last executing test programs: 9m44.030851415s ago: executing program 32 (id=95): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="feffffffffffffff1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 9m37.418621694s ago: executing program 4 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) 9m37.397697514s ago: executing program 4 (id=253): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0xd}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!', 0x2}], 0x1, 0xfffffffc, 0x0) 9m37.386105775s ago: executing program 0 (id=254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 9m37.236236282s ago: executing program 4 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) 9m37.128483907s ago: executing program 4 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) 9m37.001859912s ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m36.949549994s ago: executing program 4 (id=265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 9m36.923778175s ago: executing program 0 (id=266): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m36.888849887s ago: executing program 0 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 9m36.802609901s ago: executing program 0 (id=269): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 9m36.784850721s ago: executing program 0 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 9m36.187540978s ago: executing program 33 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000580)={0x1}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 9m32.856806693s ago: executing program 0 (id=325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(r2) 9m32.856622433s ago: executing program 34 (id=325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(r2) 9m21.900876764s ago: executing program 35 (id=265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 9m21.188536574s ago: executing program 6 (id=583): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 9m21.167346336s ago: executing program 6 (id=584): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9m21.003056282s ago: executing program 6 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008848"], 0x24}}, 0x10) 9m20.935157256s ago: executing program 6 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 9m20.777911002s ago: executing program 6 (id=591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20008840) 9m20.400695389s ago: executing program 6 (id=598): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) fallocate(r0, 0x8, 0x0, 0x10000) 9m20.400524879s ago: executing program 36 (id=598): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) fallocate(r0, 0x8, 0x0, 0x10000) 8m35.891735317s ago: executing program 5 (id=2145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 8m35.850198779s ago: executing program 5 (id=2146): r0 = syz_io_uring_setup(0x5c8, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x4, 0x95}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) 8m35.705440815s ago: executing program 5 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) dup(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 8m35.590314231s ago: executing program 5 (id=2153): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x88901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 8m35.477393615s ago: executing program 5 (id=2161): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 8m35.051815484s ago: executing program 5 (id=2181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 8m35.026885585s ago: executing program 37 (id=2181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 8m5.881470411s ago: executing program 3 (id=2929): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001b00)=""/240, 0xf0) lseek(r2, 0x101, 0x1) getdents64(r2, &(0x7f0000003340)=""/48, 0x30) 8m5.864448842s ago: executing program 3 (id=2930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000100)=[{0x6, 0x98, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m5.838402393s ago: executing program 3 (id=2931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 8m5.814024144s ago: executing program 3 (id=2933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 8m5.690410589s ago: executing program 3 (id=2937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r4, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xc}}, 0x30) 8m5.558690815s ago: executing program 3 (id=2940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d145a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x3}}, 0x0, 0x0, 0x1, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 8m5.538706775s ago: executing program 38 (id=2940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d145a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x3}}, 0x0, 0x0, 0x1, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 6.025641947s ago: executing program 8 (id=14368): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r0 = gettid() socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.521422238s ago: executing program 8 (id=14381): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.179859784s ago: executing program 8 (id=14392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x2000000dfa, &(0x7f0000ff9000/0x1000)=nil, 0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) 4.251924504s ago: executing program 7 (id=14400): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='tlb_flush\x00', r2}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6000009, 0x11, r0, 0x180000000) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) 4.10288366s ago: executing program 7 (id=14401): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000040000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.943549277s ago: executing program 7 (id=14402): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x44) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800001, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.965408771s ago: executing program 1 (id=14409): unshare(0x20060400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f00000008c0)="b9"}, 0x20) 2.672437224s ago: executing program 1 (id=14410): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2.627904615s ago: executing program 7 (id=14411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) io_setup(0xb25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028005000c0000000000140007000000000000000000000000000000000108000a00", @ANYRES32=r2, @ANYBLOB="d305b91514ec603440c4b1da0ad312120c6dda29fabcacc19cd2f4fac30a6347"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 2.549743299s ago: executing program 1 (id=14412): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@udp=r3}, 0x20) close_range(r0, r3, 0x0) 2.549216129s ago: executing program 8 (id=14413): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x5e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.438451443s ago: executing program 1 (id=14414): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'ip6gretap0\x00', 0x0}) socket$inet6(0xa, 0x80002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2.437803334s ago: executing program 1 (id=14415): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000280), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.395040695s ago: executing program 8 (id=14416): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',shortname=lower,iocharset=cp855,utf8=1,shortname=winnt,iocharset=cp936,utf8=0,rodir,\x00'], 0x1, 0x27b, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xcc0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000300)="7c40c540a7f3519093a452d1e8bd6f24ba2c3a1eb19fd6984a596e41198a75a1c1f7b927398c9bd9cea072cee0228139113005eb856cb82fabdba8f0bfa1de993be5fe69100f79b73644c77143a19c0532f036a79cda2a3c0395625e66dfff82288540a55545f42b6379b4fd9800fea6c59cdb1eef81e0c4d2a6b07c47932b9f3f124855e725720374e8b8b7e5790d4cfe5ba8957b17d499d7b6e01ea9f9cb75e8b4269ce431a2296cc2bae3c435f89c8c13bccb550e65bc45257f0aa0b584d0ebe9bcb748", &(0x7f0000001880)=""/4107, &(0x7f0000000040), &(0x7f0000000100), 0x2, r3}, 0x38) 2.332848028s ago: executing program 7 (id=14417): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 2.091781568s ago: executing program 1 (id=14419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='stack\x00') pread64(r3, &(0x7f0000001580)=""/4101, 0x1005, 0xa) 1.726770985s ago: executing program 2 (id=14421): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) 1.36184123s ago: executing program 2 (id=14422): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r0], 0x118) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.13125927s ago: executing program 9 (id=14423): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000006000002040000000200000000000000", @ANYRES32, @ANYBLOB="0000008b00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000b6ae00001c0000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600d1e9f4"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x30, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x1403, 0x927, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) 1.010867936s ago: executing program 9 (id=14424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x204, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) 828.594224ms ago: executing program 9 (id=14425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x40}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0xa, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749d, 0x4, 0x0, 0x0, 0x0) 758.250917ms ago: executing program 9 (id=14426): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x13, 0xb2, 0x10, 0x46d, 0x8d3, 0xb28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as]}}]}}]}}, 0x0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 511.451758ms ago: executing program 2 (id=14427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0xe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x401}, 0x11) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 288.972757ms ago: executing program 2 (id=14428): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x80, 0x0) 239.31962ms ago: executing program 2 (id=14429): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r3, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) 208.097641ms ago: executing program 2 (id=14430): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 195.171112ms ago: executing program 7 (id=14431): bpf$MAP_CREATE(0x0, 0x0, 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x4e2, &(0x7f0000000e00)={0x0, 0x1ad6, 0x3180, 0x2, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 78.782417ms ago: executing program 9 (id=14432): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unlink(0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8081) r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 49.254488ms ago: executing program 9 (id=14433): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40040) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 8 (id=14434): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) kernel console output (not intermixed with test programs): [ 528.002635][T27352] total_rss 978944 [ 528.006351][T27352] total_shmem 91500544 [ 528.010415][T27352] total_mapped_file 11755520 [ 528.015041][T27352] total_dirty 0 [ 528.018474][T27352] total_writeback 0 [ 528.022287][T27352] total_workingset_refault_anon 2616 [ 528.027569][T27352] total_workingset_refault_file 13618 [ 528.033051][T27352] total_swap 819200 [ 528.036901][T27352] total_swapcached 45056 [ 528.041135][T27352] total_pgpgin 810179 [ 528.045176][T27352] total_pgpgout 771196 [ 528.049216][T27352] total_pgfault 764183 [ 528.053285][T27352] total_pgmajfault 422 [ 528.057338][T27352] total_inactive_anon 507904 [ 528.061937][T27352] total_active_anon 92016640 [ 528.066502][T27352] total_inactive_file 0 [ 528.070646][T27352] total_active_file 0 [ 528.074605][T27352] total_unevictable 67149824 [ 528.079228][T27352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.13226,pid=27351,uid=0 [ 528.094088][T27352] Memory cgroup out of memory: Killed process 27351 (syz.2.13226) total-vm:96148kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:0 [ 528.855512][T27539] veth34: entered promiscuous mode [ 528.860775][T27539] veth34: entered allmulticast mode [ 528.883381][T27528] lo speed is unknown, defaulting to 1000 [ 528.931977][T27528] lo speed is unknown, defaulting to 1000 [ 528.939285][T27528] lo speed is unknown, defaulting to 1000 [ 529.521216][T27599] __nla_validate_parse: 1 callbacks suppressed [ 529.521234][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13269'. [ 529.524165][T27603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13268'. [ 529.799165][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13275'. [ 529.817568][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13275'. [ 529.970327][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 529.970343][ T29] audit: type=1326 audit(2000000032.030:31064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.019499][ T29] audit: type=1326 audit(2000000032.030:31065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.043230][ T29] audit: type=1326 audit(2000000032.060:31066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.067073][ T29] audit: type=1326 audit(2000000032.060:31067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.090846][ T29] audit: type=1326 audit(2000000032.060:31069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.114650][ T29] audit: type=1326 audit(2000000032.060:31068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.138446][ T29] audit: type=1326 audit(2000000032.060:31070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.162371][ T29] audit: type=1326 audit(2000000032.060:31071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.186102][ T29] audit: type=1326 audit(2000000032.060:31072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.209963][ T29] audit: type=1326 audit(2000000032.060:31073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27639 comm="syz.1.