last executing test programs: 3m42.492635164s ago: executing program 2 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001800310700000000000000000a002000000000000005fc7508001700ffffffff08000600fb7f0000060015000400"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fchdir(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x9, 0x0, &(0x7f0000000080)={0x80, 0x16, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x80004, 0x48000000, 0x0, 0x0, 0x0}) 3m42.366992667s ago: executing program 2 (id=530): remap_file_pages(&(0x7f0000ba1000/0x2000)=nil, 0x2000, 0x0, 0x7f, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ba1000/0x2000)=nil) 3m42.284883179s ago: executing program 2 (id=531): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x13, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvfrom(r0, 0x0, 0x1200, 0x12000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x8000}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000d042abd70000000000000000000e35e57b4034554bc8fb9ab96087e7660769679ec136914d82bf4f8da6fe5a6ff242bb7a326bc3569133d40cb01fbb779da391e7a32ff66f4bbb6dce384d4f0dd8d8f6ba27033d5f1116223f05c16600c2054aba8e440be1e9a0608540c49e4a1bf0a30972f4ee7ff3b711c87b9c6c2f7662c87", @ANYRES32=0x0, @ANYBLOB="01000000000000002c00128009000100626f6e64000000001c00028008001c000e00000005000600010000000500010005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000000000)=0x8, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='none\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00097108000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r8 = openat(r1, &(0x7f0000000080)='./sys/bus/platform/drivers/chipidea-usb2/bind\x00', 0x0, 0x0) write(r8, &(0x7f0000000100)='chipidea-usb2', 0xd) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/chipidea-usb2/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='pcspkr\x00', 0x6) 3m42.172615793s ago: executing program 2 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 3m42.136716533s ago: executing program 2 (id=534): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x4000000, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)='0123:ebcd4', 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x1) 3m41.792975022s ago: executing program 2 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3m41.792776982s ago: executing program 32 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 48.893135514s ago: executing program 4 (id=3028): syz_read_part_table(0x59c, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTgIRCX/IigoMdBINLo0IcdEgGKzHNYkRakdJZcNBBcHCQlOjsxz+g+AXiInZ2FCOIQpwkozgXFJdMKa2P0NZSsGDgletaHu5z7vPx8DuBL1o8/NZsNmMhhGbi7at/PMqPFbsnRiZ/CCEWfg4h5L/5+s+ZWNTxsutJVJeiupjI1HYuRx+PPl/13FRTe/Fo/jQewi8hhLm7/eR/nRx7+2X5gI5z58mV1YXC2lJu9rawfD8405fvWs/Pbw7tZstTndnp6GGdxltzfqo2fHDdLD1sfepvq9YamYuoL+3Bfkj/zH+7o1KvNMZ7DxcH0u31s/JGlPuT/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHd2nDtPrqwuFNaWcrO3heX7wZm+fNd6fn5zaDdbnurMTsef+07jrTk/VRs+uG6WHrY+9bdVa43MRdSXjr1a+t2v73MlWujb8Pf8tzsq9UpjvPdwcSDdXj8rb0S5P73OHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgX+XHit0TI5NtL/X3Nz/1/PFtJp7rWDR+En1L0XgxkantXI4+Hn2+6rmppvYmEiEk/rLv3N1+8qsW/QP/3+8BAAD//xkRhkM=") 48.869711915s ago: executing program 4 (id=3030): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000c40)='./file2\x00', 0x10440, &(0x7f0000000080), 0x1, 0x531, &(0x7f0000001340)="$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") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x6, 0x3, 0x2, 0x0, 0x8000000000000001, 0x6020, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8000000000000001, 0x77b57ec4}, 0x2001, 0x81, 0x48e39f76, 0x2, 0x9, 0x1, 0x7ff, 0x0, 0x4, 0x0, 0x44ab0344}, r7, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, r7, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) r9 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb005d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0xc}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, &(0x7f000000cd00)=[{0x40, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000740)=""/228, 0xe4}]}, {0xd, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/123, 0x7b}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/132, 0x84}]}, {0x7, 0x0, &(0x7f0000003400)=[{&(0x7f0000003340)=""/83, 0x53}, {&(0x7f00000033c0)=""/58, 0x3a}]}, {0x9, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003440)=""/43, 0x2b}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/97, 0x61}, {&(0x7f0000004500)=""/90, 0x5a}, {&(0x7f0000004580)=""/150, 0x96}, {&(0x7f0000004640)=""/51, 0x33}, {&(0x7f0000004680)=""/4, 0x4}]}, {0x5, 0x0, &(0x7f0000005940)=[{&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/212, 0xd4}, {&(0x7f0000005840)=""/21, 0x15}, {&(0x7f0000005880)=""/78, 0x4e}, {&(0x7f0000005900)=""/32, 0x20}]}, {0x256e, 0x0, &(0x7f0000005e80)=[{&(0x7f00000059c0)=""/5, 0x5}, {&(0x7f0000005a00)=""/206, 0xce}, {&(0x7f0000005b00)=""/150, 0x96}, {&(0x7f0000005bc0)=""/252, 0xfc}, {&(0x7f0000005cc0)=""/44, 0x2c}, {&(0x7f0000005d00)=""/182, 0xb6}, {&(0x7f0000005dc0)=""/189, 0xbd}]}, {0xff, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005f00)=""/160, 0xa0}, {&(0x7f0000005fc0)=""/18, 0x12}, {&(0x7f0000006000)=""/120, 0x78}, {&(0x7f0000006080)=""/35, 0x23}]}, {0x4, 0x0, &(0x7f00000078c0)=[{&(0x7f0000006100)=""/220, 0xdc}, {&(0x7f0000006200)=""/111, 0x6f}, {&(0x7f0000006280)=""/182, 0xb6}, {&(0x7f0000006340)=""/198, 0xc6}, {&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/196, 0xc4}, {&(0x7f0000007540)=""/187, 0xbb}, {&(0x7f0000007600)=""/234, 0xea}, {&(0x7f0000007700)=""/228, 0xe4}, {&(0x7f0000007800)=""/154, 0x9a}]}, {0xff, 0x0, &(0x7f0000007b00)=[{&(0x7f0000007980)=""/218, 0xda}, {&(0x7f0000007a80)=""/30, 0x1e}, {&(0x7f0000007ac0)=""/40, 0x28}]}, {0x4, 0x0, &(0x7f0000008200)=[{&(0x7f0000007b40)=""/182, 0xb6}, {&(0x7f0000007c00)=""/201, 0xc9}, {&(0x7f0000007d00)=""/198, 0xc6}, {&(0x7f0000007e00)=""/10, 0xa}, {&(0x7f0000007e40)=""/78, 0x4e}, {&(0x7f0000007ec0)=""/122, 0x7a}, {&(0x7f0000007f40)=""/192, 0xc0}, {&(0x7f0000008000)=""/114, 0x72}, {&(0x7f0000008080)=""/118, 0x76}, {&(0x7f0000008100)=""/251, 0xfb}]}, {0x7f, 0x0, &(0x7f0000009340)=[{&(0x7f00000082c0)=""/4096, 0x1000}, {&(0x7f00000092c0)=""/69, 0x45}]}, {0x0, 0x0, &(0x7f000000a500)=[{&(0x7f0000009380)=""/143, 0x8f}, {&(0x7f0000009440)=""/171, 0xab}, {&(0x7f0000009500)=""/4096, 0x1000}]}, {0x8001, 0x0, &(0x7f000000a780)=[{&(0x7f0000000c80)=""/75, 0x4b}, {&(0x7f000000a5c0)=""/7, 0x7}, {&(0x7f000000a600)=""/189, 0xbd}, {&(0x7f000000a6c0)=""/162, 0xa2}]}, {0x2, 0x0, &(0x7f000000cb00)=[{&(0x7f000000a7c0)=""/4096, 0x1000}, {&(0x7f000000b7c0)=""/249, 0xf9}, {&(0x7f000000b8c0)=""/124, 0x7c}, {&(0x7f000000b940)=""/173, 0xad}, {&(0x7f000000ba00)=""/4096, 0x1000}, {&(0x7f000000ca00)=""/202, 0xca}]}, {0x9, 0x0, &(0x7f000000ccc0)=[{&(0x7f000000cb80)=""/77, 0x4d}, {&(0x7f000000cc00)=""/135, 0x87}]}], 0xf) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800800050000000000040012"], 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socket$nl_route(0x10, 0x3, 0x0) 48.64256729s ago: executing program 4 (id=3033): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 48.599636822s ago: executing program 4 (id=3037): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0xfffffffd, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 48.532614704s ago: executing program 4 (id=3039): openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x416203, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fcntl$notify(r0, 0x402, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f00000002c0)=""/101, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x1b0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00001e1000/0x2000)=nil, 0x2000, 0x13) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) socket(0x3, 0x6, 0x7f) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = semget(0x0, 0x3, 0x8) semctl$IPC_RMID(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r5], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000340)='./sys\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=""/225, 0xe1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='0000:00:07.0', 0xc) 47.393114292s ago: executing program 4 (id=3049): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00') r0 = socket(0x1, 0x3, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x10, 0x2, 0x10) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x22020600) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0xff, @local, 0x108}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket(0x25, 0x3, 0xbf) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 47.316656334s ago: executing program 33 (id=3049): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00') r0 = socket(0x1, 0x3, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x10, 0x2, 0x10) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x22020600) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0xff, @local, 0x108}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket(0x25, 0x3, 0xbf) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.820999179s ago: executing program 5 (id=3554): futex_waitv(0x0, 0x0, 0x60ff, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000001) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008840}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000180)) epoll_create1(0x80000) pipe(&(0x7f0000000080)) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 4.412260199s ago: executing program 5 (id=3563): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4.077119117s ago: executing program 5 (id=3570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 3.98198357s ago: executing program 5 (id=3576): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', r1, r0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffe3f}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0)=0x12, &(0x7f0000000700), 0x2000000}, 0x20) 3.924523541s ago: executing program 5 (id=3580): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3.917405301s ago: executing program 5 (id=3581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f', 0x33) 3.263860728s ago: executing program 0 (id=3587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000009000200737960310000000008000a40fffffffc0800054000000024080003400000004408000f"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, &(0x7f0000000300)={0x2, 0x9}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="1577e3a4d3876f1c2d18e032d98c077a15ce4cc2260ed21c582736"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000054) 3.087930542s ago: executing program 0 (id=3590): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x38}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x106) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x3, 0x7}, {0xa, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20048890) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 2.584377515s ago: executing program 6 (id=3596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x83595b8d09592993, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x6}, {0x2, 0x2}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (fail_nth: 5) 2.445009708s ago: executing program 6 (id=3598): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000670000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() 2.444786619s ago: executing program 0 (id=3599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000001}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 2.301874942s ago: executing program 0 (id=3601): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00\x00'}}]}, 0x2, 0x78c, &(0x7f0000001740)="$eJzs3d9rW1UcAPDvzZp266arIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FHSI4Iug4oOgL3t2Ot989cer/gG++yAbU7thxQep3DTpsjXp0q5ppv184G7n3HvT7/nec3+c5F6SAHat4fSfTMShiPgwiThYn59ERLZW6os4sbre8tJiIZ2SWFl5/fekts6tpcVCNL0mtb9eeTwivn8v4nBmfdzK/MJUvlQqztbro9Xp86OV+YUj56bzk8XJ4syxsfHxo8efO35s+3L986eFA9c/euXpr078/e5jVz/4IYkTcaC+rDmP7TIcw/Vtkk034R1ejre3O1xPJb1uAFuSHpp7Vo/yOJSk5b5eNwkA6LJ0FLoCAOwyies/AOwyjc8Bbi0tFhpTbz+R2Fk3XoqIvav5N+5vri7pq9+z21u7Dzp4K7njzkgSEUPbEH84Ij7/5s0r6RRdug8J0Mo7lyLizNDw+vN/su6Zhc16poN1hu+qr8X/OXuf0YF7+TYd/zzfavyXWRv/RIvxz0CLY3cr2h7/azLXtiFMW+n478WmZ9uWm/KvG9pTrz1UG/Nlk7PnSsX03PZwRIxEdiCtj20QY+TmPzfbLWse//3x8VtfpPHT/2+vkbnWN3Dnayby1fz95NzsxqWIJ/pa5Z+s9X/SZvx7qsMYr77w/mftlqX5p/k2pvX5d9fK5YinWvb/7Sfakg2fTxyt7Q6jjZ2iha9/+XSwXfzm/k+n5aXFlSTiyvZn2lra/4Mb5z+UND+vWdl8jB8vH/yu3bIW+Rca74VWtd7/+5M3auX++ryL+Wp1diyiP3lt/fyjt1/bqDfWT/MfebL18b/R/p+OTs50mH/f9d++3Hr+3ZXmP7Gp/t984ery1J528Tvr//FaaaQ+p5PzX6cNvJ9tBwAAAAAAAAAAAAAAAAAAAAAAAACdykTEgUgyubVyJpPLrf6G96MxmCmVK9XDZ8tzMxNR+63sochmGl91ebDp+1DH6t+H36gfvav+bEQ8EhGfDOyr1XOFcmmi18kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+Nr//n/p1oNetAwC6Zm+vGwAA7DjXfwDYfVz/AWD36fz6v6+r7QAAdo73/wCw+7j+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GWnTp5Mp5W/lhYLaX3iwvzcVPnCkYliZSo3PVfIFcqz53OT5fJkqZgrlKfv9fdK5fL58ZiZuzhaLVaqo5X5hdPT5bmZ6ulz0/nJ4ulidkeyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDNqcwvTOVLpeLsThaSXgT9PxT66r32oLRnS4VMI4mdCtrfrSwegI3ZvUIPT0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/yH/BgAA//+WwyD1") membarrier(0x4, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) io_cancel(0x0, 0x0, &(0x7f0000000480)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000033a40)=""/102391, 0x18ff7) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x0, 0x338, 0x200, 0x428, 0x200, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x4}, {0xffff, 0x2}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x9, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x27, 0x28, 0x1}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'nr0\x00', 'syzkaller0\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x27, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'geneve1\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) 1.451406844s ago: executing program 0 (id=3611): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000001}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.450733253s ago: executing program 6 (id=3612): futex_waitv(0x0, 0x0, 0x60ff, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000001) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008840}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000180)) epoll_create1(0x80000) pipe(&(0x7f0000000080)) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.364593456s ago: executing program 3 (id=3614): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 1.308712337s ago: executing program 3 (id=3616): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.240025349s ago: executing program 3 (id=3619): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_skbmod={0x38, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x9, 0x6, "f3f80055c9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x30, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x80}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @mcast1, 0x4}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/14, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(r2, &(0x7f0000003840)=[{&(0x7f0000002500)=""/54, 0x36}], 0x1, 0x5efe352f, 0xc00) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0xfffffffffffffc2b) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x29, "4b721b782b17a7b6a00d962a64048655bcb0b0e6aceb1791b0551fdb8a571f6b3c1cb52ecd721b8ac2"}}) 1.204042299s ago: executing program 1 (id=3620): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) socket$kcm(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x6}, 0x300, 0x1ff, 0x8, 0x7, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r7) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000380)='.dead\x00', &(0x7f0000000280)=@keyring) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000780)=@chain={'key_or_keyring:', r8}) 1.063104473s ago: executing program 0 (id=3621): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00\x00'}}]}, 0x2, 0x78c, &(0x7f0000001740)="$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") membarrier(0x4, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) io_cancel(0x0, 0x0, &(0x7f0000000480)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0) read$msr(r4, &(0x7f0000033a40)=""/102391, 0x18ff7) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x0, 0x338, 0x200, 0x428, 0x200, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x4}, {0xffff, 0x2}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x9, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x27, 0x28, 0x1}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'nr0\x00', 'syzkaller0\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x27, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'geneve1\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) 1.054888853s ago: executing program 6 (id=3622): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000670000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() 1.008798314s ago: executing program 3 (id=3623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 991.128285ms ago: executing program 3 (id=3624): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00\x00'}}]}, 0x2, 