAAAAAAD6iddeHrBd12l47eXqOS9Ev39wLAcMXrpYp5Purln9TedBSZ2aN2dlLQ5SSEg6anjyz1b5q6RdNROxL/dxFL48Ca+Ag3SO810JAAAAwEmIkv6BuAcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAfO+jDw6L+R3n2WNfpkvHMEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbfgYAAP//z/UP2g==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 686.77517ms ago: executing program 7 (id=23274): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 667.037602ms ago: executing program 3 (id=23265): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="cf"], 0x4c}}, 0x20048051) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 613.365415ms ago: executing program 6 (id=23266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ptrace(0x10, 0x0) ptrace$setregs(0x1a, 0x0, 0xfbfffffffffffff8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000200)=0xe5, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29b4"], 0xdd12}], 0x1}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r8, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r9 = socket$igmp(0x2, 0x3, 0x2) unshare(0x2000400) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0xab487000) 597.520645ms ago: executing program 3 (id=23267): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080006400000000008000f4000000004140000001000010000000000000000000084000ae6a9853f4cf46ebb0e08ff96a0651250e99027bfcc273c7e21cffdc2f877681997309c7baf0c25617e8bf90cc5c6a8ffc4cf69f7103dc546e48e77b3afaf365dcffeeb3e7f457d19419ff7d6fa145b6369f933206e75099c1d6f70b2ee073d0565395df4143d4b6b"], 0x84}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") close_range(r1, 0xffffffffffffffff, 0x0) 2.8254ms ago: executing program 1 (id=23268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r0], 0x3c}}, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000020010000300012800b000100697036746e6c00002000028008000100"], 0x50}}, 0x20004010) 0s ago: executing program 7 (id=23279): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): [ 1013.566600][T24985] inactive_file 0 [ 1013.570290][T24985] active_file 4096 [ 1013.574030][T24985] unevictable 0 [ 1013.577546][T24985] hierarchical_memory_limit 314572800 [ 1013.583051][T24985] hierarchical_memsw_limit 9223372036854771712 [ 1013.589343][T24985] total_cache 21868544 [ 1013.593437][T24985] total_rss 1552384 [ 1013.597308][T24985] total_shmem 21868544 [ 1013.601392][T24985] total_mapped_file 0 [ 1013.605407][T24985] total_dirty 0 [ 1013.608966][T24985] total_writeback 0 [ 1013.612827][T24985] total_workingset_refault_anon 172 [ 1013.618089][T24985] total_workingset_refault_file 2218 [ 1013.623446][T24985] total_swap 47599616 [ 1013.627463][T24985] total_swapcached 69632 [ 1013.631790][T24985] total_pgpgin 678154 [ 1013.635845][T24985] total_pgpgout 672418 [ 1013.640118][T24985] total_pgfault 699653 [ 1013.644327][T24985] total_pgmajfault 131 [ 1013.648422][T24985] total_inactive_anon 21884928 [ 1013.653663][T24985] total_active_anon 1605632 [ 1013.658291][T24985] total_inactive_file 0 [ 1013.662485][T24985] total_active_file 4096 [ 1013.666763][T24985] total_unevictable 0 [ 1013.671225][T24985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.19884,pid=24985,uid=0 [ 1013.686197][T24985] Memory cgroup out of memory: Killed process 24985 (syz.5.19884) total-vm:94264kB, anon-rss:1284kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 1014.173177][T25048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19914'. [ 1014.588304][T25088] wg1 speed is unknown, defaulting to 1000 [ 1014.685774][T25088] lo speed is unknown, defaulting to 1000 [ 1014.774771][T25088] lo speed is unknown, defaulting to 1000 [ 1015.055796][T25111] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 1015.176095][T25117] tipc: Can't bind to reserved service type 1 [ 1015.325585][T25124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19950'. [ 1015.334861][T25124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19950'. [ 1015.552648][T25153] netlink: 64 bytes leftover after parsing attributes in process `syz.6.19964'. [ 1015.629780][T25160] netlink: 'syz.7.19969': attribute type 1 has an invalid length. [ 1016.058144][T25225] netlink: 'syz.1.20000': attribute type 2 has an invalid length. [ 1016.165683][T25243] netlink: 'syz.7.20008': attribute type 8 has an invalid length. [ 1016.264051][T25260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20015'. [ 1016.317258][T25267] wg1 speed is unknown, defaulting to 1000 [ 1016.345217][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 1016.345233][ T29] audit: type=1326 audit(2000003291.566:16048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.403731][ T29] audit: type=1326 audit(2000003291.608:16049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.404628][T25267] lo speed is unknown, defaulting to 1000 [ 1016.428306][ T29] audit: type=1326 audit(2000003291.608:16050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.428357][ T29] audit: type=1326 audit(2000003291.608:16051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.428392][ T29] audit: type=1326 audit(2000003291.608:16052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.428435][ T29] audit: type=1326 audit(2000003291.608:16053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.428470][ T29] audit: type=1326 audit(2000003291.608:16054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.553538][ T29] audit: type=1326 audit(2000003291.608:16055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4975e4b78e code=0x7ffc0000 [ 1016.577210][ T29] audit: type=1326 audit(2000003291.608:16056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.601481][ T29] audit: type=1326 audit(2000003291.608:16057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.1.20021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1016.643105][T25267] lo speed is unknown, defaulting to 1000 [ 1017.115656][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20044'. [ 1017.124908][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20044'. [ 1017.188242][T25334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20049'. [ 1017.242992][T25342] netlink: 'syz.7.20053': attribute type 3 has an invalid length. [ 1017.261146][T25344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20054'. [ 1017.372740][T25362] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20063'. [ 1017.456182][T25377] netlink: 'syz.1.20070': attribute type 1 has an invalid length. [ 1017.534670][T25395] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20077'. [ 1017.807803][T25440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20099'. [ 1017.972907][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20113'. [ 1018.051369][T25481] netlink: 'syz.1.20120': attribute type 1 has an invalid length. [ 1018.795345][T25568] netlink: 'syz.1.20154': attribute type 10 has an invalid length. [ 1018.891449][T25583] netlink: 'syz.6.20162': attribute type 2 has an invalid length. [ 1019.016427][T25600] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1020.291848][T25681] syz.1.20208 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1020.305927][T25681] CPU: 0 UID: 0 PID: 25681 Comm: syz.1.20208 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1020.305967][T25681] Tainted: [W]=WARN [ 1020.305975][T25681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1020.305995][T25681] Call Trace: [ 1020.306005][T25681] [ 1020.306017][T25681] __dump_stack+0x1d/0x30 [ 1020.306086][T25681] dump_stack_lvl+0x95/0xd0 [ 1020.306118][T25681] dump_stack+0x15/0x1b [ 1020.306249][T25681] dump_header+0x80/0x240 [ 1020.306280][T25681] oom_kill_process+0x295/0x350 [ 1020.306310][T25681] out_of_memory+0x97d/0xb80 [ 1020.306339][T25681] try_charge_memcg+0x62e/0xa10 [ 1020.306457][T25681] obj_cgroup_charge_pages+0x23/0xc0 [ 1020.306496][T25681] __memcg_kmem_charge_page+0x9e/0x170 [ 1020.306530][T25681] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1020.306694][T25681] alloc_pages_mpol+0xb3/0x260 [ 1020.306745][T25681] alloc_pages_noprof+0x8f/0x130 [ 1020.306788][T25681] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1020.306835][T25681] __kvmalloc_node_noprof+0x471/0x680 [ 1020.306879][T25681] ? ip_set_alloc+0x24/0x30 [ 1020.306915][T25681] ? ip_set_alloc+0x24/0x30 [ 1020.306951][T25681] ? __slab_alloc+0x25/0x50 [ 1020.306999][T25681] ip_set_alloc+0x24/0x30 [ 1020.307045][T25681] hash_netiface_create+0x282/0x740 [ 1020.307080][T25681] ? __pfx_hash_netiface_create+0x10/0x10 [ 1020.307135][T25681] ip_set_create+0x3cf/0x970 [ 1020.307168][T25681] ? __nla_parse+0x40/0x60 [ 1020.307197][T25681] nfnetlink_rcv_msg+0x509/0x5d0 [ 1020.307263][T25681] netlink_rcv_skb+0x123/0x220 [ 1020.307333][T25681] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1020.307373][T25681] nfnetlink_rcv+0x167/0x1720 [ 1020.307421][T25681] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1020.307466][T25681] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1020.307503][T25681] ? _raw_spin_lock_bh+0x56/0xb0 [ 1020.307544][T25681] ? should_fail_ex+0x30/0x280 [ 1020.307598][T25681] ? selinux_nlmsg_lookup+0x99/0x890 [ 1020.307629][T25681] ? __rcu_read_unlock+0x33/0x70 [ 1020.307665][T25681] ? __netlink_lookup+0x276/0x2b0 [ 1020.307723][T25681] netlink_unicast+0x5c0/0x690 [ 1020.307760][T25681] netlink_sendmsg+0x5c8/0x6f0 [ 1020.307793][T25681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.307821][T25681] ____sys_sendmsg+0x5af/0x600 [ 1020.307904][T25681] ___sys_sendmsg+0x195/0x1e0 [ 1020.307944][T25681] __x64_sys_sendmsg+0xd4/0x160 [ 1020.307975][T25681] x64_sys_call+0x17ba/0x3000 [ 1020.308006][T25681] do_syscall_64+0xc0/0x2a0 [ 1020.308105][T25681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.308132][T25681] RIP: 0033:0x7f4975e8aeb9 [ 1020.308149][T25681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.308169][T25681] RSP: 002b:00007f49748e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.308245][T25681] RAX: ffffffffffffffda RBX: 00007f4976105fa0 RCX: 00007f4975e8aeb9 [ 1020.308260][T25681] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1020.308273][T25681] RBP: 00007f4975ef8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1020.308288][T25681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.308305][T25681] R13: 00007f4976106038 R14: 00007f4976105fa0 R15: 00007ffd6e77a168 [ 1020.308333][T25681] [ 1020.308407][T25681] memory: usage 307200kB, limit 307200kB, failcnt 6224 [ 1020.636531][T25681] memory+swap: usage 344780kB, limit 9007199254740988kB, failcnt 0 [ 1020.644766][T25681] kmem: usage 275992kB, limit 9007199254740988kB, failcnt 0 [ 1020.652197][T25681] Memory cgroup stats for /syz1: [ 1020.661612][T25681] cache 31092736 [ 1020.670193][T25681] rss 851968 [ 1020.673496][T25681] shmem 31088640 [ 1020.677083][T25681] mapped_file 4096 [ 1020.680862][T25681] dirty 0 [ 1020.684009][T25681] writeback 0 [ 1020.687590][T25681] workingset_refault_anon 193 [ 1020.692367][T25681] workingset_refault_file 25737 [ 1020.697465][T25681] swap 38481920 [ 1020.701064][T25681] swapcached 4096 [ 1020.704743][T25681] pgpgin 1021195 [ 1020.708482][T25681] pgpgout 1013393 [ 1020.712280][T25681] pgfault 998415 [ 1020.715905][T25681] pgmajfault 335 [ 1020.719523][T25681] inactive_anon 446464 [ 1020.723631][T25681] active_anon 31498240 [ 1020.727733][T25681] inactive_file 0 [ 1020.731437][T25681] active_file 12288 [ 1020.735407][T25681] unevictable 0 [ 1020.738958][T25681] hierarchical_memory_limit 314572800 [ 1020.744363][T25681] hierarchical_memsw_limit 9223372036854771712 [ 1020.750654][T25681] total_cache 31092736 [ 1020.754755][T25681] total_rss 851968 [ 1020.758566][T25681] total_shmem 31088640 [ 1020.762714][T25681] total_mapped_file 4096 [ 1020.767048][T25681] total_dirty 0 [ 1020.770647][T25681] total_writeback 0 [ 1020.774477][T25681] total_workingset_refault_anon 193 [ 1020.780283][T25681] total_workingset_refault_file 25737 [ 1020.785984][T25681] total_swap 38481920 [ 1020.790104][T25681] total_swapcached 4096 [ 1020.794286][T25681] total_pgpgin 1021195 [ 1020.798429][T25681] total_pgpgout 1013393 [ 1020.802613][T25681] total_pgfault 998417 [ 1020.806755][T25681] total_pgmajfault 335 [ 1020.810903][T25681] total_inactive_anon 446464 [ 1020.815614][T25681] total_active_anon 31498240 [ 1020.820409][T25681] total_inactive_file 0 [ 1020.824655][T25681] total_active_file 12288 [ 1020.829183][T25681] total_unevictable 0 [ 1020.833240][T25681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.20208,pid=25680,uid=0 [ 1020.848155][T25681] Memory cgroup out of memory: Killed process 25680 (syz.1.20208) total-vm:94248kB, anon-rss:1208kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 1021.057486][T25725] __nla_validate_parse: 8 callbacks suppressed [ 1021.057509][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20224'. [ 1021.072868][T25725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20224'. [ 1021.082074][T25725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20224'. [ 1021.215347][T25740] netlink: 76 bytes leftover after parsing attributes in process `syz.7.20231'. [ 1021.429570][T25777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20249'. [ 1021.511374][T25791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20256'. [ 1021.527843][T25791] gre0: entered promiscuous mode [ 1021.892507][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20290'. [ 1021.901706][T25861] netlink: 'syz.7.20290': attribute type 1 has an invalid length. [ 1021.981009][T25873] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20296'. [ 1022.016850][T25877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20298'. [ 1022.436790][T25956] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1022.682274][T26001] netlink: 3 bytes leftover after parsing attributes in process `syz.5.20353'. [ 1022.782614][T26014] netlink: 'syz.5.20357': attribute type 1 has an invalid length. [ 1022.825304][T26018] bridge_slave_0: entered promiscuous mode [ 1022.831295][T26018] bridge_slave_0: entered allmulticast mode [ 1022.996961][T26029] ipt_ECN: cannot use operation on non-tcp rule [ 1023.260271][T26011] syz.6.20356 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1023.274440][T26011] CPU: 1 UID: 0 PID: 26011 Comm: syz.6.20356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1023.274484][T26011] Tainted: [W]=WARN [ 1023.274494][T26011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.274585][T26011] Call Trace: [ 1023.274592][T26011] [ 1023.274602][T26011] __dump_stack+0x1d/0x30 [ 1023.274628][T26011] dump_stack_lvl+0x95/0xd0 [ 1023.274723][T26011] dump_stack+0x15/0x1b [ 1023.274745][T26011] dump_header+0x80/0x240 [ 1023.274768][T26011] oom_kill_process+0x295/0x350 [ 1023.274849][T26011] out_of_memory+0x97d/0xb80 [ 1023.274878][T26011] try_charge_memcg+0x62e/0xa10 [ 1023.274924][T26011] obj_cgroup_charge_pages+0x23/0xc0 [ 1023.275035][T26011] __memcg_kmem_charge_page+0x9e/0x170 [ 1023.275071][T26011] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1023.275109][T26011] alloc_pages_mpol+0xb3/0x260 [ 1023.275163][T26011] alloc_pages_noprof+0x8f/0x130 [ 1023.275199][T26011] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1023.275247][T26011] __kvmalloc_node_noprof+0x471/0x680 [ 1023.275287][T26011] ? ip_set_alloc+0x24/0x30 [ 1023.275321][T26011] ? ip_set_alloc+0x24/0x30 [ 1023.275357][T26011] ip_set_alloc+0x24/0x30 [ 1023.275464][T26011] hash_netiface_create+0x282/0x740 [ 1023.275558][T26011] ? __pfx_hash_netiface_create+0x10/0x10 [ 1023.275593][T26011] ip_set_create+0x3cf/0x970 [ 1023.275626][T26011] ? __nla_parse+0x40/0x60 [ 1023.275648][T26011] nfnetlink_rcv_msg+0x509/0x5d0 [ 1023.275841][T26011] netlink_rcv_skb+0x123/0x220 [ 1023.275878][T26011] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1023.275931][T26011] nfnetlink_rcv+0x167/0x1720 [ 1023.275975][T26011] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1023.276022][T26011] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1023.276068][T26011] ? _raw_spin_lock_bh+0x56/0xb0 [ 1023.276118][T26011] ? should_fail_ex+0x30/0x280 [ 1023.276189][T26011] ? selinux_nlmsg_lookup+0x99/0x890 [ 1023.276214][T26011] ? __rcu_read_unlock+0x33/0x70 [ 1023.276248][T26011] ? __netlink_lookup+0x276/0x2b0 [ 1023.276274][T26011] netlink_unicast+0x5c0/0x690 [ 1023.276353][T26011] netlink_sendmsg+0x5c8/0x6f0 [ 1023.276379][T26011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1023.276480][T26011] ____sys_sendmsg+0x5af/0x600 [ 1023.276506][T26011] ___sys_sendmsg+0x195/0x1e0 [ 1023.276551][T26011] __x64_sys_sendmsg+0xd4/0x160 [ 1023.276579][T26011] x64_sys_call+0x17ba/0x3000 [ 1023.276607][T26011] do_syscall_64+0xc0/0x2a0 [ 1023.276686][T26011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.276832][T26011] RIP: 0033:0x7fbb8e04aeb9 [ 1023.276850][T26011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.276872][T26011] RSP: 002b:00007fbb8caa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.276924][T26011] RAX: ffffffffffffffda RBX: 00007fbb8e2c5fa0 RCX: 00007fbb8e04aeb9 [ 1023.276940][T26011] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1023.276955][T26011] RBP: 00007fbb8e0b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1023.277021][T26011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.277061][T26011] R13: 00007fbb8e2c6038 R14: 00007fbb8e2c5fa0 R15: 00007ffc0456b118 [ 1023.277133][T26011] [ 1023.277144][T26011] memory: usage 307200kB, limit 307200kB, failcnt 7733 [ 1023.599051][T26011] memory+swap: usage 308748kB, limit 9007199254740988kB, failcnt 0 [ 1023.607024][T26011] kmem: usage 238364kB, limit 9007199254740988kB, failcnt 0 [ 1023.614356][T26011] Memory cgroup stats for /syz6: [ 1023.614695][T26011] cache 69455872 [ 1023.623280][T26011] rss 634880 [ 1023.626619][T26011] shmem 20480 [ 1023.629954][T26011] mapped_file 0 [ 1023.633487][T26011] dirty 0 [ 1023.636452][T26011] writeback 0 [ 1023.639768][T26011] workingset_refault_anon 2047 [ 1023.644595][T26011] workingset_refault_file 15493 [ 1023.649476][T26011] swap 1585152 [ 1023.652902][T26011] swapcached 397312 [ 1023.656733][T26011] pgpgin 1163606 [ 1023.660306][T26011] pgpgout 1146397 [ 1023.664067][T26011] pgfault 1077527 [ 1023.667819][T26011] pgmajfault 528 [ 1023.671547][T26011] inactive_anon 692224 [ 1023.675716][T26011] active_anon 360448 [ 1023.679634][T26011] inactive_file 0 [ 1023.683330][T26011] active_file 0 [ 1023.686832][T26011] unevictable 69435392 [ 1023.690949][T26011] hierarchical_memory_limit 314572800 [ 1023.696455][T26011] hierarchical_memsw_limit 9223372036854771712 [ 1023.702699][T26011] total_cache 69455872 [ 1023.706883][T26011] total_rss 634880 [ 1023.710686][T26011] total_shmem 20480 [ 1023.714533][T26011] total_mapped_file 0 [ 1023.718547][T26011] total_dirty 0 [ 1023.722166][T26011] total_writeback 0 [ 1023.726085][T26011] total_workingset_refault_anon 2047 [ 1023.731435][T26011] total_workingset_refault_file 15493 [ 1023.736952][T26011] total_swap 1585152 [ 1023.740910][T26011] total_swapcached 397312 [ 1023.745265][T26011] total_pgpgin 1163606 [ 1023.749390][T26011] total_pgpgout 1146397 [ 1023.753675][T26011] total_pgfault 1077527 [ 1023.757963][T26011] total_pgmajfault 528 [ 1023.762224][T26011] total_inactive_anon 692224 [ 1023.766869][T26011] total_active_anon 360448 [ 1023.771366][T26011] total_inactive_file 0 [ 1023.775642][T26011] total_active_file 0 [ 1023.779756][T26011] total_unevictable 69435392 [ 1023.784645][T26011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.20356,pid=26010,uid=0 [ 1023.799937][T26011] Memory cgroup out of memory: Killed process 26010 (syz.6.20356) total-vm:94248kB, anon-rss:1336kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 1023.902579][T26055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1024.258335][T26124] sock: sock_timestamping_bind_phc: sock not bind to device [ 1024.596538][T26183] team0: entered promiscuous mode [ 1024.818114][T26217] wg1 speed is unknown, defaulting to 1000 [ 1024.855676][T26217] lo speed is unknown, defaulting to 1000 [ 1024.894104][T26217] lo speed is unknown, defaulting to 1000 [ 1025.443553][T26264] wg1 speed is unknown, defaulting to 1000 [ 1025.564100][T26264] lo speed is unknown, defaulting to 1000 [ 1025.589852][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 1025.589868][ T29] audit: type=1400 audit(2000003301.278:16145): avc: denied { setopt } for pid=26279 comm="syz.5.20466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1025.676289][T26264] lo speed is unknown, defaulting to 1000 [ 1026.274222][ T29] audit: type=1326 audit(2000003301.992:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.5.20496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1026.328493][ T29] audit: type=1326 audit(2000003301.992:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.5.20496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1026.352517][ T29] audit: type=1326 audit(2000003301.992:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.5.20496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1026.376428][ T29] audit: type=1326 audit(2000003301.992:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.5.20496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1026.400540][ T29] audit: type=1326 audit(2000003301.992:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.5.20496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1026.446484][T26318] syz.6.20484 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1026.460641][T26318] CPU: 1 UID: 0 PID: 26318 Comm: syz.6.20484 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1026.460688][T26318] Tainted: [W]=WARN [ 1026.460698][T26318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.460716][T26318] Call Trace: [ 1026.460726][T26318] [ 1026.460800][T26318] __dump_stack+0x1d/0x30 [ 1026.460836][T26318] dump_stack_lvl+0x95/0xd0 [ 1026.460894][T26318] dump_stack+0x15/0x1b [ 1026.460915][T26318] dump_header+0x80/0x240 [ 1026.460938][T26318] oom_kill_process+0x295/0x350 [ 1026.460971][T26318] out_of_memory+0x97d/0xb80 [ 1026.461082][T26318] try_charge_memcg+0x62e/0xa10 [ 1026.461116][T26318] obj_cgroup_charge_pages+0x23/0xc0 [ 1026.461184][T26318] __memcg_kmem_charge_page+0x9e/0x170 [ 1026.461225][T26318] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1026.461309][T26318] alloc_pages_mpol+0xb3/0x260 [ 1026.461423][T26318] alloc_pages_noprof+0x8f/0x130 [ 1026.461484][T26318] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1026.461588][T26318] __kvmalloc_node_noprof+0x471/0x680 [ 1026.461618][T26318] ? ip_set_alloc+0x24/0x30 [ 1026.461661][T26318] ? ip_set_alloc+0x24/0x30 [ 1026.461791][T26318] ip_set_alloc+0x24/0x30 [ 1026.461876][T26318] hash_netiface_create+0x282/0x740 [ 1026.461923][T26318] ? __pfx_hash_netiface_create+0x10/0x10 [ 1026.461969][T26318] ip_set_create+0x3cf/0x970 [ 1026.462035][T26318] ? __nla_parse+0x40/0x60 [ 1026.462064][T26318] nfnetlink_rcv_msg+0x509/0x5d0 [ 1026.462145][T26318] netlink_rcv_skb+0x123/0x220 [ 1026.462191][T26318] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1026.462263][T26318] nfnetlink_rcv+0x167/0x1720 [ 1026.462362][T26318] ? __list_add_valid_or_report+0x38/0xe0 [ 1026.462478][T26318] ? merge_sched_in+0x5db/0xbe0 [ 1026.462524][T26318] ? rb_next+0x5c/0x80 [ 1026.462603][T26318] ? visit_groups_merge+0xf7e/0xfd0 [ 1026.462714][T26318] ? event_sched_out+0x896/0x8f0 [ 1026.462742][T26318] ? _raw_spin_lock_bh+0x56/0xb0 [ 1026.462869][T26318] ? should_fail_ex+0x30/0x280 [ 1026.462916][T26318] ? selinux_nlmsg_lookup+0x99/0x890 [ 1026.462948][T26318] ? __rcu_read_unlock+0x33/0x70 [ 1026.463020][T26318] ? __netlink_lookup+0x276/0x2b0 [ 1026.463051][T26318] netlink_unicast+0x5c0/0x690 [ 1026.463100][T26318] netlink_sendmsg+0x5c8/0x6f0 [ 1026.463136][T26318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.463163][T26318] ____sys_sendmsg+0x5af/0x600 [ 1026.463196][T26318] ___sys_sendmsg+0x195/0x1e0 [ 1026.463296][T26318] __x64_sys_sendmsg+0xd4/0x160 [ 1026.463332][T26318] x64_sys_call+0x17ba/0x3000 [ 1026.463370][T26318] do_syscall_64+0xc0/0x2a0 [ 1026.463415][T26318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.463489][T26318] RIP: 0033:0x7fbb8e04aeb9 [ 1026.463520][T26318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.463542][T26318] RSP: 002b:00007fbb8caa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.463571][T26318] RAX: ffffffffffffffda RBX: 00007fbb8e2c5fa0 RCX: 00007fbb8e04aeb9 [ 1026.463591][T26318] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 1026.463610][T26318] RBP: 00007fbb8e0b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1026.463628][T26318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.463675][T26318] R13: 00007fbb8e2c6038 R14: 00007fbb8e2c5fa0 R15: 00007ffc0456b118 [ 1026.463705][T26318] [ 1026.790698][T26318] memory: usage 307200kB, limit 307200kB, failcnt 8204 [ 1026.798081][T26318] memory+swap: usage 308748kB, limit 9007199254740988kB, failcnt 0 [ 1026.806213][T26318] kmem: usage 238312kB, limit 9007199254740988kB, failcnt 0 [ 1026.813558][T26318] Memory cgroup stats for /syz6: [ 1026.815231][T26318] cache 69455872 [ 1026.823906][T26318] rss 688128 [ 1026.827172][T26318] shmem 20480 [ 1026.830508][T26318] mapped_file 0 [ 1026.834069][T26318] dirty 0 [ 1026.837009][T26318] writeback 0 [ 1026.840329][T26318] workingset_refault_anon 2047 [ 1026.845199][T26318] workingset_refault_file 15751 [ 1026.850074][T26318] swap 1585152 [ 1026.853573][T26318] swapcached 397312 [ 1026.857469][T26318] pgpgin 1165713 [ 1026.861084][T26318] pgpgout 1148491 [ 1026.864778][T26318] pgfault 1081604 [ 1026.868433][T26318] pgmajfault 534 [ 1026.872074][T26318] inactive_anon 430080 [ 1026.876324][T26318] active_anon 675840 [ 1026.880249][T26318] inactive_file 0 [ 1026.883932][T26318] active_file 0 [ 1026.887415][T26318] unevictable 69435392 [ 1026.891576][T26318] hierarchical_memory_limit 314572800 [ 1026.897173][T26318] hierarchical_memsw_limit 9223372036854771712 [ 1026.903378][T26318] total_cache 69455872 [ 1026.907466][T26318] total_rss 688128 [ 1026.911403][T26318] total_shmem 20480 [ 1026.915382][T26318] total_mapped_file 0 [ 1026.919492][T26318] total_dirty 0 [ 1026.922968][T26318] total_writeback 0 [ 1026.926871][T26318] total_workingset_refault_anon 2047 [ 1026.932207][T26318] total_workingset_refault_file 15751 [ 1026.937657][T26318] total_swap 1585152 [ 1026.941699][T26318] total_swapcached 397312 [ 1026.946236][T26318] total_pgpgin 1165713 [ 1026.950458][T26318] total_pgpgout 1148491 [ 1026.954688][T26318] total_pgfault 1081604 [ 1026.959056][T26318] total_pgmajfault 534 [ 1026.963155][T26318] total_inactive_anon 430080 [ 1026.967788][T26318] total_active_anon 675840 [ 1026.972263][T26318] total_inactive_file 0 [ 1026.976447][T26318] total_active_file 0 [ 1026.980562][T26318] total_unevictable 69435392 [ 1026.985193][T26318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.20484,pid=26317,uid=0 [ 1027.000573][T26318] Memory cgroup out of memory: Killed process 26317 (syz.6.20484) total-vm:94000kB, anon-rss:1336kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1027.458955][ T29] audit: type=1400 audit(2000003303.230:16151): avc: denied { lock } for pid=26387 comm="syz.7.20512" path="socket:[213323]" dev="sockfs" ino=213323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1027.558407][T26402] __nla_validate_parse: 9 callbacks suppressed [ 1027.558430][T26402] netlink: 277 bytes leftover after parsing attributes in process `syz.7.20518'. [ 1027.706725][ T29] audit: type=1326 audit(2000003303.493:16152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.6.20530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1027.730864][ T29] audit: type=1326 audit(2000003303.493:16153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.6.20530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1027.797565][T26432] netlink: 48 bytes leftover after parsing attributes in process `syz.5.20532'. [ 1027.872038][ T29] audit: type=1326 audit(2000003303.556:16154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.6.20530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1029.021846][T26562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20589'. [ 1029.528070][T26633] netlink: 32 bytes leftover after parsing attributes in process `syz.7.20623'. [ 1030.385276][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 1030.385295][ T29] audit: type=1326 audit(2000003306.306:16242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.20635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1030.427480][ T29] audit: type=1326 audit(2000003306.306:16243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.20635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1030.472391][T26698] tipc: Started in network mode [ 1030.477323][T26698] tipc: Node identity 050000000000000005, cluster identity 2 [ 1030.599166][T26706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20653'. [ 1030.907864][T26739] netlink: 56 bytes leftover after parsing attributes in process `syz.6.20663'. [ 1031.757484][ T29] audit: type=1107 audit(2000003307.745:16244): pid=26810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1032.412709][ T29] audit: type=1326 audit(2000003308.438:16245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.5.20724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1032.439616][ T29] audit: type=1326 audit(2000003308.469:16246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.5.20724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1032.472730][ T29] audit: type=1326 audit(2000003308.490:16247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.5.20724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1032.567406][ T29] audit: type=1326 audit(2000003308.595:16248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.5.20724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1032.591404][ T29] audit: type=1326 audit(2000003308.595:16249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.5.20724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1032.731133][T26865] xt_CT: No such helper "pptp" [ 1033.113991][T26918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20747'. [ 1033.125056][T26918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20747'. [ 1033.203280][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20751'. [ 1033.244724][T26931] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1033.332811][T26937] netlink: 'syz.3.20752': attribute type 29 has an invalid length. [ 1033.894680][T27005] wg1 speed is unknown, defaulting to 1000 [ 1033.933847][T27005] lo speed is unknown, defaulting to 1000 [ 1033.973891][T27005] lo speed is unknown, defaulting to 1000 [ 1034.098216][ T29] audit: type=1326 audit(2000003310.201:16250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.1.20793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1034.122173][ T29] audit: type=1326 audit(2000003310.201:16251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27017 comm="syz.1.20793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1034.444497][T27051] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1034.550388][T27059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27059 comm=syz.6.20811 [ 1034.719114][T27085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20822'. [ 1034.779318][T27090] wg1 speed is unknown, defaulting to 1000 [ 1034.954217][T27090] lo speed is unknown, defaulting to 1000 [ 1034.975473][T27128] ip6tnl0: Caught tx_queue_len zero misconfig [ 1034.987010][T27130] netlink: 'syz.1.20843': attribute type 6 has an invalid length. [ 1035.079384][T27090] lo speed is unknown, defaulting to 1000 [ 1035.363138][T27169] IPVS: Error connecting to the multicast addr [ 1035.409938][T27173] tipc: Bearer : already 2 bearers with priority 10 [ 1035.417539][T27173] tipc: Bearer : trying with adjusted priority [ 1035.424695][T27173] tipc: Enabling of bearer rejected, failed to enable media [ 1035.527324][T27183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20865'. [ 1035.832015][T27230] netlink: 'syz.7.20885': attribute type 11 has an invalid length. [ 1035.840442][T27230] netlink: 44 bytes leftover after parsing attributes in process `syz.7.20885'. [ 1036.288119][T27257] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20893'. [ 1036.297504][T27257] netlink: 164 bytes leftover after parsing attributes in process `syz.6.20893'. [ 1036.498714][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1036.498733][ T29] audit: type=1400 audit(2000003312.721:16308): avc: denied { connect } for pid=27279 comm="syz.5.20906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1036.536032][T27282] bridge0: entered allmulticast mode [ 1036.616523][T27294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20913'. [ 1036.641658][T27303] xt_hashlimit: size too large, truncated to 1048576 [ 1036.648604][T27303] xt_hashlimit: max too large, truncated to 1048576 [ 1037.439669][T27426] Cannot find del_set index 29 as target [ 1037.529832][T27444] xt_hashlimit: size too large, truncated to 1048576 [ 1037.620051][T27448] xt_hashlimit: size too large, truncated to 1048576 [ 1037.656763][T27459] sctp: [Deprecated]: syz.7.20977 (pid 27459) Use of int in maxseg socket option. [ 1037.656763][T27459] Use struct sctp_assoc_value instead [ 1038.395736][T27543] sctp: [Deprecated]: syz.5.21014 (pid 27543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1038.395736][T27543] Use struct sctp_sack_info instead [ 1038.776918][T27570] SELinux: Context system_u:object_r:getty_exec_t:s0 is not valid (left unmapped). [ 1038.779141][ T29] audit: type=1400 audit(2000003315.115:16309): avc: denied { relabelfrom } for pid=27569 comm="syz.6.21025" name="TCPv6" dev="sockfs" ino=216179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1038.854441][ T29] audit: type=1400 audit(2000003315.125:16310): avc: denied { relabelto } for pid=27569 comm="syz.6.21025" name="TCPv6" dev="sockfs" ino=216179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:getty_exec_t:s0" [ 1039.026800][T27598] xt_HMARK: spi-set and port-set can't be combined [ 1039.187643][T27613] macvtap2: entered promiscuous mode [ 1039.193218][T27613] macvtap2: entered allmulticast mode [ 1039.198725][T27613] batadv0: entered allmulticast mode [ 1039.230828][T27613] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1039.239844][T27613] batadv0: left allmulticast mode [ 1039.448673][T27642] pimreg: entered allmulticast mode [ 1039.456624][T27642] pimreg: left allmulticast mode [ 1040.084236][T27698] pimreg3: entered allmulticast mode [ 1040.227789][T27712] netlink: 64 bytes leftover after parsing attributes in process `syz.3.21086'. [ 1040.270122][T27720] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1040.296418][ T29] audit: type=1326 audit(2000003316.711:16311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.321727][ T29] audit: type=1326 audit(2000003316.732:16312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.368144][ T29] audit: type=1326 audit(2000003316.742:16313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.391978][ T29] audit: type=1326 audit(2000003316.742:16314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.415965][ T29] audit: type=1326 audit(2000003316.742:16315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.439904][ T29] audit: type=1326 audit(2000003316.742:16316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.463890][ T29] audit: type=1326 audit(2000003316.742:16317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27723 comm="syz.3.21091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1040.550989][T27749] bridge0: entered promiscuous mode [ 1041.392443][T27828] wg1 speed is unknown, defaulting to 1000 [ 1041.426569][T27828] lo speed is unknown, defaulting to 1000 [ 1041.468035][T27828] lo speed is unknown, defaulting to 1000 [ 1041.649196][T27857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21147'. [ 1041.658923][T27857] lo: Caught tx_queue_len zero misconfig [ 1042.215764][T27860] syz.3.21145 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 1042.228813][T27860] CPU: 1 UID: 0 PID: 27860 Comm: syz.3.21145 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1042.228900][T27860] Tainted: [W]=WARN [ 1042.228911][T27860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1042.228929][T27860] Call Trace: [ 1042.228937][T27860] [ 1042.228949][T27860] __dump_stack+0x1d/0x30 [ 1042.228990][T27860] dump_stack_lvl+0x95/0xd0 [ 1042.229021][T27860] dump_stack+0x15/0x1b [ 1042.229118][T27860] dump_header+0x80/0x240 [ 1042.229218][T27860] oom_kill_process+0x295/0x350 [ 1042.229248][T27860] out_of_memory+0x97d/0xb80 [ 1042.229286][T27860] try_charge_memcg+0x62e/0xa10 [ 1042.229413][T27860] obj_cgroup_charge_pages+0x23/0xc0 [ 1042.229501][T27860] __memcg_kmem_charge_page+0x9e/0x170 [ 1042.229547][T27860] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1042.229596][T27860] alloc_pages_mpol+0xb3/0x260 [ 1042.229651][T27860] alloc_pages_noprof+0x8f/0x130 [ 1042.229684][T27860] pte_alloc_one+0x1e/0xd0 [ 1042.229776][T27860] __pte_alloc+0x32/0x2c0 [ 1042.229821][T27860] handle_mm_fault+0x2057/0x3030 [ 1042.229875][T27860] ? mt_find+0x291/0x3b0 [ 1042.229993][T27860] do_user_addr_fault+0x3fd/0x1050 [ 1042.230043][T27860] exc_page_fault+0x62/0xa0 [ 1042.230078][T27860] asm_exc_page_fault+0x26/0x30 [ 1042.230164][T27860] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1042.230196][T27860] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1042.230223][T27860] RSP: 0018:ffffc9000368fcd8 EFLAGS: 00050202 [ 1042.230248][T27860] RAX: ffff88818b5b4c90 RBX: 0000000000100007 RCX: 00000000000002a2 [ 1042.230268][T27860] RDX: 0000000000000001 RSI: 0000200000e00000 RDI: ffff888229effd65 [ 1042.230319][T27860] RBP: 0000000000000004 R08: 00000000000001bf R09: 0000000000000000 [ 1042.230337][T27860] R10: 0001888229e00000 R11: 0001888229f00006 R12: ffff888127080000 [ 1042.230356][T27860] R13: ffffc9000368fd5c R14: ffff888229e00000 R15: 0000200000d0029b [ 1042.230423][T27860] _copy_from_user+0x6f/0xb0 [ 1042.230452][T27860] generic_map_update_batch+0x36e/0x540 [ 1042.230526][T27860] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1042.230606][T27860] bpf_map_do_batch+0x25c/0x380 [ 1042.230707][T27860] __sys_bpf+0x5f8/0x7b0 [ 1042.230750][T27860] __x64_sys_bpf+0x41/0x50 [ 1042.230783][T27860] x64_sys_call+0x28e1/0x3000 [ 1042.230865][T27860] do_syscall_64+0xc0/0x2a0 [ 1042.230930][T27860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.231035][T27860] RIP: 0033:0x7fd71074aeb9 [ 1042.231058][T27860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.231085][T27860] RSP: 002b:00007fd70f186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.231113][T27860] RAX: ffffffffffffffda RBX: 00007fd7109c6090 RCX: 00007fd71074aeb9 [ 1042.231133][T27860] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1042.231152][T27860] RBP: 00007fd7107b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1042.231234][T27860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.231251][T27860] R13: 00007fd7109c6128 R14: 00007fd7109c6090 R15: 00007fffaf571a98 [ 1042.231277][T27860] [ 1042.231287][T27860] memory: usage 307200kB, limit 307200kB, failcnt 2407 [ 1042.558122][T27860] memory+swap: usage 271148kB, limit 9007199254740988kB, failcnt 0 [ 1042.566206][T27860] kmem: usage 268376kB, limit 9007199254740988kB, failcnt 0 [ 1042.573591][T27860] Memory cgroup stats for /syz3: [ 1042.577117][T27860] cache 12288 [ 1042.585424][T27860] rss 962560 [ 1042.588727][T27860] shmem 12288 [ 1042.592064][T27860] mapped_file 0 [ 1042.595625][T27860] dirty 0 [ 1042.598674][T27860] writeback 0 [ 1042.602026][T27860] workingset_refault_anon 4784 [ 1042.607050][T27860] workingset_refault_file 14668 [ 1042.612185][T27860] swap 1421312 [ 1042.615657][T27860] swapcached 77824 [ 1042.619443][T27860] pgpgin 1214918 [ 1042.623033][T27860] pgpgout 1214660 [ 1042.626769][T27860] pgfault 1115228 [ 1042.630445][T27860] pgmajfault 880 [ 1042.634031][T27860] inactive_anon 114688 [ 1042.638251][T27860] active_anon 937984 [ 1042.642190][T27860] inactive_file 0 [ 1042.645953][T27860] active_file 4096 [ 1042.649707][T27860] unevictable 0 [ 1042.653251][T27860] hierarchical_memory_limit 314572800 [ 1042.658677][T27860] hierarchical_memsw_limit 9223372036854771712 [ 1042.664938][T27860] total_cache 12288 [ 1042.668849][T27860] total_rss 962560 [ 1042.672605][T27860] total_shmem 12288 [ 1042.676502][T27860] total_mapped_file 0 [ 1042.680526][T27860] total_dirty 0 [ 1042.684059][T27860] total_writeback 0 [ 1042.687953][T27860] total_workingset_refault_anon 4784 [ 1042.693304][T27860] total_workingset_refault_file 14668 [ 1042.698812][T27860] total_swap 1421312 [ 1042.702777][T27860] total_swapcached 77824 [ 1042.707097][T27860] total_pgpgin 1214918 [ 1042.711215][T27860] total_pgpgout 1214660 [ 1042.715564][T27860] total_pgfault 1115228 [ 1042.719826][T27860] total_pgmajfault 880 [ 1042.724033][T27860] total_inactive_anon 114688 [ 1042.728653][T27860] total_active_anon 937984 [ 1042.733169][T27860] total_inactive_file 0 [ 1042.737352][T27860] total_active_file 4096 [ 1042.741724][T27860] total_unevictable 0 [ 1042.745749][T27860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.21145,pid=27854,uid=0 [ 1042.760829][T27860] Memory cgroup out of memory: Killed process 27860 (syz.3.21145) total-vm:94248kB, anon-rss:1208kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 1042.943447][T27930] sock: sock_set_timeout: `syz.5.21176' (pid 27930) tries to set negative timeout [ 1043.172320][T27960] sctp: [Deprecated]: syz.6.21190 (pid 27960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.172320][T27960] Use struct sctp_sack_info instead [ 1043.493497][T28002] pim6reg: entered allmulticast mode [ 1043.501552][T28001] pim6reg: left allmulticast mode [ 1043.831497][T28020] netlink: 'syz.1.21217': attribute type 15 has an invalid length. [ 1044.809703][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz.7.21270'. [ 1044.968881][T28149] wg1 speed is unknown, defaulting to 1000 [ 1045.032246][T28149] lo speed is unknown, defaulting to 1000 [ 1045.094154][T28149] lo speed is unknown, defaulting to 1000 [ 1046.861155][T28280] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1047.004114][T28300] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21341'. [ 1047.290664][T28334] wg1 speed is unknown, defaulting to 1000 [ 1047.348579][T28334] lo speed is unknown, defaulting to 1000 [ 1047.419167][T28334] lo speed is unknown, defaulting to 1000 [ 1048.311337][T28436] wg1 speed is unknown, defaulting to 1000 [ 1048.373283][T28436] lo speed is unknown, defaulting to 1000 [ 1048.436846][T28436] lo speed is unknown, defaulting to 1000 [ 1049.075895][T28453] 9p: Bad value for 'wfdno' [ 