last executing test programs: 5m12.715256405s ago: executing program 32 (id=878): recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1f0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1b4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x19c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x10c, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xc8, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b3697264083e1"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x5c, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}]}, {0x11, 0x6, "df76640d30b6ba21699aad3d08"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x1f0}}, 0x20004880) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m9.144030746s ago: executing program 33 (id=545): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = open(&(0x7f0000000240)='./file0\x00', 0x149102, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 4m34.955436709s ago: executing program 34 (id=1910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m29.600929484s ago: executing program 35 (id=2013): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r1, 0x540a, 0x2) 4m15.859667874s ago: executing program 36 (id=2292): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4m11.871806418s ago: executing program 8 (id=2369): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 4m11.771757024s ago: executing program 8 (id=2371): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mlockall(0x7) timer_gettime(r0, &(0x7f00000000c0)) 4m11.302940142s ago: executing program 8 (id=2377): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") readlink(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) 4m10.723986996s ago: executing program 8 (id=2398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000022000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 4m10.676067978s ago: executing program 8 (id=2401): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 4m10.6465743s ago: executing program 8 (id=2402): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4m6.24661819s ago: executing program 37 (id=2489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3m55.54017557s ago: executing program 38 (id=2402): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3m33.396787194s ago: executing program 7 (id=3134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="fd4a2d3a14d0d3f86bf90c7910158aab8fa9f24e6cfac28e569e11abd55b3041f40851dc3042a9068c1cf8a157a441b96cb47bd3ba0cc10581ab225eedb748455d01c2d44cd7e2963d9ecda6838d5447c6c25bf13dd0ee80ce4b0e7a86b1b95b7d3be146b6db799f8e87e742a451afae27f025e46e53b9a6b97f46217d0d346f1a86234b206a9c341ff3f28565502734ab55f22051152a9851572bfad430eec05218b6e43948f51807ae93a784b6f30064d9dfba88d690fb560ba795df3139f6fbbb6cc16b76b8546d3e41cbc28296e4959ab14692af7c71aa25c7e6d74481a730a35bbd56929ab88c710442862249cceeabdb2c84eb58597c20ba1e069b1c7096222fea418763c65b10e4f88921a7bab3a8bfb1d91464c26fadfdb49893222a64ac3b80f188e592c20b71c13ae05e5821b25acbd2a0c24803ab1163988992690e6d567a36ef8cbb8d61da5621e325ce6e52c46b2bac662bacfa6726e58f97407583bc57751b3902862da76b8d0b60e258f1fa38134dc3b3c7d53cc5548feb30958e66af18d328b7bf7643eeaf7f3154599768859a5037c24b4cf249f7669aaa847d6df19be4948849221a4cd86aa9ee4625f1392d6a3eed1671717f2eb5fc5806245b84d97fe9687563f979e2393442255a19a78067b93eb184aa25b5373e99da81cdc313096f4426450f33024dd6f833dda3b1df49939a5b258c2860c1fb7f4fe3a27f94e705e6c04445a9815b6fcbeb79056a97e31148bbb4425323b94296a5e7786e1f3b600b6dba1da25c96efe4df04624994af99cf20dc5f5ddb0ddc11c1ea40b6f4a63995db98da47dd3048ca824de950e04a9cc556f47de97b511022189b8cd83bfea4d225b974773c6f3b27ea67d2285138a990a197d87dc7be4d54eba9cd2b7bbd544fd0c0779469964957e5116221bbdad9a962e2d431a5f7c58e551b6cb55d7ce6756118f276d64bae606cdf6faac18a6462d4589ca1fe92c5272a276ca815a609cc74feb416d1dd6323492c09c9d89225a2e7bb85768617a94ec848a63a121d9bd832a4090f75dc6be9efcca11ed93ea1c09c5140e364f00e2911eac1dcf9d4619b48efcd10de53c15f582f9d2b5624e238f167d925dabb516b86573b70e14f377f87fd8005d5ba9ed830562e0a1d9bac0b3134a0f5e7dd3d20883bc1b9dc2e672640241ee67f25d9cfbd9c17c4a14d00b5b595b6e1e3f9a0dfecb2382ad74411f7d53aed060a220bc3cbd84d65eda0c1147f226d0c0b5e9aa0d426e8c3b036ca6c9c1358135e26176e074674a0cb3e0557fbe2240f1efcff57c4", 0x3a1}], 0x1}}], 0x1, 0xbd35121506a5efa) close_range(r0, 0xffffffffffffffff, 0x0) 3m32.495698947s ago: executing program 7 (id=3149): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3m32.295890379s ago: executing program 7 (id=3151): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m32.203040794s ago: executing program 7 (id=3153): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 3m32.032106215s ago: executing program 7 (id=3156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 3m31.26406618s ago: executing program 7 (id=3175): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x15, r3, 0x1, 0x5, 0x6, @random}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[], 0x0) 3m31.26377623s ago: executing program 39 (id=3175): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000500)={0x11, 0x15, r3, 0x1, 0x5, 0x6, @random}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[], 0x0) 3m13.024189034s ago: executing program 6 (id=3599): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffc) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 3m12.904012151s ago: executing program 6 (id=3600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x2, 0x80, 0x7, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x81}], 0x1, 0x40002001, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 3m12.599140699s ago: executing program 6 (id=3604): unshare(0x64000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) 3m12.284164107s ago: executing program 6 (id=3610): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x48000, 0x0) 3m12.249073379s ago: executing program 6 (id=3613): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.987397934s ago: executing program 6 (id=3621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 3m11.946421007s ago: executing program 40 (id=3621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2m27.036254792s ago: executing program 4 (id=4644): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa7}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x22, 0x2, 0x2) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) 2m26.564786109s ago: executing program 4 (id=4653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(0x3) 2m26.400019249s ago: executing program 4 (id=4660): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m26.336018373s ago: executing program 4 (id=4663): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 2m26.328570963s ago: executing program 4 (id=4666): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 2m26.245594188s ago: executing program 4 (id=4672): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xd8, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e0330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae", 0x0, 0x31, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280050009000400000014000300"/49], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m26.231750229s ago: executing program 41 (id=4672): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xd8, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e0330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae", 0x0, 0x31, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280050009000400000014000300"/49], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m20.555852653s ago: executing program 0 (id=4810): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0x0, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e0", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2m20.546502364s ago: executing program 0 (id=4811): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x400000192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfff, 0xfffffffc, 0xd75}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0xfff3, 0x10}, {0xfff1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000) 2m20.505867286s ago: executing program 0 (id=4813): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, 0x8) 2m20.491741227s ago: executing program 0 (id=4815): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1510d0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x41) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 2m20.466883789s ago: executing program 0 (id=4816): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x34, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m20.177475126s ago: executing program 0 (id=4821): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) 2m20.148866777s ago: executing program 42 (id=4821): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) 2.099096176s ago: executing program 1 (id=7874): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a3000000000080005400000"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.493548222s ago: executing program 9 (id=7891): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, r2, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 1.402263887s ago: executing program 9 (id=7895): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) 1.3618522s ago: executing program 9 (id=7897): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) 1.19113506s ago: executing program 1 (id=7903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 1.063719047s ago: executing program 1 (id=7905): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r2, 0x80000000, r0}, 0x10) 956.970014ms ago: executing program 1 (id=7908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") close_range(r0, 0xffffffffffffffff, 0x0) 940.017954ms ago: executing program 3 (id=7911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d903"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 876.252608ms ago: executing program 3 (id=7912): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) 875.854348ms ago: executing program 1 (id=7913): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r1, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) 875.515488ms ago: executing program 3 (id=7914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f00000008c0)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e85bab71bb868cdf9e9866b98aea373f0b", 0xb2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f00000000c0)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f0000000d40)="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", 0x108}, {&(0x7f0000003000)="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", 0xc53}], 0x7}}], 0x1, 0x800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40) 814.340122ms ago: executing program 3 (id=7915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 764.280335ms ago: executing program 3 (id=7916): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 696.396969ms ago: executing program 1 (id=7917): io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14}) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x183, 0x80000000006}, 0x110cc0, 0x920, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000680)) socket(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac, 0xfcb0}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 695.863819ms ago: executing program 3 (id=7918): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x840, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x810, 0x2, [@TCA_FLOW_POLICE={0x80c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0xfff, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x8004, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x0, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0xe, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x6, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x14, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x1, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x8001, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x1ff, 0x2]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 478.749682ms ago: executing program 2 (id=7923): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8", 0x57}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) 434.501284ms ago: executing program 2 (id=7924): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60006a4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r1) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 368.080428ms ago: executing program 2 (id=7926): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TCSETSF(r1, 0x5404, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0xd39, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000001f40)=""/4105, 0x18, 0x1009, 0x8}, 0x28) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 314.196321ms ago: executing program 5 (id=7928): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xff) 211.939347ms ago: executing program 9 (id=7929): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 171.53108ms ago: executing program 2 (id=7930): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 171.06046ms ago: executing program 5 (id=7931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 150.807641ms ago: executing program 9 (id=7932): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r1) 123.484123ms ago: executing program 5 (id=7933): r0 = socket(0x28, 0x5, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 123.208383ms ago: executing program 9 (id=7934): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 122.825473ms ago: executing program 5 (id=7935): io_uring_setup(0xda6, &(0x7f0000000540)={0x0, 0x73bc, 0x2, 0x2, 0x274}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 107.138453ms ago: executing program 5 (id=7936): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 76.854405ms ago: executing program 5 (id=7937): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x2}, 0x0, 0x4, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) 76.312596ms ago: executing program 2 (id=7938): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 0s ago: executing program 2 (id=7939): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8100, 0x1, 0x6, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') kernel console output (not intermixed with test programs): 67295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.9.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 326.068305][ T29] audit: type=1326 audit(2000000386.419:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.9.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 326.092058][ T29] audit: type=1326 audit(2000000386.419:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.9.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 326.115562][ T29] audit: type=1326 audit(2000000386.419:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.9.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 326.139110][ T29] audit: type=1326 audit(2000000386.419:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.9.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 326.162894][ T29] audit: type=1326 audit(2000000386.419:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.9.