0x78c, &(0x7f0000001740)="$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") membarrier(0x4, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) io_cancel(0x0, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0) read$msr(r4, &(0x7f0000033a40)=""/102391, 0x18ff7) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000010c0)=""/4108, 0x100c}], 0x1, 0x800, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x0, 0x338, 0x200, 0x428, 0x200, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x4}, {0xffff, 0x2}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x9, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x27, 0x28, 0x1}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'nr0\x00', 'syzkaller0\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x27, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'geneve1\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 872.644348ms ago: executing program 1 (id=3625): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 787.37844ms ago: executing program 1 (id=3626): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000080)={[{@test_dummy_encryption}, {@dioread_nolock}]}, 0x1, 0x587, &(0x7f00000045c0)="$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") (async) readlink(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4) (async) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8905, &(0x7f0000000100)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x40bf831, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000300000004000000020000000e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setfsgid(0xee01) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async) unshare(0xc040480) syz_io_uring_setup(0x63f0, &(0x7f0000000000)={0x0, 0x87da, 0x2, 0x80002, 0x124}, 0x0, 0x0, 0x0) (async) unshare(0x20000400) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x7, 0x96, 0x8f, 0x1, 0x5, @broadcast}, 0x10) 529.165296ms ago: executing program 1 (id=3627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac14141605000300", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 492.136987ms ago: executing program 1 (id=3628): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 112.249017ms ago: executing program 1 (id=3629): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[], 0x30, 0x4000000}, 0x20000000) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) 61.474098ms ago: executing program 6 (id=3630): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001e14"], 0x38}}, 0x0) 39.481379ms ago: executing program 3 (id=3631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000001}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 0s ago: executing program 6 (id=3632): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000c, 0x810, r3, 0x40658000) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) kernel console output (not intermixed with test programs): x_hash_allocate+0x192/0x920 [ 263.645435][T13622] ? futex_hash_allocate+0x192/0x920 [ 263.645486][T13622] futex_hash_allocate+0x192/0x920 [ 263.645508][T13622] ? cap_task_prctl+0x13f/0x6b0 [ 263.645553][T13622] futex_hash_prctl+0xd8/0xf0 [ 263.645649][T13622] __se_sys_prctl+0x4f4/0x13b0 [ 263.645746][T13622] __x64_sys_prctl+0x67/0x80 [ 263.645773][T13622] x64_sys_call+0x2533/0x3020 [ 263.645803][T13622] do_syscall_64+0x136/0x3c0 [ 263.645877][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.645968][T13622] RIP: 0033:0x7feb66d2e019 [ 263.645983][T13622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.646002][T13622] RSP: 002b:00007feb65787028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 263.646030][T13622] RAX: ffffffffffffffda RBX: 00007feb66fb5fa0 RCX: 00007feb66d2e019 [ 263.646049][T13622] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 263.646118][T13622] RBP: 00007feb66dc500c R08: 0000000000000000 R09: 0000000000000000 [ 263.646131][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.646144][T13622] R13: 00007feb66fb6038 R14: 00007feb66fb5fa0 R15: 00007ffdae790628 [ 263.646163][T13622] [ 263.646171][T13622] memory: usage 268712kB, limit 307200kB, failcnt 1679 [ 263.956598][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.964644][T13536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.988021][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.007279][T13622] memory+swap: usage 2596kB, limit 9007199254740988kB, failcnt 0 [ 264.010948][T13536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.015380][T13622] kmem: usage 1992kB, limit 9007199254740988kB, failcnt 0 [ 264.028860][T13622] Memory cgroup stats for /syz1: [ 264.029203][T13622] cache 4096 [ 264.037371][T13622] rss 40960 [ 264.040640][T13622] shmem 4096 [ 264.043862][T13622] mapped_file 4096 [ 264.045130][T13536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.047597][T13622] dirty 0 [ 264.047608][T13622] writeback 0 [ 264.060962][T13622] workingset_refault_anon 383 [ 264.071740][T13622] workingset_refault_file 3929 [ 264.076527][T13622] swap 389120 [ 264.079823][T13622] swapcached 37089280 [ 264.083884][T13622] pgpgin 226502 [ 264.087359][T13622] pgpgout 226486 [ 264.091007][T13622] pgfault 239869 [ 264.094579][T13622] pgmajfault 274 [ 264.098131][T13622] inactive_anon 0 [ 264.101832][T13622] active_anon 57344 [ 264.105660][T13622] inactive_file 0 [ 264.109326][T13622] active_file 0 [ 264.112883][T13622] unevictable 0 [ 264.116479][T13622] hierarchical_memory_limit 314572800 [ 264.121901][T13622] hierarchical_memsw_limit 9223372036854771712 [ 264.128130][T13622] total_cache 4096 [ 264.171856][T13622] total_rss 40960 [ 264.176052][T13622] total_shmem 4096 [ 264.179822][T13622] total_mapped_file 4096 [ 264.184078][T13622] total_dirty 0 [ 264.188945][T13622] total_writeback 0 [ 264.193108][T13622] total_workingset_refault_anon 383 [ 264.198648][T13622] total_workingset_refault_file 3929 [ 264.203986][T13622] total_swap 389120 [ 264.207922][T13622] total_swapcached 37089280 [ 264.212473][T13622] total_pgpgin 226502 [ 264.216561][T13622] total_pgpgout 226486 [ 264.220685][T13622] total_pgfault 239869 [ 264.224794][T13622] total_pgmajfault 274 [ 264.228899][T13622] total_inactive_anon 0 [ 264.233246][T13622] total_active_anon 57344 [ 264.243625][T13622] total_inactive_file 0 [ 264.247905][T13622] total_active_file 0 [ 264.251915][T13622] total_unevictable 0 [ 264.256006][T13622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3126,pid=13620,uid=0 [ 264.270874][T13622] Memory cgroup out of memory: Killed process 13620 (syz.1.3126) total-vm:94188kB, anon-rss:1352kB, file-rss:22032kB, shmem-rss:4kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 264.399639][T13664] loop0: detected capacity change from 0 to 1024 [ 264.417377][T13536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.426582][T13664] EXT4-fs: dax option not supported [ 264.451496][T13669] netlink: 'syz.6.3137': attribute type 1 has an invalid length. [ 264.470914][T13667] loop0: detected capacity change from 0 to 256 [ 264.480662][T13536] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.494861][T13667] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.515914][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.523138][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.559776][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3135'. [ 264.578579][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.586171][ T9498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.655010][T13679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7172 sclass=netlink_route_socket pid=13679 comm=syz.6.3141 [ 264.661773][T13536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.720553][T13683] loop0: detected capacity change from 0 to 512 [ 264.762984][T13683] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.812217][T13683] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 264.831909][T13683] FAT-fs (loop0): Filesystem has been set read-only [ 265.036766][T12493] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 265.073986][T12493] CPU: 1 UID: 0 PID: 12493 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 265.074096][T12493] Tainted: [W]=WARN [ 265.074103][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.074116][T12493] Call Trace: [ 265.074123][T12493] [ 265.074131][T12493] __dump_stack+0x1d/0x30 [ 265.074179][T12493] dump_stack_lvl+0x95/0xd0 [ 265.074205][T12493] dump_stack+0x15/0x1b [ 265.074225][T12493] dump_header+0x80/0x240 [ 265.074332][T12493] oom_kill_process+0x295/0x350 [ 265.074372][T12493] out_of_memory+0x981/0xbc0 [ 265.074458][T12493] try_charge_memcg+0x621/0xa00 [ 265.074494][T12493] charge_memcg+0x6d/0x120 [ 265.074526][T12493] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 265.074616][T12493] swap_cache_alloc_folio+0x47b/0x5e0 [ 265.074713][T12493] swap_cluster_readahead+0x2b1/0x460 [ 265.074760][T12493] swapin_readahead+0xd8/0x8a0 [ 265.074793][T12493] ? tick_program_event+0x79/0xc0 [ 265.074871][T12493] ? _raw_spin_unlock+0x9/0x30 [ 265.074910][T12493] ? __rcu_read_unlock+0x4e/0x70 [ 265.074935][T12493] ? swap_cache_get_folio+0x1f7/0x200 [ 265.075008][T12493] do_swap_page+0x2a2/0x1ec0 [ 265.075113][T12493] ? __schedule+0x799/0xd10 [ 265.075179][T12493] ? __rcu_read_lock+0x36/0x50 [ 265.075286][T12493] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 265.075317][T12493] handle_mm_fault+0xb3c/0x2da0 [ 265.075365][T12493] do_user_addr_fault+0x634/0x1060 [ 265.075435][T12493] ? trace_page_fault_user+0x1f/0xa0 [ 265.075470][T12493] exc_page_fault+0x62/0xa0 [ 265.075489][T12493] asm_exc_page_fault+0x26/0x30 [ 265.075509][T12493] RIP: 0033:0x7feb66ce9197 [ 265.075602][T12493] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 265.075627][T12493] RSP: 002b:00007ffdae790920 EFLAGS: 00010202 [ 265.075649][T12493] RAX: 0000000000000000 RBX: 000055558c235500 RCX: 00007feb66ce9197 [ 265.075709][T12493] RDX: 00007ffdae790960 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.075727][T12493] RBP: 00007ffdae7909cc R08: 0000000000000000 R09: 0000000000000000 [ 265.075744][T12493] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 265.075761][T12493] R13: 00000000000927c0 R14: 0000000000040ab8 R15: 00007ffdae790a20 [ 265.075787][T12493] [ 265.431011][T13536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.467946][T12493] memory: usage 2256kB, limit 307200kB, failcnt 1766 [ 265.474764][T12493] memory+swap: usage 2624kB, limit 9007199254740988kB, failcnt 0 [ 265.482600][T12493] kmem: usage 1756kB, limit 9007199254740988kB, failcnt 0 [ 265.489870][T12493] Memory cgroup stats for /syz1: [ 265.490138][T12493] cache 0 [ 265.498216][T12493] rss 81920 [ 265.501360][T12493] shmem 0 [ 265.504328][T12493] mapped_file 0 [ 265.507893][T12493] dirty 0 [ 265.511028][T12493] writeback 0 [ 265.514416][T12493] workingset_refault_anon 458 [ 265.519319][T12493] workingset_refault_file 3929 [ 265.524248][T12493] swap 368640 [ 265.527957][T12493] swapcached 37412864 [ 265.532372][T12493] pgpgin 226877 [ 265.536116][T12493] pgpgout 226856 [ 265.539791][T12493] pgfault 240563 [ 265.543528][T12493] pgmajfault 338 [ 265.547813][T12493] inactive_anon 0 [ 265.551554][T12493] active_anon 61440 [ 265.555499][T12493] inactive_file 0 [ 265.559192][T12493] active_file 0 [ 265.562792][T12493] unevictable 0 [ 265.566383][T12493] hierarchical_memory_limit 314572800 [ 265.571796][T12493] hierarchical_memsw_limit 9223372036854771712 [ 265.578031][T12493] total_cache 0 [ 265.581622][T12493] total_rss 81920 [ 265.602021][T12493] total_shmem 0 [ 265.614423][T12493] total_mapped_file 0 [ 265.618610][T12493] total_dirty 0 [ 265.622118][T12493] total_writeback 0 [ 265.626049][T12493] total_workingset_refault_anon 458 [ 265.631413][T12493] total_workingset_refault_file 3929 [ 265.637328][T12493] total_swap 368640 [ 265.641573][T12493] total_swapcached 37412864 [ 265.646270][T12493] total_pgpgin 226877 [ 265.693561][T12493] total_pgpgout 226856 [ 265.697895][T12493] total_pgfault 240563 [ 265.705864][T12493] total_pgmajfault 338 [ 265.709981][T12493] total_inactive_anon 0 [ 265.714208][T12493] total_active_anon 61440 [ 265.718718][T12493] total_inactive_file 0 [ 265.722904][T12493] total_active_file 0 [ 265.727041][T12493] total_unevictable 0 [ 265.731127][T12493] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3144,pid=13688,uid=0 [ 265.746069][T12493] Memory cgroup out of memory: OOM victim 13688 (syz.1.3144) is already exiting. Skip killing the task [ 265.770653][T13713] atomic_op ffff888104b0c928 conn xmit_atomic 0000000000000000 [ 265.832442][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3151'. [ 265.849460][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'. [ 265.875491][T13715] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3149'. [ 265.889936][T13536] veth0_vlan: entered promiscuous mode [ 265.898624][T13536] veth1_vlan: entered promiscuous mode [ 265.912606][T13536] veth0_macvtap: entered promiscuous mode [ 265.920777][T13536] veth1_macvtap: entered promiscuous mode [ 265.932245][T13536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.941249][T13536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.965577][T13730] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3153'. [ 265.990194][ T9488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.999878][ T9488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.024702][ T9488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.147779][ T9505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.163206][T13738] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3105'. [ 266.238540][T13728] syz.5.3147 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 266.265622][T13728] CPU: 0 UID: 0 PID: 13728 Comm: syz.5.3147 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 266.265724][T13728] Tainted: [W]=WARN [ 266.265734][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.265828][T13728] Call Trace: [ 266.265837][T13728] [ 266.265848][T13728] __dump_stack+0x1d/0x30 [ 266.265880][T13728] dump_stack_lvl+0x95/0xd0 [ 266.265928][T13728] dump_stack+0x15/0x1b [ 266.266012][T13728] dump_header+0x80/0x240 [ 266.266040][T13728] oom_kill_process+0x295/0x350 [ 266.266076][T13728] out_of_memory+0x981/0xbc0 [ 266.266130][T13728] try_charge_memcg+0x621/0xa00 [ 266.266156][T13728] ? __rcu_read_unlock+0x4e/0x70 [ 266.266200][T13728] __memcg_kmem_charge_page+0x199/0x3a0 [ 266.266383][T13728] __alloc_frozen_pages_noprof+0x18a/0x350 [ 266.266419][T13728] alloc_pages_mpol+0xa9/0x1d0 [ 266.266450][T13728] alloc_pages_noprof+0x8f/0x140 [ 266.266581][T13728] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 266.266650][T13728] __kvmalloc_node_noprof+0x3a0/0x590 [ 266.266685][T13728] ? futex_hash_allocate+0x192/0x920 [ 266.266782][T13728] ? futex_hash_allocate+0x192/0x920 [ 266.266846][T13728] ? futex_hash_allocate+0x192/0x920 [ 266.266870][T13728] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 266.266907][T13728] futex_hash_allocate+0x192/0x920 [ 266.266952][T13728] ? cap_task_prctl+0x13f/0x6b0 [ 266.267082][T13728] futex_hash_prctl+0xd8/0xf0 [ 266.267102][T13728] __se_sys_prctl+0x4f4/0x13b0 [ 266.267183][T13728] __x64_sys_prctl+0x67/0x80 [ 266.267215][T13728] x64_sys_call+0x2533/0x3020 [ 266.267247][T13728] do_syscall_64+0x136/0x3c0 [ 266.267294][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.267334][T13728] RIP: 0033:0x7fccba67e019 [ 266.267355][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.267381][T13728] RSP: 002b:00007fccb90b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 266.267408][T13728] RAX: ffffffffffffffda RBX: 00007fccba906090 RCX: 00007fccba67e019 [ 266.267428][T13728] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 266.267443][T13728] RBP: 00007fccba71500c R08: 0000000000000000 R09: 0000000000000000 [ 266.267532][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.267549][T13728] R13: 00007fccba906128 R14: 00007fccba906090 R15: 00007fff07b2a9f8 [ 266.267576][T13728] [ 266.271254][T13728] memory: usage 269240kB, limit 307200kB, failcnt 1515 [ 266.545124][T13728] memory+swap: usage 49136kB, limit 9007199254740988kB, failcnt 0 [ 266.552974][T13728] kmem: usage 45088kB, limit 9007199254740988kB, failcnt 0 [ 266.560184][T13728] Memory cgroup stats for /syz5: [ 266.560485][T13728] cache 0 [ 266.568369][T13728] rss 135168 [ 266.571585][T13728] shmem 0 [ 266.574536][T13728] mapped_file 0 [ 266.578046][T13728] dirty 0 [ 266.580992][T13728] writeback 0 [ 266.584290][T13728] workingset_refault_anon 793 [ 266.588988][T13728] workingset_refault_file 0 [ 266.593506][T13728] swap 3579904 [ 266.596899][T13728] swapcached 14458880 [ 266.600900][T13728] pgpgin 196642 [ 266.604472][T13728] pgpgout 196601 [ 266.608122][T13728] pgfault 205847 [ 266.611715][T13728] pgmajfault 503 [ 266.615279][T13728] inactive_anon 0 [ 266.618930][T13728] active_anon 167936 [ 266.622884][T13728] inactive_file 0 [ 266.626528][T13728] active_file 0 [ 266.630607][T13732] SET target dimension over the limit! [ 266.636678][T13728] unevictable 0 [ 266.640169][T13728] hierarchical_memory_limit 314572800 [ 266.655141][T13728] hierarchical_memsw_limit 9223372036854771712 [ 266.661365][T13728] total_cache 0 [ 266.664832][T13728] total_rss 135168 [ 266.668578][T13728] total_shmem 0 [ 266.672104][T13728] total_mapped_file 0 [ 266.676101][T13728] total_dirty 0 [ 266.679646][T13728] total_writeback 0 [ 266.683467][T13728] total_workingset_refault_anon 793 [ 266.688681][T13728] total_workingset_refault_file 