1049.140301][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1049.140316][ T29] audit: type=1400 audit(2000003325.991:16330): avc: denied { read } for pid=16610 comm="kworker/0:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=217916 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1049.218644][T28469] bpf: Bad value for 'uid' [ 1049.372683][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21421'. [ 1049.459311][T28490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21425'. [ 1049.588064][ T29] audit: type=1326 audit(2000003326.464:16331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.627038][ T29] audit: type=1326 audit(2000003326.464:16332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.651411][ T29] audit: type=1326 audit(2000003326.464:16333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.675209][ T29] audit: type=1326 audit(2000003326.464:16334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.699133][ T29] audit: type=1326 audit(2000003326.464:16335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.723864][ T29] audit: type=1326 audit(2000003326.464:16336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.747602][ T29] audit: type=1326 audit(2000003326.464:16337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.771373][ T29] audit: type=1326 audit(2000003326.464:16338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1049.795437][ T29] audit: type=1326 audit(2000003326.464:16339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28507 comm="syz.6.21433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1050.091073][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21453'. [ 1050.100448][T28559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21454'. [ 1051.601254][T28702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21514'. [ 1051.610928][T28702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21514'. [ 1051.825843][T28737] wg1 speed is unknown, defaulting to 1000 [ 1051.875649][T28737] lo speed is unknown, defaulting to 1000 [ 1051.911818][T28737] lo speed is unknown, defaulting to 1000 [ 1052.292148][T28773] netlink: 88 bytes leftover after parsing attributes in process `syz.7.21546'. [ 1052.301523][T28773] netlink: 48 bytes leftover after parsing attributes in process `syz.7.21546'. [ 1052.624610][T28807] 9p: Bad value for 'rfdno' [ 1052.761850][T28824] netlink: 56 bytes leftover after parsing attributes in process `syz.6.21570'. [ 1052.916645][T28844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21580'. [ 1052.925937][T28844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21580'. [ 1052.952326][T28844] macvlan0: entered allmulticast mode [ 1052.958297][T28844] veth0_to_team: entered allmulticast mode [ 1053.409437][T28887] netlink: 'syz.5.21597': attribute type 29 has an invalid length. [ 1053.418993][T28887] netlink: 'syz.5.21597': attribute type 29 has an invalid length. [ 1053.430122][T28887] netlink: 'syz.5.21597': attribute type 29 has an invalid length. [ 1054.162891][T28907] IPVS: Error connecting to the multicast addr [ 1054.393973][T28921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21609'. [ 1054.648677][T28930] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28930 comm=syz.1.21614 [ 1054.891649][T28959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21622'. [ 1054.924009][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21624'. [ 1055.289270][T28986] bridge12: entered promiscuous mode [ 1055.294835][T28986] bridge12: entered allmulticast mode [ 1055.363987][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1055.364007][ T29] audit: type=1107 audit(2000003332.532:16355): pid=28993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1055.515330][T29008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21644'. [ 1056.294498][T29058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.21663'. [ 1057.431432][T29147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21704'. [ 1057.881918][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21713'. [ 1057.935360][T29172] bridge_slave_0: default FDB implementation only supports local addresses [ 1058.594460][T29242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21745'. [ 1058.674755][T29254] netlink: 'syz.3.21751': attribute type 1 has an invalid length. [ 1058.682909][T29254] netlink: 128 bytes leftover after parsing attributes in process `syz.3.21751'. [ 1058.728405][T29258] 9p: Bad value for 'rfdno' [ 1058.774630][T29262] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1058.786485][T29262] bond16 (unregistering): Released all slaves [ 1058.896831][T29274] netlink: 399 bytes leftover after parsing attributes in process `syz.1.21759'. [ 1058.906104][T29274] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 1058.932826][T29276] netlink: 'syz.1.21760': attribute type 9 has an invalid length. [ 1059.787058][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21782'. [ 1060.085342][T29362] netlink: 87 bytes leftover after parsing attributes in process `syz.7.21795'. [ 1060.917968][T29406] wg1 speed is unknown, defaulting to 1000 [ 1060.978027][T29406] lo speed is unknown, defaulting to 1000 [ 1061.038730][T29406] lo speed is unknown, defaulting to 1000 [ 1061.589165][T29435] wg1 speed is unknown, defaulting to 1000 [ 1061.607046][T29441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21823'. [ 1061.711297][T29435] lo speed is unknown, defaulting to 1000 [ 1061.764722][T29435] lo speed is unknown, defaulting to 1000 [ 1063.678666][T29561] wg1 speed is unknown, defaulting to 1000 [ 1063.739306][T29561] lo speed is unknown, defaulting to 1000 [ 1063.801745][T29561] lo speed is unknown, defaulting to 1000 [ 1064.410636][T29605] netlink: 47 bytes leftover after parsing attributes in process `syz.6.21881'. [ 1064.841897][T29637] wg1 speed is unknown, defaulting to 1000 [ 1064.905123][T29637] lo speed is unknown, defaulting to 1000 [ 1064.967252][T29637] lo speed is unknown, defaulting to 1000 [ 1065.310912][T29650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.21899'. [ 1065.340094][T29650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.21899'. [ 1065.490474][T29662] IPVS: Scheduler module ip_vs_ not found [ 1066.681293][T29736] netlink: 68 bytes leftover after parsing attributes in process `syz.6.21926'. [ 1067.230455][T29767] netlink: 'syz.3.21939': attribute type 8 has an invalid length. [ 1067.279803][ T29] audit: type=1326 audit(2000003345.046:16356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.303989][ T29] audit: type=1326 audit(2000003345.046:16357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.329460][ T29] audit: type=1326 audit(2000003345.067:16358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.353373][ T29] audit: type=1326 audit(2000003345.067:16359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.377566][ T29] audit: type=1326 audit(2000003345.067:16360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.401349][ T29] audit: type=1326 audit(2000003345.067:16361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.425780][ T29] audit: type=1326 audit(2000003345.067:16362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.449944][ T29] audit: type=1326 audit(2000003345.067:16363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.473793][ T29] audit: type=1326 audit(2000003345.067:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1067.497511][ T29] audit: type=1326 audit(2000003345.067:16365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29771 comm="syz.3.21941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1068.543211][T29871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21981'. [ 1068.574898][T29874] batadv_slave_0: entered promiscuous mode [ 1068.581422][T29872] batadv_slave_0: left promiscuous mode [ 1068.662462][T29881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29881 comm=syz.3.21993 [ 1069.821731][T29989] SET target dimension over the limit! [ 1069.969166][T30011] netlink: 176 bytes leftover after parsing attributes in process `syz.6.22041'. [ 1070.139618][T18014] kernel write not supported for file bpf-prog (pid: 18014 comm: kworker/1:12) [ 1071.104026][T30094] wg1 speed is unknown, defaulting to 1000 [ 1071.148591][T30094] lo speed is unknown, defaulting to 1000 [ 1071.199612][T30094] lo speed is unknown, defaulting to 1000 [ 1071.393741][T30116] erspan0: entered promiscuous mode [ 1071.399250][T30116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22080'. [ 1071.695233][T30152] netlink: 104 bytes leftover after parsing attributes in process `syz.7.22094'. [ 1072.884873][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22121'. [ 1073.521720][T30260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22135'. [ 1073.602867][T30269] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1073.696459][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1073.696523][ T29] audit: type=1326 audit(2000003351.776:16387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.7.22140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1073.730880][ T29] audit: type=1326 audit(2000003351.818:16388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.7.22140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1073.754836][ T29] audit: type=1326 audit(2000003351.818:16389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.7.22140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1073.778647][ T29] audit: type=1326 audit(2000003351.818:16390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30270 comm="syz.7.22140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1073.919742][T30285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22146'. [ 1074.135633][T30313] netlink: 'syz.1.22159': attribute type 1 has an invalid length. [ 1074.143634][T30313] netlink: 128 bytes leftover after parsing attributes in process `syz.1.22159'. [ 1074.412963][ T29] audit: type=1326 audit(2000003352.532:16391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30321 comm="syz.5.22162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x0 [ 1074.776625][ T29] audit: type=1326 audit(2000003352.910:16392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30351 comm="syz.6.22174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1074.800490][ T29] audit: type=1326 audit(2000003352.910:16393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30351 comm="syz.6.22174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1074.824468][ T29] audit: type=1326 audit(2000003352.910:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30351 comm="syz.6.22174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1074.848333][ T29] audit: type=1326 audit(2000003352.910:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30351 comm="syz.6.22174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1074.872063][ T29] audit: type=1326 audit(2000003352.910:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30351 comm="syz.6.22174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1074.950449][T30359] netlink: 132 bytes leftover after parsing attributes in process `syz.7.22178'. [ 1075.010605][T30367] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1075.108402][T30375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.22184'. [ 1075.482753][T30391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22188'. [ 1075.493674][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22188'. [ 1075.642185][T30406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22194'. [ 1075.651741][T30406] netlink: 80 bytes leftover after parsing attributes in process `syz.5.22194'. [ 1075.980887][T30416] wg1 speed is unknown, defaulting to 1000 [ 1076.075297][T30424] 8021q: VLANs not supported on bond0 [ 1076.084664][T30416] lo speed is unknown, defaulting to 1000 [ 1076.193717][T30416] lo speed is unknown, defaulting to 1000 [ 1076.722897][T30466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22228'. [ 1076.758145][T30466] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1076.986130][T30454] syz.6.22213 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1076.996399][T30454] CPU: 1 UID: 0 PID: 30454 Comm: syz.6.22213 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1076.996437][T30454] Tainted: [W]=WARN [ 1076.996447][T30454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1076.996465][T30454] Call Trace: [ 1076.996475][T30454] [ 1076.996486][T30454] __dump_stack+0x1d/0x30 [ 1076.996631][T30454] dump_stack_lvl+0x95/0xd0 [ 1076.996670][T30454] dump_stack+0x15/0x1b [ 1076.996695][T30454] dump_header+0x80/0x240 [ 1076.996779][T30454] oom_kill_process+0x295/0x350 [ 1076.996807][T30454] out_of_memory+0x97d/0xb80 [ 1076.996835][T30454] try_charge_memcg+0x62e/0xa10 [ 1076.996876][T30454] __mem_cgroup_charge+0x65/0x150 [ 1076.996999][T30454] shmem_get_folio_gfp+0x47b/0xd60 [ 1076.997038][T30454] shmem_write_begin+0xfc/0x1f0 [ 1076.997080][T30454] generic_perform_write+0x183/0x490 [ 1076.997159][T30454] ? __mark_inode_dirty+0x1af/0x740 [ 1076.997198][T30454] shmem_file_write_iter+0xc5/0xf0 [ 1076.997251][T30454] __kernel_write_iter+0x319/0x590 [ 1076.997272][T30454] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1076.997349][T30454] dump_user_range+0xa7d/0xdb0 [ 1076.997387][T30454] elf_core_dump+0x21a2/0x2330 [ 1076.997426][T30454] ? 