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 326.304290][T23949] netlink: 'syz.3.6911': attribute type 4 has an invalid length. [ 326.320182][T23949] netlink: 'syz.3.6911': attribute type 4 has an invalid length. [ 326.333753][T23949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6911'. [ 326.827249][T15237] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.835840][T15237] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.866626][T15237] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.875297][T15237] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.913293][T15237] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.921821][T15237] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.930612][T15237] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.939100][T15237] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.597753][T24005] 9p: Unknown access argument 18446744073709551615: -34 [ 327.672232][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6931'. [ 327.899075][T24028] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.6947'. [ 327.908333][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6947'. [ 327.919097][T24030] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.929097][T24030] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 327.938886][T24030] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.987187][T24030] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.997243][T24030] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 328.007061][T24030] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.076090][T24030] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.086016][T24030] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 328.095703][T24030] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.196139][T24030] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.206072][T24030] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 328.216048][T24030] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.264618][T24051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6952'. [ 328.460537][T24053] team_slave_1: Caught tx_queue_len zero misconfig [ 329.373298][T24082] netlink: 'syz.3.6972': attribute type 1 has an invalid length. [ 329.381114][T24082] netlink: 'syz.3.6972': attribute type 2 has an invalid length. [ 329.389223][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6972'. [ 329.580634][T24097] 9p: Bad value for 'rfdno' [ 329.603482][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6967'. [ 329.604300][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6979'. [ 329.638465][T24104] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.645784][T24104] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.810470][T15208] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.818830][T15208] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 329.827037][T15208] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.870932][T15208] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.879173][T15208] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 329.887284][T15208] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.910611][T15208] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.918874][T15208] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 329.926995][T15208] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.937599][T15208] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.945856][T15208] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 329.953971][T15208] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.968213][T24132] loop2: detected capacity change from 0 to 512 [ 329.981251][T24130] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.026334][T24130] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.076591][T24130] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.136301][T24130] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.190760][T15188] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.202203][T15188] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.213443][T15188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.225086][T15188] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.360641][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6996'. [ 330.377360][T24164] team1: entered promiscuous mode [ 330.382446][T24164] team1: entered allmulticast mode [ 330.388224][T24164] 8021q: adding VLAN 0 to HW filter on device team1 [ 330.455775][T24175] netlink: 'syz.5.6999': attribute type 4 has an invalid length. [ 330.470476][T24175] netlink: 'syz.5.6999': attribute type 4 has an invalid length. [ 330.503028][T24175] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.510373][T24175] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.540372][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 330.540387][ T29] audit: type=1326 audit(2000000390.989:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24158 comm="syz.1.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7fc00000 [ 330.564099][T24175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.590267][T24175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.609200][T24175] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 330.674871][T15188] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.683356][T15188] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 330.691668][T15188] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.708006][T15188] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.716450][T15188] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 330.724745][T15188] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.733681][T15188] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.742178][T15188] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 330.750456][T15188] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.763316][T15188] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.771850][T15188] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 330.780230][T15188] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.160433][ T29] audit: type=1326 audit(2000000391.609:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24158 comm="syz.1.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9127fb4ad7 code=0x7fc00000 [ 331.704558][T24216] __nla_validate_parse: 3 callbacks suppressed [ 331.704575][T24216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7017'. [ 331.849247][T24228] netlink: 'syz.9.7019': attribute type 4 has an invalid length. [ 331.873545][T24228] netlink: 'syz.9.7019': attribute type 4 has an invalid length. [ 331.888515][T24228] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7019'. [ 332.440319][T24228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.481797][T24228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.836749][T15188] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.845288][T15188] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.863278][T15188] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.871723][T15188] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.924173][T15188] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.932651][T15188] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.954178][T15188] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.962585][T15188] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.860819][T24284] net_ratelimit: 2 callbacks suppressed [ 334.860908][T24284] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 335.007347][T24309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7041'. [ 335.674586][T24380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.696704][T24380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.710435][T24380] ref_ctr_offset mismatch. inode: 0x950 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 335.773802][T24391] netlink: 'syz.5.7052': attribute type 27 has an invalid length. [ 335.782029][ T29] audit: type=1400 audit(2000000396.229:3658): avc: denied { write } for pid=24392 comm="syz.9.7054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 335.809991][T24391] geneve2: left promiscuous mode [ 335.815149][T24391] geneve2: left allmulticast mode [ 335.820727][T24391] gtp0: left promiscuous mode [ 335.825900][T24391] bond1: left promiscuous mode [ 335.830703][T24391] bond1: left allmulticast mode [ 335.851902][T24391] team1: left promiscuous mode [ 335.857109][T24391] team1: left allmulticast mode [ 335.877972][T24396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.887796][T24396] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.899745][T24396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.997709][T24405] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7060'. [ 336.249973][T24417] netlink: 'syz.5.7065': attribute type 1 has an invalid length. [ 336.264552][T24417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.288296][T24417] bond2: (slave veth13): Enslaving as an active interface with a down link [ 336.310897][T24417] team0: Port device dummy0 removed [ 336.326902][T24417] bond2: (slave dummy0): making interface the new active one [ 336.342059][T24417] dummy0: entered promiscuous mode [ 336.350290][T24420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7066'. [ 336.362588][T24417] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 336.377789][T24421] bond2 (unregistering): (slave veth13): Releasing active interface [ 336.415483][T24421] bond2 (unregistering): (slave dummy0): Releasing active interface [ 336.456881][T24421] bond2 (unregistering): Released all slaves [ 336.458897][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7068'. [ 336.479274][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7068'. [ 336.621946][ T29] audit: type=1400 audit(2000000397.069:3659): avc: denied { read } for pid=24442 comm="syz.2.7075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 336.666132][ T29] audit: type=1326 audit(2000000397.119:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.689711][ T29] audit: type=1326 audit(2000000397.119:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.713258][ T29] audit: type=1326 audit(2000000397.119:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.736961][ T29] audit: type=1326 audit(2000000397.119:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.774034][ T29] audit: type=1326 audit(2000000397.209:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.798878][ T29] audit: type=1326 audit(2000000397.209:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.822549][ T29] audit: type=1326 audit(2000000397.209:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.846246][ T29] audit: type=1326 audit(2000000397.219:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24445 comm="syz.1.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 336.922609][T24461] team0: Caught tx_queue_len zero misconfig [ 337.833157][T24515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 337.978838][T24523] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.252781][T24551] bond1: (slave dummy0): Releasing active interface [ 338.263535][T24551] batman_adv: batadv0: Adding interface: dummy0 [ 338.269910][T24551] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.295886][T24551] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 338.316872][T24558] ref_ctr_offset mismatch. inode: 0x1480 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 339.229671][T24574] syz.1.7135 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 339.243604][T24574] CPU: 0 UID: 0 PID: 24574 Comm: syz.1.7135 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 339.243675][T24574] Tainted: [W]=WARN [ 339.243682][T24574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.243695][T24574] Call Trace: [ 339.243703][T24574] [ 339.243712][T24574] __dump_stack+0x1d/0x30 [ 339.243740][T24574] dump_stack_lvl+0x95/0xd0 [ 339.243762][T24574] dump_stack+0x15/0x1b [ 339.243800][T24574] dump_header+0x80/0x240 [ 339.243822][T24574] oom_kill_process+0x295/0x350 [ 339.243847][T24574] out_of_memory+0x97d/0xb80 [ 339.243929][T24574] try_charge_memcg+0x62e/0xa10 [ 339.243993][T24574] obj_cgroup_charge_pages+0xa6/0x150 [ 339.244025][T24574] __memcg_kmem_charge_page+0x9e/0x170 [ 339.244065][T24574] __alloc_frozen_pages_noprof+0x18a/0x350 [ 339.244093][T24574] alloc_pages_mpol+0xb3/0x260 [ 339.244123][T24574] alloc_pages_noprof+0x8f/0x130 [ 339.244224][T24574] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 339.244258][T24574] __kvmalloc_node_noprof+0x471/0x680 [ 339.244355][T24574] ? ip_set_alloc+0x24/0x30 [ 339.244383][T24574] ? ip_set_alloc+0x24/0x30 [ 339.244410][T24574] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 339.244439][T24574] ip_set_alloc+0x24/0x30 [ 339.244461][T24574] hash_netiface_create+0x282/0x740 [ 339.244523][T24574] ? __pfx_hash_netiface_create+0x10/0x10 [ 339.244554][T24574] ip_set_create+0x3cf/0x970 [ 339.244674][T24574] ? __nla_parse+0x40/0x60 [ 339.244763][T24574] nfnetlink_rcv_msg+0x509/0x5d0 [ 339.244805][T24574] netlink_rcv_skb+0x123/0x220 [ 339.244828][T24574] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 339.244900][T24574] nfnetlink_rcv+0x167/0x1720 [ 339.244924][T24574] ? __kfree_skb+0x109/0x150 [ 339.244954][T24574] ? nlmon_xmit+0x4f/0x60 [ 339.244982][T24574] ? consume_skb+0x49/0x140 [ 339.245002][T24574] ? nlmon_xmit+0x4f/0x60 [ 339.245065][T24574] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 339.245143][T24574] ? __dev_queue_xmit+0x139a/0x1f20 [ 339.245184][T24574] ? __dev_queue_xmit+0x148/0x1f20 [ 339.245208][T24574] ? ref_tracker_free+0x37d/0x3e0 [ 339.245234][T24574] ? __netlink_deliver_tap+0x4dc/0x500 [ 339.245268][T24574] netlink_unicast+0x5c0/0x690 [ 339.245372][T24574] netlink_sendmsg+0x5c8/0x6f0 [ 339.245419][T24574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.245491][T24574] __sock_sendmsg+0x145/0x170 [ 339.245523][T24574] ____sys_sendmsg+0x31e/0x4a0 [ 339.245608][T24574] ___sys_sendmsg+0x195/0x1e0 [ 339.245642][T24574] __x64_sys_sendmsg+0xd4/0x160 [ 339.245681][T24574] x64_sys_call+0x17ba/0x3000 [ 339.245710][T24574] do_syscall_64+0xc0/0x2a0 [ 339.245740][T24574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.245769][T24574] RIP: 0033:0x7f9127fbacb9 [ 339.245858][T24574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.245875][T24574] RSP: 002b:00007f9126a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.245952][T24574] RAX: ffffffffffffffda RBX: 00007f9128235fa0 RCX: 00007f9127fbacb9 [ 339.245969][T24574] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 339.245983][T24574] RBP: 00007f9128028bf7 R08: 0000000000000000 R09: 0000000000000000 [ 339.245995][T24574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.246006][T24574] R13: 00007f9128236038 R14: 00007f9128235fa0 R15: 00007fffc0d28338 [ 339.246150][T24574] [ 339.576159][T24574] memory: usage 307192kB, limit 307200kB, failcnt 171 [ 339.582940][T24574] memory+swap: usage 358620kB, limit 9007199254740988kB, failcnt 0 [ 339.591134][T24574] kmem: usage 276216kB, limit 9007199254740988kB, failcnt 0 [ 339.598475][T24574] Memory cgroup stats for /syz1: [ 339.599630][T24574] cache 27348992 [ 339.608215][T24574] rss 188416 [ 339.611437][T24574] shmem 27344896 [ 339.615087][T24574] mapped_file 4096 [ 339.618858][T24574] dirty 4096 [ 339.622064][T24574] writeback 0 [ 339.625392][T24574] workingset_refault_anon 2067 [ 339.630154][T24574] workingset_refault_file 0 [ 339.634788][T24574] swap 52662272 [ 339.638267][T24574] swapcached 4165632 [ 339.642155][T24574] pgpgin 305883 [ 339.645642][T24574] pgpgout 298140 [ 339.649189][T24574] pgfault 309395 [ 339.652730][T24574] pgmajfault 365 [ 339.656305][T24574] inactive_anon 18677760 [ 339.660547][T24574] active_anon 13021184 [ 339.664638][T24574] inactive_file 4096 [ 339.668571][T24574] active_file 12288 [ 339.672366][T24574] unevictable 0 [ 339.675857][T24574] hierarchical_memory_limit 314572800 [ 339.681280][T24574] hierarchical_memsw_limit 9223372036854771712 [ 339.687471][T24574] total_cache 27348992 [ 339.691549][T24574] total_rss 188416 [ 339.695307][T24574] total_shmem 27344896 [ 339.699440][T24574] total_mapped_file 4096 [ 339.703691][T24574] total_dirty 4096 [ 339.707514][T24574] total_writeback 0 [ 339.711329][T24574] total_workingset_refault_anon 2067 [ 339.716664][T24574] total_workingset_refault_file 0 [ 339.721760][T24574] total_swap 52662272 [ 339.725791][T24574] total_swapcached 4165632 [ 339.730219][T24574] total_pgpgin 305883 [ 339.734251][T24574] total_pgpgout 298140 [ 339.738367][T24574] total_pgfault 309395 [ 339.742569][T24574] total_pgmajfault 365 [ 339.746703][T24574] total_inactive_anon 