last executing test programs: 4m45.054487937s ago: executing program 0 (id=612): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 4m45.003690452s ago: executing program 0 (id=614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4m44.967649266s ago: executing program 0 (id=616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4m44.955447907s ago: executing program 0 (id=617): syz_usb_connect(0x2, 0x64, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x7, 0x0, 0x1000, 0xfffffffffffff801, 0x40, 0x7}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x18, 0x15, 0x3, 0x70bd26, 0x25dfdbff, {0x2, 0x18, 0x42, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0xa000000, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4040014) 4m42.535721713s ago: executing program 0 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4m42.458100011s ago: executing program 0 (id=665): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 4m42.425183834s ago: executing program 32 (id=665): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 3.443956113s ago: executing program 3 (id=5080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0xd0e5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x6, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x8, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x81, 0x4, 0x0, 0x6, 0xffffffff, 0xffff8000, 0x0, 0x2, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.409069376s ago: executing program 3 (id=5082): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 2.000069064s ago: executing program 3 (id=5098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) 1.660184588s ago: executing program 4 (id=5105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000b00bfa100000100000007010000f8ffffffb70200000000004d2e026900c8030000000000808500000004000000472f76a5e38f05ba"], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='proc\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SYNC(r1, 0x7fffffffc0000082, 0x0, 0x0) syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz7FNw1AYBODzw8i2BBOwAjWbeB8XDELNQlRImSB1muiPbEcZIUnxfd3p3j3pDw/1mZacqv9oGZMpyblqSPK291XVWpLDlv7eb8Pt0Wap1yQve+in9Z90y7Vsdfya062Dbl38TN/j3vxnyPx7t0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IldAgAA//8vmBPo") prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000680)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r4, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x8, 0x7f, 0x8, @remote, @mcast1, 0x1, 0x80, 0x80000000, 0x7}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r5, 0x25, 0x2, @val=@kprobe_multi=@syms={0x1, 0x6, &(0x7f0000000440)=[&(0x7f0000000180)='user_xattr', &(0x7f0000000280)='.]+\'\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='debug_want_extra_isize', &(0x7f00000003c0)='nolazytime', &(0x7f0000000400)='\x00'], 0x0, 0x1}}, 0x30) r6 = semget(0x3, 0x0, 0x40) semctl$GETPID(r6, 0x4, 0xb, &(0x7f00000005c0)=""/168) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000400)={0x0, 0x7204, 0x800, 0x0, 0x1bb}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r11}, 0x18) pipe2$9p(0x0, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x2}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xfd, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r12, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f6, 0x3ffffffc, 0x0, 0x0, 0xfffffda0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x88c0) 937.140389ms ago: executing program 3 (id=5108): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r7 = socket(0x10, 0x803, 0x7) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x69, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r11, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d0}, 0x20000001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$getownex(r12, 0x10, &(0x7f0000000080)) syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400), &(0x7f0000000380)) clock_nanosleep(0x1, 0x0, &(0x7f0000000300), &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='dlm_ast\x00', r2, 0x0, 0x6}, 0x18) 806.770391ms ago: executing program 4 (id=5110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000004540)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x81, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000009000000001400000000fffff4cf000000000000f182f5630000000000"], 0x30}}], 0x1, 0x4040011) creat(&(0x7f00000002c0)='./file0\x00', 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ':\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8ffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001e80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x4c, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdb00000001000000001a0008fdc500000000008fe01a0008021100000100000a001a0008021100000100d3f33a607b3ca9010000000000afabd5c5"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x80, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}}, 0x10000004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0xa, &(0x7f00000001c0)=[{0x40be, 0x9, 0x10, 0x8}, {0x8, 0x1, 0x0, 0x10001}, {0x7fff, 0x7f, 0x89, 0xfffffffd}, {0x8, 0xbb, 0x1, 0x7}, {0x74, 0x7, 0x9, 0xc}, {0x4, 0x5f, 0x0, 0x4}, {0x4, 0x6, 0x6, 0x9}, {0x4, 0x48, 0x73, 0x84}, {0xae66, 0x5, 0x6, 0x9}, {0x2, 0x8, 0x3, 0x7}]}) r9 = geteuid() chown(&(0x7f0000000300)='./file0\x00', r9, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0xa93, 0x8, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 639.717337ms ago: executing program 2 (id=5111): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESOCT], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002", @ANYRES32=0x0], 0x48}}, 0x4040004) 616.45329ms ago: executing program 4 (id=5112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0xd0e5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x6, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x8, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x81, 0x4, 0x0, 0x6, 0xffffffff, 0xffff8000, 0x0, 0x2, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 602.938211ms ago: executing program 5 (id=5113): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000980)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x1}}, 0x10, 0x0}, 0x460c4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="04", 0x1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f00000008c0), &(0x7f0000000880)=r7}, 0x20) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) creat(&(0x7f0000000480)='./file0\x00', 0x41) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@known='security.apparmor\x00', &(0x7f0000000380)=""/30, 0x1e) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @local}, &(0x7f0000000340)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000000e00000007000000f8ffffff01000000", @ANYRES32=r4, @ANYBLOB="0700000000e5174ca87b71f1ecb2b19482b60d0f0694d2de7f67799117000000000000149298db18fa357548a1421744fb06fff8d3cd35d72bb1b5", @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) fsmount(r0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') 587.519243ms ago: executing program 2 (id=5114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0xd0e5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x6, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x8, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x81, 0x4, 0x0, 0x6, 0xffffffff, 0xffff8000, 0x0, 0x2, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 582.074504ms ago: executing program 4 (id=5115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x8000002) syz_io_uring_setup(0x2e9e, 0x0, &(0x7f0000000140), 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 533.221688ms ago: executing program 3 (id=5117): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x8, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2008098, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x1, 0x1e9, &(0x7f0000019300)="$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") open(&(0x7f0000000180)='./file0\x00', 0x3ad80, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) eventfd(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) 522.938229ms ago: executing program 2 (id=5118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) 490.028862ms ago: executing program 5 (id=5119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="180000001f000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x28200b5, &(0x7f0000000580)={[{@init_itable_val={'init_itable', 0x3d, 0x5}}, {@sb={'sb', 0x3d, 0xf}}, {@norecovery}, {@user_xattr}, {@journal_async_commit}]}, 0x3, 0x447, &(0x7f0000001300)="$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") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340)="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", &(0x7f00000002c0)=""/25}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ff8}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x6a1e) 486.623033ms ago: executing program 3 (id=5120): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 485.913193ms ago: executing program 4 (id=5121): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 417.26594ms ago: executing program 2 (id=5122): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0xa44c, 0x800, 0x5, 0x20e}, &(0x7f0000000240), &(0x7f0000000680)) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 416.79123ms ago: executing program 2 (id=5123): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) 382.987173ms ago: executing program 4 (id=5125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r1, 0x0, 0x8080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000a0000000000000800040001000000", 0x24) r8 = dup(r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007917480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000008c0)={r10}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x757, 0x9, 0x0, 0x6, 0x8, 0xffffffff, 0x7, 0xb82, r10}, 0x20) r11 = syz_open_pts(r6, 0x0) ioctl$TCGETA(r11, 0x5405, &(0x7f00000002c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 361.580355ms ago: executing program 2 (id=5126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="9397d7bce2c1dd66c3a243fa1b00000000000000000100100000000000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x9, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) io_setup(0xd6, &(0x7f0000000200)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x2020}]) 360.851975ms ago: executing program 5 (id=5127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 337.583997ms ago: executing program 5 (id=5128): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) timer_gettime(0x0, 0x0) 279.878233ms ago: executing program 5 (id=5129): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000980)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x1}}, 0x10, 0x0}, 0x460c4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="04", 0x1}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f00000008c0), &(0x7f0000000880)=r7}, 0x20) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) creat(&(0x7f0000000480)='./file0\x00', 0x41) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=@known='security.apparmor\x00', &(0x7f0000000380)=""/30, 0x1e) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @local}, &(0x7f0000000340)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000000e00000007000000f8ffffff01000000", @ANYRES32=r4, @ANYBLOB="0700000000e5174ca87b71f1ecb2b19482b60d0f0694d2de7f67799117000000000000149298db18fa357548a1421744fb06fff8d3cd35d72bb1b5", @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) fsmount(r0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') 230.526958ms ago: executing program 5 (id=5132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) syz_io_uring_setup(0x4766, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) pipe(&(0x7f0000005880)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000002340)=[@in={0x2, 0x4e23, @local}], 0x10) r3 = getpgid(0xffffffffffffffff) process_vm_writev(r3, &(0x7f0000001340)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f0000001280)=""/129, 0x81}], 0x4, &(0x7f00000016c0), 0x0, 0x0) 200.263451ms ago: executing program 1 (id=5134): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0xfff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0xa44c, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 126.486628ms ago: executing program 1 (id=5135): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x8, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2008098, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x1, 0x1e9, &(0x7f0000019300)="$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") open(&(0x7f0000000180)='./file0\x00', 0x3ad80, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) eventfd(0x0) mknod$loop(0x0, 0x6000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) 99.535881ms ago: executing program 1 (id=5136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) 58.244685ms ago: executing program 1 (id=5137): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 57.859974ms ago: executing program 1 (id=5138): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6a1e) 0s ago: executing program 1 (id=5139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): mode [ 291.498611][T19617] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 291.542183][T19627] serio: Serial port ptm0 [ 291.641685][T11058] hid-generic 0003:0003:0000.0017: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 291.812813][T19608] lo speed is unknown, defaulting to 1000 [ 291.980729][T19608] lo speed is unknown, defaulting to 1000 [ 292.166197][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 292.189912][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4173'. [ 292.217996][T19660] ipvlan8: entered promiscuous mode [ 292.244926][T19660] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 292.266654][T19661] ipvlan8: entered promiscuous mode [ 292.282264][T19661] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 292.414080][T11058] hid-generic 0003:0003:0000.0018: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 292.573469][T19682] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 292.602348][ T29] audit: type=1326 audit(1760238435.889:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19681 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 292.635621][T19687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4182'. [ 292.650996][ T29] audit: type=1326 audit(1760238435.889:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19681 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 292.674595][ T29] audit: type=1326 audit(1760238435.889:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19681 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 292.698064][ T29] audit: type=1326 audit(1760238435.889:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19681 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 292.721615][ T29] audit: type=1326 audit(1760238435.889:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19681 comm="syz.4.4181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 292.905759][T19654] lo speed is unknown, defaulting to 1000 [ 292.940471][T19654] lo speed is unknown, defaulting to 1000 [ 292.960988][T19659] lo speed is unknown, defaulting to 1000 [ 293.001732][T19659] lo speed is unknown, defaulting to 1000 [ 293.147791][T19706] ipvlan9: entered promiscuous mode [ 293.180049][T19706] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 293.325422][T19711] ipvlan6: entered promiscuous mode [ 293.341103][T19711] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 293.620372][ T3408] IPVS: starting estimator thread 0... [ 293.712742][T19722] IPVS: using max 2448 ests per chain, 122400 per kthread [ 293.741762][T19728] netlink: 'syz.1.4198': attribute type 4 has an invalid length. [ 293.784078][ T29] audit: type=1326 audit(1760238437.069:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19729 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 293.837008][ T29] audit: type=1326 audit(1760238437.069:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19729 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 293.860771][ T29] audit: type=1326 audit(1760238437.069:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19729 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 293.884218][ T29] audit: type=1326 audit(1760238437.069:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19729 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 293.973021][T19703] lo speed is unknown, defaulting to 1000 [ 293.987282][T19738] __nla_validate_parse: 3 callbacks suppressed [ 293.987298][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 294.109834][T19703] lo speed is unknown, defaulting to 1000 [ 294.131786][T19710] lo speed is unknown, defaulting to 1000 [ 294.177195][ T29] audit: type=1400 audit(1760238437.459:5770): avc: denied { setopt } for pid=19752 comm="syz.2.