last executing test programs: 4.980855421s ago: executing program 3 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004040) 4.099528219s ago: executing program 2 (id=139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746588000000000000000000000000000000000000000000000000000002"], 0x48) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000200001002dbd7000fbdbdf2502001000000000040f0000000500130001000000080002007f0000010c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9a55aeda3b2e0276d03b"], 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0) 4.021663986s ago: executing program 1 (id=140): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0xfcfdffff, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10000, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @empty, 0x3, 0x8, 0x3, 0x400, 0x44, 0x80100000}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200), 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x34, 0x0, @val=@netkit}, 0x1c) 3.955514992s ago: executing program 2 (id=142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = creat(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0x8000) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', 0x0}) flock(0xffffffffffffffff, 0x2) 3.701551984s ago: executing program 2 (id=145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000040)={0x3f, {{0x2, 0x4e24, @multicast2}}, {{0x3f, 0x4e24, @multicast1}}}, 0x108) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @private=0xa010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) r3 = syz_open_pts(r0, 0xc0000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x12) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='team_slave_0\x00', 0x8000000000000000, 0x0, 0x8000}) 3.528558899s ago: executing program 1 (id=146): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x20000000005, 0x4a, 0x0, "000000000000000000000000000000000000ea00000000000000000000000000000000000000000000000000000700"}, 0xd8) close(r1) mq_timedsend(r0, 0x0, 0xfe67, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x858, 0x4041, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x6, 0x2}, 0x3e96, 0x0, 0xa66, 0x6, 0x2f5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x8, 0x0, &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000200)=0xc) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, r7, &(0x7f0000000040)={0x0, 0xa, 0x8000000000003, 0x6, 0x8, 0x400, 0x28af, 0x0, 0x80000000}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000980)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}], [{@obj_role={'obj_role', 0x3d, 'acl'}}, {@subj_user={'subj_user', 0x3d, 'nodioread_nolock'}}, {@fowner_gt={'fowner>', r7}}, {@euid_lt={'euid<', r7}}, {@smackfshat={'smackfshat', 0x3d, '})\\&}?T$'}}, {@uid_eq={'uid', 0x3d, r7}}, {@uid_gt={'uid>', r7}}, {@fsname={'fsname', 0x3d, '*#'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\-&'}}]}, 0x0, 0x482, &(0x7f00000004c0)="$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") ioprio_set$pid(0x2, r6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 3.429766588s ago: executing program 1 (id=148): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_freeze_timeout', 0x82802, 0x180) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x356) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4008850) 3.301589659s ago: executing program 1 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004040) 3.276430961s ago: executing program 0 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0xffff, 0x92) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r5, &(0x7f0000000400)="1400100052004f00000b6cc81b0000008000060000a86c77070c7431c53a28b16f602a9e174660e39111a390dc40fe4b05a36d00f3659f6b9d21cd7bab90323fe0ca3bb5a1b370ef60ed14cbbaad6724d15c61b4f7f16e45927ca8396dd792e067922bbee39e81137a636348c453909b7d04224c1a3149156f329467f160", 0x7e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffe}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040d0}, 0x8810) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fstat(r1, &(0x7f0000000300)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) unshare(0x41854a52f870ee31) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) 3.112635366s ago: executing program 2 (id=151): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000d07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0xabfd7000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) mmap$perf(&(0x7f000053b000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0xf7b4) 1.723136878s ago: executing program 3 (id=154): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x6, @remote, 0x3}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x1ff, @rand_addr=' \x01\x00', 0xffff}, @in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x201}, @in6={0xa, 0x4e21, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000040)=0xfffff94e, 0x4) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.559795033s ago: executing program 3 (id=155): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x7fffffff, 0x8, 0x8001}, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket(0x1e, 0x4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400003, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) clock_adjtime(0x0, &(0x7f0000000240)={0x8003, 0xf423f, 0x1, 0x200000000009, 0xffffffffffffff92, 0x6, 0x9fe, 0x2800000000000, 0x0, 0x6, 0x9, 0x2902, 0x20, 0x80100000001, 0x2, 0x0, 0x8000000000000000, 0x25c698a5, 0x0, 0x0, 0xe57e, 0x5, 0x2, 0x0, 0x7, 0x4d4f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') 1.303678955s ago: executing program 0 (id=156): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 1.063221516s ago: executing program 0 (id=158): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f0000000380)="ba748b991a", 0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x2, 0x0, 0x44000080}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='?\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) getpeername(r2, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.01900125s ago: executing program 4 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = creat(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r10, &(0x7f0000003e00)=[{{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0x8000) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', 0x0}) flock(0xffffffffffffffff, 0x2) 937.517117ms ago: executing program 0 (id=160): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f0000d23000)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) r2 = dup(r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x3, [@enum64={0xa, 0x5, 0x0, 0x13, 0x1, 0x0, [{0x5}, {0xc, 0xfffffffb, 0x101}, {0x2, 0x1, 0x2}, {0x5, 0x5, 0x359}, {0x4, 0x5, 0x101}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x4}, @const={0xf}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x4653}]}, @struct={0xe, 0x2, 0x0, 0x4, 0x1, 0x3, [{0x2, 0x1, 0x7}, {0x3, 0x3, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/160, 0xe3, 0xa0, 0x0, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1c00000, 0x74, 0x7, 0x1001, r2, 0x7, '\x00', r3, r4, 0x1, 0x4, 0x3, 0x1}, 0x50) 901.761781ms ago: executing program 0 (id=161): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semget$private(0x0, 0x4000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x8000000000000000) wait4(r0, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0xf2b, 0x4, 0x3, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x100) stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file1\x00', r2, 0xffffffffffffffff) 724.514126ms ago: executing program 3 (id=162): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x18, &(0x7f0000000280)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x42, &(0x7f00000006c0)="0001000000002305", &(0x7f0000000700)=""/8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000003000)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x40002000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x6a0, 0xffffffff, 0x498, 0x338, 0x338, 0xffffffff, 0xffffffff, 0x5d0, 0x5d0, 0x5d0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x2d8, 0x338, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2a, 0x0, [{0x8, 0xf, 0xd, 0x1}, {0xf005, 0x7, 0x6, 0xf}, {0x6, 0x5, 0xc8, 0x40}, {0x1, 0x80, 0x75, 0x800}, {0x3, 0x5, 0x7, 0xd16}, {0x4, 0x8, 0x6, 0x9}, {0x6, 0x3, 0x6, 0x36}, {0x5, 0x9, 0x6, 0x3aa}, {0x7ff, 0x7, 0x8, 0x4}, {0x6, 0x0, 0x9c, 0x8}, {0x5, 0x3, 0xcf, 0x2}, {0x3, 0x9, 0x4, 0x3}, {0x4, 0x8, 0x5}, {0x8, 0xb, 0x6, 0x5}, {0x6, 0x6f, 0x8, 0x3}, {0x6, 0x6, 0x9, 0x7fffffff}, {0xfaa1, 0x5f, 0x7, 0x100}, {0x3, 0x40, 0xf7, 0xfffffffc}, {0x81, 0x6, 0x0, 0x1ff}, {0x7, 0x0, 0x4, 0x1}, {0x9, 0x1, 0x80}, {0xf, 0x0, 0xb}, {0x9, 0x8, 0x1, 0x10001}, {0x6, 0x9, 0x6, 0x80000000}, {0x101, 0x9, 0x4, 0x7}, {0x8, 0x1, 0xea}, {0x8, 0x0, 0x0, 0x800}, {0x6, 0x8, 0xf1, 0x1}, {0x5572, 0xd, 0xe, 0x6}, {0x8, 0xfd, 0xff, 0x4}, {0xad7b, 0x9, 0x5f, 0xffffffd7}, {0xa, 0x9, 0x1, 0x80}, {0x5, 0xd4, 0x3, 0xc}, {0x3, 0x4, 0x4, 0x9}, {0x7, 0x3, 0x9}, {0x7f, 0xcb, 0x7f, 0x3}, {0x6, 0x4, 0x1, 0x7}, {0x2d, 0x5d, 0x1, 0x1}, {0x6, 0x30, 0x0, 0xc}, {0x7a48, 0x7, 0x1, 0x66}, {0x3, 0x2, 0x6, 0x1}, {0x3ff, 0x8, 0x8, 0x572}, {0xb07, 0xfb, 0x9, 0x4}, {0x3, 0x3, 0x8, 0x6}, {0x0, 0x10, 0xfc}, {0x6, 0x6, 0xb6, 0x3}, {0xeb, 0x11, 0x5, 0xc}, {0x8, 0x7, 0x1, 0x10}, {0x7, 0x4, 0x9, 0x8}, {0x3, 0x3, 0x0, 0x7}, {0x5, 0xc, 0x4b, 0x7900}, {0x1, 0x80, 0x7, 0x8}, {0x3, 0x1, 0x97, 0x200}, {0x5, 0x40, 0x2, 0x1}, {0x1, 0x3b, 0xb, 0x9}, {0xe8, 0x3, 0x9, 0x1538}, {0x8000, 0x3, 0x56, 0x8000}, {0xff, 0x10, 0xa, 0x3}, {0xc38, 0xa3, 0xc}, {0x4, 0xa, 0x0, 0x6}, {0x9, 0x80, 0x6, 0xf7fd}, {0x4, 0x3, 0x0, 0x2}, {0xc, 0x9, 0xfd, 0x1}, {0x8, 0x30, 0x6, 0x5}], {0x80}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], 0x4e24, 0x4e21, 0x4e23, 0x4e22, 0x8001, 0x0, 0x8, 0x7}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0x2, 0x1, 0x0, [0x1, 0x6f, 0x2, 0x215a, 0xff, 0x2, 0x1, 0x6, 0x400, 0x24a1, 0x200, 0x8fde, 0x1ff, 0x9, 0x4, 0xf], 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 'pimreg0\x00', 'gretap0\x00', {}, {0xff}, 0x67, 0xd, 0x4, 0xa}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "ecbc"}}, @common=@inet=@length={{0x28}, {0x3, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe0, 0x11, "8c20c2e2b618051fb8afb18297dc945796dd28f7d75910cb8a8fa647f320"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) 707.918948ms ago: executing program 4 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=@newlink={0x48, 0x10, 0xffffff23, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) 620.614175ms ago: executing program 2 (id=164): unshare(0x22020600) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="59aa6fb8ec7b2ea9c0b38df30155cd1a272db2a2b728d636ad0865dce77a4bf99ea402eda935ab2b0d1e281917fe526ee933318cd3236bc64645fef40530371afe8e05601912921392884fdc67352d1a390794f31d03bf3bfe0eff7c8c11a54ae32bb762d7c66bc0d506959f", 0x6c}, {&(0x7f0000000040)="9423f4d0fc3a88c115785d78ff57d839e325379851e978", 