18677760 [ 339.751454][T24574] total_active_anon 13021184 [ 339.756245][T24574] total_inactive_file 4096 [ 339.760659][T24574] total_active_file 12288 [ 339.765020][T24574] total_unevictable 0 [ 339.769066][T24574] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7135,pid=24573,uid=0 [ 339.783846][T24574] Memory cgroup out of memory: Killed process 24573 (syz.1.7135) total-vm:96048kB, anon-rss:1204kB, file-rss:22040kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 339.849430][T24610] loop2: detected capacity change from 0 to 512 [ 339.864455][T24608] ref_ctr_offset mismatch. inode: 0x130c offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 339.888679][T24610] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7149: bad orphan inode 15 [ 339.903780][T24610] ext4_test_bit(bit=14, block=5) = 0 [ 339.919143][T24610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.995628][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.190787][T24645] netlink: 'syz.1.7161': attribute type 27 has an invalid length. [ 340.889420][T24645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.903802][ T9976] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 340.914789][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.914830][ T9976] Tainted: [W]=WARN [ 340.914834][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.914841][ T9976] Call Trace: [ 340.914857][ T9976] [ 340.914863][ T9976] __dump_stack+0x1d/0x30 [ 340.914879][ T9976] dump_stack_lvl+0x95/0xd0 [ 340.914957][ T9976] dump_stack+0x15/0x1b [ 340.914967][ T9976] dump_header+0x80/0x240 [ 340.914980][ T9976] oom_kill_process+0x295/0x350 [ 340.914992][ T9976] out_of_memory+0x97d/0xb80 [ 340.915012][ T9976] try_charge_memcg+0x62e/0xa10 [ 340.915111][ T9976] charge_memcg+0x51/0xc0 [ 340.915127][ T9976] __mem_cgroup_charge+0x28/0xb0 [ 340.915144][ T9976] filemap_add_folio+0x110/0x350 [ 340.915175][ T9976] __filemap_get_folio_mpol+0x326/0x680 [ 340.915189][ T9976] filemap_fault+0x473/0xbb0 [ 340.915203][ T9976] __do_fault+0xbc/0x200 [ 340.915293][ T9976] handle_mm_fault+0x11d7/0x3030 [ 340.915357][ T9976] ? vma_start_read+0x1c7/0x2c0 [ 340.915372][ T9976] do_user_addr_fault+0x62f/0x1050 [ 340.915389][ T9976] exc_page_fault+0x62/0xa0 [ 340.915472][ T9976] asm_exc_page_fault+0x26/0x30 [ 340.915544][ T9976] RIP: 0033:0x7fcd80958db4 [ 340.915555][ T9976] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 340.915567][ T9976] RSP: 002b:00007fffee30cd80 EFLAGS: 00010202 [ 340.915578][ T9976] RAX: 0000001b34324000 RBX: 000000000000096a RCX: 0000000000053020 [ 340.915586][ T9976] RDX: 000000000daa5c90 RSI: 00007fffee30ce10 RDI: 0000000000000001 [ 340.915633][ T9976] RBP: 00007fffee30cdbc R08: 00000000342130bb R09: 7fffffffffffffff [ 340.915641][ T9976] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 340.915648][ T9976] R13: 00000000000927c0 R14: 0000000000053325 R15: 00007fffee30ce10 [ 340.915689][ T9976] [ 340.915692][ T9976] memory: usage 307200kB, limit 307200kB, failcnt 712 [ 341.113220][ T9976] memory+swap: usage 308024kB, limit 9007199254740988kB, failcnt 0 [ 341.121130][ T9976] kmem: usage 295068kB, limit 9007199254740988kB, failcnt 0 [ 341.128421][ T9976] Memory cgroup stats for /syz9: [ 341.128663][ T9976] cache 11845632 [ 341.137191][ T9976] rss 561152 [ 341.140384][ T9976] shmem 11845632 [ 341.143954][ T9976] mapped_file 11755520 [ 341.148373][ T9976] dirty 0 [ 341.151360][ T9976] writeback 0 [ 341.154738][ T9976] workingset_refault_anon 2056 [ 341.159496][ T9976] workingset_refault_file 530 [ 341.163567][T24645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.164213][ T9976] swap 843776 [ 341.174949][ T9976] swapcached 16384 [ 341.178662][ T9976] pgpgin 350283 [ 341.182113][ T9976] pgpgout 347250 [ 341.185681][ T9976] pgfault 272770 [ 341.189223][ T9976] pgmajfault 703 [ 341.192767][ T9976] inactive_anon 8908800 [ 341.196923][ T9976] active_anon 3514368 [ 341.201062][ T9976] inactive_file 0 [ 341.204753][ T9976] active_file 0 [ 341.208209][ T9976] unevictable 0 [ 341.211662][ T9976] hierarchical_memory_limit 314572800 [ 341.217056][ T9976] hierarchical_memsw_limit 9223372036854771712 [ 341.223211][ T9976] total_cache 11845632 [ 341.227306][ T9976] total_rss 561152 [ 341.231041][ T9976] total_shmem 11845632 [ 341.235144][ T9976] total_mapped_file 11755520 [ 341.239734][ T9976] total_dirty 0 [ 341.243248][ T9976] total_writeback 0 [ 341.247100][ T9976] total_workingset_refault_anon 2056 [ 341.252427][ T9976] total_workingset_refault_file 530 [ 341.257662][ T9976] total_swap 843776 [ 341.261474][ T9976] total_swapcached 16384 [ 341.265758][ T9976] total_pgpgin 350283 [ 341.269780][ T9976] total_pgpgout 347250 [ 341.273851][ T9976] total_pgfault 272770 [ 341.278003][ T9976] total_pgmajfault 703 [ 341.282139][ T9976] total_inactive_anon 8908800 [ 341.286886][ T9976] total_active_anon 3514368 [ 341.291392][ T9976] total_inactive_file 0 [ 341.295583][ T9976] total_active_file 0 [ 341.299563][ T9976] total_unevictable 0 [ 341.303602][ T9976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3500,pid=14128,uid=0 [ 341.318479][ T9976] Memory cgroup out of memory: Killed process 14128 (syz.9.3500) total-vm:96048kB, anon-rss:1244kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 341.462634][T24651] syz.9.7163 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 341.476599][T24651] CPU: 1 UID: 0 PID: 24651 Comm: syz.9.7163 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 341.476672][T24651] Tainted: [W]=WARN [ 341.476681][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.476737][T24651] Call Trace: [ 341.476743][T24651] [ 341.476751][T24651] __dump_stack+0x1d/0x30 [ 341.476775][T24651] dump_stack_lvl+0x95/0xd0 [ 341.476797][T24651] dump_stack+0x15/0x1b [ 341.476819][T24651] dump_header+0x80/0x240 [ 341.476840][T24651] oom_kill_process+0x295/0x350 [ 341.476863][T24651] out_of_memory+0x97d/0xb80 [ 341.476896][T24651] try_charge_memcg+0x62e/0xa10 [ 341.476935][T24651] obj_cgroup_charge_pages+0xa6/0x150 [ 341.476964][T24651] __memcg_kmem_charge_page+0x9e/0x170 [ 341.477090][T24651] __alloc_frozen_pages_noprof+0x18a/0x350 [ 341.477121][T24651] alloc_pages_mpol+0xb3/0x260 [ 341.477154][T24651] alloc_pages_noprof+0x8f/0x130 [ 341.477256][T24651] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 341.477295][T24651] __kvmalloc_node_noprof+0x471/0x680 [ 341.477319][T24651] ? ip_set_alloc+0x24/0x30 [ 341.477406][T24651] ? ip_set_alloc+0x24/0x30 [ 341.477428][T24651] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 341.477451][T24651] ip_set_alloc+0x24/0x30 [ 341.477480][T24651] hash_netiface_create+0x282/0x740 [ 341.477530][T24651] ? __pfx_hash_netiface_create+0x10/0x10 [ 341.477560][T24651] ip_set_create+0x3cf/0x970 [ 341.477658][T24651] ? __nla_parse+0x40/0x60 [ 341.477687][T24651] nfnetlink_rcv_msg+0x509/0x5d0 [ 341.477730][T24651] netlink_rcv_skb+0x123/0x220 [ 341.477770][T24651] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 341.477802][T24651] nfnetlink_rcv+0x167/0x1720 [ 341.477862][T24651] ? xas_load+0x405/0x430 [ 341.477963][T24651] ? mas_wr_store_type+0xa75/0xcd0 [ 341.477986][T24651] ? security_compute_sid+0x12f5/0x13d0 [ 341.478016][T24651] ? mas_prealloc_calc+0x253/0x2a0 [ 341.478046][T24651] ? mas_wr_preallocate+0x2aa/0x370 [ 341.478123][T24651] ? mas_insert+0x1ea/0x330 [ 341.478145][T24651] ? _raw_spin_lock_bh+0x56/0xb0 [ 341.478174][T24651] ? should_fail_ex+0x30/0x280 [ 341.478194][T24651] ? selinux_nlmsg_lookup+0x99/0x890 [ 341.478277][T24651] ? __rcu_read_unlock+0x33/0x70 [ 341.478295][T24651] ? __netlink_lookup+0x276/0x2b0 [ 341.478362][T24651] netlink_unicast+0x5c0/0x690 [ 341.478386][T24651] netlink_sendmsg+0x5c8/0x6f0 [ 341.478414][T24651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.478446][T24651] __sock_sendmsg+0x145/0x170 [ 341.478551][T24651] ____sys_sendmsg+0x31e/0x4a0 [ 341.478582][T24651] ___sys_sendmsg+0x195/0x1e0 [ 341.478618][T24651] __x64_sys_sendmsg+0xd4/0x160 [ 341.478655][T24651] x64_sys_call+0x17ba/0x3000 [ 341.478682][T24651] do_syscall_64+0xc0/0x2a0 [ 341.478746][T24651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.478772][T24651] RIP: 0033:0x7fcd80a8acb9 [ 341.478791][T24651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.478812][T24651] RSP: 002b:00007fcd7f4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.478837][T24651] RAX: ffffffffffffffda RBX: 00007fcd80d05fa0 RCX: 00007fcd80a8acb9 [ 341.478853][T24651] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 341.478904][T24651] RBP: 00007fcd80af8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 341.478920][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.478947][T24651] R13: 00007fcd80d06038 R14: 00007fcd80d05fa0 R15: 00007fffee30ca18 [ 341.478966][T24651] [ 341.478973][T24651] memory: usage 307200kB, limit 307200kB, failcnt 842 [ 341.733298][T24678] netlink: 548 bytes leftover after parsing attributes in process `syz.3.7170'. [ 341.737792][T24651] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 341.842915][T24651] kmem: usage 294936kB, limit 9007199254740988kB, failcnt 0 [ 341.850322][T24651] Memory cgroup stats for /syz9: [ 341.854841][T24651] cache 11980800 [ 341.863405][T24651] rss 561152 [ 341.866747][T24651] shmem 11845632 [ 341.870292][T24651] mapped_file 11755520 [ 341.874414][T24651] dirty 0 [ 341.877423][T24651] writeback 0 [ 341.880777][T24651] workingset_refault_anon 2056 [ 341.885575][T24651] workingset_refault_file 658 [ 341.890310][T24651] swap 663552 [ 341.893670][T24651] swapcached 16384 [ 341.897520][T24651] pgpgin 350411 [ 341.900976][T24651] pgpgout 347345 [ 341.904584][T24651] pgfault 272775 [ 341.908154][T24651] pgmajfault 708 [ 341.913722][T24651] inactive_anon 6565888 [ 341.918106][T24651] active_anon 5857280 [ 341.922090][T24651] inactive_file 135168 [ 341.926197][T24651] active_file 0 [ 341.929655][T24651] unevictable 0 [ 341.933114][T24651] hierarchical_memory_limit 314572800 [ 341.938610][T24651] hierarchical_memsw_limit 9223372036854771712 [ 341.944843][T24651] total_cache 11980800 [ 341.948907][T24651] total_rss 561152 [ 341.952630][T24651] total_shmem 11845632 [ 341.956771][T24651] total_mapped_file 11755520 [ 341.961353][T24651] total_dirty 0 [ 341.965291][T24651] total_writeback 0 [ 341.969097][T24651] total_workingset_refault_anon 2056 [ 341.974624][T24651] total_workingset_refault_file 658 [ 341.979821][T24651] total_swap 663552 [ 341.983670][T24651] total_swapcached 16384 [ 341.987948][T24651] total_pgpgin 350411 [ 341.991918][T24651] total_pgpgout 347345 [ 341.996157][T24651] total_pgfault 272775 [ 342.000235][T24651] total_pgmajfault 708 [ 342.004395][T24651] total_inactive_anon 6565888 [ 342.009105][T24651] total_active_anon 5857280 [ 342.013598][T24651] total_inactive_file 135168 [ 342.018337][T24651] total_active_file 0 [ 342.022314][T24651] total_unevictable 0 [ 342.026339][T24651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3211,pid=13168,uid=0 [ 342.041199][T24651] Memory cgroup out of memory: Killed process 13168 (syz.9.3211) total-vm:96048kB, anon-rss:1244kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 342.550921][T24683] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7173'. [ 342.660342][T24680] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 342.682518][T24645] bond2: left promiscuous mode [ 342.698777][T24645] bond3: left promiscuous mode [ 342.703603][T24645] bond3: left allmulticast mode [ 342.746921][T24652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.754915][T24652] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.762926][T24652] batman_adv: batadv0: Interface activated: dummy0 [ 342.769570][T24652] batadv0: mtu less than device minimum [ 342.775650][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.786553][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.797328][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.808209][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.819041][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.829987][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.840923][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.851814][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.862732][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 342.880553][T24675] netlink: 'syz.3.7170': attribute type 29 has an invalid length. [ 342.889561][T15224] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.919056][T15224] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.999857][T15224] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.042452][T15224] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.051312][T24698] netlink: 'syz.3.7188': attribute type 27 has an invalid length. [ 343.081026][T24698] ipip0: left promiscuous mode [ 343.086103][T24698] vlan2: left allmulticast mode [ 343.090961][T24698] veth0_to_bond: left allmulticast mode [ 343.096612][T24698] bond1: left promiscuous mode [ 343.102594][T24698] team1: left promiscuous mode [ 343.107416][T24698] team1: left allmulticast mode [ 343.112339][T24698] veth14: left promiscuous mode [ 343.117233][T24698] veth14: left allmulticast mode [ 343.122997][T24698] ip6tnl1: left promiscuous mode [ 343.128787][T24698] geneve2: left promiscuous mode [ 343.133750][T24698] geneve2: left allmulticast mode [ 343.138956][T24698] bond4: left promiscuous mode [ 343.156360][T24706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.165662][T24706] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.690286][T24742] bridge0: entered promiscuous mode [ 343.690542][T24742] bridge0: left promiscuous mode [ 343.869588][T24765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7201'. [ 343.883676][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7208'. [ 343.923462][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 343.923490][ T29] audit: type=1400 audit(2000000404.369:3709): avc: denied { bind } for pid=24770 comm="syz.9.7205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 344.196314][T24779] syz.2.7203 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 344.210570][T24779] CPU: 1 UID: 0 PID: 24779 Comm: syz.2.7203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.210601][T24779] Tainted: [W]=WARN [ 344.210676][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.210691][T24779] Call Trace: [ 344.210699][T24779] [ 344.210707][T24779] __dump_stack+0x1d/0x30 [ 344.210730][T24779] dump_stack_lvl+0x95/0xd0 [ 344.210760][T24779] dump_stack+0x15/0x1b [ 344.210779][T24779] dump_header+0x80/0x240 [ 344.210799][T24779] oom_kill_process+0x295/0x350 [ 344.210820][T24779] out_of_memory+0x97d/0xb80 [ 344.210922][T24779] try_charge_memcg+0x62e/0xa10 [ 344.211032][T24779] obj_cgroup_charge_pages+0xa6/0x150 [ 344.211204][T24779] __memcg_kmem_charge_page+0x9e/0x170 [ 344.211290][T24779] __alloc_frozen_pages_noprof+0x18a/0x350 [ 344.211322][T24779] alloc_pages_bulk_noprof+0x4a1/0x520 [ 344.211349][T24779] ? policy_nodemask+0x2a5/0x420 [ 344.211428][T24779] alloc_pages_bulk_mempolicy_noprof+0x2d6/0xb00 [ 344.211461][T24779] ? alloc_pages_mpol+0x217/0x260 [ 344.211490][T24779] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 344.211546][T24779] __kvmalloc_node_noprof+0x471/0x680 [ 344.211573][T24779] ? ip_set_alloc+0x24/0x30 [ 344.211720][T24779] ? ip_set_alloc+0x24/0x30 [ 344.211768][T24779] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 344.211792][T24779] ip_set_alloc+0x24/0x30 [ 344.211815][T24779] hash_netiface_create+0x282/0x740 [ 344.211841][T24779] ? __pfx_hash_netiface_create+0x10/0x10 [ 344.211880][T24779] ip_set_create+0x3cf/0x970 [ 344.211916][T24779] ? __nla_parse+0x40/0x60 [ 344.211943][T24779] nfnetlink_rcv_msg+0x509/0x5d0 [ 344.212032][T24779] netlink_rcv_skb+0x123/0x220 [ 344.212060][T24779] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 344.212113][T24779] nfnetlink_rcv+0x167/0x1720 [ 344.212177][T24779] ? __list_del_entry_valid_or_report+0x65/0x130 [ 344.212269][T24779] ? __rmqueue_pcplist+0x9b6/0xb80 [ 344.212299][T24779] ? _raw_spin_lock_bh+0x56/0xb0 [ 344.212408][T24779] ? should_fail_ex+0x30/0x280 [ 344.212476][T24779] ? selinux_nlmsg_lookup+0x99/0x890 [ 344.212500][T24779] ? __rcu_read_unlock+0x33/0x70 [ 344.212565][T24779] ? __netlink_lookup+0x276/0x2b0 [ 344.212597][T24779] netlink_unicast+0x5c0/0x690 [ 344.212625][T24779] netlink_sendmsg+0x5c8/0x6f0 [ 344.212703][T24779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.212730][T24779] __sock_sendmsg+0x145/0x170 [ 344.212764][T24779] ____sys_sendmsg+0x31e/0x4a0 [ 344.212846][T24779] ___sys_sendmsg+0x195/0x1e0 [ 344.212948][T24779] __x64_sys_sendmsg+0xd4/0x160 [ 344.212978][T24779] x64_sys_call+0x17ba/0x3000 [ 344.213027][T24779] do_syscall_64+0xc0/0x2a0 [ 344.213061][T24779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.213085][T24779] RIP: 0033:0x7eff6e4aacb9 [ 344.213104][T24779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.213122][T24779] RSP: 002b:00007eff6cec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.213208][T24779] RAX: ffffffffffffffda RBX: 00007eff6e726180 RCX: 00007eff6e4aacb9 [ 344.213225][T24779] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 344.213241][T24779] RBP: 00007eff6e518bf7 R08: 0000000000000000 R09: 0000000000000000 [ 344.213292][T24779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.213446][T24779] R13: 00007eff6e726218 R14: 00007eff6e726180 R15: 00007ffce06aac08 [ 344.213469][T24779] [ 344.213478][T24779] memory: usage 307200kB, limit 307200kB, failcnt 90 [ 344.310663][T24792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7214'. [ 344.315578][T24779] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 344.315598][T24779] kmem: usage 222612kB, limit 9007199254740988kB, failcnt 0 [ 344.374291][T24796] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7214'. [ 344.375672][T24779] Memory cgroup stats for [ 344.473848][T24792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.475580][T24779] /syz2 [ 344.500037][T24796] macvlan1: entered promiscuous mode [ 344.503733][T24779] : [ 344.511729][T24796] macvlan1: entered allmulticast mode [ 344.514850][T24796] bond4: (slave macvlan1): Opening slave failed [ 344.632966][T24779] cache 86204416 [ 344.636699][T24779] rss 397312 [ 344.639918][T24779] shmem 86204416 [ 344.643447][T24779] mapped_file 0 [ 344.647017][T24779] dirty 0 [ 344.650081][T24779] writeback 0 [ 344.653373][T24779] workingset_refault_anon 1390 [ 344.658275][T24779] workingset_refault_file 2 [ 344.662786][T24779] swap 368640 [ 344.666126][T24779] swapcached 4096 [ 344.669752][T24779] pgpgin 311610 [ 344.673204][T24779] pgpgout 290464 [ 344.676790][T24779] pgfault 262694 [ 344.680343][T24779] pgmajfault 322 [ 344.683889][T24779] inactive_anon 86581248 [ 344.688239][T24779] active_anon 28672 [ 344.692067][T24779] inactive_file 0 [ 344.695849][T24779] active_file 4096 [ 344.699559][T24779] unevictable 0 [ 344.703002][T24779] hierarchical_memory_limit 314572800 [ 344.708408][T24779] hierarchical_memsw_limit 9223372036854771712 [ 344.714580][T24779] total_cache 86204416 [ 344.718638][T24779] total_rss 397312 [ 344.722346][T24779] total_shmem 86204416 [ 344.726532][T24779] total_mapped_file 0 [ 344.730504][T24779] total_dirty 0 [ 344.734024][T24779] total_writeback 0 [ 344.737874][T24779] total_workingset_refault_anon 1390 [ 344.743156][T24779] total_workingset_refault_file 2 [ 344.748207][T24779] total_swap 368640 [ 344.752048][T24779] total_swapcached 4096 [ 344.756279][T24779] total_pgpgin 311610 [ 344.760276][T24779] total_pgpgout 290464 [ 344.764427][T24779] total_pgfault 262694 [ 344.768492][T24779] total_pgmajfault 322 [ 344.772660][T24779] total_inactive_anon 86581248 [ 344.777580][T24779] total_active_anon 28672 [ 344.781940][T24779] total_inactive_file 0 [ 344.786174][T24779] total_active_file 4096 [ 344.790417][T24779] total_unevictable 0 [ 344.794464][T24779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7203,pid=24768,uid=0 [ 344.809323][T24779] Memory cgroup out of memory: Killed process 24768 (syz.2.7203) total-vm:96312kB, anon-rss:1332kB, file-rss:22168kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 344.848809][ T29] audit: type=1326 audit(2000000405.299:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 344.923948][ T29] audit: type=1326 audit(2000000405.329:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 344.949066][ T29] audit: type=1326 audit(2000000405.329:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 344.974250][ T29] audit: type=1326 audit(2000000405.329:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 344.998972][ T29] audit: type=1326 audit(2000000405.329:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 345.022861][ T29] audit: type=1326 audit(2000000405.329:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 345.046426][ T29] audit: type=1326 audit(2000000405.329:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f039bbcaa22 code=0x7ffc0000 [ 345.069963][ T29] audit: type=1326 audit(2000000405.329:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f039bbcaa22 code=0x7ffc0000 [ 345.093343][ T29] audit: type=1326 audit(2000000405.329:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24801 comm="syz.5.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bbcacb9 code=0x7ffc0000 [ 345.486819][T24825] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7226'. [ 345.549609][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7231'. [ 345.558561][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7231'. [ 346.071187][T24862] loop2: detected capacity change from 0 to 512 [ 346.079929][T24862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7241: invalid indirect mapped block 32768 (level 0) [ 346.094273][T24862] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.7241: attempt to clear invalid blocks 1024 len 1 [ 346.107632][T24862] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 346.122273][T24862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7241: invalid indirect mapped block 1819213824 (level 0) [ 346.136811][T24862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7241: invalid indirect mapped block 33554432 (level 2) [ 346.151039][T24862] EXT4-fs (loop2): 1 truncate cleaned up [ 346.157137][T24862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.180039][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.479080][T24891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7253'. [ 346.492929][T24891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.766343][T24931] __nla_validate_parse: 1 callbacks suppressed [ 346.766362][T24931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7270'. [ 346.781881][T24931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7270'. [ 347.067826][T24950] loop2: detected capacity change from 0 to 512 [ 347.125793][T24950] EXT4-fs: Ignoring removed i_version option [ 347.131856][T24950] EXT4-fs: Ignoring removed nobh option [ 347.153448][T24950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 347.179577][T24950] EXT4-fs (loop2): 1 truncate cleaned up [ 347.185840][T24950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.209930][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.279853][T24938] syz.3.7266 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 347.293797][T24938] CPU: 0 UID: 0 PID: 24938 Comm: syz.3.7266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.293828][T24938] Tainted: [W]=WARN [ 347.293862][T24938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.293873][T24938] Call Trace: [ 347.293882][T24938] [ 347.293890][T24938] __dump_stack+0x1d/0x30 [ 347.293973][T24938] dump_stack_lvl+0x95/0xd0 [ 347.293992][T24938] dump_stack+0x15/0x1b [ 347.294010][T24938] dump_header+0x80/0x240 [ 347.294030][T24938] oom_kill_process+0x295/0x350 [ 347.294049][T24938] out_of_memory+0x97d/0xb80 [ 347.294088][T24938] try_charge_memcg+0x62e/0xa10 [ 347.294123][T24938] obj_cgroup_charge_pages+0xa6/0x150 [ 347.294178][T24938] __memcg_kmem_charge_page+0x9e/0x170 [ 347.294263][T24938] __alloc_frozen_pages_noprof+0x18a/0x350 [ 347.294294][T24938] alloc_pages_mpol+0xb3/0x260 [ 347.294321][T24938] alloc_pages_noprof+0x8f/0x130 [ 347.294384][T24938] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 347.294418][T24938] __kvmalloc_node_noprof+0x471/0x680 [ 347.294485][T24938] ? ip_set_alloc+0x24/0x30 [ 347.294515][T24938] ? ip_set_alloc+0x24/0x30 [ 347.294586][T24938] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 347.294615][T24938] ip_set_alloc+0x24/0x30 [ 347.294643][T24938] hash_netiface_create+0x282/0x740 [ 347.294693][T24938] ? __pfx_hash_netiface_create+0x10/0x10 [ 347.294725][T24938] ip_set_create+0x3cf/0x970 [ 347.294802][T24938] ? __nla_parse+0x40/0x60 [ 347.294830][T24938] nfnetlink_rcv_msg+0x509/0x5d0 [ 347.294872][T24938] netlink_rcv_skb+0x123/0x220 [ 347.294964][T24938] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 347.294990][T24938] nfnetlink_rcv+0x167/0x1720 [ 347.295014][T24938] ? __kfree_skb+0x109/0x150 [ 347.295037][T24938] ? nlmon_xmit+0x4f/0x60 [ 347.295054][T24938] ? consume_skb+0x49/0x140 [ 347.295126][T24938] ? nlmon_xmit+0x4f/0x60 [ 347.295147][T24938] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 347.295201][T24938] ? __dev_queue_xmit+0x139a/0x1f20 [ 347.295228][T24938] ? __dev_queue_xmit+0x148/0x1f20 [ 347.295258][T24938] ? ref_tracker_free+0x37d/0x3e0 [ 347.295320][T24938] ? __netlink_deliver_tap+0x4dc/0x500 [ 347.295422][T24938] netlink_unicast+0x5c0/0x690 [ 347.295451][T24938] netlink_sendmsg+0x5c8/0x6f0 [ 347.295496][T24938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.295577][T24938] __sock_sendmsg+0x145/0x170 [ 347.295613][T24938] ____sys_sendmsg+0x31e/0x4a0 [ 347.295699][T24938] ___sys_sendmsg+0x195/0x1e0 [ 347.295811][T24938] __x64_sys_sendmsg+0xd4/0x160 [ 347.295843][T24938] x64_sys_call+0x17ba/0x3000 [ 347.295868][T24938] do_syscall_64+0xc0/0x2a0 [ 347.295931][T24938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.295955][T24938] RIP: 0033:0x7f2c8cb4acb9 [ 347.295970][T24938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.296012][T24938] RSP: 002b:00007f2c8b565028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.296033][T24938] RAX: ffffffffffffffda RBX: 00007f2c8cdc6180 RCX: 00007f2c8cb4acb9 [ 347.296051][T24938] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 347.296067][T24938] RBP: 00007f2c8cbb8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 347.296083][T24938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.296111][T24938] R13: 00007f2c8cdc6218 R14: 00007f2c8cdc6180 R15: 00007fff948e99f8 [ 347.296130][T24938] [ 347.623507][T24938] memory: usage 307200kB, limit 307200kB, failcnt 6744 [ 347.630518][T24938] memory+swap: usage 372328kB, limit 9007199254740988kB, failcnt 0 [ 347.638460][T24938] kmem: usage 213772kB, limit 9007199254740988kB, failcnt 0 [ 347.645782][T24938] Memory cgroup stats for /syz3: [ 347.664360][T24938] cache 91811840 [ 347.672860][T24938] rss 929792 [ 347.676089][T24938] shmem 22392832 [ 347.679752][T24938] mapped_file 0 [ 347.683257][T24938] dirty 0 [ 347.686209][T24938] writeback 0 [ 347.689475][T24938] workingset_refault_anon 3915 [ 347.694279][T24938] workingset_refault_file 13658 [ 347.699115][T24938] swap 66691072 [ 347.702567][T24938] swapcached 2924544 [ 347.706545][T24938] pgpgin 592916 [ 347.709980][T24938] pgpgout 569559 [ 347.713518][T24938] pgfault 374304 [ 347.717086][T24938] pgmajfault 567 [ 347.720607][T24938] inactive_anon 7737344 [ 347.724834][T24938] active_anon 18513920 [ 347.728915][T24938] inactive_file 0 [ 347.732537][T24938] active_file 0 [ 347.736120][T24938] unevictable 69419008 [ 347.740191][T24938] hierarchical_memory_limit 314572800 [ 347.745738][T24938] hierarchical_memsw_limit 9223372036854771712 [ 347.751894][T24938] total_cache 91811840 [ 347.756063][T24938] total_rss 929792 [ 347.759896][T24938] total_shmem 22392832 [ 347.763960][T24938] total_mapped_file 0 [ 347.767993][T24938] total_dirty 0 [ 347.771443][T24938] total_writeback 0 [ 347.775302][T24938] total_workingset_refault_anon 3915 [ 347.780645][T24938] total_workingset_refault_file 13658 [ 347.786096][T24938] total_swap 66691072 [ 347.790070][T24938] total_swapcached 2924544 [ 347.794534][T24938] total_pgpgin 592916 [ 347.798508][T24938] total_pgpgout 569559 [ 347.802572][T24938] total_pgfault 374304 [ 347.806863][T24938] total_pgmajfault 567 [ 347.810928][T24938] total_inactive_anon 7737344 [ 347.815705][T24938] total_active_anon 18513920 [ 347.820294][T24938] total_inactive_file 0 [ 347.824457][T24938] total_active_file 0 [ 347.828497][T24938] total_unevictable 69419008 [ 347.833064][T24938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3048,pid=12701,uid=0 [ 347.847770][T24938] Memory cgroup out of memory: Killed process 12701 (syz.3.3048) total-vm:94000kB, anon-rss:1212kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 347.910377][T10596] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 347.921365][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.921453][T10596] Tainted: [W]=WARN [ 347.921482][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.921494][T10596] Call Trace: [ 347.921502][T10596] [ 347.921512][T10596] __dump_stack+0x1d/0x30 [ 347.921535][T10596] dump_stack_lvl+0x95/0xd0 [ 347.921624][T10596] dump_stack+0x15/0x1b [ 347.921645][T10596] dump_header+0x80/0x240 [ 347.921667][T10596] oom_kill_process+0x295/0x350 [ 347.921690][T10596] out_of_memory+0x97d/0xb80 [ 347.921730][T10596] try_charge_memcg+0x62e/0xa10 [ 347.921767][T10596] charge_memcg+0x51/0xc0 [ 347.921792][T10596] __mem_cgroup_charge+0x28/0xb0 [ 347.921881][T10596] filemap_add_folio+0x110/0x350 [ 347.921901][T10596] __filemap_get_folio_mpol+0x326/0x680 [ 347.921927][T10596] filemap_fault+0x473/0xbb0 [ 347.921964][T10596] __do_fault+0xbc/0x200 [ 347.922037][T10596] handle_mm_fault+0x11d7/0x3030 [ 347.922141][T10596] ? vma_start_read+0x1c7/0x2c0 [ 347.922220][T10596] do_user_addr_fault+0x62f/0x1050 [ 347.922303][T10596] exc_page_fault+0x62/0xa0 [ 347.922394][T10596] asm_exc_page_fault+0x26/0x30 [ 347.922429][T10596] RIP: 0033:0x7f2c8ca18db4 [ 347.922444][T10596] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 347.922463][T10596] RSP: 002b:00007fff948e9d60 EFLAGS: 00010206 [ 347.922481][T10596] RAX: 0000001b32a24000 RBX: 000000000000090c RCX: 0000000000054b78 [ 347.922496][T10596] RDX: 000000000421d12e RSI: 00007fff948e9df0 RDI: 0000000000000001 [ 347.922510][T10596] RBP: 00007fff948e9d9c R08: 000000000fc34088 R09: 7fffffffffffffff [ 347.922540][T10596] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 347.922555][T10596] R13: 00000000000927c0 R14: 0000000000054b4c R15: 00007fff948e9df0 [ 347.922576][T10596] [ 347.922583][T10596] memory: usage 307200kB, limit 307200kB, failcnt 6879 [ 348.118905][T10596] memory+swap: usage 372232kB, limit 9007199254740988kB, failcnt 0 [ 348.126826][T10596] kmem: usage 213768kB, limit 9007199254740988kB, failcnt 0 [ 348.134122][T10596] Memory cgroup stats for /syz3: [ 348.134459][T10596] cache 91815936 [ 348.143056][T10596] rss 929792 [ 348.146283][T10596] shmem 22392832 [ 348.149844][T10596] mapped_file 0 [ 348.153342][T10596] dirty 0 [ 348.156378][T10596] writeback 0 [ 348.159661][T10596] workingset_refault_anon 3915 [ 348.164435][T10596] workingset_refault_file 13666 [ 348.169271][T10596] swap 66592768 [ 348.172705][T10596] swapcached 2924544 [ 348.176770][T10596] pgpgin 592924 [ 348.180215][T10596] pgpgout 569566 [ 348.183826][T10596] pgfault 374305 [ 348.187405][T10596] pgmajfault 568 [ 348.190936][T10596] inactive_anon 8257536 [ 348.195115][T10596] active_anon 17993728 [ 348.199168][T10596] inactive_file 0 [ 348.202778][T10596] active_file 4096 [ 348.206667][T10596] unevictable 69419008 [ 348.210736][T10596] hierarchical_memory_limit 314572800 [ 348.216305][T10596] hierarchical_memsw_limit 