0 [ 266.693731][T13728] total_swap 3579904 [ 266.697644][T13728] total_swapcached 14458880 [ 266.702164][T13728] total_pgpgin 196642 [ 266.706158][T13728] total_pgpgout 196601 [ 266.710271][T13728] total_pgfault 205847 [ 266.714407][T13728] total_pgmajfault 503 [ 266.718493][T13728] total_inactive_anon 0 [ 266.722656][T13728] total_active_anon 167936 [ 266.727120][T13728] total_inactive_file 0 [ 266.731292][T13728] total_active_file 0 [ 266.735305][T13728] total_unevictable 0 [ 266.739307][T13728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3147,pid=13707,uid=0 [ 266.857363][T13728] Memory cgroup out of memory: Killed process 13707 (syz.5.3147) total-vm:96368kB, anon-rss:1380kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 267.183644][T13755] syz.1.3159 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 267.222142][T13755] CPU: 1 UID: 0 PID: 13755 Comm: syz.1.3159 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 267.222181][T13755] Tainted: [W]=WARN [ 267.222188][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.222203][T13755] Call Trace: [ 267.222212][T13755] [ 267.222245][T13755] __dump_stack+0x1d/0x30 [ 267.222281][T13755] dump_stack_lvl+0x95/0xd0 [ 267.222302][T13755] dump_stack+0x15/0x1b [ 267.222322][T13755] dump_header+0x80/0x240 [ 267.222392][T13755] oom_kill_process+0x295/0x350 [ 267.222446][T13755] out_of_memory+0x981/0xbc0 [ 267.222521][T13755] try_charge_memcg+0x621/0xa00 [ 267.222540][T13755] ? __rcu_read_unlock+0x4e/0x70 [ 267.222576][T13755] __memcg_kmem_charge_page+0x199/0x3a0 [ 267.222615][T13755] __alloc_frozen_pages_noprof+0x18a/0x350 [ 267.222682][T13755] alloc_pages_mpol+0xa9/0x1d0 [ 267.222791][T13755] alloc_pages_noprof+0x8f/0x140 [ 267.222822][T13755] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 267.222870][T13755] __kvmalloc_node_noprof+0x3a0/0x590 [ 267.222913][T13755] ? futex_hash_allocate+0x192/0x920 [ 267.222936][T13755] ? futex_hash_allocate+0x192/0x920 [ 267.222957][T13755] ? futex_hash_allocate+0x192/0x920 [ 267.222985][T13755] futex_hash_allocate+0x192/0x920 [ 267.223016][T13755] ? cap_task_prctl+0x13f/0x6b0 [ 267.223059][T13755] futex_hash_prctl+0xd8/0xf0 [ 267.223151][T13755] __se_sys_prctl+0x4f4/0x13b0 [ 267.223178][T13755] __x64_sys_prctl+0x67/0x80 [ 267.223222][T13755] x64_sys_call+0x2533/0x3020 [ 267.223253][T13755] do_syscall_64+0x136/0x3c0 [ 267.223289][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.223310][T13755] RIP: 0033:0x7feb66d2e019 [ 267.223380][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.223399][T13755] RSP: 002b:00007feb65787028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 267.223420][T13755] RAX: ffffffffffffffda RBX: 00007feb66fb5fa0 RCX: 00007feb66d2e019 [ 267.223434][T13755] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 267.223451][T13755] RBP: 00007feb66dc500c R08: 0000000000000000 R09: 0000000000000000 [ 267.223538][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.223550][T13755] R13: 00007feb66fb6038 R14: 00007feb66fb5fa0 R15: 00007ffdae790628 [ 267.223656][T13755] [ 267.223757][T13755] memory: usage 307200kB, limit 307200kB, failcnt 1958 [ 267.503696][T13773] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3164'. [ 267.609262][T13755] memory+swap: usage 2664kB, limit 9007199254740988kB, failcnt 0 [ 267.621012][T13755] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 267.628778][T13755] Memory cgroup stats for /syz1: [ 267.629197][T13755] cache 0 [ 267.637131][T13774] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3163'. [ 267.637269][T13755] rss 4096 [ 267.637281][T13755] shmem 0 [ 267.653287][T13755] mapped_file 0 [ 267.657045][T13755] dirty 0 [ 267.660021][T13755] writeback 0 [ 267.663403][T13755] workingset_refault_anon 518 [ 267.668397][T13755] workingset_refault_file 3929 [ 267.678232][T13778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7172 sclass=netlink_route_socket pid=13778 comm=syz.6.3166 [ 267.691126][T13755] swap 454656 [ 267.694780][T13755] swapcached 37679104 [ 267.723618][T13755] pgpgin 227128 [ 267.734400][T13755] pgpgout 227127 [ 267.738209][T13755] pgfault 241038 [ 267.741793][T13755] pgmajfault 383 [ 267.745721][T13755] inactive_anon 0 [ 267.749415][T13755] active_anon 0 [ 267.752898][T13755] inactive_file 0 [ 267.757002][T13755] active_file 0 [ 267.761130][T13755] unevictable 0 [ 267.765204][T13755] hierarchical_memory_limit 314572800 [ 267.771968][T13755] hierarchical_memsw_limit 9223372036854771712 [ 267.780238][T13755] total_cache 0 [ 267.783786][T13755] total_rss 4096 [ 267.788899][T13755] total_shmem 0 [ 267.792657][T13755] total_mapped_file 0 [ 267.797106][T13755] total_dirty 0 [ 267.800732][T13755] total_writeback 0 [ 267.804831][T13755] total_workingset_refault_anon 518 [ 267.810120][T13755] total_workingset_refault_file 3929 [ 267.815556][T13755] total_swap 454656 [ 267.819637][T13755] total_swapcached 37679104 [ 267.825046][T13755] total_pgpgin 227128 [ 267.832142][T13755] total_pgpgout 227127 [ 267.843081][T13755] total_pgfault 241038 [ 267.847186][T13755] total_pgmajfault 383 [ 267.851279][T13755] total_inactive_anon 0 [ 267.855442][T13755] total_active_anon 0 [ 267.859497][T13755] total_inactive_file 0 [ 267.863726][T13755] total_active_file 0 [ 267.867764][T13755] total_unevictable 0 [ 267.871828][T13755] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3159,pid=13753,uid=0 [ 267.886675][T13755] Memory cgroup out of memory: Killed process 13753 (syz.1.3159) total-vm:94188kB, anon-rss:1248kB, file-rss:22032kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 267.935584][T13796] lo speed is unknown, defaulting to 1000 [ 268.193236][T13812] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3178'. [ 268.689323][T13839] lo speed is unknown, defaulting to 1000 [ 269.028496][T13854] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 269.068389][T13852] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3192'. [ 269.175983][T13825] syz.1.3184 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 269.190135][T13825] CPU: 0 UID: 0 PID: 13825 Comm: syz.1.3184 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 269.190175][T13825] Tainted: [W]=WARN [ 269.190185][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.190228][T13825] Call Trace: [ 269.190234][T13825] [ 269.190242][T13825] __dump_stack+0x1d/0x30 [ 269.190265][T13825] dump_stack_lvl+0x95/0xd0 [ 269.190285][T13825] dump_stack+0x15/0x1b [ 269.190320][T13825] dump_header+0x80/0x240 [ 269.190345][T13825] oom_kill_process+0x295/0x350 [ 269.190394][T13825] out_of_memory+0x981/0xbc0 [ 269.190451][T13825] try_charge_memcg+0x621/0xa00 [ 269.190523][T13825] __memcg_kmem_charge_page+0x199/0x3a0 [ 269.190556][T13825] __alloc_frozen_pages_noprof+0x18a/0x350 [ 269.190606][T13825] alloc_pages_mpol+0xa9/0x1d0 [ 269.190693][T13825] alloc_pages_noprof+0x8f/0x140 [ 269.190760][T13825] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 269.190935][T13825] __kvmalloc_node_noprof+0x3a0/0x590 [ 269.190962][T13825] ? futex_hash_allocate+0x192/0x920 [ 269.190988][T13825] ? futex_hash_allocate+0x192/0x920 [ 269.191013][T13825] ? futex_hash_allocate+0x192/0x920 [ 269.191094][T13825] futex_hash_allocate+0x192/0x920 [ 269.191117][T13825] ? cap_task_prctl+0x13f/0x6b0 [ 269.191154][T13825] futex_hash_prctl+0xd8/0xf0 [ 269.191245][T13825] __se_sys_prctl+0x4f4/0x13b0 [ 269.191271][T13825] __x64_sys_prctl+0x67/0x80 [ 269.191350][T13825] x64_sys_call+0x2533/0x3020 [ 269.191373][T13825] do_syscall_64+0x136/0x3c0 [ 269.191404][T13825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.191482][T13825] RIP: 0033:0x7feb66d2e019 [ 269.191497][T13825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.191520][T13825] RSP: 002b:00007feb65787028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 269.191544][T13825] RAX: ffffffffffffffda RBX: 00007feb66fb5fa0 RCX: 00007feb66d2e019 [ 269.191628][T13825] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 269.191667][T13825] RBP: 00007feb66dc500c R08: 0000000000000000 R09: 0000000000000000 [ 269.191683][T13825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.191699][T13825] R13: 00007feb66fb6038 R14: 00007feb66fb5fa0 R15: 00007ffdae790628 [ 269.191723][T13825] [ 269.191731][T13825] memory: usage 307200kB, limit 307200kB, failcnt 2156 [ 269.350343][T13869] lo speed is unknown, defaulting to 1000 [ 269.428414][T13825] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 269.473385][T13825] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 269.480794][T13825] Memory cgroup stats for /syz1: [ 269.481073][T13825] cache 0 [ 269.489006][T13825] rss 32768 [ 269.492139][T13825] shmem 0 [ 269.495088][T13825] mapped_file 0 [ 269.498593][T13825] dirty 0 [ 269.501556][T13825] writeback 0 [ 269.504847][T13825] workingset_refault_anon 630 [ 269.509599][T13825] workingset_refault_file 3929 [ 269.514377][T13825] swap 401408 [ 269.517687][T13825] swapcached 38285312 [ 269.521700][T13825] pgpgin 227562 [ 269.525187][T13825] pgpgout 227545 [ 269.528833][T13825] pgfault 241850 [ 269.532460][T13825] pgmajfault 437 [ 269.536024][T13825] inactive_anon 45056 [ 269.540025][T13825] active_anon 24576 [ 269.543847][T13825] inactive_file 0 [ 269.547533][T13825] active_file 0 [ 269.551039][T13825] unevictable 0 [ 269.554533][T13825] hierarchical_memory_limit 314572800 [ 269.560077][T13825] hierarchical_memsw_limit 9223372036854771712 [ 269.587847][T13825] total_cache 0 [ 269.591423][T13825] total_rss 32768 [ 269.595137][T13825] total_shmem 0 [ 269.598661][T13825] total_mapped_file 0 [ 269.602667][T13825] total_dirty 0 [ 269.606337][T13825] total_writeback 0 [ 269.610277][T13825] total_workingset_refault_anon 630 [ 269.615600][T13825] total_workingset_refault_file 3929 [ 269.620921][T13825] total_swap 401408 [ 269.624819][T13825] total_swapcached 38285312 [ 269.629339][T13825] total_pgpgin 227562 [ 269.633349][T13825] total_pgpgout 227545 [ 269.639246][T13825] total_pgfault 241850 [ 269.643407][T13825] total_pgmajfault 437 [ 269.647760][T13825] total_inactive_anon 45056 [ 269.652437][T13825] total_active_anon 24576 [ 269.656982][T13825] total_inactive_file 0 [ 269.661179][T13825] total_active_file 0 [ 269.665360][T13825] total_unevictable 0 [ 269.669414][T13825] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3184,pid=13823,uid=0 [ 269.686231][T13825] Memory cgroup out of memory: Killed process 13823 (syz.1.3184) total-vm:229488kB, anon-rss:1244kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 269.878585][T13886] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 270.556852][T13901] geneve1: entered promiscuous mode [ 270.567064][T13901] geneve1: left promiscuous mode [ 270.584048][T13912] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 270.595388][T13911] IPVS: stopping backup sync thread 13912 ... [ 270.602808][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'. [ 270.643326][T13902] veth3: entered promiscuous mode [ 270.649180][T13902] veth3: entered allmulticast mode [ 270.715437][T13920] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 270.820360][T13901] netlink: 'syz.1.3214': attribute type 21 has an invalid length. [ 270.828298][T13901] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.957936][T13929] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3225'. [ 270.986121][T13945] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 271.011807][T13943] IPVS: stopping backup sync thread 13945 ... [ 271.161246][T13963] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 271.255271][T13974] tipc: Cannot configure node identity twice [ 271.268085][T13974] tipc: Cannot configure node identity twice [ 271.285193][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3243'. [ 271.322209][ T28] audit: type=1400 audit(2000000474.581:6932): avc: denied { connect } for pid=13977 comm="syz.5.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.353069][T13979] SET target dimension over the limit! [ 271.558596][T13958] syz.1.3237 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 271.582763][T13958] CPU: 1 UID: 0 PID: 13958 Comm: syz.1.3237 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 271.582802][T13958] Tainted: [W]=WARN [ 271.582811][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.582824][T13958] Call Trace: [ 271.582831][T13958] [ 271.582838][T13958] __dump_stack+0x1d/0x30 [ 271.582860][T13958] dump_stack_lvl+0x95/0xd0 [ 271.582956][T13958] dump_stack+0x15/0x1b [ 271.582975][T13958] dump_header+0x80/0x240 [ 271.583046][T13958] oom_kill_process+0x295/0x350 [ 271.583162][T13958] out_of_memory+0x981/0xbc0 [ 271.583220][T13958] try_charge_memcg+0x621/0xa00 [ 271.583309][T13958] charge_memcg+0x6d/0x120 [ 271.583347][T13958] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 271.583436][T13958] swap_cache_alloc_folio+0x47b/0x5e0 [ 271.583469][T13958] swap_cluster_readahead+0x2b1/0x460 [ 271.583577][T13958] swapin_readahead+0xd8/0x8a0 [ 271.583611][T13958] ? _raw_spin_unlock+0x9/0x30 [ 271.583636][T13958] ? swap_put_entries_cluster+0x49c/0x4c0 [ 271.583705][T13958] ? __rcu_read_unlock+0x4e/0x70 [ 271.583729][T13958] ? swap_cache_get_folio+0x1f7/0x200 [ 271.583757][T13958] do_swap_page+0x2a2/0x1ec0 [ 271.583835][T13958] ? __css_rstat_updated+0xbb/0x280 [ 271.583943][T13958] ? __rcu_read_lock+0x36/0x50 [ 271.583969][T13958] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 271.584002][T13958] handle_mm_fault+0xb3c/0x2da0 [ 271.584111][T13958] do_user_addr_fault+0x634/0x1060 [ 271.584140][T13958] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 271.584168][T13958] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 271.584214][T13958] ? trace_page_fault_user+0x1f/0xa0 [ 271.584290][T13958] exc_page_fault+0x62/0xa0 [ 271.584309][T13958] asm_exc_page_fault+0x26/0x30 [ 271.584332][T13958] RIP: 0033:0x7feb66d2eb36 [ 271.584351][T13958] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 271.584369][T13958] RSP: 002b:00007ffdae790760 EFLAGS: 00010246 [ 271.584411][T13958] RAX: 0000000000042477 RBX: 00007feb66fb5fa0 RCX: 0000000000042298 [ 271.584425][T13958] RDX: 00000000000001df RSI: 0000000000000000 RDI: 00000000000003e8 [ 271.584440][T13958] RBP: 00007feb66fb7da0 R08: 000000001c8ee5c0 R09: 3fffffffffffffff [ 271.584456][T13958] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000042604 [ 271.584468][T13958] R13: 00007feb66fb627c R14: 00000000000423fe R15: 00007feb66fb6270 [ 271.584486][T13958] [ 271.972396][T13958] memory: usage 1968kB, limit 307200kB, failcnt 2441 [ 271.979274][T13958] memory+swap: usage 2432kB, limit 9007199254740988kB, failcnt 0 [ 271.987043][T13958] kmem: usage 1772kB, limit 9007199254740988kB, failcnt 0 [ 271.994166][T13958] Memory cgroup stats for /syz1: [ 271.994415][T13958] cache 0 [ 272.002390][T13958] rss 4096 [ 272.005736][T13958] shmem 0 [ 272.008788][T13958] mapped_file 0 [ 272.012270][T13958] dirty 0 [ 272.015322][T13958] writeback 0 [ 272.018639][T13958] workingset_refault_anon 789 [ 272.023338][T13958] workingset_refault_file 3929 [ 272.028358][T13958] swap 475136 [ 272.031789][T13958] swapcached 41267200 [ 272.036008][T13958] pgpgin 228998 [ 272.039773][T13958] pgpgout 228996 [ 272.043567][T13958] pgfault 243850 [ 272.047460][T13958] pgmajfault 506 [ 272.051106][T13958] inactive_anon 0 [ 272.054982][T13958] active_anon 8192 [ 272.058728][T13958] inactive_file 0 [ 272.062388][T13958] active_file 0 [ 272.066085][T13958] unevictable 0 [ 272.069574][T13958] hierarchical_memory_limit 314572800 [ 272.077242][T13958] hierarchical_memsw_limit 9223372036854771712 [ 272.088864][T13958] total_cache 0 [ 272.092375][T13958] total_rss 4096 [ 272.095993][T13958] total_shmem 0 [ 272.099465][T13958] total_mapped_file 0 [ 272.103513][T13958] total_dirty 0 [ 272.106995][T13958] total_writeback 0 [ 272.110863][T13958] total_workingset_refault_anon 789 [ 272.116087][T13958] total_workingset_refault_file 3929 [ 272.121390][T13958] total_swap 475136 [ 272.125251][T13958] total_swapcached 41267200 [ 272.129822][T13958] total_pgpgin 228998 [ 272.133832][T13958] total_pgpgout 228996 [ 272.137944][T13958] total_pgfault 243850 [ 272.142094][T13958] total_pgmajfault 506 [ 272.146254][T13958] total_inactive_anon 0 [ 272.150536][T13958] total_active_anon 8192 [ 272.154860][T13958] total_inactive_file 0 [ 272.159065][T13958] total_active_file 0 [ 272.163147][T13958] total_unevictable 0 [ 272.167152][T13958] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3237,pid=13958,uid=0 [ 272.193519][T13958] Memory cgroup out of memory: Killed process 13958 (syz.1.3237) total-vm:100604kB, anon-rss:1244kB, file-rss:26248kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 272.239349][T13998] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 272.362273][T14009] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3255'. [ 272.676214][T14034] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 272.754974][T14040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3267'. [ 272.892410][T14045] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28180 sclass=netlink_xfrm_socket pid=14045 comm=syz.1.3269 [ 272.991287][T14057] loop3: detected capacity change from 0 to 128 [ 273.004057][T14057] GUP no longer grows the stack in syz.3.3273 (14057): 200000005000-200000008000 (200000004000) [ 273.017890][T14057] CPU: 1 