0x17}, {&(0x7f0000002380)="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", 0x536}], 0x3, &(0x7f0000007240)=ANY=[@ANYBLOB="18000090e10006000000"], 0x18}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100)) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e00f6f775e453b1800000121f00", 0x2e}], 0x1}, 0x40000) mount$bpf(0x0, 0x0, 0x0, 0x800001, 0x0) getdents64(r2, &(0x7f00000000c0)=""/64, 0xffef) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x3ff, 0x7) 562.554961ms ago: executing program 4 (id=165): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x6, @remote, 0x3}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x1ff, @rand_addr=' \x01\x00', 0xffff}, @in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x201}, @in6={0xa, 0x4e21, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000040)=0xfffff94e, 0x4) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 404.152874ms ago: executing program 2 (id=166): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0xfffffffffffffffe, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c00)='GPL\x00', 0xfffffffe, 0x33}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) sync() sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x20010, &(0x7f0000000100), 0x1, 0x5a8, &(0x7f0000000e40)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpgrp(0x0) gettid() sendmsg$AUDIT_SET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x1, r6, 0xfffff346, 0x427cbe3d, 0x10, 0x5, 0x0, 0x4, 0x5}, ["", "", "", "", "", ""]}, 0x3c}}, 0x20040090) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0d000010", @ANYRES16=r7, @ANYBLOB="050625bd700001dcdf251100000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) socket$nl_route(0x10, 0x3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000740)) 403.803954ms ago: executing program 4 (id=167): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r0 = syz_io_uring_setup(0x4c79, &(0x7f0000000000)={0x0, 0x1f4b, 0x40, 0x3, 0x3e}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 353.657599ms ago: executing program 3 (id=168): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={0x0, 0xe, 0x1, 0x2, 0x94, 0x7f}, &(0x7f0000000440)=0x14) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x5, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0xffffffffffffff65, 0x80, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x4}, 0x0, 0x8000010, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x142) r3 = syz_open_dev$rtc(&(0x7f00000000c0), 0x5, 0x14000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_emit_ethernet(0xfe, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc8, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0x11, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x75, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e"}, @ra, @generic, @padn]}]}}}}}}}, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r5, 0x3, 0x4, 0xc2, 0x3}) 353.448729ms ago: executing program 4 (id=169): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) fstatfs(r1, &(0x7f0000000240)=""/247) 339.22994ms ago: executing program 3 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004040) 330.473231ms ago: executing program 4 (id=171): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000d07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) mmap$perf(&(0x7f000053b000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0xf7b4) 82.596633ms ago: executing program 1 (id=172): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) recvmmsg$unix(r0, &(0x7f0000005b00)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/62, 0x3e}], 0x2, &(0x7f0000001140)}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001200)=""/15, 0xf}], 0x1, &(0x7f0000001280)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/222, 0xde}, {&(0x7f00000014c0)=""/28, 0x1c}], 0x2, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001640)=""/82, 0x52}, {&(0x7f00000016c0)=""/99, 0x63}, {&(0x7f0000001740)=""/9, 0x9}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/223, 0xdf}, {&(0x7f0000002880)=""/219, 0xdb}, {&(0x7f0000002980)=""/192, 0xc0}, {&(0x7f0000002a40)=""/245, 0xf5}], 0x8, &(0x7f0000002bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000005280)=[{&(0x7f0000002d80)=""/217, 0xd9}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/248, 0xf8}, {&(0x7f0000003f80)=""/37, 0x25}, {&(0x7f0000003fc0)=""/180, 0xb4}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/166, 0xa6}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x9, &(0x7f0000005340)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000005400)=@abs, 0x6e, &(0x7f0000005640)=[{&(0x7f0000005480)=""/168, 0xa8}, {&(0x7f0000005540)=""/232, 0xe8}], 0x2, &(0x7f0000005680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000005700), 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005780)=""/25, 0x19}, {&(0x7f00000057c0)=""/91, 0x5b}, {&(0x7f0000005840)=""/241, 0xf1}, {&(0x7f0000005940)=""/160, 0xa0}], 0x4, &(0x7f0000005a40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x7, 0x80, &(0x7f0000005cc0)={0x77359400}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 5.63341ms ago: executing program 0 (id=173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = creat(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r10, &(0x7f0000003e00)=[{{&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0x8000) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', 0x0}) flock(0xffffffffffffffff, 0x2) 0s ago: executing program 1 (id=174): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x16}) close_range(r1, r3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @remote, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400103a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 36.666405][ T28] audit: type=1400 audit(1771543562.313:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.689550][ T28] audit: type=1400 audit(1771543562.343:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.692003][ T3303] cgroup: Unknown subsys name 'net' [ 36.717748][ T28] audit: type=1400 audit(1771543562.373:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.879467][ T3303] cgroup: Unknown subsys name 'cpuset' [ 36.885865][ T3303] cgroup: Unknown subsys name 'rlimit' [ 36.997223][ T28] audit: type=1400 audit(1771543562.643:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.021010][ T28] audit: type=1400 audit(1771543562.653:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.051204][ T28] audit: type=1400 audit(1771543562.653:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.072210][ T28] audit: type=1400 audit(1771543562.653:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.092772][ T28] audit: type=1400 audit(1771543562.663:69): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.102892][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 37.114506][ T28] audit: type=1400 audit(1771543562.683:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 37.148158][ T28] audit: type=1400 audit(1771543562.683:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 37.162674][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.312188][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 38.395054][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.402517][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.409835][ T3316] bridge_slave_0: entered allmulticast mode [ 38.416549][ T3316] bridge_slave_0: entered promiscuous mode [ 38.425959][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.433411][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.440866][ T3316] bridge_slave_1: entered allmulticast mode [ 38.447441][ T3316] bridge_slave_1: entered promiscuous mode [ 38.472470][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.481914][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 38.498096][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.537756][ T3316] team0: Port device team_slave_0 added [ 38.555834][ T3316] team0: Port device team_slave_1 added [ 38.584481][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 38.593720][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.600802][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.627398][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.649475][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.656448][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.682767][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.715119][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.722417][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.729866][ T3317] bridge_slave_0: entered allmulticast mode [ 38.736702][ T3317] bridge_slave_0: entered promiscuous mode [ 38.745778][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.753024][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.760211][ T3317] bridge_slave_1: entered allmulticast mode [ 38.766920][ T3317] bridge_slave_1: entered promiscuous mode [ 38.795664][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.808858][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.825313][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 38.839627][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 38.861814][ T3316] hsr_slave_0: entered promiscuous mode [ 38.867790][ T3316] hsr_slave_1: entered promiscuous mode [ 38.903895][ T3317] team0: Port device team_slave_0 added [ 38.910840][ T3317] team0: Port device team_slave_1 added [ 38.936391][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.943626][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.970076][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.988104][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.995637][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.003029][ T3320] bridge_slave_0: entered allmulticast mode [ 39.009756][ T3320] bridge_slave_0: entered promiscuous mode [ 39.021183][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.028259][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.054900][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.071647][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.078949][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.086130][ T3320] bridge_slave_1: entered allmulticast mode [ 39.092915][ T3320] bridge_slave_1: entered promiscuous mode [ 39.135210][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.145787][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.156162][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.163527][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.171023][ T3326] bridge_slave_0: entered allmulticast mode [ 39.177642][ T3326] bridge_slave_0: entered promiscuous mode [ 39.203218][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.210390][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.218528][ T3326] bridge_slave_1: entered allmulticast mode [ 39.225444][ T3326] bridge_slave_1: entered promiscuous mode [ 39.245250][ T3320] team0: Port device team_slave_0 added [ 39.260926][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.268951][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.276516][ T3323] bridge_slave_0: entered allmulticast mode [ 39.283764][ T3323] bridge_slave_0: entered promiscuous mode [ 39.295252][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.302741][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.309939][ T3323] bridge_slave_1: entered allmulticast mode [ 39.316438][ T3323] bridge_slave_1: entered promiscuous mode [ 39.323618][ T3320] team0: Port device team_slave_1 added [ 39.331785][ T3317] hsr_slave_0: entered promiscuous mode [ 39.337836][ T3317] hsr_slave_1: entered promiscuous mode [ 39.344016][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 39.349893][ T3317] Cannot create hsr debugfs directory [ 39.390534][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.409165][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.420015][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.430692][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.452679][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.459969][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.486128][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.508018][ T3326] team0: Port device team_slave_0 added [ 39.515505][ T3326] team0: Port device team_slave_1 added [ 39.521614][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.528637][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.555018][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.578951][ T3323] team0: Port device team_slave_0 added [ 39.596156][ T3323] team0: Port device team_slave_1 added [ 39.630270][ T3320] hsr_slave_0: entered promiscuous mode [ 39.636413][ T3320] hsr_slave_1: entered promiscuous mode [ 39.642347][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 39.648096][ T3320] Cannot create hsr debugfs directory [ 39.661633][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.668675][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.694880][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.711366][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.718382][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.744446][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.756446][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.763568][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.790073][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.804278][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.811393][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.837798][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.856792][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.884441][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.909233][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.929614][ T3323] hsr_slave_0: entered promiscuous mode [ 39.935945][ T3323] hsr_slave_1: entered promiscuous mode [ 39.942273][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 39.948218][ T3323] Cannot create hsr debugfs directory [ 39.959977][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.979351][ T3326] hsr_slave_0: entered promiscuous mode [ 39.985441][ T3326] hsr_slave_1: entered promiscuous mode [ 39.991600][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 39.997513][ T3326] Cannot create hsr debugfs directory [ 40.146922][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.156473][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.169258][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.182740][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.203059][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.226236][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.238389][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.248114][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.257419][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.269689][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.279629][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.286728][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.305817][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.313094][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.348548][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.368132][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.383036][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.392869][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.430378][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.440716][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.456421][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.463884][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.479712][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.509220][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.533620][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.540812][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.550770][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.557916][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.587676][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.607123][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.630178][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.647462][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.654677][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.676401][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.683527][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.708422][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.740886][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.752876][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.779027][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.786419][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.809108][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.818438][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.825578][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.849359][ T3316] veth0_vlan: entered promiscuous mode [ 40.864878][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.876112][ T3316] veth1_vlan: entered promiscuous mode [ 40.887983][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.906723][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.914042][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.929526][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.936755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.987311][ T3316] veth0_macvtap: entered promiscuous mode [ 41.004459][ T3316] veth1_macvtap: entered promiscuous mode [ 41.046570][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.055166][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.066463][ T3317] veth0_vlan: entered promiscuous mode [ 41.078865][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.091024][ T3317] veth1_vlan: entered promiscuous mode [ 41.099290][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.133573][ T3317] veth0_macvtap: entered promiscuous mode [ 41.144145][ T1425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.153399][ T1425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.170734][ T3317] veth1_macvtap: entered promiscuous mode [ 41.184122][ T1425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.203933][ T1425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.226052][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.232350][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.272873][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.305019][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.334404][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.343933][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.368132][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.396934][ T3320] veth0_vlan: entered promiscuous mode [ 41.435468][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.487152][ T3320] veth1_vlan: entered promiscuous mode [ 41.512606][ T3326] veth0_vlan: entered promiscuous mode [ 41.574496][ T3482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 41.594860][ T3320] veth0_macvtap: entered promiscuous mode [ 41.841931][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 41.841947][ T28] audit: type=1400 audit(1771543567.313:102): avc: denied { prog_load } for pid=3469 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.904836][ T3482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3482 comm=syz.1.2 [ 42.084084][ T3320] veth1_macvtap: entered promiscuous mode [ 42.142463][ T28] audit: type=1400 audit(1771543567.313:103): avc: denied { bpf } for pid=3469 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.203817][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.213030][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.222189][ T3326] veth1_vlan: entered promiscuous mode [ 42.227713][ T28] audit: type=1400 audit(1771543567.883:104): avc: denied { create } for pid=3474 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.245196][ T3326] veth0_macvtap: entered promiscuous mode [ 42.254480][ T28] audit: type=1400 audit(1771543567.903:105): avc: denied { write } for pid=3474 comm="syz.1.2" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.300421][ T28] audit: type=1400 audit(1771543567.953:106): avc: denied { map_create } for pid=3474 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.360144][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.369828][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.399149][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.408077][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.424429][ T3326] veth1_macvtap: entered promiscuous mode [ 42.461027][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.480574][ T3502] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.493183][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.518716][ T28] audit: type=1400 audit(1771543568.163:107): avc: denied { allowed } for pid=3491 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.544426][ T3498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3498 comm=syz.1.7 [ 42.613847][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.628772][ T28] audit: type=1400 audit(1771543568.193:108): avc: denied { create } for pid=3491 comm="syz.0.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.642697][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.679055][ T28] audit: type=1400 audit(1771543568.193:109): avc: denied { map } for pid=3491 comm="syz.0.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.733584][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 42.754970][ T3323] veth0_vlan: entered promiscuous mode [ 42.759414][ T28] audit: type=1400 audit(1771543568.193:110): avc: denied { read write } for pid=3491 comm="syz.0.