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 530.292704][T27646] netlink: 'syz.8.13280': attribute type 4 has an invalid length. [ 530.312681][T27651] wg2: left promiscuous mode [ 530.317346][T27651] wg2: left allmulticast mode [ 530.577632][T27683] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.621827][T27683] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.721822][T27683] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.758453][T27702] tipc: Enabling of bearer rejected, failed to enable media [ 530.771754][T27683] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 530.828750][ T340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 530.846581][ T340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 530.890070][ T340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 530.899750][ T340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 530.911237][T27722] pimreg: entered allmulticast mode [ 530.917281][T27722] pimreg: left allmulticast mode [ 531.047824][T27730] lo speed is unknown, defaulting to 1000 [ 531.098178][T27730] lo speed is unknown, defaulting to 1000 [ 531.105672][T27730] lo speed is unknown, defaulting to 1000 [ 531.153169][T27738] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13298'. [ 531.185033][T27749] syz1: rxe_newlink: already configured on lo [ 531.300360][T27773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 531.361395][T27773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 531.372834][T27783] netlink: 'syz.7.13305': attribute type 13 has an invalid length. [ 531.645999][T27773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 531.732061][T27773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 531.759490][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13307'. [ 531.769345][T27796] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13307'. [ 531.846504][T27786] syz.1.13303 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 531.860626][T27786] CPU: 1 UID: 0 PID: 27786 Comm: syz.1.13303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.860658][T27786] Tainted: [W]=WARN [ 531.860664][T27786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.860688][T27786] Call Trace: [ 531.860694][T27786] [ 531.860704][T27786] __dump_stack+0x1d/0x30 [ 531.860771][T27786] dump_stack_lvl+0xe8/0x140 [ 531.860795][T27786] dump_stack+0x15/0x1b [ 531.860873][T27786] dump_header+0x81/0x240 [ 531.860894][T27786] oom_kill_process+0x295/0x350 [ 531.860974][T27786] out_of_memory+0x97b/0xb80 [ 531.861002][T27786] try_charge_memcg+0x610/0xa10 [ 531.861030][T27786] obj_cgroup_charge_pages+0xa6/0x150 [ 531.861084][T27786] __memcg_kmem_charge_page+0x9f/0x170 [ 531.861215][T27786] __alloc_frozen_pages_noprof+0x18f/0x360 [ 531.861245][T27786] alloc_pages_mpol+0xb3/0x260 [ 531.861271][T27786] ? alloc_pages_noprof+0xf4/0x130 [ 531.861346][T27786] alloc_pages_noprof+0x90/0x130 [ 531.861380][T27786] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 531.861428][T27786] __kvmalloc_node_noprof+0x492/0x6b0 [ 531.861466][T27786] ? ip_set_alloc+0x24/0x30 [ 531.861498][T27786] ? ip_set_alloc+0x24/0x30 [ 531.861532][T27786] ip_set_alloc+0x24/0x30 [ 531.861585][T27786] hash_netiface_create+0x282/0x740 [ 531.861617][T27786] ? __pfx_hash_netiface_create+0x10/0x10 [ 531.861677][T27786] ip_set_create+0x3cc/0x970 [ 531.861792][T27786] ? __nla_parse+0x40/0x60 [ 531.861822][T27786] nfnetlink_rcv_msg+0x4c6/0x590 [ 531.861893][T27786] netlink_rcv_skb+0x123/0x220 [ 531.861925][T27786] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 531.861961][T27786] nfnetlink_rcv+0x167/0x16c0 [ 531.862021][T27786] ? kmem_cache_free+0xe3/0x3a0 [ 531.862160][T27786] ? __kfree_skb+0x109/0x150 [ 531.862188][T27786] ? nlmon_xmit+0x4f/0x60 [ 531.862208][T27786] ? consume_skb+0x49/0x150 [ 531.862231][T27786] ? nlmon_xmit+0x4f/0x60 [ 531.862293][T27786] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 531.862370][T27786] ? __dev_queue_xmit+0x138d/0x1ec0 [ 531.862424][T27786] ? __dev_queue_xmit+0x148/0x1ec0 [ 531.862458][T27786] ? ref_tracker_free+0x37d/0x3e0 [ 531.862491][T27786] ? __netlink_deliver_tap+0x4dc/0x500 [ 531.862580][T27786] netlink_unicast+0x5c0/0x690 [ 531.862612][T27786] netlink_sendmsg+0x58b/0x6b0 [ 531.862649][T27786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.862739][T27786] __sock_sendmsg+0x145/0x180 [ 531.862762][T27786] ____sys_sendmsg+0x31e/0x4a0 [ 531.862792][T27786] ___sys_sendmsg+0x17b/0x1d0 [ 531.862896][T27786] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 531.862935][T27786] __x64_sys_sendmsg+0xd4/0x160 [ 531.862964][T27786] x64_sys_call+0x17ba/0x3000 [ 531.862986][T27786] do_syscall_64+0xd8/0x2a0 [ 531.863086][T27786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.863110][T27786] RIP: 0033:0x7f664905f749 [ 531.863125][T27786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.863222][T27786] RSP: 002b:00007f6647a39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.863313][T27786] RAX: ffffffffffffffda RBX: 00007f66492b6090 RCX: 00007f664905f749 [ 531.863324][T27786] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 531.863335][T27786] RBP: 00007f66490e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.863346][T27786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.863357][T27786] R13: 00007f66492b6128 R14: 00007f66492b6090 R15: 00007ffefe11aa58 [ 531.863429][T27786] [ 531.863436][T27786] memory: usage 307200kB, limit 307200kB, failcnt 786 [ 532.208173][T27786] memory+swap: usage 317108kB, limit 9007199254740988kB, failcnt 0 [ 532.216081][T27786] kmem: usage 305752kB, limit 9007199254740988kB, failcnt 0 [ 532.223358][T27786] Memory cgroup stats for /syz1: [ 532.223565][T27786] cache 937984 [ 532.231877][T27786] rss 389120 [ 532.235116][T27786] shmem 937984 [ 532.238490][T27786] mapped_file 413696 [ 532.242401][T27786] dirty 0 [ 532.245326][T27786] writeback 0 [ 532.248668][T27786] workingset_refault_anon 4130 [ 532.253445][T27786] workingset_refault_file 0 [ 532.257989][T27786] swap 10203136 [ 532.261435][T27786] swapcached 65536 [ 532.265134][T27786] pgpgin 618259 [ 532.268629][T27786] pgpgout 617919 [ 532.272185][T27786] pgfault 592176 [ 532.275709][T27786] pgmajfault 594 [ 532.279232][T27786] inactive_anon 69632 [ 532.283220][T27786] active_anon 1323008 [ 532.287201][T27786] inactive_file 0 [ 532.290825][T27786] active_file 0 [ 532.294293][T27786] unevictable 0 [ 532.297729][T27786] hierarchical_memory_limit 314572800 [ 532.303153][T27786] hierarchical_memsw_limit 9223372036854771712 [ 532.309279][T27786] total_cache 937984 [ 532.313163][T27786] total_rss 389120 [ 532.316859][T27786] total_shmem 937984 [ 532.320749][T27786] total_mapped_file 413696 [ 532.325153][T27786] total_dirty 0 [ 532.328586][T27786] total_writeback 0 [ 532.332399][T27786] total_workingset_refault_anon 4130 [ 532.337661][T27786] total_workingset_refault_file 0 [ 532.342679][T27786] total_swap 10203136 [ 532.346767][T27786] total_swapcached 65536 [ 532.351125][T27786] total_pgpgin 618259 [ 532.355147][T27786] total_pgpgout 617919 [ 532.359190][T27786] total_pgfault 592176 [ 532.363278][T27786] total_pgmajfault 594 [ 532.367366][T27786] total_inactive_anon 69632 [ 532.371860][T27786] total_active_anon 1323008 [ 532.376389][T27786] total_inactive_file 0 [ 532.380531][T27786] total_active_file 0 [ 532.384486][T27786] total_unevictable 0 [ 532.388448][T27786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.13303,pid=27770,uid=0 [ 532.403201][T27786] Memory cgroup out of memory: Killed process 27786 (syz.1.13303) total-vm:96420kB, anon-rss:1264kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 532.481007][T26552] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.509061][ T4773] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.519888][ T4773] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.528234][ T4773] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.712755][T27817] lo speed is unknown, defaulting to 1000 [ 532.770578][T27817] lo speed is unknown, defaulting to 1000 [ 532.777293][T27817] lo speed is unknown, defaulting to 1000 [ 533.336604][T27854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13318'. [ 533.466303][T27858] veth36: entered promiscuous mode [ 533.472165][T27858] veth36: entered allmulticast mode [ 534.141229][T27905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13330'. [ 534.455070][T27917] syz.9.13335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 534.464827][T27917] CPU: 0 UID: 0 PID: 27917 Comm: syz.9.13335 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 534.464864][T27917] Tainted: [W]=WARN [ 534.464871][T27917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.464894][T27917] Call Trace: [ 534.464900][T27917] [ 534.464908][T27917] __dump_stack+0x1d/0x30 [ 534.464934][T27917] dump_stack_lvl+0xe8/0x140 [ 534.464956][T27917] dump_stack+0x15/0x1b [ 534.464979][T27917] dump_header+0x81/0x240 [ 534.465003][T27917] oom_kill_process+0x295/0x350 [ 534.465034][T27917] out_of_memory+0x97b/0xb80 [ 534.465111][T27917] try_charge_memcg+0x610/0xa10 [ 534.465143][T27917] charge_memcg+0x51/0xc0 [ 534.465174][T27917] __mem_cgroup_charge+0x28/0xb0 [ 534.465280][T27917] shmem_get_folio_gfp+0x470/0xd50 [ 534.465386][T27917] shmem_fault+0xf6/0x250 [ 534.465418][T27917] __do_fault+0xbc/0x200 [ 534.465439][T27917] handle_mm_fault+0xfab/0x2c60 [ 534.465469][T27917] ? _raw_spin_lock+0x52/0xa0 [ 534.465489][T27917] ? __pte_offset_map_lock+0x1d9/0x240 [ 534.465567][T27917] __get_user_pages+0x1024/0x1ed0 [ 534.465607][T27917] __mm_populate+0x243/0x3a0 [ 534.465787][T27917] vm_mmap_pgoff+0x232/0x2e0 [ 534.465815][T27917] ksys_mmap_pgoff+0xc2/0x310 [ 534.465842][T27917] ? __x64_sys_mmap+0x49/0x70 [ 534.465939][T27917] x64_sys_call+0x16bb/0x3000 [ 534.466032][T27917] do_syscall_64+0xd8/0x2a0 [ 534.466070][T27917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.466094][T27917] RIP: 0033:0x7fae3f72f749 [ 534.466112][T27917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.466202][T27917] RSP: 002b:00007fae3e176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 534.466221][T27917] RAX: ffffffffffffffda RBX: 00007fae3f986090 RCX: 00007fae3f72f749 [ 534.466235][T27917] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 534.466250][T27917] RBP: 00007fae3f7b3f91 R08: ffffffffffffffff R09: 0000000028f43000 [ 534.466341][T27917] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 534.466355][T27917] R13: 00007fae3f986128 R14: 00007fae3f986090 R15: 00007fff40b88238 [ 534.466373][T27917] [ 534.466394][T27917] memory: usage 307200kB, limit 307200kB, failcnt 906 [ 534.688825][T27917] memory+swap: usage 321396kB, limit 9007199254740988kB, failcnt 0 [ 534.696896][T27917] kmem: usage 218696kB, limit 9007199254740988kB, failcnt 0 [ 534.704226][T27917] Memory cgroup stats for /syz9: [ 534.810787][T27926] rdma_rxe: rxe_newlink: failed to add lo [ 534.909657][T27917] cache 64372736 [ 534.913250][T27917] rss 1228800 [ 534.916575][T27917] shmem 64372736 [ 534.920204][T27917] mapped_file 958464 [ 534.924099][T27917] dirty 0 [ 534.927036][T27917] writeback 0 [ 534.929998][T27934] netlink: 'syz.8.13342': attribute type 1 has an invalid length. [ 534.930460][T27917] workingset_refault_anon 4819 [ 534.943020][T27917] workingset_refault_file 687 [ 534.947883][T27917] swap 39174144 [ 534.951410][T27917] swapcached 20480 [ 534.955141][T27917] pgpgin 780493 [ 534.958616][T27917] pgpgout 764459 [ 534.962170][T27917] pgfault 782290 [ 534.965732][T27917] pgmajfault 636 [ 534.969271][T27917] inactive_anon 48185344 [ 534.973543][T27917] active_anon 17485824 [ 534.977632][T27917] inactive_file 0 [ 534.979283][T27934] 8021q: adding VLAN 0 to HW filter on device bond13 [ 534.981280][T27917] active_file 4096 [ 534.981290][T27917] unevictable 0 [ 534.981297][T27917] hierarchical_memory_limit 314572800 [ 534.981306][T27917] hierarchical_memsw_limit 9223372036854771712 [ 534.981314][T27917] total_cache 64372736 [ 534.981329][T27917] total_rss 1228800 [ 534.988442][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13342'. [ 534.991767][T27917] total_shmem 64372736 [ 534.991777][T27917] total_mapped_file 958464 [ 534.991862][T27917] total_dirty 0 [ 534.991868][T27917] total_writeback 0 [ 534.991875][T27917] total_workingset_refault_anon 4819 [ 535.030816][T27969] netlink: 'syz.2.13341': attribute type 13 has an invalid length. [ 535.032182][T27917] total_workingset_refault_file 687 [ 535.057775][T27917] total_swap 39174144 [ 535.061821][T27917] total_swapcached 20480 [ 535.066055][T27917] total_pgpgin 780493 [ 535.070048][T27917] total_pgpgout 764459 [ 535.074105][T27917] total_pgfault 782290 [ 535.078159][T27917] total_pgmajfault 636 [ 535.082273][T27917] total_inactive_anon 48185344 [ 535.087134][T27917] total_active_anon 17485824 [ 535.091733][T27917] total_inactive_file 0 [ 535.095873][T27917] total_active_file 4096 [ 535.100123][T27917] total_unevictable 0 [ 535.104094][T27917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.13335,pid=27913,uid=0 [ 535.118954][T27917] Memory cgroup out of memory: Killed process 27913 (syz.9.13335) total-vm:96016kB, anon-rss:1268kB, file-rss:22312kB, shmem-rss:896kB, UID:0 pgtables:128kB oom_score_adj:0 [ 535.146815][T27968] bond13 (unregistering): Released all slaves [ 535.214295][ T4773] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 535.248345][ T4773] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 535.266385][ T4773] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 535.275727][ T4773] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 535.504491][T28020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13348'. [ 535.571635][T28040] netlink: 9 bytes leftover after parsing attributes in process `syz.9.13350'. [ 535.584858][T28040] netlink: 9 bytes leftover after parsing attributes in process `syz.9.13350'. [ 535.604561][T28041] netlink: 'syz.7.13351': attribute type 4 has an invalid length. [ 535.612585][T28041] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13351'. [ 535.726495][T28064] netlink: 'syz.9.13356': attribute type 13 has an invalid length. [ 535.874556][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 535.874570][ T29] audit: type=1326 audit(2000000037.930:31246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 535.910633][ T29] audit: type=1326 audit(2000000037.970:31247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 535.935160][T28076] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13360'. [ 535.956592][ T29] audit: type=1326 audit(2000000038.010:31248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 535.960282][T28075] rdma_rxe: rxe_newlink: failed to add lo [ 535.980318][ T29] audit: type=1326 audit(2000000038.010:31249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.239501][ T29] audit: type=1326 audit(2000000038.010:31250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.263260][ T29] audit: type=1326 audit(2000000038.010:31251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.287217][ T29] audit: type=1326 audit(2000000038.010:31252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.293919][T28102] netlink: 'syz.1.13370': attribute type 13 has an invalid length. [ 536.311085][ T29] audit: type=1326 audit(2000000038.010:31253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.342485][ T29] audit: type=1326 audit(2000000038.040:31254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.366260][ T29] audit: type=1326 audit(2000000038.040:31255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28074 comm="syz.1.13361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 536.491582][ T9] lo speed is unknown, defaulting to 1000 [ 536.497369][ T9] syz2: Port: 1 Link DOWN [ 536.750448][T28144] rdma_rxe: rxe_newlink: failed to add lo [ 537.103439][T28195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13402'. [ 537.220831][T28206] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13396'. [ 537.292146][T28210] rdma_rxe: rxe_newlink: failed to add lo [ 537.988452][T28227] syz.1.13412 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 537.998184][T28227] CPU: 1 UID: 0 PID: 28227 Comm: syz.1.13412 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 537.998261][T28227] Tainted: [W]=WARN [ 537.998295][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.998308][T28227] Call Trace: [ 537.998315][T28227] [ 537.998323][T28227] __dump_stack+0x1d/0x30 [ 537.998389][T28227] dump_stack_lvl+0xe8/0x140 [ 537.998416][T28227] dump_stack+0x15/0x1b [ 537.998439][T28227] dump_header+0x81/0x240 [ 537.998516][T28227] oom_kill_process+0x295/0x350 [ 537.998575][T28227] out_of_memory+0x97b/0xb80 [ 537.998646][T28227] ? __cond_resched+0x4e/0x90 [ 537.998675][T28227] try_charge_memcg+0x610/0xa10 [ 537.998705][T28227] charge_memcg+0x51/0xc0 [ 537.998733][T28227] __mem_cgroup_charge+0x28/0xb0 [ 537.998798][T28227] shmem_get_folio_gfp+0x470/0xd50 [ 537.998837][T28227] shmem_write_begin+0xfc/0x1f0 [ 537.998866][T28227] generic_perform_write+0x184/0x490 [ 537.998896][T28227] shmem_file_write_iter+0xc5/0xf0 [ 537.998961][T28227] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 537.998996][T28227] vfs_write+0x52a/0x960 [ 537.999021][T28227] ksys_write+0xda/0x1a0 [ 537.999117][T28227] __x64_sys_write+0x40/0x50 [ 537.999179][T28227] x64_sys_call+0x2847/0x3000 [ 537.999258][T28227] do_syscall_64+0xd8/0x2a0 [ 537.999290][T28227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.999382][T28227] RIP: 0033:0x7f664905e1ff [ 537.999453][T28227] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 537.999474][T28227] RSP: 002b:00007f6647a7cdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 537.999492][T28227] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f664905e1ff [ 537.999503][T28227] RDX: 0000000000040000 RSI: 00007f663f65d000 RDI: 0000000000000006 [ 537.999514][T28227] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004b9 [ 537.999525][T28227] R10: 00000000000007cc R11: 0000000000000293 R12: 0000000000000006 [ 537.999536][T28227] R13: 00007f6647a7cef0 R14: 00007f6647a7ceb0 R15: 00007f663f65d000 [ 537.999562][T28227] [ 538.039934][ T4770] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.040296][T28227] memory: usage 306976kB, limit 307200kB, failcnt 849 [ 538.044461][ T4770] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.048630][T28227] memory+swap: usage 316940kB, limit 9007199254740988kB, failcnt 0 [ 538.059747][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.062785][T28227] kmem: usage 303892kB, limit 9007199254740988kB, failcnt 0 [ 538.091330][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13405'. [ 538.092170][T28227] Memory cgroup stats for /syz1: [ 538.175231][T28227] cache 2871296 [ 538.293970][T28227] rss 454656 [ 538.297154][T28227] shmem 2871296 [ 538.300716][T28227] mapped_file 0 [ 538.304154][T28227] dirty 0 [ 538.307077][T28227] writeback 0 [ 538.310474][T28227] workingset_refault_anon 4130 [ 538.315271][T28227] workingset_refault_file 0 [ 538.319784][T28227] swap 10203136 [ 538.323245][T28227] swapcached 65536 [ 538.326960][T28227] pgpgin 625038 [ 538.330507][T28227] pgpgout 624210 [ 538.334039][T28227] pgfault 604503 [ 538.337573][T28227] pgmajfault 594 [ 538.341259][T28227] inactive_anon 69632 [ 538.345258][T28227] active_anon 3309568 [ 538.349224][T28227] inactive_file 0 [ 538.353045][T28227] active_file 0 [ 538.356498][T28227] unevictable 0 [ 538.360071][T28227] hierarchical_memory_limit 314572800 [ 538.365436][T28227] hierarchical_memsw_limit 9223372036854771712 [ 538.371703][T28227] total_cache 2871296 [ 538.375729][T28227] total_rss 454656 [ 538.379456][T28227] total_shmem 2871296 [ 538.383426][T28227] total_mapped_file 0 [ 538.387401][T28227] total_dirty 0 [ 538.390943][T28227] total_writeback 0 [ 538.394771][T28227] total_workingset_refault_anon 4130 [ 538.400071][T28227] total_workingset_refault_file 0 [ 538.405078][T28227] total_swap 10203136 [ 538.409132][T28227] total_swapcached 65536 [ 538.413409][T28227] total_pgpgin 625038 [ 538.417391][T28227] total_pgpgout 624210 [ 538.421492][T28227] total_pgfault 604503 [ 538.425551][T28227] total_pgmajfault 594 [ 538.429721][T28227] total_inactive_anon 69632 [ 538.434257][T28227] total_active_anon 3309568 [ 538.438792][T28227] total_inactive_file 0 [ 538.442993][T28227] total_active_file 0 [ 538.447028][T28227] total_unevictable 0 [ 538.451041][T28227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.13412,pid=28222,uid=0 [ 538.465898][T28227] Memory cgroup out of memory: Killed process 28222 (syz.1.13412) total-vm:231316kB, anon-rss:1392kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 538.539862][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 539.068273][T28262] netlink: 'syz.2.13418': attribute type 12 has an invalid length. [ 539.080788][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 539.223851][T28259] lo speed is unknown, defaulting to 1000 [ 539.248765][T28277] netlink: 209860 bytes leftover after parsing attributes in process `syz.7.13421'. [ 539.378836][T28259] lo speed is unknown, defaulting to 1000 [ 539.408560][T28259] lo speed is unknown, defaulting to 1000 [ 540.058511][T28335] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13430'. [ 540.072521][T28335] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13430'. [ 540.118886][T28344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13432'. [ 541.088412][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13452'. [ 541.238756][T28413] delete_channel: no stack [ 541.371182][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 541.371196][ T29] audit: type=1326 audit(2000000043.540:31884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.489014][ T29] audit: type=1326 audit(2000000043.572:31885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.512937][ T29] audit: type=1326 audit(2000000043.582:31886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.536692][ T29] audit: type=1326 audit(2000000043.582:31887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.560636][ T29] audit: type=1326 audit(2000000043.582:31888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.584305][ T29] audit: type=1326 audit(2000000043.582:31889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.608294][ T29] audit: type=1326 audit(2000000043.582:31890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.632130][ T29] audit: type=1326 audit(2000000043.582:31891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.655713][ T29] audit: type=1326 audit(2000000043.582:31892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 541.679451][ T29] audit: type=1326 audit(2000000043.582:31893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.9.13462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 542.041248][T28443] lo speed is unknown, defaulting to 1000 [ 542.099190][T28443] lo speed is unknown, defaulting to 1000 [ 542.105394][T28443] lo speed is unknown, defaulting to 1000 [ 542.245288][ T5358] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 542.256311][ T5358] CPU: 1 UID: 0 PID: 5358 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 542.256348][ T5358] Tainted: [W]=WARN [ 542.256354][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.256365][ T5358] Call Trace: [ 542.256372][ T5358] [ 542.256382][ T5358] __dump_stack+0x1d/0x30 [ 542.256406][ T5358] dump_stack_lvl+0xe8/0x140 [ 542.256428][ T5358] dump_stack+0x15/0x1b [ 542.256484][ T5358] dump_header+0x81/0x240 [ 542.256502][ T5358] oom_kill_process+0x295/0x350 [ 542.256523][ T5358] out_of_memory+0x97b/0xb80 [ 542.256549][ T5358] try_charge_memcg+0x610/0xa10 [ 542.256622][ T5358] charge_memcg+0x51/0xc0 [ 542.256654][ T5358] __mem_cgroup_charge+0x28/0xb0 [ 542.256717][ T5358] filemap_add_folio+0x111/0x360 [ 542.256738][ T5358] __filemap_get_folio_mpol+0x326/0x650 [ 542.256768][ T5358] filemap_fault+0x44d/0xb70 [ 542.256800][ T5358] __do_fault+0xbc/0x200 [ 542.256820][ T5358] handle_mm_fault+0xfab/0x2c60 [ 542.256885][ T5358] do_user_addr_fault+0x630/0x1080 [ 542.257001][ T5358] exc_page_fault+0x62/0xa0 [ 542.257068][ T5358] asm_exc_page_fault+0x26/0x30 [ 542.257086][ T5358] RIP: 0033:0x7f5de6045fd4 [ 542.257102][ T5358] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 542.257119][ T5358] RSP: 002b:00007ffe6ce29d00 EFLAGS: 00010206 [ 542.257133][ T5358] RAX: 0000001b30224000 RBX: 0000000000002189 RCX: 0000000000084530 [ 542.257173][ T5358] RDX: 00000000052a3946 RSI: 00007ffe6ce29d90 RDI: 0000000000000001 [ 542.257187][ T5358] RBP: 00007ffe6ce29d3c R08: 0000000013b3e21d R09: 7fffffffffffffff [ 542.257200][ T5358] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 542.257212][ T5358] R13: 00000000000927c0 R14: 00000000000845a8 R15: 00007ffe6ce29d90 [ 542.257229][ T5358] [ 542.257236][ T5358] memory: usage 307200kB, limit 307200kB, failcnt 3064 [ 542.285129][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 542.285994][ T5358] memory+swap: usage 308000kB, limit 9007199254740988kB, failcnt 0 [ 542.465572][ T5358] kmem: usage 162584kB, limit 9007199254740988kB, failcnt 0 [ 542.472899][ T5358] Memory cgroup stats for /syz2: [ 542.473123][ T5358] cache 146890752 [ 542.481702][ T5358] rss 1150976 [ 542.484996][ T5358] shmem 79740928 [ 542.488583][ T5358] mapped_file 413696 [ 542.492545][ T5358] dirty 0 [ 542.495517][ T5358] writeback 0 [ 542.498839][ T5358] workingset_refault_anon 2616 [ 542.503608][ T5358] workingset_refault_file 13625 [ 542.508525][ T5358] swap 819200 [ 542.511800][ T5358] swapcached 45056 [ 542.515606][ T5358] pgpgin 822330 [ 542.519055][ T5358] pgpgout 786176 [ 542.522582][ T5358] pgfault 779782 [ 542.526153][ T5358] pgmajfault 426 [ 542.529754][ T5358] inactive_anon 80687104 [ 542.534027][ T5358] active_anon 249856 [ 542.537994][ T5358] inactive_file 0 [ 542.541615][ T5358] active_file 0 [ 542.545160][ T5358] unevictable 67149824 [ 542.549219][ T5358] hierarchical_memory_limit 314572800 [ 542.554607][ T5358] hierarchical_memsw_limit 9223372036854771712 [ 542.560926][ T5358] total_cache 146890752 [ 542.565099][ T5358] total_rss 1150976 [ 542.568932][ T5358] total_shmem 79740928 [ 542.573032][ T5358] total_mapped_file 413696 [ 542.577438][ T5358] total_dirty 0 [ 542.581096][ T5358] total_writeback 0 [ 542.584983][ T5358] total_workingset_refault_anon 2616 [ 542.590325][ T5358] total_workingset_refault_file 13625 [ 542.595742][ T5358] total_swap 819200 [ 542.599619][ T5358] total_swapcached 45056 [ 542.603858][ T5358] total_pgpgin 822330 [ 542.607844][ T5358] total_pgpgout 786176 [ 542.612042][ T5358] total_pgfault 779782 [ 542.616100][ T5358] total_pgmajfault 426 [ 542.620297][ T5358] total_inactive_anon 80687104 [ 542.625041][ T5358] total_active_anon 249856 [ 542.629479][ T5358] total_inactive_file 0 [ 542.633624][ T5358] total_active_file 0 [ 542.637709][ T5358] total_unevictable 67149824 [ 542.642298][ T5358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.13460,pid=28430,uid=0 [ 542.657218][ T5358] Memory cgroup out of memory: Killed process 28430 (syz.2.13460) total-vm:96420kB, anon-rss:1264kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 542.698674][T28481] bridge: RTM_NEWNEIGH with invalid ether address [ 542.834744][T28491] netlink: 'syz.7.13476': attribute type 1 has an invalid length. [ 542.855324][T28491] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.895641][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13476'. [ 542.934288][T28491] bond12 (unregistering): Released all slaves [ 543.153477][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13480'. [ 543.162651][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13480'. [ 543.480164][T28587] lo speed is unknown, defaulting to 1000 [ 543.558500][T28587] lo speed is unknown, defaulting to 1000 [ 543.571373][T28587] lo speed is unknown, defaulting to 1000 [ 543.783033][T28616] netlink: 'syz.1.13493': attribute type 1 has an invalid length. [ 543.820433][T28616] 8021q: adding VLAN 0 to HW filter on device bond16 [ 543.831932][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13493'. [ 543.874557][T28654] bond16 (unregistering): Released all slaves [ 543.916733][T28674] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13496'. [ 543.964033][T28674] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28674 comm=syz.8.13496 [ 544.194142][T28717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13498'. [ 544.405098][T28722] lo speed is unknown, defaulting to 1000 [ 544.440485][T28722] lo speed is unknown, defaulting to 1000 [ 544.446648][T28722] lo speed is unknown, defaulting to 1000 [ 544.506685][T28656] syz.7.13495 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 544.520798][T28656] CPU: 0 UID: 0 PID: 28656 Comm: syz.7.13495 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 