last executing test programs: 4.197773339s ago: executing program 4 (id=1035): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0xf84, 0x117000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x2, 0xb, @vifc_lcl_ifindex, @multicast1}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 4.178706692s ago: executing program 4 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 4.121564369s ago: executing program 4 (id=1038): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='qrtr_ns_service_announce_new\x00', 0xffffffffffffffff, 0x0, 0x1000000000009}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(r3, 0x0, 0x44f0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xe, r5, 0xffffffffffffdcaf, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, &(0x7f0000000200)=0x23) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa20000000000c2923200efe3610007020000f8ffffffb7030000080600000000000000000000850002d80f1f786bf1d0431e78a2249e079d4074"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.304928564s ago: executing program 4 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xf) 2.95097282s ago: executing program 4 (id=1046): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pidfd_send_signal(r6, 0x3f, &(0x7f0000000440)={0x1a, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xeffffffffffffffd}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) 2.076662512s ago: executing program 0 (id=1055): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, 0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.043973687s ago: executing program 0 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000640)='locks_get_lock_context\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f}) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x0, 0xaf4, 0x4}) 1.93851414s ago: executing program 0 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xf) 1.895414056s ago: executing program 2 (id=1060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dax_writeback_one\x00', r2, 0x0, 0x2}, 0x18) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000300000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000040000000b0000000d9222e1e28852de000100f102eff29e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x200}, &(0x7f00000000c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xf4, 0x40, 0xce, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, 0x787, 0x40, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0xf, 0x9, 0x6, 0x1, @local, @private2, 0x1, 0x20, 0x9, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) getpeername$inet(r3, 0x0, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='rxrpc_notify_socket\x00', r6, 0x0, 0x1}, 0x18) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f00000005c0)={0x1, 0x800, 0x9955}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000600)="aa", 0x1, 0x24008050, &(0x7f0000000400)={0xa, 0x1, 0x3f66400, @loopback, 0x2}, 0x1c) shutdown(r5, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x2c) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1}) 1.884569307s ago: executing program 4 (id=1061): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) exit(0xfff) timer_gettime(r2, &(0x7f0000000100)) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[], 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.849178442s ago: executing program 1 (id=1062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x200000c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0xf) 1.690530553s ago: executing program 0 (id=1063): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000ac0)="a970", 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x86) 1.587612605s ago: executing program 1 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00f2ff00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000059cf28135e51a8f069fdb858b5000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030f46fb300000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r6) fcntl$setlease(r3, 0x400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="b6000000000000003d798470000003000000feff00000000851000000400000018120000", @ANYRES32=r0, @ANYBLOB="000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008c31000085000000060000001856000002000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000060000000000000006000000"], &(0x7f0000000040)='GPL\x00', 0xb2, 0x0, &(0x7f0000000180), 0x41100, 0x4, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xba, 0x4}, 0x10, 0xc6ed, r1, 0x7, &(0x7f0000000500)=[r0, r0, r9, r0, r0, r3], &(0x7f0000000580)=[{0x4, 0x2, 0x7, 0xb}, {0x5, 0x2, 0xe}, {0x2, 0x4, 0x5, 0x1}, {0x0, 0x1, 0x9, 0x6}, {0x1, 0x3, 0xe, 0x6}, {0x2, 0x3, 0x3, 0x5}, {0x4, 0x1, 0x8}], 0x10, 0x5}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYRES64=r5, @ANYBLOB="7a05542c9d0d90c8fdb89826baf6beb17c7815ff83c31248ed1dace6f4fe8f6f27c1c4f1eb924ca31203fb1d29b26c584106f6808a385e7cdd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000035"], 0x50) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000300)=0xf) 1.375889243s ago: executing program 3 (id=1068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 1.351920206s ago: executing program 3 (id=1069): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.331738238s ago: executing program 1 (id=1070): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 1.307371711s ago: executing program 3 (id=1071): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0xf84, 0x117000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x2, 0xb, @vifc_lcl_ifindex, @multicast1}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 1.306987322s ago: executing program 3 (id=1072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket(0x10, 0x80002, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pidfd_send_signal(r6, 0x3f, &(0x7f0000000440)={0x1a, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xeffffffffffffffd}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) 1.041410856s ago: executing program 2 (id=1073): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)={0x0, 0x3e, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$cgroup2(0x0, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', &(0x7f0000000100), 0x8081, &(0x7f0000000500)=ANY=[@ANYBLOB='memory_localevents=']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 916.727722ms ago: executing program 2 (id=1074): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x50, r3, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 868.305598ms ago: executing program 0 (id=1075): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 664.251005ms ago: executing program 2 (id=1076): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050027000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) 612.709391ms ago: executing program 2 (id=1077): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 612.329431ms ago: executing program 2 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000080000000000340012916184800e00010069703667726574617000000020000280140007002001000000000000000000000000000208000d0007000000"], 0x54}}, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e65, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x4, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 480.224368ms ago: executing program 1 (id=1079): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xf727, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x100000001}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) open(0x0, 0x60840, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='mctp_key_release\x00', r3, 0x0, 0x200000000000000}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000007000010000000000000000000700", @ANYRES32, @ANYBLOB="0c00028006"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x10, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x522}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1012, 0x0, 0x12011, r8, 0x0) 442.535553ms ago: executing program 3 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 399.836748ms ago: executing program 1 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00f2ff00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000059cf28135e51a8f069fdb858b5000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030f46fb300000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r6) fcntl$setlease(r3, 0x400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="b6000000000000003d798470000003000000feff00000000851000000400000018120000", @ANYRES32=r0, @ANYBLOB="000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008c31000085000000060000001856000002000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000060000000000000006000000"], &(0x7f0000000040)='GPL\x00', 0xb2, 0x0, &(0x7f0000000180), 0x41100, 0x4, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xba, 0x4}, 0x10, 0xc6ed, r1, 0x7, &(0x7f0000000500)=[r0, r0, r9, r0, r0, r3], &(0x7f0000000580)=[{0x4, 0x2, 0x7, 0xb}, {0x5, 0x2, 0xe}, {0x2, 0x4, 0x5, 0x1}, {0x0, 0x1, 0x9, 0x6}, {0x1, 0x3, 0xe, 0x6}, {0x2, 0x3, 0x3, 0x5}, {0x4, 0x1, 0x8}], 0x10, 0x5}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYRES64=r5, @ANYBLOB="7a05542c9d0d90c8fdb89826baf6beb17c7815ff83c31248ed1dace6f4fe8f6f27c1c4f1eb924ca31203fb1d29b26c584106f6808a385e7cdd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000035"], 0x50) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000300)=0xf) 349.730615ms ago: executing program 3 (id=1082): r0 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 147.939601ms ago: executing program 1 (id=1083): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) r1 = socket(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000c80)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf, '_k%>cOO'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001c80)={r2, 0x0, "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", "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"}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000000403) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x8741, 0x100, 0x1, {{0x12, 0x4, 0x1, 0x1b, 0x48, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @local, {[@generic={0x44, 0x5, "c4a6bb"}, @rr={0x7, 0x13, 0x2e, [@empty, @private=0xa010102, @multicast2, @multicast2]}, @generic={0x44, 0x6, "54db943b"}, @ssrr={0x89, 0x7, 0xc0, [@empty]}, @generic={0xb250567b19a11f7, 0xe, "fc0ac179f5bfe4b1e521b34f"}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=1084): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ff"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0xb) tkill(r0, 0x11) kernel console output (not intermixed with test programs): in process `syz.1.468'. [ 68.421500][ T4912] C: renamed from team_slave_0 (while UP) [ 68.429555][ T4912] netlink: 'syz.1.474': attribute type 3 has an invalid length. [ 68.437213][ T4912] netlink: 152 bytes leftover after parsing attributes in process `syz.1.474'. [ 68.447172][ T4912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 68.506304][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 68.549615][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 68.590820][ T4932] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 68.599623][ T4932] xt_hashlimit: max too large, truncated to 1048576 [ 68.753053][ T4942] tipc: Enabling of bearer rejected, already enabled [ 68.774305][ T4943] Falling back ldisc for ttyS3. [ 68.804016][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 68.840645][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 68.849552][ T4930] tipc: Disabling bearer [ 68.882926][ T4951] cgroup2: Unexpected value for 'memory_localevents' [ 68.928331][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 69.032337][ T4959] netlink: 'syz.1.497': attribute type 6 has an invalid length. [ 69.120008][ T4959] FAULT_INJECTION: forcing a failure. [ 69.120008][ T4959] name failslab, interval 1, probability 0, space 0, times 0 [ 69.133411][ T4959] CPU: 1 UID: 0 PID: 4959 Comm: syz.1.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.133440][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.133455][ T4959] Call Trace: [ 69.133463][ T4959] [ 69.133510][ T4959] __dump_stack+0x1d/0x30 [ 69.133539][ T4959] dump_stack_lvl+0xe8/0x140 [ 69.133635][ T4959] dump_stack+0x15/0x1b [ 69.133679][ T4959] should_fail_ex+0x265/0x280 [ 69.133752][ T4959] should_failslab+0x8c/0xb0 [ 69.133780][ T4959] kmem_cache_alloc_noprof+0x69/0x4b0 [ 69.133803][ T4959] ? fib_insert_alias+0x16c/0x770 [ 69.133900][ T4959] fib_insert_alias+0x16c/0x770 [ 69.133934][ T4959] ? kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 69.133967][ T4959] ? fib_table_insert+0x1ab/0xeb0 [ 69.133996][ T4959] fib_table_insert+0x2a6/0xeb0 [ 69.134087][ T4959] ? fib_trie_table+0xd0/0xf0 [ 69.134120][ T4959] ? fib_new_table+0x1ac/0x1c0 [ 69.134143][ T4959] inet_rtm_newroute+0xab/0x140 [ 69.134168][ T4959] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 69.134193][ T4959] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 69.134247][ T4959] netlink_rcv_skb+0x123/0x220 [ 69.134350][ T4959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.134448][ T4959] rtnetlink_rcv+0x1c/0x30 [ 69.134483][ T4959] netlink_unicast+0x5c0/0x690 [ 69.134512][ T4959] netlink_sendmsg+0x58b/0x6b0 [ 69.134556][ T4959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.134627][ T4959] __sock_sendmsg+0x145/0x180 [ 69.134647][ T4959] ____sys_sendmsg+0x31e/0x4a0 [ 69.134684][ T4959] ___sys_sendmsg+0x17b/0x1d0 [ 69.134791][ T4959] __x64_sys_sendmsg+0xd4/0x160 [ 69.134823][ T4959] x64_sys_call+0x17ba/0x3000 [ 69.134853][ T4959] do_syscall_64+0xd8/0x2c0 [ 69.134943][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.134975][ T4959] RIP: 0033:0x7f63fef1f749 [ 69.134991][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.135013][ T4959] RSP: 002b:00007f63fd97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.135035][ T4959] RAX: ffffffffffffffda RBX: 00007f63ff175fa0 RCX: 00007f63fef1f749 [ 69.135048][ T4959] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000003 [ 69.135213][ T4959] RBP: 00007f63fd97f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.135232][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.135247][ T4959] R13: 00007f63ff176038 R14: 00007f63ff175fa0 R15: 00007ffc9a0c16f8 [ 69.135331][ T4959] [ 69.497937][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 