9223372036854771712 [ 348.222446][T10596] total_cache 91815936 [ 348.226556][T10596] total_rss 929792 [ 348.230265][T10596] total_shmem 22392832 [ 348.234423][T10596] total_mapped_file 0 [ 348.238406][T10596] total_dirty 0 [ 348.241881][T10596] total_writeback 0 [ 348.245893][T10596] total_workingset_refault_anon 3915 [ 348.251212][T10596] total_workingset_refault_file 13666 [ 348.256628][T10596] total_swap 66592768 [ 348.260596][T10596] total_swapcached 2924544 [ 348.265079][T10596] total_pgpgin 592924 [ 348.269050][T10596] total_pgpgout 569566 [ 348.273641][T10596] total_pgfault 374305 [ 348.277725][T10596] total_pgmajfault 568 [ 348.281820][T10596] total_inactive_anon 8257536 [ 348.286545][T10596] total_active_anon 17993728 [ 348.291117][T10596] total_inactive_file 0 [ 348.295354][T10596] total_active_file 4096 [ 348.299589][T10596] total_unevictable 69419008 [ 348.304198][T10596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2986,pid=12501,uid=0 [ 348.318915][T10596] Memory cgroup out of memory: Killed process 12501 (syz.3.2986) total-vm:94000kB, anon-rss:1212kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 348.404651][T24976] netlink: 'syz.2.7286': attribute type 27 has an invalid length. [ 348.424248][T24976] bridge1: left allmulticast mode [ 348.430237][T24976] bond3: left promiscuous mode [ 348.435143][T24976] bond3: left allmulticast mode [ 348.455350][T24938] syz.3.7266 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 348.455963][T24976] bond4: left promiscuous mode [ 348.469388][T24938] CPU: 1 UID: 0 PID: 24938 Comm: syz.3.7266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.469423][T24938] Tainted: [W]=WARN [ 348.469432][T24938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.469446][T24938] Call Trace: [ 348.469454][T24938] [ 348.469464][T24938] __dump_stack+0x1d/0x30 [ 348.469493][T24938] dump_stack_lvl+0x95/0xd0 [ 348.469560][T24938] dump_stack+0x15/0x1b [ 348.469583][T24938] dump_header+0x80/0x240 [ 348.469606][T24938] oom_kill_process+0x295/0x350 [ 348.469629][T24938] out_of_memory+0x97d/0xb80 [ 348.469653][T24938] try_charge_memcg+0x62e/0xa10 [ 348.469706][T24938] obj_cgroup_charge_pages+0xa6/0x150 [ 348.469777][T24938] __memcg_kmem_charge_page+0x9e/0x170 [ 348.469806][T24938] __alloc_frozen_pages_noprof+0x18a/0x350 [ 348.469834][T24938] alloc_pages_mpol+0xb3/0x260 [ 348.469902][T24938] alloc_pages_noprof+0x8f/0x130 [ 348.469937][T24938] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 348.469974][T24938] __kvmalloc_node_noprof+0x471/0x680 [ 348.470000][T24938] ? ip_set_alloc+0x24/0x30 [ 348.470027][T24938] ? ip_set_alloc+0x24/0x30 [ 348.470060][T24938] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 348.470087][T24938] ip_set_alloc+0x24/0x30 [ 348.470113][T24938] hash_netiface_create+0x282/0x740 [ 348.470176][T24938] ? __pfx_hash_netiface_create+0x10/0x10 [ 348.470204][T24938] ip_set_create+0x3cf/0x970 [ 348.470244][T24938] ? __nla_parse+0x40/0x60 [ 348.470348][T24938] nfnetlink_rcv_msg+0x509/0x5d0 [ 348.470445][T24938] netlink_rcv_skb+0x123/0x220 [ 348.470471][T24938] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 348.470500][T24938] nfnetlink_rcv+0x167/0x1720 [ 348.470540][T24938] ? __kfree_skb+0x109/0x150 [ 348.470562][T24938] ? nlmon_xmit+0x4f/0x60 [ 348.470581][T24938] ? consume_skb+0x49/0x140 [ 348.470606][T24938] ? nlmon_xmit+0x4f/0x60 [ 348.470626][T24938] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 348.470653][T24938] ? __dev_queue_xmit+0x139a/0x1f20 [ 348.470678][T24938] ? __dev_queue_xmit+0x148/0x1f20 [ 348.470707][T24938] ? ref_tracker_free+0x37d/0x3e0 [ 348.470734][T24938] ? __netlink_deliver_tap+0x4dc/0x500 [ 348.470893][T24938] netlink_unicast+0x5c0/0x690 [ 348.470920][T24938] netlink_sendmsg+0x5c8/0x6f0 [ 348.470951][T24938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.471062][T24938] __sock_sendmsg+0x145/0x170 [ 348.471094][T24938] ____sys_sendmsg+0x31e/0x4a0 [ 348.471122][T24938] ___sys_sendmsg+0x195/0x1e0 [ 348.471234][T24938] __x64_sys_sendmsg+0xd4/0x160 [ 348.471309][T24938] x64_sys_call+0x17ba/0x3000 [ 348.471374][T24938] do_syscall_64+0xc0/0x2a0 [ 348.471453][T24938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.471477][T24938] RIP: 0033:0x7f2c8cb4acb9 [ 348.471495][T24938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.471562][T24938] RSP: 002b:00007f2c8b565028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.471584][T24938] RAX: ffffffffffffffda RBX: 00007f2c8cdc6180 RCX: 00007f2c8cb4acb9 [ 348.471600][T24938] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 348.471614][T24938] RBP: 00007f2c8cbb8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 348.471704][T24938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.471718][T24938] R13: 00007f2c8cdc6218 R14: 00007f2c8cdc6180 R15: 00007fff948e99f8 [ 348.471739][T24938] [ 348.471747][T24938] memory: usage 307200kB, limit 307200kB, failcnt 7133 [ 348.474388][T24976] hsr1: left promiscuous mode [ 348.485541][T24938] memory+swap: usage 373344kB, limit 9007199254740988kB, failcnt 0 [ 348.489469][T24976] team1: left promiscuous mode [ 348.499389][T24938] kmem: usage 215728kB, limit 9007199254740988kB, failcnt 0 [ 348.499407][T24938] Memory cgroup stats for /syz3 [ 348.502704][T24976] team1: left allmulticast mode [ 348.505680][T24938] : [ 348.845203][T24938] cache 91045888 [ 348.851177][T24938] rss 839680 [ 348.854590][T24938] shmem 21622784 [ 348.858152][T24938] mapped_file 0 [ 348.861786][T24938] dirty 0 [ 348.864785][T24938] writeback 0 [ 348.868108][T24938] workingset_refault_anon 3915 [ 348.872891][T24938] workingset_refault_file 13821 [ 348.877879][T24938] swap 67731456 [ 348.881345][T24938] swapcached 1777664 [ 348.885277][T24938] pgpgin 593079 [ 348.888815][T24938] pgpgout 570211 [ 348.892355][T24938] pgfault 374312 [ 348.895913][T24938] pgmajfault 574 [ 348.899491][T24938] inactive_anon 5730304 [ 348.903635][T24938] active_anon 18513920 [ 348.907765][T24938] inactive_file 0 [ 348.911392][T24938] active_file 4096 [ 348.915170][T24938] unevictable 69419008 [ 348.919236][T24938] hierarchical_memory_limit 314572800 [ 348.924664][T24938] hierarchical_memsw_limit 9223372036854771712 [ 348.930821][T24938] total_cache 91045888 [ 348.934954][T24938] total_rss 839680 [ 348.938664][T24938] total_shmem 21622784 [ 348.942792][T24938] total_mapped_file 0 [ 348.946803][T24938] total_dirty 0 [ 348.950348][T24938] total_writeback 0 [ 348.954169][T24938] total_workingset_refault_anon 3915 [ 348.959499][T24938] total_workingset_refault_file 13821 [ 348.964869][T24938] total_swap 67731456 [ 348.968841][T24938] total_swapcached 1777664 [ 348.973233][T24938] total_pgpgin 593079 [ 348.977215][T24938] total_pgpgout 570211 [ 348.981270][T24938] total_pgfault 374312 [ 348.985419][T24938] total_pgmajfault 574 [ 348.989495][T24938] total_inactive_anon 5730304 [ 348.994258][T24938] total_active_anon 18513920 [ 348.998838][T24938] total_inactive_file 0 [ 349.002972][T24938] total_active_file 4096 [ 349.007223][T24938] total_unevictable 69419008 [ 349.011799][T24938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7266,pid=24921,uid=0 [ 349.026587][T24938] Memory cgroup out of memory: Killed process 24921 (syz.3.7266) total-vm:96312kB, anon-rss:1332kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 349.264583][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 349.264599][ T29] audit: type=1400 audit(2000000409.709:3748): avc: denied { watch watch_reads } for pid=25013 comm="syz.9.7303" path="/file0" dev="ramfs" ino=91084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 349.535038][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7317'. [ 349.585398][T25051] batadv_slave_1: entered promiscuous mode [ 349.591833][T25051] team0: entered promiscuous mode [ 349.597098][T25051] team_slave_0: entered promiscuous mode [ 349.603019][T25051] team_slave_1: entered promiscuous mode [ 349.648066][T25052] ip6gretap0: entered promiscuous mode [ 349.657777][T25050] ip6gretap0: left promiscuous mode [ 349.663284][T25050] team0: left promiscuous mode [ 349.668137][T25050] team_slave_0: left promiscuous mode [ 349.673595][T25050] team_slave_1: left promiscuous mode [ 349.679144][T25050] batadv_slave_1: left promiscuous mode [ 349.767374][T25065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7324'. [ 349.864989][T25075] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 349.873743][T25075] ref_ctr increment failed for inode: 0x9d5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810d19e540 [ 350.079717][T25035] syz.9.7312 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 350.093686][T25035] CPU: 1 UID: 0 PID: 25035 Comm: syz.9.7312 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 350.093725][T25035] Tainted: [W]=WARN [ 350.093733][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.093748][T25035] Call Trace: [ 350.093757][T25035] [ 350.093767][T25035] __dump_stack+0x1d/0x30 [ 350.093875][T25035] dump_stack_lvl+0x95/0xd0 [ 350.093902][T25035] dump_stack+0x15/0x1b [ 350.093945][T25035] dump_header+0x80/0x240 [ 350.093965][T25035] oom_kill_process+0x295/0x350 [ 350.093985][T25035] out_of_memory+0x97d/0xb80 [ 350.094052][T25035] try_charge_memcg+0x62e/0xa10 [ 350.094096][T25035] obj_cgroup_charge_pages+0xa6/0x150 [ 350.094124][T25035] __memcg_kmem_charge_page+0x9e/0x170 [ 350.094160][T25035] __alloc_frozen_pages_noprof+0x18a/0x350 [ 350.094191][T25035] alloc_pages_mpol+0xb3/0x260 [ 350.094223][T25035] alloc_pages_noprof+0x8f/0x130 [ 350.094267][T25035] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 350.094374][T25035] __kvmalloc_node_noprof+0x471/0x680 [ 350.094402][T25035] ? ip_set_alloc+0x24/0x30 [ 350.094427][T25035] ? ip_set_alloc+0x24/0x30 [ 350.094449][T25035] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 350.094518][T25035] ip_set_alloc+0x24/0x30 [ 350.094546][T25035] hash_netiface_create+0x282/0x740 [ 350.094578][T25035] ? __pfx_hash_netiface_create+0x10/0x10 [ 350.094604][T25035] ip_set_create+0x3cf/0x970 [ 350.094708][T25035] ? __nla_parse+0x40/0x60 [ 350.094732][T25035] nfnetlink_rcv_msg+0x509/0x5d0 [ 350.094837][T25035] netlink_rcv_skb+0x123/0x220 [ 350.094898][T25035] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 350.094994][T25035] nfnetlink_rcv+0x167/0x1720 [ 350.095024][T25035] ? __rcu_read_unlock+0x4e/0x70 [ 350.095049][T25035] ? prep_new_page+0x4f/0x1f0 [ 350.095071][T25035] ? get_page_from_freelist+0x13a5/0x1400 [ 350.095145][T25035] ? xas_create+0xb89/0xbe0 [ 350.095176][T25035] ? _raw_spin_lock+0x52/0xa0 [ 350.095210][T25035] ? _raw_spin_lock_bh+0x56/0xb0 [ 350.095302][T25035] ? should_fail_ex+0x30/0x280 [ 350.095353][T25035] ? selinux_nlmsg_lookup+0x99/0x890 [ 350.095386][T25035] ? __rcu_read_unlock+0x33/0x70 [ 350.095406][T25035] ? __netlink_lookup+0x276/0x2b0 [ 350.095435][T25035] netlink_unicast+0x5c0/0x690 [ 350.095522][T25035] netlink_sendmsg+0x5c8/0x6f0 [ 350.095552][T25035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.095583][T25035] __sock_sendmsg+0x145/0x170 [ 350.095617][T25035] ____sys_sendmsg+0x31e/0x4a0 [ 350.095651][T25035] ___sys_sendmsg+0x195/0x1e0 [ 350.095717][T25035] __x64_sys_sendmsg+0xd4/0x160 [ 350.095747][T25035] x64_sys_call+0x17ba/0x3000 [ 350.095807][T25035] do_syscall_64+0xc0/0x2a0 [ 350.095843][T25035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.095863][T25035] RIP: 0033:0x7fcd80a8acb9 [ 350.095929][T25035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.095971][T25035] RSP: 002b:00007fcd7f4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.095990][T25035] RAX: ffffffffffffffda RBX: 00007fcd80d05fa0 RCX: 00007fcd80a8acb9 [ 350.096005][T25035] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 350.096095][T25035] RBP: 00007fcd80af8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 350.096108][T25035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.096120][T25035] R13: 00007fcd80d06038 R14: 00007fcd80d05fa0 R15: 00007fffee30ca18 [ 350.096138][T25035] [ 350.428830][T25035] memory: usage 307200kB, limit 307200kB, failcnt 1820 [ 350.435696][T25035] memory+swap: usage 307816kB, limit 9007199254740988kB, failcnt 0 [ 350.443608][T25035] kmem: usage 290336kB, limit 9007199254740988kB, failcnt 0 [ 350.451003][T25035] Memory cgroup stats for /syz9: [ 350.493249][T25035] cache 16838656 [ 350.501831][T25035] rss 253952 [ 350.505090][T25035] shmem 16838656 [ 350.508637][T25035] mapped_file 0 [ 350.512100][T25035] dirty 0 [ 350.515115][T25035] writeback 0 [ 350.518569][T25035] workingset_refault_anon 2056 [ 350.523360][T25035] workingset_refault_file 1153 [ 350.528146][T25035] swap 630784 [ 350.531462][T25035] swapcached 176128 [ 350.535392][T25035] pgpgin 366081 [ 350.538848][T25035] pgpgout 361865 [ 350.542387][T25035] pgfault 285467 [ 350.546145][T25035] pgmajfault 722 [ 350.549864][T25035] inactive_anon 212992 [ 350.553978][T25035] active_anon 17055744 [ 350.558087][T25035] inactive_file 0 [ 350.561840][T25035] active_file 0 [ 350.565376][T25035] unevictable 0 [ 350.568901][T25035] hierarchical_memory_limit 314572800 [ 350.574413][T25035] hierarchical_memsw_limit 9223372036854771712 [ 350.580583][T25035] total_cache 16838656 [ 350.584737][T25035] total_rss 253952 [ 350.588451][T25035] total_shmem 16838656 [ 350.592449][T25083] loop2: detected capacity change from 0 to 128 [ 350.592576][T25035] total_mapped_file 0 [ 350.602837][T25035] total_dirty 0 [ 350.606331][T25035] total_writeback 0 [ 350.610220][T25035] total_workingset_refault_anon 2056 [ 350.615567][T25035] total_workingset_refault_file 1153 [ 350.620893][T25035] total_swap 630784 [ 350.624808][T25035] total_swapcached 176128 [ 350.629323][T25035] total_pgpgin 366081 [ 350.633336][T25035] total_pgpgout 361865 [ 350.637441][T25035] total_pgfault 285467 [ 350.641501][T25035] total_pgmajfault 722 [ 350.645605][T25035] total_inactive_anon 212992 [ 350.650190][T25035] total_active_anon 17055744 [ 350.654871][T25035] total_inactive_file 0 [ 350.659018][T25035] total_active_file 0 [ 350.662994][T25035] total_unevictable 0 [ 350.667015][T25035] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3005,pid=12563,uid=0 [ 350.681737][T25035] Memory cgroup out of memory: Killed process 12563 (syz.9.3005) total-vm:94000kB, anon-rss:1240kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 350.716188][ T9976] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 350.727220][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 350.727256][ T9976] Tainted: [W]=WARN [ 350.727264][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.727276][ T9976] Call Trace: [ 350.727282][ T9976] [ 350.727288][ T9976] __dump_stack+0x1d/0x30 [ 350.727371][ T9976] dump_stack_lvl+0x95/0xd0 [ 350.727423][ T9976] dump_stack+0x15/0x1b [ 350.727508][ T9976] dump_header+0x80/0x240 [ 350.727527][ T9976] oom_kill_process+0x295/0x350 [ 350.727562][ T9976] out_of_memory+0x97d/0xb80 [ 350.727580][ T9976] try_charge_memcg+0x62e/0xa10 [ 350.727617][ T9976] charge_memcg+0x51/0xc0 [ 350.727661][ T9976] __mem_cgroup_charge+0x28/0xb0 [ 350.727690][ T9976] filemap_add_folio+0x110/0x350 [ 350.727782][ T9976] __filemap_get_folio_mpol+0x326/0x680 [ 350.727866][ T9976] filemap_fault+0x473/0xbb0 [ 350.727890][ T9976] __do_fault+0xbc/0x200 [ 350.727919][ T9976] handle_mm_fault+0x11d7/0x3030 [ 350.727950][ T9976] ? vma_start_read+0x1c7/0x2c0 [ 350.727977][ T9976] do_user_addr_fault+0x62f/0x1050 [ 350.728008][ T9976] exc_page_fault+0x62/0xa0 [ 350.728029][ T9976] asm_exc_page_fault+0x26/0x30 [ 350.728105][ T9976] RIP: 0033:0x7fcd80958db4 [ 350.728119][ T9976] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 350.728135][ T9976] RSP: 002b:00007fffee30cd80 EFLAGS: 00010206 [ 350.728214][ T9976] RAX: 0000001b34324000 RBX: 00000000000009ad RCX: 0000000000055730 [ 350.728229][ T9976] RDX: 000000000104228f RSI: 00007fffee30ce10 RDI: 0000000000000001 [ 350.728243][ T9976] RBP: 00007fffee30cdbc R08: 