544.520829][T28656] Tainted: [W]=WARN [ 544.520835][T28656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.520856][T28656] Call Trace: [ 544.520879][T28656] [ 544.520889][T28656] __dump_stack+0x1d/0x30 [ 544.520912][T28656] dump_stack_lvl+0xe8/0x140 [ 544.520958][T28656] dump_stack+0x15/0x1b [ 544.520978][T28656] dump_header+0x81/0x240 [ 544.520996][T28656] oom_kill_process+0x295/0x350 [ 544.521080][T28656] out_of_memory+0x97b/0xb80 [ 544.521108][T28656] try_charge_memcg+0x610/0xa10 [ 544.521140][T28656] obj_cgroup_charge_pages+0xa6/0x150 [ 544.521179][T28656] __memcg_kmem_charge_page+0x9f/0x170 [ 544.521213][T28656] __alloc_frozen_pages_noprof+0x18f/0x360 [ 544.521249][T28656] alloc_pages_mpol+0xb3/0x260 [ 544.521280][T28656] ? alloc_pages_noprof+0x61/0x130 [ 544.521374][T28656] alloc_pages_noprof+0x90/0x130 [ 544.521407][T28656] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 544.521469][T28656] __kvmalloc_node_noprof+0x492/0x6b0 [ 544.521550][T28656] ? ip_set_alloc+0x24/0x30 [ 544.521582][T28656] ? ip_set_alloc+0x24/0x30 [ 544.521614][T28656] ip_set_alloc+0x24/0x30 [ 544.521638][T28656] hash_netiface_create+0x282/0x740 [ 544.521723][T28656] ? __pfx_hash_netiface_create+0x10/0x10 [ 544.521824][T28656] ip_set_create+0x3cc/0x970 [ 544.521863][T28656] ? __nla_parse+0x40/0x60 [ 544.521891][T28656] nfnetlink_rcv_msg+0x4c6/0x590 [ 544.521942][T28656] netlink_rcv_skb+0x123/0x220 [ 544.521981][T28656] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 544.522014][T28656] nfnetlink_rcv+0x167/0x16c0 [ 544.522036][T28656] ? mas_wr_walk_descend+0x36e/0x470 [ 544.522114][T28656] ? mas_wr_store_type+0xa75/0xcd0 [ 544.522143][T28656] ? mas_prealloc_calc+0x253/0x2a0 [ 544.522280][T28656] ? mas_wr_preallocate+0x2aa/0x370 [ 544.522310][T28656] ? mas_insert+0x1ea/0x330 [ 544.522417][T28656] ? should_fail_ex+0x30/0x280 [ 544.522441][T28656] ? selinux_nlmsg_lookup+0x99/0x890 [ 544.522567][T28656] ? __rcu_read_unlock+0x34/0x70 [ 544.522651][T28656] ? __netlink_lookup+0x266/0x2a0 [ 544.522718][T28656] netlink_unicast+0x5c0/0x690 [ 544.522751][T28656] netlink_sendmsg+0x58b/0x6b0 [ 544.522783][T28656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.522860][T28656] __sock_sendmsg+0x145/0x180 [ 544.522878][T28656] ____sys_sendmsg+0x31e/0x4a0 [ 544.522914][T28656] ___sys_sendmsg+0x17b/0x1d0 [ 544.523002][T28656] __x64_sys_sendmsg+0xd4/0x160 [ 544.523037][T28656] x64_sys_call+0x17ba/0x3000 [ 544.523062][T28656] do_syscall_64+0xd8/0x2a0 [ 544.523093][T28656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.523195][T28656] RIP: 0033:0x7f1096a5f749 [ 544.523212][T28656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.523300][T28656] RSP: 002b:00007f10954c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.523331][T28656] RAX: ffffffffffffffda RBX: 00007f1096cb5fa0 RCX: 00007f1096a5f749 [ 544.523346][T28656] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 544.523360][T28656] RBP: 00007f1096ae3f91 R08: 0000000000000000 R09: 0000000000000000 [ 544.523374][T28656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.523452][T28656] R13: 00007f1096cb6038 R14: 00007f1096cb5fa0 R15: 00007ffd05135d88 [ 544.523473][T28656] [ 544.851343][T28656] memory: usage 307200kB, limit 307200kB, failcnt 870 [ 544.858399][T28656] memory+swap: usage 372760kB, limit 9007199254740988kB, failcnt 0 [ 544.866385][T28656] kmem: usage 290308kB, limit 9007199254740988kB, failcnt 0 [ 544.873786][T28656] Memory cgroup stats for /syz7: [ 544.874286][T28656] cache 16777216 [ 544.882868][T28656] rss 376832 [ 544.886097][T28656] shmem 16777216 [ 544.889642][T28656] mapped_file 0 [ 544.893090][T28656] dirty 0 [ 544.896048][T28656] writeback 0 [ 544.899328][T28656] workingset_refault_anon 2757 [ 544.904091][T28656] workingset_refault_file 4468 [ 544.908909][T28656] swap 67133440 [ 544.912363][T28656] swapcached 90112 [ 544.916300][T28656] pgpgin 726858 [ 544.919942][T28656] pgpgout 722647 [ 544.923708][T28656] pgfault 781030 [ 544.927246][T28656] pgmajfault 318 [ 544.930788][T28656] inactive_anon 901120 [ 544.934968][T28656] active_anon 16343040 [ 544.939036][T28656] inactive_file 0 [ 544.942792][T28656] active_file 4096 [ 544.946513][T28656] unevictable 0 [ 544.949971][T28656] hierarchical_memory_limit 314572800 [ 544.955419][T28656] hierarchical_memsw_limit 9223372036854771712 [ 544.961590][T28656] total_cache 16777216 [ 544.965696][T28656] total_rss 376832 [ 544.969410][T28656] total_shmem 16777216 [ 544.973515][T28656] total_mapped_file 0 [ 544.977483][T28656] total_dirty 0 [ 544.981053][T28656] total_writeback 0 [ 544.984851][T28656] total_workingset_refault_anon 2757 [ 544.990127][T28656] total_workingset_refault_file 4468 [ 544.995535][T28656] total_swap 67133440 [ 544.999579][T28656] total_swapcached 90112 [ 545.003905][T28656] total_pgpgin 726858 [ 545.007878][T28656] total_pgpgout 722647 [ 545.011973][T28656] total_pgfault 781030 [ 545.016036][T28656] total_pgmajfault 318 [ 545.020122][T28656] total_inactive_anon 901120 [ 545.024701][T28656] total_active_anon 16343040 [ 545.029350][T28656] total_inactive_file 0 [ 545.033502][T28656] total_active_file 4096 [ 545.038022][T28656] total_unevictable 0 [ 545.042006][T28656] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.13495,pid=28655,uid=0 [ 545.057036][T28656] Memory cgroup out of memory: Killed process 28656 (syz.7.13495) total-vm:96148kB, anon-rss:1264kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 545.378991][T28790] netlink: 'syz.7.13515': attribute type 15 has an invalid length. [ 545.387038][T28790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13515'. [ 545.488219][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13520'. [ 545.497262][T28802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13520'. [ 545.507136][T28802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13520'. [ 545.516252][T28802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13520'. [ 545.569255][T28813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13523'. [ 545.662942][T28824] netlink: 'syz.7.13528': attribute type 2 has an invalid length. [ 545.670831][T28824] netlink: 'syz.7.13528': attribute type 1 has an invalid length. [ 545.678798][T28824] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13528'. [ 545.719044][T28824] bond12: option mode: invalid value (115) [ 545.733772][T28824] bond12 (unregistering): Released all slaves [ 546.008625][T28906] lo speed is unknown, defaulting to 1000 [ 546.017844][T28901] netlink: 'syz.7.13531': attribute type 1 has an invalid length. [ 546.054764][T28906] lo speed is unknown, defaulting to 1000 [ 546.061213][T28906] lo speed is unknown, defaulting to 1000 [ 546.243941][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 546.243975][ T29] audit: type=1326 audit(2000000048.653:32175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.289260][ T29] audit: type=1326 audit(2000000048.684:32176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.313065][ T29] audit: type=1326 audit(2000000048.684:32177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.336884][ T29] audit: type=1326 audit(2000000048.684:32178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.360583][ T29] audit: type=1326 audit(2000000048.684:32179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.384289][ T29] audit: type=1326 audit(2000000048.684:32180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.407938][ T29] audit: type=1326 audit(2000000048.684:32181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.408278][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13537'. [ 546.431647][ T29] audit: type=1326 audit(2000000048.684:32182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.464397][ T29] audit: type=1326 audit(2000000048.684:32183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.488071][ T29] audit: type=1326 audit(2000000048.684:32184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.1.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 546.603339][T28950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13542'. [ 546.715254][T28968] netlink: 27 bytes leftover after parsing attributes in process `syz.8.13549'. [ 547.227625][T29017] netlink: 'syz.8.13564': attribute type 4 has an invalid length. [ 547.251526][T29010] lo speed is unknown, defaulting to 1000 [ 547.288651][T29010] lo speed is unknown, defaulting to 1000 [ 547.294801][T29010] lo speed is unknown, defaulting to 1000 [ 547.810831][T29058] netlink: 'syz.8.13572': attribute type 1 has an invalid length. [ 547.818869][T29058] netlink: 'syz.8.13572': attribute type 4 has an invalid length. [ 547.842196][T29058] netlink: 'syz.8.13572': attribute type 1 has an invalid length. [ 547.850236][T29058] netlink: 'syz.8.13572': attribute type 4 has an invalid length. [ 548.347428][T29113] netlink: '+}[@': attribute type 2 has an invalid length. [ 548.434077][T29119] 8021q: adding VLAN 0 to HW filter on device .` [ 548.442845][T29119] net_ratelimit: 448 callbacks suppressed [ 548.442912][T29119] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 548.490470][T29127] netlink: 'syz.8.13591': attribute type 1 has an invalid length. [ 548.506684][T29127] 8021q: adding VLAN 0 to HW filter on device bond13 [ 548.530685][T29127] bond13 (unregistering): Released all slaves [ 548.789118][T29243] netlink: 'syz.8.13600': attribute type 1 has an invalid length. [ 548.825221][T29243] 8021q: adding VLAN 0 to HW filter on device bond13 [ 548.879030][T29281] bond13 (unregistering): Released all slaves [ 550.237089][T29353] lo speed is unknown, defaulting to 1000 [ 550.274557][T29353] lo speed is unknown, defaulting to 1000 [ 550.280830][T29353] lo speed is unknown, defaulting to 1000 [ 550.890415][T29408] netlink: 'syz.8.13625': attribute type 1 has an invalid length. [ 550.939160][T29410] __nla_validate_parse: 11 callbacks suppressed [ 550.939177][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13625'. [ 551.041899][T29408] 8021q: adding VLAN 0 to HW filter on device bond13 [ 551.056801][T29410] bond13 (unregistering): Released all slaves [ 551.300474][T29490] netlink: 'syz.8.13631': attribute type 15 has an invalid length. [ 551.308462][T29490] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13631'. [ 551.477552][T29504] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13638'. [ 551.737173][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 551.737187][ T29] audit: type=1326 audit(2000000054.416:32423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.767893][ T29] audit: type=1326 audit(2000000054.458:32424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.791672][ T29] audit: type=1326 audit(2000000054.458:32425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.815559][ T29] audit: type=1326 audit(2000000054.458:32426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.888985][ T29] audit: type=1326 audit(2000000054.500:32427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.912732][ T29] audit: type=1326 audit(2000000054.553:32428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.936513][ T29] audit: type=1326 audit(2000000054.553:32429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29527 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 551.960427][ T29] audit: type=1326 audit(2000000054.553:32430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29535 comm="syz.2.13642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5de61a2005 code=0x7ffc0000 [ 551.999367][ T29] audit: type=1326 audit(2000000054.689:32431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29539 comm="syz.2.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 552.096299][ T29] audit: type=1326 audit(2000000054.689:32432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29539 comm="syz.2.13646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 552.124416][T29542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13647'. [ 552.171547][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13647'. [ 552.832249][T29569] 8021q: adding VLAN 0 to HW filter on device .` [ 552.859004][T29569] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 553.237987][T29608] syzkaller0: entered allmulticast mode [ 553.244105][T29607] syzkaller0: left allmulticast mode [ 553.273125][T29613] bond8: left promiscuous mode [ 553.278000][T29613] bridge23: left promiscuous mode [ 553.283448][T29613] veth34: left promiscuous mode [ 553.288567][T29613] veth46: left promiscuous mode [ 553.352822][T29624] netlink: 'syz.1.13668': attribute type 4 has an invalid length. [ 553.368027][T29624] netlink: 'syz.1.13668': attribute type 4 has an invalid length. [ 553.389337][ T3551] lo speed is unknown, defaulting to 1000 [ 553.395156][ T3551] syz2: Port: 1 Link ACTIVE [ 553.430838][T29633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29633 comm=syz.7.13680 [ 553.583857][T29638] netlink: 'syz.8.13669': attribute type 1 has an invalid length. [ 554.128985][T29662] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13679'. [ 554.149258][T29646] Set syz1 is full, maxelem 65536 reached [ 554.179616][T29662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29662 comm=syz.8.13679 [ 554.249542][T29662] netlink: 'syz.8.13679': attribute type 1 has an invalid length. [ 554.477680][T29680] netlink: 'syz.8.13682': attribute type 2 has an invalid length. [ 554.485544][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13682'. [ 554.502795][T29686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13684'. [ 555.593888][T29714] netlink: 83992 bytes leftover after parsing attributes in process `+“[@'. [ 555.603102][T29714] netlink: zone id is out of range [ 555.608211][T29714] netlink: zone id is out of range [ 555.613937][T29714] netlink: zone id is out of range [ 555.619192][T29714] netlink: zone id is out of range [ 555.631624][T29714] netlink: zone id is out of range [ 555.636805][T29714] netlink: zone id is out of range [ 555.641971][T29714] netlink: zone id is out of range [ 555.647084][T29714] netlink: zone id is out of range [ 555.652232][T29714] netlink: zone id is out of range [ 555.736527][T29724] netlink: 'syz.1.13696': attribute type 12 has an invalid length. [ 556.084846][T29782] netlink: 