69.497951][ T29] audit: type=1400 audit(1766115570.669:4346): avc: denied { watch watch_reads } for pid=4967 comm="syz.3.499" path="/112/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.498354][ T4968] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 69.538119][ T29] audit: type=1400 audit(1766115570.711:4347): avc: denied { relabelto } for pid=4967 comm="syz.3.499" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 69.564243][ T29] audit: type=1400 audit(1766115570.711:4348): avc: denied { associate } for pid=4967 comm="syz.3.499" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 69.580115][ T4968] netlink: 'syz.3.499': attribute type 10 has an invalid length. [ 69.599512][ T4968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.499'. [ 69.706594][ T29] audit: type=1400 audit(1766115570.869:4349): avc: denied { ioctl } for pid=4967 comm="syz.3.499" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.735340][ T4970] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 69.793325][ T4968] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 69.884827][ T4984] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 69.902253][ T4986] cgroup2: Unexpected value for 'memory_localevents' [ 69.918828][ T4988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.956496][ T4988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.984051][ T29] audit: type=1326 audit(1766115571.184:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 70.009786][ T29] audit: type=1326 audit(1766115571.184:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 70.033170][ T29] audit: type=1326 audit(1766115571.184:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 70.056467][ T29] audit: type=1326 audit(1766115571.184:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 70.079790][ T29] audit: type=1326 audit(1766115571.184:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 70.103128][ T29] audit: type=1326 audit(1766115571.184:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 70.105828][ T4988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.150141][ T4988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.210041][ T4998] xt_hashlimit: size too large, truncated to 1048576 [ 70.608077][ T5022] cgroup2: Unexpected value for 'memory_localevents' [ 71.074341][ T5018] tipc: New replicast peer: 255.255.255.255 [ 71.080597][ T5018] tipc: Enabled bearer , priority 10 [ 71.138823][ T5028] Falling back ldisc for ttyS3. [ 71.850384][ T5046] xt_hashlimit: size too large, truncated to 1048576 [ 72.144135][ T5064] Falling back ldisc for ttyS3. [ 72.324565][ T5071] Falling back ldisc for ttyS3. [ 72.374072][ T5073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.433167][ T5073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.531624][ T5073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.600745][ T5073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.642323][ T5084] cgroup2: Unexpected value for 'memory_localevents' [ 72.668738][ T3801] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.681509][ T3801] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.706148][ T3801] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.743302][ T5086] xt_hashlimit: size too large, truncated to 1048576 [ 73.000130][ T5099] Falling back ldisc for ttyS3. [ 73.085289][ T5105] Falling back ldisc for ttyS3. [ 73.284410][ T5113] __nla_validate_parse: 7 callbacks suppressed [ 73.284500][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 73.393665][ T5119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 73.510403][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 73.703150][ T5134] Falling back ldisc for ttyS3. [ 73.724355][ T5136] cgroup2: Unexpected value for 'memory_localevents' [ 73.808814][ T5138] Falling back ldisc for ttyS3. [ 74.255561][ T5074] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.327986][ T5160] FAULT_INJECTION: forcing a failure. [ 74.327986][ T5160] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 74.341240][ T5160] CPU: 0 UID: 0 PID: 5160 Comm: syz.4.565 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.341269][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.341284][ T5160] Call Trace: [ 74.341298][ T5160] [ 74.341359][ T5160] __dump_stack+0x1d/0x30 [ 74.341386][ T5160] dump_stack_lvl+0xe8/0x140 [ 74.341408][ T5160] dump_stack+0x15/0x1b [ 74.341454][ T5160] should_fail_ex+0x265/0x280 [ 74.341482][ T5160] should_fail_alloc_page+0xf2/0x100 [ 74.341511][ T5160] __alloc_frozen_pages_noprof+0x109/0x360 [ 74.341547][ T5160] alloc_pages_mpol+0xb3/0x260 [ 74.341582][ T5160] vma_alloc_folio_noprof+0x1aa/0x300 [ 74.341675][ T5160] handle_mm_fault+0xef5/0x2c60 [ 74.341713][ T5160] ? __kcsan_check_access+0x7/0x1e0 [ 74.341825][ T5160] do_user_addr_fault+0x630/0x1080 [ 74.341857][ T5160] exc_page_fault+0x62/0xa0 [ 74.341904][ T5160] asm_exc_page_fault+0x26/0x30 [ 74.341928][ T5160] RIP: 0033:0x7f5d7809cc5b [ 74.341945][ T5160] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 74.341967][ T5160] RSP: 002b:00007f5d76b54e10 EFLAGS: 00010246 [ 74.341984][ T5160] RAX: 00007f5d76b56f30 RBX: 00007f5d7831a640 RCX: 0000000000000000 [ 74.341996][ T5160] RDX: 00007f5d76b56f78 RSI: 00007f5d78150df8 RDI: 00007f5d76b54e30 [ 74.342033][ T5160] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 74.342045][ T5160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.342059][ T5160] R13: 00007f5d78346038 R14: 00007f5d78345fa0 R15: 00007fffbecff088 [ 74.342081][ T5160] [ 74.342091][ T5160] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 74.568747][ T5074] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.571891][ T5166] cgroup2: Unexpected value for 'memory_localevents' [ 74.631631][ T5074] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.686776][ T5168] Falling back ldisc for ttyS3. [ 74.723331][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 74.746921][ T5174] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.754515][ T5174] vhci_hcd vhci_hcd.2: invalid port number 96 [ 74.760677][ T5174] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 74.785793][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 74.785834][ T29] audit: type=1326 audit(1766115601.218:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.815736][ T29] audit: type=1326 audit(1766115601.218:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.839192][ T29] audit: type=1326 audit(1766115601.218:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.843022][ T5179] cgroup2: Unexpected value for 'memory_localevents' [ 74.862579][ T29] audit: type=1326 audit(1766115601.218:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.862614][ T29] audit: type=1326 audit(1766115601.218:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.862642][ T29] audit: type=1326 audit(1766115601.218:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.862707][ T29] audit: type=1326 audit(1766115601.218:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.862736][ T29] audit: type=1326 audit(1766115601.218:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.862766][ T29] audit: type=1326 audit(1766115601.218:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.862834][ T29] audit: type=1326 audit(1766115601.218:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 74.867512][ T5177] netlink: 'syz.0.572': attribute type 13 has an invalid length. [ 75.148896][ T5187] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 75.203598][ T5195] cgroup2: Unexpected value for 'memory_localevents' [ 75.264828][ T5198] Falling back ldisc for ttyS3. [ 75.317904][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 75.366734][ T5211] cgroup2: Unexpected value for 'memory_localevents' [ 75.457129][ T5218] netlink: 14 bytes leftover after parsing attributes in process `syz.2.586'. [ 75.469434][ T5218] hsr_slave_0: left promiscuous mode [ 75.475034][ T5218] hsr_slave_1: left promiscuous mode [ 75.615622][ T5226] netlink: 2 bytes leftover after parsing attributes in process `syz.2.589'. [ 75.699717][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.707018][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.775250][ T5221] Falling back ldisc for ttyS3. [ 75.859538][ T5237] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 75.901778][ T5226] macsec1: left promiscuous mode [ 75.909605][ T387] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.918699][ T387] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.928297][ T387] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.936891][ T387] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.976277][ T5248] random: crng reseeded on system resumption [ 76.041048][ T5250] cgroup2: Unexpected value for 'memory_localevents' [ 76.092327][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 76.114361][ T5258] cgroup2: Unexpected value for 'memory_localevents' [ 76.226062][ T5277] lo: entered allmulticast mode [ 76.347473][ T5294] cgroup2: Unexpected value for 'memory_localevents' [ 76.519984][ T5300] cgroup2: Unexpected value for 'memory_localevents' [ 76.858856][ T5320] Falling back ldisc for ttyS3. [ 76.999083][ T5322] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 77.106700][ T5330] cgroup2: Unexpected value for 'memory_localevents' [ 77.526340][ T296] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.555069][ T296] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.563439][ T296] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.596678][ T296] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.704743][ T5355] »»»»»»: renamed from vlan0 (while UP) [ 77.737754][ T5356] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 77.792951][ T5356] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 78.000477][ T5362] cgroup2: Unexpected value for 'memory_localevents' [ 78.233792][ T5373] cgroup2: Unexpected value for 'memory_localevents' [ 78.583251][ T5397] cgroup2: Unexpected value for 'memory_localevents' [ 78.616441][ T5400] FAULT_INJECTION: forcing a failure. [ 78.616441][ T5400] name failslab, interval 1, probability 0, space 0, times 0 [ 78.629111][ T5400] CPU: 0 UID: 0 PID: 5400 Comm: syz.4.646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.629139][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.629154][ T5400] Call Trace: [ 78.629161][ T5400] [ 78.629169][ T5400] __dump_stack+0x1d/0x30 [ 78.629199][ T5400] dump_stack_lvl+0xe8/0x140 [ 78.629257][ T5400] dump_stack+0x15/0x1b [ 78.629278][ T5400] should_fail_ex+0x265/0x280 [ 78.629304][ T5400] should_failslab+0x8c/0xb0 [ 78.629419][ T5400] kmem_cache_alloc_noprof+0x69/0x4b0 [ 78.629447][ T5400] ? security_inode_alloc+0x37/0x100 [ 78.629512][ T5400] security_inode_alloc+0x37/0x100 [ 78.629536][ T5400] inode_init_always_gfp+0x4b7/0x500 [ 78.629560][ T5400] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 78.629603][ T5400] alloc_inode+0x58/0x170 [ 78.629623][ T5400] new_inode+0x1d/0xe0 [ 78.629647][ T5400] shmem_get_inode+0x246/0x750 [ 78.629701][ T5400] __shmem_file_setup+0x113/0x210 [ 78.629729][ T5400] shmem_file_setup+0x3b/0x50 [ 78.629754][ T5400] __se_sys_memfd_create+0x2f7/0x6b0 [ 78.629790][ T5400] __x64_sys_memfd_create+0x31/0x40 [ 78.629917][ T5400] x64_sys_call+0x28cb/0x3000 [ 78.629943][ T5400] do_syscall_64+0xd8/0x2c0 [ 78.630004][ T5400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.630107][ T5400] RIP: 0033:0x7f5d780ef749 [ 78.630121][ T5400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.630188][ T5400] RSP: 002b:00007f5d76b56e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.630208][ T5400] RAX: ffffffffffffffda RBX: 00000000000004ec RCX: 00007f5d780ef749 [ 78.630224][ T5400] RDX: 00007f5d76b56ef0 RSI: 0000000000000000 RDI: 00007f5d78174960 [ 78.630239][ T5400] RBP: 00002000000001c0 R08: 00007f5d76b56bb7 R09: 00007f5d76b56e40 [ 78.630253][ T5400] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 78.630265][ T5400] R13: 00007f5d76b56ef0 R14: 00007f5d76b56eb0 R15: 0000200000000000 [ 78.630291][ T5400] [ 78.862485][ T5404] __nla_validate_parse: 6 callbacks suppressed [ 78.862498][ T5404] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 78.993596][ T5409] syz_tun: entered allmulticast mode [ 79.032698][ T5411] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 79.204715][ T5421] SELinux: policydb version -1257804390 does not match my version range 15-35 [ 79.278966][ T5421] SELinux: failed to load policy [ 79.370788][ T5427] ÿ: renamed from bond_slave_0 [ 79.602385][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 79.602398][ T29] audit: type=1326 audit(1766115606.257:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.631616][ T29] audit: type=1326 audit(1766115606.257:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.654709][ T29] audit: type=1326 audit(1766115606.257:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.677733][ T29] audit: type=1326 audit(1766115606.257:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.700889][ T29] audit: type=1326 audit(1766115606.257:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.723939][ T29] audit: type=1326 audit(1766115606.257:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.747037][ T29] audit: type=1326 audit(1766115606.257:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.770165][ T29] audit: type=1326 audit(1766115606.268:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.793204][ T29] audit: type=1326 audit(1766115606.268:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 79.816311][ T29] audit: type=1326 audit(1766115606.268:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x50000 [ 80.018433][ T5433] tipc: Enabling of bearer rejected, already enabled [ 80.026426][ T5433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 80.225548][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.232769][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.248648][ T5447] Falling back ldisc for ttyS3. [ 80.373295][ T5448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.385368][ T5448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.482801][ T3778] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.509724][ T3778] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.542328][ T3778] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.562275][ T3778] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.794284][ T5469] IPVS: Unknown mcast interface: pimreg [ 80.821890][ T5465] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5465 comm=syz.1.670 [ 81.564498][ T5478] Falling back ldisc for ttyS3. [ 82.134707][ T5491] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.181545][ T5494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.194546][ T5494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.230015][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 82.290075][ T5494] hsr_slave_1 (unregistering): left promiscuous mode [ 82.328606][ T5502] cgroup2: Unexpected value for 'memory_localevents' [ 82.389733][ T5508] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 82.458713][ T5509] Falling back ldisc for ttyS3. [ 82.479547][ T5508] SELinux: failed to load policy [ 82.510621][ T5513] 9p: Bad value for 'wfdno' [ 82.799322][ T5529] dvmrp1: entered allmulticast mode [ 82.932705][ T5524] syz.2.687 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 82.943745][ T5524] CPU: 0 UID: 0 PID: 5524 Comm: syz.2.687 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.943771][ T5524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.943785][ T5524] Call Trace: [ 82.943849][ T5524] [ 82.943857][ T5524] __dump_stack+0x1d/0x30 [ 82.943880][ T5524] dump_stack_lvl+0xe8/0x140 [ 82.943903][ T5524] dump_stack+0x15/0x1b [ 82.943926][ T5524] dump_header+0x81/0x240 [ 82.944064][ T5524] oom_kill_process+0x295/0x350 [ 82.944090][ T5524] out_of_memory+0x97b/0xb80 [ 82.944118][ T5524] try_charge_memcg+0x610/0xa10 [ 82.944143][ T5524] charge_memcg+0x51/0xc0 [ 82.944206][ T5524] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 82.944249][ T5524] __read_swap_cache_async+0x17b/0x2d0 [ 82.944282][ T5524] swap_cluster_readahead+0x362/0x3c0 [ 82.944392][ T5524] swapin_readahead+0xde/0x820 [ 82.944427][ T5524] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 82.944457][ T5524] ? __rcu_read_unlock+0x34/0x70 [ 82.944476][ T5524] ? __rcu_read_unlock+0x4f/0x70 [ 82.944508][ T5524] ? swap_cache_get_folio+0x277/0x280 [ 82.944541][ T5524] do_swap_page+0x2b4/0x21e0 [ 82.944632][ T5524] ? __pfx_default_wake_function+0x10/0x10 [ 82.944675][ T5524] handle_mm_fault+0x9d8/0x2c60 [ 82.944714][ T5524] do_user_addr_fault+0x630/0x1080 [ 82.944807][ T5524] exc_page_fault+0x62/0xa0 [ 82.944835][ T5524] asm_exc_page_fault+0x26/0x30 [ 82.944854][ T5524] RIP: 0033:0x7f217b48f8e7 [ 82.944948][ T5524] Code: c0 08 89 43 28 4c 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b 3c 24 89 ea 4d 8b 65 40 44 29 f2 4c 03 24 d7 <48> 83 7b 50 07 77 08 48 c7 43 50 08 00 00 00 41 89 c7 49 f7 df 4c [ 82.944966][ T5524] RSP: 002b:00007ffcb64d0650 EFLAGS: 00010286 [ 82.944981][ T5524] RAX: 0000000000002008 RBX: 00007f217c335720 RCX: 0000000000000000 [ 82.944999][ T5524] RDX: 000000000000014e RSI: 0000000000000008 RDI: 00007f217ac15008 [ 82.945013][ T5524] RBP: 0000000000000365 R08: 00007f217ac15060 R09: 00007f217b7f2000 [ 82.945028][ T5524] R10: 00007f217ac15008 R11: 0000000000000003 R12: ffffffff817dfc30 [ 82.945070][ T5524] R13: 00007f217b806128 R14: 0000000000000217 R15: ffffffffffffe000 [ 82.945086][ T5524] ? evict_folios+0x32f0/0x35a0 [ 82.945114][ T5524] [ 82.945139][ T5524] memory: usage 307200kB, limit 307200kB, failcnt 13041 [ 83.164218][ T5524] memory+swap: usage 99268kB, limit 9007199254740988kB, failcnt 0 [ 83.172035][ T5524] kmem: usage 96296kB, limit 9007199254740988kB, failcnt 0 [ 83.179366][ T5524] Memory cgroup stats for /syz2: [ 83.180693][ T5524] cache 0 [ 83.188594][ T5524] rss 8192 [ 83.191598][ T5524] shmem 0 [ 83.194609][ T5524] mapped_file 0 [ 83.198066][ T5524] dirty 0 [ 83.200991][ T5524] writeback 0 [ 83.204288][ T5524] workingset_refault_anon 857 [ 83.208966][ T5524] workingset_refault_file 1309 [ 83.213737][ T5524] swap 2732032 [ 83.217093][ T5524] swapcached 0 [ 83.220454][ T5524] pgpgin 69270 [ 83.223836][ T5524] pgpgout 69268 [ 83.227281][ T5524] pgfault 51996 [ 83.230810][ T5524] pgmajfault 240 [ 83.234423][ T5524] inactive_anon 0 [ 83.238054][ T5524] active_anon 8192 [ 83.241790][ T5524] inactive_file 0 [ 83.245420][ T5524] active_file 0 [ 83.248868][ T5524] unevictable 0 [ 83.252341][ T5524] hierarchical_memory_limit 314572800 [ 83.257695][ T5524] hierarchical_memsw_limit 9223372036854771712 [ 83.263850][ T5524] total_cache 0 [ 83.267293][ T5524] total_rss 8192 [ 83.270842][ T5524] total_shmem 0 [ 83.274352][ T5524] total_mapped_file 0 [ 83.278338][ T5524] total_dirty 0 [ 83.281807][ T5524] total_writeback 0 [ 83.285603][ T5524] total_workingset_refault_anon 857 [ 83.290851][ T5524] total_workingset_refault_file 1309 [ 83.296124][ T5524] total_swap 2732032 [ 83.300017][ T5524] total_swapcached 0 [ 83.303932][ T5524] total_pgpgin 69270 [ 83.307812][ T5524] total_pgpgout 69268 [ 83.311805][ T5524] total_pgfault 51996 [ 83.315793][ T5524] total_pgmajfault 240 [ 83.319882][ T5524] total_inactive_anon 0 [ 83.324058][ T5524] total_active_anon 8192 [ 83.328317][ T5524] total_inactive_file 0 [ 83.332456][ T5524] total_active_file 0 [ 83.336421][ T5524] total_unevictable 0 [ 83.340456][ T5524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.687,pid=5524,uid=0 [ 83.354955][ T5524] Memory cgroup out of memory: Killed process 5524 (syz.2.687) total-vm:96016kB, anon-rss:1136kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 83.368441][ T5541] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 83.439211][ T5540] tipc: New replicast peer: 255.255.255.255 [ 83.445258][ T5540] tipc: Enabled bearer , priority 10 [ 83.466192][ T5547] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 83.559833][ T5557] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 83.571106][ T5557] SELinux: failed to load policy [ 83.635368][ T5569] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 83.836418][ T5588] FAULT_INJECTION: forcing a failure. [ 83.836418][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 83.849300][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.1.710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.849342][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.849363][ T5588] Call Trace: [ 83.849432][ T5588] [ 83.849441][ T5588] __dump_stack+0x1d/0x30 [ 83.849475][ T5588] dump_stack_lvl+0xe8/0x140 [ 83.849568][ T5588] dump_stack+0x15/0x1b [ 83.849596][ T5588] should_fail_ex+0x265/0x280 [ 83.849642][ T5588] should_failslab+0x8c/0xb0 [ 83.849675][ T5588] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 83.849700][ T5588] ? alloc_vmap_area+0x241/0xea0 [ 83.849725][ T5588] alloc_vmap_area+0x241/0xea0 [ 83.849753][ T5588] ? xas_load+0x413/0x430 [ 83.849844][ T5588] ? should_fail_ex+0xdb/0x280 [ 83.849872][ T5588] ? __kmalloc_cache_node_noprof+0x2b3/0x4d0 [ 83.849923][ T5588] __get_vm_area_node+0x173/0x1d0 [ 83.850009][ T5588] __vmalloc_node_range_noprof+0x28e/0x1310 [ 83.850037][ T5588] ? xt_counters_alloc+0x40/0x50 [ 83.850071][ T5588] ? __rcu_read_unlock+0x4f/0x70 [ 83.850092][ T5588] ? translate_table+0x902/0xf90 [ 83.850116][ T5588] ? translate_table+0x902/0xf90 [ 83.850192][ T5588] ? kfree+0x353/0x3c0 [ 83.850257][ T5588] ? translate_table+0xe97/0xf90 [ 83.850279][ T5588] ? xt_counters_alloc+0x40/0x50 [ 83.850297][ T5588] vzalloc_noprof+0x82/0xc0 [ 83.850358][ T5588] ? xt_counters_alloc+0x40/0x50 [ 83.850379][ T5588] xt_counters_alloc+0x40/0x50 [ 83.850500][ T5588] __do_replace+0x4d/0x570 [ 83.850523][ T5588] ? _copy_from_user+0x89/0xb0 [ 83.850609][ T5588] do_ipt_set_ctl+0x6ea/0x820 [ 83.850632][ T5588] ? _raw_spin_unlock_bh+0x36/0x40 [ 83.850778][ T5588] ? tcp_release_cb+0xf1/0x370 [ 83.850822][ T5588] nf_setsockopt+0x199/0x1b0 [ 83.850850][ T5588] ip_setsockopt+0x102/0x110 [ 83.850887][ T5588] ipv6_setsockopt+0xfb/0x130 [ 83.850930][ T5588] tcp_setsockopt+0x98/0xb0 [ 83.850952][ T5588] sock_common_setsockopt+0x69/0x80 [ 83.850978][ T5588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 83.851003][ T5588] smc_setsockopt+0x183/0x750 [ 83.851041][ T5588] ? __pfx_smc_setsockopt+0x10/0x10 [ 83.851154][ T5588] __sys_setsockopt+0x184/0x200 [ 83.851187][ T5588] __x64_sys_setsockopt+0x64/0x80 [ 83.851220][ T5588] x64_sys_call+0x21d5/0x3000 [ 83.851319][ T5588] do_syscall_64+0xd8/0x2c0 [ 83.851386][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.851431][ T5588] RIP: 0033:0x7f63fef1f749 [ 83.851448][ T5588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.851469][ T5588] RSP: 002b:00007f63fd97f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.851490][ T5588] RAX: ffffffffffffffda RBX: 00007f63ff175fa0 RCX: 00007f63fef1f749 [ 83.851586][ T5588] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 83.851600][ T5588] RBP: 00007f63fd97f090 R08: 0000000000000228 R09: 0000000000000000 [ 83.851615][ T5588] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 83.851692][ T5588] R13: 00007f63ff176038 R14: 00007f63ff175fa0 R15: 00007ffc9a0c16f8 [ 83.851713][ T5588] [ 84.151681][ T5588] syz.1.710: vmalloc error: size 131072, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 84.166462][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.1.710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.166489][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.166503][ T5588] Call Trace: [ 84.166510][ T5588] [ 84.166518][ T5588] __dump_stack+0x1d/0x30 [ 84.166616][ T5588] dump_stack_lvl+0xe8/0x140 [ 84.166668][ T5588] dump_stack+0x15/0x1b [ 84.166688][ T5588] warn_alloc+0x12b/0x1a0 [ 84.166718][ T5588] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 84.166745][ T5588] ? __rcu_read_unlock+0x4f/0x70 [ 84.166837][ T5588] ? translate_table+0x902/0xf90 [ 84.166860][ T5588] ? translate_table+0x902/0xf90 [ 84.166883][ T5588] ? kfree+0x353/0x3c0 [ 84.166964][ T5588] ? translate_table+0xe97/0xf90 [ 84.166986][ T5588] ? xt_counters_alloc+0x40/0x50 [ 84.167072][ T5588] vzalloc_noprof+0x82/0xc0 [ 84.167169][ T5588] ? xt_counters_alloc+0x40/0x50 [ 84.167189][ T5588] xt_counters_alloc+0x40/0x50 [ 84.167207][ T5588] __do_replace+0x4d/0x570 [ 84.167230][ T5588] ? _copy_from_user+0x89/0xb0 [ 84.167341][ T5588] do_ipt_set_ctl+0x6ea/0x820 [ 84.167396][ T5588] ? _raw_spin_unlock_bh+0x36/0x40 [ 84.167418][ T5588] ? tcp_release_cb+0xf1/0x370 [ 84.167457][ T5588] nf_setsockopt+0x199/0x1b0 [ 84.167480][ T5588] ip_setsockopt+0x102/0x110 [ 84.167586][ T5588] ipv6_setsockopt+0xfb/0x130 [ 84.167609][ T5588] tcp_setsockopt+0x98/0xb0 [ 84.167632][ T5588] sock_common_setsockopt+0x69/0x80 [ 84.167697][ T5588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 84.167735][ T5588] smc_setsockopt+0x183/0x750 [ 84.167768][ T5588] ? __pfx_smc_setsockopt+0x10/0x10 [ 84.167806][ T5588] __sys_setsockopt+0x184/0x200 [ 84.167833][ T5588] __x64_sys_setsockopt+0x64/0x80 [ 84.167863][ T5588] x64_sys_call+0x21d5/0x3000 [ 84.167918][ T5588] do_syscall_64+0xd8/0x2c0 [ 84.167958][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.167983][ T5588] RIP: 0033:0x7f63fef1f749 [ 84.168050][ T5588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.168070][ T5588] RSP: 002b:00007f63fd97f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.168090][ T5588] RAX: ffffffffffffffda RBX: 00007f63ff175fa0 RCX: 00007f63fef1f749 [ 84.168104][ T5588] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 84.168117][ T5588] RBP: 00007f63fd97f090 R08: 0000000000000228 R09: 0000000000000000 [ 84.168186][ T5588] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 84.168199][ T5588] R13: 00007f63ff176038 R14: 00007f63ff175fa0 R15: 00007ffc9a0c16f8 [ 84.168216][ T5588] [ 84.168223][ T5588] Mem-Info: [ 84.420262][ T5592] tipc: New replicast peer: 255.255.255.255 [ 84.421593][ T5588] active_anon:6890 inactive_anon:3 isolated_anon:0 [ 84.421593][ T5588] active_file:8617 inactive_file:2534 isolated_file:0 [ 84.421593][ T5588] unevictable:0 dirty:41 writeback:0 [ 84.421593][ T5588] slab_reclaimable:3086 slab_unreclaimable:14567 [ 84.421593][ T5588] mapped:31734 shmem:3023 pagetables:1839 [ 84.421593][ T5588] sec_pagetables:0 bounce:0 [ 84.421593][ T5588] kernel_misc_reclaimable:0 [ 84.421593][ T5588] free:1886107 free_pcp:17480 free_cma:0 [ 84.424815][ T5592] tipc: Enabled bearer , priority 10 [ 84.427732][ T5588] Node 0 active_anon:27560kB inactive_anon:12kB active_file:34468kB inactive_file:10136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126936kB dirty:164kB writeback:0kB shmem:12092kB kernel_stack:4960kB pagetables:7356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.511990][ T5588] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.541785][ T5588] lowmem_reserve[]: 0 2880 7859 7859 [ 84.547286][ T5588] Node 0 DMA32 free:2945864kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 84.578596][ T5588] lowmem_reserve[]: 0 0 4978 4978 [ 84.583644][ T5588] Node 0 Normal free:4578832kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27096kB inactive_anon:12kB active_file:34700kB inactive_file:10136kB unevictable:0kB writepending:252kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:66004kB local_pcp:27684kB free_cma:0kB [ 84.616861][ T5588] lowmem_reserve[]: 0 0 0 0 [ 84.621524][ T5588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.634404][ T5588] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945864kB [ 84.650604][ T5588] Node 0 Normal: 834*4kB (UME) 1099*8kB (UME) 895*16kB (UME) 1000*32kB (UME) 623*64kB (UME) 395*128kB (UME) 382*256kB (UM) 301*512kB (UM) 262*1024kB (UME) 179*2048kB (UME) 865*4096kB (UM) = 4578704kB [ 84.670447][ T5588] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 84.679729][ T5588] 14300 total pagecache pages [ 84.684426][ T5588] 13 pages in swap cache [ 84.688646][ T5588] Free swap = 118680kB [ 84.692784][ T5588] Total swap = 124996kB [ 84.696910][ T5588] 2097051 pages RAM [ 84.700706][ T5588] 0 pages HighMem/MovableOnly [ 84.705426][ T5588] 81277 pages reserved [ 84.730310][ T5606] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.816261][ T29] kauditd_printk_skb: 5875 callbacks suppressed [ 84.816280][ T29] audit: type=1326 audit(1766115611.748:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 84.846100][ T29] audit: type=1326 audit(1766115611.748:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 84.869691][ T29] audit: type=1326 audit(1766115611.748:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 84.893856][ T29] audit: type=1326 audit(1766115611.748:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 84.917467][ T29] audit: type=1326 audit(1766115611.748:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 84.941781][ T29] audit: type=1326 audit(1766115611.748:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5cf991667 code=0x7ffc0000 [ 84.965761][ T29] audit: type=1326 audit(1766115611.748:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa5cf9915dc code=0x7ffc0000 [ 84.989120][ T29] audit: type=1326 audit(1766115611.748:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa5cf991514 code=0x7ffc0000 [ 85.012659][ T29] audit: type=1326 audit(1766115611.748:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa5cf991514 code=0x7ffc0000 [ 85.036577][ T29] audit: type=1326 audit(1766115611.748:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.3.