0xffffffffff600000 [ 1076.997470][T30454] coredump_write+0xacf/0xdf0 [ 1076.997537][T30454] vfs_coredump+0x26bc/0x3120 [ 1076.997565][T30454] ? save_fpregs_to_fpstate+0x100/0x150 [ 1076.997666][T30454] ? _raw_spin_lock_irq+0x53/0xb0 [ 1076.997704][T30454] ? ptrace_stop+0x511/0x5b0 [ 1076.997725][T30454] ? proc_coredump_connector+0x160/0x2b0 [ 1076.997765][T30454] ? from_kuid_munged+0x165/0x360 [ 1076.997794][T30454] ? __rcu_read_unlock+0x4e/0x70 [ 1076.997982][T30454] get_signal+0xd7b/0xf60 [ 1076.998018][T30454] arch_do_signal_or_restart+0x96/0x450 [ 1076.998053][T30454] exit_to_user_mode_loop+0x6a/0x6f0 [ 1076.998094][T30454] do_syscall_64+0x1d3/0x2a0 [ 1076.998182][T30454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.998211][T30454] RIP: 0033:0x200000000040 [ 1076.998251][T30454] Code: 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.998300][T30454] RSP: 002b:00007fbb8caa6f58 EFLAGS: 00000346 ORIG_RAX: 0000000000000000 [ 1076.998326][T30454] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1076.998343][T30454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1076.998361][T30454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1076.998378][T30454] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1076.998396][T30454] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000000cf [ 1076.998500][T30454] [ 1076.998510][T30454] memory: usage 307200kB, limit 307200kB, failcnt 9847 [ 1077.268388][T30454] memory+swap: usage 154144kB, limit 9007199254740988kB, failcnt 0 [ 1077.276461][T30454] kmem: usage 47756kB, limit 9007199254740988kB, failcnt 0 [ 1077.284032][T30454] Memory cgroup stats for /syz6: [ 1077.284507][T30454] cache 97677312 [ 1077.293127][T30454] rss 1015808 [ 1077.296436][T30454] shmem 27717632 [ 1077.300076][T30454] mapped_file 0 [ 1077.303561][T30454] dirty 4096 [ 1077.306784][T30454] writeback 0 [ 1077.310230][T30454] workingset_refault_anon 2051 [ 1077.315283][T30454] workingset_refault_file 17799 [ 1077.320210][T30454] swap 1568768 [ 1077.323802][T30454] swapcached 409600 [ 1077.327681][T30454] pgpgin 1249530 [ 1077.331250][T30454] pgpgout 1225335 [ 1077.335093][T30454] pgfault 1166016 [ 1077.338800][T30454] pgmajfault 538 [ 1077.342382][T30454] inactive_anon 1241088 [ 1077.346883][T30454] active_anon 27901952 [ 1077.350977][T30454] inactive_file 0 [ 1077.354769][T30454] active_file 524288 [ 1077.358818][T30454] unevictable 69435392 [ 1077.362913][T30454] hierarchical_memory_limit 314572800 [ 1077.368347][T30454] hierarchical_memsw_limit 9223372036854771712 [ 1077.374686][T30454] total_cache 97677312 [ 1077.378827][T30454] total_rss 1015808 [ 1077.382829][T30454] total_shmem 27717632 [ 1077.386971][T30454] total_mapped_file 0 [ 1077.390976][T30454] total_dirty 4096 [ 1077.394749][T30454] total_writeback 0 [ 1077.398740][T30454] total_workingset_refault_anon 2051 [ 1077.404117][T30454] total_workingset_refault_file 17799 [ 1077.409637][T30454] total_swap 1568768 [ 1077.413822][T30454] total_swapcached 409600 [ 1077.418194][T30454] total_pgpgin 1249530 [ 1077.422353][T30454] total_pgpgout 1225335 [ 1077.426707][T30454] total_pgfault 1166016 [ 1077.430925][T30454] total_pgmajfault 538 [ 1077.435101][T30454] total_inactive_anon 1241088 [ 1077.439801][T30454] total_active_anon 27901952 [ 1077.444475][T30454] total_inactive_file 0 [ 1077.448662][T30454] total_active_file 524288 [ 1077.453360][T30454] total_unevictable 69435392 [ 1077.458059][T30454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.22213,pid=30454,uid=0 [ 1077.473127][T30454] Memory cgroup out of memory: Killed process 30454 (syz.6.22213) total-vm:96048kB, anon-rss:1352kB, file-rss:47872kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 1077.560913][T30490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22231'. [ 1078.429895][T30565] 9p: Bad value for 'rfdno' [ 1079.830169][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1079.830380][ T29] audit: type=1326 audit(2000003614.215:16449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1079.863172][T30625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22288'. [ 1079.875972][ T29] audit: type=1326 audit(2000003614.268:16450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1079.900711][ T29] audit: type=1326 audit(2000003614.289:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1079.926766][ T29] audit: type=1326 audit(2000003614.320:16452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1079.950484][ T29] audit: type=1326 audit(2000003614.320:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1079.975271][ T29] audit: type=1326 audit(2000003614.373:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1079.998977][ T29] audit: type=1326 audit(2000003614.373:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca0dcaeb9 code=0x7ffc0000 [ 1080.022746][ T29] audit: type=1326 audit(2000003614.373:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1080.046339][ T29] audit: type=1326 audit(2000003614.373:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1080.070510][ T29] audit: type=1326 audit(2000003614.373:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30536 comm="syz.5.22249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ca0d6c2d9 code=0x7ffc0000 [ 1080.313328][T30649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22298'. [ 1080.997388][T30719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22326'. [ 1081.564876][T30746] team_slave_1: Caught tx_queue_len zero misconfig [ 1082.564504][T30817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30817 comm=syz.3.22369 [ 1082.717412][T30830] wg1 speed is unknown, defaulting to 1000 [ 1082.760292][T30830] lo speed is unknown, defaulting to 1000 [ 1082.818044][T30830] lo speed is unknown, defaulting to 1000 [ 1083.185058][T30868] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1083.409855][T30883] lo: entered allmulticast mode [ 1083.415628][T30883] lo: left allmulticast mode [ 1083.878500][T30917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22409'. [ 1084.092292][T30920] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22410'. [ 1085.135352][T30996] sctp: [Deprecated]: syz.5.22439 (pid 30996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1085.135352][T30996] Use struct sctp_sack_info instead [ 1085.216318][T31002] wg1 speed is unknown, defaulting to 1000 [ 1085.287682][T31002] lo speed is unknown, defaulting to 1000 [ 1085.294569][T31005] netlink: 'syz.7.22441': attribute type 4 has an invalid length. [ 1085.372226][T31002] lo speed is unknown, defaulting to 1000 [ 1085.429027][T31029] 9p: Bad value for 'rfdno' [ 1085.713279][T31065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22470'. [ 1085.881342][T31088] wg1 speed is unknown, defaulting to 1000 [ 1085.929558][T31088] lo speed is unknown, defaulting to 1000 [ 1086.009281][T31088] lo speed is unknown, defaulting to 1000 [ 1086.178442][T31108] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1086.943072][T31147] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1087.238715][T31179] netlink: 100 bytes leftover after parsing attributes in process `syz.7.22517'. [ 1087.399071][T31200] netlink: 176 bytes leftover after parsing attributes in process `syz.5.22525'. [ 1087.702228][T17224] kernel write not supported for file bpf-prog (pid: 17224 comm: kworker/1:1) [ 1088.169080][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 1088.169162][ T29] audit: type=1326 audit(2000003622.971:16532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.199868][ T29] audit: type=1326 audit(2000003622.981:16533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.223792][ T29] audit: type=1326 audit(2000003622.981:16534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.247861][ T29] audit: type=1326 audit(2000003622.981:16535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.271862][ T29] audit: type=1326 audit(2000003622.981:16536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.296395][ T29] audit: type=1326 audit(2000003622.981:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.320206][ T29] audit: type=1326 audit(2000003622.981:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.344075][ T29] audit: type=1326 audit(2000003622.981:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.367804][ T29] audit: type=1326 audit(2000003622.981:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.391854][ T29] audit: type=1326 audit(2000003622.981:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31252 comm="syz.3.22545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1088.510503][T16610] kernel read not supported for file /newroot/4105 (pid: 16610 comm: kworker/0:0) [ 1090.534459][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22589'. [ 1090.543548][T31375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22589'. [ 1090.552872][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22589'. [ 1090.561910][T31375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22589'. [ 1090.877877][T31398] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1092.079900][T31502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22635'. [ 1092.734961][T31523] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1550) ! [ 1093.564807][T31584] netlink: 'syz.5.22669': attribute type 1 has an invalid length. [ 1093.718509][T31584] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1093.756381][T31606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22678'. [ 1093.925513][T31630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22687'. [ 1094.009856][T31630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.22687'. [ 1094.083565][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1094.083584][ T29] audit: type=1326 audit(2000003629.185:16568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31646 comm="syz.3.22694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1094.113604][ T29] audit: type=1326 audit(2000003629.185:16569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31646 comm="syz.3.22694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1094.145347][ T29] audit: type=1326 audit(2000003629.248:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31646 comm="syz.3.22694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1094.169272][ T29] audit: type=1326 audit(2000003629.248:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31646 comm="syz.3.22694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1094.193164][ T29] audit: type=1326 audit(2000003629.248:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31646 comm="syz.3.22694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1094.365231][ T29] audit: type=1326 audit(2000003629.469:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31674 comm="syz.3.22707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x0 [ 1094.498987][T31692] ip6gre3: entered allmulticast mode [ 1094.777795][T31726] 9p: Bad value for 'wfdno' [ 1094.871115][ T29] audit: type=1326 audit(2000003630.004:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.7.22731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1094.895274][ T29] audit: type=1326 audit(2000003630.004:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.7.22731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1094.922825][ T29] audit: type=1326 audit(2000003630.004:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.7.22731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1094.946817][ T29] audit: type=1326 audit(2000003630.004:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31735 comm="syz.7.22731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1095.031981][T31742] wg1 speed is unknown, defaulting to 1000 [ 1095.075038][T31742] lo speed is unknown, defaulting to 1000 [ 1095.117019][T31742] lo speed is unknown, defaulting to 1000 [ 1096.401489][T31842] netlink: 'syz.5.22773': attribute type 10 has an invalid length. [ 1096.418011][T31842] batman_adv: batadv0: Removing interface: dummy0 [ 1096.439315][T31842] dummy0: entered promiscuous mode [ 1096.447046][T31842] dummy0: entered allmulticast mode [ 1096.458986][T31843] netlink: 'syz.5.22773': attribute type 10 has an invalid length. [ 1096.463446][T31842] team0: Port device dummy0 added [ 1096.541801][T31843] dummy0: left promiscuous mode [ 1096.554378][T31843] dummy0: left allmulticast mode [ 1096.571631][T31843] team0: Port device dummy0 removed [ 1096.586165][T31843] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1096.863632][T31851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22777'. [ 1096.922658][T31857] netlink: 'syz.1.22781': attribute type 1 has an invalid length. [ 1096.959737][T31859] netlink: 'syz.7.22782': attribute type 8 has an invalid length. [ 1096.967637][T31859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22782'. [ 1097.282248][T31896] wg1 speed is unknown, defaulting to 1000 [ 1097.371803][T31899] netlink: 'syz.6.22798': attribute type 1 has an invalid length. [ 1097.384632][T31896] lo speed is unknown, defaulting to 1000 [ 1097.432583][T31896] lo speed is unknown, defaulting to 1000 [ 1098.239422][T31957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22822'. [ 1098.455735][T31977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22832'. [ 1098.465033][T31977] netlink: 9 bytes leftover after parsing attributes in process `syz.1.22832'. [ 1099.022645][T32023] netlink: 'syz.3.22853': attribute type 4 has an invalid length. [ 1099.032117][T32023] netlink: 'syz.3.22853': attribute type 4 has an invalid length. [ 1099.438832][T32050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22865'. [ 1099.956608][T32081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22876'. [ 1100.708391][T32104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22886'. [ 1101.023838][T32133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22894'. [ 1101.283623][T32164] netlink: 48 bytes leftover after parsing attributes in process `syz.7.22906'. [ 1101.858764][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 1101.858784][ T29] audit: type=1326 audit(2000003637.342:16731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1101.894327][ T29] audit: type=1326 audit(2000003637.374:16732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1101.894483][T32212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22931'. [ 1101.918181][ T29] audit: type=1326 audit(2000003637.374:16733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1101.918224][ T29] audit: type=1326 audit(2000003637.384:16734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1101.918286][ T29] audit: type=1326 audit(2000003637.384:16735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1101.929038][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22931'. [ 1101.951503][ T29] audit: type=1326 audit(2000003637.384:16737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1102.032137][ T29] audit: type=1326 audit(2000003637.384:16736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1102.073916][ T29] audit: type=1326 audit(2000003637.573:16738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32209 