UID: 0 PID: 14057 Comm: syz.3.3273 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 273.017978][T14057] Tainted: [W]=WARN [ 273.017986][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.018006][T14057] Call Trace: [ 273.018014][T14057] [ 273.018021][T14057] __dump_stack+0x1d/0x30 [ 273.018065][T14057] dump_stack_lvl+0x95/0xd0 [ 273.018110][T14057] dump_stack+0x15/0x1b [ 273.018134][T14057] fixup_user_fault+0x4fe/0x550 [ 273.018312][T14057] fault_in_user_writeable+0x5c/0xc0 [ 273.018354][T14057] futex_lock_pi+0x5f2/0x7c0 [ 273.018391][T14057] ? __pfx_futex_wake_mark+0x10/0x10 [ 273.018503][T14057] do_futex+0x2ea/0x460 [ 273.018534][T14057] __se_sys_futex+0x2f6/0x370 [ 273.018559][T14057] ? xfd_validate_state+0x45/0xf0 [ 273.018597][T14057] __x64_sys_futex+0x78/0x90 [ 273.018670][T14057] x64_sys_call+0x24ab/0x3020 [ 273.018709][T14057] do_syscall_64+0x136/0x3c0 [ 273.018742][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.018770][T14057] RIP: 0033:0x7fc9a844e019 [ 273.018799][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.018819][T14057] RSP: 002b:00007fc9a6ea7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 273.018845][T14057] RAX: ffffffffffffffda RBX: 00007fc9a86d5fa0 RCX: 00007fc9a844e019 [ 273.018864][T14057] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 273.018919][T14057] RBP: 00007fc9a84e500c R08: 0000000000000000 R09: 0000000000000001 [ 273.018957][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.018971][T14057] R13: 00007fc9a86d6038 R14: 00007fc9a86d5fa0 R15: 00007ffcc898f988 [ 273.018995][T14057] [ 273.733340][T14095] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 274.128979][T14114] tipc: Started in network mode [ 274.138876][T14114] tipc: Node identity 2, cluster identity 1023 [ 274.153374][T14114] tipc: Node number set to 2 [ 274.163125][T14114] tipc: Cannot configure node identity twice [ 275.427435][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 275.499873][T14141] loop3: detected capacity change from 0 to 32768 [ 275.738993][T14141] loop3: p1 < > p3 < > p4 [ 275.746063][T14141] loop3: p4 start 1426063360 is beyond EOD, truncated [ 275.765918][T12493] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 275.779531][ T2981] loop3: p1 < > p3 < > p4 [ 275.784279][ T2981] loop3: partition table partially beyond EOD, truncated [ 275.804934][ T2981] loop3: p4 start 1426063360 is beyond EOD, truncated [ 275.837695][T12493] CPU: 1 UID: 0 PID: 12493 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 275.837734][T12493] Tainted: [W]=WARN [ 275.837742][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.837755][T12493] Call Trace: [ 275.837761][T12493] [ 275.837768][T12493] __dump_stack+0x1d/0x30 [ 275.837837][T12493] dump_stack_lvl+0x95/0xd0 [ 275.837865][T12493] dump_stack+0x15/0x1b [ 275.837908][T12493] dump_header+0x80/0x240 [ 275.837929][T12493] oom_kill_process+0x295/0x350 [ 275.838000][T12493] out_of_memory+0x981/0xbc0 [ 275.838042][T12493] try_charge_memcg+0x621/0xa00 [ 275.838078][T12493] charge_memcg+0x6d/0x120 [ 275.838161][T12493] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 275.838262][T12493] swap_cache_alloc_folio+0x47b/0x5e0 [ 275.838302][T12493] swap_cluster_readahead+0x3d2/0x460 [ 275.838349][T12493] swapin_readahead+0xd8/0x8a0 [ 275.838464][T12493] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 275.838593][T12493] ? hrtimer_start_range_ns+0x108/0x120 [ 275.838638][T12493] ? __rcu_read_unlock+0x4e/0x70 [ 275.838671][T12493] ? swap_cache_get_folio+0x1f7/0x200 [ 275.838800][T12493] do_swap_page+0x2a2/0x1ec0 [ 275.838829][T12493] ? __schedule+0x799/0xd10 [ 275.838907][T12493] ? mtree_range_walk+0x2a5/0x480 [ 275.838947][T12493] ? __rcu_read_lock+0x36/0x50 [ 275.838980][T12493] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 275.839016][T12493] handle_mm_fault+0xb3c/0x2da0 [ 275.839076][T12493] do_user_addr_fault+0x634/0x1060 [ 275.839109][T12493] ? trace_page_fault_user+0x1f/0xa0 [ 275.839194][T12493] exc_page_fault+0x62/0xa0 [ 275.839220][T12493] asm_exc_page_fault+0x26/0x30 [ 275.839248][T12493] RIP: 0033:0x7feb66ce9197 [ 275.839270][T12493] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 275.839370][T12493] RSP: 002b:00007ffdae790920 EFLAGS: 00010202 [ 275.839418][T12493] RAX: 0000000000000000 RBX: 000055558c235500 RCX: 00007feb66ce9197 [ 275.839437][T12493] RDX: 00007ffdae790960 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.839455][T12493] RBP: 00007ffdae7909cc R08: 0000000000000000 R09: 0000000000000000 [ 275.839472][T12493] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 275.839489][T12493] R13: 00000000000927c0 R14: 0000000000043229 R15: 00007ffdae790a20 [ 275.839515][T12493] [ 275.845539][T14174] tipc: Started in network mode [ 275.863215][T12493] memory: usage 307200kB, limit 307200kB, failcnt 2697 [ 276.115093][T14174] tipc: Node identity 2, cluster identity 1023 [ 276.121837][T14174] tipc: Node number set to 2 [ 276.127133][T14174] tipc: Cannot configure node identity twice [ 276.272332][T12137] udevd[12137]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 276.285295][T12096] udevd[12096]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 276.356160][ T28] audit: type=1400 audit(2000000479.641:6933): avc: denied { connect } for pid=14176 comm="syz.0.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 276.405574][T12096] udevd[12096]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 276.491687][T14181] FAULT_INJECTION: forcing a failure. [ 276.491687][T14181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.506369][T12137] udevd[12137]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 276.519961][T12493] memory+swap: usage 136068kB, limit 9007199254740988kB, failcnt 0 [ 276.536166][T14184] netlink: 'syz.6.3317': attribute type 7 has an invalid length. [ 276.542747][T12493] kmem: usage 135552kB, limit 9007199254740988kB, failcnt 0 [ 276.559368][T14181] CPU: 1 UID: 0 PID: 14181 Comm: syz.3.3316 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 276.559399][T14181] Tainted: [W]=WARN [ 276.559405][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.559420][T14181] Call Trace: [ 276.559428][T14181] [ 276.559436][T14181] __dump_stack+0x1d/0x30 [ 276.559585][T14181] dump_stack_lvl+0x95/0xd0 [ 276.559613][T14181] dump_stack+0x15/0x1b [ 276.559715][T14181] should_fail_ex+0x25e/0x270 [ 276.559750][T14181] should_fail+0xb/0x20 [ 276.559780][T14181] should_fail_usercopy+0x1a/0x20 [ 276.559845][T14181] _copy_from_user+0x1c/0xb0 [ 276.559872][T14181] ___sys_sendmsg+0xc1/0x1e0 [ 276.559910][T14181] __x64_sys_sendmsg+0xd4/0x160 [ 276.559960][T14181] x64_sys_call+0x194c/0x3020 [ 276.559990][T14181] do_syscall_64+0x136/0x3c0 [ 276.560026][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.560052][T14181] RIP: 0033:0x7fc9a844e019 [ 276.560139][T14181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.560157][T14181] RSP: 002b:00007fc9a6ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.560176][T14181] RAX: ffffffffffffffda RBX: 00007fc9a86d5fa0 RCX: 00007fc9a844e019 [ 276.560195][T14181] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 276.560212][T14181] RBP: 00007fc9a6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.560228][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.560265][T14181] R13: 00007fc9a86d6038 R14: 00007fc9a86d5fa0 R15: 00007ffcc898f988 [ 276.560292][T14181] [ 276.631705][ T28] audit: type=1400 audit(2000000479.911:6934): avc: denied { mount } for pid=14183 comm="syz.6.3317" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.646921][T12493] Memory cgroup stats for /syz1: [ 276.647251][T12493] cache 0 [ 276.922308][T14194] loop3: detected capacity change from 0 to 512 [ 276.929300][T14193] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3320'. [ 276.931297][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3319'. [ 276.961663][T12493] rss 0 [ 276.967688][T12493] shmem 0 [ 276.984820][T14194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.015810][T14194] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.027794][T12493] mapped_file 0 [ 277.040709][T12493] dirty 0 [ 277.059273][T12493] writeback 0 [ 277.086953][T12493] workingset_refault_anon 966 [ 277.115132][T14207] tipc: Cannot configure node identity twice [ 277.121365][T12493] workingset_refault_file 3929 [ 277.209248][ T28] audit: type=1400 audit(2000000480.381:6935): avc: denied { write } for pid=14191 comm="syz.3.3321" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.236972][T12493] swap 479232 [ 277.244285][ T28] audit: type=1400 audit(2000000480.381:6936): avc: denied { write } for pid=14191 comm="syz.3.3321" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.255552][T12493] swapcached 42131456 [ 277.266108][ T28] audit: type=1400 audit(2000000480.521:6937): avc: denied { write } for pid=14191 comm="syz.3.3321" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.266214][T14207] tipc: Cannot configure node identity twice [ 277.320641][T12493] pgpgin 232767 [ 277.340020][T12493] pgpgout 232767 [ 277.352771][T12493] pgfault 248338 [ 277.368173][T12493] pgmajfault 624 [ 277.384811][T12493] inactive_anon 0 [ 277.403071][T12493] active_anon 0 [ 277.418473][T12493] inactive_file 0 [ 277.444282][T12493] active_file 0 [ 277.464418][T12493] unevictable 0 [ 277.482583][T12493] hierarchical_memory_limit 314572800 [ 277.513981][T12493] hierarchical_memsw_limit 9223372036854771712 [ 277.560787][T12493] total_cache 0 [ 277.668807][T12493] total_rss 0 [ 277.676542][T12493] total_shmem 0 [ 277.683046][T12493] total_mapped_file 0 [ 277.691609][T12493] total_dirty 0 [ 277.699541][T12493] total_writeback 0 [ 277.708486][T12493] total_workingset_refault_anon 966 [ 277.721536][T12493] total_workingset_refault_file 3929 [ 277.731367][T12493] total_swap 479232 [ 277.740012][T12493] total_swapcached 42131456 [ 277.749185][T12493] total_pgpgin 232767 [ 277.757671][T12493] total_pgpgout 232767 [ 277.766747][T12493] total_pgfault 248338 [ 277.775511][T12493] total_pgmajfault 624 [ 277.784494][T12493] total_inactive_anon 0 [ 277.793818][T12493] total_active_anon 0 [ 277.802210][T12493] total_inactive_file 0 [ 277.811285][T12493] total_active_file 0 [ 277.819699][T12493] total_unevictable 0 [ 277.826748][T12493] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3302,pid=14134,uid=0 [ 277.903889][T12493] Memory cgroup out of memory: Killed process 14134 (syz.1.3302) total-vm:231536kB, anon-rss:1244kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 278.127674][T13536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.160883][T14230] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3330'. [ 279.038151][T13327] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 279.099599][T13327] CPU: 1 UID: 0 PID: 13327 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 279.099650][T13327] Tainted: [W]=WARN [ 279.099658][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.099674][T13327] Call Trace: [ 279.099754][T13327] [ 279.099764][T13327] __dump_stack+0x1d/0x30 [ 279.099791][T13327] dump_stack_lvl+0x95/0xd0 [ 279.099812][T13327] dump_stack+0x15/0x1b [ 279.099847][T13327] dump_header+0x80/0x240 [ 279.099925][T13327] oom_kill_process+0x295/0x350 [ 279.099965][T13327] out_of_memory+0x981/0xbc0 [ 279.100047][T13327] try_charge_memcg+0x621/0xa00 [ 279.100079][T13327] charge_memcg+0x6d/0x120 [ 279.100175][T13327] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 279.100210][T13327] swap_cache_alloc_folio+0x47b/0x5e0 [ 279.100281][T13327] swap_cluster_readahead+0x3d2/0x460 [ 279.100417][T13327] swapin_readahead+0xd8/0x8a0 [ 279.100465][T13327] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 279.100517][T13327] ? hrtimer_start_range_ns+0x108/0x120 [ 279.100542][T13327] ? __rcu_read_unlock+0x4e/0x70 [ 279.100581][T13327] ? swap_cache_get_folio+0x1f7/0x200 [ 279.100609][T13327] do_swap_page+0x2a2/0x1ec0 [ 279.100636][T13327] ? __schedule+0x799/0xd10 [ 279.100746][T13327] ? __rcu_read_lock+0x36/0x50 [ 279.100774][T13327] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 279.100805][T13327] handle_mm_fault+0xb3c/0x2da0 [ 279.100849][T13327] do_user_addr_fault+0x634/0x1060 [ 279.100968][T13327] ? trace_page_fault_user+0x1f/0xa0 [ 279.101016][T13327] exc_page_fault+0x62/0xa0 [ 279.101039][T13327] asm_exc_page_fault+0x26/0x30 [ 279.101061][T13327] RIP: 0033:0x7f8c9a6e9197 [ 279.101076][T13327] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 279.101098][T13327] RSP: 002b:00007ffed2d78520 EFLAGS: 00010202 [ 279.101192][T13327] RAX: 0000000000000000 RBX: 0000555590554500 RCX: 00007f8c9a6e9197 [ 279.101208][T13327] RDX: 00007ffed2d78560 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.101223][T13327] RBP: 00007ffed2d785cc R08: 0000000000000000 R09: 0000000000000000 [ 279.101239][T13327] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 279.101253][T13327] R13: 00000000000927c0 R14: 00000000000441b3 R15: 00007ffed2d78620 [ 279.101277][T13327] [ 279.287079][T13327] memory: usage 307200kB, limit 307200kB, failcnt 393 [ 279.339137][T13327] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 279.347082][T13327] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 279.354391][T13327] Memory cgroup stats for /syz6: [ 279.354695][T13327] cache 0 [ 279.362576][T13327] rss 0 [ 279.365352][T13327] shmem 0 [ 279.368304][T13327] mapped_file 0 [ 279.371789][T13327] dirty 0 [ 279.374731][T13327] writeback 0 [ 279.378023][T13327] workingset_refault_anon 54 [ 279.382712][T13327] workingset_refault_file 0 [ 279.499283][T13327] swap 454656 [ 279.502686][T13327] swapcached 831488 [ 279.506712][T13327] pgpgin 18235 [ 279.510137][T13327] pgpgout 18234 [ 279.513713][T13327] pgfault 21563 [ 279.518357][T13327] pgmajfault 40 [ 279.536259][T13327] inactive_anon 0 [ 279.551967][T13327] active_anon 4096 [ 279.566000][T13327] inactive_file 0 [ 279.615840][T13327] active_file 0 [ 279.654286][T13327] unevictable 0 [ 279.680463][T13327] hierarchical_memory_limit 314572800 [ 279.717034][T13327] hierarchical_memsw_limit 9223372036854771712 [ 279.750201][T13327] total_cache 0 [ 279.759929][T13327] total_rss 0 [ 279.771003][T13327] total_shmem 0 [ 279.795943][T13327] total_mapped_file 0 [ 279.817057][T13327] total_dirty 0 [ 279.836438][T13327] total_writeback 0 [ 279.858249][T13327] total_workingset_refault_anon 54 [ 279.868579][T14265] SET target dimension over the limit! [ 279.879663][T13327] total_workingset_refault_file 0 [ 279.905443][T13327] total_swap 454656 [ 279.922557][T13327] total_swapcached 831488 [ 279.955937][T13327] total_pgpgin 18235 [ 279.977323][T13327] total_pgpgout 18234 [ 279.999063][T13327] total_pgfault 21563 [ 280.026774][T13327] total_pgmajfault 40 [ 280.039911][T13327] total_inactive_anon 0 [ 280.053399][T13327] total_active_anon 4096 [ 280.068065][T13327] total_inactive_file 0 [ 280.079549][T13327] total_active_file 0 [ 280.092345][T13327] total_unevictable 0 [ 280.104988][T13327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3340,pid=14250,uid=0 [ 280.142901][T13327] Memory cgroup out of memory: Killed process 14250 (syz.6.3340) total-vm:96368kB, anon-rss:1400kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 280.332513][T14298] loop3: detected capacity change from 0 to 512 [ 280.417050][T14298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.555674][T14298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.566324][ T3375] IPVS: starting estimator thread 0... [ 280.665588][T14314] lo speed is unknown, defaulting to 1000 [ 280.707122][T14290] loop3: detected capacity change from 0 to 2048 [ 280.726319][T14325] netlink: 'syz.5.3367': attribute type 7 has an invalid length. [ 280.757449][T14319] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3364'. [ 280.783383][T14314] netlink: 'syz.1.3361': attribute type 6 has an invalid length. [ 280.849098][T14310] IPVS: using max 2400 ests per chain, 120000 per kthread [ 281.035748][T14290] Alternate GPT is invalid, using primary GPT. [ 281.042336][T14290] loop3: p2 p3 p7 [ 281.132955][ T2981] Alternate GPT is invalid, using primary GPT. [ 281.139913][ T2981] loop3: p2 p3 p7 [ 281.257158][T12096] udevd[12096]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 281.267917][T12137] udevd[12137]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 281.281304][T11880] udevd[11880]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 281.438411][T14331] syz.5.3369 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 281.496507][T14331] CPU: 1 UID: 0 PID: 14331 Comm: syz.5.3369 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 281.496543][T14331] Tainted: [W]=WARN [ 281.496552][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.496569][T14331] Call Trace: [ 281.496658][T14331] [ 281.496667][T14331] __dump_stack+0x1d/0x30 [ 281.496691][T14331] dump_stack_lvl+0x95/0xd0 [ 281.496780][T14331] dump_stack+0x15/0x1b [ 281.496799][T14331] dump_header+0x80/0x240 [ 281.496821][T14331] oom_kill_process+0x295/0x350 [ 281.496888][T14331] out_of_memory+0x981/0xbc0 [ 281.496932][T14331] try_charge_memcg+0x621/0xa00 [ 281.497012][T14331] ? __rcu_read_unlock+0x4e/0x70 [ 281.497047][T14331] __memcg_kmem_charge_page+0x199/0x3a0 [ 281.497151][T14331] __alloc_frozen_pages_noprof+0x18a/0x350 [ 281.497192][T14331] alloc_pages_mpol+0xa9/0x1d0 [ 