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa5cf98e3aa code=0x7ffc0000 [ 85.114305][ T5622] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 85.125027][ T5622] SELinux: failed to load policy [ 85.450561][ T5639] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 85.522138][ T5637] tipc: Enabling of bearer rejected, already enabled [ 85.724567][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.735386][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.772604][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 85.906632][ T5652] Falling back ldisc for ttyS3. [ 85.922515][ T5664] FAULT_INJECTION: forcing a failure. [ 85.922515][ T5664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.935735][ T5664] CPU: 0 UID: 0 PID: 5664 Comm: syz.2.738 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.935762][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.935847][ T5664] Call Trace: [ 85.935854][ T5664] [ 85.935863][ T5664] __dump_stack+0x1d/0x30 [ 85.935892][ T5664] dump_stack_lvl+0xe8/0x140 [ 85.936009][ T5664] dump_stack+0x15/0x1b [ 85.936033][ T5664] should_fail_ex+0x265/0x280 [ 85.936058][ T5664] should_fail+0xb/0x20 [ 85.936081][ T5664] should_fail_usercopy+0x1a/0x20 [ 85.936133][ T5664] strncpy_from_user+0x27/0x260 [ 85.936247][ T5664] strncpy_from_user_nofault+0x68/0xf0 [ 85.936278][ T5664] bpf_probe_read_user_str+0x2a/0x70 [ 85.936310][ T5664] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 85.936331][ T5664] bpf_trace_run2+0x107/0x1d0 [ 85.936514][ T5664] ? security_context_to_sid_core+0x2fc/0x3b0 [ 85.936569][ T5664] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 85.936594][ T5664] ? security_context_to_sid_core+0x2fc/0x3b0 [ 85.936651][ T5664] __traceiter_kfree+0x2e/0x50 [ 85.936682][ T5664] ? security_context_to_sid_core+0x2fc/0x3b0 [ 85.936767][ T5664] kfree+0x353/0x3c0 [ 85.936793][ T5664] security_context_to_sid_core+0x2fc/0x3b0 [ 85.936836][ T5664] security_context_to_sid+0x2e/0x40 [ 85.936871][ T5664] selinux_inode_setxattr+0x4aa/0x6d0 [ 85.936959][ T5664] security_inode_setxattr+0x13a/0x1b0 [ 85.936989][ T5664] __vfs_setxattr_locked+0x83/0x1c0 [ 85.937034][ T5664] vfs_setxattr+0x132/0x270 [ 85.937072][ T5664] file_setxattr+0x139/0x1b0 [ 85.937095][ T5664] path_setxattrat+0x290/0x310 [ 85.937144][ T5664] __x64_sys_fsetxattr+0x6b/0x80 [ 85.937169][ T5664] x64_sys_call+0x23c4/0x3000 [ 85.937268][ T5664] do_syscall_64+0xd8/0x2c0 [ 85.937305][ T5664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.937332][ T5664] RIP: 0033:0x7f217b5af749 [ 85.937349][ T5664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.937376][ T5664] RSP: 002b:00007f217a00f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 85.937395][ T5664] RAX: ffffffffffffffda RBX: 00007f217b805fa0 RCX: 00007f217b5af749 [ 85.937411][ T5664] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000005 [ 85.937424][ T5664] RBP: 00007f217a00f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.937439][ T5664] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 85.937454][ T5664] R13: 00007f217b806038 R14: 00007f217b805fa0 R15: 00007ffcb64d05f8 [ 85.937476][ T5664] [ 86.247423][ T5668] cgroup2: Unexpected value for 'memory_localevents' [ 86.281686][ T5672] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 86.536243][ T5674] tipc: Enabling of bearer rejected, already enabled [ 86.554034][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 86.619044][ T5703] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 86.629045][ T5703] SELinux: failed to load policy [ 86.751153][ T5714] cgroup2: Unexpected value for 'memory_localevents' [ 87.065446][ T5728] Falling back ldisc for ttyS3. [ 87.262019][ T5730] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.280457][ T5730] SELinux: failed to load policy [ 87.286178][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.762'. [ 87.503446][ T5742] cgroup2: Unexpected value for 'memory_localevents' [ 87.595987][ T5732] tipc: Enabling of bearer rejected, already enabled [ 88.271426][ T5760] cgroup2: Unexpected value for 'memory_localevents' [ 88.281417][ T5756] syz.3.772 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 88.292355][ T5756] CPU: 0 UID: 0 PID: 5756 Comm: syz.3.772 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.292401][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.292416][ T5756] Call Trace: [ 88.292424][ T5756] [ 88.292431][ T5756] __dump_stack+0x1d/0x30 [ 88.292518][ T5756] dump_stack_lvl+0xe8/0x140 [ 88.292541][ T5756] dump_stack+0x15/0x1b [ 88.292561][ T5756] dump_header+0x81/0x240 [ 88.292585][ T5756] oom_kill_process+0x295/0x350 [ 88.292657][ T5756] out_of_memory+0x97b/0xb80 [ 88.292685][ T5756] try_charge_memcg+0x610/0xa10 [ 88.292714][ T5756] charge_memcg+0x51/0xc0 [ 88.292757][ T5756] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 88.292809][ T5756] __read_swap_cache_async+0x17b/0x2d0 [ 88.292914][ T5756] swap_cluster_readahead+0x262/0x3c0 [ 88.292952][ T5756] swapin_readahead+0xde/0x820 [ 88.293059][ T5756] ? refill_obj_stock+0x254/0x2e0 [ 88.293142][ T5756] ? __rcu_read_unlock+0x4f/0x70 [ 88.293163][ T5756] ? swap_cache_get_folio+0x277/0x280 [ 88.293200][ T5756] do_swap_page+0x2b4/0x21e0 [ 88.293239][ T5756] ? mas_state_walk+0x526/0x650 [ 88.293342][ T5756] ? __pfx_default_wake_function+0x10/0x10 [ 88.293461][ T5756] handle_mm_fault+0x9d8/0x2c60 [ 88.293511][ T5756] ? __rcu_read_unlock+0x4f/0x70 [ 88.293531][ T5756] ? mt_find+0x21b/0x330 [ 88.293557][ T5756] do_user_addr_fault+0x3fe/0x1080 [ 88.293588][ T5756] exc_page_fault+0x62/0xa0 [ 88.293679][ T5756] asm_exc_page_fault+0x26/0x30 [ 88.293699][ T5756] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 88.293791][ T5756] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 88.293818][ T5756] RSP: 0018:ffffc90001d07888 EFLAGS: 00050202 [ 88.293838][ T5756] RAX: ffff88810a5cdd00 RBX: 0000000000000004 RCX: 0000000000000004 [ 88.293854][ T5756] RDX: 0000000000000000 RSI: ffffc90001d07bfc RDI: 00002000000008cc [ 88.293870][ T5756] RBP: ffffc90001d07ca0 R08: 000000000000002c R09: 0000000000000000 [ 88.293885][ T5756] R10: 0001c90001d07bfc R11: 0001c90001d07bff R12: 00002000000008d0 [ 88.293901][ T5756] R13: 00007ffffffff000 R14: 00002000000008cc R15: ffffc90001d07bfc [ 88.293919][ T5756] _copy_to_user+0x7c/0xa0 [ 88.293986][ T5756] bpf_check+0x97e5/0xc860 [ 88.294024][ T5756] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 88.294065][ T5756] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 88.294147][ T5756] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 88.294179][ T5756] ? _find_next_zero_bit+0x29/0xa0 [ 88.294220][ T5756] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 88.294302][ T5756] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 88.294338][ T5756] ? css_rstat_updated+0xbb/0x280 [ 88.294362][ T5756] ? mod_memcg_state+0x182/0x270 [ 88.294467][ T5756] ? __rcu_read_unlock+0x4f/0x70 [ 88.294514][ T5756] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 88.294548][ T5756] ? bpf_prog_alloc+0x5b/0x150 [ 88.294571][ T5756] ? pcpu_alloc_noprof+0xd0d/0x1240 [ 88.294672][ T5756] ? should_fail_ex+0x30/0x280 [ 88.294726][ T5756] ? __kmalloc_noprof+0x2b4/0x5a0 [ 88.294754][ T5756] ? security_bpf_prog_load+0x60/0x140 [ 88.294788][ T5756] ? selinux_bpf_prog_load+0xad/0xd0 [ 88.294860][ T5756] ? security_bpf_prog_load+0x9e/0x140 [ 88.294891][ T5756] bpf_prog_load+0xf6e/0x1140 [ 88.294920][ T5756] ? security_bpf+0x2b/0x90 [ 88.295018][ T5756] __sys_bpf+0x469/0x7c0 [ 88.295045][ T5756] __x64_sys_bpf+0x41/0x50 [ 88.295085][ T5756] x64_sys_call+0x28e1/0x3000 [ 88.295116][ T5756] do_syscall_64+0xd8/0x2c0 [ 88.295210][ T5756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.295283][ T5756] RIP: 0033:0x7fa5cf98f749 [ 88.295301][ T5756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.295324][ T5756] RSP: 002b:00007fa5ce3ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.295346][ T5756] RAX: ffffffffffffffda RBX: 00007fa5cfbe6090 RCX: 00007fa5cf98f749 [ 88.295362][ T5756] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 88.295377][ T5756] RBP: 00007fa5cfa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.295468][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.295482][ T5756] R13: 00007fa5cfbe6128 R14: 00007fa5cfbe6090 R15: 00007ffc131b8f78 [ 88.295504][ T5756] [ 88.295512][ T5756] memory: usage 307200kB, limit 307200kB, failcnt 4723 [ 88.652116][ T5764] bridge0: entered promiscuous mode [ 88.667087][ T5756] memory+swap: usage 2892kB, limit 9007199254740988kB, failcnt 0 [ 88.715558][ T5764] macsec1: entered promiscuous mode [ 88.718569][ T5756] kmem: usage 1196kB, limit 9007199254740988kB, failcnt 0 [ 88.732186][ T5767] FAULT_INJECTION: forcing a failure. [ 88.732186][ T5767] name failslab, interval 1, probability 0, space 0, times 0 [ 88.738337][ T5756] Memory cgroup stats for /syz3: [ 88.751730][ T5756] cache 524288 [ 88.763862][ T5767] CPU: 1 UID: 0 PID: 5767 Comm: syz.2.775 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.763896][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.763920][ T5767] Call Trace: [ 88.763927][ T5767] [ 88.763933][ T5767] __dump_stack+0x1d/0x30 [ 88.763962][ T5767] dump_stack_lvl+0xe8/0x140 [ 88.764019][ T5767] dump_stack+0x15/0x1b [ 88.764041][ T5767] should_fail_ex+0x265/0x280 [ 88.764068][ T5767] should_failslab+0x8c/0xb0 [ 88.764093][ T5767] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 88.764200][ T5767] ? __d_alloc+0x37/0x340 [ 88.764232][ T5767] __d_alloc+0x37/0x340 [ 88.764260][ T5767] ? security_inode_permission+0x4a/0xb0 [ 88.764322][ T5767] d_alloc_parallel+0x54/0xcd0 [ 88.764354][ T5767] ? __rcu_read_unlock+0x4f/0x70 [ 88.764377][ T5767] ? __d_lookup+0x316/0x340 [ 88.764408][ T5767] ? try_to_unlazy+0x283/0x3d0 [ 88.764539][ T5767] path_openat+0x8c6/0x23b0 [ 88.764585][ T5767] do_filp_open+0x109/0x230 [ 88.764630][ T5767] do_sys_openat2+0xa6/0x150 [ 88.764731][ T5767] __x64_sys_openat+0xf2/0x120 [ 88.764838][ T5767] x64_sys_call+0x2b07/0x3000 [ 88.764866][ T5767] do_syscall_64+0xd8/0x2c0 [ 88.764911][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.764935][ T5767] RIP: 0033:0x7f217b5af749 [ 88.764952][ T5767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.765036][ T5767] RSP: 002b:00007f217a00f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.765057][ T5767] RAX: ffffffffffffffda RBX: 00007f217b805fa0 RCX: 00007f217b5af749 [ 88.765093][ T5767] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c [ 88.765107][ T5767] RBP: 00007f217a00f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.765121][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.765134][ T5767] R13: 00007f217b806038 R14: 00007f217b805fa0 R15: 00007ffcb64d05f8 [ 88.765229][ T5767] [ 88.968011][ T5756] rss 12288 [ 88.968021][ T5756] shmem 0 [ 88.968029][ T5756] mapped_file 65536 [ 88.968037][ T5756] dirty 0 [ 88.968045][ T5756] writeback 4096 [ 88.968054][ T5756] workingset_refault_anon 408 [ 88.968065][ T5756] workingset_refault_file 1957 [ 88.968074][ T5756] swap 966656 [ 88.968104][ T5756] swapcached 36864 [ 88.968111][ T5756] pgpgin 69689 [ 88.968118][ T5756] pgpgout 69550 [ 88.968125][ T5756] pgfault 70654 [ 88.968131][ T5756] pgmajfault 235 [ 88.968139][ T5756] inactive_anon 12288 [ 88.968146][ T5756] active_anon 32768 [ 88.968154][ T5756] inactive_file 0 [ 88.968162][ T5756] active_file 524288 [ 88.968170][ T5756] unevictable 0 [ 88.968177][ T5756] hierarchical_memory_limit 314572800 [ 88.968186][ T5756] hierarchical_memsw_limit 9223372036854771712 [ 88.968234][ T5756] total_cache 524288 [ 88.968242][ T5756] total_rss 12288 [ 88.968249][ T5756] total_shmem 0 [ 88.968256][ T5756] total_mapped_file 65536 [ 88.968266][ T5756] total_dirty 0 [ 88.968274][ T5756] total_writeback 4096 [ 88.968283][ T5756] total_workingset_refault_anon 408 [ 89.072841][ T5756] total_workingset_refault_file 1957 [ 89.072861][ T5756] total_swap 966656 [ 89.072869][ T5756] total_swapcached 36864 [ 89.086250][ T5756] total_pgpgin 69689 [ 89.090157][ T5756] total_pgpgout 69550 [ 89.094231][ T5756] total_pgfault 70654 [ 89.098203][ T5756] total_pgmajfault 235 [ 89.102296][ T5756] total_inactive_anon 12288 [ 89.106796][ T5756] total_active_anon 32768 [ 89.111156][ T5756] total_inactive_file 0 [ 89.115303][ T5756] total_active_file 524288 [ 89.119804][ T5756] total_unevictable 0 [ 89.123778][ T5756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.772,pid=5754,uid=0 [ 89.138415][ T5756] Memory cgroup out of memory: Killed process 5754 (syz.3.772) total-vm:93968kB, anon-rss:1264kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 89.174156][ T5765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.211408][ T5756] syz.3.772 (5756) used greatest stack depth: 8168 bytes left [ 89.224196][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 89.247930][ T5765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.407631][ T5765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.331015][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 90.331032][ T29] audit: type=1326 audit(1766115617.543:11217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 90.393390][ T29] audit: type=1326 audit(1766115617.574:11218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 90.417805][ T29] audit: type=1326 audit(1766115617.585:11219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 90.441396][ T29] audit: type=1326 audit(1766115617.585:11220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 90.465576][ T29] audit: type=1326 