'syz.2.13702': attribute type 13 has an invalid length. [ 556.118436][T29782] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 556.170153][T29784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13703'. [ 556.200577][T29788] netlink: 'syz.2.13705': attribute type 1 has an invalid length. [ 556.219838][T29788] 8021q: adding VLAN 0 to HW filter on device bond9 [ 556.235914][T29788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13705'. [ 556.247128][T29788] bond9 (unregistering): Released all slaves [ 556.310312][T29861] veth38: entered promiscuous mode [ 556.315559][T29861] veth38: entered allmulticast mode [ 556.391649][T29861] lo speed is unknown, defaulting to 1000 [ 556.429749][T29861] lo speed is unknown, defaulting to 1000 [ 556.436014][T29861] lo speed is unknown, defaulting to 1000 [ 556.485859][T29907] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13715'. [ 556.594548][T29923] lo speed is unknown, defaulting to 1000 [ 556.609324][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 556.609340][ T29] audit: type=1326 audit(2000000059.529:32706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29904 comm="syz.2.13709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 556.639325][ T29] audit: type=1326 audit(2000000059.529:32707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29860 comm="syz.2.13709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 556.663090][ T29] audit: type=1326 audit(2000000059.529:32708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29860 comm="syz.2.13709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 556.690985][T29933] netlink: 'syz.9.13718': attribute type 2 has an invalid length. [ 556.698926][T29933] netlink: 'syz.9.13718': attribute type 1 has an invalid length. [ 556.706859][T29933] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13718'. [ 556.724756][T29933] bond10: option mode: invalid value (115) [ 556.732310][T29933] bond10 (unregistering): Released all slaves [ 556.764779][T29923] lo speed is unknown, defaulting to 1000 [ 556.771556][T29923] lo speed is unknown, defaulting to 1000 [ 556.818598][T30018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13721'. [ 556.885378][T30018] veth1: entered promiscuous mode [ 556.902394][T30018] bridge0: entered promiscuous mode [ 556.933720][T30018] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 556.947295][T30018] hsr1: entered promiscuous mode [ 557.174128][ T29] audit: type=1326 audit(2000000060.127:32709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.237276][ T29] audit: type=1326 audit(2000000060.127:32710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.260983][ T29] audit: type=1326 audit(2000000060.127:32711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.285092][ T29] audit: type=1326 audit(2000000060.127:32712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.308857][ T29] audit: type=1326 audit(2000000060.127:32713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.332564][ T29] audit: type=1326 audit(2000000060.127:32714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.356446][ T29] audit: type=1326 audit(2000000060.127:32715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30050 comm="syz.2.13730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 557.382038][T30057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13733'. [ 557.910490][T30046] syz.1.13729 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 557.924605][T30046] CPU: 1 UID: 0 PID: 30046 Comm: syz.1.13729 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 557.924637][T30046] Tainted: [W]=WARN [ 557.924645][T30046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.924708][T30046] Call Trace: [ 557.924713][T30046] [ 557.924725][T30046] __dump_stack+0x1d/0x30 [ 557.924741][T30046] dump_stack_lvl+0xe8/0x140 [ 557.924755][T30046] dump_stack+0x15/0x1b [ 557.924766][T30046] dump_header+0x81/0x240 [ 557.924822][T30046] oom_kill_process+0x295/0x350 [ 557.924836][T30046] out_of_memory+0x97b/0xb80 [ 557.924884][T30046] try_charge_memcg+0x610/0xa10 [ 557.924901][T30046] obj_cgroup_charge_pages+0xa6/0x150 [ 557.924919][T30046] __memcg_kmem_charge_page+0x9f/0x170 [ 557.924944][T30046] __alloc_frozen_pages_noprof+0x18f/0x360 [ 557.924962][T30046] alloc_pages_mpol+0xb3/0x260 [ 557.925026][T30046] alloc_pages_noprof+0x90/0x130 [ 557.925043][T30046] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 557.925067][T30046] __kvmalloc_node_noprof+0x492/0x6b0 [ 557.925085][T30046] ? ip_set_alloc+0x24/0x30 [ 557.925128][T30046] ? ip_set_alloc+0x24/0x30 [ 557.925209][T30046] ip_set_alloc+0x24/0x30 [ 557.925226][T30046] hash_netiface_create+0x282/0x740 [ 557.925282][T30046] ? __pfx_hash_netiface_create+0x10/0x10 [ 557.925440][T30046] ip_set_create+0x3cc/0x970 [ 557.925465][T30046] ? __nla_parse+0x40/0x60 [ 557.925483][T30046] nfnetlink_rcv_msg+0x4c6/0x590 [ 557.925518][T30046] netlink_rcv_skb+0x123/0x220 [ 557.925580][T30046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 557.925599][T30046] nfnetlink_rcv+0x167/0x16c0 [ 557.925622][T30046] ? __list_del_entry_valid_or_report+0x65/0x130 [ 557.925728][T30046] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 557.925761][T30046] ? should_fail_ex+0x30/0x280 [ 557.925783][T30046] ? selinux_nlmsg_lookup+0x99/0x890 [ 557.925798][T30046] ? __rcu_read_unlock+0x34/0x70 [ 557.925820][T30046] ? __netlink_lookup+0x266/0x2a0 [ 557.925840][T30046] netlink_unicast+0x5c0/0x690 [ 557.925857][T30046] netlink_sendmsg+0x58b/0x6b0 [ 557.925992][T30046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.926009][T30046] __sock_sendmsg+0x145/0x180 [ 557.926021][T30046] ____sys_sendmsg+0x31e/0x4a0 [ 557.926098][T30046] ___sys_sendmsg+0x17b/0x1d0 [ 557.926123][T30046] __x64_sys_sendmsg+0xd4/0x160 [ 557.926141][T30046] x64_sys_call+0x17ba/0x3000 [ 557.926195][T30046] do_syscall_64+0xd8/0x2a0 [ 557.926215][T30046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.926241][T30046] RIP: 0033:0x7f664905f749 [ 557.926251][T30046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.926281][T30046] RSP: 002b:00007f6647abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.926366][T30046] RAX: ffffffffffffffda RBX: 00007f66492b5fa0 RCX: 00007f664905f749 [ 557.926374][T30046] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 557.926381][T30046] RBP: 00007f66490e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.926388][T30046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.926442][T30046] R13: 00007f66492b6038 R14: 00007f66492b5fa0 R15: 00007ffefe11aa58 [ 557.926454][T30046] [ 558.234993][T30046] memory: usage 307200kB, limit 307200kB, failcnt 1024 [ 558.241927][T30046] memory+swap: usage 317164kB, limit 9007199254740988kB, failcnt 0 [ 558.249823][T30046] kmem: usage 305832kB, limit 9007199254740988kB, failcnt 0 [ 558.257160][T30046] Memory cgroup stats for /syz1: [ 558.257322][T30046] cache 942080 [ 558.265703][T30046] rss 393216 [ 558.268959][T30046] shmem 942080 [ 558.272348][T30046] mapped_file 0 [ 558.275811][T30046] dirty 0 [ 558.278917][T30046] writeback 0 [ 558.282209][T30046] workingset_refault_anon 4187 [ 558.287001][T30046] workingset_refault_file 0 [ 558.291544][T30046] swap 10203136 [ 558.294989][T30046] swapcached 65536 [ 558.298732][T30046] pgpgin 634978 [ 558.302181][T30046] pgpgout 634636 [ 558.305717][T30046] pgfault 620492 [ 558.309284][T30046] pgmajfault 594 [ 558.312870][T30046] inactive_anon 69632 [ 558.316884][T30046] active_anon 1331200 [ 558.320856][T30046] inactive_file 0 [ 558.324485][T30046] active_file 0 [ 558.328036][T30046] unevictable 0 [ 558.331490][T30046] hierarchical_memory_limit 314572800 [ 558.336902][T30046] hierarchical_memsw_limit 9223372036854771712 [ 558.343121][T30046] total_cache 942080 [ 558.347049][T30046] total_rss 393216 [ 558.350756][T30046] total_shmem 942080 [ 558.354643][T30046] total_mapped_file 0 [ 558.358713][T30046] total_dirty 0 [ 558.362164][T30046] total_writeback 0 [ 558.366011][T30046] total_workingset_refault_anon 4187 [ 558.371282][T30046] total_workingset_refault_file 0 [ 558.376329][T30046] total_swap 10203136 [ 558.380299][T30046] total_swapcached 65536 [ 558.384551][T30046] total_pgpgin 634978 [ 558.388517][T30046] total_pgpgout 634636 [ 558.392643][T30046] total_pgfault 620492 [ 558.396732][T30046] total_pgmajfault 594 [ 558.400791][T30046] total_inactive_anon 69632 [ 558.405303][T30046] total_active_anon 1331200 [ 558.409794][T30046] total_inactive_file 0 [ 558.413970][T30046] total_active_file 0 [ 558.417946][T30046] total_unevictable 0 [ 558.421946][T30046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.13729,pid=30045,uid=0 [ 558.434081][T30081] lo speed is unknown, defaulting to 1000 [ 558.436893][T30046] Memory cgroup out of memory: Killed process 30045 (syz.1.13729) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 558.556080][T30081] lo speed is unknown, defaulting to 1000 [ 558.562628][T30081] lo speed is unknown, defaulting to 1000 [ 558.636727][T30104] bridge0: port 1(batadv1) entered blocking state [ 558.643309][T30104] bridge0: port 1(batadv1) entered disabled state [ 558.668018][T30104] batadv1: entered allmulticast mode [ 558.678278][T30104] batadv1: entered promiscuous mode [ 558.867015][T30148] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13753'. [ 559.120844][ T4786] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 559.130113][ T4786] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 559.188543][T30176] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13762'. [ 559.226039][T30153] lo speed is unknown, defaulting to 1000 [ 559.382270][T30153] lo speed is unknown, defaulting to 1000 [ 559.464555][T30192] netlink: 'syz.9.13766': attribute type 4 has an invalid length. [ 559.509985][T30153] lo speed is unknown, defaulting to 1000 [ 559.606311][T30178] lo speed is unknown, defaulting to 1000 [ 559.723019][T30178] lo speed is unknown, defaulting to 1000 [ 559.914233][T30178] lo speed is unknown, defaulting to 1000 [ 560.377435][T30250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13772'. [ 560.392681][T30250] team0: entered promiscuous mode [ 560.397762][T30250] team0: entered allmulticast mode [ 560.406772][T30250] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.517020][T30287] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13775'. [ 561.246478][T30327] lo speed is unknown, defaulting to 1000 [ 561.491407][T30327] lo speed is unknown, defaulting to 1000 [ 561.509708][T30327] lo speed is unknown, defaulting to 1000 [ 561.569630][T30335] lo speed is unknown, defaulting to 1000 [ 561.614190][T30335] lo speed is unknown, defaulting to 1000 [ 561.620465][T30335] lo speed is unknown, defaulting to 1000 [ 562.375187][T30393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30393 comm=syz.9.13793 [ 562.421771][T30393] __nla_validate_parse: 1 callbacks suppressed [ 562.421785][T30393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13793'. [ 562.425395][T30380] bond13: entered promiscuous mode [ 562.444362][T30380] 8021q: adding VLAN 0 to HW filter on device bond13 [ 562.641975][T30453] lo: Caught tx_queue_len zero misconfig [ 562.935668][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 562.935683][ T29] audit: type=1326 audit(2000000322.166:32897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 562.983162][ T29] audit: type=1326 audit(2000000322.166:32898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.007056][ T29] audit: type=1326 audit(2000000322.166:32899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.031085][ T29] audit: type=1326 audit(2000000322.208:32900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.054948][ T29] audit: type=1326 audit(2000000322.208:32901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.078573][ T29] audit: type=1326 audit(2000000322.208:32902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.102754][ T29] audit: type=1326 audit(2000000322.208:32903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30486 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6649092005 code=0x7ffc0000 [ 563.126472][ T29] audit: type=1326 audit(2000000322.208:32904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.150216][ T29] audit: type=1326 audit(2000000322.208:32905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.174004][ T29] audit: type=1326 audit(2000000322.208:32906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.1.13804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 563.295151][T30502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13811'. [ 563.330185][T30502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30502 comm=syz.1.13811 [ 563.476718][T30499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30499 comm=syz.8.13810 [ 563.602385][T30531] netlink: 'syz.2.13814': attribute type 4 has an invalid length. [ 564.205309][T30579] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13826'. [ 564.404618][T30582] lo speed is unknown, defaulting to 1000 [ 564.464579][T30582] lo speed is unknown, defaulting to 1000 [ 564.471230][T30582] lo speed is unknown, defaulting to 1000 [ 565.528202][T30625] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 566.514511][T30656] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13855'. [ 566.656350][T30671] bridge: RTM_NEWNEIGH with invalid ether address [ 566.681768][T30677] xt_TCPMSS: Only works on TCP SYN packets [ 566.767643][T30680] net_ratelimit: 347 callbacks suppressed [ 566.767710][T30680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.942920][T30690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13859'. [ 567.546353][T30699] lo speed is unknown, defaulting to 1000 [ 567.580302][T30699] lo speed is unknown, defaulting to 1000 [ 567.586360][T30699] lo speed is unknown, defaulting to 1000 [ 568.283416][T30734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13868'. [ 569.640147][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13877'. [ 570.013722][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13880'. [ 570.083407][T30828] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 570.133013][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 570.133030][ T29] audit: type=1326 audit(2000000329.725:32994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.201175][ T29] audit: type=1326 audit(2000000329.756:32995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.225010][ T29] audit: type=1326 audit(2000000329.756:32996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1096a5f783 code=0x7ffc0000 [ 570.248749][ T29] audit: type=1326 audit(2000000329.756:32997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1096a5f783 code=0x7ffc0000 [ 570.272236][ T29] audit: type=1326 audit(2000000329.756:32998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.295947][ T29] audit: type=1326 audit(2000000329.756:32999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.319700][ T29] audit: type=1326 audit(2000000329.756:33000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.344029][ T29] audit: type=1326 audit(2000000329.767:33001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.367855][ T29] audit: type=1326 audit(2000000329.767:33002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.391504][ T29] audit: type=1326 audit(2000000329.767:33003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30827 comm="syz.7.