0000000003e05615 R09: 7fffffffffffffff [ 350.728259][ T9976] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 350.728274][ T9976] R13: 00000000000927c0 R14: 0000000000055578 R15: 00007fffee30ce10 [ 350.728293][ T9976] [ 350.728300][ T9976] memory: usage 307200kB, limit 307200kB, failcnt 1843 [ 350.928442][ T9976] memory+swap: usage 307780kB, limit 9007199254740988kB, failcnt 0 [ 350.936403][ T9976] kmem: usage 290444kB, limit 9007199254740988kB, failcnt 0 [ 350.943699][ T9976] Memory cgroup stats for /syz9: [ 351.013223][ T9976] cache 16756736 [ 351.021898][ T9976] rss 163840 [ 351.025182][ T9976] shmem 16756736 [ 351.028773][ T9976] mapped_file 0 [ 351.032218][ T9976] dirty 0 [ 351.035177][ T9976] writeback 90112 [ 351.038809][ T9976] workingset_refault_anon 2056 [ 351.043568][ T9976] workingset_refault_file 1153 [ 351.048386][ T9976] swap 712704 [ 351.051672][ T9976] swapcached 90112 [ 351.055456][ T9976] pgpgin 366081 [ 351.058941][ T9976] pgpgout 361928 [ 351.062554][ T9976] pgfault 285469 [ 351.066476][ T9976] pgmajfault 723 [ 351.070017][ T9976] inactive_anon 229376 [ 351.074110][ T9976] active_anon 16781312 [ 351.078173][ T9976] inactive_file 0 [ 351.081802][ T9976] active_file 0 [ 351.085352][ T9976] unevictable 0 [ 351.088802][ T9976] hierarchical_memory_limit 314572800 [ 351.094200][ T9976] hierarchical_memsw_limit 9223372036854771712 [ 351.100348][ T9976] total_cache 16756736 [ 351.104435][ T9976] total_rss 163840 [ 351.108188][ T9976] total_shmem 16756736 [ 351.112333][ T9976] total_mapped_file 0 [ 351.116339][ T9976] total_dirty 0 [ 351.119904][ T9976] total_writeback 90112 [ 351.124047][ T9976] total_workingset_refault_anon 2056 [ 351.129449][ T9976] total_workingset_refault_file 1153 [ 351.134810][ T9976] total_swap 712704 [ 351.138617][ T9976] total_swapcached 90112 [ 351.142892][ T9976] total_pgpgin 366081 [ 351.146909][ T9976] total_pgpgout 361928 [ 351.150974][ T9976] total_pgfault 285469 [ 351.155092][ T9976] total_pgmajfault 723 [ 351.159181][ T9976] total_inactive_anon 229376 [ 351.163767][ T9976] total_active_anon 16781312 [ 351.168415][ T9976] total_inactive_file 0 [ 351.172719][ T9976] total_active_file 0 [ 351.174162][ T29] audit: type=1400 audit(2000000411.599:3749): avc: denied { create } for pid=25096 comm="syz.2.7337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 351.176727][ T9976] total_unevictable 0 [ 351.200557][ T9976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3661,pid=14761,uid=0 [ 351.215383][ T9976] Memory cgroup out of memory: Killed process 14761 (syz.9.3661) total-vm:94000kB, anon-rss:1216kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 351.288481][T25035] syz.9.7312 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 351.302646][T25035] CPU: 1 UID: 0 PID: 25035 Comm: syz.9.7312 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.302677][T25035] Tainted: [W]=WARN [ 351.302684][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.302696][T25035] Call Trace: [ 351.302702][T25035] [ 351.302711][T25035] __dump_stack+0x1d/0x30 [ 351.302787][T25035] dump_stack_lvl+0x95/0xd0 [ 351.302807][T25035] dump_stack+0x15/0x1b [ 351.302842][T25035] dump_header+0x80/0x240 [ 351.302866][T25035] oom_kill_process+0x295/0x350 [ 351.302920][T25035] out_of_memory+0x97d/0xb80 [ 351.302947][T25035] try_charge_memcg+0x62e/0xa10 [ 351.303119][T25035] obj_cgroup_charge_pages+0xa6/0x150 [ 351.303157][T25035] __memcg_kmem_charge_page+0x9e/0x170 [ 351.303187][T25035] __alloc_frozen_pages_noprof+0x18a/0x350 [ 351.303220][T25035] alloc_pages_mpol+0xb3/0x260 [ 351.303265][T25035] alloc_pages_noprof+0x8f/0x130 [ 351.303292][T25035] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 351.303360][T25035] __kvmalloc_node_noprof+0x471/0x680 [ 351.303388][T25035] ? ip_set_alloc+0x24/0x30 [ 351.303475][T25035] ? ip_set_alloc+0x24/0x30 [ 351.303497][T25035] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 351.303593][T25035] ip_set_alloc+0x24/0x30 [ 351.303615][T25035] hash_netiface_create+0x282/0x740 [ 351.303647][T25035] ? __pfx_hash_netiface_create+0x10/0x10 [ 351.303678][T25035] ip_set_create+0x3cf/0x970 [ 351.303777][T25035] ? __nla_parse+0x40/0x60 [ 351.303806][T25035] nfnetlink_rcv_msg+0x509/0x5d0 [ 351.303853][T25035] netlink_rcv_skb+0x123/0x220 [ 351.303885][T25035] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 351.303914][T25035] nfnetlink_rcv+0x167/0x1720 [ 351.304015][T25035] ? __rcu_read_unlock+0x4e/0x70 [ 351.304099][T25035] ? prep_new_page+0x4f/0x1f0 [ 351.304120][T25035] ? get_page_from_freelist+0x13a5/0x1400 [ 351.304148][T25035] ? xas_create+0xb89/0xbe0 [ 351.304329][T25035] ? _raw_spin_lock+0x52/0xa0 [ 351.304358][T25035] ? _raw_spin_lock_bh+0x56/0xb0 [ 351.304411][T25035] ? should_fail_ex+0x30/0x280 [ 351.304436][T25035] ? selinux_nlmsg_lookup+0x99/0x890 [ 351.304463][T25035] ? __rcu_read_unlock+0x33/0x70 [ 351.304480][T25035] ? __netlink_lookup+0x276/0x2b0 [ 351.304517][T25035] netlink_unicast+0x5c0/0x690 [ 351.304546][T25035] netlink_sendmsg+0x5c8/0x6f0 [ 351.304576][T25035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.304643][T25035] __sock_sendmsg+0x145/0x170 [ 351.304677][T25035] ____sys_sendmsg+0x31e/0x4a0 [ 351.304704][T25035] ___sys_sendmsg+0x195/0x1e0 [ 351.304767][T25035] __x64_sys_sendmsg+0xd4/0x160 [ 351.304797][T25035] x64_sys_call+0x17ba/0x3000 [ 351.304821][T25035] do_syscall_64+0xc0/0x2a0 [ 351.304847][T25035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.304951][T25035] RIP: 0033:0x7fcd80a8acb9 [ 351.304970][T25035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.304988][T25035] RSP: 002b:00007fcd7f4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.305008][T25035] RAX: ffffffffffffffda RBX: 00007fcd80d05fa0 RCX: 00007fcd80a8acb9 [ 351.305023][T25035] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 351.305053][T25035] RBP: 00007fcd80af8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 351.305065][T25035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.305077][T25035] R13: 00007fcd80d06038 R14: 00007fcd80d05fa0 R15: 00007fffee30ca18 [ 351.305096][T25035] [ 351.637799][T25035] memory: usage 307200kB, limit 307200kB, failcnt 2020 [ 351.644822][T25035] memory+swap: usage 307880kB, limit 9007199254740988kB, failcnt 0 [ 351.647578][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7339'. [ 351.652752][T25035] kmem: usage 290580kB, limit 9007199254740988kB, failcnt 0 [ 351.652771][T25035] Memory cgroup stats for /syz9: [ 351.669442][T25035] cache 16760832 [ 351.678076][T25035] rss 16384 [ 351.681186][T25035] shmem 16756736 [ 351.684813][T25035] mapped_file 4096 [ 351.688534][T25035] dirty 0 [ 351.691565][T25035] writeback 118784 [ 351.695408][T25035] workingset_refault_anon 2056 [ 351.700164][T25035] workingset_refault_file 1154 [ 351.705121][T25035] swap 696320 [ 351.708399][T25035] swapcached 147456 [ 351.712199][T25035] pgpgin 366082 [ 351.715765][T25035] pgpgout 361950 [ 351.719304][T25035] pgfault 285470 [ 351.722840][T25035] pgmajfault 723 [ 351.726502][T25035] inactive_anon 12288 [ 351.730491][T25035] active_anon 16908288 [ 351.734653][T25035] inactive_file 0 [ 351.738280][T25035] active_file 0 [ 351.741769][T25035] unevictable 0 [ 351.745311][T25035] hierarchical_memory_limit 314572800 [ 351.750752][T25035] hierarchical_memsw_limit 9223372036854771712 [ 351.757070][T25035] total_cache 16760832 [ 351.761185][T25035] total_rss 16384 [ 351.764926][T25035] total_shmem 16756736 [ 351.768984][T25035] total_mapped_file 4096 [ 351.773293][T25035] total_dirty 0 [ 351.776872][T25035] total_writeback 118784 [ 351.781105][T25035] total_workingset_refault_anon 2056 [ 351.786547][T25035] total_workingset_refault_file 1154 [ 351.791824][T25035] total_swap 696320 [ 351.795746][T25035] total_swapcached 147456 [ 351.800063][T25035] total_pgpgin 366082 [ 351.804047][T25035] total_pgpgout 361950 [ 351.808218][T25035] total_pgfault 285470 [ 351.812275][T25035] total_pgmajfault 723 [ 351.816513][T25035] total_inactive_anon 12288 [ 351.821066][T25035] total_active_anon 16908288 [ 351.825741][T25035] total_inactive_file 0 [ 351.829885][T25035] total_active_file 0 [ 351.833857][T25035] total_unevictable 0 [ 351.837910][T25035] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2651,pid=11202,uid=0 [ 351.852675][T25035] Memory cgroup out of memory: Killed process 11202 (syz.9.2651) total-vm:96048kB, anon-rss:1216kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 351.950843][T25118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7344'. [ 352.017861][T25120] netem: change failed [ 352.020971][ T29] audit: type=1400 audit(2000000412.469:3750): avc: denied { bind } for pid=25126 comm="syz.3.7348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 352.022106][T25127] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7347'. [ 352.573760][T25172] ip6gre2: entered promiscuous mode [ 352.579051][T25172] ip6gre2: entered allmulticast mode [ 352.716872][T25189] batadv_slave_1: entered promiscuous mode [ 352.740839][T25189] team0: entered promiscuous mode [ 352.746031][T25189] team_slave_0: entered promiscuous mode [ 352.751791][T25189] team_slave_1: entered promiscuous mode [ 352.758511][ T29] audit: type=1400 audit(2000000413.199:3751): avc: denied { bind } for pid=25191 comm="syz.1.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.791643][T25189] dummy0: entered promiscuous mode [ 352.798657][T25187] team0: left promiscuous mode [ 352.801250][T25161] syz.5.7359 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 352.803546][T25187] team_slave_0: left promiscuous mode [ 352.817318][T25161] CPU: 0 UID: 0 PID: 25161 Comm: syz.5.7359 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 352.817354][T25161] Tainted: [W]=WARN [ 352.817362][T25161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.817382][T25161] Call Trace: [ 352.817391][T25161] [ 352.817403][T25161] __dump_stack+0x1d/0x30 [ 352.817430][T25161] dump_stack_lvl+0x95/0xd0 [ 352.817454][T25161] dump_stack+0x15/0x1b [ 352.817532][T25161] dump_header+0x80/0x240 [ 352.817554][T25161] oom_kill_process+0x295/0x350 [ 352.817578][T25161] out_of_memory+0x97d/0xb80 [ 352.817603][T25161] try_charge_memcg+0x62e/0xa10 [ 352.817737][T25161] obj_cgroup_charge_pages+0xa6/0x150 [ 352.817767][T25161] __memcg_kmem_charge_page+0x9e/0x170 [ 352.817798][T25161] __alloc_frozen_pages_noprof+0x18a/0x350 [ 352.817840][T25161] alloc_pages_mpol+0xb3/0x260 [ 352.817870][T25161] alloc_pages_noprof+0x8f/0x130 [ 352.817897][T25161] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 352.817934][T25161] __kvmalloc_node_noprof+0x471/0x680 [ 352.818086][T25161] ? ip_set_alloc+0x24/0x30 [ 352.818113][T25161] ? ip_set_alloc+0x24/0x30 [ 352.818138][T25161] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 352.818168][T25161] ip_set_alloc+0x24/0x30 [ 352.818194][T25161] hash_netiface_create+0x282/0x740 [ 352.818242][T25161] ? __pfx_hash_netiface_create+0x10/0x10 [ 352.818271][T25161] ip_set_create+0x3cf/0x970 [ 352.818357][T25161] ? __nla_parse+0x40/0x60 [ 352.818388][T25161] nfnetlink_rcv_msg+0x509/0x5d0 [ 352.818431][T25161] netlink_rcv_skb+0x123/0x220 [ 352.818502][T25161] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 352.818542][T25161] nfnetlink_rcv+0x167/0x1720 [ 352.818606][T25161] ? __kfree_skb+0x109/0x150 [ 352.818628][T25161] ? nlmon_xmit+0x4f/0x60 [ 352.818654][T25161] ? consume_skb+0x49/0x140 [ 352.818675][T25161] ? nlmon_xmit+0x4f/0x60 [ 352.818695][T25161] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 352.818723][T25161] ? __dev_queue_xmit+0x139a/0x1f20 [ 352.818748][T25161] ? __dev_queue_xmit+0x148/0x1f20 [ 352.818852][T25161] ? ref_tracker_free+0x37d/0x3e0 [ 352.818914][T25161] ? __netlink_deliver_tap+0x4dc/0x500 [ 352.818945][T25161] netlink_unicast+0x5c0/0x690 [ 352.818972][T25161] netlink_sendmsg+0x5c8/0x6f0 [ 352.819066][T25161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.819095][T25161] __sock_sendmsg+0x145/0x170 [ 352.819202][T25161] ____sys_sendmsg+0x31e/0x4a0 [ 352.819231][T25161] ___sys_sendmsg+0x195/0x1e0 [ 352.819268][T25161] __x64_sys_sendmsg+0xd4/0x160 [ 352.819298][T25161] x64_sys_call+0x17ba/0x3000 [ 352.819350][T25161] do_syscall_64+0xc0/0x2a0 [ 352.819388][T25161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.819411][T25161] RIP: 0033:0x7f039bbcacb9 [ 352.819470][T25161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.819490][T25161] RSP: 002b:00007f039a5e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.819534][T25161] RAX: ffffffffffffffda RBX: 00007f039be46180 RCX: 00007f039bbcacb9 [ 352.819550][T25161] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 352.819564][T25161] RBP: 00007f039bc38bf7 R08: 0000000000000000 R09: 0000000000000000 [ 352.819615][T25161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.819628][T25161] R13: 00007f039be46218 R14: 00007f039be46180 R15: 00007fff71c92068 [ 352.819650][T25161] [ 352.819658][T25161] memory: usage 307200kB, limit 307200kB, failcnt 1929 [ 352.822844][T25187] team_slave_1: left promiscuous mode [ 352.834117][T25161] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0 [ 352.863294][T25187] dummy0: left promiscuous mode [ 352.863618][T25161] kmem: usage 224668kB, limit 9007199254740988kB, failcnt 0 [ 352.867993][T25187] batadv_slave_1: left promiscuous mode [ 352.872118][T25161] Memory cgroup stats for /syz5: [ 352.929489][T25161] cache 84131840 [ 353.201605][T25161] rss 188416 [ 353.204969][T25161] shmem 16777216 [ 353.208713][T25161] mapped_file 0 [ 353.212174][T25161] dirty 0 [ 353.215154][T25161] writeback 0 [ 353.218519][T25161] workingset_refault_anon 2675 [ 353.223275][T25161] workingset_refault_file 128 [ 353.227982][T25161] swap 319488 [ 353.231260][T25161] swapcached 188416 [ 353.235090][T25161] pgpgin 300698 [ 353.238626][T25161] pgpgout 280065 [ 353.242156][T25161] pgfault 249480 [ 353.245819][T25161] pgmajfault 528 [ 353.249360][T25161] inactive_anon 204800 [ 353.253450][T25161] active_anon 16949248 [ 353.257675][T25161] inactive_file 40960 [ 353.261681][T25161] active_file 0 [ 353.265181][T25161] unevictable 67317760 [ 353.269365][T25161] hierarchical_memory_limit 314572800 [ 353.274796][T25161] hierarchical_memsw_limit 9223372036854771712 [ 353.280943][T25161] total_cache 84131840 [ 353.285025][T25161] total_rss 188416 [ 353.288745][T25161] total_shmem 16777216 [ 353.292880][T25161] total_mapped_file 0 [ 353.296878][T25161] total_dirty 0 [ 353.300328][T25161] total_writeback 0 [ 353.304156][T25161] total_workingset_refault_anon 2675 [ 353.309503][T25161] total_workingset_refault_file 128 [ 353.314717][T25161] total_swap 319488 [ 353.318518][T25161] total_swapcached 188416 [ 353.322860][T25161] total_pgpgin 300698 [ 353.326861][T25161] total_pgpgout 280065 [ 353.331026][T25161] total_pgfault 249480 [ 353.335207][T25161] total_pgmajfault 528 [ 353.339313][T25161] total_inactive_anon 204800 [ 353.343891][T25161] total_active_anon 16949248 [ 353.348500][T25161] total_inactive_file 40960 [ 353.352989][T25161] total_active_file 0 [ 353.356990][T25161] total_unevictable 67317760 [ 353.361641][T25161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7359,pid=25151,uid=0 [ 353.376397][T25161] Memory cgroup out of memory: Killed process 25151 (syz.5.7359) total-vm:96312kB, anon-rss:1280kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 353.729195][ T29] audit: type=1326 audit(2000000414.139:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25240 comm="syz.3.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 353.752881][ T29] audit: type=1326 audit(2000000414.139:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25240 comm="syz.3.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 353.776404][ T29] audit: type=1326 audit(2000000414.139:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25240 comm="syz.3.