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.767437][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.822335][ T3323] veth1_vlan: entered promiscuous mode [ 42.846171][ T28] audit: type=1400 audit(1771543568.313:111): avc: denied { create } for pid=3491 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.848105][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.067951][ T3323] veth0_macvtap: entered promiscuous mode [ 43.079541][ T3323] veth1_macvtap: entered promiscuous mode [ 43.105480][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.112907][ T3516] loop3: detected capacity change from 0 to 2048 [ 43.140527][ T3516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.158764][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.185686][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.204042][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.205474][ T3516] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.214822][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.318577][ C0] hrtimer: interrupt took 72194 ns [ 43.417490][ T3516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 345: padding at end of block bitmap is not set [ 43.437229][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.462180][ T3516] EXT4-fs (loop3): Remounting filesystem read-only [ 44.157227][ T3507] syz.2.3 (3507) used greatest stack depth: 10384 bytes left [ 44.165944][ T3516] syz.3.4 (3516) used greatest stack depth: 9096 bytes left [ 44.180078][ T3509] syz.2.3 (3509) used greatest stack depth: 8744 bytes left [ 44.260341][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.350868][ T3545] loop3: detected capacity change from 0 to 2048 [ 44.378542][ T3533] loop1: detected capacity change from 0 to 512 [ 44.390620][ T3534] loop4: detected capacity change from 0 to 512 [ 44.427105][ T3545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.469034][ T3545] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.573233][ T3540] loop0: detected capacity change from 0 to 512 [ 44.598087][ T3545] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11: bg 0: block 345: padding at end of block bitmap is not set [ 44.625724][ T3545] EXT4-fs (loop3): Remounting filesystem read-only [ 44.692487][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.834646][ T3555] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.693253][ T3541] syz.2.10 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 45.706315][ T3541] CPU: 0 UID: 0 PID: 3541 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 45.706348][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.706367][ T3541] Call Trace: [ 45.706373][ T3541] [ 45.706383][ T3541] __dump_stack+0x1d/0x30 [ 45.706419][ T3541] dump_stack_lvl+0x95/0xd0 [ 45.706454][ T3541] dump_stack+0x15/0x1b [ 45.706551][ T3541] dump_header+0x80/0x240 [ 45.706582][ T3541] oom_kill_process+0x295/0x350 [ 45.706609][ T3541] out_of_memory+0x97d/0xb80 [ 45.706632][ T3541] try_charge_memcg+0x62e/0xa10 [ 45.706671][ T3541] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 45.706761][ T3541] __swap_cache_prepare_and_add+0x386/0x530 [ 45.706803][ T3541] swap_cache_alloc_folio+0xa2/0x120 [ 45.706835][ T3541] swap_cluster_readahead+0x36b/0x3d0 [ 45.706916][ T3541] swapin_readahead+0xde/0x840 [ 45.706942][ T3541] ? is_bpf_text_address+0x141/0x160 [ 45.706967][ T3541] ? kernel_text_address+0x94/0xb0 [ 45.707070][ T3541] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 45.707108][ T3541] ? __kernel_text_address+0xd/0x30 [ 45.707129][ T3541] ? __rcu_read_unlock+0x4e/0x70 [ 45.707188][ T3541] ? swap_cache_get_folio+0x26f/0x280 [ 45.707220][ T3541] do_swap_page+0x309/0x2210 [ 45.707292][ T3541] ? stack_depot_save_flags+0x4d4/0x8d0 [ 45.707340][ T3541] ? css_rstat_updated+0xbb/0x280 [ 45.707412][ T3541] ? __rcu_read_lock+0x36/0x50 [ 45.707463][ T3541] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 45.707503][ T3541] handle_mm_fault+0xb40/0x3020 [ 45.707600][ T3541] ? vma_start_read+0x1c7/0x2c0 [ 45.707625][ T3541] do_user_addr_fault+0x62f/0x1050 [ 45.707717][ T3541] ? arch_exit_work+0x30/0x40 [ 45.707740][ T3541] ? irqentry_exit+0x3c/0x520 [ 45.707848][ T3541] ? trace_page_fault_user+0x1f/0xe0 [ 45.707975][ T3541] exc_page_fault+0x62/0xa0 [ 45.708053][ T3541] asm_exc_page_fault+0x26/0x30 [ 45.708080][ T3541] RIP: 0033:0x7fb625d7cbb9 [ 45.708101][ T3541] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 45.708124][ T3541] RSP: 002b:00007ffc80285890 EFLAGS: 00010246 [ 45.708151][ T3541] RAX: 00007fb625b03e38 RBX: 00007fb625b03e38 RCX: ffffffff818524b5 [ 45.708228][ T3541] RDX: 0000000000000013 RSI: 00007fb625b04948 RDI: 00007fb625b03e38 [ 45.708245][ T3541] RBP: 00007fb625b039a0 R08: 00007fb626110000 R09: 00007fb626126038 [ 45.708258][ T3541] R10: 0000000000000001 R11: 0000000000000006 R12: 00007fb625b04948 [ 45.708270][ T3541] R13: 0000000000000013 R14: 00000000000001f5 R15: 0000000000000001 [ 45.708287][ T3541] ? workingset_eviction+0x75/0x5d0 [ 45.708320][ T3541] [ 45.708431][ T3541] memory: usage 307200kB, limit 307200kB, failcnt 423 [ 45.865321][ T3568] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 45.945636][ T3541] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 45.999854][ T3541] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 46.007543][ T3541] Memory cgroup stats for /syz2: [ 46.007806][ T3541] cache 0 [ 46.030106][ T3574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.046019][ T3541] rss 0 [ 46.049111][ T3541] shmem 0 [ 46.052158][ T3541] mapped_file 0 [ 46.056959][ T3541] dirty 0 [ 46.060439][ T3541] writeback 0 [ 46.063900][ T3541] workingset_refault_anon 94 [ 46.069600][ T3541] workingset_refault_file 917 [ 46.076004][ T3541] swap 188416 [ 46.093004][ T3541] swapcached 282624 [ 46.096947][ T3541] pgpgin 1381 [ 46.118043][ T3541] pgpgout 1381 [ 46.121540][ T3541] pgfault 3455 [ 46.125080][ T3541] pgmajfault 60 [ 46.128630][ T3541] inactive_anon 0 [ 46.132373][ T3541] active_anon 0 [ 46.135952][ T3541] inactive_file 0 [ 46.139340][ T3574] Zero length message leads to an empty skb [ 46.139819][ T3541] active_file 0 [ 46.214261][ T3541] unevictable 0 [ 46.217885][ T3541] hierarchical_memory_limit 314572800 [ 46.223427][ T3541] hierarchical_memsw_limit 9223372036854771712 [ 46.230099][ T3541] total_cache 0 [ 46.233591][ T3541] total_rss 0 [ 46.236942][ T3541] total_shmem 0 [ 46.248652][ T3541] total_mapped_file 0 [ 46.252813][ T3541] total_dirty 0 [ 46.256324][ T3541] total_writeback 0 [ 46.261067][ T3541] total_workingset_refault_anon 94 [ 46.268271][ T3541] total_workingset_refault_file 917 [ 46.281042][ T3541] total_swap 188416 [ 46.284959][ T3541] total_swapcached 282624 [ 46.289626][ T3541] total_pgpgin 1381 [ 46.293595][ T3541] total_pgpgout 1381 [ 46.297514][ T3541] total_pgfault 3455 [ 46.328617][ T3541] total_pgmajfault 60 [ 46.328631][ T3541] total_inactive_anon 0 [ 46.328640][ T3541] total_active_anon 0 [ 46.328649][ T3541] total_inactive_file 0 [ 46.328658][ T3541] total_active_file 0 [ 46.328716][ T3541] total_unevictable 0 [ 46.328725][ T3541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.10,pid=3541,uid=0 [ 46.369672][ T3541] Memory cgroup out of memory: Killed process 3541 (syz.2.10) total-vm:96268kB, anon-rss:1232kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 46.512496][ T3586] syzkaller0: entered promiscuous mode [ 46.518326][ T3586] syzkaller0: entered allmulticast mode [ 46.595023][ T3589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 46.664837][ T3589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3589 comm=syz.2.23 [ 46.863033][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 46.863066][ T28] audit: type=1400 audit(1771543572.513:165): avc: denied { create } for pid=3588 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 46.938316][ T28] audit: type=1400 audit(1771543572.583:166): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.106061][ T28] audit: type=1400 audit(1771543572.743:167): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.148754][ T3604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27'. [ 47.164881][ T28] audit: type=1400 audit(1771543572.793:168): avc: denied { read } for pid=3603 comm="syz.4.27" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 47.231058][ T3604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3604 comm=syz.4.27 [ 47.377241][ T28] audit: type=1400 audit(1771543572.853:169): avc: denied { open } for pid=3601 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 47.427823][ T28] audit: type=1400 audit(1771543572.863:170): avc: denied { prog_load } for pid=3601 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 47.457799][ T28] audit: type=1400 audit(1771543572.903:171): avc: denied { create } for pid=3603 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 47.748979][ T28] audit: type=1400 audit(1771543572.973:172): avc: denied { read write } for pid=3601 comm="syz.2.26" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.783119][ T28] audit: type=1400 audit(1771543572.993:173): avc: denied { map_create } for pid=3603 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 47.814632][ T28] audit: type=1400 audit(1771543572.993:174): avc: denied { create } for pid=3603 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 48.557852][ T3624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 48.608762][ T3624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3624 comm=syz.0.33 [ 50.389088][ T3654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 50.502215][ T3656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3656 comm=syz.3.42 [ 50.750005][ T3658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 50.779381][ T3658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3658 comm=syz.2.43 [ 50.866505][ T3664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 50.886272][ T3664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3664 comm=syz.1.46 [ 51.467039][ T3677] netlink: 156 bytes leftover after parsing attributes in process `syz.0.50'. [ 51.594768][ T3668] syz.3.48 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 51.701474][ T3668] CPU: 1 UID: 0 PID: 3668 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 51.701540][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.701607][ T3668] Call Trace: [ 51.701615][ T3668] [ 51.701625][ T3668] __dump_stack+0x1d/0x30 [ 51.701745][ T3668] dump_stack_lvl+0x95/0xd0 [ 51.701836][ T3668] dump_stack+0x15/0x1b [ 51.701953][ T3668] dump_header+0x80/0x240 [ 51.702075][ T3668] oom_kill_process+0x295/0x350 [ 51.702142][ T3668] out_of_memory+0x97d/0xb80 [ 51.702215][ T3668] try_charge_memcg+0x62e/0xa10 [ 51.702332][ T3668] obj_cgroup_charge_pages+0x23/0xc0 [ 51.702438][ T3668] __memcg_kmem_charge_page+0x9e/0x170 [ 51.702525][ T3668] __alloc_frozen_pages_noprof+0x18a/0x360 [ 51.702646][ T3668] alloc_pages_mpol+0xb3/0x260 [ 51.702787][ T3668] alloc_pages_noprof+0x8f/0x130 [ 51.702875][ T3668] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 51.703001][ T3668] __kvmalloc_node_noprof+0x3d4/0x650 [ 51.703114][ T3668] ? futex_hash_allocate+0x190/0x9d0 [ 51.703238][ T3668] ? futex_hash_allocate+0x190/0x9d0 [ 51.703377][ T3668] futex_hash_allocate+0x190/0x9d0 [ 51.703532][ T3668] ? cap_task_prctl+0x13f/0x6e0 [ 51.703604][ T3668] futex_hash_prctl+0xd8/0xf0 [ 51.703768][ T3668] __se_sys_prctl+0xa3d/0x13f0 [ 51.703849][ T3668] __x64_sys_prctl+0x67/0x80 [ 51.703935][ T3668] x64_sys_call+0x2533/0x3020 [ 51.704077][ T3668] do_syscall_64+0x12c/0x370 [ 51.704255][ T3668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.704327][ T3668] RIP: 0033:0x7f834025c629 [ 51.704379][ T3668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.704434][ T3668] RSP: 002b:00007f833ecb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 51.704599][ T3668] RAX: ffffffffffffffda RBX: 00007f83404d5fa0 RCX: 00007f834025c629 [ 51.704650][ T3668] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 51.704692][ T3668] RBP: 00007f83402f2b39 R08: 0000000000000000 R09: 0000000000000000 [ 51.704734][ T3668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.704775][ T3668] R13: 00007f83404d6038 R14: 00007f83404d5fa0 R15: 00007ffe22eb4cf8 [ 51.704842][ T3668] [ 51.704864][ T3668] memory: usage 307200kB, limit 307200kB, failcnt 274 [ 51.986719][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 51.986736][ T28] audit: type=1400 audit(1771543577.633:309): avc: denied { create } for pid=3682 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 52.048666][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 52.078224][ T28] audit: type=1400 audit(1771543577.673:310): avc: denied { allowed } for pid=3682 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 52.085417][ T3688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'. [ 52.133105][ T3668] memory+swap: usage 105364kB, limit 9007199254740988kB, failcnt 0 [ 52.163378][ T3688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3688 comm=syz.0.53 [ 52.168151][ T28] audit: type=1400 audit(1771543577.673:311): avc: denied { prog_load } for pid=3682 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 52.212591][ T3668] kmem: usage 27580kB, limit 9007199254740988kB, failcnt 0 [ 52.244876][ T3668] Memory cgroup stats for /syz3: [ 52.245332][ T3668] cache 0 [ 52.255049][ T3668] rss 24576 [ 52.290606][ T28] audit: type=1400 audit(1771543577.713:312): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.319054][ T3668] shmem 0 [ 52.328877][ T3668] mapped_file 0 [ 52.339105][ T3668] dirty 0 [ 52.348826][ T3668] writeback 0 [ 52.358752][ T3668] workingset_refault_anon 83 [ 52.368903][ T3668] workingset_refault_file 1345 [ 52.370114][ T28] audit: type=1400 audit(1771543577.723:313): avc: denied { read } for pid=3687 comm="syz.0.53" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 52.384525][ T3668] swap 151552 [ 52.428971][ T3668] swapcached 233472 [ 52.458701][ T3668] pgpgin 5212 [ 52.468686][ T28] audit: type=1400 audit(1771543577.773:314): avc: denied { read } for pid=3682 comm="syz.2.52" dev="nsfs" ino=4026532629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 52.476866][ T3668] pgpgout 5199 [ 52.535035][ T3668] pgfault 12748 [ 52.544084][ T28] audit: type=1400 audit(1771543577.853:315): avc: denied { create } for pid=3687 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 52.578625][ T3668] pgmajfault 63 [ 52.584545][ T3668] inactive_anon 0 [ 52.588223][ T3668] active_anon 53248 [ 52.602793][ T28] audit: type=1400 audit(1771543577.913:316): avc: denied { map_create } for pid=3687 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 52.623767][ T3668] inactive_file 0 [ 52.648693][ T28] audit: type=1400 audit(1771543577.913:317): avc: denied { create } for pid=3687 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 52.651013][ T3668] active_file 0 [ 52.708597][ T3668] unevictable 0 [ 52.712353][ T3668] hierarchical_memory_limit 314572800 [ 52.723880][ T3668] hierarchical_memsw_limit 9223372036854771712 [ 52.738650][ T3668] total_cache 0 [ 52.740891][ T28] audit: type=1400 audit(1771543577.923:318): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.742187][ T3668] total_rss 24576 [ 52.742199][ T3668] total_shmem 0 [ 52.804304][ T3668] total_mapped_file 0 [ 52.809294][ T3695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 52.818854][ T3668] total_dirty 0 [ 52.822375][ T3668] total_writeback 0 [ 52.826254][ T3668] total_workingset_refault_anon 83 [ 52.836721][ T3695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3695 comm=syz.2.55 [ 52.838702][ T3668] total_workingset_refault_file 1345 [ 52.865094][ T3668] total_swap 151552 [ 52.872428][ T3668] total_swapcached 233472 [ 52.881240][ T3668] total_pgpgin 5212 [ 52.910268][ T3668] total_pgpgout 5199 [ 52.919900][ T3668] total_pgfault 12748 [ 52.928324][ T3668] total_pgmajfault 63 [ 52.936959][ T3668] total_inactive_anon 0 [ 52.954793][ T3668] total_active_anon 53248 [ 52.966939][ T3668] total_inactive_file 0 [ 52.975791][ T3668] total_active_file 0 [ 52.986273][ T3668] total_unevictable 0 [ 52.986296][ T3668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.48,pid=3667,uid=0 [ 52.986433][ T3668] Memory cgroup out of memory: Killed process 3668 (syz.3.48) total-vm:96340kB, anon-rss:1340kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 53.001319][ T3665] syz.1.47 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 53.055300][ T3665] CPU: 1 UID: 0 PID: 3665 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(full) [ 53.055326][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.055342][ T3665] Call Trace: [ 53.055350][ T3665] [ 53.055358][ T3665] __dump_stack+0x1d/0x30 [ 53.055431][ T3665] dump_stack_lvl+0x95/0xd0 [ 53.055454][ T3665] dump_stack+0x15/0x1b [ 53.055474][ T3665] dump_header+0x80/0x240 [ 53.055558][ T3665] oom_kill_process+0x295/0x350 [ 53.055584][ T3665] out_of_memory+0x97d/0xb80 [ 53.055611][ T3665] try_charge_memcg+0x62e/0xa10 [ 53.055652][ T3665] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 53.055799][ T3665] __swap_cache_prepare_and_add+0x386/0x530 [ 53.055882][ T3665] swap_cache_alloc_folio+0xa2/0x120 [ 53.055919][ T3665] swap_cluster_readahead+0x26e/0x3d0 [ 53.055961][ T3665] swapin_readahead+0xde/0x840 [ 53.056075][ T3665] ? _raw_spin_unlock+0x9/0x30 [ 53.056159][ T3665] ? swap_put_entries_cluster+0x385/0x3a0 [ 53.056227][ T3665] ? swap_put_entries_cluster+0x131/0x3a0 [ 53.056260][ T3665] ? __rcu_read_unlock+0x4e/0x70 [ 53.056355][ T3665] ? swap_cache_get_folio+0x26f/0x280 [ 53.056382][ T3665] do_swap_page+0x309/0x2210 [ 53.056419][ T3665] ? css_rstat_updated+0xbb/0x280 [ 53.056491][ T3665] ? __rcu_read_lock+0x36/0x50 [ 53.056509][ T3665] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 53.056535][ T3665] handle_mm_fault+0xb40/0x3020 [ 53.056568][ T3665] ? vma_start_read+0x1c7/0x2c0 [ 53.056603][ T3665] do_user_addr_fault+0x62f/0x1050 [ 53.056636][ T3665] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 53.056665][ T3665] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 53.056743][ T3665] ? trace_page_fault_user+0x1f/0xe0 [ 53.056775][ T3665] exc_page_fault+0x62/0xa0 [ 53.056889][ T3665] asm_exc_page_fault+0x26/0x30 [ 53.056925][ T3665] RIP: 0033:0x7ffbebff77f8 [ 53.056940][ T3665] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 53.056962][ T3665] RSP: 002b:00007ffed0f6e340 EFLAGS: 00010246 [ 53.056983][ T3665] RAX: 0000000000000000 RBX: 000055557007b500 RCX: 00007ffbebffcece [ 53.057001][ T3665] RDX: 00007ffed0f6e390 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.057050][ T3665] RBP: 00007ffbec2b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 53.057121][ T3665] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000ca54 [ 53.057137][ T3665] R13: 00007ffbec2b609c R14: 000000000000c816 R15: 00007ffbec2b6090 [ 53.057228][ T3665] [ 53.057234][ T3665] memory: usage 307200kB, limit 307200kB, failcnt 486 [ 53.329731][ T3665] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 53.337768][ T3665] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 53.377131][ T3665] Memory cgroup stats for /syz1: [ 53.377386][ T3665] cache 0 [ 53.398685][ T3665] rss 0 [ 53.408663][ T3665] shmem 0 [ 53.408678][ T3665] mapped_file 0 [ 53.408687][ T3665] dirty 0 [ 53.408695][ T3665] writeback 0 [ 53.408702][ T3665] workingset_refault_anon 17 [ 53.448670][ T3665] workingset_refault_file 769 [ 53.448684][ T3665] swap 196608 [ 53.448693][ T3665] swapcached 200704 [ 53.448701][ T3665] pgpgin 6037 [ 53.448708][ T3665] pgpgout 6036 [ 53.448716][ T3665] pgfault 10062 [ 53.448723][ T3665] pgmajfault 15 [ 53.448730][ T3665] inactive_anon 0 [ 53.448737][ T3665] active_anon 4096 [ 53.448775][ T3665] inactive_file 0 [ 53.448783][ T3665] active_file 0 [ 53.448790][ T3665] unevictable 0 [ 53.448798][ T3665] hierarchical_memory_limit 314572800 [ 53.448910][ T3665] hierarchical_memsw_limit 9223372036854771712 [ 53.448920][ T3665] total_cache 0 [ 53.448927][ T3665] total_rss 0 [ 53.448934][ T3665] total_shmem 0 [ 53.448942][ T3665] total_mapped_file 0 [ 53.448949][ T3665] total_dirty 0 [ 53.448957][ T3665] total_writeback 0 [ 53.448989][ T3665] total_workingset_refault_anon 17 [ 53.448998][ T3665] total_workingset_refault_file 769 [ 53.449078][ T3665] total_swap 196608 [ 53.449085][ T3665] total_swapcached 200704 [ 53.449093][ T3665] total_pgpgin 6037 [ 53.449101][ T3665] total_pgpgout 6036 [ 53.449109][ T3665] total_pgfault 10062 [ 53.449117][ T3665] total_pgmajfault 15 [ 53.449144][ T3665] total_inactive_anon 0 [ 53.449152][ T3665] total_active_anon 4096 [ 53.449160][ T3665] total_inactive_file 0 [ 53.449234][ T3665] total_active_file 0 [ 53.449242][ T3665] total_unevictable 0 [ 53.449250][ T3665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.47,pid=3665,uid=0 [ 53.449340][ T3665] Memory cgroup out of memory: Killed process 3665 (syz.1.47) total-vm:96340kB, anon-rss:1228kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 53.908790][ T3705] syz.3.59 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 53.908829][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(full) [ 53.908882][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.908894][ T3705] Call Trace: [ 53.908901][ T3705] [ 53.908912][ T3705] __dump_stack+0x1d/0x30 [ 53.908948][ T3705] dump_stack_lvl+0x95/0xd0 [ 53.909044][ T3705] dump_stack+0x15/0x1b [ 53.909072][ T3705] dump_header+0x80/0x240 [ 53.909094][ T3705] oom_kill_process+0x295/0x350 [ 53.909191][ T3705] out_of_memory+0x97d/0xb80 [ 53.909220][ T3705] try_charge_memcg+0x62e/0xa10 [ 53.909260][ T3705] obj_cgroup_charge_pages+0x23/0xc0 [ 53.909359][ T3705] __memcg_kmem_charge_page+0x9e/0x170 [ 53.909386][ T3705] __alloc_frozen_pages_noprof+0x18a/0x360 [ 53.909419][ T3705] alloc_pages_mpol+0xb3/0x260 [ 53.909459][ T3705] alloc_pages_noprof+0x8f/0x130 [ 53.909492][ T3705] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 53.909535][ T3705] __kvmalloc_node_noprof+0x3d4/0x650 [ 53.909560][ T3705] ? futex_hash_allocate+0x190/0x9d0 [ 53.909603][ T3705] ? futex_hash_allocate+0x190/0x9d0 [ 53.909640][ T3705] futex_hash_allocate+0x190/0x9d0 [ 53.909671][ T3705] ? cap_task_prctl+0x13f/0x6e0 [ 53.909691][ T3705] futex_hash_prctl+0xd8/0xf0 [ 53.909758][ T3705] __se_sys_prctl+0xa3d/0x13f0 [ 53.909786][ T3705] __x64_sys_prctl+0x67/0x80 [ 53.909819][ T3705] x64_sys_call+0x2533/0x3020 [ 53.909941][ T3705] do_syscall_64+0x12c/0x370 [ 53.910008][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.910045][ T3705] RIP: 0033:0x7f834025c629 [ 53.910062][ T3705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.910080][ T3705] RSP: 002b:00007f833ecb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 53.910100][ T3705] RAX: ffffffffffffffda RBX: 00007f83404d5fa0 RCX: 00007f834025c629 [ 53.910115][ T3705] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 53.910130][ T3705] RBP: 00007f83402f2b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.910146][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.910175][ T3705] R13: 00007f83404d6038 R14: 00007f83404d5fa0 R15: 00007ffe22eb4cf8 [ 53.910198][ T3705] [ 53.910206][ T3705] memory: usage 307200kB, limit 307200kB, failcnt 536 [ 53.910227][ T3705] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 53.910240][ T3705] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 53.910252][ T3705] Memory cgroup stats for /syz3: [ 53.910486][ T3705] cache 0 [ 53.910495][ T3705] rss 0 [ 53.910501][ T3705] shmem 0 [ 53.910508][ T3705] mapped_file 0 [ 53.910517][ T3705] dirty 0 [ 53.910557][ T3705] writeback 0 [ 53.910573][ T3705] workingset_refault_anon 126 [ 53.910588][ T3705] workingset_refault_file 1956 [ 53.910687][ T3705] swap 200704 [ 53.910695][ T3705] swapcached 233472 [ 53.910702][ T3705] pgpgin 5906 [ 53.910784][ T3705] pgpgout 5905 [ 53.910791][ T3705] pgfault 15989 [ 53.910798][ T3705] pgmajfault 87 [ 53.910804][ T3705] inactive_anon 0 [ 53.910812][ T3705] active_anon 4096 [ 53.910819][ T3705] inactive_file 0 [ 53.910826][ T3705] active_file 0 [ 53.910833][ T3705] unevictable 0 [ 53.910888][ T3705] hierarchical_memory_limit 314572800 [ 53.910900][ T3705] hierarchical_memsw_limit 9223372036854771712 [ 53.910922][ T3705] total_cache 0 [ 53.910931][ T3705] total_rss 0 [ 53.910940][ T3705] total_shmem 0 [ 53.910949][ T3705] total_mapped_file 0 [ 53.910958][ T3705] total_dirty 0 [ 53.910967][ T3705] total_writeback 0 [ 53.910976][ T3705] total_workingset_refault_anon 126 [ 53.910986][ T3705] total_workingset_refault_file 1956 [ 53.911016][ T3705] total_swap 200704 [ 53.911023][ T3705] total_swapcached 233472 [ 53.911030][ T3705] total_pgpgin 5906 [ 53.911037][ T3705] total_pgpgout 5905 [ 53.911047][ T3705] total_pgfault 15989 [ 53.911056][ T3705] total_pgmajfault 87 [ 53.911066][ T3705] total_inactive_anon 0 [ 53.911076][ T3705] total_active_anon 4096 [ 53.911086][ T3705] total_inactive_file 0 [ 53.911095][ T3705] total_active_file 0 [ 53.911102][ T3705] total_unevictable 0 [ 53.911110][ T3705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.59,pid=3703,uid=0 [ 53.911211][ T3705] Memory cgroup out of memory: Killed process 3703 (syz.3.59) total-vm:96340kB, anon-rss:1228kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 54.206354][ T3720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 54.211125][ T3720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3720 comm=syz.3.63 [ 54.364113][ T3724] syzkaller0: entered promiscuous mode [ 54.364133][ T3724] syzkaller0: entered allmulticast mode [ 54.524450][ T3728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.66'. [ 54.559560][ T3728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3728 comm=syz.3.66 [ 54.800644][ T3733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'. [ 54.801515][ T3733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3733 comm=syz.0.69 [ 54.839575][ T3736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.68'. [ 54.852034][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 54.852427][ T3736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3736 comm=syz.3.68 [ 54.951884][ T3740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 55.189083][ T3750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3750 comm=syz.1.71 [ 55.402071][ T3758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 55.412582][ T3755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3755 comm=syz.2.74 [ 56.031282][ T3777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3777 comm=syz.3.81 [ 56.384686][ T3782] netlink: 'syz.2.83': attribute type 13 has an invalid length. [ 56.578052][ T3764] syz.1.78 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 56.644612][ T3764] CPU: 0 UID: 0 PID: 3764 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) [ 56.644639][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.644674][ T3764] Call Trace: [ 56.644683][ T3764] [ 56.644693][ T3764] __dump_stack+0x1d/0x30 [ 56.644728][ T3764] dump_stack_lvl+0x95/0xd0 [ 56.644773][ T3764] dump_stack+0x15/0x1b [ 56.644883][ T3764] dump_header+0x80/0x240 [ 56.645022][ T3764] oom_kill_process+0x295/0x350 [ 56.645099][ T3764] out_of_memory+0x97d/0xb80 [ 56.645171][ T3764] try_charge_memcg+0x62e/0xa10 [ 56.645306][ T3764] obj_cgroup_charge_pages+0x23/0xc0 [ 56.645428][ T3764] __memcg_kmem_charge_page+0x9e/0x170 [ 56.645563][ T3764] __alloc_frozen_pages_noprof+0x18a/0x360 [ 56.645663][ T3764] alloc_pages_mpol+0xb3/0x260 [ 56.645774][ T3764] alloc_pages_noprof+0x8f/0x130 [ 56.645900][ T3764] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 56.646017][ T3764] __kvmalloc_node_noprof+0x3d4/0x650 [ 56.646176][ T3764] ? futex_hash_allocate+0x190/0x9d0 [ 56.646284][ T3764] ? futex_hash_allocate+0x190/0x9d0 [ 56.646445][ T3764] futex_hash_allocate+0x190/0x9d0 [ 56.646548][ T3764] ? cap_task_prctl+0x13f/0x6e0 [ 56.646614][ T3764] futex_hash_prctl+0xd8/0xf0 [ 56.646706][ T3764] __se_sys_prctl+0xa3d/0x13f0 [ 56.646812][ T3764] __x64_sys_prctl+0x67/0x80 [ 56.646896][ T3764] x64_sys_call+0x2533/0x3020 [ 56.646981][ T3764] do_syscall_64+0x12c/0x370 [ 56.647164][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.647231][ T3764] RIP: 0033:0x7ffbec03c629 [ 56.647284][ T3764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.647344][ T3764] RSP: 002b:00007ffbeaa97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 56.647385][ T3764] RAX: ffffffffffffffda RBX: 00007ffbec2b5fa0 RCX: 00007ffbec03c629 [ 56.647428][ T3764] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 56.647469][ T3764] RBP: 00007ffbec0d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.647511][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.647552][ T3764] R13: 00007ffbec2b6038 R14: 00007ffbec2b5fa0 R15: 00007ffed0f6e258 [ 56.647694][ T3764] [ 56.647722][ T3764] memory: usage 307188kB, limit 307200kB, failcnt 806 [ 56.686339][ T3795] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 56.767636][ T3764] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 56.767657][ T3764] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 56.767673][ T3764] Memory cgroup stats for /syz1: [ 56.770653][ T3764] cache 4096 [ 56.937201][ T3764] rss 12288 [ 56.937215][ T3764] shmem 0 [ 56.937225][ T3764] mapped_file 4096 [ 56.937234][ T3764] dirty 0 [ 56.937243][ T3764] writeback 4096 [ 56.937252][ T3764] workingset_refault_anon 82 [ 56.937263][ T3764] workingset_refault_file 1228 [ 56.937273][ T3764] swap 180224 [ 56.937282][ T3764] swapcached 331776 [ 56.937343][ T3764] pgpgin 7267 [ 56.937352][ T3764] pgpgout 7261 [ 56.937360][ T3764] pgfault 14300 [ 56.937374][ T3764] pgmajfault 59 [ 56.985969][ T3764] inactive_anon 16384 [ 56.986065][ T3764] active_anon 0 [ 56.986095][ T3764] inactive_file 0 [ 56.986105][ T3764] active_file 4096 [ 57.001599][ T3764] unevictable 0 [ 57.005209][ T3764] hierarchical_memory_limit 314572800 [ 57.010809][ T3764] hierarchical_memsw_limit 9223372036854771712 [ 57.010838][ T3764] total_cache 4096 [ 57.010845][ T3764] total_rss 12288 [ 57.010852][ T3764] total_shmem 0 [ 57.010860][ T3764] total_mapped_file 4096 [ 57.010898][ T3764] total_dirty 0 [ 57.010927][ T3764] total_writeback 4096 [ 57.042523][ T3764] total_workingset_refault_anon 82 [ 57.042539][ T3764] total_workingset_refault_file 1228 [ 57.042597][ T3764] total_swap 180224 [ 57.042604][ T3764] total_swapcached 331776 [ 57.042619][ T3764] total_pgpgin 7267 [ 57.042626][ T3764] total_pgpgout 7261 [ 57.042633][ T3764] total_pgfault 14300 [ 57.042666][ T3764] total_pgmajfault 59 [ 57.042675][ T3764] total_inactive_anon 16384 [ 57.057622][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 57.057673][ T28] audit: type=1400 audit(1771543582.703:501): avc: denied { read write } for pid=3791 comm="syz.2.86" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.061742][ T3764] total_active_anon 0 [ 57.101860][ T28] audit: type=1400 audit(1771543582.753:502): avc: denied { module_request } for pid=3791 comm="syz.2.86" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 57.112677][ T3764] total_inactive_file 0 [ 57.143302][ T3764] total_active_file 4096 [ 57.143313][ T3764] total_unevictable 0 [ 57.143321][ T3764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.78,pid=3763,uid=0 [ 57.166361][ T3764] Memory cgroup out of memory: Killed process 3763 (syz.1.78) total-vm:96340kB, anon-rss:1228kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 57.195937][ T28] audit: type=1400 audit(1771543582.783:503): avc: denied { sys_module } for pid=3791 comm="syz.2.86" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 57.195972][ T28] audit: type=1400 audit(1771543582.843:504): avc: denied { create } for pid=3791 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 57.195999][ T28] audit: type=1400 audit(1771543582.843:505): avc: denied { create } for pid=3791 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 57.205123][ T28] audit: type=1400 audit(1771543582.853:506): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.242224][ T28] audit: type=1400 audit(1771543582.893:507): avc: denied { create } for pid=3791 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 57.261727][ T28] audit: type=1400 audit(1771543582.913:508): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.261926][ T28] audit: type=1400 audit(1771543582.913:509): avc: denied { prog_load } for pid=3799 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 57.264176][ T28] audit: type=1400 audit(1771543582.913:510): avc: denied { prog_load } for pid=3799 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 57.289299][ T3802] __nla_validate_parse: 1 callbacks suppressed [ 57.289354][ T3802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 57.437887][ T3800] syzkaller0: entered promiscuous mode [ 57.488937][ T3800] syzkaller0: entered allmulticast mode [ 57.709239][ T3817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 57.741003][ T3817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3817 comm=syz.2.93 [ 58.207900][ T3825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 58.245069][ T3807] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 58.269388][ T3828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3828 comm=syz.2.95 [ 58.296223][ T3823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 58.412918][ T3806] macvlan2: entered promiscuous mode [ 58.437050][ T3806] macvlan2: entered allmulticast mode [ 