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 570.553899][T30826] lo speed is unknown, defaulting to 1000 [ 570.589765][T30826] lo speed is unknown, defaulting to 1000 [ 570.598919][T30826] lo speed is unknown, defaulting to 1000 [ 570.673740][T30843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13885'. [ 570.921791][T30872] geneve3: entered promiscuous mode [ 570.927062][T30872] geneve3: entered allmulticast mode [ 571.037066][ T4778] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.095344][ T4778] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.104739][ T4778] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.119029][ T4778] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.695959][T30888] lo speed is unknown, defaulting to 1000 [ 571.754768][T30888] lo speed is unknown, defaulting to 1000 [ 571.761549][T30888] lo speed is unknown, defaulting to 1000 [ 573.539025][T30956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13906'. [ 573.562433][T30956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13906'. [ 573.627064][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13907'. [ 573.636812][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13907'. [ 573.805383][T30976] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 574.083978][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13922'. [ 574.105930][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13919'. [ 574.115727][T31005] netlink: 312 bytes leftover after parsing attributes in process `syz.2.13919'. [ 574.124902][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13919'. [ 574.135890][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13923'. [ 574.909210][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 574.909225][ T29] audit: type=1326 audit(2000000334.743:33164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.7.13924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 574.951474][ T29] audit: type=1326 audit(2000000334.785:33165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.7.13924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 574.975200][ T29] audit: type=1326 audit(2000000334.785:33166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.7.13924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 575.023711][ T29] audit: type=1326 audit(2000000334.848:33167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.7.13924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 575.047604][ T29] audit: type=1326 audit(2000000334.848:33168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.7.13924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 575.071436][ T29] audit: type=1326 audit(2000000334.848:33169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31017 comm="syz.7.13924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 575.241245][T31048] netlink: 204 bytes leftover after parsing attributes in process `syz.8.13932'. [ 575.284904][T31054] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 575.321992][T31054] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 575.379431][ T29] audit: type=1326 audit(2000000335.236:33170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.13935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 575.434075][ T29] audit: type=1326 audit(2000000335.268:33171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.13935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 575.457826][ T29] audit: type=1326 audit(2000000335.268:33172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31063 comm="syz.1.13935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 575.513058][T31054] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 575.528232][T31047] lo speed is unknown, defaulting to 1000 [ 575.560340][T31054] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 575.571921][T31047] lo speed is unknown, defaulting to 1000 [ 575.578236][T31047] lo speed is unknown, defaulting to 1000 [ 575.668899][ T4789] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 575.683123][ T4789] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 575.697716][ T4789] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 575.721422][ T4789] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 575.812978][T31115] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 575.925827][ T29] audit: type=1326 audit(2000000335.813:33173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de616f749 code=0x7ffc0000 [ 576.433024][T31153] lo speed is unknown, defaulting to 1000 [ 576.495425][T31153] lo speed is unknown, defaulting to 1000 [ 576.502270][T31153] lo speed is unknown, defaulting to 1000 [ 576.997766][T31180] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 577.012307][T31180] .` (unregistering): Released all slaves [ 577.220515][T31247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31247 comm=syz.9.13966 [ 578.393078][T31317] __nla_validate_parse: 4 callbacks suppressed [ 578.393096][T31317] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 578.411379][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13987'. [ 578.412718][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13999'. [ 578.431436][T31327] netlink: 312 bytes leftover after parsing attributes in process `syz.9.13999'. [ 578.440781][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13999'. [ 578.636342][T31347] netlink: 'syz.1.13990': attribute type 30 has an invalid length. [ 579.047545][T31376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13998'. [ 579.174641][T31387] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 579.204593][T31387] hsr_slave_0: left promiscuous mode [ 579.765295][ T5246] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 579.776295][ T5246] CPU: 1 UID: 0 PID: 5246 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 579.776334][ T5246] Tainted: [W]=WARN [ 579.776340][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.776406][ T5246] Call Trace: [ 579.776411][ T5246] [ 579.776420][ T5246] __dump_stack+0x1d/0x30 [ 579.776445][ T5246] dump_stack_lvl+0xe8/0x140 [ 579.776538][ T5246] dump_stack+0x15/0x1b [ 579.776560][ T5246] dump_header+0x81/0x240 [ 579.776582][ T5246] oom_kill_process+0x295/0x350 [ 579.776606][ T5246] out_of_memory+0x97b/0xb80 [ 579.776625][ T5246] ? __cond_resched+0x4e/0x90 [ 579.776681][ T5246] try_charge_memcg+0x610/0xa10 [ 579.776706][ T5246] charge_memcg+0x51/0xc0 [ 579.776788][ T5246] __mem_cgroup_charge+0x28/0xb0 [ 579.776848][ T5246] filemap_add_folio+0x111/0x360 [ 579.776944][ T5246] __filemap_get_folio_mpol+0x326/0x650 [ 579.776975][ T5246] filemap_fault+0x44d/0xb70 [ 579.777001][ T5246] __do_fault+0xbc/0x200 [ 579.777016][ T5246] handle_mm_fault+0xfab/0x2c60 [ 579.777087][ T5246] do_user_addr_fault+0x630/0x1080 [ 579.777160][ T5246] exc_page_fault+0x62/0xa0 [ 579.777183][ T5246] asm_exc_page_fault+0x26/0x30 [ 579.777203][ T5246] RIP: 0033:0x7fae3f605fd4 [ 579.777220][ T5246] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 579.777261][ T5246] RSP: 002b:00007fff40b885c0 EFLAGS: 00010206 [ 579.777275][ T5246] RAX: 0000001b34624000 RBX: 0000000000001f01 RCX: 000000000008dd88 [ 579.777286][ T5246] RDX: 000000000afc8c6d RSI: 00007fff40b88650 RDI: 0000000000000001 [ 579.777298][ T5246] RBP: 00007fff40b885fc R08: 0000000029e9056f R09: 7fffffffffffffff [ 579.777309][ T5246] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 579.777319][ T5246] R13: 00000000000927c0 R14: 000000000008dfae R15: 00007fff40b88650 [ 579.777343][ T5246] [ 579.777349][ T5246] memory: usage 307200kB, limit 307200kB, failcnt 1199 [ 579.973771][ T5246] memory+swap: usage 345456kB, limit 9007199254740988kB, failcnt 0 [ 579.981753][ T5246] kmem: usage 227592kB, limit 9007199254740988kB, failcnt 0 [ 579.989128][ T5246] Memory cgroup stats for /syz9: [ 579.989827][ T5246] cache 80191488 [ 579.998578][ T5246] rss 1253376 [ 580.001899][ T5246] shmem 80191488 [ 580.005487][ T5246] mapped_file 0 [ 580.009020][ T5246] dirty 0 [ 580.012034][ T5246] writeback 0 [ 580.015310][ T5246] workingset_refault_anon 4845 [ 580.020087][ T5246] workingset_refault_file 943 [ 580.024753][ T5246] swap 39174144 [ 580.028240][ T5246] swapcached 20480 [ 580.031952][ T5246] pgpgin 823317 [ 580.035418][ T5246] pgpgout 803415 [ 580.039026][ T5246] pgfault 838782 [ 580.042559][ T5246] pgmajfault 644 [ 580.046132][ T5246] inactive_anon 48549888 [ 580.050468][ T5246] active_anon 32964608 [ 580.054563][ T5246] inactive_file 4096 [ 580.058462][ T5246] active_file 0 [ 580.061970][ T5246] unevictable 0 [ 580.065447][ T5246] hierarchical_memory_limit 314572800 [ 580.070820][ T5246] hierarchical_memsw_limit 9223372036854771712 [ 580.077023][ T5246] total_cache 80191488 [ 580.081089][ T5246] total_rss 1253376 [ 580.084955][ T5246] total_shmem 80191488 [ 580.089088][ T5246] total_mapped_file 0 [ 580.093102][ T5246] total_dirty 0 [ 580.096553][ T5246] total_writeback 0 [ 580.100352][ T5246] total_workingset_refault_anon 4845 [ 580.105689][ T5246] total_workingset_refault_file 943 [ 580.110875][ T5246] total_swap 39174144 [ 580.115046][ T5246] total_swapcached 20480 [ 580.119278][ T5246] total_pgpgin 823317 [ 580.123277][ T5246] total_pgpgout 803415 [ 580.127333][ T5246] total_pgfault 838782 [ 580.131479][ T5246] total_pgmajfault 644 [ 580.135532][ T5246] total_inactive_anon 48549888 [ 580.140323][ T5246] total_active_anon 32964608 [ 580.145032][ T5246] total_inactive_file 4096 [ 580.149451][ T5246] total_active_file 0 [ 580.153477][ T5246] total_unevictable 0 [ 580.157451][ T5246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.13991,pid=31366,uid=0 [ 580.172269][ T5246] Memory cgroup out of memory: Killed process 31366 (syz.9.13991) total-vm:96148kB, anon-rss:1268kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 580.462293][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 580.462335][ T29] audit: type=1326 audit(2000000340.548:33197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.492397][ T29] audit: type=1326 audit(2000000340.548:33198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.516209][ T29] audit: type=1326 audit(2000000340.548:33199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.540168][ T29] audit: type=1326 audit(2000000340.548:33200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.563903][ T29] audit: type=1326 audit(2000000340.548:33201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.588071][ T29] audit: type=1326 audit(2000000340.548:33202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.612001][ T29] audit: type=1326 audit(2000000340.548:33203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.636084][ T29] audit: type=1326 audit(2000000340.548:33204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 580.659950][ T29] audit: type=1326 audit(2000000340.548:33205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fae3f72f783 code=0x7ffc0000 [ 580.683512][ T29] audit: type=1326 audit(2000000340.548:33206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31431 comm="syz.9.