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 353.800211][ T29] audit: type=1326 audit(2000000414.139:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25240 comm="syz.3.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 353.823741][ T29] audit: type=1326 audit(2000000414.139:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25240 comm="syz.3.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 353.847453][ T29] audit: type=1326 audit(2000000414.139:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25240 comm="syz.3.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 353.908957][T25248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7400'. [ 354.030437][T25255] netlink: 'syz.3.7402': attribute type 39 has an invalid length. [ 354.098853][T25248] batman_adv: batadv0: Interface deactivated: dummy0 [ 354.415497][T25300] netlink: 'syz.2.7418': attribute type 13 has an invalid length. [ 354.423367][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'. [ 354.439376][T25300] netlink: 'syz.2.7418': attribute type 13 has an invalid length. [ 354.447371][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'. [ 354.668818][T25316] ip6gre2: entered promiscuous mode [ 354.674391][T25316] ip6gre2: entered allmulticast mode [ 354.730678][T25318] loop2: detected capacity change from 0 to 512 [ 354.737924][T25318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.749444][T25318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 354.757493][T25318] System zones: 1-12 [ 354.767944][T25318] EXT4-fs (loop2): 1 truncate cleaned up [ 354.778842][T25318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.876966][T25325] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7428'. [ 354.935743][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.174829][T25341] netlink: 'syz.1.7435': attribute type 39 has an invalid length. [ 355.391764][T25353] netlink: 'syz.2.7440': attribute type 39 has an invalid length. [ 355.672039][T25395] netlink: 'syz.5.7459': attribute type 39 has an invalid length. [ 355.800889][T25403] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7456'. [ 356.751874][T25459] sit0: Caught tx_queue_len zero misconfig [ 356.953232][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7489'. [ 356.997608][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7489'. [ 357.921255][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 357.921273][ T29] audit: type=1400 audit(2000000418.359:3793): avc: denied { getopt } for pid=25508 comm="syz.5.7504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.354576][T25527] netlink: 'syz.5.7510': attribute type 1 has an invalid length. [ 358.596808][T25540] 9p: Bad value for 'wfdno' [ 358.862925][T25557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7521'. [ 358.953706][T25557] team2: entered promiscuous mode [ 358.958812][T25557] team2: entered allmulticast mode [ 359.538190][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7531'. [ 359.553030][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7531'. [ 359.601862][T25580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7534'. [ 359.793041][T25595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7539'. [ 359.967168][ T29] audit: type=1400 audit(2000000420.419:3794): avc: denied { bind } for pid=25608 comm="syz.9.7545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 359.987788][ T3489] kernel write not supported for file bpf-prog (pid: 3489 comm: kworker/0:7) [ 360.147288][ T3489] Process accounting resumed [ 360.152496][T25623] FAT-fs (loop7): unable to read boot sector [ 360.566440][T25654] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 360.578991][ T29] audit: type=1326 audit(2000000421.029:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.602544][ T29] audit: type=1326 audit(2000000421.029:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.626370][ T29] audit: type=1326 audit(2000000421.029:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.633639][T25664] loop2: detected capacity change from 0 to 256 [ 360.649992][ T29] audit: type=1326 audit(2000000421.029:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.679687][ T29] audit: type=1326 audit(2000000421.029:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.703212][ T29] audit: type=1326 audit(2000000421.029:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.726762][ T29] audit: type=1326 audit(2000000421.029:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.750261][ T29] audit: type=1326 audit(2000000421.029:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25658 comm="syz.9.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd80a8acb9 code=0x7ffc0000 [ 360.760680][T25664] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.242782][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7578'. [ 361.273056][T25694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7579'. [ 361.487116][T25704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7583'. [ 361.527525][T25704] team1: entered promiscuous mode [ 361.532681][T25704] team1: entered allmulticast mode [ 361.708791][T25729] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 361.839438][T25758] netlink: 'syz.3.7607': attribute type 10 has an invalid length. [ 361.847793][T25758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7607'. [ 361.857639][T25758] dummy0: entered promiscuous mode [ 361.862839][T25758] dummy0: entered allmulticast mode [ 361.869476][T25758] bond0: (slave dummy0): Releasing backup interface [ 361.884460][T25758] bridge0: port 1(dummy0) entered blocking state [ 361.891064][T25758] bridge0: port 1(dummy0) entered disabled state [ 362.009749][T25772] netlink: 'syz.3.7614': attribute type 1 has an invalid length. [ 362.019268][T15237] bond0 (unregistering): Released all slaves [ 362.054672][T25772] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.062120][T25776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7616'. [ 362.071473][T25772] dummy0: left allmulticast mode [ 362.076973][T25772] dummy0: left promiscuous mode [ 362.082083][T25772] bridge0: port 1(dummy0) entered disabled state [ 362.093676][T25772] bond6: (slave dummy0): making interface the new active one [ 362.103409][T25772] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 362.116320][T15237] hsr_slave_0: left promiscuous mode [ 362.122217][T15237] hsr_slave_1: left promiscuous mode [ 362.128472][T15237] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 362.135381][T15237] batman_adv: batadv0: Removing interface: ipvlan2 [ 362.212644][T25772] bond6: entered promiscuous mode [ 362.217990][T25772] dummy0: entered promiscuous mode [ 362.238386][T25771] bond6: left promiscuous mode [ 362.243749][T25771] dummy0: left promiscuous mode [ 362.513341][T15237] IPVS: stop unused estimator thread 0... [ 362.557965][T25801] net_ratelimit: 12 callbacks suppressed [ 362.557980][T25801] openvswitch: netlink: Missing key (keys=40, expected=100) [ 362.586078][T25803] loop2: detected capacity change from 0 to 1024 [ 362.592864][T25803] EXT4-fs: Ignoring removed bh option [ 362.605584][T25803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.646282][T25803] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.7624: Allocating blocks 497-513 which overlap fs metadata [ 362.663819][T25803] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.7624: Allocating blocks 497-513 which overlap fs metadata [ 362.680364][T25807] EXT4-fs (loop2): pa ffff888107e71770: logic 48, phys. 177, len 21 [ 362.688843][T25807] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 362.718232][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.725989][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7627'. [ 363.231816][T25855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 363.508036][T25822] cgroup: fork rejected by pids controller in /syz9 [ 363.763523][T25911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7652'. [ 363.902938][T25917] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7654'. [ 363.990838][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 363.990855][ T29] audit: type=1326 audit(2000000424.439:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 364.046652][ T29] audit: type=1326 audit(2000000424.479:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 364.070246][ T29] audit: type=1326 audit(2000000424.479:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 364.093833][ T29] audit: type=1326 audit(2000000424.479:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9127fbacb9 code=0x7ffc0000 [ 364.117449][ T29] audit: type=1326 audit(2000000424.479:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9127fbaa22 code=0x7ffc0000 [ 364.140974][ T29] audit: type=1326 audit(2000000424.479:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9127f7b58e code=0x7ffc0000 [ 364.164630][ T29] audit: type=1326 audit(2000000424.479:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9127fbaae7 code=0x7ffc0000 [ 364.168610][T25939] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 364.188196][ T29] audit: type=1326 audit(2000000424.479:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9127f7b58e code=0x7ffc0000 [ 364.188225][ T29] audit: type=1326 audit(2000000424.479:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9127fba94b code=0x7ffc0000 [ 364.188249][ T29] audit: type=1326 audit(2000000424.479:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25925 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9127f7b58e code=0x7ffc0000 [ 364.238671][T25939] SELinux: failed to load policy [ 364.306519][T25947] openvswitch: netlink: Missing key (keys=40, expected=100) [ 364.626731][T25973] netlink: 'syz.2.7674': attribute type 1 has an invalid length. [ 364.649953][T25973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.659458][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7674'. [ 364.670210][T25973] bond5 (unregistering): Released all slaves [ 364.769859][T25977] bond5: entered allmulticast mode [ 364.807178][T25977] ip6gretap1: entered allmulticast mode [ 364.812982][T25977] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 364.848656][T25980] bond5: entered promiscuous mode [ 364.857810][T25980] ip6gre3: entered promiscuous mode [ 364.863028][T25980] ip6gre3: entered allmulticast mode [ 364.920458][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.939592][T25980] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 364.960920][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.980126][T25980] bond5: (slave ip6gre3): Error -95 calling set_mac_address [ 365.048406][T25959] syz.1.7669 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 365.062431][T25959] CPU: 0 UID: 0 PID: 25959 Comm: syz.1.7669 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.062530][T25959] Tainted: [W]=WARN [ 365.062601][T25959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.062616][T25959] Call Trace: [ 365.062624][T25959] [ 365.062633][T25959] __dump_stack+0x1d/0x30 [ 365.062717][T25959] dump_stack_lvl+0x95/0xd0 [ 365.062741][T25959] dump_stack+0x15/0x1b [ 365.062789][T25959] dump_header+0x80/0x240 [ 365.062809][T25959] oom_kill_process+0x295/0x350 [ 365.062830][T25959] out_of_memory+0x97d/0xb80 [ 365.062852][T25959] try_charge_memcg+0x62e/0xa10 [ 365.062914][T25959] obj_cgroup_charge_pages+0xa6/0x150 [ 365.062945][T25959] __memcg_kmem_charge_page+0x9e/0x170 [ 365.062978][T25959] __alloc_frozen_pages_noprof+0x18a/0x350 [ 365.063013][T25959] alloc_pages_mpol+0xb3/0x260 [ 365.063068][T25959] alloc_pages_noprof+0x8f/0x130 [ 365.063101][T25959] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 365.063159][T25959] __kvmalloc_node_noprof+0x471/0x680 [ 365.063235][T25959] ? ip_set_alloc+0x24/0x30 [ 365.063264][T25959] ? ip_set_alloc+0x24/0x30 [ 365.063291][T25959] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 365.063317][T25959] ip_set_alloc+0x24/0x30 [ 365.063370][T25959] hash_netiface_create+0x282/0x740 [ 365.063406][T25959] ? __pfx_hash_netiface_create+0x10/0x10 [ 365.063511][T25959] ip_set_create+0x3cf/0x970 [ 365.063606][T25959] ? __nla_parse+0x40/0x60 [ 365.063639][T25959] nfnetlink_rcv_msg+0x509/0x5d0 [ 365.063684][T25959] netlink_rcv_skb+0x123/0x220 [ 365.063711][T25959] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 365.063743][T25959] nfnetlink_rcv+0x167/0x1720 [ 365.063804][T25959] ? xas_load+0x405/0x430 [ 365.063826][T25959] ? find_get_entry+0x36c/0x380 [ 365.063850][T25959] ? __rcu_read_unlock+0x4e/0x70 [ 365.063871][T25959] ? percpu_counter_add_batch+0xb6/0x130 [ 365.063964][T25959] ? shmem_recalc_inode+0x1d1/0x1f0 [ 365.063991][T25959] ? mas_wr_walk_descend+0x36e/0x470 [ 365.064017][T25959] ? mas_wr_store_type+0xa75/0xcd0 [ 365.064089][T25959] ? _raw_spin_lock_bh+0x56/0xb0 [ 365.064119][T25959] ? should_fail_ex+0x30/0x280 [ 365.064139][T25959] ? selinux_nlmsg_lookup+0x99/0x890 [ 365.064243][T25959] ? __rcu_read_unlock+0x33/0x70 [ 365.064261][T25959] ? __netlink_lookup+0x276/0x2b0 [ 365.064290][T25959] netlink_unicast+0x5c0/0x690 [ 365.064313][T25959] netlink_sendmsg+0x5c8/0x6f0 [ 365.064406][T25959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.064438][T25959] __sock_sendmsg+0x145/0x170 [ 365.064529][T25959] ____sys_sendmsg+0x31e/0x4a0 [ 365.064593][T25959] ___sys_sendmsg+0x195/0x1e0 [ 365.064629][T25959] __x64_sys_sendmsg+0xd4/0x160 [ 365.064659][T25959] x64_sys_call+0x17ba/0x3000 [ 365.064691][T25959] do_syscall_64+0xc0/0x2a0 [ 365.064721][T25959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.064810][T25959] RIP: 0033:0x7f9127fbacb9 [ 365.064825][T25959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.064843][T25959] RSP: 002b:00007f9126a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.064863][T25959] RAX: ffffffffffffffda RBX: 00007f9128235fa0 RCX: 00007f9127fbacb9 [ 365.064944][T25959] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 365.064959][T25959] RBP: 00007f9128028bf7 R08: 0000000000000000 R09: 0000000000000000 [ 365.064973][T25959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.065034][T25959] R13: 00007f9128236038 R14: 00007f9128235fa0 R15: 00007fffc0d28338 [ 365.065057][T25959] [ 365.408648][T25959] memory: usage 307200kB, limit 307200kB, failcnt 316 [ 365.415479][T25959] memory+swap: usage 359292kB, limit 9007199254740988kB, failcnt 0 [ 365.423412][T25959] kmem: usage 281612kB, limit 9007199254740988kB, failcnt 0 [ 365.430745][T25959] Memory cgroup stats for /syz1: [ 365.436704][T25959] cache 22167552 [ 365.445334][T25959] rss 348160 [ 365.448534][T25959] shmem 22167552 [ 365.452082][T25959] mapped_file 11755520 [ 365.456287][T25959] dirty 0 [ 365.459277][T25959] writeback 0 [ 365.462648][T25959] workingset_refault_anon 2139 [ 365.467483][T25959] workingset_refault_file 0 [ 365.471987][T25959] swap 53342208 [ 365.475490][T25959] swapcached 3674112 [ 365.479436][T25959] pgpgin 356419 [ 365.482896][T25959] pgpgout 350022 [ 365.486492][T25959] pgfault 335506 [ 365.490033][T25959] pgmajfault 384 [ 365.493643][T25959] inactive_anon 1425408 [ 365.497891][T25959] active_anon 24764416 [ 365.501958][T25959] inactive_file 0 [ 365.505695][T25959] active_file 12288 [ 365.509500][T25959] unevictable 0 [ 365.512942][T25959] hierarchical_memory_limit 314572800 [ 365.518351][T25959] hierarchical_memsw_limit 9223372036854771712 [ 365.524544][T25959] total_cache 22167552 [ 365.528606][T25959] total_rss 348160 [ 365.532314][T25959] total_shmem 22167552 [ 365.536429][T25959] total_mapped_file 11755520 [ 365.541043][T25959] total_dirty 0 [ 365.544524][T25959] total_writeback 0 [ 365.548371][T25959] total_workingset_refault_anon 2139 [ 365.553649][T25959] total_workingset_refault_file 0 [ 365.558724][T25959] total_swap 53342208 [ 365.562693][T25959] total_swapcached 3674112 [ 365.567166][T25959] total_pgpgin 356419 [ 365.571167][T25959] total_pgpgout 350022 [ 365.575314][T25959] total_pgfault 335506 [ 365.579399][T25959] total_pgmajfault 384 [ 365.583532][T25959] total_inactive_anon 1425408 [ 