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.209525][T19753] syzkaller0: entered promiscuous mode [ 294.215092][T19753] syzkaller0: entered allmulticast mode [ 294.224995][T19710] lo speed is unknown, defaulting to 1000 [ 294.314167][T19756] netlink: 'syz.2.4204': attribute type 1 has an invalid length. [ 294.377535][T11057] IPVS: starting estimator thread 0... [ 294.469194][T19773] netlink: 'syz.2.4211': attribute type 4 has an invalid length. [ 294.480336][T19765] IPVS: using max 2592 ests per chain, 129600 per kthread [ 294.641158][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 294.644592][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4214'. [ 294.653639][T19788] ipvlan7: entered promiscuous mode [ 294.682898][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4216'. [ 294.695261][T19788] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 294.718968][T19789] ipvlan10: entered promiscuous mode [ 294.728050][T19789] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 294.966497][T19805] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 295.031788][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4220'. [ 295.044325][T19811] netlink: 'syz.3.4224': attribute type 4 has an invalid length. [ 295.212000][T19782] lo speed is unknown, defaulting to 1000 [ 295.546658][T19782] lo speed is unknown, defaulting to 1000 [ 295.552736][T19784] lo speed is unknown, defaulting to 1000 [ 295.634601][T19784] lo speed is unknown, defaulting to 1000 [ 296.002283][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'. [ 296.115857][T19834] ipvlan11: entered promiscuous mode [ 296.196935][T19834] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 296.509655][T19849] netlink: 'syz.5.4235': attribute type 4 has an invalid length. [ 296.961246][T19832] lo speed is unknown, defaulting to 1000 [ 297.005884][T19835] lo speed is unknown, defaulting to 1000 [ 297.080644][T19832] lo speed is unknown, defaulting to 1000 [ 297.377635][T19818] lo speed is unknown, defaulting to 1000 [ 297.381018][T19835] lo speed is unknown, defaulting to 1000 [ 297.470484][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 297.575402][T19918] ipvlan12: entered promiscuous mode [ 297.582045][T19918] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 297.591300][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 298.240062][T19818] lo speed is unknown, defaulting to 1000 [ 298.473912][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4243'. [ 298.774822][T19911] lo speed is unknown, defaulting to 1000 [ 298.827043][T19911] lo speed is unknown, defaulting to 1000 [ 299.084284][T20007] sctp: [Deprecated]: syz.4.4246 (pid 20007) Use of int in max_burst socket option. [ 299.084284][T20007] Use struct sctp_assoc_value instead [ 299.665716][ T29] audit: type=1326 audit(1760238442.939:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20030 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 299.689371][ T29] audit: type=1326 audit(1760238442.939:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20030 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 299.713112][ T29] audit: type=1326 audit(1760238442.939:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20030 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 299.736639][ T29] audit: type=1326 audit(1760238442.939:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20030 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 299.777670][T11058] hid_parser_main: 116 callbacks suppressed [ 299.777692][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.791102][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.798507][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.806031][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.813505][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.820927][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.828404][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.835832][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.843264][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.850994][T11058] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 299.860445][T11058] hid-generic 0003:0003:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 300.112802][T20052] sctp: [Deprecated]: syz.2.4260 (pid 20052) Use of int in max_burst socket option. [ 300.112802][T20052] Use struct sctp_assoc_value instead [ 300.253787][T20062] netlink: 'syz.5.4265': attribute type 4 has an invalid length. [ 300.312631][ T36] hid-generic 0003:0003:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 300.393365][ T36] hid-generic 0003:0003:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 300.489336][ T36] hid-generic 0003:0003:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 300.596542][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4286'. [ 300.698043][T11058] hid-generic 0003:0003:0000.001D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 300.717315][T20144] netlink: 'syz.4.4278': attribute type 4 has an invalid length. [ 300.808142][T11058] hid-generic 0003:0003:0000.001E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 300.905400][T20180] netlink: 'syz.2.4284': attribute type 1 has an invalid length. [ 301.035558][T20205] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 301.123279][T11057] hid-generic 0003:0003:0000.001F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 301.291126][T20249] netlink: 'syz.5.4296': attribute type 4 has an invalid length. [ 301.343722][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4298'. [ 301.664638][T20295] sctp: [Deprecated]: syz.3.4310 (pid 20295) Use of int in max_burst socket option. [ 301.664638][T20295] Use struct sctp_assoc_value instead [ 301.699011][T20299] netlink: 'syz.3.4301': attribute type 1 has an invalid length. [ 301.725729][T20303] serio: Serial port ptm1 [ 302.003592][T11057] hid-generic 0003:0003:0000.0020: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 302.117963][ T29] audit: type=1400 audit(1760238445.399:5775): avc: denied { mounton } for pid=20314 comm="syz.1.4306" path="/217/file0" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.257301][T20320] netlink: 'syz.5.4308': attribute type 4 has an invalid length. [ 302.324808][T20326] sctp: [Deprecated]: syz.5.4312 (pid 20326) Use of int in max_burst socket option. [ 302.324808][T20326] Use struct sctp_assoc_value instead [ 302.370966][T20331] netlink: 'syz.5.4314': attribute type 1 has an invalid length. [ 302.415514][T11057] hid-generic 0003:0003:0000.0021: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 302.516692][T20337] sctp: [Deprecated]: syz.4.4316 (pid 20337) Use of int in max_burst socket option. [ 302.516692][T20337] Use struct sctp_assoc_value instead [ 302.570444][T20341] syzkaller0: entered promiscuous mode [ 302.575989][T20341] syzkaller0: entered allmulticast mode [ 302.698450][T20349] netlink: 'syz.3.4321': attribute type 4 has an invalid length. [ 302.733195][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4322'. [ 302.810858][T20360] sctp: [Deprecated]: syz.4.4325 (pid 20360) Use of int in max_burst socket option. [ 302.810858][T20360] Use struct sctp_assoc_value instead [ 303.051974][T20402] syzkaller0: entered promiscuous mode [ 303.057527][T20402] syzkaller0: entered allmulticast mode [ 303.241297][T20431] netlink: 'syz.1.4335': attribute type 4 has an invalid length. [ 303.298042][T20442] sctp: [Deprecated]: syz.1.4337 (pid 20442) Use of int in max_burst socket option. [ 303.298042][T20442] Use struct sctp_assoc_value instead [ 304.549808][T20492] syz.1.4346 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 304.560892][T20492] CPU: 0 UID: 0 PID: 20492 Comm: syz.1.4346 Not tainted syzkaller #0 PREEMPT(voluntary) [ 304.560979][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.560997][T20492] Call Trace: [ 304.561005][T20492] [ 304.561014][T20492] __dump_stack+0x1d/0x30 [ 304.561036][T20492] dump_stack_lvl+0xe8/0x140 [ 304.561055][T20492] dump_stack+0x15/0x1b [ 304.561072][T20492] dump_header+0x81/0x220 [ 304.561162][T20492] oom_kill_process+0x342/0x400 [ 304.561204][T20492] out_of_memory+0x979/0xb80 [ 304.561283][T20492] try_charge_memcg+0x610/0xa10 [ 304.561386][T20492] charge_memcg+0x51/0xc0 [ 304.561416][T20492] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 304.561451][T20492] __read_swap_cache_async+0x17b/0x2d0 [ 304.561513][T20492] swap_cluster_readahead+0x262/0x3c0 [ 304.561556][T20492] swapin_readahead+0xde/0x6f0 [ 304.561578][T20492] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 304.561642][T20492] ? __rcu_read_unlock+0x34/0x70 [ 304.561675][T20492] ? __rcu_read_unlock+0x4f/0x70 [ 304.561708][T20492] ? swap_cache_get_folio+0x277/0x280 [ 304.561777][T20492] do_swap_page+0x2ae/0x2370 [ 304.561808][T20492] ? css_rstat_updated+0xb7/0x240 [ 304.561855][T20492] ? __pfx_default_wake_function+0x10/0x10 [ 304.561957][T20492] handle_mm_fault+0x9a5/0x2be0 [ 304.561983][T20492] ? vma_start_read+0x141/0x1f0 [ 304.562025][T20492] do_user_addr_fault+0x630/0x1080 [ 304.562059][T20492] exc_page_fault+0x62/0xa0 [ 304.562086][T20492] asm_exc_page_fault+0x26/0x30 [ 304.562195][T20492] RIP: 0033:0x7f071de257cc [ 304.562215][T20492] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 304.562241][T20492] RSP: 002b:00007ffc7001a5e0 EFLAGS: 00010287 [ 304.562263][T20492] RAX: 0000000000000000 RBX: 00007f071e1a6090 RCX: 0000000000000000 [ 304.562280][T20492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557b129808 [ 304.562295][T20492] RBP: 00007f071e1a7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 304.562313][T20492] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004a577 [ 304.562377][T20492] R13: 00007f071e1a6090 R14: ffffffffffffffff R15: 00007ffc7001a6f0 [ 304.562404][T20492] [ 304.562413][T20492] memory: usage 307200kB, limit 307200kB, failcnt 3515 [ 304.787117][T20492] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 304.795094][T20492] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 304.802456][T20492] Memory cgroup stats for /syz1: [ 304.850427][T20492] cache 0 [ 304.858420][T20492] rss 0 [ 304.861254][T20492] shmem 0 [ 304.864235][T20492] mapped_file 0 [ 304.867759][T20492] dirty 0 [ 304.870724][T20492] writeback 0 [ 304.874062][T20492] workingset_refault_anon 509 [ 304.878740][T20492] workingset_refault_file 5641 [ 304.883522][T20492] swap 188416 [ 304.886831][T20492] swapcached 4096 [ 304.890509][T20492] pgpgin 237695 [ 304.894101][T20492] pgpgout 237694 [ 304.897669][T20492] pgfault 271097 [ 304.901318][T20492] pgmajfault 361 [ 304.905015][T20492] inactive_anon 0 [ 304.908669][T20492] active_anon 4096 [ 304.912469][T20492] inactive_file 0 [ 304.916143][T20492] active_file 0 [ 304.919609][T20492] unevictable 0 [ 304.923098][T20492] hierarchical_memory_limit 314572800 [ 304.928547][T20492] hierarchical_memsw_limit 9223372036854771712 [ 304.934727][T20492] total_cache 0 [ 304.938244][T20492] total_rss 0 [ 304.941550][T20492] total_shmem 0 [ 304.945012][T20492] total_mapped_file 0 [ 304.949031][T20492] total_dirty 0 [ 304.952506][T20492] total_writeback 0 [ 304.956320][T20492] total_workingset_refault_anon 509 [ 304.961560][T20492] total_workingset_refault_file 5641 [ 304.966926][T20492] total_swap 188416 [ 304.970830][T20492] total_swapcached 4096 [ 304.974987][T20492] total_pgpgin 237695 [ 304.978972][T20492] total_pgpgout 237694 [ 304.983074][T20492] total_pgfault 271097 [ 304.987169][T20492] total_pgmajfault 361 [ 304.991275][T20492] total_inactive_anon 0 [ 304.995442][T20492] total_active_anon 4096 [ 304.999689][T20492] total_inactive_file 0 [ 305.003858][T20492] total_active_file 0 [ 305.007847][T20492] total_unevictable 0 [ 305.011878][T20492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4346,pid=20492,uid=0 [ 305.026619][T20492] Memory cgroup out of memory: Killed process 20492 (syz.1.4346) total-vm:93956kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 305.061726][T11058] hid_parser_main: 152 callbacks suppressed [ 305.061748][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.075150][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.082634][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.090075][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.097538][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.099010][T20540] sctp: [Deprecated]: syz.4.4348 (pid 20540) Use of int in max_burst socket option. [ 305.099010][T20540] Use struct sctp_assoc_value instead [ 305.104959][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.104990][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.134399][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.141956][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.149394][T11058] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 305.263272][T11058] hid-generic 0003:0003:0000.0022: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 305.275804][T20547] validate_nla: 2 callbacks suppressed [ 305.275820][T20547] netlink: 'syz.4.4351': attribute type 1 has an invalid length. [ 305.368950][T20454] lo speed is unknown, defaulting to 1000 [ 305.431708][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 305.452488][T20550] ipvlan6: entered promiscuous mode [ 305.457926][T20550] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 305.969022][T20561] syzkaller0: entered promiscuous mode [ 305.974608][T20561] syzkaller0: entered allmulticast mode [ 306.046975][T20454] lo speed is unknown, defaulting to 1000 [ 306.054080][T20498] lo speed is unknown, defaulting to 1000 [ 306.270635][T20567] sctp: [Deprecated]: syz.3.4359 (pid 20567) Use of int in max_burst socket option. [ 306.270635][T20567] Use struct sctp_assoc_value instead [ 306.328774][T20573] netlink: 'syz.1.4361': attribute type 1 has an invalid length. [ 306.522916][ T36] hid-generic 0003:0003:0000.0023: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 306.624182][T20589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4366'. [ 306.712180][T20549] lo speed is unknown, defaulting to 1000 [ 306.749407][T20549] lo speed is unknown, defaulting to 1000 [ 306.782621][T20498] lo speed is unknown, defaulting to 1000 [ 306.797018][T11058] hid-generic 0003:0003:0000.0024: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 306.909099][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4371'. [ 306.937406][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 307.007884][T20603] ipvlan9: entered promiscuous mode [ 307.014778][T20603] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 307.035145][T20605] sctp: [Deprecated]: syz.4.4372 (pid 20605) Use of int in max_burst socket option. [ 307.035145][T20605] Use struct sctp_assoc_value instead [ 307.243853][T20617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4376'. [ 307.270247][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4386'. [ 307.344286][ T36] hid-generic 0003:0003:0000.0025: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 307.465376][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'. [ 307.477575][T20630] ipvlan8: entered promiscuous mode [ 307.483772][T20630] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 307.511550][T20597] lo speed is unknown, defaulting to 1000 [ 307.814368][T20637] netlink: 'syz.2.4382': attribute type 4 has an invalid length. [ 307.895687][T20597] lo speed is unknown, defaulting to 1000 [ 307.995455][T20629] lo speed is unknown, defaulting to 1000 [ 308.172253][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4383'. [ 308.360345][T20629] lo speed is unknown, defaulting to 1000 [ 308.503763][T20647] sctp: [Deprecated]: syz.1.4384 (pid 20647) Use of int in max_burst socket option. [ 308.503763][T20647] Use struct