audit(1766115617.585:11221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 90.489075][ T29] audit: type=1326 audit(1766115617.585:11222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9dce41667 code=0x7ffc0000 [ 90.513109][ T29] audit: type=1326 audit(1766115617.585:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd9dce415dc code=0x7ffc0000 [ 90.536489][ T29] audit: type=1326 audit(1766115617.585:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd9dce41514 code=0x7ffc0000 [ 90.560423][ T29] audit: type=1326 audit(1766115617.585:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd9dce41514 code=0x7ffc0000 [ 90.583802][ T29] audit: type=1326 audit(1766115617.585:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd9dce3e3aa code=0x7ffc0000 [ 90.609220][ T5765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.625683][ T5784] tipc: New replicast peer: 255.255.255.255 [ 90.631839][ T5784] tipc: Enabled bearer , priority 10 [ 90.762671][ T3801] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.774061][ T3801] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.785268][ T3801] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.799174][ T3801] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.255499][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 91.275979][ T5816] netlink: 'syz.2.792': attribute type 7 has an invalid length. [ 91.284287][ T5816] netlink: 'syz.2.792': attribute type 8 has an invalid length. [ 91.563518][ T5828] cgroup2: Unexpected value for 'memory_localevents' [ 91.612890][ T5811] syz.0.790 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 91.624914][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.624945][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.625083][ T5811] Call Trace: [ 91.625089][ T5811] [ 91.625171][ T5811] __dump_stack+0x1d/0x30 [ 91.625200][ T5811] dump_stack_lvl+0xe8/0x140 [ 91.625227][ T5811] dump_stack+0x15/0x1b [ 91.625291][ T5811] dump_header+0x81/0x240 [ 91.625316][ T5811] oom_kill_process+0x295/0x350 [ 91.625344][ T5811] out_of_memory+0x97b/0xb80 [ 91.625378][ T5811] try_charge_memcg+0x610/0xa10 [ 91.625447][ T5811] charge_memcg+0x51/0xc0 [ 91.625534][ T5811] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 91.625576][ T5811] __read_swap_cache_async+0x17b/0x2d0 [ 91.625694][ T5811] swap_cluster_readahead+0x262/0x3c0 [ 91.625737][ T5811] swapin_readahead+0xde/0x820 [ 91.625773][ T5811] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 91.625818][ T5811] ? __rcu_read_unlock+0x34/0x70 [ 91.625860][ T5811] ? __rcu_read_unlock+0x4f/0x70 [ 91.625883][ T5811] ? swap_cache_get_folio+0x277/0x280 [ 91.625977][ T5811] do_swap_page+0x2b4/0x21e0 [ 91.626018][ T5811] ? __pfx_default_wake_function+0x10/0x10 [ 91.626061][ T5811] handle_mm_fault+0x9d8/0x2c60 [ 91.626166][ T5811] do_user_addr_fault+0x630/0x1080 [ 91.626204][ T5811] exc_page_fault+0x62/0xa0 [ 91.626243][ T5811] asm_exc_page_fault+0x26/0x30 [ 91.626267][ T5811] RIP: 0033:0x7fd9dcd1f010 [ 91.626353][ T5811] Code: ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 41 83 c7 01 <45> 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 00 00 48 83 [ 91.626375][ T5811] RSP: 002b:00007ffea2d79330 EFLAGS: 00010206 [ 91.626460][ T5811] RAX: 000000110c2d4000 RBX: 00007fd9ddbc5720 RCX: 0000000000000003 [ 91.626475][ T5811] RDX: 0000000000000fdf RSI: 0000000000002cbf RDI: 0000000000000008 [ 91.626490][ T5811] RBP: ffffffff81fb2fdf R08: 00007fd9dd096128 R09: 00007fd9dd082000 [ 91.626506][ T5811] R10: 00007fd9dc4ad008 R11: 0000000000000005 R12: 0000000000000005 [ 91.626600][ T5811] R13: 0000000000000000 R14: ffffffff81fb29c9 R15: 0000000000000006 [ 91.626615][ T5811] ? should_fail_usercopy+0x9/0x20 [ 91.626647][ T5811] ? nla_get_range_unsigned+0x6f/0x290 [ 91.626761][ T5811] [ 91.626769][ T5811] memory: usage 307200kB, limit 307200kB, failcnt 3992 [ 91.724425][ T5829] netlink: 14 bytes leftover after parsing attributes in process `syz.4.795'. [ 91.728285][ T5811] memory+swap: usage 275804kB, limit 9007199254740988kB, failcnt 0 [ 91.874169][ T5811] kmem: usage 147856kB, limit 9007199254740988kB, failcnt 0 [ 91.881488][ T5811] Memory cgroup stats for /syz0: [ 91.881539][ T5829] hsr_slave_0: left promiscuous mode [ 91.884291][ T5811] cache 4096 [ 91.894971][ T5811] rss 8192 [ 91.894981][ T5811] shmem 0 [ 91.894990][ T5811] mapped_file 4096 [ 91.895054][ T5811] dirty 0 [ 91.895060][ T5811] writeback 4096 [ 91.895107][ T5811] workingset_refault_anon 411 [ 91.895117][ T5811] workingset_refault_file 2155 [ 91.895127][ T5811] swap 2461696 [ 91.895133][ T5811] swapcached 4096 [ 91.895161][ T5811] pgpgin 88994 [ 91.895218][ T5811] pgpgout 88991 [ 91.895227][ T5811] pgfault 64808 [ 91.895243][ T5811] pgmajfault 257 [ 91.895250][ T5811] inactive_anon 8192 [ 91.895257][ T5811] active_anon 0 [ 91.895268][ T5811] inactive_file 0 [ 91.895275][ T5811] active_file 0 [ 91.895290][ T5811] unevictable 0 [ 91.895297][ T5811] hierarchical_memory_limit 314572800 [ 91.895306][ T5811] hierarchical_memsw_limit 9223372036854771712 [ 91.895315][ T5811] total_cache 4096 [ 91.895322][ T5811] total_rss 8192 [ 91.895394][ T5811] total_shmem 0 [ 91.895400][ T5811] total_mapped_file 4096 [ 91.895408][ T5811] total_dirty 0 [ 91.895415][ T5811] total_writeback 4096 [ 91.895422][ T5811] total_workingset_refault_anon 411 [ 91.895431][ T5811] total_workingset_refault_file 2155 [ 91.895439][ T5811] total_swap 2461696 [ 91.895448][ T5811] total_swapcached 4096 [ 91.895457][ T5811] total_pgpgin 88994 [ 91.895528][ T5811] total_pgpgout 88991 [ 91.895614][ T5811] total_pgfault 64808 [ 91.895623][ T5811] total_pgmajfault 257 [ 91.895633][ T5811] total_inactive_anon 8192 [ 91.895642][ T5811] total_active_anon 0 [ 91.895651][ T5811] total_inactive_file 0 [ 91.895660][ T5811] total_active_file 0 [ 91.895670][ T5811] total_unevictable 0 [ 91.895679][ T5811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.790,pid=5811,uid=0 [ 91.895829][ T5811] Memory cgroup out of memory: Killed process 5811 (syz.0.790) total-vm:93968kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 91.999992][ T5838] cgroup2: Unexpected value for 'memory_localevents' [ 92.394099][ T5841] tipc: Enabling of bearer rejected, already enabled [ 92.552535][ T5849] syz.2.805 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 92.563438][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz.2.805 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.563470][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.563486][ T5849] Call Trace: [ 92.563493][ T5849] [ 92.563501][ T5849] __dump_stack+0x1d/0x30 [ 92.563587][ T5849] dump_stack_lvl+0xe8/0x140 [ 92.563615][ T5849] dump_stack+0x15/0x1b [ 92.563639][ T5849] dump_header+0x81/0x240 [ 92.563664][ T5849] oom_kill_process+0x295/0x350 [ 92.563689][ T5849] out_of_memory+0x97b/0xb80 [ 92.563723][ T5849] try_charge_memcg+0x610/0xa10 [ 92.563799][ T5849] charge_memcg+0x51/0xc0 [ 92.563838][ T5849] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 92.563900][ T5849] __read_swap_cache_async+0x17b/0x2d0 [ 92.563955][ T5849] swap_cluster_readahead+0x262/0x3c0 [ 92.563990][ T5849] swapin_readahead+0xde/0x820 [ 92.564018][ T5849] ? plist_check_list+0x199/0x1b0 [ 92.564051][ T5849] ? __rcu_read_unlock+0x4f/0x70 [ 92.564074][ T5849] ? swap_cache_get_folio+0x277/0x280 [ 92.564246][ T5849] do_swap_page+0x2b4/0x21e0 [ 92.564282][ T5849] ? __pfx_futex_wake_mark+0x10/0x10 [ 92.564304][ T5849] ? __pfx_default_wake_function+0x10/0x10 [ 92.564346][ T5849] handle_mm_fault+0x9d8/0x2c60 [ 92.564434][ T5849] do_user_addr_fault+0x630/0x1080 [ 92.564507][ T5849] exc_page_fault+0x62/0xa0 [ 92.564562][ T5849] asm_exc_page_fault+0x26/0x30 [ 92.564586][ T5849] RIP: 0033:0x7f217b5af75b [ 92.564604][ T5849] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 92.564626][ T5849] RSP: 002b:00007ffcb64d0758 EFLAGS: 00010213 [ 92.564643][ T5849] RAX: 000000000000006e RBX: 0000000000017180 RCX: ffffffffffffffa8 [ 92.564778][ T5849] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f217b805fac [ 92.564794][ T5849] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 00000002b64d0a4f [ 92.564809][ T5849] R10: 00007ffcb64d0850 R11: 0000000000000246 R12: 00007f217b805fac [ 92.564824][ T5849] R13: 00007ffcb64d0850 R14: 00000000000171b2 R15: 00007ffcb64d0870 [ 92.564846][ T5849] [ 92.564853][ T5849] memory: usage 307200kB, limit 307200kB, failcnt 13242 [ 92.704375][ T5857] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 92.707830][ T5849] memory+swap: usage 124676kB, limit 9007199254740988kB, failcnt 0 [ 92.707847][ T5849] kmem: usage 121656kB, limit 9007199254740988kB, failcnt 0 [ 92.707870][ T5849] Memory cgroup stats for /syz2: [ 92.810509][ T5849] cache 0 [ 92.818392][ T5849] rss 28672 [ 92.821516][ T5849] shmem 0 [ 92.824455][ T5849] mapped_file 0 [ 92.827901][ T5849] dirty 0 [ 92.830824][ T5849] writeback 8192 [ 92.835180][ T5849] workingset_refault_anon 888 [ 92.839872][ T5849] workingset_refault_file 1309 [ 92.844780][ T5849] swap 2924544 [ 92.848146][ T5849] swapcached 57344 [ 92.851850][ T5849] pgpgin 79775 [ 92.855236][ T5849] pgpgout 79758 [ 92.858828][ T5849] pgfault 58129 [ 92.862942][ T5849] pgmajfault 261 [ 92.866481][ T5849] inactive_anon 28672 [ 92.870445][ T5849] active_anon 40960 [ 92.874328][ T5849] inactive_file 0 [ 92.878015][ T5849] active_file 0 [ 92.881484][ T5849] unevictable 0 [ 92.884933][ T5849] hierarchical_memory_limit 314572800 [ 92.890293][ T5849] hierarchical_memsw_limit 9223372036854771712 [ 92.896813][ T5849] total_cache 0 [ 92.900281][ T5849] total_rss 28672 [ 92.903909][ T5849] total_shmem 0 [ 92.907368][ T5849] total_mapped_file 0 [ 92.911373][ T5849] total_dirty 0 [ 92.914847][ T5849] total_writeback 8192 [ 92.918900][ T5849] total_workingset_refault_anon 888 [ 92.924915][ T5849] total_workingset_refault_file 1309 [ 92.930245][ T5849] total_swap 2924544 [ 92.934133][ T5849] total_swapcached 57344 [ 92.938375][ T5849] total_pgpgin 79775 [ 92.942332][ T5849] total_pgpgout 79758 [ 92.946306][ T5849] total_pgfault 58129 [ 92.951245][ T5849] total_pgmajfault 261 [ 92.955317][ T5849] total_inactive_anon 28672 [ 92.959830][ T5849] total_active_anon 40960 [ 92.964156][ T5849] total_inactive_file 0 [ 92.968319][ T5849] total_active_file 0 [ 92.968329][ T5849] total_unevictable 0 [ 92.968338][ T5849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.805,pid=5849,uid=0 [ 92.991608][ T5849] Memory cgroup out of memory: Killed process 5849 (syz.2.805) total-vm:93836kB, anon-rss:1136kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 93.049953][ T5865] cgroup2: Unexpected value for 'memory_localevents' [ 93.080845][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 93.245634][ T5880] cgroup2: Unexpected value for 'memory_localevents' [ 93.282879][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.298750][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.307486][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 93.322622][ T5881] hsr_slave_1 (unregistering): left promiscuous mode [ 93.395717][ T5883] tipc: Enabling of bearer rejected, already enabled [ 93.559642][ T5890] Falling back ldisc for ttyS3. [ 93.643099][ T5888] syz.0.818 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 93.654864][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: syz.0.818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.654958][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.654970][ T5888] Call Trace: [ 93.654977][ T5888] [ 93.654986][ T5888] __dump_stack+0x1d/0x30 [ 93.655012][ T5888] dump_stack_lvl+0xe8/0x140 [ 93.655037][ T5888] dump_stack+0x15/0x1b [ 93.655059][ T5888] dump_header+0x81/0x240 [ 93.655107][ T5888] oom_kill_process+0x295/0x350 [ 93.655131][ T5888] out_of_memory+0x97b/0xb80 [ 93.655154][ T5888] try_charge_memcg+0x610/0xa10 [ 93.655181][ T5888] charge_memcg+0x51/0xc0 [ 93.655260][ T5888] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 93.655296][ T5888] __read_swap_cache_async+0x17b/0x2d0 [ 93.655334][ T5888] swap_cluster_readahead+0x262/0x3c0 [ 93.655398][ T5888] swapin_readahead+0xde/0x820 [ 93.655434][ T5888] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 93.655463][ T5888] ? __rcu_read_unlock+0x34/0x70 [ 93.655486][ T5888] ? __rcu_read_unlock+0x4f/0x70 [ 93.655578][ T5888] ? swap_cache_get_folio+0x277/0x280 [ 93.655646][ T5888] do_swap_page+0x2b4/0x21e0 [ 93.655681][ T5888] ? __pfx_default_wake_function+0x10/0x10 [ 93.655782][ T5888] handle_mm_fault+0x9d8/0x2c60 [ 93.655986][ T5888] do_user_addr_fault+0x630/0x1080 [ 93.656020][ T5888] exc_page_fault+0x62/0xa0 [ 93.656052][ T5888] asm_exc_page_fault+0x26/0x30 [ 93.656153][ T5888] RIP: 0033:0x7fd9dcd15a1e [ 93.656169][ T5888] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 28 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 96 23 38 00 85 c0 0f 8e a3 fd ff ff bd 97 fe ff 49 39 c4 73 a0 48 8d 1d 71 05 38 00 83 3d 76 23 38 [ 93.656192][ T5888] RSP: 002b:00007ffea2d79460 EFLAGS: 00010202 [ 93.656211][ T5888] RAX: 0000000000000001 RBX: 00007fd9dd097da0 RCX: 0000000000000000 [ 93.656253][ T5888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555806f1808 [ 93.656267][ T5888] RBP: 00007fd9dd097da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 93.656336][ T5888] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000178fa [ 93.656351][ T5888] R13: 00007fd9dd096090 R14: ffffffffffffffff R15: 00007ffea2d79570 [ 93.656374][ T5888] [ 93.656382][ T5888] memory: usage 296800kB, limit 307200kB, failcnt 4311 [ 93.875115][ T5888] memory+swap: usage 4856kB, limit 9007199254740988kB, failcnt 0 [ 93.883272][ T5888] kmem: usage 1872kB, limit 9007199254740988kB, failcnt 0 [ 93.890363][ T5888] Memory cgroup stats for /syz0: [ 93.890726][ T5888] cache 524288 [ 93.899159][ T5888] rss 16384 [ 93.902308][ T5888] shmem 0 [ 93.905231][ T5888] mapped_file 65536 [ 93.909017][ T5888] dirty 0 [ 93.911965][ T5888] writeback 0 [ 93.915232][ T5888] workingset_refault_anon 457 [ 93.919906][ T5888] workingset_refault_file 2415 [ 93.924655][ T5888] swap 2441216 [ 93.928059][ T5888] swapcached 28672 [ 93.931804][ T5888] pgpgin 95339 [ 93.935149][ T5888] pgpgout 95202 [ 93.938776][ T5888] pgfault 71386 [ 93.942214][ T5888] pgmajfault 285 [ 93.945741][ T5888] inactive_anon 0 [ 93.949372][ T5888] active_anon 36864 [ 93.953199][ T5888] inactive_file 0 [ 