365.588232][T25959] total_active_anon 24764416 [ 365.592813][T25959] total_inactive_file 0 [ 365.597015][T25959] total_active_file 12288 [ 365.601363][T25959] total_unevictable 0 [ 365.605422][T25959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7669,pid=25958,uid=0 [ 365.620173][T25959] Memory cgroup out of memory: Killed process 25959 (syz.1.7669) total-vm:94264kB, anon-rss:1332kB, file-rss:22348kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:0 [ 365.656315][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7679'. [ 365.706404][T25991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7679'. [ 365.826851][T26003] netlink: 'syz.9.7684': attribute type 1 has an invalid length. [ 365.834682][T25999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7682'. [ 365.906965][T26003] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.915334][T26010] bond0: (slave dummy0): Releasing backup interface [ 365.927560][T26010] bond6: (slave dummy0): making interface the new active one [ 365.937000][T26010] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 365.995976][T26003] bond6: entered promiscuous mode [ 366.016337][T26003] dummy0: entered promiscuous mode [ 366.066628][T26002] bond6: left promiscuous mode [ 366.077424][T26002] dummy0: left promiscuous mode [ 366.106987][T26030] netlink: 176 bytes leftover after parsing attributes in process `syz.9.7693'. [ 366.472946][T26062] bond7: entered allmulticast mode [ 366.522486][T26062] ip6gretap1: entered allmulticast mode [ 366.576621][T26062] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 366.624515][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.644831][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.664215][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.677579][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.690374][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.704546][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.717428][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.730363][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.743303][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.756982][T26087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26087 comm=syz.9.7703 [ 366.944336][T26126] netlink: 'syz.5.7704': attribute type 1 has an invalid length. [ 366.964550][T26126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.994405][T26126] bond2: (slave dummy0): making interface the new active one [ 367.003360][T26126] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 367.028676][T26126] bond2: entered promiscuous mode [ 367.035288][T26124] bond2: left promiscuous mode [ 367.041672][T26139] netlink: 'syz.3.7707': attribute type 1 has an invalid length. [ 367.055529][T26139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.075772][T26139] __nla_validate_parse: 2 callbacks suppressed [ 367.075791][T26139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7707'. [ 367.092531][T26139] bond7 (unregistering): Released all slaves [ 367.116858][T26143] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7708'. [ 367.126417][T26143] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7708'. [ 367.446836][T26208] loop2: detected capacity change from 0 to 512 [ 367.466458][T26208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.479389][T26208] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.490144][T26214] veth1_to_bond: entered promiscuous mode [ 367.492631][T26208] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7722: corrupted inode contents [ 367.511726][T26208] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.7722: mark_inode_dirty error [ 367.523391][T26208] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7722: corrupted inode contents [ 367.541282][T26208] sctp: [Deprecated]: syz.2.7722 (pid 26208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.541282][T26208] Use struct sctp_sack_info instead [ 367.558968][T26208] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7722: corrupted inode contents [ 367.571075][T26208] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.7722: mark_inode_dirty error [ 367.582675][T26208] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7722: corrupted inode contents [ 367.594838][T26208] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.7722: mark_inode_dirty error [ 367.608095][T26208] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7722: corrupted inode contents [ 367.620384][T26208] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.7722: mark_inode_dirty error [ 367.632411][T26216] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7722: corrupted inode contents [ 367.659439][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.680680][T26205] veth1_to_bond: left promiscuous mode [ 367.777231][T26236] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7732'. [ 367.786330][T26236] netlink: 'syz.9.7732': attribute type 12 has an invalid length. [ 367.801243][T26236] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7732'. [ 367.810288][T26236] netlink: 'syz.9.7732': attribute type 12 has an invalid length. [ 367.847059][T26241] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7734'. [ 368.131535][T26273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7748'. [ 368.140712][T26273] netlink: 'syz.3.7748': attribute type 12 has an invalid length. [ 368.178521][T26273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7748'. [ 368.187661][T26273] netlink: 'syz.3.7748': attribute type 12 has an invalid length. [ 368.255578][T26280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7749'. [ 368.264732][T26280] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7749'. [ 368.730158][T26309] tipc: Started in network mode [ 368.735151][T26309] tipc: Node identity 5e020f695906, cluster identity 4711 [ 368.741750][T26288] Set syz1 is full, maxelem 65536 reached [ 368.742773][T26309] tipc: Enabled bearer , priority 0 [ 368.777250][T26311] netlink: 'syz.1.7763': attribute type 12 has an invalid length. [ 368.810957][T15208] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.828511][T26311] netlink: 'syz.1.7763': attribute type 12 has an invalid length. [ 368.839110][T15208] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.856135][T15208] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.864607][T26309] +: renamed from syzkaller0 [ 368.870493][T26309] tipc: Disabling bearer [ 368.886447][T15208] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.905125][T26314] sctp: [Deprecated]: syz.3.7764 (pid 26314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.905125][T26314] Use struct sctp_sack_info instead [ 369.131818][T26325] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.225727][T26325] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.255788][T26325] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.329646][T26325] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.448473][T26351] sctp: [Deprecated]: syz.9.7777 (pid 26351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.448473][T26351] Use struct sctp_sack_info instead [ 369.472246][T15237] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.492870][T15237] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.521710][T15237] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.538491][T15237] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.232999][T26393] loop2: detected capacity change from 0 to 1024 [ 370.260110][T26393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.281210][T26398] tipc: Enabling of bearer rejected, failed to enable media [ 370.292332][T26393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.390061][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.736489][T26615] 9p: Bad value for 'rfdno' [ 372.122714][T26642] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 372.131362][T26642] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 372.211039][T26646] loop2: detected capacity change from 0 to 1024 [ 372.217861][T26646] EXT4-fs: inline encryption not supported [ 372.223957][T26646] EXT4-fs: Ignoring removed bh option [ 372.232939][T26646] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 372.264182][T26646] EXT4-fs (loop2): orphan cleanup on readonly fs [ 372.271052][T26646] EXT4-fs error (device loop2): ext4_quota_enable:7177: comm syz.2.7855: inode #2304: comm syz.2.7855: iget: illegal inode # [ 372.315767][T26646] EXT4-fs (loop2): Remounting filesystem read-only [ 372.322351][T26646] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 372.365174][T26646] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 372.384643][T26646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.410101][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 372.410116][ T29] audit: type=1400 audit(2000000432.859:4434): avc: denied { read write } for pid=26645 comm="syz.2.7855" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 372.441109][ T29] audit: type=1400 audit(2000000432.859:4435): avc: denied { open } for pid=26645 comm="syz.2.7855" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 372.466759][ T29] audit: type=1400 audit(2000000432.859:4436): avc: denied { ioctl } for pid=26645 comm="syz.2.7855" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 372.528011][T17758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.541876][T26661] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.916175][T26688] selinux_netlink_send: 66 callbacks suppressed [ 372.916192][T26688] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=26688 comm=syz.1.7869 [ 372.992855][T26688] __nla_validate_parse: 10 callbacks suppressed [ 372.992872][T26688] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7869'. [ 373.095462][ T29] audit: type=1326 audit(2000000433.549:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.178499][T26705] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7874'. [ 373.190035][T26706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7873'. [ 373.213755][ T29] audit: type=1326 audit(2000000433.549:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.237305][ T29] audit: type=1326 audit(2000000433.549:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.260986][ T29] audit: type=1326 audit(2000000433.549:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.284527][ T29] audit: type=1326 audit(2000000433.549:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.308028][ T29] audit: type=1326 audit(2000000433.549:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.331690][ T29] audit: type=1326 audit(2000000433.549:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.3.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8cb4acb9 code=0x7ffc0000 [ 373.629593][T26733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 373.672907][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7888'. [ 373.730868][T26749] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 373.747859][T26750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7894'. [ 373.920001][T26768] raw_sendmsg: syz.5.7901 forgot to set AF_INET. Fix it! [ 373.926125][T26765] macvtap1: entered promiscuous mode [ 373.932836][T26765] team0: entered promiscuous mode [ 373.938964][T26765] team_slave_0: entered promiscuous mode [ 373.945706][T26765] team_slave_1: entered promiscuous mode [ 373.955749][T26765] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 373.967876][T26765] team0: Device macvtap1 is already an upper device of the team interface [ 373.986990][T26765] team0: left promiscuous mode [ 373.992011][T26765] team_slave_0: left promiscuous mode [ 373.998640][T26765] team_slave_1: left promiscuous mode [ 374.626730][T26822] loop2: detected capacity change from 0 to 764 [ 374.802359][T26830] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7925'. [ 375.244169][T26853] ================================================================== [ 375.252293][T26853] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 375.259598][T26853] [ 375.261939][T26853] read to 0xffff888130c91b18 of 4 bytes by task 26867 on cpu 0: [ 375.269571][T26853] atime_needs_update+0x25f/0x3e0 [ 375.274605][T26853] touch_atime+0x4a/0x340 [ 375.278941][T26853] shmem_file_read_iter+0x477/0x540 [ 375.284154][T26853] copy_splice_read+0x471/0x6c0 [ 375.289021][T26853] splice_direct_to_actor+0x28f/0x670 [ 375.294486][T26853] do_splice_direct+0x119/0x1a0 [ 375.299354][T26853] do_sendfile+0x380/0x650 [ 375.303779][T26853] __x64_sys_sendfile64+0x105/0x150 [ 375.308983][T26853] x64_sys_call+0x2db1/0x3000 [ 375.313671][T26853] do_syscall_64+0xc0/0x2a0 [ 375.318184][T26853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.324085][T26853] [ 375.326402][T26853] write to 0xffff888130c91b18 of 4 bytes by task 26853 on cpu 1: [ 375.334118][T26853] touch_atime+0x1e8/0x340 [ 375.338559][T26853] shmem_file_read_iter+0x477/0x540 [ 375.343773][T26853] copy_splice_read+0x471/0x6c0 [ 375.348636][T26853] splice_direct_to_actor+0x28f/0x670 [ 375.354021][T26853] do_splice_direct+0x119/0x1a0 [ 375.358882][T26853] do_sendfile+0x380/0x650 [ 375.363297][T26853] __x64_sys_sendfile64+0x105/0x150 [ 375.368493][T26853] x64_sys_call+0x2db1/0x3000 [ 375.373169][T26853] do_syscall_64+0xc0/0x2a0 [ 375.377674][T26853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.383559][T26853] [ 375.385871][T26853] value changed: 0x291ec669 -> 0x29b75ce9 [ 375.391579][T26853] [ 375.393891][T26853] Reported by Kernel Concurrency Sanitizer on: [ 375.400034][T26853] CPU: 1 UID: 0 PID: 26853 Comm: syz.9.7934 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.411403][T26853] Tainted: [W]=WARN [ 375.415201][T26853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.425270][T26853] ================================================================== [ 375.824168][T26853] ================================================================== [ 375.832286][T26853] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 375.840631][T26853] [ 375.842953][T26853] write to 0xffff888130c91b1c of 4 bytes by task 26867 on cpu 0: [ 375.850665][T26853] inode_update_timestamps+0x147/0x270 [ 375.856133][T26853] file_update_time_flags+0x269/0x300 [ 375.861519][T26853] file_update_time+0x17/0x20 [ 375.866208][T26853] shmem_file_write_iter+0x9c/0xf0 [ 375.871333][T26853] iter_file_splice_write+0x6bc/0xa80 [ 375.876735][T26853] direct_splice_actor+0x156/0x2a0 [ 375.882003][T26853] splice_direct_to_actor+0x311/0x670 [ 375.887393][T26853] do_splice_direct+0x119/0x1a0 [ 375.892263][T26853] do_sendfile+0x380/0x650 [ 375.896676][T26853] __x64_sys_sendfile64+0x105/0x150 [ 375.901883][T26853] x64_sys_call+0x2db1/0x3000 [ 375.906575][T26853] do_syscall_64+0xc0/0x2a0 [ 375.911094][T26853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.917000][T26853] [ 375.919334][T26853] read to 0xffff888130c91b1c of 4 bytes by task 26853 on cpu 1: [ 375.926981][T26853] atime_needs_update+0x2a8/0x3e0 [ 375.932014][T26853] touch_atime+0x4a/0x340 [ 375.936365][T26853] shmem_file_read_iter+0x477/0x540 [ 375.941607][T26853] copy_splice_read+0x471/0x6c0 [ 375.946498][T26853] splice_direct_to_actor+0x28f/0x670 [ 375.951903][T26853] do_splice_direct+0x119/0x1a0 [ 375.956807][T26853] do_sendfile+0x380/0x650 [ 375.961252][T26853] __x64_sys_sendfile64+0x105/0x150 [ 375.966473][T26853] x64_sys_call+0x2db1/0x3000 [ 375.971159][T26853] do_syscall_64+0xc0/0x2a0 [ 375.975675][T26853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.981673][T26853] [ 375.984002][T26853] value changed: 0x1016155f -> 0x10aeabdf [ 375.989720][T26853] [ 375.992049][T26853] Reported by Kernel Concurrency Sanitizer on: [ 375.998211][T26853] CPU: 1 UID: 0 PID: 26853 Comm: syz.9.7934 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 376.009601][T26853] Tainted: [W]=WARN [ 376.013448][T26853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.023516][T26853] ==================================================================