58.456408][ T35] Process accounting resumed [ 58.679673][ T3837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 58.758216][ T3837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3837 comm=syz.0.99 [ 59.253080][ T3856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.105'. [ 59.350290][ T3856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3856 comm=syz.0.105 [ 59.476523][ T3859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 60.387849][ T3872] syz.0.110 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 60.402313][ T3872] CPU: 1 UID: 0 PID: 3872 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 60.402348][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.402365][ T3872] Call Trace: [ 60.402373][ T3872] [ 60.402383][ T3872] __dump_stack+0x1d/0x30 [ 60.402419][ T3872] dump_stack_lvl+0x95/0xd0 [ 60.402467][ T3872] dump_stack+0x15/0x1b [ 60.402497][ T3872] dump_header+0x80/0x240 [ 60.402529][ T3872] oom_kill_process+0x295/0x350 [ 60.402558][ T3872] out_of_memory+0x97d/0xb80 [ 60.402588][ T3872] try_charge_memcg+0x62e/0xa10 [ 60.402670][ T3872] obj_cgroup_charge_pages+0x23/0xc0 [ 60.402708][ T3872] __memcg_kmem_charge_page+0x9e/0x170 [ 60.402802][ T3872] __alloc_frozen_pages_noprof+0x18a/0x360 [ 60.402869][ T3872] alloc_pages_mpol+0xb3/0x260 [ 60.402909][ T3872] alloc_pages_noprof+0x8f/0x130 [ 60.403042][ T3872] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 60.403127][ T3872] __kvmalloc_node_noprof+0x3d4/0x650 [ 60.403169][ T3872] ? futex_hash_allocate+0x190/0x9d0 [ 60.403209][ T3872] ? futex_hash_allocate+0x190/0x9d0 [ 60.403269][ T3872] futex_hash_allocate+0x190/0x9d0 [ 60.403310][ T3872] ? cap_task_prctl+0x13f/0x6e0 [ 60.403402][ T3872] futex_hash_prctl+0xd8/0xf0 [ 60.403429][ T3872] __se_sys_prctl+0xa3d/0x13f0 [ 60.403527][ T3872] __x64_sys_prctl+0x67/0x80 [ 60.403562][ T3872] x64_sys_call+0x2533/0x3020 [ 60.403660][ T3872] do_syscall_64+0x12c/0x370 [ 60.403705][ T3872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.403735][ T3872] RIP: 0033:0x7f5a390bc629 [ 60.403763][ T3872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.403781][ T3872] RSP: 002b:00007f5a37b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 60.403850][ T3872] RAX: ffffffffffffffda RBX: 00007f5a39335fa0 RCX: 00007f5a390bc629 [ 60.403869][ T3872] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 60.403886][ T3872] RBP: 00007f5a39152b39 R08: 0000000000000000 R09: 0000000000000000 [ 60.403904][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.403921][ T3872] R13: 00007f5a39336038 R14: 00007f5a39335fa0 R15: 00007ffd48a893e8 [ 60.404020][ T3872] [ 60.404030][ T3872] memory: usage 307200kB, limit 307200kB, failcnt 239 [ 60.648676][ T3872] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 60.719840][ T3872] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 60.727284][ T3872] Memory cgroup stats for /syz0: [ 60.727512][ T3872] cache 0 [ 60.749130][ T3872] rss 0 [ 60.752679][ T3872] shmem 0 [ 60.756013][ T3872] mapped_file 0 [ 60.771111][ T3872] dirty 0 [ 60.774359][ T3872] writeback 0 [ 60.777705][ T3872] workingset_refault_anon 70 [ 60.800081][ T3872] workingset_refault_file 764 [ 60.814993][ T3872] swap 393216 [ 60.823140][ T3872] swapcached 421888 [ 60.827484][ T3872] pgpgin 11389 [ 60.851959][ T3872] pgpgout 11389 [ 60.858576][ T3872] pgfault 20917 [ 60.865727][ T3872] pgmajfault 43 [ 60.878594][ T3872] inactive_anon 0 [ 60.888730][ T3872] active_anon 0 [ 60.892338][ T3872] inactive_file 0 [ 60.906370][ T3872] active_file 0 [ 60.921182][ T3872] unevictable 0 [ 60.935230][ T3872] hierarchical_memory_limit 314572800 [ 60.958652][ T3872] hierarchical_memsw_limit 9223372036854771712 [ 60.975263][ T3872] total_cache 0 [ 60.985328][ T3872] total_rss 0 [ 60.993754][ T3872] total_shmem 0 [ 61.003635][ T3872] total_mapped_file 0 [ 61.007718][ T3872] total_dirty 0 [ 61.021563][ T3872] total_writeback 0 [ 61.033010][ T3872] total_workingset_refault_anon 70 [ 61.058643][ T3872] total_workingset_refault_file 764 [ 61.074829][ T3872] total_swap 393216 [ 61.106417][ T3872] total_swapcached 421888 [ 61.664135][ T3872] total_pgpgin 11389 [ 61.668444][ T3872] total_pgpgout 11389 [ 61.673013][ T3872] total_pgfault 20917 [ 61.677290][ T3872] total_pgmajfault 43 [ 61.681557][ T3872] total_inactive_anon 0 [ 61.685912][ T3872] total_active_anon 0 [ 61.722700][ T3872] total_inactive_file 0 [ 61.765066][ T3872] total_active_file 0 [ 61.783674][ T3872] total_unevictable 0 [ 61.787776][ T3872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.110,pid=3869,uid=0 [ 61.819554][ T3884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 61.832263][ T3872] Memory cgroup out of memory: Killed process 3869 (syz.0.110) total-vm:96208kB, anon-rss:1220kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 61.871595][ T3885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3885 comm=syz.2.114 [ 61.992429][ T3887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 62.034634][ T3887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3887 comm=syz.1.115 [ 62.064256][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 62.064273][ T28] audit: type=1400 audit(1771543587.713:661): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.110514][ T3891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 62.153327][ T3891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3891 comm=syz.0.116 [ 62.187842][ T3896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3896 comm=syz.2.118 [ 62.237538][ T28] audit: type=1400 audit(1771543587.743:662): avc: denied { map_create } for pid=3886 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.275130][ T28] audit: type=1400 audit(1771543587.743:663): avc: denied { create } for pid=3886 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 62.320647][ T3899] __nla_validate_parse: 1 callbacks suppressed [ 62.320667][ T3899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 62.346492][ T28] audit: type=1400 audit(1771543587.753:664): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.378806][ T3899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3899 comm=syz.4.120 [ 62.408967][ T28] audit: type=1400 audit(1771543587.763:665): avc: denied { read } for pid=3889 comm="syz.0.116" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 62.439202][ T3904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'. [ 62.458481][ T3904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3904 comm=syz.2.121 [ 62.492798][ T28] audit: type=1400 audit(1771543587.763:666): avc: denied { open } for pid=3878 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 62.514072][ T28] audit: type=1400 audit(1771543587.783:667): avc: denied { create } for pid=3893 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 62.534175][ T28] audit: type=1400 audit(1771543587.783:668): avc: denied { open } for pid=3893 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 62.594176][ T28] audit: type=1400 audit(1771543587.783:669): avc: denied { prog_load } for pid=3893 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.614259][ T28] audit: type=1400 audit(1771543587.793:670): avc: denied { read } for pid=3895 comm="syz.2.118" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 62.661091][ T3913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'. [ 62.683694][ T3913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3913 comm=syz.2.124 [ 63.163224][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 63.547084][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 63.613729][ T3941] bridge_slave_0: left allmulticast mode [ 63.641632][ T3941] bridge_slave_0: left promiscuous mode [ 63.671304][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.958183][ T3941] bridge_slave_1: left allmulticast mode [ 63.972643][ T3941] bridge_slave_1: left promiscuous mode [ 63.989985][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.006444][ T3941] bond0: (slave bond_slave_0): Releasing backup interface [ 64.044407][ T3941] bond0: (slave bond_slave_1): Releasing backup interface [ 64.079620][ T3941] team0: Port device team_slave_0 removed [ 64.112565][ T3941] team0: Port device team_slave_1 removed [ 64.133481][ T3941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.156874][ T3941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.184209][ T3941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.218070][ T3941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.267290][ T3941] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.655600][ T3966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 64.681025][ T3968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 64.718439][ T3972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3972 comm=syz.0.141 [ 64.811482][ T3968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3968 comm=syz.2.142 [ 65.205415][ T3989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.148'. [ 66.746588][ T3998] syz.2.151 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 66.800135][ T3998] CPU: 1 UID: 0 PID: 3998 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT(full) [ 66.800171][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.800187][ T3998] Call Trace: [ 66.800197][ T3998] [ 66.800208][ T3998] __dump_stack+0x1d/0x30 [ 66.800301][ T3998] dump_stack_lvl+0x95/0xd0 [ 66.800409][ T3998] dump_stack+0x15/0x1b [ 66.800439][ T3998] dump_header+0x80/0x240 [ 66.800470][ T3998] oom_kill_process+0x295/0x350 [ 66.800494][ T3998] out_of_memory+0x97d/0xb80 [ 66.800565][ T3998] try_charge_memcg+0x62e/0xa10 [ 66.800618][ T3998] obj_cgroup_charge_pages+0x23/0xc0 [ 66.800716][ T3998] __memcg_kmem_charge_page+0x9e/0x170 [ 66.800750][ T3998] __alloc_frozen_pages_noprof+0x18a/0x360 [ 66.800791][ T3998] alloc_pages_mpol+0xb3/0x260 [ 66.800858][ T3998] alloc_pages_noprof+0x8f/0x130 [ 66.800895][ T3998] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 66.801037][ T3998] __kvmalloc_node_noprof+0x3d4/0x650 [ 66.801087][ T3998] ? futex_hash_allocate+0x190/0x9d0 [ 66.801122][ T3998] ? futex_hash_allocate+0x190/0x9d0 [ 66.801160][ T3998] futex_hash_allocate+0x190/0x9d0 [ 66.801283][ T3998] ? cap_task_prctl+0x13f/0x6e0 [ 66.801391][ T3998] futex_hash_prctl+0xd8/0xf0 [ 66.801429][ T3998] __se_sys_prctl+0xa3d/0x13f0 [ 66.801520][ T3998] __x64_sys_prctl+0x67/0x80 [ 66.801751][ T3998] x64_sys_call+0x2533/0x3020 [ 66.801789][ T3998] do_syscall_64+0x12c/0x370 [ 66.801869][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.801894][ T3998] RIP: 0033:0x7fb625eac629 [ 66.801971][ T3998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.802046][ T3998] RSP: 002b:00007fb6248ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 66.802067][ T3998] RAX: ffffffffffffffda RBX: 00007fb626125fa0 RCX: 00007fb625eac629 [ 66.802136][ T3998] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 66.802153][ T3998] RBP: 00007fb625f42b39 R08: 0000000000000000 R09: 0000000000000000 [ 66.802178][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.802190][ T3998] R13: 00007fb626126038 