281.497265][T14331] alloc_pages_noprof+0x8f/0x140 [ 281.497322][T14331] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 281.497373][T14331] __kvmalloc_node_noprof+0x3a0/0x590 [ 281.497408][T14331] ? futex_hash_allocate+0x192/0x920 [ 281.497435][T14331] ? futex_hash_allocate+0x192/0x920 [ 281.497523][T14331] ? futex_hash_allocate+0x192/0x920 [ 281.497549][T14331] futex_hash_allocate+0x192/0x920 [ 281.497571][T14331] ? cap_task_prctl+0x13f/0x6b0 [ 281.497689][T14331] futex_hash_prctl+0xd8/0xf0 [ 281.497716][T14331] __se_sys_prctl+0x4f4/0x13b0 [ 281.497780][T14331] __x64_sys_prctl+0x67/0x80 [ 281.497812][T14331] x64_sys_call+0x2533/0x3020 [ 281.497862][T14331] do_syscall_64+0x136/0x3c0 [ 281.497895][T14331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.497973][T14331] RIP: 0033:0x7fccba67e019 [ 281.498013][T14331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.498037][T14331] RSP: 002b:00007fccb90d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 281.498080][T14331] RAX: ffffffffffffffda RBX: 00007fccba905fa0 RCX: 00007fccba67e019 [ 281.498100][T14331] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 281.498169][T14331] RBP: 00007fccba71500c R08: 0000000000000000 R09: 0000000000000000 [ 281.498216][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.498233][T14331] R13: 00007fccba906038 R14: 00007fccba905fa0 R15: 00007fff07b2a9f8 [ 281.498261][T14331] [ 281.502707][T14331] memory: usage 279900kB, limit 307200kB, failcnt 1711 [ 281.782186][T14331] memory+swap: usage 283540kB, limit 9007199254740988kB, failcnt 0 [ 281.798970][T14331] kmem: usage 267220kB, limit 9007199254740988kB, failcnt 0 [ 281.830545][T14331] Memory cgroup stats for /syz5: [ 281.830867][T14331] cache 0 [ 281.860408][T14331] rss 0 [ 281.870258][T14331] shmem 0 [ 281.892940][T14331] mapped_file 0 [ 281.902899][T14331] dirty 0 [ 281.914451][T14331] writeback 0 [ 281.939878][T14331] workingset_refault_anon 859 [ 281.948355][T14331] workingset_refault_file 0 [ 281.968517][T14371] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3380'. [ 281.978434][T14331] swap 3727360 [ 281.983183][T14331] swapcached 14729216 [ 281.994595][T14331] pgpgin 256568 [ 282.003169][T14331] pgpgout 256567 [ 282.010613][T14331] pgfault 223419 [ 282.018946][T14331] pgmajfault 547 [ 282.027240][T14331] inactive_anon 0 [ 282.034106][T14331] active_anon 4096 [ 282.042687][T14331] inactive_file 0 [ 282.052426][T14369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57880 sclass=netlink_route_socket pid=14369 comm=syz.3.3383 [ 282.063583][T14331] active_file 0 [ 282.080807][T14331] unevictable 0 [ 282.091822][T14331] hierarchical_memory_limit 314572800 [ 282.101686][T14331] hierarchical_memsw_limit 9223372036854771712 [ 282.111859][T14331] total_cache 0 [ 282.114824][T14369] sctp: [Deprecated]: syz.3.3383 (pid 14369) Use of int in max_burst socket option. [ 282.114824][T14369] Use struct sctp_assoc_value instead [ 282.115344][T14331] total_rss 0 [ 282.115356][T14331] total_shmem 0 [ 282.115363][T14331] total_mapped_file 0 [ 282.115369][T14331] total_dirty 0 [ 282.115376][T14331] total_writeback 0 [ 282.115382][T14331] total_workingset_refault_anon 859 [ 282.153326][T14331] total_workingset_refault_file 0 [ 282.158404][T14331] total_swap 3727360 [ 282.162314][T14331] total_swapcached 14729216 [ 282.166833][T14331] total_pgpgin 256568 [ 282.186730][T14331] total_pgpgout 256567 [ 282.190938][T14331] total_pgfault 223419 [ 282.195019][T14331] total_pgmajfault 547 [ 282.199214][T14331] total_inactive_anon 0 [ 282.204016][T14331] total_active_anon 4096 [ 282.208281][T14331] total_inactive_file 0 [ 282.222291][T14384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3389'. [ 282.258207][T14331] total_active_file 0 [ 282.262286][T14331] total_unevictable 0 [ 282.266359][T14331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3369,pid=14330,uid=0 [ 282.281143][T14331] Memory cgroup out of memory: Killed process 14330 (syz.5.3369) total-vm:229356kB, anon-rss:1244kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 282.306160][T14388] loop3: detected capacity change from 0 to 512 [ 282.343558][T14388] EXT4-fs: Ignoring removed i_version option [ 282.354814][T14388] EXT4-fs: Ignoring removed nobh option [ 282.361246][T14388] ext4: Unknown parameter 'permit_directio' [ 282.464619][T14388] loop3: detected capacity change from 0 to 128 [ 282.485683][T14388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 282.509717][T14388] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.555250][T13536] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 282.599555][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3399'. [ 282.652006][T14415] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3398'. [ 282.730422][T14431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14431 comm=syz.6.3408 [ 282.743505][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3408'. [ 282.815071][T14431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.857517][T14431] vlan2: entered allmulticast mode [ 282.869008][T14431] geneve0: entered allmulticast mode [ 282.881809][T14431] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 283.152647][T14424] syz.0.3406 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 283.169145][T14424] CPU: 0 UID: 0 PID: 14424 Comm: syz.0.3406 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 283.169178][T14424] Tainted: [W]=WARN [ 283.169273][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.169288][T14424] Call Trace: [ 283.169296][T14424] [ 283.169305][T14424] __dump_stack+0x1d/0x30 [ 283.169335][T14424] dump_stack_lvl+0x95/0xd0 [ 283.169358][T14424] dump_stack+0x15/0x1b [ 283.169375][T14424] dump_header+0x80/0x240 [ 283.169399][T14424] oom_kill_process+0x295/0x350 [ 283.169446][T14424] out_of_memory+0x981/0xbc0 [ 283.169477][T14424] try_charge_memcg+0x621/0xa00 [ 283.169565][T14424] charge_memcg+0x6d/0x120 [ 283.169622][T14424] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 283.169687][T14424] swap_cache_alloc_folio+0x47b/0x5e0 [ 283.169720][T14424] swap_cluster_readahead+0x3d2/0x460 [ 283.169827][T14424] swapin_readahead+0xd8/0x8a0 [ 283.169861][T14424] ? preempt_schedule_irq+0x2d/0x50 [ 283.169889][T14424] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 283.169916][T14424] ? __rcu_read_unlock+0x4e/0x70 [ 283.169947][T14424] ? swap_cache_get_folio+0x1f7/0x200 [ 283.169976][T14424] do_swap_page+0x2a2/0x1ec0 [ 283.170052][T14424] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 283.170095][T14424] ? __rcu_read_lock+0x36/0x50 [ 283.170153][T14424] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 283.170178][T14424] handle_mm_fault+0xb3c/0x2da0 [ 283.170220][T14424] do_user_addr_fault+0x634/0x1060 [ 283.170254][T14424] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 283.170323][T14424] ? trace_page_fault_user+0x1f/0xa0 [ 283.170349][T14424] exc_page_fault+0x62/0xa0 [ 283.170369][T14424] asm_exc_page_fault+0x26/0x30 [ 283.170438][T14424] RIP: 0033:0x7f28fc0725f4 [ 283.170457][T14424] Code: 54 24 28 0f 82 5e 03 00 00 40 0f b6 fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 48 8b 3c 24 <49> 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d a1 57 3b 00 00 49 89 d6 [ 283.170545][T14424] RSP: 002b:00007ffef99d54e0 EFLAGS: 00010297 [ 283.170562][T14424] RAX: 0000001b33723eb8 RBX: ffffffff816cb50c RCX: 0000001b33723eb0 [ 283.170578][T14424] RDX: 0000001b33324220 RSI: 0000000000000008 RDI: 00007f28fb7fd008 [ 283.170594][T14424] RBP: 000000000000001a R08: 00007f28fc410000 R09: 00007f28fc412000 [ 283.170683][T14424] R10: 00000000816cb510 R11: 0000000000000007 R12: 00007f28fc426128 [ 283.170776][T14424] R13: 000000000000001a R14: ffffffff816cb477 R15: 00007f28fcf55720 [ 283.170789][T14424] ? bpf_log_attr_create_vlog+0x197/0x1b0 [ 283.170819][T14424] ? bpf_log_attr_finalize+0x6c/0x100 [ 283.170870][T14424] [ 283.170876][T14424] memory: usage 307200kB, limit 307200kB, failcnt 2426 [ 283.296336][T14457] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3415'. [ 283.297825][ T28] audit: type=1400 audit(2000000486.541:6938): avc: denied { read } for pid=14459 comm="syz.5.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.470731][T14424] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 283.478697][T14424] kmem: usage 305728kB, limit 9007199254740988kB, failcnt 0 [ 283.486131][T14424] Memory cgroup stats for /syz0: [ 283.486505][T14424] cache 0 [ 283.494426][T14424] rss 0 [ 283.497210][T14424] shmem 0 [ 283.500204][T14424] mapped_file 0 [ 283.503678][T14424] dirty 0 [ 283.506627][T14424] writeback 0 [ 283.509931][T14424] workingset_refault_anon 2074 [ 283.514722][T14424] workingset_refault_file 9647 [ 283.519511][T14424] swap 471040 [ 283.538900][T14424] swapcached 38899712 [ 283.555151][T14424] pgpgin 251576 [ 283.560834][T14424] pgpgout 251576 [ 283.564415][T14424] pgfault 258525 [ 283.567981][T14424] pgmajfault 553 [ 283.571540][T14424] inactive_anon 0 [ 283.575194][T14424] active_anon 0 [ 283.578662][T14424] inactive_file 0 [ 283.582325][T14424] active_file 0 [ 283.585798][T14424] unevictable 0 [ 283.589282][T14424] hierarchical_memory_limit 314572800 [ 283.594667][T14424] hierarchical_memsw_limit 9223372036854771712 [ 283.600841][T14424] total_cache 0 [ 283.604313][T14424] total_rss 0 [ 283.607614][T14424] total_shmem 0 [ 283.611158][T14424] total_mapped_file 0 [ 283.615201][T14424] total_dirty 0 [ 283.618665][T14424] total_writeback 0 [ 283.622494][T14424] total_workingset_refault_anon 2074 [ 283.627847][T14424] total_workingset_refault_file 9647 [ 283.633239][T14424] total_swap 471040 [ 283.637122][T14424] total_swapcached 38899712 [ 283.641636][T14424] total_pgpgin 251576 [ 283.645684][T14424] total_pgpgout 251576 [ 283.649771][T14424] total_pgfault 258525 [ 283.653850][T14424] total_pgmajfault 553 [ 283.657928][T14424] total_inactive_anon 0 [ 283.672492][ T28] audit: type=1400 audit(2000000486.821:6939): avc: denied { validate_trans } for pid=14444 comm="syz.3.3412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.682086][T14424] total_active_anon 0 [ 283.697306][T14424] total_inactive_file 0 [ 283.701542][T14424] total_active_file 0 [ 283.705705][T14424] total_unevictable 0 [ 283.709805][T14424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3406,pid=14424,uid=0 [ 283.718054][ T28] audit: type=1326 audit(2000000486.841:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.3.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9a844e019 code=0x0 [ 283.724549][T14424] Memory cgroup out of memory: Killed process 14424 (syz.0.3406) total-vm:94188kB, anon-rss:1236kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 284.106291][T14499] loop3: detected capacity change from 0 to 1764 [ 284.119897][T14505] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3429'. [ 284.262792][T14500] loop3: detected capacity change from 0 to 764 [ 284.271979][T14500] rock: directory entry would overflow storage [ 284.278206][T14500] rock: sig=0x5245, size=8, remaining=5 [ 284.285633][ T28] audit: type=1400 audit(2000000487.571:6941): avc: denied { mount } for pid=14495 comm="syz.3.3430" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 284.341433][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3433'. [ 284.350437][T14492] syz.1.3425 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 284.350583][T14492] CPU: 1 UID: 0 PID: 14492 Comm: syz.1.3425 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 284.350617][T14492] Tainted: [W]=WARN [ 284.350624][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.350637][T14492] Call Trace: [ 284.350646][T14492] [ 284.350655][T14492] __dump_stack+0x1d/0x30 [ 284.350700][T14492] dump_stack_lvl+0x95/0xd0 [ 284.350787][T14492] dump_stack+0x15/0x1b [ 284.350810][T14492] dump_header+0x80/0x240 [ 284.350919][T14492] oom_kill_process+0x295/0x350 [ 284.351087][T14492] out_of_memory+0x981/0xbc0 [ 284.351187][T14492] try_charge_memcg+0x621/0xa00 [ 284.351258][T14492] ? __rcu_read_unlock+0x4e/0x70 [ 284.351442][T14492] __memcg_kmem_charge_page+0x199/0x3a0 [ 284.351532][T14492] __alloc_frozen_pages_noprof+0x18a/0x350 [ 284.351650][T14492] alloc_pages_mpol+0xa9/0x1d0 [ 284.351734][T14492] alloc_pages_noprof+0x8f/0x140 [ 284.351852][T14492] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 284.351964][T14492] __kvmalloc_node_noprof+0x3a0/0x590 [ 284.352040][T14492] ? futex_hash_allocate+0x192/0x920 [ 284.352152][T14492] ? futex_hash_allocate+0x192/0x920 [ 284.352177][T14492] ? futex_hash_allocate+0x192/0x920 [ 284.352196][T14492] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 284.352274][T14492] futex_hash_allocate+0x192/0x920 [ 284.352338][T14492] ? cap_task_prctl+0x13f/0x6b0 [ 284.352450][T14492] futex_hash_prctl+0xd8/0xf0 [ 284.352526][T14492] __se_sys_prctl+0x4f4/0x13b0 [ 284.352613][T14492] __x64_sys_prctl+0x67/0x80 [ 284.352760][T14492] x64_sys_call+0x2533/0x3020 [ 284.352825][T14492] do_syscall_64+0x136/0x3c0 [ 284.352909][T14492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.352969][T14492] RIP: 0033:0x7feb66d2e019 [ 284.353050][T14492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.353099][T14492] RSP: 002b:00007feb65766028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 284.353161][T14492] RAX: ffffffffffffffda RBX: 00007feb66fb6090 RCX: 00007feb66d2e019 [ 284.353201][T14492] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 284.353250][T14492] RBP: 00007feb66dc500c R08: 0000000000000000 R09: 0000000000000000 [ 284.353298][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.353330][T14492] R13: 00007feb66fb6128 R14: 00007feb66fb6090 R15: 00007ffdae790628 [ 284.353426][T14492] [ 284.353440][T14492] memory: usage 307200kB, limit 307200kB, failcnt 2764 [ 284.619666][ T28] audit: type=1400 audit(2000000487.771:6942): avc: denied { unmount } for pid=13536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 284.738634][T14492] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 284.746602][T14492] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 284.753979][T14492] Memory cgroup stats for /syz1: [ 284.754435][T14492] cache 0 [ 284.762379][T14492] rss 0 [ 284.765175][T14492] shmem 0 [ 284.768165][T14492] mapped_file 0 [ 284.771697][T14492] dirty 0 [ 284.774722][T14492] writeback 0 [ 284.778036][T14492] workingset_refault_anon 1019 [ 284.782872][T14492] workingset_refault_file 3929 [ 284.787666][T14492] swap 462848 [ 284.791033][T14492] swapcached 42491904 [ 284.795193][T14492] pgpgin 238480 [ 284.798678][T14492] pgpgout 238479 [ 284.819335][T14492] pgfault 255450 [ 284.823413][T14492] pgmajfault 656 [ 284.828059][T14492] inactive_anon 0 [ 284.832157][T14492] active_anon 4096 [ 284.836876][T14492] inactive_file 0 [ 284.840899][T14492] active_file 0 [ 284.845226][T14492] unevictable 0 [ 284.849079][T14492] hierarchical_memory_limit 314572800 [ 284.855906][T14492] hierarchical_memsw_limit 9223372036854771712 [ 284.862499][T14492] total_cache 0 [ 284.877126][T14492] total_rss 0 [ 284.880986][T14492] total_shmem 0 [ 284.885338][T14492] total_mapped_file 0 [ 284.889939][T14492] total_dirty 0 [ 284.893671][T14492] total_writeback 0 [ 284.898591][T14492] total_workingset_refault_anon 1019 [ 284.905079][T14492] total_workingset_refault_file 3929 [ 284.910866][T14492] total_swap 462848 [ 284.969164][T14492] total_swapcached 42491904 [ 284.974072][T14492] total_pgpgin 238480 [ 284.978679][T14492] total_pgpgout 238479 [ 284.983182][T14492] total_pgfault 255450 [ 284.987832][T14492] total_pgmajfault 656 [ 284.992139][T14492] total_inactive_anon 0 [ 284.996924][T14492] total_active_anon 4096 [ 285.001439][T14492] total_inactive_file 0 [ 285.006165][T14492] total_active_file 0 [ 285.010644][T14492] total_unevictable 0 [ 285.015412][T14492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3425,pid=14482,uid=0 [ 285.034250][T14492] Memory cgroup out of memory: Killed process 14482 (syz.1.3425) total-vm:96368kB, anon-rss:1244kB, file-rss:22068kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 285.329598][T14529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7172 sclass=netlink_route_socket pid=14529 comm=syz.6.3443 [ 285.510042][T14534] loop3: detected capacity change from 0 to 512 [ 285.711831][T14534] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 285.735154][T14531] syz.1.3436 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 285.749377][T14531] CPU: 0 UID: 0 PID: 14531 Comm: syz.1.3436 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 285.749412][T14531] Tainted: [W]=WARN [ 285.749460][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.749544][T14531] Call Trace: [ 285.749552][T14531] [ 285.749563][T14531] __dump_stack+0x1d/0x30 [ 285.749590][T14531] dump_stack_lvl+0x95/0xd0 [ 285.749676][T14531] dump_stack+0x15/0x1b [ 285.749742][T14531] dump_header+0x80/0x240 [ 285.749762][T14531] oom_kill_process+0x295/0x350 [ 285.749794][T14531] out_of_memory+0x981/0xbc0 [ 285.749964][T14531] try_charge_memcg+0x621/0xa00 [ 285.749998][T14531] __memcg_kmem_charge_page+0x199/0x3a0 [ 285.750088][T14531] __alloc_frozen_pages_noprof+0x18a/0x350 [ 285.750193][T14531] alloc_pages_mpol+0xa9/0x1d0 [ 285.750227][T14531] alloc_pages_noprof+0x8f/0x140 [ 285.750274][T14531] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 