sctp_assoc_value instead [ 308.822492][T20632] lo speed is unknown, defaulting to 1000 [ 309.223478][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4389'. [ 309.316488][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4393'. [ 309.331305][T11058] hid-generic 0003:0003:0000.0026: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 309.371945][T20632] lo speed is unknown, defaulting to 1000 [ 309.438753][T20671] netlink: 'syz.5.4394': attribute type 4 has an invalid length. [ 309.591577][T20676] sctp: [Deprecated]: syz.5.4396 (pid 20676) Use of int in max_burst socket option. [ 309.591577][T20676] Use struct sctp_assoc_value instead [ 309.663562][T20681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4398'. [ 309.709423][T20684] netlink: 'syz.1.4399': attribute type 4 has an invalid length. [ 309.817167][ T3415] hid-generic 0003:0003:0000.0028: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 309.829672][ T36] hid-generic 0003:0003:0000.0027: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 309.910818][T20704] sctp: [Deprecated]: syz.3.4407 (pid 20704) Use of int in max_burst socket option. [ 309.910818][T20704] Use struct sctp_assoc_value instead [ 310.213065][ T36] hid_parser_main: 116 callbacks suppressed [ 310.213084][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.226565][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.234179][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.241628][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.249086][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.256547][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.263975][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.271453][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.278960][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.286444][ T36] hid-generic 0003:0003:0000.0029: unknown main item tag 0x0 [ 310.314885][T20733] ipvlan7: entered promiscuous mode [ 310.321522][T20733] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 310.334064][ T36] hid-generic 0003:0003:0000.0029: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 310.517446][T20741] sctp: [Deprecated]: syz.2.4421 (pid 20741) Use of int in max_burst socket option. [ 310.517446][T20741] Use struct sctp_assoc_value instead [ 310.597434][T20744] netlink: 'syz.2.4422': attribute type 1 has an invalid length. [ 311.242603][T20727] lo speed is unknown, defaulting to 1000 [ 311.297870][T20749] lo speed is unknown, defaulting to 1000 [ 311.305512][T20727] lo speed is unknown, defaulting to 1000 [ 311.394487][T20749] lo speed is unknown, defaulting to 1000 [ 311.402968][T11057] hid-generic 0003:0003:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 311.466720][T20773] netlink: 'syz.5.4433': attribute type 4 has an invalid length. [ 311.525363][T20781] netlink: 'syz.5.4437': attribute type 1 has an invalid length. [ 311.662868][T20807] __nla_validate_parse: 4 callbacks suppressed [ 311.662885][T20807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4444'. [ 311.707513][T20811] netlink: 'syz.1.4446': attribute type 4 has an invalid length. [ 311.736226][T20813] netlink: 'syz.1.4447': attribute type 1 has an invalid length. [ 311.856158][T20820] serio: Serial port ptm0 [ 311.862133][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 311.888369][T20819] ipvlan9: entered promiscuous mode [ 311.902960][T20819] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 312.207108][T20816] lo speed is unknown, defaulting to 1000 [ 312.435261][T20808] syz.3.4445 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 312.446358][T20808] CPU: 1 UID: 0 PID: 20808 Comm: syz.3.4445 Not tainted syzkaller #0 PREEMPT(voluntary) [ 312.446385][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.446469][T20808] Call Trace: [ 312.446477][T20808] [ 312.446485][T20808] __dump_stack+0x1d/0x30 [ 312.446518][T20808] dump_stack_lvl+0xe8/0x140 [ 312.446598][T20808] dump_stack+0x15/0x1b [ 312.446615][T20808] dump_header+0x81/0x220 [ 312.446654][T20808] oom_kill_process+0x342/0x400 [ 312.446691][T20808] out_of_memory+0x979/0xb80 [ 312.446775][T20808] try_charge_memcg+0x610/0xa10 [ 312.446813][T20808] charge_memcg+0x51/0xc0 [ 312.446839][T20808] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 312.446878][T20808] __read_swap_cache_async+0x17b/0x2d0 [ 312.446995][T20808] swap_cluster_readahead+0x262/0x3c0 [ 312.447026][T20808] swapin_readahead+0xde/0x6f0 [ 312.447050][T20808] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 312.447087][T20808] ? __rcu_read_unlock+0x34/0x70 [ 312.447109][T20808] ? __rcu_read_unlock+0x4f/0x70 [ 312.447209][T20808] ? swap_cache_get_folio+0x277/0x280 [ 312.447246][T20808] do_swap_page+0x2ae/0x2370 [ 312.447270][T20808] ? css_rstat_updated+0xb7/0x240 [ 312.447311][T20808] ? __pfx_default_wake_function+0x10/0x10 [ 312.447426][T20808] handle_mm_fault+0x9a5/0x2be0 [ 312.447449][T20808] ? vma_start_read+0x141/0x1f0 [ 312.447480][T20808] do_user_addr_fault+0x630/0x1080 [ 312.447508][T20808] exc_page_fault+0x62/0xa0 [ 312.447551][T20808] asm_exc_page_fault+0x26/0x30 [ 312.447636][T20808] RIP: 0033:0x7f4272e557cc [ 312.447652][T20808] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 312.447682][T20808] RSP: 002b:00007ffe6bcbc5f0 EFLAGS: 00010287 [ 312.447723][T20808] RAX: 0000000000000000 RBX: 00007f42731d6090 RCX: 0000000000000000 [ 312.447740][T20808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555588c2d808 [ 312.447757][T20808] RBP: 00007f42731d7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 312.447774][T20808] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004c4be [ 312.447865][T20808] R13: 00007f42731d6090 R14: ffffffffffffffff R15: 00007ffe6bcbc700 [ 312.447935][T20808] [ 312.447942][T20808] memory: usage 307200kB, limit 307200kB, failcnt 1216 [ 312.672981][T20808] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 312.681006][T20808] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 312.688336][T20808] Memory cgroup stats for /syz3: [ 312.688770][T20808] cache 0 [ 312.696763][T20808] rss 0 [ 312.699550][T20808] shmem 0 [ 312.702581][T20808] mapped_file 0 [ 312.706046][T20808] dirty 0 [ 312.709008][T20808] writeback 0 [ 312.712343][T20808] workingset_refault_anon 270 [ 312.717023][T20808] workingset_refault_file 4496 [ 312.721879][T20808] swap 200704 [ 312.725207][T20808] swapcached 0 [ 312.728668][T20808] pgpgin 233181 [ 312.732182][T20808] pgpgout 233181 [ 312.735736][T20808] pgfault 251760 [ 312.739284][T20808] pgmajfault 181 [ 312.742913][T20808] inactive_anon 0 [ 312.746572][T20808] active_anon 0 [ 312.750040][T20808] inactive_file 0 [ 312.753703][T20808] active_file 0 [ 312.757175][T20808] unevictable 0 [ 312.760725][T20808] hierarchical_memory_limit 314572800 [ 312.766214][T20808] hierarchical_memsw_limit 9223372036854771712 [ 312.772521][T20808] total_cache 0 [ 312.775991][T20808] total_rss 0 [ 312.779298][T20808] total_shmem 0 [ 312.782789][T20808] total_mapped_file 0 [ 312.786772][T20808] total_dirty 0 [ 312.790258][T20808] total_writeback 0 [ 312.794059][T20808] total_workingset_refault_anon 270 [ 312.799257][T20808] total_workingset_refault_file 4496 [ 312.804598][T20808] total_swap 200704 [ 312.808404][T20808] total_swapcached 0 [ 312.812345][T20808] total_pgpgin 233181 [ 312.816328][T20808] total_pgpgout 233181 [ 312.820509][T20808] total_pgfault 251760 [ 312.824587][T20808] total_pgmajfault 181 [ 312.828662][T20808] total_inactive_anon 0 [ 312.832912][T20808] total_active_anon 0 [ 312.836897][T20808] total_inactive_file 0 [ 312.841083][T20808] total_active_file 0 [ 312.845105][T20808] total_unevictable 0 [ 312.849099][T20808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4445,pid=20808,uid=0 [ 312.863835][T20808] Memory cgroup out of memory: Killed process 20808 (syz.3.4445) total-vm:93956kB, anon-rss:1132kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 312.895877][ T36] hid-generic 0003:0003:0000.002B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 312.932558][T20816] lo speed is unknown, defaulting to 1000 [ 313.057491][T20828] lo speed is unknown, defaulting to 1000 [ 313.112309][T20845] netlink: 'syz.4.4459': attribute type 1 has an invalid length. [ 313.138242][T20846] netlink: 'syz.1.4457': attribute type 4 has an invalid length. [ 313.161216][T20848] sctp: [Deprecated]: syz.2.4460 (pid 20848) Use of int in max_burst socket option. [ 313.161216][T20848] Use struct sctp_assoc_value instead [ 313.190878][T20851] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 313.228193][T20855] netlink: 'syz.1.4462': attribute type 1 has an invalid length. [ 313.305853][T11053] hid-generic 0003:0003:0000.002C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 313.315998][T20828] lo speed is unknown, defaulting to 1000 [ 313.521330][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 313.655410][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4472'. [ 313.669015][T20882] ipvlan8: entered promiscuous mode [ 313.675297][T20882] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 313.858981][T20881] lo speed is unknown, defaulting to 1000 [ 314.026447][T20881] lo speed is unknown, defaulting to 1000 [ 314.234912][T20889] netlink: 'syz.3.4475': attribute type 1 has an invalid length. [ 314.253934][T20890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 314.288947][T20890] ipvlan10: entered promiscuous mode [ 314.327374][T20890] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 314.392494][ T3415] hid-generic 0003:0003:0000.002D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 314.816019][T20885] lo speed is unknown, defaulting to 1000 [ 315.109635][T20885] lo speed is unknown, defaulting to 1000 [ 315.216998][T20920] serio: Serial port ptm0 [ 315.233371][T20894] syz.4.4477 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 315.247589][T20894] CPU: 0 UID: 0 PID: 20894 Comm: syz.4.4477 Not tainted syzkaller #0 PREEMPT(voluntary) [ 315.247618][T20894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.247634][T20894] Call Trace: [ 315.247664][T20894] [ 315.247674][T20894] __dump_stack+0x1d/0x30 [ 315.247704][T20894] dump_stack_lvl+0xe8/0x140 [ 315.247724][T20894] dump_stack+0x15/0x1b [ 315.247767][T20894] dump_header+0x81/0x220 [ 315.247799][T20894] oom_kill_process+0x342/0x400 [ 315.247877][T20894] out_of_memory+0x979/0xb80 [ 315.247980][T20894] try_charge_memcg+0x610/0xa10 [ 315.248069][T20894] obj_cgroup_charge_pages+0xa6/0x150 [ 315.248109][T20894] __memcg_kmem_charge_page+0x9f/0x170 [ 315.248143][T20894] __alloc_frozen_pages_noprof+0x188/0x360 [ 315.248206][T20894] alloc_pages_mpol+0xb3/0x260 [ 315.248225][T20894] alloc_pages_noprof+0x90/0x130 [ 315.248250][T20894] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 315.248354][T20894] __kvmalloc_node_noprof+0x483/0x670 [ 315.248383][T20894] ? ip_set_alloc+0x24/0x30 [ 315.248407][T20894] ? ip_set_alloc+0x24/0x30 [ 315.248453][T20894] ip_set_alloc+0x24/0x30 [ 315.248477][T20894] hash_netiface_create+0x282/0x740 [ 315.248507][T20894] ? __pfx_hash_netiface_create+0x10/0x10 [ 315.248561][T20894] ip_set_create+0x3cc/0x970 [ 315.248626][T20894] ? __nla_parse+0x40/0x60 [ 315.248701][T20894] nfnetlink_rcv_msg+0x4c6/0x590 [ 315.248797][T20894] netlink_rcv_skb+0x123/0x220 [ 315.248821][T20894] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 315.248860][T20894] nfnetlink_rcv+0x167/0x16c0 [ 315.248956][T20894] ? kmem_cache_free+0xe4/0x3d0 [ 315.248981][T20894] ? __kfree_skb+0x109/0x150 [ 315.249003][T20894] ? nlmon_xmit+0x4f/0x60 [ 315.249075][T20894] ? consume_skb+0x49/0x150 [ 315.249124][T20894] ? nlmon_xmit+0x4f/0x60 [ 315.249154][T20894] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 315.249245][T20894] ? __dev_queue_xmit+0x1200/0x2000 [ 315.249269][T20894] ? __dev_queue_xmit+0x182/0x2000 [ 315.249332][T20894] ? ref_tracker_free+0x37d/0x3e0 [ 315.249366][T20894] ? __netlink_deliver_tap+0x4dc/0x500 [ 315.249394][T20894] netlink_unicast+0x5c0/0x690 [ 315.249445][T20894] netlink_sendmsg+0x58b/0x6b0 [ 315.249471][T20894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.249498][T20894] __sock_sendmsg+0x145/0x180 [ 315.249581][T20894] ____sys_sendmsg+0x31e/0x4e0 [ 315.249608][T20894] ___sys_sendmsg+0x17b/0x1d0 [ 315.249644][T20894] __x64_sys_sendmsg+0xd4/0x160 [ 315.249672][T20894] x64_sys_call+0x191e/0x3000 [ 315.249698][T20894] do_syscall_64+0xd2/0x200 [ 315.249727][T20894] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 315.249751][T20894] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 315.249833][T20894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.249852][T20894] RIP: 0033:0x7fa0b06eeec9 [ 315.249865][T20894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.249880][T20894] RSP: 002b:00007fa0af157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.249897][T20894] RAX: ffffffffffffffda RBX: 00007fa0b0945fa0 RCX: 00007fa0b06eeec9 [ 315.249908][T20894] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 315.249928][T20894] RBP: 00007fa0b0771f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.249938][T20894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.249949][T20894] R13: 00007fa0b0946038 R14: 00007fa0b0945fa0 R15: 00007ffdd564a648 [ 315.249965][T20894] [ 315.249971][T20894] memory: usage 307200kB, limit 307200kB, failcnt 1469 [ 315.590369][T20894] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 315.598257][T20894] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 315.605551][T20894] Memory cgroup stats for /syz4: [ 315.605919][T20894] cache 0 [ 315.613960][T20894] rss 0 [ 315.616738][T20894] shmem 0 [ 315.619670][T20894] mapped_file 0 [ 315.623140][T20894] dirty 0 [ 315.626071][T20894] writeback 0 [ 315.629345][T20894] workingset_refault_anon 383 [ 315.634028][T20894] workingset_refault_file 4522 [ 315.638781][T20894] swap 184320 [ 315.642115][T20894] swapcached 0 [ 315.645480][T20894] pgpgin 203276 [ 315.649032][T20894] pgpgout 203276 [ 315.652607][T20894] pgfault 253920 [ 315.656190][T20894] pgmajfault 291 [ 315.659808][T20894] inactive_anon 0 [ 315.663469][T20894] active_anon 0 [ 315.666962][T20894] inactive_file 0 [ 315.670666][T20894] active_file 0 [ 315.671652][T20922] validate_nla: 1 callbacks suppressed [ 315.671670][T20922] netlink: 'syz.3.4487': attribute type 1 has an invalid length. [ 315.674176][T20894] unevictable 0 [ 315.674188][T20894] hierarchical_memory_limit 314572800 [ 315.674200][T20894] hierarchical_memsw_limit 9223372036854771712 [ 315.674211][T20894] total_cache 0 [ 315.674217][T20894] total_rss 0 [ 315.674224][T20894] total_shmem 0 [ 315.674231][T20894] total_mapped_file 0 [ 315.674238][T20894] total_dirty 0 [ 315.720639][T20894] total_writeback 0 [ 315.724451][T20894] total_workingset_refault_anon 383 [ 315.729813][T20894] total_workingset_refault_file 4522 [ 315.735150][T20894] total_swap 184320 [ 315.738963][T20894] total_swapcached 0 [ 315.742934][T20894] total_pgpgin 203276 [ 315.744874][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4488'. [ 315.746916][T20894] total_pgpgout 203276 [ 315.746928][T20894] total_pgfault 253920 [ 315.746939][T20894] total_pgmajfault 291 [ 315.768011][T20894] total_inactive_anon 0 [ 315.772184][T20894] total_active_anon 0 [ 315.776191][T20894] total_inactive_file 0 [ 315.780347][T20894] total_active_file 0 [ 315.784504][T20894] total_unevictable 0 [ 315.788478][T20894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4477,pid=20893,uid=0 [ 315.803270][T20894] Memory cgroup out of memory: Killed process 20893 (syz.4.4477) total-vm:93884kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 315.954208][T11053] hid_parser_main: 80 callbacks suppressed [ 315.954238][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 315.967503][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 315.974930][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 315.982406][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 315.989853][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 315.997377][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 316.004849][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 316.012346][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 316.020022][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 316.027484][T11053] hid-generic 0003:0003:0000.002E: unknown main item tag 0x0 [ 316.058691][T11053] hid-generic 0003:0003:0000.002E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 316.082079][T20943] netlink: 'syz.1.4496': attribute type 4 has an invalid length. [ 316.105038][T20945] sctp: [Deprecated]: syz.2.4497 (pid 20945) Use of int in max_burst socket option. [ 316.105038][T20945] Use struct sctp_assoc_value instead [ 316.150415][T11053] hid-generic 0003:0003:0000.002F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 316.176643][T20950] sctp: [Deprecated]: syz.5.4499 (pid 20950) Use of int in max_burst socket option. [ 316.176643][T20950] Use struct sctp_assoc_value instead [ 316.268267][T20970] serio: Serial port ptm0 [ 316.290703][T11053] hid-generic 0003:0003:0000.0030: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 316.428381][T20984] sctp: [Deprecated]: syz.4.4513 (pid 20984) Use of int in max_burst socket option. [ 316.428381][T20984] Use struct sctp_assoc_value instead [ 316.513706][T20990] sctp: [Deprecated]: syz.4.4515 (pid 20990) Use of int in max_burst socket option. [ 316.513706][T20990] Use struct sctp_assoc_value instead [ 316.611919][T20995] sctp: [Deprecated]: syz.4.4517 (pid 20995) Use of int in max_burst socket option. [ 316.611919][T20995] Use struct sctp_assoc_value instead [ 316.959218][T20957] lo speed is unknown, defaulting to 1000 [ 317.040767][T20963] syz.3.4505 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 317.051838][T20963] CPU: 0 UID: 0 PID: 20963 Comm: syz.3.4505 Not tainted syzkaller #0 PREEMPT(voluntary) [ 317.051885][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.051900][T20963] Call Trace: [ 317.051906][T20963] [ 317.051913][T20963] __dump_stack+0x1d/0x30 [ 317.051942][T20963] dump_stack_lvl+0xe8/0x140 [ 317.051967][T20963] dump_stack+0x15/0x1b [ 317.051988][T20963] dump_header+0x81/0x220 [ 317.052029][T20963] oom_kill_process+0x342/0x400 [ 317.052075][T20963] out_of_memory+0x979/0xb80 [ 317.052113][T20963] try_charge_memcg+0x610/0xa10 [ 317.052170][T20963] charge_memcg+0x51/0xc0 [ 317.052258][T20963] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 317.052311][T20963] __read_swap_cache_async+0x17b/0x2d0 [ 317.052409][T20963] swap_cluster_readahead+0x362/0x3c0 [ 317.052443][T20963] swapin_readahead+0xde/0x6f0 [ 317.052468][T20963] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 317.052578][T20963] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 317.052615][T20963] ? __rcu_read_unlock+0x4f/0x70 [ 317.052646][T20963] ? swap_cache_get_folio+0x277/0x280 [ 317.052702][T20963] do_swap_page+0x2ae/0x2370 [ 317.052725][T20963] ? css_rstat_updated+0xb7/0x240 [ 317.052759][T20963] ? __pfx_default_wake_function+0x10/0x10 [ 317.052904][T20963] handle_mm_fault+0x9a5/0x2be0 [ 317.052934][T20963] ? vma_start_read+0x141/0x1f0 [ 317.052989][T20963] do_user_addr_fault+0x630/0x1080 [ 317.053012][T20963] ? fpregs_restore_userregs+0xe2/0x1d0 [ 317.053081][T20963] ? switch_fpu_return+0xe/0x20 [ 317.053135][T20963] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 317.053165][T20963] exc_page_fault+0x62/0xa0 [ 317.053188][T20963] asm_exc_page_fault+0x26/0x30 [ 317.053213][T20963] RIP: 0033:0x7f4272e557cc [ 317.053232][T20963] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 317.053271][T20963] RSP: 002b:00007ffe6bcbc5f0 EFLAGS: 00010206 [ 317.053349][T20963] RAX: 0000000000000000 RBX: 00007f42731d5fa0 RCX: 0000000000000000 [ 317.053364][T20963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555588c2d808 [ 317.053380][T20963] RBP: 00007f42731d7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 317.053397][T20963] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004d665 [ 317.053414][T20963] R13: 00007f42731d6090 R14: ffffffffffffffff R15: 00007ffe6bcbc700 [ 317.053506][T20963] [ 317.053515][T20963] memory: usage 307200kB, limit 307200kB, failcnt 1647 [ 317.295410][T20963] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 317.303367][T20963] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 317.310752][T20963] Memory cgroup stats for /syz3: [ 317.320378][T20963] cache 0 [ 317.328296][T20963] rss 0 [ 317.331133][T20963] shmem 0 [ 317.334092][T20963] mapped_file 0 [ 317.337568][T20963] dirty 0 [ 317.340610][T20963] writeback 0 [ 317.343903][T20963] workingset_refault_anon 303 [ 317.348635][T20963] workingset_refault_file 4920 [ 317.353481][T20963] swap 200704 [ 317.356793][T20963] swapcached 0 [ 317.360250][T20963] pgpgin 237019 [ 317.363727][T20963] pgpgout 237019 [ 317.367290][T20963] pgfault 256021 [ 317.370899][T20963] pgmajfault 209 [ 317.374458][T20963] inactive_anon 0 [ 317.378136][T20963] active_anon 0 [ 317.381648][T20963] inactive_file 0 [ 317.385287][T20963] active_file 0 [ 317.388770][T20963] unevictable 0 [ 317.392260][T20963] hierarchical_memory_limit 314572800 [ 317.397636][T20963] hierarchical_memsw_limit 9223372036854771712 [ 317.403845][T20963] total_cache 0 [ 317.407316][T20963] total_rss 0 [ 317.410720][T20963] total_shmem 0 [ 317.414182][T20963] total_mapped_file 0 [ 317.418167][T20963] total_dirty 0 [ 317.421673][T20963] total_writeback 0 [ 317.425512][T20963] total_workingset_refault_anon 303 [ 317.430887][T20963] total_workingset_refault_file 4920 [ 317.436224][T20963] total_swap 200704 [ 317.440039][T20963] total_swapcached 0 [ 317.443975][T20963] total_pgpgin 237019 [ 317.447966][T20963] total_pgpgout 237019 [ 317.452126][T20963] total_pgfault 256021 [ 317.456201][T20963] total_pgmajfault 209 [ 317.460303][T20963] total_inactive_anon 0 [ 317.464492][T20963] total_active_anon 0 [ 317.468484][T20963] total_inactive_file 0 [ 317.472675][T20963] total_active_file 0 [ 317.476664][T20963] total_unevictable 0 [ 317.480693][T20963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4505,pid=20963,uid=0 [ 317.495449][T20963] Memory cgroup out of memory: Killed process 20963 (syz.3.4505) total-vm:93956kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 317.538490][T20957] lo speed is unknown, defaulting to 1000 [ 317.805714][T21026] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 317.839493][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4527'. [ 317.867921][T21032] serio: Serial port ptm0 [ 317.874434][ T29] audit: type=1400 audit(1760238461.159:5776): avc: denied { read write } for pid=21033 comm="syz.4.4532" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 317.898858][ T29] audit: type=1400 audit(1760238461.159:5777): avc: denied { open } for pid=21033 comm="syz.4.4532" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 318.025302][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4534'. [ 318.099818][T21041] ipvlan11: entered promiscuous mode [ 318.106467][T21041] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 318.285906][T21055] netlink: 'syz.2.4541': attribute type 4 has an invalid length. [ 318.639733][T21038] lo speed is unknown, defaulting to 1000 [ 318.722942][ T29] audit: type=1400 audit(1760238462.009:5778): avc: denied { append } for pid=21066 comm="syz.3.4543" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 318.746913][ T29] audit: type=1400 audit(1760238462.009:5779): avc: denied { open } for pid=21066 comm="syz.3.4543" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 318.804412][T15165] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 318.815466][T15165] CPU: 0 UID: 0 PID: 15165 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 318.815500][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.815517][T15165] Call Trace: [ 318.815543][T15165] [ 318.815554][T15165] __dump_stack+0x1d/0x30 [ 318.815579][T15165] dump_stack_lvl+0xe8/0x140 [ 318.815682][T15165] dump_stack+0x15/0x1b [ 318.815704][T15165] dump_header+0x81/0x220 [ 318.815744][T15165] oom_kill_process+0x342/0x400 [ 318.815784][T15165] out_of_memory+0x979/0xb80 [ 318.816018][T15165] try_charge_memcg+0x610/0xa10 [ 318.816057][T15165] charge_memcg+0x51/0xc0 [ 318.816157][T15165] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 318.816190][T15165] __read_swap_cache_async+0x17b/0x2d0 [ 318.816240][T15165] swap_cluster_readahead+0x262/0x3c0 [ 318.816293][T15165] swapin_readahead+0xde/0x6f0 [ 318.816319][T15165] ? css_rstat_updated+0xb7/0x240 [ 318.816353][T15165] ? __rcu_read_unlock+0x4f/0x70 [ 318.816384][T15165] ? __rcu_read_unlock+0x4f/0x70 [ 318.816415][T15165] ? swap_cache_get_folio+0x277/0x280 [ 318.816461][T15165] do_swap_page+0x2ae/0x2370 [ 318.816505][T15165] ? _raw_spin_unlock+0x14/0x50 [ 318.816535][T15165] ? finish_task_switch+0xb6/0x2b0 [ 318.816561][T15165] ? __pfx_default_wake_function+0x10/0x10 [ 318.816596][T15165] handle_mm_fault+0x9a5/0x2be0 [ 318.816643][T15165] ? vma_start_read+0x141/0x1f0 [ 318.816829][T15165] do_user_addr_fault+0x630/0x1080 [ 318.816895][T15165] ? fpregs_restore_userregs+0xe2/0x1d0 [ 318.816932][T15165] ? switch_fpu_return+0xe/0x20 [ 318.816966][T15165] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 318.817001][T15165] exc_page_fault+0x62/0xa0 [ 318.817149][T15165] asm_exc_page_fault+0x26/0x30 [ 318.817176][T15165] RIP: 0033:0x7fa0b0721745 [ 318.817201][T15165] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 318.817219][T15165] RSP: 002b:00007ffdd564a988 EFLAGS: 00010246 [ 318.817239][T15165] RAX: 0000000000000000 RBX: 00000000000002ef RCX: 00007fa0b0721743 [ 318.817274][T15165] RDX: 00007ffdd564a9a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.817371][T15165] RBP: 00007ffdd564aa0c R08: 000000002dd0216e R09: 0000000000000000 [ 318.817384][T15165] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 318.817397][T15165] R13: 00000000000927c0 R14: 000000000004db0c R15: 00007ffdd564aa60 [ 318.817423][T15165] [ 318.817432][T15165] memory: usage 307200kB, limit 307200kB, failcnt 1773 [ 318.873462][T21038] lo speed is unknown, defaulting to 1000 [ 318.875777][T15165] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 318.875795][T15165] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 318.875813][T15165] Memory cgroup stats for /syz4: [ 319.173231][T15165] cache 0 [ 319.181274][T15165] rss 0 [ 319.184082][T15165] shmem 0 [ 319.187068][T15165] mapped_file 0 [ 319.190627][T15165] dirty 0 [ 319.193626][T15165] writeback 0 [ 319.196920][T15165] workingset_refault_anon 416 [ 319.201652][T15165] workingset_refault_file 4779 [ 319.206430][T15165] swap 180224 [ 319.209775][T15165] swapcached 4096 [ 319.213469][T15165] pgpgin 204178 [ 319.216932][T15165] pgpgout 204177 [ 319.220504][T15165] pgfault 255572 [ 319.224064][T15165] pgmajfault 315 [ 319.227619][T15165] inactive_anon 0 [ 319.231299][T15165] active_anon 4096 [ 319.235027][T15165] inactive_file 0 [ 319.238663][T15165] active_file 0 [ 319.242181][T15165] unevictable 0 [ 319.245700][T15165] hierarchical_memory_limit 314572800 [ 319.251179][T15165] hierarchical_memsw_limit 9223372036854771712 [ 319.257358][T15165] total_cache 0 [ 319.260853][T15165] total_rss 0 [ 319.264141][T15165] total_shmem 0 [ 319.267621][T15165] total_mapped_file 0 [ 319.271640][T15165] total_dirty 0 [ 319.275109][T15165] total_writeback 0 [ 319.278918][T15165] total_workingset_refault_anon 416 [ 319.284138][T15165] total_workingset_refault_file 4779 [ 319.289489][T15165] total_swap 180224 [ 319.293863][T15165] total_swapcached 4096 [ 319.298029][T15165] total_pgpgin 204178 [ 319.302119][T15165] total_pgpgout 204177 [ 319.306274][T15165] total_pgfault 255572 [ 319.310465][T15165] total_pgmajfault 315 [ 319.314578][T15165] total_inactive_anon 0 [ 319.318733][T15165] total_active_anon 4096 [ 319.323039][T15165] total_inactive_file 0 [ 319.327256][T15165] total_active_file 0 [ 319.331261][T15165] total_unevictable 0 [ 319.335296][T15165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4540,pid=21050,uid=0 [ 319.350040][T15165] Memory cgroup out of memory: Killed process 21050 (syz.4.4540) total-vm:93884kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 319.437348][ T29] audit: type=1326 audit(1760238462.539:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 319.461167][ T29] audit: type=1326 audit(1760238462.539:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 319.484707][ T29] audit: type=1326 audit(1760238462.539:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 319.508345][ T29] audit: type=1326 audit(1760238462.539:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 319.531901][ T29] audit: type=1326 audit(1760238462.539:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 319.555593][ T29] audit: type=1326 audit(1760238462.539:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21066 comm="syz.3.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 319.570458][T21043] lo speed is unknown, defaulting to 1000 [ 319.587199][T21071] FAULT_INJECTION: forcing a failure. [ 319.587199][T21071] name failslab, interval 1, probability 0, space 0, times 0 [ 319.599930][T21071] CPU: 1 UID: 0 PID: 21071 Comm: syz.1.4544 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.599961][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.600010][T21071] Call Trace: [ 319.600018][T21071] [ 319.600027][T21071] __dump_stack+0x1d/0x30 [ 319.600051][T21071] dump_stack_lvl+0xe8/0x140 [ 319.600073][T21071] dump_stack+0x15/0x1b [ 319.600093][T21071] should_fail_ex+0x265/0x280 [ 319.600162][T21071] should_failslab+0x8c/0xb0 [ 319.600194][T21071] kmem_cache_alloc_noprof+0x50/0x480 [ 319.600220][T21071] ? prepare_creds+0x37/0x4c0 [ 319.600296][T21071] prepare_creds+0x37/0x4c0 [ 319.600321][T21071] copy_creds+0x8f/0x3f0 [ 319.600346][T21071] copy_process+0x658/0x2000 [ 319.600371][T21071] ? kstrtouint+0x76/0xc0 [ 319.600459][T21071] ? __rcu_read_unlock+0x4f/0x70 [ 319.600530][T21071] kernel_clone+0x16c/0x5c0 [ 319.600557][T21071] ? vfs_write+0x7e8/0x960 [ 319.600581][T21071] __x64_sys_clone+0xe6/0x120 [ 319.600616][T21071] x64_sys_call+0x119c/0x3000 [ 319.600656][T21071] do_syscall_64+0xd2/0x200 [ 319.600678][T21071] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 319.600704][T21071] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 319.600725][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.600746][T21071] RIP: 0033:0x7f071df4eec9 [ 319.600769][T21071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.600787][T21071] RSP: 002b:00007f071c9b6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.600805][T21071] RAX: ffffffffffffffda RBX: 00007f071e1a5fa0 RCX: 00007f071df4eec9 [ 319.600817][T21071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020000 [ 319.600829][T21071] RBP: 00007f071c9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.600841][T21071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 319.600853][T21071] R13: 00007f071e1a6038 R14: 00007f071e1a5fa0 R15: 00007ffc7001a478 [ 319.600871][T21071] [ 319.818418][T21043] lo speed is unknown, defaulting to 1000 [ 319.942744][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4549'. [ 319.971241][T21095] netlink: 'syz.4.4552': attribute type 4 has an invalid length. [ 319.993129][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 320.025329][T21096] ipvlan12: entered promiscuous mode [ 320.034951][T21096] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 320.045794][T21093] lo speed is unknown, defaulting to 1000 [ 320.104001][T21093] lo speed is unknown, defaulting to 1000 [ 320.252627][T21115] FAULT_INJECTION: forcing a failure. [ 320.252627][T21115] name failslab, interval 1, probability 0, space 0, times 0 [ 320.265308][T21115] CPU: 0 UID: 0 PID: 21115 Comm: syz.3.4558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.265492][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.265509][T21115] Call Trace: [ 320.265517][T21115] [ 320.265602][T21115] __dump_stack+0x1d/0x30 [ 320.265624][T21115] dump_stack_lvl+0xe8/0x140 [ 320.265648][T21115] dump_stack+0x15/0x1b [ 320.265667][T21115] should_fail_ex+0x265/0x280 [ 320.265764][T21115] should_failslab+0x8c/0xb0 [ 320.265795][T21115] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 320.265859][T21115] ? alloc_vmap_area+0x236/0xe80 [ 320.265893][T21115] alloc_vmap_area+0x236/0xe80 [ 320.265926][T21115] ? should_failslab+0x8c/0xb0 [ 320.265993][T21115] ? __kmalloc_cache_node_noprof+0x2b2/0x4a0 [ 320.266030][T21115] __get_vm_area_node+0x173/0x1d0 [ 320.266072][T21115] __vmalloc_node_range_noprof+0x28c/0xed0 [ 