R14: 00007fb626125fa0 R15: 00007ffc80285908 [ 66.802241][ T3998] [ 66.802719][ T3998] memory: usage 257276kB, limit 307200kB, failcnt 884 [ 67.048629][ T3998] memory+swap: usage 234476kB, limit 9007199254740988kB, failcnt 0 [ 67.080456][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 67.080539][ T28] audit: type=1400 audit(1771543592.733:842): avc: denied { open } for pid=4011 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 67.108709][ T3998] kmem: usage 177772kB, limit 9007199254740988kB, failcnt 0 [ 67.116964][ T3998] Memory cgroup stats for /syz2: [ 67.117271][ T3998] cache 4096 [ 67.125996][ T3998] rss 90112 [ 67.129343][ T3998] shmem 0 [ 67.132353][ T3998] mapped_file 4096 [ 67.148750][ T3998] dirty 4096 [ 67.156785][ T3998] writeback 0 [ 67.166912][ T3998] workingset_refault_anon 234 [ 67.178821][ T3998] workingset_refault_file 1615 [ 67.219242][ T3998] swap 86016 [ 67.234254][ T3998] swapcached 434176 [ 67.238116][ T3998] pgpgin 10085 [ 67.318650][ T3998] pgpgout 10059 [ 67.332442][ T3998] pgfault 21319 [ 67.370160][ T3998] pgmajfault 153 [ 67.382673][ T3998] inactive_anon 0 [ 67.403579][ T3998] active_anon 102400 [ 67.454735][ T3998] inactive_file 4096 [ 67.468602][ T3998] active_file 0 [ 67.497414][ T3998] unevictable 0 [ 67.506062][ T4016] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 67.510555][ T3998] hierarchical_memory_limit 314572800 [ 67.515115][ T28] audit: type=1400 audit(1771543592.773:843): avc: denied { open } for pid=4011 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 67.548828][ T3998] hierarchical_memsw_limit 9223372036854771712 [ 67.560797][ T3998] total_cache 4096 [ 67.565073][ T3998] total_rss 90112 [ 67.581060][ T3998] total_shmem 0 [ 67.584582][ T3998] total_mapped_file 4096 [ 67.595296][ T28] audit: type=1400 audit(1771543592.783:844): avc: denied { name_bind } for pid=4011 comm="syz.3.155" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 67.611546][ T3998] total_dirty 4096 [ 67.633097][ T3998] total_writeback 0 [ 67.636978][ T3998] total_workingset_refault_anon 234 [ 67.643069][ T4021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.159'. [ 67.651742][ T4012] capability: warning: `syz.3.155' uses 32-bit capabilities (legacy support in use) [ 67.663949][ T3998] total_workingset_refault_file 1615 [ 67.666921][ T28] audit: type=1400 audit(1771543592.833:845): avc: denied { prog_load } for pid=4011 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.680379][ T3998] total_swap 86016 [ 67.710857][ T4021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4021 comm=syz.4.159 [ 67.718679][ T3998] total_swapcached 434176 [ 67.741813][ T3998] total_pgpgin 10085 [ 67.758339][ T3998] total_pgpgout 10059 [ 67.768453][ T3998] total_pgfault 21319 [ 67.778523][ T3998] total_pgmajfault 153 [ 67.797613][ T3998] total_inactive_anon 0 [ 67.808667][ T3998] total_active_anon 102400 [ 67.813185][ T3998] total_inactive_file 4096 [ 67.823311][ T3998] total_active_file 0 [ 67.827346][ T3998] total_unevictable 0 [ 67.840724][ T3998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.151,pid=3997,uid=0 [ 67.860863][ T3998] Memory cgroup out of memory: Killed process 3998 (syz.2.151) total-vm:96268kB, anon-rss:1352kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 67.992164][ T28] audit: type=1400 audit(1771543592.943:846): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.018809][ T4037] netlink: 10 bytes leftover after parsing attributes in process `syz.2.164'. [ 68.053289][ T28] audit: type=1400 audit(1771543592.983:847): avc: denied { read write } for pid=4013 comm="syz.0.156" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.088725][ T28] audit: type=1400 audit(1771543593.013:848): avc: denied { create } for pid=4013 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 68.112291][ T28] audit: type=1400 audit(1771543593.013:849): avc: denied { prog_load } for pid=4013 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.131977][ T28] audit: type=1400 audit(1771543593.013:850): avc: denied { prog_load } for pid=4013 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.151803][ T28] audit: type=1400 audit(1771543593.013:851): avc: denied { open } for pid=4013 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.567101][ T4059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.173'. [ 68.618480][ T4060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4060 comm=syz.0.173 [ 68.699004][ T4053] ================================================================== [ 68.707230][ T4053] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 68.714213][ T4053] [ 68.716569][ T4053] read-write to 0xffff888100399d2c of 4 bytes by task 4049 on cpu 1: [ 68.724741][ T4053] fifo_open+0x17f/0x5d0 [ 68.729100][ T4053] do_dentry_open+0x4ca/0xa90 [ 68.733906][ T4053] vfs_open+0x37/0x1e0 [ 68.738017][ T4053] path_openat+0x1b70/0x2050 [ 68.742753][ T4053] do_file_open+0x16c/0x290 [ 68.747298][ T4053] do_sys_openat2+0x94/0x130 [ 68.752020][ T4053] __x64_sys_open+0xe6/0x110 [ 68.756656][ T4053] x64_sys_call+0x14b9/0x3020 [ 68.761570][ T4053] do_syscall_64+0x12c/0x370 [ 68.766230][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.772435][ T4053] [ 68.774894][ T4053] read to 0xffff888100399d2c of 4 bytes by task 4053 on cpu 0: [ 68.782647][ T4053] wait_for_partner+0x117/0x1e0 [ 68.787557][ T4053] fifo_open+0x4b1/0x5d0 [ 68.791833][ T4053] do_dentry_open+0x4ca/0xa90 [ 68.796564][ T4053] vfs_open+0x37/0x1e0 [ 68.800853][ T4053] path_openat+0x1b70/0x2050 [ 68.805507][ T4053] do_file_open+0x16c/0x290 [ 68.810250][ T4053] do_sys_openat2+0x94/0x130 [ 68.815009][ T4053] __se_sys_openat2+0x193/0x1f0 [ 68.820175][ T4053] __x64_sys_openat2+0x55/0x70 [ 68.824994][ T4053] x64_sys_call+0x2170/0x3020 [ 68.829892][ T4053] do_syscall_64+0x12c/0x370 [ 68.834522][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.840448][ T4053] [ 68.842799][ T4053] value changed: 0x00000002 -> 0x00000001 [ 68.848550][ T4053] [ 68.850900][ T4053] Reported by Kernel Concurrency Sanitizer on: [ 68.857076][ T4053] CPU: 0 UID: 0 PID: 4053 Comm: syz.3.170 Not tainted syzkaller #0 PREEMPT(full) [ 68.866394][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.876496][ T4053] ================================================================== [ 69.035266][ T4051] syz.4.171 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 69.084144][ T4051] CPU: 1 UID: 0 PID: 4051 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT(full) [ 69.084179][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.084197][ T4051] Call Trace: [ 69.084205][ T4051] [ 69.084295][ T4051] __dump_stack+0x1d/0x30 [ 69.084377][ T4051] dump_stack_lvl+0x95/0xd0 [ 69.084410][ T4051] dump_stack+0x15/0x1b [ 69.084453][ T4051] dump_header+0x80/0x240 [ 69.084477][ T4051] oom_kill_process+0x295/0x350 [ 69.084549][ T4051] out_of_memory+0x97d/0xb80 [ 69.084579][ T4051] try_charge_memcg+0x62e/0xa10 [ 69.084628][ T4051] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 69.084671][ T4051] __swap_cache_prepare_and_add+0x386/0x530 [ 69.084721][ T4051] swap_cache_alloc_folio+0xa2/0x120 [ 69.084756][ T4051] swap_cluster_readahead+0x26e/0x3d0 [ 69.084797][ T4051] swapin_readahead+0xde/0x840 [ 69.084884][ T4051] ? _raw_spin_unlock+0x9/0x30 [ 69.084912][ T4051] ? swap_put_entries_cluster+0x385/0x3a0 [ 69.084952][ T4051] ? swap_put_entries_cluster+0x131/0x3a0 [ 69.085040][ T4051] ? __rcu_read_unlock+0x4e/0x70 [ 69.085069][ T4051] ? swap_cache_get_folio+0x26f/0x280 [ 69.085105][ T4051] do_swap_page+0x309/0x2210 [ 69.085143][ T4051] ? css_rstat_updated+0xbb/0x280 [ 69.085325][ T4051] ? __rcu_read_lock+0x36/0x50 [ 69.085351][ T4051] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 69.085447][ T4051] handle_mm_fault+0xb40/0x3020 [ 69.085541][ T4051] ? vma_start_read+0x1c7/0x2c0 [ 69.085576][ T4051] do_user_addr_fault+0x62f/0x1050 [ 69.085679][ T4051] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 69.085717][ T4051] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 69.085817][ T4051] ? trace_page_fault_user+0x1f/0xe0 [ 69.085859][ T4051] exc_page_fault+0x62/0xa0 [ 69.085895][ T4051] asm_exc_page_fault+0x26/0x30 [ 69.085924][ T4051] RIP: 0033:0x7f9b5287cea0 [ 69.086026][ T4051] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 c4 1c 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 69.086071][ T4051] RSP: 002b:00007fff03b95078 EFLAGS: 00010246 [ 69.086093][ T4051] RAX: 0000000000000000 RBX: 0000555563a10500 RCX: 0000000000000000 [ 69.086111][ T4051] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 0000555563a10808 [ 69.086128][ T4051] RBP: 00007f9b52b37da0 R08: 00007fff03b950d0 R09: 0000000000000000 [ 69.086145][ T4051] R10: 0000000000000000 R11: 0000555563a10808 R12: 0000000000010dd9 [ 69.086161][ T4051] R13: 00007f9b52b3609c R14: 0000000000010b84 R15: 00007f9b52b36090 [ 69.086214][ T4051] [ 69.357902][ T4051] memory: usage 163936kB, limit 307200kB, failcnt 400 [ 69.387479][ T4051] memory+swap: usage 154496kB, limit 9007199254740988kB, failcnt 0 [ 69.408594][ T4051] kmem: usage 151836kB, limit 9007199254740988kB, failcnt 0 [ 69.423519][ T4051] Memory cgroup stats for /syz4: [ 69.423775][ T4051] cache 524288 [ 69.437758][ T4051] rss 8192 [ 69.538679][ T4051] shmem 0 [ 69.548630][ T4051] mapped_file 65536 [ 69.564990][ T4051] dirty 0 [ 69.571563][ T4051] writeback 0 [ 69.583952][ T4051] workingset_refault_anon 24 [ 69.599427][ T4051] workingset_refault_file 754 [ 69.606309][ T4051] swap 192512 [ 69.616120][ T4051] swapcached 208896 [ 69.626914][ T4051] pgpgin 13351 [ 69.637181][ T4051] pgpgout 13219 [ 69.647605][ T4051] pgfault 22506 [ 69.657371][ T4051] pgmajfault 21 [ 69.670586][ T4051] inactive_anon 0 [ 69.680953][ T4051] active_anon 16384 [ 69.687776][ T4051] inactive_file 0 [ 69.697908][ T4051] active_file 524288 [ 69.709140][ T4051] unevictable 0 [ 69.715232][ T4051] hierarchical_memory_limit 314572800 [ 69.728832][ T4051] hierarchical_memsw_limit 9223372036854771712 [ 69.738579][ T4051] total_cache 524288 [ 69.748590][ T4051] total_rss 8192 [ 69.752363][ T4051] total_shmem 0 [ 69.766222][ T4051] total_mapped_file 65536 [ 69.770709][ T4051] total_dirty 0 [ 69.774189][ T4051] total_writeback 0 [ 69.788338][ T4051] total_workingset_refault_anon 24 [ 69.798482][ T4051] total_workingset_refault_file 754 [ 69.808968][ T4051] total_swap 192512 [ 69.812897][ T4051] total_swapcached 208896 [ 69.817369][ T4051] total_pgpgin 13351 [ 69.828747][ T4051] total_pgpgout 13219 [ 69.843384][ T4051] total_pgfault 22506 [ 69.847500][ T4051] total_pgmajfault 21 [ 69.853563][ T4051] total_inactive_anon 0 [ 69.857765][ T4051] total_active_anon 16384 [ 69.872313][ T4051] total_inactive_file 0 [ 69.882430][ T4051] total_active_file 524288 [ 69.892489][ T4051] total_unevictable 0 [ 69.896597][ T4051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.171,pid=4051,uid=0 [ 69.928663][ T4051] Memory cgroup out of memory: Killed process 4051 (syz.4.171) total-vm:96204kB, anon-rss:1224kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000