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae3f72e1ff code=0x7ffc0000 [ 580.912736][T31442] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14020'. [ 580.994593][T31448] netlink: 'syz.8.14021': attribute type 1 has an invalid length. [ 581.023569][T31448] 8021q: adding VLAN 0 to HW filter on device bond14 [ 581.089083][T31448] bond14: (slave veth45): Enslaving as an active interface with a down link [ 581.194454][T31448] vlan2: entered allmulticast mode [ 581.199640][T31448] veth1: entered allmulticast mode [ 581.205540][T31448] bond14: (slave vlan2): Opening slave failed [ 581.612444][T31526] lo speed is unknown, defaulting to 1000 [ 581.673698][T31526] lo speed is unknown, defaulting to 1000 [ 581.680312][T31526] lo speed is unknown, defaulting to 1000 [ 582.008342][T31551] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14034'. [ 583.310992][T31627] syz.8.14056 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 583.320727][T31627] CPU: 1 UID: 0 PID: 31627 Comm: syz.8.14056 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 583.320760][T31627] Tainted: [W]=WARN [ 583.320767][T31627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.320778][T31627] Call Trace: [ 583.320785][T31627] [ 583.320793][T31627] __dump_stack+0x1d/0x30 [ 583.320817][T31627] dump_stack_lvl+0xe8/0x140 [ 583.320839][T31627] dump_stack+0x15/0x1b [ 583.320857][T31627] dump_header+0x81/0x240 [ 583.320875][T31627] oom_kill_process+0x295/0x350 [ 583.320899][T31627] out_of_memory+0x97b/0xb80 [ 583.320924][T31627] try_charge_memcg+0x610/0xa10 [ 583.320953][T31627] obj_cgroup_charge_pages+0xa6/0x150 [ 583.320984][T31627] obj_cgroup_charge_account+0x73/0x1a0 [ 583.321012][T31627] ? vma_set_page_prot+0xc3/0xf0 [ 583.321036][T31627] __memcg_slab_post_alloc_hook+0x397/0x530 [ 583.321068][T31627] kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 583.321090][T31627] ? vm_area_dup+0x33/0x2c0 [ 583.321112][T31627] vm_area_dup+0x33/0x2c0 [ 583.321133][T31627] __split_vma+0xe9/0x660 [ 583.321155][T31627] vma_modify+0xb53/0xd50 [ 583.321179][T31627] ? mas_ascend+0x1e9/0x560 [ 583.321199][T31627] vma_modify_flags+0x10c/0x190 [ 583.321231][T31627] mprotect_fixup+0x30f/0x5e0 [ 583.321249][T31627] do_mprotect_pkey+0x6d6/0x980 [ 583.321277][T31627] __x64_sys_mprotect+0x48/0x60 [ 583.321292][T31627] x64_sys_call+0x2c3b/0x3000 [ 583.321311][T31627] do_syscall_64+0xd8/0x2a0 [ 583.321337][T31627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.321355][T31627] RIP: 0033:0x7f9a8d35f807 [ 583.321367][T31627] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.321382][T31627] RSP: 002b:00007fff4b0f7668 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 583.321397][T31627] RAX: ffffffffffffffda RBX: 00007f9a8bd856c0 RCX: 00007f9a8d35f807 [ 583.321407][T31627] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f9a8bd66000 [ 583.321417][T31627] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 583.321427][T31627] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff4b0f77c0 [ 583.321437][T31627] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 583.321454][T31627] [ 583.543773][T31627] memory: usage 307200kB, limit 307200kB, failcnt 979 [ 583.550583][T31627] memory+swap: usage 316508kB, limit 9007199254740988kB, failcnt 0 [ 583.558474][T31627] kmem: usage 231140kB, limit 9007199254740988kB, failcnt 0 [ 583.565777][T31627] Memory cgroup stats for /syz8: [ 583.597227][T31627] cache 58748928 [ 583.605760][T31627] rss 1568768 [ 583.609071][T31627] shmem 58748928 [ 583.612597][T31627] mapped_file 0 [ 583.616045][T31627] dirty 0 [ 583.619005][T31627] writeback 0 [ 583.622367][T31627] workingset_refault_anon 8733 [ 583.627162][T31627] workingset_refault_file 4477 [ 583.631909][T31627] swap 10063872 [ 583.635347][T31627] swapcached 143360 [ 583.639152][T31627] pgpgin 1007500 [ 583.642686][T31627] pgpgout 992738 [ 583.646251][T31627] pgfault 858995 [ 583.649782][T31627] pgmajfault 1140 [ 583.653399][T31627] inactive_anon 57987072 [ 583.657710][T31627] active_anon 2473984 [ 583.661684][T31627] inactive_file 0 [ 583.665332][T31627] active_file 4096 [ 583.669041][T31627] unevictable 0 [ 583.672484][T31627] hierarchical_memory_limit 314572800 [ 583.678001][T31627] hierarchical_memsw_limit 9223372036854771712 [ 583.684260][T31627] total_cache 58748928 [ 583.688323][T31627] total_rss 1568768 [ 583.692107][T31627] total_shmem 58748928 [ 583.696189][T31627] total_mapped_file 0 [ 583.700167][T31627] total_dirty 0 [ 583.703655][T31627] total_writeback 0 [ 583.707456][T31627] total_workingset_refault_anon 8733 [ 583.712771][T31627] total_workingset_refault_file 4477 [ 583.718040][T31627] total_swap 10063872 [ 583.722131][T31627] total_swapcached 143360 [ 583.726470][T31627] total_pgpgin 1007500 [ 583.730537][T31627] total_pgpgout 992738 [ 583.734626][T31627] total_pgfault 858995 [ 583.738715][T31627] total_pgmajfault 1140 [ 583.742912][T31627] total_inactive_anon 57987072 [ 583.747689][T31627] total_active_anon 2473984 [ 583.752209][T31627] total_inactive_file 0 [ 583.756369][T31627] total_active_file 4096 [ 583.760844][T31627] total_unevictable 0 [ 583.764830][T31627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.14056,pid=31627,uid=0 [ 583.779584][T31627] Memory cgroup out of memory: Killed process 31627 (syz.8.14056) total-vm:96148kB, anon-rss:1268kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 583.863060][T31655] netlink: 64 bytes leftover after parsing attributes in process `syz.8.14068'. [ 584.448236][T31670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14081'. [ 584.749800][T31685] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 584.805294][T31688] netlink: 64 bytes leftover after parsing attributes in process `syz.9.14075'. [ 584.838888][T31691] netlink: 64 bytes leftover after parsing attributes in process `syz.9.14077'. [ 585.055778][T31695] netlink: 'syz.7.14078': attribute type 13 has an invalid length. [ 585.063809][T31695] netlink: 'syz.7.14078': attribute type 17 has an invalid length. [ 585.099458][T31695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.115066][T26775] lo speed is unknown, defaulting to 1000 [ 585.120868][T26775] syz0: Port: 1 Link ACTIVE [ 585.343093][T31707] netlink: 'syz.8.14084': attribute type 12 has an invalid length. [ 585.873051][T31717] lo speed is unknown, defaulting to 1000 [ 585.930965][T31717] lo speed is unknown, defaulting to 1000 [ 585.937421][T31717] lo speed is unknown, defaulting to 1000 [ 586.597522][T31759] netlink: 'syz.1.14095': attribute type 4 has an invalid length. [ 586.639694][ T9] lo speed is unknown, defaulting to 1000 [ 586.645452][ T9] syz2: Port: 1 Link DOWN [ 586.788703][T31765] netlink: 'syz.1.14095': attribute type 4 has an invalid length. [ 586.818233][ T9] lo speed is unknown, defaulting to 1000 [ 586.824025][ T9] syz2: Port: 1 Link ACTIVE [ 587.225779][T31776] netlink: 14 bytes leftover after parsing attributes in process `syz.7.14098'. [ 587.439102][T31781] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14101'. [ 587.744969][T31806] netlink: 'syz.9.14107': attribute type 1 has an invalid length. [ 587.762884][T31806] 8021q: adding VLAN 0 to HW filter on device bond10 [ 587.847156][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14109'. [ 588.040332][T31861] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.892656][T31864] lo speed is unknown, defaulting to 1000 [ 588.928969][T31864] lo speed is unknown, defaulting to 1000 [ 588.935173][T31864] lo speed is unknown, defaulting to 1000 [ 589.021239][T31861] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 589.096181][T31865] lo speed is unknown, defaulting to 1000 [ 589.226819][T31865] lo speed is unknown, defaulting to 1000 [ 589.233020][T31865] lo speed is unknown, defaulting to 1000 [ 589.325802][T31861] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 589.474505][T31861] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 589.597846][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 589.597863][ T29] audit: type=1326 audit(2000000350.164:33323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.629509][T31930] 9p: Bad value for 'port' [ 589.709271][T31921] lo speed is unknown, defaulting to 1000 [ 589.743050][T31921] lo speed is unknown, defaulting to 1000 [ 589.749038][T31921] lo speed is unknown, defaulting to 1000 [ 589.793608][ T29] audit: type=1326 audit(2000000350.196:33324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.817361][ T29] audit: type=1326 audit(2000000350.196:33325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.841116][ T29] audit: type=1326 audit(2000000350.196:33326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.864892][ T29] audit: type=1326 audit(2000000350.206:33327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.888662][ T29] audit: type=1326 audit(2000000350.206:33328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.912418][ T29] audit: type=1326 audit(2000000350.206:33329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.936264][ T29] audit: type=1326 audit(2000000350.206:33330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.960003][ T29] audit: type=1326 audit(2000000350.206:33331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 589.983727][ T29] audit: type=1326 audit(2000000350.206:33332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.9.14118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 590.189524][ T4789] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 590.210026][ T4789] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 590.254925][ T4789] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 590.438442][ T4789] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 590.995559][T31991] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 591.308460][T32009] 9p: Invalid gid '0x00000000ffffffff' [ 591.319663][T32011] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 591.510283][T32021] netlink: 104 bytes leftover after parsing attributes in process `syz.8.14140'. [ 591.644032][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14136'. [ 591.927796][T32038] netlink: 'syz.2.14145': attribute type 4 has an invalid length. [ 591.952747][T32038] netlink: 'syz.2.14145': attribute type 4 has an invalid length. [ 592.066017][T32044] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14148'. [ 592.632740][T32078] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14154'. [ 592.948507][T32096] netlink: 'syz.1.14158': attribute type 1 has an invalid length. [ 593.058339][T32101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14158'. [ 593.127044][T32096] bond16: entered promiscuous mode [ 593.151890][T32096] 8021q: adding VLAN 0 to HW filter on device bond16 [ 593.165910][T32101] bond16: entered allmulticast mode [ 593.207245][T32137] bond16: (slave bridge24): making interface the new active one [ 593.214990][T32137] bridge24: entered promiscuous mode [ 593.220413][T32137] bridge24: entered allmulticast mode [ 593.238481][T32137] bond16: (slave bridge24): Enslaving as an active interface with an up link [ 593.700920][T32161] netlink: 'syz.9.14170': attribute type 1 has an invalid length. [ 594.155108][T32174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 594.370393][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 594.370408][ T29] audit: type=1326 audit(2000000355.172:33619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f66490565e7 code=0x7ffc0000 [ 594.405206][T32178] lo speed is unknown, defaulting to 1000 [ 594.438911][T32178] lo speed is unknown, defaulting to 1000 [ 594.445085][T32178] lo speed is unknown, defaulting to 1000 [ 594.450751][ T29] audit: type=1326 audit(2000000355.214:33620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6648ffb829 code=0x7ffc0000 [ 594.474509][ T29] audit: type=1326 audit(2000000355.214:33621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f66490565e7 code=0x7ffc0000 [ 594.498250][ T29] audit: type=1326 audit(2000000355.214:33622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6648ffb829 code=0x7ffc0000 [ 594.522420][ T29] audit: type=1326 audit(2000000355.214:33623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 594.546092][ T29] audit: type=1326 audit(2000000355.224:33624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f66490565e7 code=0x7ffc0000 [ 594.573353][ T29] audit: type=1326 audit(2000000355.224:33625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6648ffb829 code=0x7ffc0000 [ 594.597152][ T29] audit: type=1326 audit(2000000355.224:33626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 594.620846][ T29] audit: type=1326 audit(2000000355.224:33627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 594.644685][ T29] audit: type=1326 audit(2000000355.224:33628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.1.14172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 594.668774][T32189] ref_ctr increment failed for inode: 0x3667 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881046272c0 [ 594.852576][T32220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14185'. [ 597.230257][T32259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=32259 comm=syz.7.14200 [ 597.265639][T32261] netlink: 'syz.7.14201': attribute type 1 has an invalid length. [ 597.324097][T32261] 8021q: adding VLAN 0 to HW filter on device bond13 [ 597.349173][T32261] bond12: (slave bond13): making interface the new active one [ 597.388766][T32261] bond12: (slave bond13): Enslaving as an active interface with an up link [ 597.404663][T32261] bond12: (slave gretap1): Enslaving as a backup interface with an up link [ 597.414844][T32261] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14201'. [ 597.425144][T32261] 8021q: adding VLAN 0 to HW filter on device bond12 [ 597.497227][T32342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14207'. [ 597.530256][T32342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14207'. [ 597.717340][T32360] lo speed is unknown, defaulting to 1000 [ 597.784325][T32360] lo speed is unknown, defaulting to 1000 [ 597.797182][T32360] lo speed is unknown, defaulting to 1000 [ 598.559274][T32399] lo speed is unknown, defaulting to 1000 [ 598.631955][T32399] lo speed is unknown, defaulting to 1000 [ 598.638850][T32399] lo speed is unknown, defaulting to 1000 [ 599.178529][T32427] netlink: 'syz.9.14217': attribute type 4 has an invalid length. [ 599.213857][T32427] netlink: 'syz.9.14217': attribute type 4 has an invalid length. [ 599.562597][T32455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14227'. [ 600.077706][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 600.077732][ T29] audit: type=1326 audit(2000000361.166:33646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.370983][T32488] lo speed is unknown, defaulting to 1000 [ 600.517626][ T29] audit: type=1326 audit(2000000361.198:33647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.518707][T32505] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14237'. [ 600.541501][ T29] audit: type=1326 audit(2000000361.198:33648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.563301][T32488] lo speed is unknown, defaulting to 1000 [ 600.574284][ T29] audit: type=1326 audit(2000000361.198:33649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.603740][ T29] audit: type=1326 audit(2000000361.198:33650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.627418][ T29] audit: type=1326 audit(2000000361.198:33651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.647762][T32488] lo speed is unknown, defaulting to 1000 [ 600.651241][ T29] audit: type=1326 audit(2000000361.198:33652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.651270][ T29] audit: type=1326 audit(2000000361.198:33653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.704512][ T29] audit: type=1326 audit(2000000361.198:33654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 600.728193][ T29] audit: type=1326 audit(2000000361.198:33655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32482 comm="syz.7.14233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1096a5f749 code=0x7ffc0000 [ 601.452647][T32540] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 601.493067][T32540] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14242'. [ 601.512241][T32540] 0ªX¹¦À: renamed from caif0 [ 601.536265][T32540] 0ªX¹¦À: entered allmulticast mode [ 601.541543][T32540] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 601.930181][T32565] raw_sendmsg: syz.1.14249 forgot to set AF_INET. Fix it! [ 601.959495][T32562] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14251'. [ 602.038938][T32576] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 602.064525][T32576] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14255'. [ 602.074714][T32576] 0ªX¹¦À: renamed from caif0 [ 602.084092][T32576] 0ªX¹¦À: entered allmulticast mode [ 602.089387][T32576] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 602.117358][T32589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.168413][T32591] ÿ: renamed from bond_slave_0 [ 602.196668][T32579] lo speed is unknown, defaulting to 1000 [ 602.254132][T32579] lo speed is unknown, defaulting to 1000 [ 602.270643][T32579] lo speed is unknown, defaulting to 1000 [ 602.301220][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14261'. [ 602.363827][T32607] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14261'. [ 602.487473][T32632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14265'. [ 602.506689][T32597] lo speed is unknown, defaulting to 1000 [ 602.593350][T32597] lo speed is unknown, defaulting to 1000 [ 602.610163][T32597] lo speed is unknown, defaulting to 1000 [ 602.713473][T32652] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14269'. [ 602.783909][T32652] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14269'. [ 602.995627][T32669] netlink: 3 bytes leftover after parsing attributes in process `syz.8.14271'. [ 603.068690][T32669] 1ªX¹¦À: renamed from 60ªX¹¦À [ 603.099398][T32669] 1ªX¹¦À: entered allmulticast mode [ 603.104701][T32669] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 603.246939][T32678] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14276'. [ 603.289249][T32678] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14276'. [ 603.399387][T32679] lo speed is unknown, defaulting to 1000 [ 603.436392][T32679] lo speed is unknown, defaulting to 1000 [ 603.442756][T32679] lo speed is unknown, defaulting to 1000 [ 603.806797][T32723] lo speed is unknown, defaulting to 1000 [ 603.881547][T32723] lo speed is unknown, defaulting to 1000 [ 603.888273][T32723] lo speed is unknown, defaulting to 1000 [ 604.621805][T32751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14284'. [ 605.560139][ T302] lo speed is unknown, defaulting to 1000 [ 605.890210][ T343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14296'. [ 606.254590][ T302] lo speed is unknown, defaulting to 1000 [ 606.254862][ T335] lo speed is unknown, defaulting to 1000 [ 606.261236][ T302] lo speed is unknown, defaulting to 1000 [ 606.297352][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 606.297375][ T29] audit: type=1326 audit(2000000367.685:33716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.327064][ T29] audit: type=1326 audit(2000000367.685:33717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.350646][ T29] audit: type=1326 audit(2000000367.685:33718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.374324][ T29] audit: type=1326 audit(2000000367.685:33719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.397836][ T29] audit: type=1326 audit(2000000367.685:33720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.400043][ T335] lo speed is unknown, defaulting to 1000 [ 606.421393][ T29] audit: type=1326 audit(2000000367.685:33721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.421424][ T29] audit: type=1326 audit(2000000367.685:33722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.421472][ T29] audit: type=1326 audit(2000000367.685:33723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.421498][ T29] audit: type=1326 audit(2000000367.685:33724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.421528][ T29] audit: type=1326 audit(2000000367.685:33725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.1.14299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f664905f749 code=0x7ffc0000 [ 606.550638][ T335] lo speed is unknown, defaulting to 1000 [ 606.588769][ T393] netlink: 'syz.1.14303': attribute type 4 has an invalid length. [ 606.615269][ T3407] lo speed is unknown, defaulting to 1000 [ 606.621254][ T3407] syz2: Port: 1 Link DOWN [ 606.627103][ T393] netlink: 'syz.1.14303': attribute type 4 has an invalid length. [ 606.684604][ T9] lo speed is unknown, defaulting to 1000 [ 606.690426][ T9] syz2: Port: 1 Link ACTIVE [ 607.090604][ T447] netlink: 'syz.9.14327': attribute type 1 has an invalid length. [ 607.140338][ T447] 8021q: adding VLAN 0 to HW filter on device bond11 [ 607.159980][ T447] macvlan4: entered promiscuous mode [ 607.167086][ T447] bond11: entered promiscuous mode [ 607.172507][ T447] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 607.183230][ T447] bond11: left promiscuous mode [ 607.198743][ T488] ip6erspan0: entered promiscuous mode [ 607.319459][ T511] xt_hashlimit: max too large, truncated to 1048576 [ 607.336369][ T511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.378231][ T515] __nla_validate_parse: 3 callbacks suppressed [ 607.378249][ T515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14325'. [ 607.408031][ T509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14323'. [ 607.451291][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14329'. [ 607.484544][ T525] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14330'. [ 607.566261][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14332'. [ 607.586281][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14332'. [ 607.681818][ T541] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 607.705335][ T541] 8021q: adding VLAN 0 to HW filter on device bond15 [ 607.743227][ T541] bond15: (slave geneve4): making interface the new active one [ 607.754024][ T541] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 607.763333][ T4816] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.787013][ T4816] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.805427][ T584] pimreg: entered allmulticast mode [ 607.814088][ T4816] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.822590][ T4816] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.832415][ T583] pimreg: left allmulticast mode [ 609.094950][ T619] tipc: New replicast peer: 255.255.255.255 [ 609.101313][ T619] tipc: Enabled bearer , priority 10 [ 609.228196][ T636] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 609.243954][ T618] lo speed is unknown, defaulting to 1000 [ 609.318962][ T618] lo speed is unknown, defaulting to 1000 [ 609.327146][ T644] pim6reg: entered allmulticast mode [ 609.336107][ T618] lo speed is unknown, defaulting to 1000 [ 609.344373][ T644] pim6reg: left allmulticast mode [ 609.352839][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14360'. [ 609.384994][ T648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14360'. [ 609.587995][ T704] netlink: 'syz.1.14372': attribute type 4 has an invalid length. [ 609.595998][ T704] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14372'. [ 609.619834][ T701] veth0_to_team: left promiscuous mode [ 609.625904][ T701] veth14: left promiscuous mode [ 609.631069][ T701] ip6gre5: left promiscuous mode [ 609.636083][ T701] macvlan2: left promiscuous mode [ 609.641387][ T701] veth24: left promiscuous mode [ 609.646334][ T701] team2: left promiscuous mode [ 609.651364][ T701] bond7: left promiscuous mode [ 609.656334][ T701] macvlan3: left promiscuous mode [ 609.661545][ T701] veth34: left promiscuous mode [ 609.676858][ T704] .`: renamed from $Hÿ [ 609.853360][ T719] lo speed is unknown, defaulting to 1000 [ 609.915951][ T719] lo speed is unknown, defaulting to 1000 [ 609.922184][ T719] lo speed is unknown, defaulting to 1000 [ 610.005047][ T757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=757 comm=syz.8.14381 [ 610.092852][ T757] netlink: 'syz.8.14381': attribute type 1 has an invalid length. [ 610.162123][ T757] 8021q: adding VLAN 0 to HW filter on device bond16 [ 610.191886][ T800] bond16: (slave dummy0): making interface the new active one [ 610.251363][ T800] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 610.626369][ T824] lo speed is unknown, defaulting to 1000 [ 610.691308][ T810] lo speed is unknown, defaulting to 1000 [ 610.741085][ T810] lo speed is unknown, defaulting to 1000 [ 610.747586][ T810] lo speed is unknown, defaulting to 1000 [ 610.747585][ T824] lo speed is unknown, defaulting to 1000 [ 610.763238][ T824] lo speed is unknown, defaulting to 1000 [ 611.144915][ T876] lo speed is unknown, defaulting to 1000 [ 611.324824][ T876] lo speed is unknown, defaulting to 1000 [ 611.343083][ T889] 9p: Bad value for 'rfdno' [ 611.367143][ T876] lo speed is unknown, defaulting to 1000 [ 611.654571][ T925] geneve3: entered promiscuous mode [ 611.659960][ T925] geneve3: entered allmulticast mode [ 611.688826][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 611.688841][ T29] audit: type=1326 audit(2000000373.344:34409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.718844][ T29] audit: type=1326 audit(2000000373.344:34410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.742537][ T29] audit: type=1326 audit(2000000373.344:34411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.766062][ T29] audit: type=1326 audit(2000000373.344:34412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.789669][ T29] audit: type=1326 audit(2000000373.344:34413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.813217][ T29] audit: type=1326 audit(2000000373.344:34414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.836963][ T29] audit: type=1326 audit(2000000373.344:34415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.860512][ T29] audit: type=1326 audit(2000000373.344:34416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.884052][ T29] audit: type=1326 audit(2000000373.344:34417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 611.907528][ T29] audit: type=1326 audit(2000000373.344:34418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.9.14405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fae3f72f749 code=0x7ffc0000 [ 612.081685][ T945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14408'. [ 612.275117][ T957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=957 comm=syz.1.14408 [ 612.331536][ T920] lo speed is unknown, defaulting to 1000 [ 612.905988][ T980] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 612.997163][ T980] 8021q: adding VLAN 0 to HW filter on device bond14 [ 613.029108][ T920] lo speed is unknown, defaulting to 1000 [ 613.037752][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14414'. [ 613.051136][ T920] lo speed is unknown, defaulting to 1000 [ 613.777245][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14421'. [ 614.999056][ T1083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14427'. [ 615.033091][ T1083] bond8: (slave batadv0): Releasing active interface [ 615.039859][ T1083] bond8: (slave batadv0): the permanent HWaddr of slave - 36:ab:51:bb:09:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 615.538990][ T1100] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.549004][ T1100] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 615.596481][ T1036] Process accounting resumed [ 615.729145][ T1100] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.739048][ T1100] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 615.753771][ T1104] ================================================================== [ 615.761873][ T1104] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 615.770476][ T1104] [ 615.772785][ T1104] write to 0xffff888104fd8468 of 8 bytes by task 1098 on cpu 1: [ 615.780401][ T1104] shmem_file_splice_read+0x470/0x600 [ 615.785772][ T1104] splice_direct_to_actor+0x26f/0x680 [ 615.791135][ T1104] do_splice_direct+0xda/0x150 [ 615.795885][ T1104] do_sendfile+0x380/0x650 [ 615.800295][ T1104] __x64_sys_sendfile64+0x105/0x150 [ 615.805509][ T1104] x64_sys_call+0x2db1/0x3000 [ 615.810178][ T1104] do_syscall_64+0xd8/0x2a0 [ 615.814678][ T1104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.820564][ T1104] [ 615.822872][ T1104] write to 0xffff888104fd8468 of 8 bytes by task 1104 on cpu 0: [ 615.830487][ T1104] shmem_file_splice_read+0x470/0x600 [ 615.835946][ T1104] splice_direct_to_actor+0x26f/0x680 [ 615.841309][ T1104] do_splice_direct+0xda/0x150 [ 615.846065][ T1104] do_sendfile+0x380/0x650 [ 615.850484][ T1104] __x64_sys_sendfile64+0x105/0x150 [ 615.855679][ T1104] x64_sys_call+0x2db1/0x3000 [ 615.860361][ T1104] do_syscall_64+0xd8/0x2a0 [ 615.864863][ T1104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.870746][ T1104] [ 615.873051][ T1104] value changed: 0x0000000000002f54 -> 0x0000000000002f56 [ 615.880144][ T1104] [ 615.882449][ T1104] Reported by Kernel Concurrency Sanitizer on: [ 615.888600][ T1104] CPU: 0 UID: 0 PID: 1104 Comm: syz.9.14433 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 615.899964][ T1104] Tainted: [W]=WARN [ 615.903752][ T1104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.913800][ T1104] ================================================================== [ 615.950405][ T1118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14435'. [ 615.986811][ T1100] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 615.996744][ T1100] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.064130][ T1100] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 616.074039][ T1100] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 616.194744][ T4789] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.202955][ T4789] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.215858][ T4789] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.224143][ T4789] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.248249][ T4773] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.256699][ T4773] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.274173][ T4773] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.282418][ T4773] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.004481][ T1036] page_pool_release_retry() stalled pool shutdown: id 425, 1 inflight 60 sec