320.266183][T21115] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.266222][T21115] ? __rcu_read_unlock+0x4f/0x70 [ 320.266273][T21115] ? cred_has_capability+0x210/0x280 [ 320.266362][T21115] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.266395][T21115] __vmalloc_noprof+0x83/0xc0 [ 320.266470][T21115] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.266571][T21115] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.266695][T21115] ? bpf_prog_alloc+0x2a/0x150 [ 320.266788][T21115] bpf_prog_alloc+0x3c/0x150 [ 320.266836][T21115] bpf_prog_load+0x506/0x1100 [ 320.266862][T21115] ? security_bpf+0x2b/0x90 [ 320.266886][T21115] __sys_bpf+0x469/0x7c0 [ 320.266983][T21115] __x64_sys_bpf+0x41/0x50 [ 320.267019][T21115] x64_sys_call+0x2aee/0x3000 [ 320.267054][T21115] do_syscall_64+0xd2/0x200 [ 320.267111][T21115] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.267139][T21115] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 320.267161][T21115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.267230][T21115] RIP: 0033:0x7f4272f7eec9 [ 320.267245][T21115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.267267][T21115] RSP: 002b:00007f42719e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.267291][T21115] RAX: ffffffffffffffda RBX: 00007f42731d5fa0 RCX: 00007f4272f7eec9 [ 320.267307][T21115] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 320.267322][T21115] RBP: 00007f42719e7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.267337][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.267373][T21115] R13: 00007f42731d6038 R14: 00007f42731d5fa0 R15: 00007ffe6bcbc488 [ 320.267397][T21115] [ 320.267408][T21115] syz.3.4558: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 320.392784][T21121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4559'. [ 320.395494][T21115] ,cpuset=/,mems_allowed=0 [ 320.543765][T21115] CPU: 0 UID: 0 PID: 21115 Comm: syz.3.4558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.543799][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.543815][T21115] Call Trace: [ 320.543823][T21115] [ 320.543867][T21115] __dump_stack+0x1d/0x30 [ 320.543889][T21115] dump_stack_lvl+0xe8/0x140 [ 320.543907][T21115] dump_stack+0x15/0x1b [ 320.543923][T21115] warn_alloc+0x12b/0x1a0 [ 320.543985][T21115] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 320.544022][T21115] ? __rcu_read_unlock+0x4f/0x70 [ 320.544100][T21115] ? cred_has_capability+0x210/0x280 [ 320.544131][T21115] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.544226][T21115] __vmalloc_noprof+0x83/0xc0 [ 320.544257][T21115] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.544292][T21115] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 320.544348][T21115] ? bpf_prog_alloc+0x2a/0x150 [ 320.544439][T21115] bpf_prog_alloc+0x3c/0x150 [ 320.544470][T21115] bpf_prog_load+0x506/0x1100 [ 320.544499][T21115] ? security_bpf+0x2b/0x90 [ 320.544569][T21115] __sys_bpf+0x469/0x7c0 [ 320.544619][T21115] __x64_sys_bpf+0x41/0x50 [ 320.544653][T21115] x64_sys_call+0x2aee/0x3000 [ 320.544677][T21115] do_syscall_64+0xd2/0x200 [ 320.544704][T21115] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.544731][T21115] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 320.544827][T21115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.544900][T21115] RIP: 0033:0x7f4272f7eec9 [ 320.544916][T21115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.544953][T21115] RSP: 002b:00007f42719e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.544974][T21115] RAX: ffffffffffffffda RBX: 00007f42731d5fa0 RCX: 00007f4272f7eec9 [ 320.544986][T21115] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 320.544998][T21115] RBP: 00007f42719e7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.545009][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.545074][T21115] R13: 00007f42731d6038 R14: 00007f42731d5fa0 R15: 00007ffe6bcbc488 [ 320.545092][T21115] [ 320.545105][T21115] Mem-Info: [ 320.545111][T21115] active_anon:5795 inactive_anon:0 isolated_anon:0 [ 320.545111][T21115] active_file:10698 inactive_file:2533 isolated_file:0 [ 320.545111][T21115] unevictable:0 dirty:70 writeback:0 [ 320.545111][T21115] slab_reclaimable:3658 slab_unreclaimable:60945 [ 320.545111][T21115] mapped:31047 shmem:2473 pagetables:964 [ 320.545111][T21115] sec_pagetables:0 bounce:0 [ 320.545111][T21115] kernel_misc_reclaimable:0 [ 320.545111][T21115] free:1768109 free_pcp:80699 free_cma:0 [ 320.545215][T21115] Node 0 active_anon:23180kB inactive_anon:0kB active_file:42792kB inactive_file:10132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124188kB dirty:280kB writeback:0kB shmem:9892kB kernel_stack:4288kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.545264][T21115] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.545354][T21115] lowmem_reserve[]: 0 2883 7862 7862 [ 320.545443][T21115] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 320.545533][T21115] lowmem_reserve[]: 0 0 4978 4978 [ 320.545625][T21115] Node 0 Normal free:4107920kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23180kB inactive_anon:0kB active_file:42792kB inactive_file:10132kB unevictable:0kB writepending:280kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:319264kB local_pcp:198292kB free_cma:0kB [ 320.545791][T21115] lowmem_reserve[]: 0 0 0 0 [ 320.545820][T21115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.546007][T21115] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 320.546266][T21115] Node 0 Normal: 161*4kB (UME) 51*8kB (UM) 358*16kB (UM) 622*32kB (UME) 368*64kB (UME) 728*128kB (UME) 465*256kB (UM) 377*512kB (UME) 409*1024kB (UM) 39*2048kB (UM) 770*4096kB (UM) = 4108092kB [ 320.546561][T21115] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 320.546582][T21115] 15744 total pagecache pages [ 320.546591][T21115] 14 pages in swap cache [ 320.546599][T21115] Free swap = 124956kB [ 320.546682][T21115] Total swap = 124996kB [ 320.546690][T21115] 2097051 pages RAM [ 320.546698][T21115] 0 pages HighMem/MovableOnly [ 320.546706][T21115] 80479 pages reserved [ 320.638065][T21128] netlink: 'syz.4.4563': attribute type 4 has an invalid length. [ 320.694179][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4560'. [ 320.699936][T21134] ipvlan9: entered promiscuous mode [ 320.701125][T21134] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 320.933049][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4568'. [ 321.116993][T21146] netlink: 'syz.3.4570': attribute type 4 has an invalid length. [ 321.602645][T21122] lo speed is unknown, defaulting to 1000 [ 321.701877][T21122] lo speed is unknown, defaulting to 1000 [ 321.719619][T21156] FAULT_INJECTION: forcing a failure. [ 321.719619][T21156] name failslab, interval 1, probability 0, space 0, times 0 [ 321.732320][T21156] CPU: 1 UID: 0 PID: 21156 Comm: syz.2.4572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.732351][T21156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.732368][T21156] Call Trace: [ 321.732376][T21156] [ 321.732452][T21156] __dump_stack+0x1d/0x30 [ 321.732474][T21156] dump_stack_lvl+0xe8/0x140 [ 321.732539][T21156] dump_stack+0x15/0x1b [ 321.732562][T21156] should_fail_ex+0x265/0x280 [ 321.732654][T21156] should_failslab+0x8c/0xb0 [ 321.732684][T21156] kmem_cache_alloc_noprof+0x50/0x480 [ 321.732771][T21156] ? alloc_empty_file+0x76/0x200 [ 321.732822][T21156] ? mntput+0x4b/0x80 [ 321.732877][T21156] alloc_empty_file+0x76/0x200 [ 321.732943][T21156] path_openat+0x68/0x2170 [ 321.732994][T21156] ? _parse_integer_limit+0x170/0x190 [ 321.733049][T21156] ? kstrtoull+0x111/0x140 [ 321.733196][T21156] ? kstrtouint+0x76/0xc0 [ 321.733228][T21156] do_filp_open+0x109/0x230 [ 321.733257][T21156] do_sys_openat2+0xa6/0x110 [ 321.733381][T21156] __x64_sys_openat+0xf2/0x120 [ 321.733427][T21156] x64_sys_call+0x2eab/0x3000 [ 321.733456][T21156] do_syscall_64+0xd2/0x200 [ 321.733631][T21156] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.733718][T21156] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 321.733750][T21156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.733799][T21156] RIP: 0033:0x7f1e8cb3eec9 [ 321.733819][T21156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.733844][T21156] RSP: 002b:00007f1e8b586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.733868][T21156] RAX: ffffffffffffffda RBX: 00007f1e8cd96090 RCX: 00007f1e8cb3eec9 [ 321.733881][T21156] RDX: 0000000000060442 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 321.733898][T21156] RBP: 00007f1e8b586090 R08: 0000000000000000 R09: 0000000000000000 [ 321.733957][T21156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.733969][T21156] R13: 00007f1e8cd96128 R14: 00007f1e8cd96090 R15: 00007ffe0e015208 [ 321.733988][T21156] [ 321.961492][T11057] hid_parser_main: 44 callbacks suppressed [ 321.961515][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 321.974805][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 321.982258][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 321.989757][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 321.997301][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 322.004712][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 322.012133][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 322.019613][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 322.027125][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 322.034546][T11057] hid-generic 0003:0003:0000.0031: unknown main item tag 0x0 [ 322.061130][T11057] hid-generic 0003:0003:0000.0031: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 322.125465][T21171] FAULT_INJECTION: forcing a failure. [ 322.125465][T21171] name failslab, interval 1, probability 0, space 0, times 0 [ 322.138189][T21171] CPU: 1 UID: 0 PID: 21171 Comm: syz.4.4579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 322.138219][T21171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.138233][T21171] Call Trace: [ 322.138239][T21171] [ 322.138248][T21171] __dump_stack+0x1d/0x30 [ 322.138273][T21171] dump_stack_lvl+0xe8/0x140 [ 322.138308][T21171] dump_stack+0x15/0x1b [ 322.138344][T21171] should_fail_ex+0x265/0x280 [ 322.138389][T21171] should_failslab+0x8c/0xb0 [ 322.138421][T21171] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 322.138464][T21171] ? __alloc_skb+0x101/0x320 [ 322.138496][T21171] __alloc_skb+0x101/0x320 [ 322.138569][T21171] netlink_alloc_large_skb+0xbf/0xf0 [ 322.138633][T21171] netlink_sendmsg+0x3cf/0x6b0 [ 322.138780][T21171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.138816][T21171] __sock_sendmsg+0x145/0x180 [ 322.138890][T21171] ____sys_sendmsg+0x31e/0x4e0 [ 322.138929][T21171] ___sys_sendmsg+0x17b/0x1d0 [ 322.138989][T21171] __x64_sys_sendmsg+0xd4/0x160 [ 322.139046][T21171] x64_sys_call+0x191e/0x3000 [ 322.139072][T21171] do_syscall_64+0xd2/0x200 [ 322.139115][T21171] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 322.139201][T21171] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 322.139227][T21171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.139254][T21171] RIP: 0033:0x7fa0b06eeec9 [ 322.139300][T21171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.139321][T21171] RSP: 002b:00007fa0af157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.139345][T21171] RAX: ffffffffffffffda RBX: 00007fa0b0945fa0 RCX: 00007fa0b06eeec9 [ 322.139361][T21171] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 322.139377][T21171] RBP: 00007fa0af157090 R08: 0000000000000000 R09: 0000000000000000 [ 322.139441][T21171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.139456][T21171] R13: 00007fa0b0946038 R14: 00007fa0b0945fa0 R15: 00007ffdd564a648 [ 322.139529][T21171] [ 322.478064][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4582'. [ 322.560949][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4586'. [ 322.650673][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4589'. [ 322.679135][T21192] lo speed is unknown, defaulting to 1000 [ 322.715803][T21192] lo speed is unknown, defaulting to 1000 [ 322.730933][ T3415] hid-generic 0003:0003:0000.0032: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 323.023107][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 323.023123][ T29] audit: type=1400 audit(1760238466.309:5826): avc: denied { bind } for pid=21214 comm="syz.2.4592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.092761][ T29] audit: type=1400 audit(1760238466.309:5827): avc: denied { listen } for pid=21214 comm="syz.2.4592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.140289][ T29] audit: type=1400 audit(1760238466.409:5828): avc: denied { write } for pid=21236 comm="syz.5.4600" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.200722][ T29] audit: type=1400 audit(1760238466.489:5829): avc: denied { remount } for pid=21244 comm="syz.3.4603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 323.237086][ T29] audit: type=1400 audit(1760238466.519:5830): avc: denied { create } for pid=21248 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.271194][T21251] lo speed is unknown, defaulting to 1000 [ 323.285191][T21251] lo speed is unknown, defaulting to 1000 [ 323.308669][T21251] lo speed is unknown, defaulting to 1000 [ 323.320929][T21251] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 323.328352][ T29] audit: type=1400 audit(1760238466.559:5831): avc: denied { write } for pid=21248 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.383344][T21251] lo speed is unknown, defaulting to 1000 [ 323.389664][T21251] lo speed is unknown, defaulting to 1000 [ 323.395686][ T29] audit: type=1400 audit(1760238466.679:5832): avc: denied { ioctl } for pid=21248 comm="syz.2.4605" path="socket:[53016]" dev="sockfs" ino=53016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.421184][T21251] lo speed is unknown, defaulting to 1000 [ 323.427893][T21251] lo speed is unknown, defaulting to 1000 [ 323.434247][T21251] lo speed is unknown, defaulting to 1000 [ 323.440429][T21251] lo speed is unknown, defaulting to 1000 [ 323.446522][T21251] lo speed is unknown, defaulting to 1000 [ 323.453440][T21251] lo speed is unknown, defaulting to 1000 [ 323.463266][ T29] audit: type=1326 audit(1760238466.739:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21256 comm="syz.3.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 323.486901][ T29] audit: type=1326 audit(1760238466.739:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21256 comm="syz.3.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 323.510572][ T29] audit: type=1326 audit(1760238466.739:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21256 comm="syz.3.