comm="syz.3.22930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd71074aeb9 code=0x7ffc0000 [ 1102.160992][T32221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22945'. [ 1102.178352][T32221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22945'. [ 1102.240974][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22936'. [ 1102.586572][T32243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.22944'. [ 1102.707245][ T29] audit: type=1326 audit(2000003638.235:16739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32256 comm="syz.1.22949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1102.735743][ T29] audit: type=1326 audit(2000003638.266:16740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32256 comm="syz.1.22949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4975e8aeb9 code=0x7ffc0000 [ 1102.905406][T32272] lo: entered allmulticast mode [ 1102.910999][T32272] lo: left allmulticast mode [ 1102.973863][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22958'. [ 1103.164938][T32282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22959'. [ 1103.401651][T32292] netlink: 68 bytes leftover after parsing attributes in process `syz.7.22963'. [ 1103.488178][T32303] netlink: 'syz.7.22967': attribute type 8 has an invalid length. [ 1103.490370][T32290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22962'. [ 1104.173950][T32352] sctp: [Deprecated]: syz.7.22995 (pid 32352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1104.173950][T32352] Use struct sctp_sack_info instead [ 1105.571553][T32407] sctp: [Deprecated]: syz.1.23000 (pid 32407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1105.571553][T32407] Use struct sctp_sack_info instead [ 1106.740741][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1106.740764][ T29] audit: type=1326 audit(2000003642.455:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32477 comm="syz.6.23032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1106.771151][ T29] audit: type=1326 audit(2000003642.455:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32477 comm="syz.6.23032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1106.794939][ T29] audit: type=1326 audit(2000003642.455:16769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32477 comm="syz.6.23032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1106.818929][ T29] audit: type=1326 audit(2000003642.455:16770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32477 comm="syz.6.23032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1106.843926][ T29] audit: type=1326 audit(2000003642.455:16771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32477 comm="syz.6.23032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1106.867737][ T29] audit: type=1326 audit(2000003642.455:16772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32477 comm="syz.6.23032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8e04aeb9 code=0x7ffc0000 [ 1106.918691][T32485] blktrace: Concurrent blktraces are not allowed on loop12 [ 1107.223520][T32510] erspan0: left promiscuous mode [ 1108.289771][T32556] wg1 speed is unknown, defaulting to 1000 [ 1108.321969][T32563] __nla_validate_parse: 3 callbacks suppressed [ 1108.321991][T32563] netlink: 176 bytes leftover after parsing attributes in process `syz.1.23064'. [ 1108.369030][T32556] lo speed is unknown, defaulting to 1000 [ 1108.456084][T32556] lo speed is unknown, defaulting to 1000 [ 1108.900347][T32586] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1109.099976][T32596] blktrace: Concurrent blktraces are not allowed on loop14 [ 1109.142729][T32598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23076'. [ 1109.206172][T32601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23077'. [ 1109.263255][T32613] wg1 speed is unknown, defaulting to 1000 [ 1109.600675][T32613] lo speed is unknown, defaulting to 1000 [ 1109.883285][T32613] lo speed is unknown, defaulting to 1000 [ 1110.071774][T32631] netlink: 100 bytes leftover after parsing attributes in process `syz.1.23087'. [ 1110.249835][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23093'. [ 1110.257091][T32650] netlink: 48 bytes leftover after parsing attributes in process `syz.6.23094'. [ 1110.918266][T32687] wg1 speed is unknown, defaulting to 1000 [ 1110.979758][T32695] netlink: 48 bytes leftover after parsing attributes in process `syz.7.23109'. [ 1111.085308][T32687] lo speed is unknown, defaulting to 1000 [ 1111.153758][T32687] lo speed is unknown, defaulting to 1000 [ 1111.676367][T32738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23125'. [ 1111.722653][ T29] audit: type=1326 audit(2000003647.693:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32745 comm="syz.3.23127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71074aeb9 code=0x0 [ 1111.956733][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23131'. [ 1112.538155][ T310] netlink: 104 bytes leftover after parsing attributes in process `syz.6.23136'. [ 1112.553481][ T308] wg1 speed is unknown, defaulting to 1000 [ 1112.615452][ T308] lo speed is unknown, defaulting to 1000 [ 1112.659813][ T308] lo speed is unknown, defaulting to 1000 [ 1112.843419][ T336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.136552][ T372] __nla_validate_parse: 6 callbacks suppressed [ 1113.136570][ T372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23159'. [ 1113.164108][ T375] netlink: 'syz.5.23161': attribute type 1 has an invalid length. [ 1113.177898][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23160'. [ 1113.187117][ T376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23160'. [ 1113.188693][ T375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1113.224982][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23160'. [ 1113.234140][ T376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23160'. [ 1113.732945][ T383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23163'. [ 1114.394697][ T387] syz.3.23165 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1114.408852][ T387] CPU: 0 UID: 0 PID: 387 Comm: syz.3.23165 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1114.408917][ T387] Tainted: [W]=WARN [ 1114.408925][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1114.408944][ T387] Call Trace: [ 1114.408955][ T387] [ 1114.408967][ T387] __dump_stack+0x1d/0x30 [ 1114.409006][ T387] dump_stack_lvl+0x95/0xd0 [ 1114.409109][ T387] dump_stack+0x15/0x1b [ 1114.409173][ T387] dump_header+0x80/0x240 [ 1114.409203][ T387] oom_kill_process+0x295/0x350 [ 1114.409240][ T387] out_of_memory+0x97d/0xb80 [ 1114.409279][ T387] try_charge_memcg+0x62e/0xa10 [ 1114.409442][ T387] obj_cgroup_charge_pages+0x23/0xc0 [ 1114.409566][ T387] __memcg_kmem_charge_page+0x9e/0x170 [ 1114.409612][ T387] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1114.409663][ T387] alloc_pages_mpol+0xb3/0x260 [ 1114.409711][ T387] alloc_pages_noprof+0x8f/0x130 [ 1114.409775][ T387] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1114.409864][ T387] __kvmalloc_node_noprof+0x471/0x680 [ 1114.409905][ T387] ? ip_set_alloc+0x24/0x30 [ 1114.409966][ T387] ? ip_set_alloc+0x24/0x30 [ 1114.410064][ T387] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 1114.410103][ T387] ip_set_alloc+0x24/0x30 [ 1114.410175][ T387] hash_netiface_create+0x282/0x740 [ 1114.410222][ T387] ? __pfx_hash_netiface_create+0x10/0x10 [ 1114.410319][ T387] ip_set_create+0x3cf/0x970 [ 1114.410363][ T387] ? __nla_parse+0x40/0x60 [ 1114.410388][ T387] nfnetlink_rcv_msg+0x509/0x5d0 [ 1114.410554][ T387] netlink_rcv_skb+0x123/0x220 [ 1114.410598][ T387] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1114.410651][ T387] nfnetlink_rcv+0x167/0x1720 [ 1114.410727][ T387] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1114.410765][ T387] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1114.410871][ T387] ? _raw_spin_lock_bh+0x56/0xb0 [ 1114.410989][ T387] ? should_fail_ex+0x30/0x280 [ 1114.411041][ T387] ? selinux_nlmsg_lookup+0x99/0x890 [ 1114.411071][ T387] ? __rcu_read_unlock+0x33/0x70 [ 1114.411188][ T387] ? __netlink_lookup+0x276/0x2b0 [ 1114.411220][ T387] netlink_unicast+0x5c0/0x690 [ 1114.411391][ T387] netlink_sendmsg+0x5c8/0x6f0 [ 1114.411423][ T387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.411514][ T387] ____sys_sendmsg+0x5af/0x600 [ 1114.411547][ T387] ___sys_sendmsg+0x195/0x1e0 [ 1114.411589][ T387] __x64_sys_sendmsg+0xd4/0x160 [ 1114.411646][ T387] x64_sys_call+0x17ba/0x3000 [ 1114.411681][ T387] do_syscall_64+0xc0/0x2a0 [ 1114.411727][ T387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.411769][ T387] RIP: 0033:0x7fd71074aeb9 [ 1114.411791][ T387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.411834][ T387] RSP: 002b:00007fd70f1a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.411858][ T387] RAX: ffffffffffffffda RBX: 00007fd7109c5fa0 RCX: 00007fd71074aeb9 [ 1114.411879][ T387] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1114.411899][ T387] RBP: 00007fd7107b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1114.411921][ T387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.411940][ T387] R13: 00007fd7109c6038 R14: 00007fd7109c5fa0 R15: 00007fffaf571a98 [ 1114.411970][ T387] [ 1114.729815][ T387] memory: usage 307200kB, limit 307200kB, failcnt 2732 [ 1114.736844][ T387] memory+swap: usage 308588kB, limit 9007199254740988kB, failcnt 0 [ 1114.744798][ T387] kmem: usage 305884kB, limit 9007199254740988kB, failcnt 0 [ 1114.752114][ T387] Memory cgroup stats for /syz3: [ 1114.772427][ T387] cache 12288 [ 1114.780969][ T387] rss 1253376 [ 1114.784371][ T387] shmem 12288 [ 1114.787693][ T387] mapped_file 0 [ 1114.791334][ T387] dirty 0 [ 1114.794323][ T387] writeback 0 [ 1114.797718][ T387] workingset_refault_anon 4784 [ 1114.802557][ T387] workingset_refault_file 16436 [ 1114.807467][ T387] swap 1421312 [ 1114.810953][ T387] swapcached 77824 [ 1114.814795][ T387] pgpgin 1333959 [ 1114.818490][ T387] pgpgout 1333630 [ 1114.822197][ T387] pgfault 1255307 [ 1114.825860][ T387] pgmajfault 883 [ 1114.829495][ T387] inactive_anon 114688 [ 1114.833669][ T387] active_anon 1228800 [ 1114.837672][ T387] inactive_file 0 [ 1114.841452][ T387] active_file 4096 [ 1114.845725][ T387] unevictable 0 [ 1114.849329][ T387] hierarchical_memory_limit 314572800 [ 1114.854742][ T387] hierarchical_memsw_limit 9223372036854771712 [ 1114.861125][ T387] total_cache 12288 [ 1114.865039][ T387] total_rss 1253376 [ 1114.868932][ T387] total_shmem 12288 [ 1114.872847][ T387] total_mapped_file 0 [ 1114.876903][ T387] total_dirty 0 [ 1114.880544][ T387] total_writeback 0 [ 1114.884492][ T387] total_workingset_refault_anon 4784 [ 1114.889872][ T387] total_workingset_refault_file 16436 [ 1114.895405][ T387] total_swap 1421312 [ 1114.899508][ T387] total_swapcached 77824 [ 1114.903905][ T387] total_pgpgin 1333959 [ 1114.908109][ T387] total_pgpgout 1333630 [ 1114.912537][ T387] total_pgfault 1255307 [ 1114.916877][ T387] total_pgmajfault 883 [ 1114.920967][ T387] total_inactive_anon 114688 [ 1114.925663][ T387] total_active_anon 1228800 [ 1114.930264][ T387] total_inactive_file 0 [ 1114.934491][ T387] total_active_file 4096 [ 1114.938939][ T387] total_unevictable 0 [ 1114.943036][ T387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.23165,pid=380,uid=0 [ 1114.957803][ T387] Memory cgroup out of memory: Killed process 387 (syz.3.23165) total-vm:94116kB, anon-rss:1336kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 1115.009241][ T400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23168'. [ 1115.234227][ T445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23182'. [ 1115.267526][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23181'. [ 1115.486103][ T461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23186'. [ 1115.914241][ T474] syz.6.23190 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1115.928460][ T474] CPU: 1 UID: 0 PID: 474 Comm: syz.6.23190 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1115.928592][ T474] Tainted: [W]=WARN [ 1115.928665][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1115.928760][ T474] Call Trace: [ 1115.928769][ T474] [ 1115.928778][ T474] __dump_stack+0x1d/0x30 [ 1115.928852][ T474] dump_stack_lvl+0x95/0xd0 [ 1115.928878][ T474] dump_stack+0x15/0x1b [ 1115.928928][ T474] dump_header+0x80/0x240 [ 1115.928954][ T474] oom_kill_process+0x295/0x350 [ 1115.928985][ T474] out_of_memory+0x97d/0xb80 [ 1115.929041][ T474] try_charge_memcg+0x62e/0xa10 [ 1115.929076][ T474] obj_cgroup_charge_pages+0x23/0xc0 [ 1115.929114][ T474] __memcg_kmem_charge_page+0x9e/0x170 [ 1115.929197][ T474] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1115.929291][ T474] alloc_pages_mpol+0xb3/0x260 [ 1115.929349][ T474] alloc_pages_noprof+0x8f/0x130 [ 1115.929386][ T474] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1115.929512][ T474] __kvmalloc_node_noprof+0x471/0x680 [ 1115.929565][ T474] ? ip_set_alloc+0x24/0x30 [ 1115.929601][ T474] ? ip_set_alloc+0x24/0x30 [ 1115.929679][ T474] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 1115.929739][ T474] ip_set_alloc+0x24/0x30 [ 1115.929819][ T474] hash_netiface_create+0x282/0x740 [ 1115.929853][ T474] ? __pfx_hash_netiface_create+0x10/0x10 [ 1115.929943][ T474] ip_set_create+0x3cf/0x970 [ 1115.929977][ T474] ? __nla_parse+0x40/0x60 [ 1115.930050][ T474] nfnetlink_rcv_msg+0x509/0x5d0 [ 1115.930143][ T474] netlink_rcv_skb+0x123/0x220 [ 1115.930177][ T474] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1115.930301][ T474] nfnetlink_rcv+0x167/0x1720 [ 1115.930358][ T474] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1115.930387][ T474] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1115.930471][ T474] ? _raw_spin_lock_bh+0x56/0xb0 [ 1115.930557][ T474] ? should_fail_ex+0x30/0x280 [ 1115.930640][ T474] ? selinux_nlmsg_lookup+0x99/0x890 [ 1115.930667][ T474] ? __rcu_read_unlock+0x33/0x70 [ 1115.930849][ T474] ? __netlink_lookup+0x276/0x2b0 [ 1115.930877][ T474] netlink_unicast+0x5c0/0x690 [ 1115.930912][ T474] netlink_sendmsg+0x5c8/0x6f0 [ 1115.930973][ T474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.930998][ T474] ____sys_sendmsg+0x5af/0x600 [ 1115.931042][ T474] ___sys_sendmsg+0x195/0x1e0 [ 1115.931091][ T474] __x64_sys_sendmsg+0xd4/0x160 [ 1115.931138][ T474] x64_sys_call+0x17ba/0x3000 [ 1115.931165][ T474] do_syscall_64+0xc0/0x2a0 [ 1115.931251][ T474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.931277][ T474] RIP: 0033:0x7fbb8e04aeb9 [ 1115.931298][ T474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.931329][ T474] RSP: 002b:00007fbb8caa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.931384][ T474] RAX: ffffffffffffffda RBX: 00007fbb8e2c5fa0 RCX: 00007fbb8e04aeb9 [ 1115.931405][ T474] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1115.931422][ T474] RBP: 00007fbb8e0b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1115.931445][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.931520][ T474] R13: 00007fbb8e2c6038 R14: 00007fbb8e2c5fa0 R15: 00007ffc0456b118 [ 1115.931614][ T474] [ 1115.931624][ T474] memory: usage 307200kB, limit 307200kB, failcnt 9937 [ 1115.945836][ T481] 9p: Bad value for 'wfdno' [ 1115.947035][ T474] memory+swap: usage 308732kB, limit 9007199254740988kB, failcnt 0 [ 1115.947057][ T474] kmem: usage 237412kB, limit 9007199254740988kB, failcnt 0 [ 1115.995268][ T481] wg1 speed is unknown, defaulting to 1000 [ 1115.995910][ T474] Memory cgroup stats for /syz6 [ 1116.110848][ T481] lo speed is unknown, defaulting to 1000 [ 1116.114627][ T474] : [ 1116.208934][ T481] lo speed is unknown, defaulting to 1000 [ 1116.286436][ T474] cache 69459968 [ 1116.307780][ T474] rss 1593344 [ 1116.311158][ T474] shmem 24576 [ 1116.314683][ T474] mapped_file 0 [ 1116.318197][ T474] dirty 0 [ 1116.321181][ T474] writeback 0 [ 1116.324621][ T474] workingset_refault_anon 2051 [ 1116.329410][ T474] workingset_refault_file 17799 [ 1116.334304][ T474] swap 1568768 [ 1116.337716][ T474] swapcached 409600 [ 1116.341594][ T474] pgpgin 1279762 [ 1116.345200][ T474] pgpgout 1262315 [ 1116.348866][ T474] pgfault 1212209 [ 1116.352618][ T474] pgmajfault 540 [ 1116.356249][ T474] inactive_anon 1863680 [ 1116.360573][ T474] active_anon 163840 [ 1116.364847][ T474] inactive_file 0 [ 1116.368601][ T474] active_file 0 [ 1116.372276][ T474] unevictable 69435392 [ 1116.376519][ T474] hierarchical_memory_limit 314572800 [ 1116.382128][ T474] hierarchical_memsw_limit 9223372036854771712 [ 1116.388307][ T474] total_cache 69459968 [ 1116.392418][ T474] total_rss 1593344 [ 1116.396360][ T474] total_shmem 24576 [ 1116.400495][ T474] total_mapped_file 0 [ 1116.404520][ T474] total_dirty 0 [ 1116.408047][ T474] total_writeback 0 [ 1116.411909][ T474] total_workingset_refault_anon 2051 [ 1116.417216][ T474] total_workingset_refault_file 17799 [ 1116.422648][ T474] total_swap 1568768 [ 1116.426653][ T474] total_swapcached 409600 [ 1116.431095][ T474] total_pgpgin 1279762 [ 1116.435200][ T474] total_pgpgout 1262315 [ 1116.439409][ T474] total_pgfault 1212209 [ 1116.443733][ T474] total_pgmajfault 540 [ 1116.447883][ T474] total_inactive_anon 1863680 [ 1116.452846][ T474] total_active_anon 163840 [ 1116.457508][ T474] total_inactive_file 0 [ 1116.461731][ T474] total_active_file 0 [ 1116.465732][ T474] total_unevictable 69435392 [ 1116.470575][ T474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.23190,pid=473,uid=0 [ 1116.485208][ T474] Memory cgroup out of memory: Killed process 473 (syz.6.23190) total-vm:94116kB, anon-rss:1208kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1117.403586][ T525] syz.3.23207 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1117.418020][ T525] CPU: 0 UID: 0 PID: 525 Comm: syz.3.23207 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1117.418137][ T525] Tainted: [W]=WARN [ 1117.418147][ T525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.418165][ T525] Call Trace: [ 1117.418175][ T525] [ 1117.418187][ T525] __dump_stack+0x1d/0x30 [ 1117.418288][ T525] dump_stack_lvl+0x95/0xd0 [ 1117.418321][ T525] dump_stack+0x15/0x1b [ 1117.418350][ T525] dump_header+0x80/0x240 [ 1117.418459][ T525] oom_kill_process+0x295/0x350 [ 1117.418492][ T525] out_of_memory+0x97d/0xb80 [ 1117.418526][ T525] try_charge_memcg+0x62e/0xa10 [ 1117.418562][ T525] obj_cgroup_charge_pages+0x23/0xc0 [ 1117.418639][ T525] __memcg_kmem_charge_page+0x9e/0x170 [ 1117.418684][ T525] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1117.418738][ T525] alloc_pages_mpol+0xb3/0x260 [ 1117.418797][ T525] alloc_pages_noprof+0x8f/0x130 [ 1117.418842][ T525] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1117.418902][ T525] __kvmalloc_node_noprof+0x471/0x680 [ 1117.418943][ T525] ? ip_set_alloc+0x24/0x30 [ 1117.419015][ T525] ? ip_set_alloc+0x24/0x30 [ 1117.419056][ T525] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 1117.419097][ T525] ip_set_alloc+0x24/0x30 [ 1117.419212][ T525] hash_netiface_create+0x282/0x740 [ 1117.419328][ T525] ? __pfx_hash_netiface_create+0x10/0x10 [ 1117.419373][ T525] ip_set_create+0x3cf/0x970 [ 1117.419419][ T525] ? __nla_parse+0x40/0x60 [ 1117.419464][ T525] nfnetlink_rcv_msg+0x509/0x5d0 [ 1117.419594][ T525] netlink_rcv_skb+0x123/0x220 [ 1117.419634][ T525] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1117.419744][ T525] nfnetlink_rcv+0x167/0x1720 [ 1117.419791][ T525] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1117.419902][ T525] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1117.419944][ T525] ? _raw_spin_lock_bh+0x56/0xb0 [ 1117.419986][ T525] ? should_fail_ex+0x30/0x280 [ 1117.420025][ T525] ? selinux_nlmsg_lookup+0x99/0x890 [ 1117.420065][ T525] ? __rcu_read_unlock+0x33/0x70 [ 1117.420103][ T525] ? __netlink_lookup+0x276/0x2b0 [ 1117.420133][ T525] netlink_unicast+0x5c0/0x690 [ 1117.420192][ T525] netlink_sendmsg+0x5c8/0x6f0 [ 1117.420224][ T525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.420251][ T525] ____sys_sendmsg+0x5af/0x600 [ 1117.420286][ T525] ___sys_sendmsg+0x195/0x1e0 [ 1117.420360][ T525] __x64_sys_sendmsg+0xd4/0x160 [ 1117.420400][ T525] x64_sys_call+0x17ba/0x3000 [ 1117.420434][ T525] do_syscall_64+0xc0/0x2a0 [ 1117.420493][ T525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.420519][ T525] RIP: 0033:0x7fd71074aeb9 [ 1117.420538][ T525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.420561][ T525] RSP: 002b:00007fd70f1a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.420637][ T525] RAX: ffffffffffffffda RBX: 00007fd7109c5fa0 RCX: 00007fd71074aeb9 [ 1117.420654][ T525] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1117.420670][ T525] RBP: 00007fd7107b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1117.420688][ T525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.420703][ T525] R13: 00007fd7109c6038 R14: 00007fd7109c5fa0 R15: 00007fffaf571a98 [ 1117.420729][ T525] [ 1117.739892][ T525] memory: usage 307200kB, limit 307200kB, failcnt 2901 [ 1117.746955][ T525] memory+swap: usage 308588kB, limit 9007199254740988kB, failcnt 0 [ 1117.754925][ T525] kmem: usage 305884kB, limit 9007199254740988kB, failcnt 0 [ 1117.762254][ T525] Memory cgroup stats for /syz3: [ 1117.771795][ T525] cache 12288 [ 1117.780399][ T525] rss 1253376 [ 1117.783815][ T525] shmem 12288 [ 1117.787134][ T525] mapped_file 0 [ 1117.790644][ T525] dirty 0 [ 1117.793689][ T525] writeback 0 [ 1117.797043][ T525] workingset_refault_anon 4784 [ 1117.801881][ T525] workingset_refault_file 16436 [ 1117.806766][ T525] swap 1421312 [ 1117.810238][ T525] swapcached 77824 [ 1117.813976][ T525] pgpgin 1334204 [ 1117.817541][ T525] pgpgout 1333875 [ 1117.821225][ T525] pgfault 1255965 [ 1117.824877][ T525] pgmajfault 883 [ 1117.828444][ T525] inactive_anon 110592 [ 1117.832581][ T525] active_anon 1232896 [ 1117.836582][ T525] inactive_file 0 [ 1117.840300][ T525] active_file 4096 [ 1117.844171][ T525] unevictable 0 [ 1117.847672][ T525] hierarchical_memory_limit 314572800 [ 1117.853173][ T525] hierarchical_memsw_limit 9223372036854771712 [ 1117.859488][ T525] total_cache 12288 [ 1117.863322][ T525] total_rss 1253376 [ 1117.867206][ T525] total_shmem 12288 [ 1117.871059][ T525] total_mapped_file 0 [ 1117.875063][ T525] total_dirty 0 [ 1117.878562][ T525] total_writeback 0 [ 1117.882390][ T525] total_workingset_refault_anon 4784 [ 1117.887736][ T525] total_workingset_refault_file 16436 [ 1117.893336][ T525] total_swap 1421312 [ 1117.897973][ T525] total_swapcached 77824 [ 1117.902350][ T525] total_pgpgin 1334204 [ 1117.906931][ T525] total_pgpgout 1333875 [ 1117.911110][ T525] total_pgfault 1255965 [ 1117.915310][ T525] total_pgmajfault 883 [ 1117.919401][ T525] total_inactive_anon 110592 [ 1117.924014][ T525] total_active_anon 1232896 [ 1117.928565][ T525] total_inactive_file 0 [ 1117.932796][ T525] total_active_file 4096 [ 1117.937165][ T525] total_unevictable 0 [ 1117.941424][ T525] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.23207,pid=523,uid=0 [ 1117.956282][ T525] Memory cgroup out of memory: Killed process 525 (syz.3.23207) total-vm:94116kB, anon-rss:1208kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 1117.993228][ T535] __nla_validate_parse: 4 callbacks suppressed [ 1117.993274][ T535] netlink: 48 bytes leftover after parsing attributes in process `syz.6.23210'. [ 1118.062813][ T544] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1118.733929][ T580] netlink: 44 bytes leftover after parsing attributes in process `syz.7.23223'. [ 1119.104282][ T603] netlink: 20 bytes leftover after parsing attributes in process `syz.7.23232'. [ 1119.222308][ T585] syz.1.23225 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1119.236365][ T585] CPU: 0 UID: 0 PID: 585 Comm: syz.1.23225 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1119.236418][ T585] Tainted: [W]=WARN [ 1119.236427][ T585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1119.236442][ T585] Call Trace: [ 1119.236449][ T585] [ 1119.236490][ T585] __dump_stack+0x1d/0x30 [ 1119.236524][ T585] dump_stack_lvl+0x95/0xd0 [ 1119.236560][ T585] dump_stack+0x15/0x1b [ 1119.236583][ T585] dump_header+0x80/0x240 [ 1119.236607][ T585] oom_kill_process+0x295/0x350 [ 1119.236638][ T585] out_of_memory+0x97d/0xb80 [ 1119.236670][ T585] try_charge_memcg+0x62e/0xa10 [ 1119.236775][ T585] obj_cgroup_charge_pages+0x23/0xc0 [ 1119.236811][ T585] __memcg_kmem_charge_page+0x9e/0x170 [ 1119.236875][ T585] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1119.236914][ T585] alloc_pages_mpol+0xb3/0x260 [ 1119.236954][ T585] alloc_pages_noprof+0x8f/0x130 [ 1119.237009][ T585] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1119.237069][ T585] __kvmalloc_node_noprof+0x471/0x680 [ 1119.237101][ T585] ? ip_set_alloc+0x24/0x30 [ 1119.237183][ T585] ? ip_set_alloc+0x24/0x30 [ 1119.237225][ T585] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 1119.237263][ T585] ip_set_alloc+0x24/0x30 [ 1119.237297][ T585] hash_netiface_create+0x282/0x740 [ 1119.237393][ T585] ? __pfx_hash_netiface_create+0x10/0x10 [ 1119.237485][ T585] ip_set_create+0x3cf/0x970 [ 1119.237519][ T585] ? __nla_parse+0x40/0x60 [ 1119.237542][ T585] nfnetlink_rcv_msg+0x509/0x5d0 [ 1119.237615][ T585] netlink_rcv_skb+0x123/0x220 [ 1119.237652][ T585] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1119.237753][ T585] nfnetlink_rcv+0x167/0x1720 [ 1119.237797][ T585] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1119.237885][ T585] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1119.237924][ T585] ? _raw_spin_lock_bh+0x56/0xb0 [ 1119.237979][ T585] ? should_fail_ex+0x30/0x280 [ 1119.238015][ T585] ? selinux_nlmsg_lookup+0x99/0x890 [ 1119.238040][ T585] ? __rcu_read_unlock+0x33/0x70 [ 1119.238081][ T585] ? __netlink_lookup+0x276/0x2b0 [ 1119.238144][ T585] netlink_unicast+0x5c0/0x690 [ 1119.238183][ T585] netlink_sendmsg+0x5c8/0x6f0 [ 1119.238274][ T585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.238295][ T585] ____sys_sendmsg+0x5af/0x600 [ 1119.238322][ T585] ___sys_sendmsg+0x195/0x1e0 [ 1119.238388][ T585] __x64_sys_sendmsg+0xd4/0x160 [ 1119.238429][ T585] x64_sys_call+0x17ba/0x3000 [ 1119.238458][ T585] do_syscall_64+0xc0/0x2a0 [ 1119.238497][ T585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.238521][ T585] RIP: 0033:0x7f4975e8aeb9 [ 1119.238539][ T585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.238565][ T585] RSP: 002b:00007f49748e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.238613][ T585] RAX: ffffffffffffffda RBX: 00007f4976105fa0 RCX: 00007f4975e8aeb9 [ 1119.238629][ T585] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1119.238717][ T585] RBP: 00007f4975ef8c1f R08: 0000000000000000 R09: 0000000000000000 [ 1119.238733][ T585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.238766][ T585] R13: 00007f4976106038 R14: 00007f4976105fa0 R15: 00007ffd6e77a168 [ 1119.238792][ T585] [ 1119.558215][ T585] memory: usage 307200kB, limit 307200kB, failcnt 15749 [ 1119.565387][ T585] memory+swap: usage 344780kB, limit 9007199254740988kB, failcnt 0 [ 1119.573366][ T585] kmem: usage 274880kB, limit 9007199254740988kB, failcnt 0 [ 1119.580766][ T585] Memory cgroup stats for /syz1: [ 1119.581105][ T585] cache 31088640 [ 1119.589658][ T585] rss 1994752 [ 1119.593043][ T585] shmem 31088640 [ 1119.596762][ T585] mapped_file 0 [ 1119.600247][ T585] dirty 0 [ 1119.603237][ T585] writeback 0 [ 1119.606605][ T585] workingset_refault_anon 193 [ 1119.611433][ T585] workingset_refault_file 30021 [ 1119.616373][ T585] swap 38481920 [ 1119.620023][ T585] swapcached 4096 [ 1119.623684][ T585] pgpgin 1184704 [ 1119.627261][ T585] pgpgout 1176624 [ 1119.631025][ T585] pgfault 1176022 [ 1119.634678][ T585] pgmajfault 345 [ 1119.638258][ T585] inactive_anon 1032192 [ 1119.642503][ T585] active_anon 32055296 [ 1119.646634][ T585] inactive_file 8192 [ 1119.650727][ T585] active_file 0 [ 1119.654209][ T585] unevictable 0 [ 1119.657691][ T585] hierarchical_memory_limit 314572800 [ 1119.663180][ T585] hierarchical_memsw_limit 9223372036854771712 [ 1119.669407][ T585] total_cache 31088640 [ 1119.673589][ T585] total_rss 1994752 [ 1119.677605][ T585] total_shmem 31088640 [ 1119.681776][ T585] total_mapped_file 0 [ 1119.685765][ T585] total_dirty 0 [ 1119.689362][ T585] total_writeback 0 [ 1119.693192][ T585] total_workingset_refault_anon 193 [ 1119.698565][ T585] total_workingset_refault_file 30021 [ 1119.703970][ T585] total_swap 38481920 [ 1119.708082][ T585] total_swapcached 4096 [ 1119.712262][ T585] total_pgpgin 