285.750321][T14531] __kvmalloc_node_noprof+0x3a0/0x590 [ 285.750363][T14531] ? futex_hash_allocate+0x192/0x920 [ 285.750381][T14531] ? futex_hash_allocate+0x192/0x920 [ 285.750416][T14531] ? futex_hash_allocate+0x192/0x920 [ 285.750437][T14531] futex_hash_allocate+0x192/0x920 [ 285.750457][T14531] ? cap_task_prctl+0x13f/0x6b0 [ 285.750560][T14531] futex_hash_prctl+0xd8/0xf0 [ 285.750579][T14531] __se_sys_prctl+0x4f4/0x13b0 [ 285.750605][T14531] __x64_sys_prctl+0x67/0x80 [ 285.750707][T14531] x64_sys_call+0x2533/0x3020 [ 285.750733][T14531] do_syscall_64+0x136/0x3c0 [ 285.750893][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.750922][T14531] RIP: 0033:0x7feb66d2e019 [ 285.750943][T14531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.751017][T14531] RSP: 002b:00007feb65787028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 285.751037][T14531] RAX: ffffffffffffffda RBX: 00007feb66fb5fa0 RCX: 00007feb66d2e019 [ 285.751051][T14531] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 285.751063][T14531] RBP: 00007feb66dc500c R08: 0000000000000000 R09: 0000000000000000 [ 285.751145][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.751158][T14531] R13: 00007feb66fb6038 R14: 00007feb66fb5fa0 R15: 00007ffdae790628 [ 285.751228][T14531] [ 285.751235][T14531] memory: usage 304600kB, limit 307200kB, failcnt 3118 [ 286.001384][T14534] EXT4-fs (loop3): 1 truncate cleaned up [ 286.007461][T14534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.024260][T14531] memory+swap: usage 178820kB, limit 9007199254740988kB, failcnt 0 [ 286.032290][T14531] kmem: usage 178152kB, limit 9007199254740988kB, failcnt 0 [ 286.047308][T14534] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 286.068324][T13536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.078174][T14531] Memory cgroup stats for /syz1: [ 286.078493][T14531] cache 4096 [ 286.086662][T14531] rss 114688 [ 286.089959][T14531] shmem 4096 [ 286.093209][T14531] mapped_file 4096 [ 286.096941][T14531] dirty 0 [ 286.099906][T14531] writeback 0 [ 286.103207][T14531] workingset_refault_anon 1085 [ 286.107982][T14531] workingset_refault_file 3929 [ 286.112763][T14531] swap 331776 [ 286.116097][T14531] swapcached 42893312 [ 286.120176][T14531] pgpgin 238663 [ 286.123664][T14531] pgpgout 238633 [ 286.127225][T14531] pgfault 255703 [ 286.130785][T14531] pgmajfault 703 [ 286.134346][T14531] inactive_anon 114688 [ 286.138426][T14531] active_anon 4096 [ 286.142165][T14531] inactive_file 0 [ 286.145836][T14531] active_file 0 [ 286.370498][T14531] unevictable 0 [ 286.374023][T14531] hierarchical_memory_limit 314572800 [ 286.379420][T14531] hierarchical_memsw_limit 9223372036854771712 [ 286.385590][T14531] total_cache 4096 [ 286.410189][T14570] loop3: detected capacity change from 0 to 512 [ 286.442333][T14570] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.478763][T14570] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 286.486975][T14570] FAT-fs (loop3): Filesystem has been set read-only [ 286.547931][T14531] total_rss 114688 [ 286.551760][T14531] total_shmem 4096 [ 286.555511][T14531] total_mapped_file 4096 [ 286.559802][T14531] total_dirty 0 [ 286.563277][T14531] total_writeback 0 [ 286.567101][T14531] total_workingset_refault_anon 1085 [ 286.572401][T14531] total_workingset_refault_file 3929 [ 286.577700][T14531] total_swap 331776 [ 286.581521][T14531] total_swapcached 42893312 [ 286.586045][T14531] total_pgpgin 238663 [ 286.590088][T14531] total_pgpgout 238633 [ 286.594207][T14531] total_pgfault 255703 [ 286.598300][T14531] total_pgmajfault 703 [ 286.602380][T14531] total_inactive_anon 114688 [ 286.606975][T14531] total_active_anon 4096 [ 286.611256][T14531] total_inactive_file 0 [ 286.615441][T14531] total_active_file 0 [ 286.619443][T14531] total_unevictable 0 [ 286.623435][T14531] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3436,pid=14521,uid=0 [ 286.638135][T14531] Memory cgroup out of memory: Killed process 14531 (syz.1.3436) total-vm:229488kB, anon-rss:1384kB, file-rss:22224kB, shmem-rss:4kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 286.986693][T14581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7172 sclass=netlink_route_socket pid=14581 comm=syz.6.3456 [ 287.321214][T14595] xt_connbytes: Forcing CT accounting to be enabled [ 287.381754][T14603] FAULT_INJECTION: forcing a failure. [ 287.381754][T14603] name failslab, interval 1, probability 0, space 0, times 0 [ 287.410476][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.3.3463 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 287.410516][T14603] Tainted: [W]=WARN [ 287.410525][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.410618][T14603] Call Trace: [ 287.410627][T14603] [ 287.410639][T14603] __dump_stack+0x1d/0x30 [ 287.410669][T14603] dump_stack_lvl+0x95/0xd0 [ 287.410692][T14603] dump_stack+0x15/0x1b [ 287.410834][T14603] should_fail_ex+0x25e/0x270 [ 287.410918][T14603] should_failslab+0x8c/0xb0 [ 287.410949][T14603] __kvmalloc_node_noprof+0x15b/0x590 [ 287.410986][T14603] ? nf_hook_entries_grow+0x1cb/0x460 [ 287.411022][T14603] ? nf_hook_entries_grow+0x1cb/0x460 [ 287.411111][T14603] nf_hook_entries_grow+0x1cb/0x460 [ 287.411187][T14603] ? call_rcu+0x2bc/0x440 [ 287.411214][T14603] __nf_register_net_hook+0x187/0x480 [ 287.411256][T14603] nf_register_net_hook+0x88/0x130 [ 287.411373][T14603] nf_register_net_hooks+0x44/0x150 [ 287.411416][T14603] nf_defrag_ipv6_enable+0x6e/0xc0 [ 287.411450][T14603] nf_ct_netns_do_get+0x161/0x3a0 [ 287.411491][T14603] nf_ct_netns_get+0xf1/0x2c0 [ 287.411531][T14603] helper_mt_check+0x44/0xd0 [ 287.411638][T14603] xt_check_match+0x3b7/0x5e0 [ 287.411667][T14603] ? xt_find_match+0x1e4/0x240 [ 287.411700][T14603] translate_table+0xbd5/0x1210 [ 287.411826][T14603] ? _copy_from_user+0x89/0xb0 [ 287.411857][T14603] do_ip6t_set_ctl+0x73d/0x990 [ 287.411892][T14603] ? kstrtoull+0x111/0x140 [ 287.411932][T14603] ? __rcu_read_unlock+0x4e/0x70 [ 287.411963][T14603] nf_setsockopt+0x199/0x1b0 [ 287.412048][T14603] ipv6_setsockopt+0x11a/0x130 [ 287.412085][T14603] rawv6_setsockopt+0x1cc/0x3f0 [ 287.412121][T14603] sock_common_setsockopt+0x69/0x80 [ 287.412156][T14603] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 287.412188][T14603] __sys_setsockopt+0x184/0x200 [ 287.412257][T14603] __x64_sys_setsockopt+0x64/0x80 [ 287.412302][T14603] x64_sys_call+0x2327/0x3020 [ 287.412374][T14603] do_syscall_64+0x136/0x3c0 [ 287.412411][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.412497][T14603] RIP: 0033:0x7fc9a844e019 [ 287.412523][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.412555][T14603] RSP: 002b:00007fc9a6ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.412576][T14603] RAX: ffffffffffffffda RBX: 00007fc9a86d5fa0 RCX: 00007fc9a844e019 [ 287.412596][T14603] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 287.412684][T14603] RBP: 00007fc9a6ea7090 R08: 0000000000000590 R09: 0000000000000000 [ 287.412702][T14603] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 287.412717][T14603] R13: 00007fc9a86d6038 R14: 00007fc9a86d5fa0 R15: 00007ffcc898f988 [ 287.412828][T14603] [ 287.687519][T14603] xt_helper: cannot load conntrack support for proto=10 [ 287.721322][ T28] audit: type=1326 audit(2000000490.941:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.0.3467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fc19e019 code=0x7ffc0000 [ 287.746876][ T28] audit: type=1326 audit(2000000490.941:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.0.3467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fc19e019 code=0x7ffc0000 [ 287.779670][ T28] audit: type=1326 audit(2000000490.941:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.0.3467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f28fc19e019 code=0x7ffc0000 [ 287.822643][ T28] audit: type=1326 audit(2000000491.071:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.0.3467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fc19e019 code=0x7ffc0000 [ 287.850883][ T28] audit: type=1326 audit(2000000491.071:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.0.3467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fc19e019 code=0x7ffc0000 [ 288.385615][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3474'. [ 289.054657][T14661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3485'. [ 289.194121][T14672] SET target dimension over the limit! [ 289.272224][T14664] syz.3.3486 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 289.295254][T14680] xt_hashlimit: size too large, truncated to 1048576 [ 289.347078][T14664] CPU: 1 UID: 0 PID: 14664 Comm: syz.3.3486 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 289.347135][T14664] Tainted: [W]=WARN [ 289.347142][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.347158][T14664] Call Trace: [ 289.347166][T14664] [ 289.347177][T14664] __dump_stack+0x1d/0x30 [ 289.347252][T14664] dump_stack_lvl+0x95/0xd0 [ 289.347350][T14664] dump_stack+0x15/0x1b [ 289.347368][T14664] dump_header+0x80/0x240 [ 289.347390][T14664] oom_kill_process+0x295/0x350 [ 289.347504][T14664] out_of_memory+0x981/0xbc0 [ 289.347540][T14664] try_charge_memcg+0x621/0xa00 [ 289.347580][T14664] __memcg_kmem_charge_page+0x199/0x3a0 [ 289.347685][T14664] __alloc_frozen_pages_noprof+0x18a/0x350 [ 289.347740][T14664] alloc_pages_bulk_noprof+0x4c3/0x550 [ 289.347814][T14664] ? policy_nodemask+0x417/0x5e0 [ 289.347853][T14664] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 289.347890][T14664] ? alloc_pages_mpol+0xd9/0x1d0 [ 289.347920][T14664] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 289.348049][T14664] __kvmalloc_node_noprof+0x3a0/0x590 [ 289.348077][T14664] ? futex_hash_allocate+0x192/0x920 [ 289.348101][T14664] ? futex_hash_allocate+0x192/0x920 [ 289.348128][T14664] ? futex_hash_allocate+0x192/0x920 [ 289.348217][T14664] futex_hash_allocate+0x192/0x920 [ 289.348238][T14664] ? cap_task_prctl+0x13f/0x6b0 [ 289.348292][T14664] futex_hash_prctl+0xd8/0xf0 [ 289.348317][T14664] __se_sys_prctl+0x4f4/0x13b0 [ 289.348356][T14664] __x64_sys_prctl+0x67/0x80 [ 289.348397][T14664] x64_sys_call+0x2533/0x3020 [ 289.348427][T14664] do_syscall_64+0x136/0x3c0 [ 289.348464][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.348497][T14664] RIP: 0033:0x7fc9a844e019 [ 289.348521][T14664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.348545][T14664] RSP: 002b:00007fc9a6ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 289.348610][T14664] RAX: ffffffffffffffda RBX: 00007fc9a86d5fa0 RCX: 00007fc9a844e019 [ 289.348661][T14664] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 289.348677][T14664] RBP: 00007fc9a84e500c R08: 0000000000000000 R09: 0000000000000000 [ 289.348742][T14664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.348755][T14664] R13: 00007fc9a86d6038 R14: 00007fc9a86d5fa0 R15: 00007ffcc898f988 [ 289.348778][T14664] [ 289.350654][T14664] memory: usage 307112kB, limit 307200kB, failcnt 3972 [ 289.769595][T14664] memory+swap: usage 2704kB, limit 9007199254740988kB, failcnt 0 [ 289.777593][T14664] kmem: usage 1864kB, limit 9007199254740988kB, failcnt 0 [ 289.784851][T14664] Memory cgroup stats for /syz3: [ 289.785194][T14664] cache 12288 [ 289.810545][T14664] rss 36864 [ 289.813804][T14664] shmem 0 [ 289.816919][T14664] mapped_file 12288 [ 289.823547][T14688] PM: suspend entry (deep) [ 289.829225][T14664] dirty 0 [ 289.832337][T14664] writeback 0 [ 289.836201][T14664] workingset_refault_anon 433 [ 289.841024][T14664] workingset_refault_file 6975 [ 289.845980][T14664] swap 585728 [ 289.849482][T14664] swapcached 41529344 [ 289.854140][T14664] pgpgin 284167 [ 289.860465][T14664] pgpgout 284151 [ 289.864069][T14664] pgfault 257205 [ 289.868130][T14664] pgmajfault 334 [ 289.871827][ T9488] Filesystems sync: 0.043 seconds [ 289.881904][T14664] inactive_anon 49152 [ 289.885987][T14664] active_anon 0 [ 289.889572][T14664] inactive_file 4096 [ 289.893534][T14664] active_file 12288 [ 289.897625][T14664] unevictable 0 [ 289.918040][T14664] hierarchical_memory_limit 314572800 [ 289.924305][T14664] hierarchical_memsw_limit 9223372036854771712 [ 289.931344][T14664] total_cache 12288 [ 289.936445][T14688] Freezing user space processes [ 289.942169][T14664] total_rss 36864 [ 289.946152][T14664] total_shmem 0 [ 289.949892][T14664] total_mapped_file 12288 [ 289.954488][T14664] total_dirty 0 [ 289.958000][T14664] total_writeback 0 [ 289.961824][T14664] total_workingset_refault_anon 433 [ 289.967097][T14664] total_workingset_refault_file 6975 [ 289.972471][T14664] total_swap 585728 [ 289.976328][T14664] total_swapcached 41529344 [ 289.980913][T14664] total_pgpgin 284167 [ 289.984920][T14664] total_pgpgout 284151 [ 289.989003][T14664] total_pgfault 257205 [ 289.993081][T14664] total_pgmajfault 334 [ 289.997181][T14664] total_inactive_anon 49152 [ 290.001700][T14664] total_active_anon 0 [ 290.005790][T14664] total_inactive_file 4096 [ 290.010219][T14664] total_active_file 12288 [ 290.014556][T14664] total_unevictable 0 [ 290.018530][T14664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3486,pid=14663,uid=0 [ 290.033363][T14664] Memory cgroup out of memory: Killed process 14663 (syz.3.3486) total-vm:94188kB, anon-rss:1296kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 290.083720][T14688] Freezing user space processes completed (elapsed 0.142 seconds) [ 290.091805][T14688] OOM killer disabled. [ 290.095923][T14688] Freezing remaining freezable tasks [ 290.102912][T14688] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 290.111202][T14688] printk: Suspending console(s) (use no_console_suspend to debug) [ 290.135720][T14688] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 290.189179][T14688] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 290.189264][T14688] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 290.189293][T14688] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 290.189467][T14688] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 290.189496][T14688] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 290.189526][T14688] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 290.189627][T14688] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 290.189726][T14688] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 290.189798][T14688] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 290.189828][T14688] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 290.189858][T14688] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 290.189978][T14688] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 290.190039][T14688] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 290.190069][T14688] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 290.190164][T14688] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 290.236046][ T9608] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 290.938979][T14688] ACPI: PM: Preparing to enter system sleep state S3 [ 290.939274][T14688] ACPI: PM: Saving platform NVS memory [ 290.939333][T14688] Disabling non-boot CPUs ... [ 290.944204][T14688] smpboot: CPU 1 is now offline [ 290.949887][T14688] ACPI: PM: Low-level resume complete [ 290.949951][T14688] ACPI: PM: Restoring platform NVS memory [ 290.969294][T14688] Enabling non-boot CPUs ... [ 290.969719][T14688] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 290.976073][T14688] CPU1 is up [ 290.976386][T14688] ACPI: PM: Waking up from system sleep state S3 [ 291.013910][ T9505] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 291.147103][T14688] OOM killer enabled. [ 291.147753][T14688] Restarting tasks: Starting [ 291.184576][T14688] Restarting tasks: Done [ 291.185507][T14688] random: crng reseeded on system resumption [ 291.189282][T14713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3496'. [ 291.194979][T14688] PM: suspend exit [ 291.383132][ T28] audit: type=1400 audit(2000000494.681:6948): avc: denied { write } for pid=14726 comm="syz.6.