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4272f7eec9 code=0x7ffc0000 [ 323.535964][T21251] lo speed is unknown, defaulting to 1000 [ 323.542554][T21251] lo speed is unknown, defaulting to 1000 [ 323.558027][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4611'. [ 323.728317][T21283] netlink: 'syz.3.4617': attribute type 4 has an invalid length. [ 323.770676][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4615'. [ 324.020512][T21299] SELinux: policydb version 586747130 does not match my version range 15-35 [ 324.029329][T21299] SELinux: failed to load policy [ 324.055215][T21302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4623'. [ 324.139581][T21314] FAULT_INJECTION: forcing a failure. [ 324.139581][T21314] name failslab, interval 1, probability 0, space 0, times 0 [ 324.152326][T21314] CPU: 0 UID: 0 PID: 21314 Comm: syz.3.4629 Not tainted syzkaller #0 PREEMPT(voluntary) [ 324.152550][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.152566][T21314] Call Trace: [ 324.152574][T21314] [ 324.152583][T21314] __dump_stack+0x1d/0x30 [ 324.152608][T21314] dump_stack_lvl+0xe8/0x140 [ 324.152633][T21314] dump_stack+0x15/0x1b [ 324.152688][T21314] should_fail_ex+0x265/0x280 [ 324.152725][T21314] should_failslab+0x8c/0xb0 [ 324.152792][T21314] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 324.152818][T21314] ? __alloc_skb+0x101/0x320 [ 324.152841][T21314] __alloc_skb+0x101/0x320 [ 324.152866][T21314] ? audit_log_start+0x342/0x720 [ 324.153003][T21314] audit_log_start+0x3a0/0x720 [ 324.153027][T21314] ? kstrtouint+0x76/0xc0 [ 324.153066][T21314] audit_seccomp+0x48/0x100 [ 324.153103][T21314] ? __seccomp_filter+0x82d/0x1250 [ 324.153134][T21314] __seccomp_filter+0x83e/0x1250 [ 324.153243][T21314] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.153280][T21314] ? vfs_write+0x7e8/0x960 [ 324.153313][T21314] __secure_computing+0x82/0x150 [ 324.153418][T21314] syscall_trace_enter+0xcf/0x1e0 [ 324.153459][T21314] do_syscall_64+0xac/0x200 [ 324.153486][T21314] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 324.153589][T21314] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 324.153655][T21314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.153681][T21314] RIP: 0033:0x7f4272f7eec9 [ 324.153699][T21314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.153722][T21314] RSP: 002b:00007f42719e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 324.153739][T21314] RAX: ffffffffffffffda RBX: 00007f42731d5fa0 RCX: 00007f4272f7eec9 [ 324.153751][T21314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.153762][T21314] RBP: 00007f42719e7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.153794][T21314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.153811][T21314] R13: 00007f42731d6038 R14: 00007f42731d5fa0 R15: 00007ffe6bcbc488 [ 324.153834][T21314] [ 324.442467][T21326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4634'. [ 324.460770][T21330] FAULT_INJECTION: forcing a failure. [ 324.460770][T21330] name failslab, interval 1, probability 0, space 0, times 0 [ 324.473509][T21330] CPU: 1 UID: 0 PID: 21330 Comm: +jõ@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 324.473539][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.473551][T21330] Call Trace: [ 324.473558][T21330] [ 324.473568][T21330] __dump_stack+0x1d/0x30 [ 324.473595][T21330] dump_stack_lvl+0xe8/0x140 [ 324.473621][T21330] dump_stack+0x15/0x1b [ 324.473697][T21330] should_fail_ex+0x265/0x280 [ 324.473771][T21330] should_failslab+0x8c/0xb0 [ 324.473808][T21330] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 324.473881][T21330] ? __d_alloc+0x3d/0x340 [ 324.473920][T21330] __d_alloc+0x3d/0x340 [ 324.473956][T21330] ? from_vfsgid+0x70/0xa0 [ 324.474049][T21330] d_alloc_pseudo+0x1e/0x80 [ 324.474134][T21330] alloc_file_pseudo+0x71/0x160 [ 324.474170][T21330] hugetlb_file_setup+0x2a6/0x3d0 [ 324.474201][T21330] ksys_mmap_pgoff+0x157/0x310 [ 324.474264][T21330] x64_sys_call+0x14a3/0x3000 [ 324.474288][T21330] do_syscall_64+0xd2/0x200 [ 324.474319][T21330] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 324.474382][T21330] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 324.474411][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.474568][T21330] RIP: 0033:0x7f4272f7eec9 [ 324.474588][T21330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.474607][T21330] RSP: 002b:00007f42719e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 324.474626][T21330] RAX: ffffffffffffffda RBX: 00007f42731d5fa0 RCX: 00007f4272f7eec9 [ 324.474679][T21330] RDX: 0000000002000000 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 324.474696][T21330] RBP: 00007f42719e7090 R08: ffffffffffffffff R09: 000000009c8e5000 [ 324.474712][T21330] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 324.474724][T21330] R13: 00007f42731d6038 R14: 00007f42731d5fa0 R15: 00007ffe6bcbc488 [ 324.474743][T21330] [ 324.690722][T21333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4637'. [ 324.743080][T21341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4639'. [ 324.752116][T21341] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4639'. [ 324.791043][T21341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4639'. [ 324.800600][T21341] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4639'. [ 324.826582][T21340] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 325.052053][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4647'. [ 325.275609][T21344] lo speed is unknown, defaulting to 1000 [ 325.474281][T21394] netlink: 'syz.1.4660': attribute type 4 has an invalid length. [ 325.606138][T21344] lo speed is unknown, defaulting to 1000 [ 325.618823][T21344] lo speed is unknown, defaulting to 1000 [ 326.536429][T21421] lo speed is unknown, defaulting to 1000 [ 326.837154][T21421] lo speed is unknown, defaulting to 1000 [ 326.847797][T21421] lo speed is unknown, defaulting to 1000 [ 326.862606][T21463] xt_hashlimit: max too large, truncated to 1048576 [ 326.948682][T21465] 9pnet_fd: Insufficient options for proto=fd [ 326.985201][T21465] 9pnet_fd: Insufficient options for proto=fd [ 327.035368][T21465] 9pnet_fd: Insufficient options for proto=fd [ 327.043521][T21465] 9pnet_fd: Insufficient options for proto=fd [ 327.316647][T21483] FAULT_INJECTION: forcing a failure. [ 327.316647][T21483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.329862][T21483] CPU: 1 UID: 0 PID: 21483 Comm: syz.3.4689 Not tainted syzkaller #0 PREEMPT(voluntary) [ 327.329888][T21483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.329901][T21483] Call Trace: [ 327.329939][T21483] [ 327.329949][T21483] __dump_stack+0x1d/0x30 [ 327.329975][T21483] dump_stack_lvl+0xe8/0x140 [ 327.330026][T21483] dump_stack+0x15/0x1b [ 327.330069][T21483] should_fail_ex+0x265/0x280 [ 327.330179][T21483] should_fail+0xb/0x20 [ 327.330220][T21483] should_fail_usercopy+0x1a/0x20 [ 327.330248][T21483] strncpy_from_user+0x25/0x230 [ 327.330286][T21483] ? kmem_cache_alloc_noprof+0x242/0x480 [ 327.330340][T21483] ? getname_flags+0x80/0x3b0 [ 327.330371][T21483] getname_flags+0xae/0x3b0 [ 327.330401][T21483] user_path_at+0x28/0x130 [ 327.330437][T21483] __se_sys_quotactl+0xb6/0x670 [ 327.330507][T21483] __x64_sys_quotactl+0x55/0x70 [ 327.330539][T21483] x64_sys_call+0x15d6/0x3000 [ 327.330566][T21483] do_syscall_64+0xd2/0x200 [ 327.330654][T21483] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 327.330681][T21483] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 327.330706][T21483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.330781][T21483] RIP: 0033:0x7f4272f7eec9 [ 327.330799][T21483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.330818][T21483] RSP: 002b:00007f42719e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 327.330836][T21483] RAX: ffffffffffffffda RBX: 00007f42731d5fa0 RCX: 00007f4272f7eec9 [ 327.330926][T21483] RDX: 000000000000ee00 RSI: 00002000000001c0 RDI: ffffffff80000200 [ 327.330942][T21483] RBP: 00007f42719e7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.330954][T21483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.330965][T21483] R13: 00007f42731d6038 R14: 00007f42731d5fa0 R15: 00007ffe6bcbc488 [ 327.330985][T21483] [ 327.983403][T21502] ipvlan13: entered promiscuous mode [ 327.989672][T21502] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 328.081086][T21510] netlink: 'syz.1.4693': attribute type 13 has an invalid length. [ 328.281072][T21510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.291062][T21510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.349069][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.358295][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.383432][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.403717][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.418573][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 328.418592][ T29] audit: type=1326 audit(1760238471.699:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.451861][ T29] audit: type=1326 audit(1760238471.699:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.475420][ T29] audit: type=1326 audit(1760238471.699:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.499023][ T29] audit: type=1326 audit(1760238471.699:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.522554][ T29] audit: type=1326 audit(1760238471.699:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.546072][ T29] audit: type=1326 audit(1760238471.699:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.569591][ T29] audit: type=1326 audit(1760238471.699:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.593192][ T29] audit: type=1326 audit(1760238471.699:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.616795][ T29] audit: type=1326 audit(1760238471.699:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.640401][ T29] audit: type=1326 audit(1760238471.699:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 328.740092][T21496] lo speed is unknown, defaulting to 1000 [ 328.772122][T21496] lo speed is unknown, defaulting to 1000 [ 328.778127][T21496] lo speed is unknown, defaulting to 1000 [ 328.869982][ T3408] hid_parser_main: 26 callbacks suppressed [ 328.870073][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.883535][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.890983][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.898435][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.905892][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.906162][T21544] __nla_validate_parse: 7 callbacks suppressed [ 328.906268][T21544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4709'. [ 328.913345][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.913375][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.943411][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.950881][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.951233][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4707'. [ 328.958404][ T3408] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 328.959286][ T3408] hid-generic 0003:0003:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 329.115751][T11053] hid-generic 0003:0003:0000.0034: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 329.190265][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4718'. [ 329.215314][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4717'. [ 329.231226][T21573] ipvlan10: entered promiscuous mode [ 329.237626][T21573] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 329.358594][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 329.584791][T21567] lo speed is unknown, defaulting to 1000 [ 329.740984][T21585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4722'. [ 329.888984][T21595] netlink: 'syz.1.4727': attribute type 4 has an invalid length. [ 329.979410][T21602] sctp: [Deprecated]: syz.2.4730 (pid 21602) Use of int in max_burst socket option. [ 329.979410][T21602] Use struct sctp_assoc_value instead [ 329.994721][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4729'. [ 330.053750][T21567] lo speed is unknown, defaulting to 1000 [ 330.066605][T21567] lo speed is unknown, defaulting to 1000 [ 330.219228][T21620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4737'. [ 330.324756][T21579] lo speed is unknown, defaulting to 1000 [ 330.335988][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 330.405766][T21631] sctp: [Deprecated]: syz.2.4741 (pid 21631) Use of int in max_burst socket option. [ 330.405766][T21631] Use struct sctp_assoc_value instead [ 330.428675][T21579] lo speed is unknown, defaulting to 1000 [ 330.436874][T21579] lo speed is unknown, defaulting to 1000 [ 330.575737][ T36] hid-generic 0003:0003:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 330.752868][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4748'. [ 330.884699][T21653] ipvlan13: entered promiscuous mode [ 330.896744][T21653] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 331.141772][T21666] ipvlan14: entered promiscuous mode [ 331.190369][T21666] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 331.237025][T21670] wg2: entered promiscuous mode [ 331.241986][T21670] wg2: entered allmulticast mode [ 331.426127][T21687] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 331.473096][T11057] hid-generic 0003:0003:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 331.548546][T21650] lo speed is unknown, defaulting to 1000 [ 331.615606][T21700] sctp: [Deprecated]: syz.3.4770 (pid 21700) Use of int in max_burst socket option. [ 331.615606][T21700] Use struct sctp_assoc_value instead [ 331.695991][ T3408] hid-generic 0003:0003:0000.0037: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 331.719232][T21650] lo speed is unknown, defaulting to 1000 [ 331.725683][T21650] lo speed is unknown, defaulting to 1000 [ 331.867571][T11057] hid-generic 0003:0003:0000.0038: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 331.902585][ T3408] hid-generic 0003:0003:0000.0039: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 331.913496][T21728] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 331.976524][T21659] lo speed is unknown, defaulting to 1000 [ 331.998370][T11057] hid-generic 0003:0003:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 332.028985][T21659] lo speed is unknown, defaulting to 1000 [ 332.040661][T21659] lo speed is unknown, defaulting to 1000 [ 332.175671][T21748] ipvlan11: entered promiscuous mode [ 332.211205][T21748] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 332.749680][T11057] hid-generic 0003:0003:0000.003B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 332.785836][T21781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.803399][T21781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.930594][T21742] lo speed is unknown, defaulting to 1000 [ 333.055376][T21742] lo speed is unknown, defaulting to 1000 [ 333.080718][T21742] lo speed is unknown, defaulting to 1000 [ 333.120582][T11058] hid-generic 0003:0003:0000.003C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 333.311039][T21753] lo speed is unknown, defaulting to 1000 [ 333.349607][T21817] ipvlan14: entered promiscuous mode [ 333.392347][T21817] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 333.436500][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 333.436516][ T29] audit: type=1400 audit(1760238476.719:6260): avc: denied { ioctl } for pid=21818 comm="syz.2.4816" path="socket:[55114]" dev="sockfs" ino=55114 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.531760][ T29] audit: type=1326 audit(1760238476.809:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.531776][T21753] lo speed is unknown, defaulting to 1000 [ 333.561061][ T29] audit: type=1326 audit(1760238476.809:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.584634][ T29] audit: type=1326 audit(1760238476.809:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.595408][T21753] lo speed is unknown, defaulting to 1000 [ 333.608328][ T29] audit: type=1326 audit(1760238476.809:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.637702][ T29] audit: type=1326 audit(1760238476.809:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.661356][ T29] audit: type=1326 audit(1760238476.809:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.685002][ T29] audit: type=1326 audit(1760238476.809:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.708536][ T29] audit: type=1326 audit(1760238476.809:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 333.731950][ T29] audit: type=1400 audit(1760238476.809:6269): avc: denied { write } for pid=21829 comm="syz.5.