93.956808][ T5888] active_file 507904 [ 93.960694][ T5888] unevictable 0 [ 93.964139][ T5888] hierarchical_memory_limit 314572800 [ 93.969534][ T5888] hierarchical_memsw_limit 9223372036854771712 [ 93.975667][ T5888] total_cache 524288 [ 93.979554][ T5888] total_rss 16384 [ 93.983165][ T5888] total_shmem 0 [ 93.986625][ T5888] total_mapped_file 65536 [ 93.990941][ T5888] total_dirty 0 [ 93.994467][ T5888] total_writeback 0 [ 93.998279][ T5888] total_workingset_refault_anon 457 [ 94.003505][ T5888] total_workingset_refault_file 2415 [ 94.008778][ T5888] total_swap 2441216 [ 94.012686][ T5888] total_swapcached 28672 [ 94.016926][ T5888] total_pgpgin 95339 [ 94.020853][ T5888] total_pgpgout 95202 [ 94.024826][ T5888] total_pgfault 71386 [ 94.028780][ T5888] total_pgmajfault 285 [ 94.032818][ T5888] total_inactive_anon 0 [ 94.036967][ T5888] total_active_anon 36864 [ 94.041281][ T5888] total_inactive_file 0 [ 94.045427][ T5888] total_active_file 507904 [ 94.049851][ T5888] total_unevictable 0 [ 94.053999][ T5888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.818,pid=5888,uid=0 [ 94.068734][ T5888] Memory cgroup out of memory: Killed process 5888 (syz.0.818) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 94.127250][ T5896] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 94.159337][ T5898] cgroup2: Unexpected value for 'memory_localevents' [ 94.170648][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 94.275109][ T5908] cgroup2: Unexpected value for 'memory_localevents' [ 94.623228][ T5914] tipc: Enabling of bearer rejected, already enabled [ 94.822929][ T5924] Falling back ldisc for ttyS3. [ 94.863887][ T5922] syz.2.830 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 94.874827][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.874904][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.874918][ T5922] Call Trace: [ 94.874927][ T5922] [ 94.874936][ T5922] __dump_stack+0x1d/0x30 [ 94.874965][ T5922] dump_stack_lvl+0xe8/0x140 [ 94.874989][ T5922] dump_stack+0x15/0x1b [ 94.875092][ T5922] dump_header+0x81/0x240 [ 94.875117][ T5922] oom_kill_process+0x295/0x350 [ 94.875140][ T5922] out_of_memory+0x97b/0xb80 [ 94.875212][ T5922] try_charge_memcg+0x610/0xa10 [ 94.875238][ T5922] charge_memcg+0x51/0xc0 [ 94.875273][ T5922] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 94.875316][ T5922] __read_swap_cache_async+0x17b/0x2d0 [ 94.875412][ T5922] swap_cluster_readahead+0x262/0x3c0 [ 94.875450][ T5922] swapin_readahead+0xde/0x820 [ 94.875483][ T5922] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 94.875582][ T5922] ? __rcu_read_unlock+0x34/0x70 [ 94.875606][ T5922] ? __rcu_read_unlock+0x4f/0x70 [ 94.875625][ T5922] ? swap_cache_get_folio+0x277/0x280 [ 94.875712][ T5922] do_swap_page+0x2b4/0x21e0 [ 94.875753][ T5922] ? __pfx_default_wake_function+0x10/0x10 [ 94.875849][ T5922] handle_mm_fault+0x9d8/0x2c60 [ 94.875946][ T5922] do_user_addr_fault+0x630/0x1080 [ 94.875983][ T5922] exc_page_fault+0x62/0xa0 [ 94.876017][ T5922] asm_exc_page_fault+0x26/0x30 [ 94.876070][ T5922] RIP: 0033:0x7f217b4859c8 [ 94.876100][ T5922] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 [ 94.876118][ T5922] RSP: 002b:00007ffcb64d0760 EFLAGS: 00010212 [ 94.876135][ T5922] RAX: 0000000000017b3f RBX: 00007f217b807da0 RCX: 0000000000017ae8 [ 94.876150][ T5922] RDX: 0000000000000057 RSI: 00007ffcb64d0740 RDI: 0000000000000001 [ 94.876164][ T5922] RBP: 00007f217b807da0 R08: 000000000535c478 R09: 7fffffffffffffff [ 94.876177][ T5922] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000017e28 [ 94.876190][ T5922] R13: 00007f217b806090 R14: ffffffffffffffff R15: 00007ffcb64d0870 [ 94.876220][ T5922] [ 94.876227][ T5922] memory: usage 304080kB, limit 307200kB, failcnt 13381 [ 95.090057][ T5922] memory+swap: usage 5136kB, limit 9007199254740988kB, failcnt 0 [ 95.097777][ T5922] kmem: usage 2076kB, limit 9007199254740988kB, failcnt 0 [ 95.104879][ T5922] Memory cgroup stats for /syz2: [ 95.105093][ T5922] cache 0 [ 95.113622][ T5922] rss 12288 [ 95.116712][ T5922] shmem 0 [ 95.119742][ T5922] mapped_file 0 [ 95.123253][ T5922] dirty 0 [ 95.126223][ T5922] writeback 0 [ 95.129521][ T5922] workingset_refault_anon 906 [ 95.134184][ T5922] workingset_refault_file 1309 [ 95.139408][ T5922] swap 2985984 [ 95.142759][ T5922] swapcached 16384 [ 95.146482][ T5922] pgpgin 82923 [ 95.149847][ T5922] pgpgout 82917 [ 95.153332][ T5922] pgfault 61652 [ 95.156781][ T5922] pgmajfault 273 [ 95.160348][ T5922] inactive_anon 8192 [ 95.164219][ T5922] active_anon 16384 [ 95.168461][ T5922] inactive_file 0 [ 95.172074][ T5922] active_file 0 [ 95.175508][ T5922] unevictable 0 [ 95.178958][ T5922] hierarchical_memory_limit 314572800 [ 95.184369][ T5922] hierarchical_memsw_limit 9223372036854771712 [ 95.190527][ T5922] total_cache 0 [ 95.194025][ T5922] total_rss 12288 [ 95.198111][ T5922] total_shmem 0 [ 95.201558][ T5922] total_mapped_file 0 [ 95.205603][ T5922] total_dirty 0 [ 95.209048][ T5922] total_writeback 0 [ 95.212867][ T5922] total_workingset_refault_anon 906 [ 95.218153][ T5922] total_workingset_refault_file 1309 [ 95.223408][ T5922] total_swap 2985984 [ 95.227656][ T5922] total_swapcached 16384 [ 95.231882][ T5922] total_pgpgin 82923 [ 95.235764][ T5922] total_pgpgout 82917 [ 95.239718][ T5922] total_pgfault 61652 [ 95.243705][ T5922] total_pgmajfault 273 [ 95.247746][ T5922] total_inactive_anon 8192 [ 95.252208][ T5922] total_active_anon 16384 [ 95.256941][ T5922] total_inactive_file 0 [ 95.261136][ T5922] total_active_file 0 [ 95.265113][ T5922] total_unevictable 0 [ 95.269067][ T5922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.830,pid=5922,uid=0 [ 95.284124][ T5922] Memory cgroup out of memory: Killed process 5922 (syz.2.830) total-vm:93968kB, anon-rss:1136kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 95.363444][ T5932] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 95.374361][ T5932] SELinux: failed to load policy [ 95.508806][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 95.694269][ T5942] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 95.868984][ T5944] cgroup2: Unexpected value for 'memory_localevents' [ 96.006744][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 96.006760][ T29] audit: type=1326 audit(1766115623.506:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 96.038975][ T29] audit: type=1326 audit(1766115623.527:11369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 96.062672][ T29] audit: type=1326 audit(1766115623.527:11370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 96.086060][ T29] audit: type=1326 audit(1766115623.527:11371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 96.109491][ T29] audit: type=1326 audit(1766115623.527:11372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9dce41667 code=0x7ffc0000 [ 96.132826][ T29] audit: type=1326 audit(1766115623.527:11373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd9dce415dc code=0x7ffc0000 [ 96.156220][ T29] audit: type=1326 audit(1766115623.527:11374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd9dce41514 code=0x7ffc0000 [ 96.179585][ T29] audit: type=1326 audit(1766115623.527:11375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd9dce41514 code=0x7ffc0000 [ 96.202960][ T29] audit: type=1326 audit(1766115623.527:11376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd9dce3e3aa code=0x7ffc0000 [ 96.226241][ T29] audit: type=1326 audit(1766115623.527:11377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 96.271104][ T5953] cgroup2: Unexpected value for 'memory_localevents' [ 96.424235][ T5963] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 97.176065][ T5967] syz.4.841 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 97.187104][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.4.841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.187135][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.187168][ T5967] Call Trace: [ 97.187175][ T5967] [ 97.187185][ T5967] __dump_stack+0x1d/0x30 [ 97.187214][ T5967] dump_stack_lvl+0xe8/0x140 [ 97.187241][ T5967] dump_stack+0x15/0x1b [ 97.187261][ T5967] dump_header+0x81/0x240 [ 97.187283][ T5967] oom_kill_process+0x295/0x350 [ 97.187381][ T5967] out_of_memory+0x97b/0xb80 [ 97.187415][ T5967] ? __cond_resched+0x4e/0x90 [ 97.187463][ T5967] try_charge_memcg+0x610/0xa10 [ 97.187490][ T5967] charge_memcg+0x51/0xc0 [ 97.187565][ T5967] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 97.187607][ T5967] __read_swap_cache_async+0x17b/0x2d0 [ 97.187644][ T5967] swap_cluster_readahead+0x362/0x3c0 [ 97.187703][ T5967] swapin_readahead+0xde/0x820 [ 97.187754][ T5967] ? __rcu_read_unlock+0x4f/0x70 [ 97.187774][ T5967] ? swap_cache_get_folio+0x277/0x280 [ 97.187807][ T5967] do_swap_page+0x2b4/0x21e0 [ 97.187845][ T5967] ? __pfx_default_wake_function+0x10/0x10 [ 97.187889][ T5967] handle_mm_fault+0x9d8/0x2c60 [ 97.187972][ T5967] do_user_addr_fault+0x630/0x1080 [ 97.188006][ T5967] exc_page_fault+0x62/0xa0 [ 97.188091][ T5967] asm_exc_page_fault+0x26/0x30 [ 97.188111][ T5967] RIP: 0033:0x7f5d78123e9a [ 97.188126][ T5967] Code: b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 48 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 d2 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 a8 ff ff ff f7 d8 64 [ 97.188144][ T5967] RSP: 002b:00007f5d76b361c0 EFLAGS: 00010206 [ 97.188162][ T5967] RAX: 0000000000000000 RBX: 00007f5d780a62a0 RCX: 00007f5d78123e89 [ 97.188197][ T5967] RDX: 00007f5d780a62a0 RSI: 0000000000000058 RDI: 00007f5d76b366c0 [ 97.188216][ T5967] RBP: 0000000000000000 R08: 00007f5d76b366c0 R09: 00007fffbecff087 [ 97.188229][ T5967] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 97.188244][ T5967] R13: 000000000000006e R14: 00007fffbecfefa0 R15: 00007fffbecff088 [ 97.188267][ T5967] [ 97.188284][ T5967] memory: usage 307200kB, limit 307200kB, failcnt 2288 [ 97.401638][ T5967] memory+swap: usage 77952kB, limit 9007199254740988kB, failcnt 0 [ 97.409534][ T5967] kmem: usage 59016kB, limit 9007199254740988kB, failcnt 0 [ 97.416772][ T5967] Memory cgroup stats for /syz4: [ 97.430923][ T5967] cache 0 [ 97.438861][ T5967] rss 90112 [ 97.442088][ T5967] shmem 0 [ 97.445052][ T5967] mapped_file 0 [ 97.448524][ T5967] dirty 0 [ 97.451591][ T5967] writeback 0 [ 97.455526][ T5967] workingset_refault_anon 361 [ 97.460242][ T5967] workingset_refault_file 420 [ 97.464959][ T5967] swap 1343488 [ 97.468311][ T5967] swapcached 65536 [ 97.472058][ T5967] pgpgin 72274 [ 97.475477][ T5967] pgpgout 72251 [ 97.478925][ T5967] pgfault 70118 [ 97.483076][ T5967] pgmajfault 204 [ 97.486626][ T5967] inactive_anon 0 [ 97.490299][ T5967] active_anon 86016 [ 97.494135][ T5967] inactive_file 0 [ 97.497795][ T5967] active_file 0 [ 97.501241][ T5967] unevictable 0 [ 97.504674][ T5967] hierarchical_memory_limit 314572800 [ 97.510059][ T5967] hierarchical_memsw_limit 9223372036854771712 [ 97.516946][ T5967] total_cache 0 [ 97.520594][ T5967] total_rss 90112 [ 97.524278][ T5967] total_shmem 0 [ 97.527779][ T5967] total_mapped_file 0 [ 97.531781][ T5967] total_dirty 0 [ 97.535236][ T5967] total_writeback 0 [ 97.539085][ T5967] total_workingset_refault_anon 361 [ 97.544882][ T5967] total_workingset_refault_file 420 [ 97.550128][ T5967] total_swap 1343488 [ 97.554004][ T5967] total_swapcached 65536 [ 97.558230][ T5967] total_pgpgin 72274 [ 97.562152][ T5967] total_pgpgout 72251 [ 97.566149][ T5967] total_pgfault 70118 [ 97.570759][ T5967] total_pgmajfault 204 [ 97.574816][ T5967] total_inactive_anon 0 [ 97.578989][ T5967] total_active_anon 86016 [ 97.583328][ T5967] total_inactive_file 0 [ 97.587600][ T5967] total_active_file 0 [ 97.587804][ T5977] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 97.591746][ T5967] total_unevictable 0 [ 97.604524][ T5967] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.841,pid=5951,uid=0 [ 97.619102][ T5967] Memory cgroup out of memory: Killed process 5951 (syz.4.841) total-vm:93968kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 97.639622][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 97.738511][ T5990] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 97.777632][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.778293][ T5990] SELinux: failed to load policy [ 97.786120][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.897263][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 97.984531][ T5980] tipc: Enabling of bearer rejected, already enabled [ 98.409000][ T6011] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 98.418879][ T6011] SELinux: failed to load policy [ 98.772041][ T6021] Falling back ldisc for ttyS3. [ 98.937924][ T6024] syz.2.860 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 98.948895][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.2.860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.948925][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.948946][ T6024] Call Trace: [ 98.948954][ T6024] [ 98.948963][ T6024] __dump_stack+0x1d/0x30 [ 98.948988][ T6024] dump_stack_lvl+0xe8/0x140 [ 98.949011][ T6024] dump_stack+0x15/0x1b [ 98.949044][ T6024] dump_header+0x81/0x240 [ 98.949067][ T6024] oom_kill_process+0x295/0x350 [ 98.949120][ T6024] out_of_memory+0x97b/0xb80 [ 98.949147][ T6024] try_charge_memcg+0x610/0xa10 [ 98.949176][ T6024] charge_memcg+0x51/0xc0 [ 98.949212][ T6024] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 98.949328][ T6024] __read_swap_cache_async+0x17b/0x2d0 [ 98.949365][ T6024] swap_cluster_readahead+0x362/0x3c0 [ 98.949475][ T6024] swapin_readahead+0xde/0x820 [ 98.949515][ T6024] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 98.949559][ T6024] ? __rcu_read_unlock+0x34/0x70 [ 98.949584][ T6024] ? __rcu_read_unlock+0x4f/0x70 [ 98.949605][ T6024] ? swap_cache_get_folio+0x277/0x280 [ 98.949690][ T6024] do_swap_page+0x2b4/0x21e0 [ 98.949793][ T6024] ? __pfx_default_wake_function+0x10/0x10 [ 98.949830][ T6024] handle_mm_fault+0x9d8/0x2c60 [ 98.949874][ T6024] do_user_addr_fault+0x630/0x1080 [ 98.949986][ T6024] exc_page_fault+0x62/0xa0 [ 98.950018][ T6024] asm_exc_page_fault+0x26/0x30 [ 98.950041][ T6024] RIP: 0033:0x7f217b485460 [ 98.950058][ T6024] Code: ff ff 4c 8b 84 24 a0 00 00 00 48 8d 1d 59 29 38 00 4c 89 c5 eb 14 0f 1f 40 00 48 81 c5 f0 00 00 00 48 39 dd 0f 84 ab fb ff ff <80> 7d 20 00 74 ea 8b 