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 292.154186][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3506'. [ 292.260209][T14753] netlink: 612 bytes leftover after parsing attributes in process `syz.3.3510'. [ 292.339294][T14759] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 292.347473][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3513'. [ 292.401741][T14763] FAULT_INJECTION: forcing a failure. [ 292.401741][T14763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.404013][T14763] CPU: 0 UID: 0 PID: 14763 Comm: syz.5.3515 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 292.404053][T14763] Tainted: [W]=WARN [ 292.404067][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.404085][T14763] Call Trace: [ 292.404094][T14763] [ 292.404104][T14763] __dump_stack+0x1d/0x30 [ 292.404136][T14763] dump_stack_lvl+0x95/0xd0 [ 292.404160][T14763] dump_stack+0x15/0x1b [ 292.404184][T14763] should_fail_ex+0x25e/0x270 [ 292.404266][T14763] should_fail+0xb/0x20 [ 292.404314][T14763] should_fail_usercopy+0x1a/0x20 [ 292.404417][T14763] _copy_to_user+0x20/0xa0 [ 292.404549][T14763] simple_read_from_buffer+0xb5/0x130 [ 292.404587][T14763] proc_fail_nth_read+0x10e/0x150 [ 292.404658][T14763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.404740][T14763] vfs_read+0x18e/0x7c0 [ 292.404785][T14763] ? __rcu_read_unlock+0x4e/0x70 [ 292.404816][T14763] ? __fget_files+0x184/0x1c0 [ 292.404839][T14763] ? mutex_lock+0x57/0x90 [ 292.404937][T14763] ksys_read+0xdc/0x1a0 [ 292.404997][T14763] __x64_sys_read+0x40/0x50 [ 292.405015][T14763] x64_sys_call+0x2886/0x3020 [ 292.405043][T14763] do_syscall_64+0x136/0x3c0 [ 292.405067][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.405168][T14763] RIP: 0033:0x7fccba63e84e [ 292.405187][T14763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.405207][T14763] RSP: 002b:00007fccb90d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.405231][T14763] RAX: ffffffffffffffda RBX: 00007fccb90d76c0 RCX: 00007fccba63e84e [ 292.405284][T14763] RDX: 000000000000000f RSI: 00007fccb90d70a0 RDI: 0000000000000005 [ 292.405300][T14763] RBP: 00007fccb90d7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.405315][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.405326][T14763] R13: 00007fccba906038 R14: 00007fccba905fa0 R15: 00007fff07b2a9f8 [ 292.405407][T14763] [ 292.777298][T14784] netlink: 612 bytes leftover after parsing attributes in process `syz.6.3523'. [ 293.046455][T14811] netlink: 612 bytes leftover after parsing attributes in process `syz.3.3534'. [ 293.106275][T14817] xfrm1: entered allmulticast mode [ 293.266278][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 293.267460][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.269076][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.287705][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 293.289063][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.290390][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.305473][ T28] audit: type=1400 audit(2000000496.581:6949): avc: denied { accept } for pid=14824 comm="syz.5.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 293.314710][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 293.315991][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.317209][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.331540][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 293.332794][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.349117][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.353361][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 293.354582][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.355873][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.364578][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 293.365823][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.367205][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.392902][T14853] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3547'. [ 293.403380][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(20) [ 293.404532][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.405763][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.415876][T14817] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(22) [ 293.417015][T14817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.418360][T14817] vhci_hcd vhci_hcd.0: Device attached [ 293.602650][ T3375] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 293.992549][T14850] vhci_hcd: connection closed [ 293.992801][T14835] vhci_hcd: connection closed [ 293.998729][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 293.998801][T14826] vhci_hcd: connection reset by peer [ 293.999657][ T9561] vhci_hcd vhci_hcd.3: release socket [ 293.999726][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.002618][T14847] vhci_hcd: connection closed [ 294.003542][T14844] vhci_hcd: connection closed [ 294.004258][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.004772][T14841] vhci_hcd: connection closed [ 294.005249][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.005272][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.009438][T14838] vhci_hcd: connection closed [ 294.009537][T14856] vhci_hcd: connection closed [ 294.010924][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.012644][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.013571][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.024784][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.025834][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.026767][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.040589][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.041784][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.042733][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.052450][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.053531][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.054557][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.055871][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.056743][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.057708][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.062665][ T9561] vhci_hcd vhci_hcd.3: stop threads [ 294.063600][ T9561] vhci_hcd vhci_hcd.3: release socket [ 294.064473][ T9561] vhci_hcd vhci_hcd.3: disconnect device [ 294.081464][T14889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3557'. [ 294.086791][T14891] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3558'. [ 294.132917][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 294.135329][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3561'. [ 294.475405][T14920] SET target dimension over the limit! [ 294.490134][T14922] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3569'. [ 294.491752][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3569'. [ 294.501976][T14926] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3571'. [ 294.539913][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3574'. [ 294.640697][T14942] bridge_slave_0: left allmulticast mode [ 294.649000][T14942] bridge_slave_0: left promiscuous mode [ 294.650100][T14942] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.684150][T14919] syz.0.3568 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 294.693421][T14919] CPU: 1 UID: 0 PID: 14919 Comm: syz.0.3568 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 294.693489][T14919] Tainted: [W]=WARN [ 294.693496][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.693509][T14919] Call Trace: [ 294.693515][T14919] [ 294.693523][T14919] __dump_stack+0x1d/0x30 [ 294.693552][T14919] dump_stack_lvl+0x95/0xd0 [ 294.693591][T14919] dump_stack+0x15/0x1b [ 294.693610][T14919] dump_header+0x80/0x240 [ 294.693647][T14919] oom_kill_process+0x295/0x350 [ 294.693689][T14919] out_of_memory+0x981/0xbc0 [ 294.693731][T14919] try_charge_memcg+0x621/0xa00 [ 294.693753][T14919] ? __rcu_read_unlock+0x4e/0x70 [ 294.693891][T14919] __memcg_kmem_charge_page+0x199/0x3a0 [ 294.693922][T14919] __alloc_frozen_pages_noprof+0x18a/0x350 [ 294.693959][T14919] alloc_pages_mpol+0xa9/0x1d0 [ 294.693999][T14919] alloc_pages_noprof+0x8f/0x140 [ 294.694093][T14919] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 294.694142][T14919] __kvmalloc_node_noprof+0x3a0/0x590 [ 294.694180][T14919] ? futex_hash_allocate+0x192/0x920 [ 294.694207][T14919] ? futex_hash_allocate+0x192/0x920 [ 294.694233][T14919] ? futex_hash_allocate+0x192/0x920 [ 294.694313][T14919] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 294.694353][T14919] futex_hash_allocate+0x192/0x920 [ 294.694383][T14919] ? cap_task_prctl+0x13f/0x6b0 [ 294.694425][T14919] futex_hash_prctl+0xd8/0xf0 [ 294.694445][T14919] __se_sys_prctl+0x4f4/0x13b0 [ 294.694559][T14919] __x64_sys_prctl+0x67/0x80 [ 294.694607][T14919] x64_sys_call+0x2533/0x3020 [ 294.694700][T14919] do_syscall_64+0x136/0x3c0 [ 294.694736][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.694765][T14919] RIP: 0033:0x7f28fc19e019 [ 294.694800][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.694884][T14919] RSP: 002b:00007f28fabd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 294.694907][T14919] RAX: ffffffffffffffda RBX: 00007f28fc426090 RCX: 00007f28fc19e019 [ 294.694925][T14919] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 294.694942][T14919] RBP: 00007f28fc23500c R08: 0000000000000000 R09: 0000000000000000 [ 294.695000][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.695071][T14919] R13: 00007f28fc426128 R14: 00007f28fc426090 R15: 00007ffef99d5498 [ 294.695098][T14919] [ 294.695178][T14919] memory: usage 307200kB, limit 307200kB, failcnt 2539 [ 294.779684][T14942] bridge_slave_1: left allmulticast mode [ 294.780748][T14942] bridge_slave_1: left promiscuous mode [ 294.785980][T14942] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.855314][T14919] memory+swap: usage 307676kB, limit 9007199254740988kB, failcnt 0 [ 294.862773][T14919] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 294.872998][T14919] Memory cgroup stats for /syz0: [ 294.873279][T14919] cache 8192 [ 294.883412][T14919] rss 4096 [ 294.883934][T14919] shmem 0 [ 294.884381][T14919] mapped_file 4096 [ 294.893997][T14919] dirty 0 [ 294.894589][T14919] writeback 0 [ 294.895163][T14919] workingset_refault_anon 2135 [ 294.904987][T14942] bond0: (slave bond_slave_0): Releasing backup interface [ 294.907678][T14919] workingset_refault_file 9784 [ 294.908429][T14919] swap 487424 [ 294.908992][T14919] swapcached 39309312 [ 294.918626][T14919] pgpgin 271494 [ 294.919295][T14919] pgpgout 271491 [ 294.919828][T14919] pgfault 281478 [ 294.929219][T14919] pgmajfault 590 [ 294.929871][T14919] inactive_anon 0 [ 294.930492][T14919] active_anon 4096 [ 294.939952][T14919] inactive_file 0 [ 294.940556][T14919] active_file 8192 [ 294.941129][T14919] unevictable 0 [ 294.947713][T14919] hierarchical_memory_limit 314572800 [ 294.948751][T14919] hierarchical_memsw_limit 9223372036854771712 [ 294.958310][T14919] total_cache 8192 [ 294.959044][T14919] total_rss 4096 [ 294.964229][T14919] total_shmem 0 [ 294.964902][T14919] total_mapped_file 4096 [ 294.967384][T14942] bond0: (slave bond_slave_1): Releasing backup interface [ 294.974806][T14919] total_dirty 0 [ 294.975424][T14919] total_writeback 0 [ 294.976132][T14919] total_workingset_refault_anon 2135 [ 294.988455][T14919] total_workingset_refault_file 9784 [ 294.989484][T14919] total_swap 487424 [ 294.994625][T14919] total_swapcached 39309312 [ 294.995465][T14919] total_pgpgin 271494 [ 295.000525][T14919] total_pgpgout 271491 [ 295.001232][T14919] total_pgfault 281478 [ 295.005317][T14919] total_pgmajfault 590 [ 295.006031][T14919] total_inactive_anon 0 [ 295.011264][T14919] total_active_anon 4096 [ 295.012031][T14919] total_inactive_file 0 [ 295.015549][T14919] total_active_file 8192 [ 295.016236][T14919] total_unevictable 0 [ 295.020057][T14919] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3568,pid=14912,uid=0 [ 295.027706][T14919] Memory cgroup out of memory: Killed process 14912 (syz.0.3568) total-vm:96368kB, anon-rss:1236kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 295.038981][T14942] team0: Port device team_slave_0 removed [ 295.056921][T14942] team0: Port device team_slave_1 removed [ 295.063531][T14942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.067686][T14942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.075113][T14942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.076444][T14942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.082056][T14942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.086200][T14948] team0: Mode changed to "loadbalance" [ 295.147067][T14957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3583'. [ 295.234619][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 295.440631][T14952] lo speed is unknown, defaulting to 1000 [ 295.451914][ T9572] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.574620][ T9572] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.611250][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.613254][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.614543][T14952] bridge_slave_0: entered allmulticast mode [ 295.616527][T14952] bridge_slave_0: entered promiscuous mode [ 295.619249][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.620544][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.622127][T14952] bridge_slave_1: entered allmulticast mode [ 295.623827][T14952] bridge_slave_1: entered promiscuous mode [ 295.638385][T14952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.641784][T14952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.654872][T14952] team0: Port device team_slave_0 added [ 295.656985][T14952] team0: Port device team_slave_1 added [ 295.679540][T14952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.681517][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.686337][T14952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.688942][T14952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.690173][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.694564][T14952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.715908][T14952] hsr_slave_0: entered promiscuous mode [ 295.717643][T14952] hsr_slave_1: entered promiscuous mode [ 295.718872][T14952] debugfs: 'hsr0' already exists in 'hsr' [ 295.719894][T14952] Cannot create hsr debugfs directory [ 295.959544][ T9572] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.037642][T15011] FAULT_INJECTION: forcing a failure. [ 296.037642][T15011] name failslab, interval 1, probability 0, space 0, times 0 [ 296.039789][T15011] CPU: 1 UID: 0 PID: 15011 Comm: syz.6.3596 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 296.039828][T15011] Tainted: [W]=WARN [ 296.039887][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.039959][T15011] Call Trace: [ 296.039968][T15011] [ 296.039978][T15011] __dump_stack+0x1d/0x30 [ 296.040035][T15011] dump_stack_lvl+0x95/0xd0 [ 296.040062][T15011] dump_stack+0x15/0x1b [ 296.040086][T15011] should_fail_ex+0x25e/0x270 [ 296.040144][T15011] should_failslab+0x8c/0xb0 [ 296.040174][T15011] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 296.040198][T15011] ? skb_clone+0x151/0x1f0 [ 296.040225][T15011] ? skb_clone+0x151/0x1f0 [ 296.040244][T15011] skb_clone+0x151/0x1f0 [ 296.040267][T15011] __netlink_deliver_tap+0x2be/0x510 [ 296.040307][T15011] netlink_unicast+0x654/0x680 [ 296.040414][T15011] netlink_sendmsg+0x5be/0x6f0 [ 296.040497][T15011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.040583][T15011] ____sys_sendmsg+0x532/0x580 [ 296.040612][T15011] ___sys_sendmsg+0x195/0x1e0 [ 296.040647][T15011] __x64_sys_sendmsg+0xd4/0x160 [ 296.040669][T15011] x64_sys_call+0x194c/0x3020 [ 296.040712][T15011] do_syscall_64+0x136/0x3c0 [ 296.040746][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.040799][T15011] RIP: 0033:0x7f8c9a72e019 [ 296.040817][T15011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.040838][T15011] RSP: 002b:00007f8c99187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.040857][T15011] RAX: ffffffffffffffda RBX: 00007f8c9a9b5fa0 RCX: 00007f8c9a72e019 [ 296.040918][T15011] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 296.040935][T15011] RBP: 00007f8c99187090 R08: 0000000000000000 R09: 0000000000000000 [ 296.040951][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.040967][T15011] R13: 00007f8c9a9b6038 R14: 00007f8c9a9b5fa0 R15: 00007ffed2d78228 [ 296.040993][T15011] [ 296.203888][ T9572] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.402562][T15034] SET target dimension over the limit! [ 296.527467][ T9572] bond4 (unregistering): (slave gretap1): Releasing active interface [ 296.542661][ T9572] bond1 (unregistering): (slave geneve2): Releasing active interface [ 296.564762][ T9572] bond0 (unregistering): Released all slaves [ 296.567752][ T9572] bond1 (unregistering): Released all slaves [ 296.573631][T15038] SET target dimension over the limit! [ 296.577462][ T9572] bond2 (unregistering): Released all slaves [ 296.581494][ T9572] bond3 (unregistering): Released all slaves [ 296.585387][ T9572] bond4 (unregistering): Released all slaves [ 296.678316][ T9572] .d: left promiscuous mode [ 296.687705][ T28] audit: type=1400 audit(2000000499.971:6950): avc: denied { write } for pid=15042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.699564][T15056] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 296.702552][T12014] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 296.713167][T12014] CPU: 1 UID: 0 PID: 12014 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 296.713204][T12014] Tainted: [W]=WARN [ 296.713213][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.713228][T12014] Call Trace: [ 296.713293][T12014] [ 296.713303][T12014] __dump_stack+0x1d/0x30 [ 296.713328][T12014] dump_stack_lvl+0x95/0xd0 [ 296.713351][T12014] dump_stack+0x15/0x1b [ 296.713377][T12014] dump_header+0x80/0x240 [ 296.713410][T12014] oom_kill_process+0x295/0x350 [ 296.713448][T12014] out_of_memory+0x981/0xbc0 [ 296.713539][T12014] try_charge_memcg+0x621/0xa00 [ 296.713588][T12014] charge_memcg+0x6d/0x120 [ 296.713623][T12014] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 296.713662][T12014] swap_cache_alloc_folio+0x47b/0x5e0 [ 296.713733][T12014] swap_cluster_readahead+0x2b1/0x460 [ 296.713775][T12014] swapin_readahead+0xd8/0x8a0 [ 296.713857][T12014] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 296.713895][T12014] ? hrtimer_start_range_ns+0x108/0x120 [ 296.713929][T12014] ? __rcu_read_unlock+0x4e/0x70 [ 