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 333.735017][T21830] netlink: 'syz.5.4819': attribute type 13 has an invalid length. [ 333.956984][T21830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.992125][T21830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.098685][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.108644][T21812] lo speed is unknown, defaulting to 1000 [ 334.124865][ T31] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.161053][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.170386][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.263913][T21858] serio: Serial port ptm0 [ 334.282287][T21859] __nla_validate_parse: 13 callbacks suppressed [ 334.282379][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4824'. [ 334.293281][T21820] lo speed is unknown, defaulting to 1000 [ 334.310466][T21812] lo speed is unknown, defaulting to 1000 [ 334.328077][T21859] ipvlan10: entered promiscuous mode [ 334.342961][T21859] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 334.351736][T21820] lo speed is unknown, defaulting to 1000 [ 334.358021][T21820] lo speed is unknown, defaulting to 1000 [ 334.368804][T21812] lo speed is unknown, defaulting to 1000 [ 334.637560][T21854] lo speed is unknown, defaulting to 1000 [ 334.771864][T21871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4832'. [ 334.799590][ T3415] hid_parser_main: 170 callbacks suppressed [ 334.799611][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.813040][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.820572][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.827967][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.835429][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.842936][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.850378][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.857786][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.865245][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.872698][ T3415] hid-generic 0003:0003:0000.003D: unknown main item tag 0x0 [ 334.883001][ T3415] hid-generic 0003:0003:0000.003D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 335.013518][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4837'. [ 335.025084][T21854] lo speed is unknown, defaulting to 1000 [ 335.049245][T21854] lo speed is unknown, defaulting to 1000 [ 335.212003][T21901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4841'. [ 335.221084][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4841'. [ 335.362682][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4843'. [ 335.392325][T21914] netlink: 'syz.3.4845': attribute type 4 has an invalid length. [ 335.475278][T21905] lo speed is unknown, defaulting to 1000 [ 335.510080][T21923] serio: Serial port ptm0 [ 335.526638][T21925] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4848'. [ 335.537004][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 335.555572][T21905] lo speed is unknown, defaulting to 1000 [ 335.561987][T21905] lo speed is unknown, defaulting to 1000 [ 335.601169][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.609819][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.772119][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 335.803965][T21932] ipvlan15: entered promiscuous mode [ 335.822559][T21932] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 336.007901][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4852'. [ 336.022436][T21935] ipvlan7: entered promiscuous mode [ 336.027912][T21935] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 336.106773][T21920] lo speed is unknown, defaulting to 1000 [ 336.317232][T21920] lo speed is unknown, defaulting to 1000 [ 336.324130][T21920] lo speed is unknown, defaulting to 1000 [ 336.415385][T21948] netlink: 'syz.3.4857': attribute type 4 has an invalid length. [ 336.764678][T21934] lo speed is unknown, defaulting to 1000 [ 336.931129][T11057] hid-generic 0003:0003:0000.003E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 336.942698][T21931] lo speed is unknown, defaulting to 1000 [ 336.942799][T21934] lo speed is unknown, defaulting to 1000 [ 336.968908][T21934] lo speed is unknown, defaulting to 1000 [ 337.036392][T21931] lo speed is unknown, defaulting to 1000 [ 337.050516][T21931] lo speed is unknown, defaulting to 1000 [ 337.503762][T22000] sctp: [Deprecated]: syz.4.4876 (pid 22000) Use of int in max_burst socket option. [ 337.503762][T22000] Use struct sctp_assoc_value instead [ 337.867748][T22024] ipvlan8: entered promiscuous mode [ 337.884395][T22024] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 337.945878][T21977] lo speed is unknown, defaulting to 1000 [ 338.001526][T21977] lo speed is unknown, defaulting to 1000 [ 338.013534][T21977] lo speed is unknown, defaulting to 1000 [ 338.142275][T22033] sctp: [Deprecated]: syz.1.4889 (pid 22033) Use of int in max_burst socket option. [ 338.142275][T22033] Use struct sctp_assoc_value instead [ 338.169575][T22035] sctp: [Deprecated]: syz.3.4890 (pid 22035) Use of int in max_burst socket option. [ 338.169575][T22035] Use struct sctp_assoc_value instead [ 338.253980][ T3415] hid-generic 0003:0003:0000.003F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 338.658844][T22022] lo speed is unknown, defaulting to 1000 [ 338.723854][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 338.723872][ T29] audit: type=1326 audit(1760238482.009:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.753623][ T29] audit: type=1326 audit(1760238482.009:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.758378][T22022] lo speed is unknown, defaulting to 1000 [ 338.799900][ T29] audit: type=1326 audit(1760238482.069:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.823656][ T29] audit: type=1326 audit(1760238482.069:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.847349][ T29] audit: type=1326 audit(1760238482.069:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.871112][ T29] audit: type=1326 audit(1760238482.069:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.894836][ T29] audit: type=1326 audit(1760238482.069:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.918521][ T29] audit: type=1326 audit(1760238482.069:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.942302][ T29] audit: type=1326 audit(1760238482.069:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 338.950757][T22022] lo speed is unknown, defaulting to 1000 [ 338.965962][ T29] audit: type=1326 audit(1760238482.069:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8cb3eec9 code=0x7ffc0000 [ 339.169240][T22074] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 339.271452][T22081] sctp: [Deprecated]: syz.4.4907 (pid 22081) Use of int in max_burst socket option. [ 339.271452][T22081] Use struct sctp_assoc_value instead [ 339.301153][T22084] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 339.320447][T22058] lo speed is unknown, defaulting to 1000 [ 339.450448][T22058] lo speed is unknown, defaulting to 1000 [ 339.456531][T22058] lo speed is unknown, defaulting to 1000 [ 339.501578][T22097] __nla_validate_parse: 6 callbacks suppressed [ 339.501597][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4912'. [ 339.518362][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'. [ 339.599251][T22097] ipvlan12: entered promiscuous mode [ 339.663003][ T3415] hid-generic 0003:0003:0000.0040: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 339.663823][T22055] syz.1.4898 (22055) used greatest stack depth: 6328 bytes left [ 339.673140][T22097] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 339.710554][T22103] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 339.971784][T22113] sctp: [Deprecated]: syz.2.4921 (pid 22113) Use of int in max_burst socket option. [ 339.971784][T22113] Use struct sctp_assoc_value instead [ 340.089939][T22132] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 340.135970][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4925'. [ 340.189881][T22140] SELinux: Context  is not valid (left unmapped). [ 340.273905][T22093] lo speed is unknown, defaulting to 1000 [ 340.325948][T22093] lo speed is unknown, defaulting to 1000 [ 340.338376][T22093] lo speed is unknown, defaulting to 1000 [ 340.397738][T22151] sctp: [Deprecated]: syz.3.4937 (pid 22151) Use of int in max_burst socket option. [ 340.397738][T22151] Use struct sctp_assoc_value instead [ 340.581390][T22164] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 340.910568][T22192] serio: Serial port ptm0 [ 340.917319][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4948'. [ 340.932009][T22188] ipvlan11: entered promiscuous mode [ 340.944975][T22188] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 341.038551][T22199] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 341.144972][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4954'. [ 341.158126][T22202] ipvlan15: entered promiscuous mode [ 341.167503][T22202] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 341.241149][T22176] lo speed is unknown, defaulting to 1000 [ 341.579109][T22176] lo speed is unknown, defaulting to 1000 [ 341.594178][T22176] lo speed is unknown, defaulting to 1000 [ 341.668493][T22186] lo speed is unknown, defaulting to 1000 [ 341.999339][T22186] lo speed is unknown, defaulting to 1000 [ 342.005965][T22186] lo speed is unknown, defaulting to 1000 [ 342.007691][T22201] lo speed is unknown, defaulting to 1000 [ 342.099221][T22201] lo speed is unknown, defaulting to 1000 [ 342.121342][T22201] lo speed is unknown, defaulting to 1000 [ 342.884950][T22283] netlink: 'syz.4.4981': attribute type 4 has an invalid length. [ 343.121183][T22314] netlink: 'syz.2.4992': attribute type 4 has an invalid length. [ 343.684573][T15165] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 343.695585][T15165] CPU: 1 UID: 0 PID: 15165 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.695687][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.695705][T15165] Call Trace: [ 343.695714][T15165] [ 343.695731][T15165] __dump_stack+0x1d/0x30 [ 343.695758][T15165] dump_stack_lvl+0xe8/0x140 [ 343.695784][T15165] dump_stack+0x15/0x1b [ 343.695815][T15165] dump_header+0x81/0x220 [ 343.695888][T15165] oom_kill_process+0x342/0x400 [ 343.695930][T15165] out_of_memory+0x979/0xb80 [ 343.695991][T15165] try_charge_memcg+0x610/0xa10 [ 343.696092][T15165] charge_memcg+0x51/0xc0 [ 343.696152][T15165] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 343.696186][T15165] __read_swap_cache_async+0x17b/0x2d0 [ 343.696289][T15165] swap_cluster_readahead+0x362/0x3c0 [ 343.696324][T15165] swapin_readahead+0xde/0x6f0 [ 343.696349][T15165] ? next_uptodate_folio+0x81c/0x890 [ 343.696395][T15165] ? percpu_counter_add_batch+0xb6/0x130 [ 343.696516][T15165] ? __rcu_read_unlock+0x4f/0x70 [ 343.696551][T15165] ? swap_cache_get_folio+0x277/0x280 [ 343.696599][T15165] do_swap_page+0x2ae/0x2370 [ 343.696658][T15165] ? fput+0x8f/0xc0 [ 343.696701][T15165] ? css_rstat_updated+0xb7/0x240 [ 343.696803][T15165] ? __pfx_default_wake_function+0x10/0x10 [ 343.696840][T15165] handle_mm_fault+0x9a5/0x2be0 [ 343.696947][T15165] ? vma_start_read+0x141/0x1f0 [ 343.696986][T15165] do_user_addr_fault+0x630/0x1080 [ 343.697013][T15165] exc_page_fault+0x62/0xa0 [ 343.697036][T15165] asm_exc_page_fault+0x26/0x30 [ 343.697126][T15165] RIP: 0033:0x7fa0b05c5db7 [ 343.697143][T15165] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 39 7c 24 [ 343.697163][T15165] RSP: 002b:00007ffdd564a9d0 EFLAGS: 00010206 [ 343.697253][T15165] RAX: 0000001b30224000 RBX: 00000000000003e9 RCX: 0000000000053bd8 [ 343.697267][T15165] RDX: 0000000009a92c42 RSI: 00007ffdd564aa60 RDI: 000000000000000f [ 343.697280][T15165] RBP: 00007ffdd564aa0c R08: 0000000024da67e5 R09: 7fffffffffffffff [ 343.697294][T15165] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 343.697307][T15165] R13: 00000000000927c0 R14: 0000000000053c09 R15: 00007ffdd564aa60 [ 343.697328][T15165] [ 343.697336][T15165] memory: usage 307200kB, limit 307200kB, failcnt 2149 [ 343.926686][T15165] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 343.934693][T15165] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 343.941993][T15165] Memory cgroup stats for /syz4: [ 343.945415][T15165] cache 0 [ 343.953355][T15165] rss 0 [ 343.956178][T15165] shmem 0 [ 343.959129][T15165] mapped_file 0 [ 343.962663][T15165] dirty 0 [ 343.965640][T15165] writeback 0 [ 343.968963][T15165] workingset_refault_anon 457 [ 343.973779][T15165] workingset_refault_file 5430 [ 343.978545][T15165] swap 192512 [ 343.981871][T15165] swapcached 0 [ 343.985315][T15165] pgpgin 236949 [ 343.988785][T15165] pgpgout 236949 [ 343.992352][T15165] pgfault 293173 [ 343.995925][T15165] pgmajfault 349 [ 343.999490][T15165] inactive_anon 0 [ 344.003161][T15165] active_anon 0 [ 344.003307][ T29] kauditd_printk_skb: 1207 callbacks suppressed [ 344.003326][ T29] audit: type=1400 audit(1760238487.279:8192): avc: denied { create } for pid=22354 comm="syz.5.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 344.006692][T15165] inactive_file 0 [ 344.013077][ T29] audit: type=1400 audit(1760238487.279:8193): avc: denied { bind } for pid=22354 comm="syz.5.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 344.032512][T15165] active_file 0 [ 344.032523][T15165] unevictable 0 [ 344.032531][T15165] hierarchical_memory_limit 314572800 [ 344.036225][ T29] audit: type=1400 audit(1760238487.279:8194): avc: denied { getopt } for pid=22354 comm="syz.5.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 344.055652][T15165] hierarchical_memsw_limit 9223372036854771712 [ 344.093714][T15165] total_cache 0 [ 344.097191][T15165] total_rss 0 [ 344.100534][T15165] total_shmem 0 [ 344.104009][T15165] total_mapped_file 0 [ 344.106299][ T29] audit: type=1326 audit(1760238487.389:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.108075][T15165] total_dirty 0 [ 344.108088][T15165] total_writeback 0 [ 344.108099][T15165] total_workingset_refault_anon 457 [ 344.108176][T15165] total_workingset_refault_file 5430 [ 344.131676][ T29] audit: type=1326 audit(1760238487.389:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.135020][T15165] total_swap 192512 [ 344.144305][ T29] audit: type=1326 audit(1760238487.419:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.149372][T15165] total_swapcached 0 [ 344.149383][T15165] total_pgpgin 236949 [ 344.149392][T15165] total_pgpgout 236949 [ 344.172968][ T29] audit: type=1326 audit(1760238487.419:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.176754][T15165] total_pgfault 293173 [ 344.176766][T15165] total_pgmajfault 349 [ 344.176775][T15165] total_inactive_anon 0 [ 344.176782][T15165] total_active_anon 0 [ 344.176790][T15165] total_inactive_file 0 [ 344.176797][T15165] total_active_file 0 [ 344.200300][ T29] audit: type=1326 audit(1760238487.419:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.204165][T15165] total_unevictable 0 [ 344.208234][ T29] audit: type=1326 audit(1760238487.419:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.212303][T15165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 344.235794][ T29] audit: type=1326 audit(1760238487.419:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.5.5009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e8ceec9 code=0x7ffc0000 [ 344.239871][T15165] ,cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4987,pid=22302,uid=0 [ 344.351596][T15165] Memory cgroup out of memory: Killed process 22302 (syz.4.4987) total-vm:93956kB, anon-rss:1136kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 344.438305][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'. [ 344.958889][T22406] lo speed is unknown, defaulting to 1000 [ 344.995699][T22406] lo speed is unknown, defaulting to 1000 [ 345.001890][T22406] lo speed is unknown, defaulting to 1000 [ 345.333365][T22411] serio: Serial port ptm0 [ 345.524945][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5025'. [ 345.660760][T22391] lo speed is unknown, defaulting to 1000 [ 345.709141][ T3415] hid_parser_main: 62 callbacks suppressed [ 345.709171][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.722546][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.729981][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.737417][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.744914][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.752401][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.759805][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.767235][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.774663][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.782202][ T3415] hid-generic 0003:0003:0000.0041: unknown main item tag 0x0 [ 345.790444][ T3415] hid-generic 0003:0003:0000.0041: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 346.100922][T22442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.108354][T22442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.131089][T22442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.138507][T22442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.274820][T22391] lo speed is unknown, defaulting to 1000 [ 346.324935][T22391] lo speed is unknown, defaulting to 1000 [ 346.408220][T11058] hid-generic 0003:0003:0000.0042: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 346.493452][T22465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5044'. [ 346.722884][T22473] serio: Serial port ptm0 [ 346.951831][T22480] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 347.049419][T11053] hid-generic 