45 0c 85 c0 74 e3 48 89 ef e8 bb c9 ff ff eb [ 98.950078][ T6024] RSP: 002b:00007ffcb64d0760 EFLAGS: 00010297 [ 98.950106][ T6024] RAX: 0000000000018bf1 RBX: 00007f217b807da0 RCX: 0000000000018a88 [ 98.950119][ T6024] RDX: 000000000000003d RSI: 00007ffcb64d0870 RDI: 0000000000000001 [ 98.950133][ T6024] RBP: 00007f217b805fa0 R08: 00007f217b805fa0 R09: 7fffffffffffffff [ 98.950219][ T6024] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00007f217b805fac [ 98.950234][ T6024] R13: 00007ffcb64d0850 R14: 0000000000018be6 R15: 00007ffcb64d0870 [ 98.950309][ T6024] [ 98.950316][ T6024] memory: usage 307180kB, limit 307200kB, failcnt 13685 [ 99.164573][ T6024] memory+swap: usage 92272kB, limit 9007199254740988kB, failcnt 0 [ 99.172389][ T6024] kmem: usage 88968kB, limit 9007199254740988kB, failcnt 0 [ 99.179602][ T6024] Memory cgroup stats for /syz2: [ 99.181339][ T6024] cache 0 [ 99.189209][ T6024] rss 20480 [ 99.192304][ T6024] shmem 0 [ 99.195248][ T6024] mapped_file 0 [ 99.198741][ T6024] dirty 0 [ 99.201725][ T6024] writeback 0 [ 99.205001][ T6024] workingset_refault_anon 980 [ 99.209726][ T6024] workingset_refault_file 1309 [ 99.214474][ T6024] swap 3289088 [ 99.217949][ T6024] swapcached 12288 [ 99.221663][ T6024] pgpgin 99274 [ 99.225029][ T6024] pgpgout 99269 [ 99.228524][ T6024] pgfault 66755 [ 99.231978][ T6024] pgmajfault 340 [ 99.235632][ T6024] inactive_anon 0 [ 99.239301][ T6024] active_anon 20480 [ 99.243095][ T6024] inactive_file 0 [ 99.246726][ T6024] active_file 0 [ 99.250173][ T6024] unevictable 0 [ 99.253632][ T6024] hierarchical_memory_limit 314572800 [ 99.259012][ T6024] hierarchical_memsw_limit 9223372036854771712 [ 99.265192][ T6024] total_cache 0 [ 99.268637][ T6024] total_rss 20480 [ 99.272253][ T6024] total_shmem 0 [ 99.275733][ T6024] total_mapped_file 0 [ 99.279703][ T6024] total_dirty 0 [ 99.283167][ T6024] total_writeback 0 [ 99.286962][ T6024] total_workingset_refault_anon 980 [ 99.292164][ T6024] total_workingset_refault_file 1309 [ 99.297443][ T6024] total_swap 3289088 [ 99.301328][ T6024] total_swapcached 12288 [ 99.305572][ T6024] total_pgpgin 99274 [ 99.309455][ T6024] total_pgpgout 99269 [ 99.313526][ T6024] total_pgfault 66755 [ 99.317579][ T6024] total_pgmajfault 340 [ 99.321658][ T6024] total_inactive_anon 0 [ 99.325833][ T6024] total_active_anon 20480 [ 99.330175][ T6024] total_inactive_file 0 [ 99.334360][ T6024] total_active_file 0 [ 99.338409][ T6024] total_unevictable 0 [ 99.342512][ T6024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.860,pid=6024,uid=0 [ 99.357087][ T6024] Memory cgroup out of memory: Killed process 6024 (syz.2.860) total-vm:93836kB, anon-rss:1136kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 99.668269][ T6052] Falling back ldisc for ttyS3. [ 99.866908][ T6056] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 99.963982][ T6038] tipc: Enabling of bearer rejected, already enabled [ 100.007576][ T6058] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 100.067623][ T6058] SELinux: failed to load policy [ 100.309485][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 100.442913][ T6074] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 100.462221][ T6078] Falling back ldisc for ttyS3. [ 100.855428][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 100.855444][ T29] audit: type=1326 audit(1766115628.587:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 100.918391][ T29] audit: type=1326 audit(1766115628.629:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 100.942504][ T29] audit: type=1326 audit(1766115628.629:11496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 100.965893][ T29] audit: type=1326 audit(1766115628.629:11497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 100.990003][ T29] audit: type=1326 audit(1766115628.629:11498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 101.013406][ T29] audit: type=1326 audit(1766115628.629:11499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 101.037434][ T29] audit: type=1326 audit(1766115628.629:11500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 101.060888][ T29] audit: type=1326 audit(1766115628.629:11501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 101.084965][ T29] audit: type=1326 audit(1766115628.629:11502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 101.108425][ T29] audit: type=1326 audit(1766115628.629:11503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 101.320440][ T6098] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.362352][ T6098] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.410070][ T6117] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 101.411957][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.436156][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.450329][ T6098] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.451070][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 101.503852][ T6098] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.566831][ T3801] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.578339][ T3801] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.593904][ T3801] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.605464][ T3801] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.687599][ T6126] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 101.697512][ T6126] SELinux: failed to load policy [ 102.550719][ T6150] cgroup2: Unexpected value for 'memory_localevents' [ 102.759246][ T6155] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 103.067010][ T6158] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.173120][ T6158] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.256682][ T6158] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.297735][ T6170] macsec1: entered promiscuous mode [ 103.303491][ T6170] bridge0: entered promiscuous mode [ 103.313603][ T6158] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.366481][ T3778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.377497][ T3778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.390647][ T3778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.401661][ T3778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.413824][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.422448][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.469849][ T6177] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 103.480294][ T6177] SELinux: failed to load policy [ 103.720114][ T6189] cgroup2: Unexpected value for 'memory_localevents' [ 103.887675][ T6193] Falling back ldisc for ttyS3. [ 104.312611][ T6196] tipc: Enabling of bearer rejected, already enabled [ 104.320483][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 104.330142][ T6196] tipc: Disabling bearer [ 104.346006][ T6206] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.399484][ T6206] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.461435][ T6206] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.583764][ T6215] Falling back ldisc for ttyS3. [ 104.595756][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 104.609272][ T6206] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.802320][ T3329] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 104.813261][ T3329] CPU: 0 UID: 0 PID: 3329 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.813317][ T3329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.813331][ T3329] Call Trace: [ 104.813337][ T3329] [ 104.813344][ T3329] __dump_stack+0x1d/0x30 [ 104.813377][ T3329] dump_stack_lvl+0xe8/0x140 [ 104.813445][ T3329] dump_stack+0x15/0x1b [ 104.813465][ T3329] dump_header+0x81/0x240 [ 104.813485][ T3329] oom_kill_process+0x295/0x350 [ 104.813509][ T3329] out_of_memory+0x97b/0xb80 [ 104.813533][ T3329] try_charge_memcg+0x610/0xa10 [ 104.813565][ T3329] charge_memcg+0x51/0xc0 [ 104.813657][ T3329] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 104.813692][ T3329] __read_swap_cache_async+0x17b/0x2d0 [ 104.813748][ T3329] swap_cluster_readahead+0x262/0x3c0 [ 104.813787][ T3329] swapin_readahead+0xde/0x820 [ 104.813837][ T3329] ? bpf_prog_fc66e75852681dfe+0x2f/0x37 [ 104.813857][ T3329] ? __rcu_read_unlock+0x4f/0x70 [ 104.813929][ T3329] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 104.813957][ T3329] ? __rcu_read_unlock+0x4f/0x70 [ 104.813979][ T3329] ? __rcu_read_unlock+0x4f/0x70 [ 104.813998][ T3329] ? swap_cache_get_folio+0x277/0x280 [ 104.814058][ T3329] do_swap_page+0x2b4/0x21e0 [ 104.814105][ T3329] ? _raw_spin_unlock+0x26/0x50 [ 104.814130][ T3329] ? __schedule+0x85f/0xcd0 [ 104.814154][ T3329] ? __pfx_default_wake_function+0x10/0x10 [ 104.814252][ T3329] handle_mm_fault+0x9d8/0x2c60 [ 104.814292][ T3329] do_user_addr_fault+0x630/0x1080 [ 104.814356][ T3329] exc_page_fault+0x62/0xa0 [ 104.814424][ T3329] asm_exc_page_fault+0x26/0x30 [ 104.814465][ T3329] RIP: 0033:0x7f217b5e1fc5 [ 104.814501][ T3329] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 104.814601][ T3329] RSP: 002b:00007ffcb64d0938 EFLAGS: 00010246 [ 104.814632][ T3329] RAX: 0000000000000000 RBX: 00000000000001f8 RCX: 00007f217b5e1fc3 [ 104.814674][ T3329] RDX: 00007ffcb64d0950 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.814689][ T3329] RBP: 00007ffcb64d09bc R08: 000000001e58a097 R09: 0000000000000000 [ 104.814744][ T3329] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 104.814797][ T3329] R13: 00000000000927c0 R14: 000000000001a333 R15: 00007ffcb64d0a10 [ 104.814815][ T3329] [ 104.814877][ T3329] memory: usage 307200kB, limit 307200kB, failcnt 13915 [ 105.049645][ T3329] memory+swap: usage 241760kB, limit 9007199254740988kB, failcnt 0 [ 105.057604][ T3329] kmem: usage 238356kB, limit 9007199254740988kB, failcnt 0 [ 105.064953][ T3329] Memory cgroup stats for /syz2: [ 105.065558][ T3329] cache 0 [ 105.073397][ T3329] rss 24576 [ 105.076562][ T3329] shmem 0 [ 105.079492][ T3329] mapped_file 0 [ 105.082932][ T3329] dirty 0 [ 105.085956][ T3329] writeback 0 [ 105.089236][ T3329] workingset_refault_anon 1042 [ 105.094002][ T3329] workingset_refault_file 1309 [ 105.098749][ T3329] swap 3276800 [ 105.102105][ T3329] swapcached 36864 [ 105.105832][ T3329] pgpgin 102651 [ 105.109278][ T3329] pgpgout 102639 [ 105.112855][ T3329] pgfault 70859 [ 105.116293][ T3329] pgmajfault 368 [ 105.119824][ T3329] inactive_anon 0 [ 105.123473][ T3329] active_anon 49152 [ 105.127265][ T3329] inactive_file 0 [ 105.130876][ T3329] active_file 0 [ 105.134347][ T3329] unevictable 0 [ 105.137799][ T3329] hierarchical_memory_limit 314572800 [ 105.143247][ T3329] hierarchical_memsw_limit 9223372036854771712 [ 105.149386][ T3329] total_cache 0 [ 105.152864][ T3329] total_rss 24576 [ 105.156476][ T3329] total_shmem 0 [ 105.159944][ T3329] total_mapped_file 0 [ 105.163912][ T3329] total_dirty 0 [ 105.167433][ T3329] total_writeback 0 [ 105.171268][ T3329] total_workingset_refault_anon 1042 [ 105.176590][ T3329] total_workingset_refault_file 1309 [ 105.182096][ T3329] total_swap 3276800 [ 105.185984][ T3329] total_swapcached 36864 [ 105.190291][ T3329] total_pgpgin 102651 [ 105.194262][ T3329] total_pgpgout 102639 [ 105.198401][ T3329] total_pgfault 70859 [ 105.202369][ T3329] total_pgmajfault 368 [ 105.206574][ T3329] total_inactive_anon 0 [ 105.210751][ T3329] total_active_anon 49152 [ 105.215069][ T3329] total_inactive_file 0 [ 105.219261][ T3329] total_active_file 0 [ 105.223225][ T3329] total_unevictable 0 [ 105.227227][ T3329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.928,pid=6212,uid=0 [ 105.241783][ T3329] Memory cgroup out of memory: Killed process 6212 (syz.2.928) total-vm:96016kB, anon-rss:1264kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 105.242597][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.290654][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.336346][ T6221] syz.3.931 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 105.347269][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.347296][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.347310][ T6221] Call Trace: [ 105.347368][ T6221] [ 105.347377][ T6221] __dump_stack+0x1d/0x30 [ 105.347478][ T6221] dump_stack_lvl+0xe8/0x140 [ 105.347532][ T6221] dump_stack+0x15/0x1b [ 105.347557][ T6221] dump_header+0x81/0x240 [ 105.347583][ T6221] oom_kill_process+0x295/0x350 [ 105.347616][ T6221] out_of_memory+0x97b/0xb80 [ 105.347640][ T6221] try_charge_memcg+0x610/0xa10 [ 105.347739][ T6221] charge_memcg+0x51/0xc0 [ 105.347778][ T6221] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 105.347858][ T6221] __read_swap_cache_async+0x17b/0x2d0 [ 105.347943][ T6221] swap_cluster_readahead+0x262/0x3c0 [ 105.348056][ T6221] swapin_readahead+0xde/0x820 [ 105.348089][ T6221] ? __rcu_read_unlock+0x4f/0x70 [ 105.348124][ T6221] ? swap_cache_get_folio+0x277/0x280 [ 105.348198][ T6221] do_swap_page+0x2b4/0x21e0 [ 105.348239][ T6221] ? __pfx_default_wake_function+0x10/0x10 [ 105.348283][ T6221] handle_mm_fault+0x9d8/0x2c60 [ 105.348377][ T6221] do_user_addr_fault+0x630/0x1080 [ 105.348416][ T6221] exc_page_fault+0x62/0xa0 [ 105.348450][ T6221] asm_exc_page_fault+0x26/0x30 [ 105.348471][ T6221] RIP: 0033:0x7fa5cf98f75b [ 105.348576][ T6221] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 105.348597][ T6221] RSP: 002b:00007fa5ce3ef038 EFLAGS: 00010217 [ 105.348620][ T6221] RAX: 000000000000000c RBX: 00007fa5cfbe5fa0 RCX: ffffffffffffffa8 [ 105.348633][ T6221] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 105.348646][ T6221] RBP: 00007fa5cfa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.348661][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.348674][ T6221] R13: 00007fa5cfbe6038 R14: 00007fa5cfbe5fa0 R15: 00007ffc131b8f78 [ 105.348697][ T6221] [ 105.348710][ T6221] memory: usage 307200kB, limit 307200kB, failcnt 5688 [ 105.409474][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 105.410866][ T6221] memory+swap: usage 309368kB, limit 9007199254740988kB, failcnt 0 [ 105.562386][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 105.568897][ T6221] kmem: usage 231180kB, limit 9007199254740988kB, failcnt 0 [ 105.568915][ T6221] Memory cgroup stats for /syz3: [ 105.605076][ T6221] cache 0 [ 105.612976][ T6221] rss 0 [ 105.615730][ T6221] shmem 0 [ 105.618716][ T6221] mapped_file 0 [ 105.622168][ T6221] dirty 0 [ 105.625090][ T6221] writeback 0 [ 105.628431][ T6221] workingset_refault_anon 547 [ 105.633096][ T6221] workingset_refault_file 2215 [ 105.637952][ T6221] swap 2211840 [ 105.641309][ T6221] swapcached 8192 [ 105.644923][ T6221] pgpgin 81034 [ 105.648340][ T6221] pgpgout 81032 [ 105.651788][ T6221] pgfault 83967 [ 105.655261][ T6221] pgmajfault 314 [ 105.658793][ T6221] inactive_anon 0 [ 105.662446][ T6221] active_anon 8192 [ 105.666189][ T6221] inactive_file 0 [ 105.669881][ T6221] active_file 0 [ 105.673341][ T6221] unevictable 0 [ 105.676814][ T6221] hierarchical_memory_limit 314572800 [ 105.682213][ T6221] hierarchical_memsw_limit 9223372036854771712 [ 105.688465][ T6221] total_cache 0 [ 105.691908][ T6221] total_rss 0 [ 105.695221][ T6221] total_shmem 0 [ 105.698666][ T6221] total_mapped_file 0 [ 105.702630][ T6221] total_dirty 0 [ 105.706096][ T6221] total_writeback 0 [ 105.709893][ T6221] total_workingset_refault_anon 547 [ 105.715110][ T6221] total_workingset_refault_file 2215 [ 105.720383][ T6221] total_swap 2211840 [ 105.724304][ T6221] total_swapcached 8192 [ 105.728456][ T6221] total_pgpgin 81034 [ 105.732364][ T6221] total_pgpgout 81032 [ 105.736428][ T6221] total_pgfault 83967 [ 105.740403][ T6221] total_pgmajfault 314 [ 105.744480][ T6221] total_inactive_anon 0 [ 105.748626][ T6221] total_active_anon 8192 [ 105.752863][ T6221] total_inactive_file 0 [ 105.757009][ T6221] total_active_file 0 [ 105.760996][ T6221] total_unevictable 0 [ 105.764985][ T6221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.931,pid=6220,uid=0 [ 105.779525][ T6221] Memory cgroup out of memory: Killed process 6220 (syz.3.931) total-vm:93968kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 105.842134][ T6236] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 105.855414][ T6236] SELinux: failed to load policy [ 105.868366][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 105.868456][ T29] audit: type=1326 audit(1766115633.846:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 105.905811][ T29] audit: type=1326 audit(1766115633.846:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 105.929310][ T29] audit: type=1326 audit(1766115633.846:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 105.952757][ T29] audit: type=1326 audit(1766115633.846:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 105.976160][ T29] audit: type=1326 audit(1766115633.846:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 105.999587][ T29] audit: type=1326 audit(1766115633.846:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 106.017683][ T6222] Falling back ldisc for ttyS3. [ 106.023164][ T29] audit: type=1326 audit(1766115633.846:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 106.051249][ T29] audit: type=1326 audit(1766115633.846:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf98f749 code=0x7ffc0000 [ 106.281992][ T6246] tipc: Enabling of bearer rejected, already enabled [ 106.290161][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.938'. [ 106.299044][ T6246] tipc: Disabling bearer [ 106.418434][ T6256] cgroup2: Unexpected value for 'memory_localevents' [ 106.557279][ T6262] netlink: 14 bytes leftover after parsing attributes in process `syz.3.944'. [ 106.579567][ T6262] hsr_slave_0: left promiscuous mode [ 106.802195][ T6266] Falling back ldisc for ttyS3. [ 106.957915][ T6277] cgroup2: Unexpected value for 'memory_localevents' [ 107.119012][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 107.129031][ T29] audit: type=1326 audit(1766115635.158:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6282 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 107.152488][ T29] audit: type=1326 audit(1766115635.158:11627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6282 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 107.177627][ T6279] tipc: New replicast peer: 255.255.255.255 [ 107.184500][ T6279] tipc: Enabled bearer , priority 10 [ 107.193528][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 107.202430][ T6279] tipc: Disabling bearer [ 107.247209][ T6289] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 107.257107][ T6289] SELinux: failed to load policy [ 107.358519][ T3776] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.376298][ T3776] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.398918][ T3776] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.419218][ T3776] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.429624][ T6303] FAULT_INJECTION: forcing a failure. [ 107.429624][ T6303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.442843][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.4.959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.442951][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.442967][ T6303] Call Trace: [ 107.442974][ T6303] [ 107.442983][ T6303] __dump_stack+0x1d/0x30 [ 107.443011][ T6303] dump_stack_lvl+0xe8/0x140 [ 107.443033][ T6303] dump_stack+0x15/0x1b [ 107.443052][ T6303] should_fail_ex+0x265/0x280 [ 107.443085][ T6303] should_fail+0xb/0x20 [ 107.443116][ T6303] should_fail_usercopy+0x1a/0x20 [ 107.443147][ T6303] _copy_from_user+0x1c/0xb0 [ 107.443182][ T6303] __sys_sendto+0x19e/0x330 [ 107.443222][ T6303] __x64_sys_sendto+0x76/0x90 [ 107.443299][ T6303] x64_sys_call+0x29a7/0x3000 [ 107.443328][ T6303] do_syscall_64+0xd8/0x2c0 [ 107.443371][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.443397][ T6303] RIP: 0033:0x7f5d780ef749 [ 107.443415][ T6303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.443467][ T6303] RSP: 002b:00007f5d76b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.443487][ T6303] RAX: ffffffffffffffda RBX: 00007f5d78345fa0 RCX: 00007f5d780ef749 [ 107.443502][ T6303] RDX: 0000000000000900 RSI: 0000000000000000 RDI: 0000000000000003 [ 107.443565][ T6303] RBP: 00007f5d76b57090 R08: 0000200000b63fe4 R09: 000000000000001c [ 107.443581][ T6303] R10: 0000000020004002 R11: 0000000000000246 R12: 0000000000000001 [ 107.443596][ T6303] R13: 00007f5d78346038 R14: 00007f5d78345fa0 R15: 00007fffbecff088 [ 107.443616][ T6303] [ 107.701286][ T6313] Falling back ldisc for ttyS3. [ 108.067997][ T6317] cgroup2: Unexpected value for 'memory_localevents' [ 108.136518][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 109.159025][ T6332] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 109.223253][ T6340] cgroup2: Unexpected value for 'memory_localevents' [ 109.263452][ T6343] Falling back ldisc for ttyS3. [ 109.291341][ T6345] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 109.317225][ T6345] SELinux: failed to load policy [ 109.426687][ T6351] macvtap0: entered promiscuous mode [ 109.432020][ T6351] macvtap0: entered allmulticast mode [ 109.605185][ T6360] netlink: 'syz.0.977': attribute type 4 has an invalid length. [ 109.613310][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'. [ 110.392307][ T6389] cgroup2: Unexpected value for 'memory_localevents' [ 110.894628][ T6399] tipc: New replicast peer: 255.255.255.255 [ 110.900701][ T6399] tipc: Enabled bearer , priority 10 [ 110.907405][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 110.916355][ T6399] tipc: Disabling bearer [ 110.921947][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 110.921961][ T29] audit: type=1326 audit(1766115639.137:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 110.951565][ T29] audit: type=1326 audit(1766115639.137:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 110.974988][ T29] audit: type=1326 audit(1766115639.148:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 110.998426][ T29] audit: type=1326 audit(1766115639.148:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 111.021881][ T29] audit: type=1326 audit(1766115639.148:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 111.045251][ T29] audit: type=1326 audit(1766115639.148:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 111.068617][ T29] audit: type=1326 audit(1766115639.148:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6405 comm="syz.2.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b5af749 code=0x7ffc0000 [ 111.142482][ T29] audit: type=1400 audit(1766115639.232:11818): avc: denied { execute } for pid=6411 comm="syz.2.997" path="/205/file0" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.173192][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 111.284106][ T29] audit: type=1400 audit(1766115639.526:11819): avc: denied { cpu } for pid=6411 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.242718][ T6427] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 112.269372][ T29] audit: type=1326 audit(1766115640.575:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 112.283634][ T6416] Falling back ldisc for ttyS3. [ 112.559669][ T6453] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 112.576035][ T6453] SELinux: failed to load policy [ 112.910594][ T6451] tipc: Enabling of bearer rejected, already enabled [ 112.919502][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 112.929164][ T6451] tipc: Disabling bearer [ 113.135785][ T6468] cgroup2: Unexpected value for 'memory_localevents' [ 113.145820][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.154673][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.188095][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 113.401615][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.419472][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.456444][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 113.461553][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 113.593999][ T6511] cgroup2: Unexpected value for 'memory_localevents' [ 115.465340][ T6546] tipc: Enabling of bearer rejected, already enabled [ 115.474350][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 115.483349][ T6546] tipc: Disabling bearer [ 115.547814][ T6544] Falling back ldisc for ttyS3. [ 115.609224][ T6558] cgroup2: Unexpected value for 'memory_localevents' [ 116.093536][ T6576] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 116.112654][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.134477][ T6576] bond1: (slave geneve2): making interface the new active one [ 116.145096][ T6576] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 116.164752][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 116.164768][ T29] audit: type=1326 audit(1766115644.659:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.401272][ T29] audit: type=1326 audit(1766115644.691:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.424861][ T29] audit: type=1326 audit(1766115644.691:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.448528][ T29] audit: type=1326 audit(1766115644.691:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.472620][ T29] audit: type=1326 audit(1766115644.701:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.496714][ T29] audit: type=1326 audit(1766115644.701:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.520287][ T29] audit: type=1326 audit(1766115644.701:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.544719][ T29] audit: type=1326 audit(1766115644.701:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.568424][ T29] audit: type=1326 audit(1766115644.701:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.592592][ T29] audit: type=1326 audit(1766115644.701:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dce3f749 code=0x7ffc0000 [ 116.761353][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.775472][ T6591] tipc: New replicast peer: 255.255.255.255 [ 116.775739][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.781590][ T6591] tipc: Enabled bearer , priority 10 [ 116.797855][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 116.807537][ T6591] tipc: Disabling bearer [ 116.835300][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 116.901421][ T6604] tipc: New replicast peer: 255.255.255.255 [ 116.907458][ T6604] tipc: Enabled bearer , priority 10 [ 116.914088][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 116.923098][ T6604] tipc: Disabling bearer [ 117.060308][ T6616] Falling back ldisc for ttyS3. [ 117.178409][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 117.560755][ T6642] cgroup2: Unexpected value for 'memory_localevents' [ 117.952709][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1078'. [ 118.115145][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 118.405664][ T6663] Falling back ldisc for ttyS3. [ 118.511401][ T6667] netlink: 'syz.1.1083': attribute type 3 has an invalid length. [ 118.519266][ T6667] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 118.526996][ T6667] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1083'. [ 118.587472][ T6666] ================================================================== [ 118.595573][ T6666] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 118.602876][ T6666] [ 118.605190][ T6666] write to 0xffff8881051dd400 of 8 bytes by task 6668 on cpu 0: [ 118.612804][ T6666] mas_wmb_replace+0x208/0xfa0 [ 118.617548][ T6666] mas_wr_store_entry+0x13e3/0x2750 [ 118.622734][ T6666] mas_store_prealloc+0x760/0xa90 [ 118.627780][ T6666] vma_iter_store_new+0x1c5/0x200 [ 118.632807][ T6666] mmap_region+0x1193/0x1410 [ 118.637394][ T6666] do_mmap+0x9b3/0xbe0 [ 118.641470][ T6666] vm_mmap_pgoff+0x17a/0x2e0 [ 118.646061][ T6666] ksys_mmap_pgoff+0x268/0x310 [ 118.650832][ T6666] x64_sys_call+0x16bb/0x3000 [ 118.655515][ T6666] do_syscall_64+0xd8/0x2c0 [ 118.660035][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.665922][ T6666] [ 118.668242][ T6666] read to 0xffff8881051dd400 of 8 bytes by task 6666 on cpu 1: [ 118.675775][ T6666] mas_state_walk+0x119/0x650 [ 118.680459][ T6666] mas_walk+0x60/0x150 [ 118.684534][ T6666] lock_vma_under_rcu+0x95/0x1b0 [ 118.689465][ T6666] do_user_addr_fault+0x233/0x1080 [ 118.694584][ T6666] exc_page_fault+0x62/0xa0 [ 118.699088][ T6666] asm_exc_page_fault+0x26/0x30 [ 118.703934][ T6666] [ 118.706249][ T6666] value changed: 0xffff888147aa43c1 -> 0xffff8881051dd400 [ 118.713348][ T6666] [ 118.715660][ T6666] Reported by Kernel Concurrency Sanitizer on: [ 118.721797][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.3.1082 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.731503][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.741546][ T6666] ==================================================================