1184704 [ 1119.716391][ T585] total_pgpgout 1176624 [ 1119.720587][ T585] total_pgfault 1176024 [ 1119.725179][ T585] total_pgmajfault 345 [ 1119.729301][ T585] total_inactive_anon 1032192 [ 1119.734011][ T585] total_active_anon 32055296 [ 1119.738652][ T585] total_inactive_file 8192 [ 1119.743086][ T585] total_active_file 0 [ 1119.747117][ T585] total_unevictable 0 [ 1119.751160][ T585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.23225,pid=584,uid=0 [ 1119.765926][ T585] Memory cgroup out of memory: Killed process 584 (syz.1.23225) total-vm:94116kB, anon-rss:1336kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 1119.814058][ T600] netlink: 48 bytes leftover after parsing attributes in process `syz.6.23228'. [ 1120.079116][ T632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23243'. [ 1120.598525][ T642] syz.7.23248 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1120.612860][ T642] CPU: 0 UID: 0 PID: 642 Comm: syz.7.23248 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1120.612905][ T642] Tainted: [W]=WARN [ 1120.612915][ T642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.612938][ T642] Call Trace: [ 1120.612945][ T642] [ 1120.613007][ T642] __dump_stack+0x1d/0x30 [ 1120.613032][ T642] dump_stack_lvl+0x95/0xd0 [ 1120.613053][ T642] dump_stack+0x15/0x1b [ 1120.613072][ T642] dump_header+0x80/0x240 [ 1120.613142][ T642] oom_kill_process+0x295/0x350 [ 1120.613199][ T642] out_of_memory+0x97d/0xb80 [ 1120.613225][ T642] try_charge_memcg+0x62e/0xa10 [ 1120.613333][ T642] obj_cgroup_charge_pages+0x23/0xc0 [ 1120.613439][ T642] __memcg_kmem_charge_page+0x9e/0x170 [ 1120.613469][ T642] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1120.613545][ T642] alloc_pages_mpol+0xb3/0x260 [ 1120.613576][ T642] alloc_pages_noprof+0x8f/0x130 [ 1120.613606][ T642] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1120.613743][ T642] __kvmalloc_node_noprof+0x471/0x680 [ 1120.613839][ T642] ? ip_set_alloc+0x24/0x30 [ 1120.613868][ T642] ? ip_set_alloc+0x24/0x30 [ 1120.613898][ T642] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 1120.613944][ T642] ip_set_alloc+0x24/0x30 [ 1120.614016][ T642] hash_netiface_create+0x282/0x740 [ 1120.614058][ T642] ? __pfx_hash_netiface_create+0x10/0x10 [ 1120.614087][ T642] ip_set_create+0x3cf/0x970 [ 1120.614183][ T642] nfnetlink_rcv_msg+0x509/0x5d0 [ 1120.614234][ T642] netlink_rcv_skb+0x123/0x220 [ 1120.614309][ T642] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1120.614354][ T642] nfnetlink_rcv+0x167/0x1720 [ 1120.614391][ T642] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1120.614441][ T642] ? __rmqueue_pcplist+0x9b6/0xb80 [ 1120.614474][ T642] ? _raw_spin_lock_bh+0x56/0xb0 [ 1120.614506][ T642] ? should_fail_ex+0x30/0x280 [ 1120.614543][ T642] ? selinux_nlmsg_lookup+0x99/0x890 [ 1120.614568][ T642] ? __rcu_read_unlock+0x33/0x70 [ 1120.614631][ T642] ? __netlink_lookup+0x276/0x2b0 [ 1120.614654][ T642] netlink_unicast+0x5c0/0x690 [ 1120.614686][ T642] netlink_sendmsg+0x5c8/0x6f0 [ 1120.614708][ T642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.614759][ T642] ____sys_sendmsg+0x5af/0x600 [ 1120.614784][ T642] ___sys_sendmsg+0x195/0x1e0 [ 1120.614828][ T642] __x64_sys_sendmsg+0xd4/0x160 [ 1120.614853][ T642] x64_sys_call+0x17ba/0x3000 [ 1120.614955][ T642] do_syscall_64+0xc0/0x2a0 [ 1120.614988][ T642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.615022][ T642] RIP: 0033:0x7f3c0fbeaeb9 [ 1120.615038][ T642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.615152][ T642] RSP: 002b:00007f3c0e647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.615172][ T642] RAX: ffffffffffffffda RBX: 00007f3c0fe65fa0 RCX: 00007f3c0fbeaeb9 [ 1120.615186][ T642] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1120.615199][ T642] RBP: 00007f3c0fc58c1f R08: 0000000000000000 R09: 0000000000000000 [ 1120.615211][ T642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.615231][ T642] R13: 00007f3c0fe66038 R14: 00007f3c0fe65fa0 R15: 00007ffe5f2d6778 [ 1120.615252][ T642] [ 1120.615259][ T642] memory: usage 307200kB, limit 307200kB, failcnt 5421 [ 1120.814298][ T660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23253'. [ 1120.815109][ T642] memory+swap: usage 344320kB, limit 9007199254740988kB, failcnt 0 [ 1120.820452][ T660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.23253'. [ 1120.825187][ T642] kmem: usage 264548kB, limit 9007199254740988kB, failcnt 0 [ 1120.971708][ T642] Memory cgroup stats for /syz7: [ 1120.972072][ T642] cache 40960000 [ 1120.980678][ T642] rss 2371584 [ 1120.984097][ T642] shmem 40955904 [ 1120.987683][ T642] mapped_file 4096 [ 1120.991439][ T642] dirty 0 [ 1120.994517][ T642] writeback 0 [ 1120.997830][ T642] workingset_refault_anon 2534 [ 1121.002673][ T642] workingset_refault_file 10576 [ 1121.007564][ T642] swap 38010880 [ 1121.011188][ T642] swapcached 344064 [ 1121.015022][ T642] pgpgin 1259881 [ 1121.018719][ T642] pgpgout 1249218 [ 1121.022480][ T642] pgfault 1007169 [ 1121.026138][ T642] pgmajfault 502 [ 1121.029823][ T642] inactive_anon 14352384 [ 1121.034094][ T642] active_anon 29319168 [ 1121.038198][ T642] inactive_file 4096 [ 1121.042144][ T642] active_file 0 [ 1121.045633][ T642] unevictable 0 [ 1121.049170][ T642] hierarchical_memory_limit 314572800 [ 1121.054564][ T642] hierarchical_memsw_limit 9223372036854771712 [ 1121.060803][ T642] total_cache 40960000 [ 1121.064967][ T642] total_rss 2371584 [ 1121.068837][ T642] total_shmem 40955904 [ 1121.073033][ T642] total_mapped_file 4096 [ 1121.077412][ T642] total_dirty 0 [ 1121.080888][ T642] total_writeback 0 [ 1121.084694][ T642] total_workingset_refault_anon 2534 [ 1121.090050][ T642] total_workingset_refault_file 10576 [ 1121.095435][ T642] total_swap 38010880 [ 1121.099487][ T642] total_swapcached 344064 [ 1121.103839][ T642] total_pgpgin 1259881 [ 1121.108016][ T642] total_pgpgout 1249218 [ 1121.112270][ T642] total_pgfault 1007169 [ 1121.116572][ T642] total_pgmajfault 502 [ 1121.120662][ T642] total_inactive_anon 14352384 [ 1121.125508][ T642] total_active_anon 29319168 [ 1121.130221][ T642] total_inactive_file 4096 [ 1121.134820][ T642] total_active_file 0 [ 1121.138828][ T642] total_unevictable 0 [ 1121.142989][ T642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.23248,pid=641,uid=0 [ 1121.157735][ T642] Memory cgroup out of memory: Killed process 641 (syz.7.23248) total-vm:94116kB, anon-rss:1336kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 1121.191735][ T652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23250'. [ 1121.314079][ T29] audit: type=1326 audit(2000003657.761:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=678 comm="syz.7.23259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1121.337808][ T29] audit: type=1326 audit(2000003657.761:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=678 comm="syz.7.23259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1121.364208][ T29] audit: type=1326 audit(2000003657.824:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=678 comm="syz.7.23259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1121.388313][ T29] audit: type=1326 audit(2000003657.824:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=678 comm="syz.7.23259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1121.411899][ T29] audit: type=1326 audit(2000003657.824:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=678 comm="syz.7.23259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c0fbeaeb9 code=0x7ffc0000 [ 1121.895120][T13334] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1121.906220][T13334] CPU: 0 UID: 0 PID: 13334 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1121.906263][T13334] Tainted: [W]=WARN [ 1121.906273][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1121.906291][T13334] Call Trace: [ 1121.906299][T13334] [ 1121.906311][T13334] __dump_stack+0x1d/0x30 [ 1121.906344][T13334] dump_stack_lvl+0x95/0xd0 [ 1121.906393][T13334] dump_stack+0x15/0x1b [ 1121.906416][T13334] dump_header+0x80/0x240 [ 1121.906445][T13334] oom_kill_process+0x295/0x350 [ 1121.906505][T13334] out_of_memory+0x97d/0xb80 [ 1121.906534][T13334] try_charge_memcg+0x62e/0xa10 [ 1121.906598][T13334] __mem_cgroup_charge+0x65/0x150 [ 1121.906711][T13334] filemap_add_folio+0x110/0x350 [ 1121.906738][T13334] __filemap_get_folio_mpol+0x326/0x680 [ 1121.906772][T13334] filemap_fault+0x473/0xbb0 [ 1121.906887][T13334] __do_fault+0xbc/0x200 [ 1121.906962][T13334] handle_mm_fault+0x11d7/0x3030 [ 1121.907123][T13334] ? vma_start_read+0x1c7/0x2c0 [ 1121.907167][T13334] do_user_addr_fault+0x62f/0x1050 [ 1121.907219][T13334] exc_page_fault+0x62/0xa0 [ 1121.907301][T13334] asm_exc_page_fault+0x26/0x30 [ 1121.907328][T13334] RIP: 0033:0x7fbb8df18fb4 [ 1121.907348][T13334] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 1121.907373][T13334] RSP: 002b:00007ffc0456b480 EFLAGS: 00010202 [ 1121.907396][T13334] RAX: 0000001b2e024000 RBX: 00000000000026e1 RCX: 000000000011af58 [ 1121.907467][T13334] RDX: 00000000094f0161 RSI: 00007ffc0456b510 RDI: 0000000000000001 [ 1121.907484][T13334] RBP: 00007ffc0456b4bc R08: 00000000238271b6 R09: 7fffffffffffffff [ 1121.907504][T13334] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1121.907522][T13334] R13: 00000000000927c0 R14: 000000000011b0e5 R15: 00007ffc0456b510 [ 1121.907545][T13334] [ 1121.907552][T13334] memory: usage 307200kB, limit 307200kB, failcnt 10237 [ 1122.102225][T13334] memory+swap: usage 308732kB, limit 9007199254740988kB, failcnt 0 [ 1122.110199][T13334] kmem: usage 237404kB, limit 9007199254740988kB, failcnt 0 [ 1122.117646][T13334] Memory cgroup stats for /syz6: [ 1122.117995][T13334] cache 69459968 [ 1122.126723][T13334] rss 1601536 [ 1122.130288][T13334] shmem 24576 [ 1122.133681][T13334] mapped_file 0 [ 1122.137351][T13334] dirty 0 [ 1122.140350][T13334] writeback 0 [ 1122.143659][T13334] workingset_refault_anon 2051 [ 1122.148532][T13334] workingset_refault_file 17928 [ 1122.153409][T13334] swap 1568768 [ 1122.156876][T13334] swapcached 409600 [ 1122.160812][T13334] pgpgin 1296657 [ 1122.164439][T13334] pgpgout 1279208 [ 1122.168089][T13334] pgfault 1220562 [ 1122.171743][T13334] pgmajfault 542 [ 1122.175364][T13334] inactive_anon 1716224 [ 1122.179542][T13334] active_anon 319488 [ 1122.183506][T13334] inactive_file 0 [ 1122.187252][T13334] active_file 0 [ 1122.190745][T13334] unevictable 69435392 [ 1122.194900][T13334] hierarchical_memory_limit 314572800 [ 1122.200297][T13334] hierarchical_memsw_limit 9223372036854771712 [ 1122.206574][T13334] total_cache 69459968 [ 1122.210742][T13334] total_rss 1601536 [ 1122.214654][T13334] total_shmem 24576 [ 1122.218488][T13334] total_mapped_file 0 [ 1122.222689][T13334] total_dirty 0 [ 1122.226260][T13334] total_writeback 0 [ 1122.230198][T13334] total_workingset_refault_anon 2051 [ 1122.235526][T13334] total_workingset_refault_file 17928 [ 1122.240973][T13334] total_swap 1568768 [ 1122.244890][T13334] total_swapcached 409600 [ 1122.249377][T13334] total_pgpgin 1296657 [ 1122.249579][ T2991] ================================================================== [ 1122.253542][T13334] total_pgpgout 1279208 [ 1122.253554][T13334] total_pgfault 1220562 [ 1122.261643][ T2991] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1122.265828][T13334] total_pgmajfault 542 [ 1122.269998][ T2991] [ 1122.270011][ T2991] write to 0xffffffff86ac32f8 of 88 bytes by task 13334 on cpu 0: [ 1122.270035][ T2991] prb_reserve+0x6e6/0xae0 [ 1122.270069][ T2991] vprintk_store+0x54a/0x910 [ 1122.277093][T13334] total_inactive_anon 1716224 [ 1122.281175][ T2991] vprintk_emit+0x1a4/0x600 [ 1122.281212][ T2991] vprintk_default+0x26/0x30 [ 1122.283581][T13334] total_active_anon 319488 [ 1122.283595][T13334] total_inactive_file 0 [ 1122.291514][ T2991] vprintk+0x1d/0x30 [ 1122.291539][ T2991] _printk+0x79/0xa0 [ 1122.291560][ T2991] seq_buf_do_printk+0x113/0x1a0 [ 1122.296041][T13334] total_active_file 0 [ 1122.300659][ T2991] mem_cgroup_print_oom_meminfo+0x17d/0x260 [ 1122.300694][ T2991] dump_header+0xa2/0x240 [ 1122.300714][ T2991] oom_kill_process+0x295/0x350 [ 1122.305408][T13334] total_unevictable 69435392 [ 1122.309919][ T2991] out_of_memory+0x97d/0xb80 [ 1122.309950][ T2991] try_charge_memcg+0x62e/0xa10 [ 1122.314561][T13334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 1122.319080][ T2991] __mem_cgroup_charge+0x65/0x150 [ 1122.323356][T13334] /,mems_allowed=0 [ 1122.327251][ T2991] filemap_add_folio+0x110/0x350 [ 1122.327284][ T2991] __filemap_get_folio_mpol+0x326/0x680 [ 1122.331195][T13334] ,oom_memcg=/syz6 [ 1122.336146][ T2991] filemap_fault+0x473/0xbb0 [ 1122.340229][T13334] ,task_memcg= [ 1122.346028][ T2991] __do_fault+0xbc/0x200 [ 1122.346057][ T2991] handle_mm_fault+0x11d7/0x3030 [ 1122.350401][T13334] /syz6 [ 1122.355244][ T2991] do_user_addr_fault+0x62f/0x1050 [ 1122.359941][T13334] ,task=syz.6.23266,pid=694,uid=0 [ 1122.364462][ T2991] exc_page_fault+0x62/0xa0 [ 1122.364495][ T2991] asm_exc_page_fault+0x26/0x30 [ 1122.369444][T13334] Memory cgroup out of memory: Killed process 694 (syz.6.23266) total-vm:94248kB, anon-rss:1336kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 1122.376906][ T2991] [ 1122.376915][ T2991] read to 0xffffffff86ac32f8 of 8 bytes by task 2991 on cpu 1: [ 1122.376938][ T2991] _prb_read_valid+0x1c4/0x950 [ 1122.376968][ T2991] prb_read_valid+0x3c/0x60 [ 1122.476495][ T2991] syslog_print+0x258/0x560 [ 1122.481054][ T2991] do_syslog+0x52b/0x7f0 [ 1122.485511][ T2991] __x64_sys_syslog+0x41/0x50 [ 1122.490401][ T2991] x64_sys_call+0x27ce/0x3000 [ 1122.495105][ T2991] do_syscall_64+0xc0/0x2a0 [ 1122.499640][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.505561][ T2991] [ 1122.507902][ T2991] value changed: 0x00000000000027d1 -> 0x00000000000047d1 [ 1122.515024][ T2991] [ 1122.517360][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 1122.523528][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1122.534404][ T2991] Tainted: [W]=WARN [ 1122.538230][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1122.548392][ T2991] ================================================================== [ 1122.597202][ T714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23268'.