0003:0003:0000.0043: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 347.183985][T22498] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5056'. [ 347.242985][T22500] hub 2-0:1.0: USB hub found [ 347.247916][T22500] hub 2-0:1.0: 8 ports detected [ 347.533981][T22512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5062'. [ 347.630978][T22506] lo speed is unknown, defaulting to 1000 [ 347.667844][T22524] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 347.683874][T22506] lo speed is unknown, defaulting to 1000 [ 347.690318][T22506] lo speed is unknown, defaulting to 1000 [ 347.771184][T22529] sctp: [Deprecated]: syz.2.5070 (pid 22529) Use of int in max_burst socket option. [ 347.771184][T22529] Use struct sctp_assoc_value instead [ 347.830369][T22532] hub 2-0:1.0: USB hub found [ 347.843681][T22535] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 347.861932][T22532] hub 2-0:1.0: 8 ports detected [ 347.884077][T22537] serio: Serial port ptm0 [ 348.027731][T22552] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 348.042878][T22534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5072'. [ 348.388184][T22563] lo speed is unknown, defaulting to 1000 [ 348.429878][T22563] lo speed is unknown, defaulting to 1000 [ 348.437010][T22563] lo speed is unknown, defaulting to 1000 [ 348.699856][T22556] syz.3.5082 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 348.710920][T22556] CPU: 0 UID: 0 PID: 22556 Comm: syz.3.5082 Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.710971][T22556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.710988][T22556] Call Trace: [ 348.710996][T22556] [ 348.711006][T22556] __dump_stack+0x1d/0x30 [ 348.711030][T22556] dump_stack_lvl+0xe8/0x140 [ 348.711094][T22556] dump_stack+0x15/0x1b [ 348.711109][T22556] dump_header+0x81/0x220 [ 348.711142][T22556] oom_kill_process+0x342/0x400 [ 348.711170][T22556] out_of_memory+0x979/0xb80 [ 348.711217][T22556] try_charge_memcg+0x610/0xa10 [ 348.711265][T22556] charge_memcg+0x51/0xc0 [ 348.711283][T22556] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 348.711307][T22556] __read_swap_cache_async+0x17b/0x2d0 [ 348.711381][T22556] swap_cluster_readahead+0x262/0x3c0 [ 348.711413][T22556] swapin_readahead+0xde/0x6f0 [ 348.711500][T22556] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 348.711531][T22556] ? __rcu_read_unlock+0x34/0x70 [ 348.711561][T22556] ? __rcu_read_unlock+0x4f/0x70 [ 348.711591][T22556] ? swap_cache_get_folio+0x277/0x280 [ 348.711691][T22556] do_swap_page+0x2ae/0x2370 [ 348.711720][T22556] ? css_rstat_updated+0xb7/0x240 [ 348.711762][T22556] ? __pfx_default_wake_function+0x10/0x10 [ 348.711840][T22556] handle_mm_fault+0x9a5/0x2be0 [ 348.711933][T22556] ? vma_start_read+0x141/0x1f0 [ 348.711965][T22556] do_user_addr_fault+0x630/0x1080 [ 348.712012][T22556] exc_page_fault+0x62/0xa0 [ 348.712039][T22556] asm_exc_page_fault+0x26/0x30 [ 348.712061][T22556] RIP: 0033:0x7f4272e557cc [ 348.712120][T22556] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 348.712146][T22556] RSP: 002b:00007ffe6bcbc5f0 EFLAGS: 00010287 [ 348.712167][T22556] RAX: 0000000000000000 RBX: 00007f42731d6090 RCX: 0000000000000000 [ 348.712183][T22556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555588c2d808 [ 348.712240][T22556] RBP: 00007f42731d7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 348.712254][T22556] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000552c7 [ 348.712267][T22556] R13: 00007f42731d6090 R14: ffffffffffffffff R15: 00007ffe6bcbc700 [ 348.712286][T22556] [ 348.712292][T22556] memory: usage 307200kB, limit 307200kB, failcnt 2071 [ 348.814235][T22578] hub 2-0:1.0: USB hub found [ 348.817993][T22556] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 348.818014][T22556] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 348.822855][T22578] hub 2-0:1.0: 8 ports detected [ 348.827640][T22556] Memory cgroup stats for /syz3: [ 348.827983][T22556] cache 0 [ 348.970765][T22556] rss 0 [ 348.973562][T22556] shmem 0 [ 348.976504][T22556] mapped_file 0 [ 348.979976][T22556] dirty 0 [ 348.982940][T22556] writeback 4096 [ 348.986556][T22556] workingset_refault_anon 337 [ 348.991251][T22556] workingset_refault_file 5431 [ 348.996067][T22556] swap 196608 [ 348.999349][T22556] swapcached 8192 [ 349.002994][T22556] pgpgin 268423 [ 349.006488][T22556] pgpgout 268421 [ 349.010040][T22556] pgfault 295907 [ 349.013631][T22556] pgmajfault 241 [ 349.017183][T22556] inactive_anon 8192 [ 349.021125][T22556] active_anon 0 [ 349.024613][T22556] inactive_file 0 [ 349.028345][T22556] active_file 0 [ 349.031983][T22556] unevictable 0 [ 349.035548][T22556] hierarchical_memory_limit 314572800 [ 349.041013][T22556] hierarchical_memsw_limit 9223372036854771712 [ 349.047284][T22556] total_cache 0 [ 349.050827][T22556] total_rss 0 [ 349.054153][T22556] total_shmem 0 [ 349.057704][T22556] total_mapped_file 0 [ 349.061693][T22556] total_dirty 0 [ 349.065222][T22556] total_writeback 4096 [ 349.069296][T22556] total_workingset_refault_anon 337 [ 349.074523][T22556] total_workingset_refault_file 5431 [ 349.079819][T22556] total_swap 196608 [ 349.083744][T22556] total_swapcached 8192 [ 349.088033][T22556] total_pgpgin 268423 [ 349.092029][T22556] total_pgpgout 268421 [ 349.096108][T22556] total_pgfault 295907 [ 349.100186][T22556] total_pgmajfault 241 [ 349.104251][T22556] total_inactive_anon 8192 [ 349.108663][T22556] total_active_anon 0 [ 349.112660][T22556] total_inactive_file 0 [ 349.116803][T22556] total_active_file 0 [ 349.120786][T22556] total_unevictable 0 [ 349.124757][T22556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5082,pid=22556,uid=0 [ 349.139503][T22556] Memory cgroup out of memory: Killed process 22556 (syz.3.5082) total-vm:93956kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 349.182012][T22585] sctp: [Deprecated]: syz.5.5092 (pid 22585) Use of int in max_burst socket option. [ 349.182012][T22585] Use struct sctp_assoc_value instead [ 349.260723][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 349.344949][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 349.344967][ T29] audit: type=1326 audit(1760238492.629:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.388916][ T29] audit: type=1326 audit(1760238492.629:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.412612][ T29] audit: type=1326 audit(1760238492.629:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.436226][ T29] audit: type=1326 audit(1760238492.629:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.459831][ T29] audit: type=1326 audit(1760238492.629:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.483466][ T29] audit: type=1326 audit(1760238492.629:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.507045][ T29] audit: type=1326 audit(1760238492.629:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.530771][ T29] audit: type=1326 audit(1760238492.629:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.554514][ T29] audit: type=1326 audit(1760238492.629:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.578044][ T29] audit: type=1326 audit(1760238492.629:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22597 comm="syz.4.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b06eeec9 code=0x7ffc0000 [ 349.648625][T22605] serio: Serial port ptm0 [ 349.687522][T22611] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 349.742280][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'. [ 349.756265][T22618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5103'. [ 349.789288][T22623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5104'. [ 349.863091][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5106'. [ 350.206774][T22635] lo speed is unknown, defaulting to 1000 [ 350.265509][T22635] lo speed is unknown, defaulting to 1000 [ 350.272204][T22635] lo speed is unknown, defaulting to 1000 [ 350.831947][T22648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5111'. [ 350.904125][T22658] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 350.908554][T22655] sctp: [Deprecated]: syz.4.5115 (pid 22655) Use of int in max_burst socket option. [ 350.908554][T22655] Use struct sctp_assoc_value instead [ 351.026647][T22666] hub 2-0:1.0: USB hub found [ 351.031599][T22666] hub 2-0:1.0: 8 ports detected [ 351.106418][T22683] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 351.158891][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5125'. [ 351.240593][T22697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5133'. [ 351.630242][T22668] ================================================================== [ 351.638371][T22668] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 351.648239][T22668] [ 351.650575][T22668] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 351.658658][T22668] tick_do_update_jiffies64+0x113/0x1c0 [ 351.664254][T22668] tick_nohz_handler+0x7f/0x2d0 [ 351.669121][T22668] __hrtimer_run_queues+0x20f/0x5a0 [ 351.674345][T22668] hrtimer_interrupt+0x21a/0x460 [ 351.679289][T22668] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 351.685209][T22668] sysvec_apic_timer_interrupt+0x6f/0x80 [ 351.690856][T22668] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.696860][T22668] pv_native_safe_halt+0x13/0x20 [ 351.701798][T22668] default_idle+0x13/0x20 [ 351.706155][T22668] default_idle_call+0x3c/0x60 [ 351.710984][T22668] do_idle+0xcb/0x240 [ 351.715012][T22668] cpu_startup_entry+0x25/0x30 [ 351.719789][T22668] start_secondary+0x95/0xa0 [ 351.724395][T22668] common_startup_64+0x13e/0x147 [ 351.729371][T22668] [ 351.731715][T22668] read to 0xffffffff868099c0 of 8 bytes by task 22668 on cpu 0: [ 351.739342][T22668] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 351.745605][T22668] count_shadow_nodes+0x6a/0x230 [ 351.750546][T22668] do_shrink_slab+0x63/0x680 [ 351.755144][T22668] shrink_slab+0x448/0x760 [ 351.759572][T22668] shrink_node+0x6c3/0x2120 [ 351.764090][T22668] do_try_to_free_pages+0x3f6/0xcd0 [ 351.769301][T22668] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 351.775197][T22668] try_charge_memcg+0x383/0xa10 [ 351.780071][T22668] obj_cgroup_charge_pages+0xa6/0x150 [ 351.785464][T22668] __memcg_kmem_charge_page+0x9f/0x170 [ 351.790936][T22668] __alloc_frozen_pages_noprof+0x188/0x360 [ 351.796755][T22668] alloc_pages_mpol+0xb3/0x260 [ 351.801551][T22668] alloc_pages_noprof+0x90/0x130 [ 351.806528][T22668] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 351.812369][T22668] __kvmalloc_node_noprof+0x483/0x670 [ 351.817774][T22668] ip_set_alloc+0x24/0x30 [ 351.822138][T22668] hash_netiface_create+0x282/0x740 [ 351.827387][T22668] ip_set_create+0x3cc/0x970 [ 351.832007][T22668] nfnetlink_rcv_msg+0x4c6/0x590 [ 351.836983][T22668] netlink_rcv_skb+0x123/0x220 [ 351.841762][T22668] nfnetlink_rcv+0x167/0x16c0 [ 351.846448][T22668] netlink_unicast+0x5c0/0x690 [ 351.851232][T22668] netlink_sendmsg+0x58b/0x6b0 [ 351.856013][T22668] __sock_sendmsg+0x145/0x180 [ 351.860693][T22668] ____sys_sendmsg+0x31e/0x4e0 [ 351.865466][T22668] ___sys_sendmsg+0x17b/0x1d0 [ 351.870162][T22668] __x64_sys_sendmsg+0xd4/0x160 [ 351.875034][T22668] x64_sys_call+0x191e/0x3000 [ 351.879718][T22668] do_syscall_64+0xd2/0x200 [ 351.884237][T22668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.890146][T22668] [ 351.892470][T22668] value changed: 0x00000001000013f9 -> 0x00000001000013fa [ 351.899576][T22668] [ 351.901922][T22668] Reported by Kernel Concurrency Sanitizer on: [ 351.908078][T22668] CPU: 0 UID: 0 PID: 22668 Comm: syz.3.5120 Not tainted syzkaller #0 PREEMPT(voluntary) [ 351.917894][T22668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.927955][T22668] ================================================================== [ 351.958857][T14743] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 351.969919][T14743] CPU: 0 UID: 0 PID: 14743 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 351.969974][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.969990][T14743] Call Trace: [ 351.969997][T14743] [ 351.970006][T14743] __dump_stack+0x1d/0x30 [ 351.970047][T14743] dump_stack_lvl+0xe8/0x140 [ 351.970137][T14743] dump_stack+0x15/0x1b [ 351.970181][T14743] dump_header+0x81/0x220 [ 351.970229][T14743] oom_kill_process+0x342/0x400 [ 351.970324][T14743] out_of_memory+0x979/0xb80 [ 351.970375][T14743] try_charge_memcg+0x610/0xa10 [ 351.970472][T14743] charge_memcg+0x51/0xc0 [ 351.970493][T14743] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 351.970564][T14743] __read_swap_cache_async+0x17b/0x2d0 [ 351.970674][T14743] swap_cluster_readahead+0x262/0x3c0 [ 351.970708][T14743] swapin_readahead+0xde/0x6f0 [ 351.970733][T14743] ? __queue_map_get+0x263/0x370 [ 351.970822][T14743] ? __rcu_read_unlock+0x4f/0x70 [ 351.970854][T14743] ? __rcu_read_unlock+0x4f/0x70 [ 351.970885][T14743] ? swap_cache_get_folio+0x277/0x280 [ 351.970940][T14743] do_swap_page+0x2ae/0x2370 [ 351.971016][T14743] ? _raw_spin_unlock+0x26/0x50 [ 351.971052][T14743] ? finish_task_switch+0xad/0x2b0 [ 351.971089][T14743] ? __pfx_default_wake_function+0x10/0x10 [ 351.971139][T14743] handle_mm_fault+0x9a5/0x2be0 [ 351.971227][T14743] ? vma_start_read+0x141/0x1f0 [ 351.971286][T14743] do_user_addr_fault+0x630/0x1080 [ 351.971320][T14743] ? fpregs_restore_userregs+0xe2/0x1d0 [ 351.971355][T14743] ? switch_fpu_return+0xe/0x20 [ 351.971522][T14743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 351.971555][T14743] exc_page_fault+0x62/0xa0 [ 351.971575][T14743] asm_exc_page_fault+0x26/0x30 [ 351.971597][T14743] RIP: 0033:0x7f4272fb1745 [ 351.971617][T14743] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 351.971684][T14743] RSP: 002b:00007ffe6bcbc7c8 EFLAGS: 00010246 [ 351.971704][T14743] RAX: 0000000000000000 RBX: 00000000000004bf RCX: 00007f4272fb1743 [ 351.971721][T14743] RDX: 00007ffe6bcbc7e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.971800][T14743] RBP: 00007ffe6bcbc84c R08: 0000000036f20028 R09: 0000000000000000 [ 351.971813][T14743] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 351.971826][T14743] R13: 00000000000927c0 R14: 0000000000055eb1 R15: 00007ffe6bcbc8a0 [ 351.971851][T14743] [ 352.209434][T14743] memory: usage 307200kB, limit 307200kB, failcnt 2416 [ 352.216325][T14743] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 352.224259][T14743] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 352.231593][T14743] Memory cgroup stats for /syz3: [ 352.231974][T14743] cache 0 [ 352.239959][T14743] rss 0 [ 352.242786][T14743] shmem 0 [ 352.245784][T14743] mapped_file 0 [ 352.249229][T14743] dirty 0 [ 352.252319][T14743] writeback 0 [ 352.255610][T14743] workingset_refault_anon 391 [ 352.260403][T14743] workingset_refault_file 5927 [ 352.265200][T14743] swap 204800 [ 352.268508][T14743] swapcached 0 [ 352.271936][T14743] pgpgin 269161 [ 352.275399][T14743] pgpgout 269161 [ 352.278956][T14743] pgfault 296423 [ 352.282526][T14743] pgmajfault 275 [ 352.286096][T14743] inactive_anon 0 [ 352.289777][T14743] active_anon 0 [ 352.293333][T14743] inactive_file 0 [ 352.296952][T14743] active_file 0 [ 352.300439][T14743] unevictable 0 [ 352.303885][T14743] hierarchical_memory_limit 314572800 [ 352.309249][T14743] hierarchical_memsw_limit 9223372036854771712 [ 352.315464][T14743] total_cache 0 [ 352.318933][T14743] total_rss 0 [ 352.322245][T14743] total_shmem 0 [ 352.325708][T14743] total_mapped_file 0 [ 352.329684][T14743] total_dirty 0 [ 352.333227][T14743] total_writeback 0 [ 352.337068][T14743] total_workingset_refault_anon 391 [ 352.342276][T14743] total_workingset_refault_file 5927 [ 352.347549][T14743] total_swap 204800 [ 352.351367][T14743] total_swapcached 0 [ 352.355249][T14743] total_pgpgin 269161 [ 352.359239][T14743] total_pgpgout 269161 [ 352.363368][T14743] total_pgfault 296423 [ 352.367448][T14743] total_pgmajfault 275 [ 352.371548][T14743] total_inactive_anon 0 [ 352.375691][T14743] total_active_anon 0 [ 352.379724][T14743] total_inactive_file 0 [ 352.383895][T14743] total_active_file 0 [ 352.387871][T14743] total_unevictable 0 [ 352.391862][T14743] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5120,pid=22663,uid=0 [ 352.406562][T14743] Memory cgroup out of memory: Killed process 22663 (syz.3.5120) total-vm:93956kB, anon-rss:1260kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000