296.713967][T12014] ? swap_cache_get_folio+0x1f7/0x200 [ 296.714063][T12014] do_swap_page+0x2a2/0x1ec0 [ 296.714097][T12014] ? __schedule+0x799/0xd10 [ 296.714185][T12014] ? __rcu_read_lock+0x36/0x50 [ 296.714215][T12014] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 296.714250][T12014] handle_mm_fault+0xb3c/0x2da0 [ 296.714383][T12014] do_user_addr_fault+0x634/0x1060 [ 296.714480][T12014] ? trace_page_fault_user+0x1f/0xa0 [ 296.714522][T12014] exc_page_fault+0x62/0xa0 [ 296.714550][T12014] asm_exc_page_fault+0x26/0x30 [ 296.714577][T12014] RIP: 0033:0x7f28fc159197 [ 296.714597][T12014] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 296.714620][T12014] RSP: 002b:00007ffef99d5790 EFLAGS: 00010202 [ 296.714706][T12014] RAX: 0000000000000000 RBX: 000055556aecb500 RCX: 00007f28fc159197 [ 296.714724][T12014] RDX: 00007ffef99d57d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.714742][T12014] RBP: 00007ffef99d583c R08: 0000000000000000 R09: 0000000000000000 [ 296.714882][T12014] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 296.714900][T12014] R13: 00000000000927c0 R14: 00000000000485f8 R15: 00007ffef99d5890 [ 296.714998][T12014] [ 296.715046][ T28] audit: type=1400 audit(2000000499.971:6951): avc: denied { write } for pid=15057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.761168][T12014] memory: usage 307200kB, limit 307200kB, failcnt 2674 [ 296.762331][T12014] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 296.763635][T12014] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 296.764823][T12014] Memory cgroup stats for /syz0: [ 296.765074][T12014] cache 4096 [ 296.766570][T12014] rss 0 [ 296.767130][T12014] shmem 0 [ 296.767713][T12014] mapped_file 0 [ 296.768339][T12014] dirty 0 [ 296.768889][T12014] writeback 4096 [ 296.769594][T12014] workingset_refault_anon 2205 [ 296.770350][T12014] workingset_refault_file 10176 [ 296.790203][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 296.840236][T12014] swap 479232 [ 296.840871][T12014] swapcached 39735296 [ 296.841578][T12014] pgpgin 277812 [ 296.842213][T12014] pgpgout 277810 [ 296.843020][T12014] pgfault 287978 [ 296.843710][T12014] pgmajfault 630 [ 296.844408][T12014] inactive_anon 0 [ 296.845103][T12014] active_anon 0 [ 296.845732][T12014] inactive_file 0 [ 296.846501][T12014] active_file 4096 [ 296.847108][T12014] unevictable 0 [ 296.847689][T12014] hierarchical_memory_limit 314572800 [ 296.848650][T12014] hierarchical_memsw_limit 9223372036854771712 [ 296.849696][T12014] total_cache 4096 [ 296.850392][T12014] total_rss 0 [ 296.851066][T12014] total_shmem 0 [ 296.851699][T12014] total_mapped_file 0 [ 296.852332][T12014] total_dirty 0 [ 296.853002][T12014] total_writeback 4096 [ 296.853775][T12014] total_workingset_refault_anon 2205 [ 296.854692][T12014] total_workingset_refault_file 10176 [ 296.855643][T12014] total_swap 479232 [ 296.856224][T12014] total_swapcached 39735296 [ 296.856988][T12014] total_pgpgin 277812 [ 296.857654][T12014] total_pgpgout 277810 [ 296.858343][T12014] total_pgfault 287978 [ 296.859048][T12014] total_pgmajfault 630 [ 296.859812][T12014] total_inactive_anon 0 [ 296.860529][T12014] total_active_anon 0 [ 296.861173][T12014] total_inactive_file 0 [ 296.861923][T12014] total_active_file 4096 [ 296.862646][T12014] total_unevictable 0 [ 296.863321][T12014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3601,pid=15021,uid=0 [ 296.865673][T12014] Memory cgroup out of memory: Killed process 15021 (syz.0.3601) total-vm:94320kB, anon-rss:1236kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 296.967338][ T9572] tipc: Left network mode [ 297.052355][ T9572] IPVS: stopping master sync thread 8465 ... [ 297.070225][ T9572] hsr_slave_0: left promiscuous mode [ 297.072838][ T9572] hsr_slave_1: left promiscuous mode [ 297.081218][ T9572] veth1_vlan: left promiscuous mode [ 297.082768][ T9572] veth0_vlan: left promiscuous mode [ 297.207128][T15074] netlink: 'syz.1.3615': attribute type 3 has an invalid length. [ 297.384329][T15085] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 297.409303][T15081] netlink: 'syz.3.3619': attribute type 6 has an invalid length. [ 297.410778][T15081] netlink: 'syz.3.3619': attribute type 7 has an invalid length. [ 297.420431][T15081] netlink: 'syz.3.3619': attribute type 8 has an invalid length. [ 297.510520][T14952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.516768][T14952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.518686][T14952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.521640][T14952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.523526][T14952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.528754][T14952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.530720][T14952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.547089][T14952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.569587][ T28] audit: type=1400 audit(2000000500.811:6952): avc: denied { write } for pid=15088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.600261][ T28] audit: type=1400 audit(2000000500.871:6953): avc: denied { write } for pid=15116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.641940][T14952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.675761][T14952] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.685591][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.686876][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.692053][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.693390][ T9571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.848963][T15127] SET target dimension over the limit! [ 297.927283][T15119] SET target dimension over the limit! [ 297.980519][ T9572] IPVS: stop unused estimator thread 0... [ 297.982178][T15140] netlink: 'syz.1.3627': attribute type 3 has an invalid length. [ 298.076833][T14952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.135403][T13536] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 298.143391][T13536] CPU: 1 UID: 0 PID: 13536 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 298.143432][T13536] Tainted: [W]=WARN [ 298.143439][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.143537][T13536] Call Trace: [ 298.143544][T13536] [ 298.143554][T13536] __dump_stack+0x1d/0x30 [ 298.143582][T13536] dump_stack_lvl+0x95/0xd0 [ 298.143604][T13536] dump_stack+0x15/0x1b [ 298.143622][T13536] dump_header+0x80/0x240 [ 298.143653][T13536] oom_kill_process+0x295/0x350 [ 298.143689][T13536] out_of_memory+0x981/0xbc0 [ 298.143719][T13536] try_charge_memcg+0x621/0xa00 [ 298.143746][T13536] charge_memcg+0x6d/0x120 [ 298.143834][T13536] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 298.143900][T13536] swap_cache_alloc_folio+0x47b/0x5e0 [ 298.143934][T13536] swap_cluster_readahead+0x3d2/0x460 [ 298.143976][T13536] swapin_readahead+0xd8/0x8a0 [ 298.144015][T13536] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 298.144063][T13536] ? hrtimer_start_range_ns+0x108/0x120 [ 298.144092][T13536] ? __rcu_read_unlock+0x4e/0x70 [ 298.144127][T13536] ? swap_cache_get_folio+0x1f7/0x200 [ 298.144232][T13536] do_swap_page+0x2a2/0x1ec0 [ 298.144268][T13536] ? __schedule+0x799/0xd10 [ 298.144295][T13536] ? __rcu_read_lock+0x36/0x50 [ 298.144322][T13536] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 298.144387][T13536] handle_mm_fault+0xb3c/0x2da0 [ 298.144427][T13536] do_user_addr_fault+0x634/0x1060 [ 298.144483][T13536] ? trace_page_fault_user+0x1f/0xa0 [ 298.144517][T13536] exc_page_fault+0x62/0xa0 [ 298.144545][T13536] asm_exc_page_fault+0x26/0x30 [ 298.144569][T13536] RIP: 0033:0x7fc9a8409197 [ 298.144584][T13536] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 298.144603][T13536] RSP: 002b:00007ffcc898fc80 EFLAGS: 00010202 [ 298.144640][T13536] RAX: 0000000000000000 RBX: 000055558d448500 RCX: 00007fc9a8409197 [ 298.144655][T13536] RDX: 00007ffcc898fcc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.144717][T13536] RBP: 00007ffcc898fd2c R08: 0000000000000000 R09: 0000000000000000 [ 298.144733][T13536] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 298.144748][T13536] R13: 00000000000927c0 R14: 0000000000048bac R15: 00007ffcc898fd80 [ 298.144840][T13536] [ 298.148874][T13536] memory: usage 307200kB, limit 307200kB, failcnt 4579 [ 298.197991][T13536] memory+swap: usage 307828kB, limit 9007199254740988kB, failcnt 0 [ 298.238473][T13536] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 298.239836][T13536] Memory cgroup stats for /syz3: [ 298.240143][T13536] cache 0 [ 298.241436][T13536] rss 0 [ 298.242111][T13536] shmem 0 [ 298.242699][T13536] mapped_file 0 [ 298.243389][T13536] dirty 0 [ 298.244087][T13536] writeback 0 [ 298.244823][T13536] workingset_refault_anon 611 [ 298.245618][T13536] workingset_refault_file 7623 [ 298.246465][T13536] swap 643072 [ 298.247091][T13536] swapcached 42364928 [ 298.247764][T13536] pgpgin 288279 [ 298.248366][T13536] pgpgout 288278 [ 298.249077][T13536] pgfault 261936 [ 298.249751][T13536] pgmajfault 430 [ 298.250459][T13536] inactive_anon 0 [ 298.251965][T13536] active_anon 0 [ 298.252644][T13536] inactive_file 0 [ 298.254574][T13536] active_file 4096 [ 298.255956][T13536] unevictable 0 [ 298.256637][T13536] hierarchical_memory_limit 314572800 [ 298.257608][T13536] hierarchical_memsw_limit 9223372036854771712 [ 298.258682][T13536] total_cache 0 [ 298.259381][T13536] total_rss 0 [ 298.259982][T13536] total_shmem 0 [ 298.260691][T13536] total_mapped_file 0 [ 298.261369][T13536] total_dirty 0 [ 298.262039][T13536] total_writeback 0 [ 298.262701][T13536] total_workingset_refault_anon 611 [ 298.263639][T13536] total_workingset_refault_file 7623 [ 298.264495][T13536] total_swap 643072 [ 298.265193][T13536] total_swapcached 42364928 [ 298.266010][T13536] total_pgpgin 288279 [ 298.266741][T13536] total_pgpgout 288278 [ 298.267475][T13536] total_pgfault 261936 [ 298.268190][T13536] total_pgmajfault 430 [ 298.268961][T13536] total_inactive_anon 0 [ 298.270470][T13536] total_active_anon 0 [ 298.271185][T13536] total_inactive_file 0 [ 298.272960][T13536] total_active_file 4096 [ 298.273728][T13536] total_unevictable 0 [ 298.274864][T13536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3624,pid=15107,uid=0 [ 298.277407][T13536] Memory cgroup out of memory: Killed process 15107 (syz.3.3624) total-vm:94188kB, anon-rss:1240kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 298.299921][T15123] syz.0.3621 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 298.314287][T15123] CPU: 1 UID: 0 PID: 15123 Comm: syz.0.3621 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 298.314330][T15123] Tainted: [W]=WARN [ 298.314452][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.314470][T15123] Call Trace: [ 298.314479][T15123] [ 298.314489][T15123] __dump_stack+0x1d/0x30 [ 298.314512][T15123] dump_stack_lvl+0x95/0xd0 [ 298.314579][T15123] dump_stack+0x15/0x1b [ 298.314610][T15123] dump_header+0x80/0x240 [ 298.314710][T15123] oom_kill_process+0x295/0x350 [ 298.314742][T15123] out_of_memory+0x981/0xbc0 [ 298.314780][T15123] try_charge_memcg+0x621/0xa00 [ 298.314866][T15123] __memcg_kmem_charge_page+0x199/0x3a0 [ 298.314898][T15123] __alloc_frozen_pages_noprof+0x18a/0x350 [ 298.314929][T15123] alloc_pages_mpol+0xa9/0x1d0 [ 298.314977][T15123] alloc_pages_noprof+0x8f/0x140 [ 298.315005][T15123] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 298.315100][T15123] __kvmalloc_node_noprof+0x3a0/0x590 [ 298.315125][T15123] ? futex_hash_allocate+0x192/0x920 [ 298.315146][T15123] ? futex_hash_allocate+0x192/0x920 [ 298.315184][T15123] ? futex_hash_allocate+0x192/0x920 [ 298.315214][T15123] futex_hash_allocate+0x192/0x920 [ 298.315304][T15123] ? cap_task_prctl+0x13f/0x6b0 [ 298.315342][T15123] futex_hash_prctl+0xd8/0xf0 [ 298.315409][T15123] __se_sys_prctl+0x4f4/0x13b0 [ 298.315453][T15123] __x64_sys_prctl+0x67/0x80 [ 298.315476][T15123] x64_sys_call+0x2533/0x3020 [ 298.315498][T15123] do_syscall_64+0x136/0x3c0 [ 298.315576][T15123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.315601][T15123] RIP: 0033:0x7f28fc19e019 [ 298.315627][T15123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.315645][T15123] RSP: 002b:00007f28fabd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 298.315667][T15123] RAX: ffffffffffffffda RBX: 00007f28fc426090 RCX: 00007f28fc19e019 [ 298.315681][T15123] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 298.315749][T15123] RBP: 00007f28fc23500c R08: 0000000000000000 R09: 0000000000000000 [ 298.315764][T15123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.315776][T15123] R13: 00007f28fc426128 R14: 00007f28fc426090 R15: 00007ffef99d5498 [ 298.315805][T15123] [ 298.361483][T15123] memory: usage 307200kB, limit 307200kB, failcnt 3264 [ 298.362626][T15123] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 298.366183][T15123] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 298.367341][T15123] Memory cgroup stats for /syz0: [ 298.367559][T15123] cache 4096 [ 298.369107][T15123] rss 0 [ 298.369584][T15123] shmem 0 [ 298.370072][T15123] mapped_file 0 [ 298.370698][T15123] dirty 0 [ 298.371281][T15123] writeback 0 [ 298.371948][T15123] workingset_refault_anon 2299 [ 298.372793][T15123] workingset_refault_file 10960 [ 298.373598][T15123] swap 483328 [ 298.374183][T15123] swapcached 40607744 [ 298.374955][T15123] pgpgin 279036 [ 298.375608][T15123] pgpgout 279034 [ 298.376285][T15123] pgfault 288539 [ 298.376861][T15123] pgmajfault 706 [ 298.377525][T15123] inactive_anon 0 [ 298.378122][T15123] active_anon 4096 [ 298.378745][T15123] inactive_file 0 [ 298.379472][T15123] active_file 4096 [ 298.380122][T15123] unevictable 0 [ 298.380736][T15123] hierarchical_memory_limit 314572800 [ 298.381901][T15123] hierarchical_memsw_limit 9223372036854771712 [ 298.382970][T15123] total_cache 4096 [ 298.383634][T15123] total_rss 0 [ 298.384278][T15123] total_shmem 0 [ 298.384899][T15123] total_mapped_file 0 [ 298.385605][T15123] total_dirty 0 [ 298.386267][T15123] total_writeback 0 [ 298.386998][T15123] total_workingset_refault_anon 2299 [ 298.387910][T15123] total_workingset_refault_file 10960 [ 298.388813][T15123] total_swap 483328 [ 298.389491][T15123] total_swapcached 40607744 [ 298.390256][T15123] total_pgpgin 279036 [ 298.390923][T15123] total_pgpgout 279034 [ 298.391633][T15123] total_pgfault 288539 [ 298.392361][T15123] total_pgmajfault 706 [ 298.393092][T15123] total_inactive_anon 0 [ 298.393837][T15123] total_active_anon 4096 [ 298.394597][T15123] total_inactive_file 0 [ 298.395366][T15123] total_active_file 4096 [ 298.396157][T15123] total_unevictable 0 [ 298.396899][T15123] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3621,pid=15095,uid=0 [ 298.399456][T15123] Memory cgroup out of memory: Killed process 15095 (syz.0.3621) total-vm:94320kB, anon-rss:1236kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 298.561706][T15123] ================================================================== [ 298.563301][T15123] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 298.564926][T15123] [ 298.565351][T15123] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 298.566680][T15123] tick_do_update_jiffies64+0x113/0x1c0 [ 298.567656][T15123] tick_nohz_handler+0x88/0x380 [ 298.568484][T15123] __hrtimer_run_queues+0x1f8/0x510 [ 298.569375][T15123] hrtimer_interrupt+0x257/0x810 [ 298.570227][T15123] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 298.571301][T15123] sysvec_apic_timer_interrupt+0x6f/0x80 [ 298.572429][T15123] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.573513][T15123] kcsan_setup_watchpoint+0x3e8/0x450 [ 298.574447][T15123] list_lru_count_one+0x3d/0x100 [ 298.575313][T15123] count_shadow_nodes+0x43/0x250 [ 298.576173][T15123] do_shrink_slab+0x61/0x650 [ 298.577009][T15123] shrink_slab+0x53b/0x8e0 [ 298.577773][T15123] shrink_node+0x6b8/0x1e30 [ 298.578533][T15123] do_try_to_free_pages+0x408/0xc90 [ 298.579441][T15123] try_to_free_mem_cgroup_pages+0x201/0x420 [ 298.580456][T15123] try_charge_memcg+0x375/0xa00 [ 298.581367][T15123] charge_memcg+0x6d/0x120 [ 298.582198][T15123] __mem_cgroup_charge+0x28/0xb0 [ 298.583062][T15123] filemap_add_folio+0x110/0x350 [ 298.583913][T15123] __filemap_get_folio_mpol+0x32e/0x840 [ 298.584893][T15123] filemap_fault+0x458/0xb60 [ 298.585649][T15123] handle_mm_fault+0x167a/0x2da0 [ 298.586496][T15123] do_user_addr_fault+0x634/0x1060 [ 298.587397][T15123] exc_page_fault+0x62/0xa0 [ 298.588138][T15123] asm_exc_page_fault+0x26/0x30 [ 298.589014][T15123] [ 298.589457][T15123] read to 0xffffffff86c07a00 of 8 bytes by task 15123 on cpu 1: [ 298.590841][T15123] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 298.591941][T15123] count_shadow_nodes+0x6a/0x250 [ 298.592843][T15123] do_shrink_slab+0x61/0x650 [ 298.593749][T15123] shrink_slab+0x53b/0x8e0 [ 298.594558][T15123] shrink_node+0x6b8/0x1e30 [ 298.595348][T15123] do_try_to_free_pages+0x408/0xc90 [ 298.596405][T15123] try_to_free_mem_cgroup_pages+0x201/0x420 [ 298.597368][T15123] try_charge_memcg+0x375/0xa00 [ 298.598175][T15123] charge_memcg+0x6d/0x120 [ 298.598954][T15123] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 298.599965][T15123] swap_cache_alloc_folio+0x47b/0x5e0 [ 298.600873][T15123] swap_cluster_readahead+0x2b1/0x460 [ 298.601825][T15123] swapin_readahead+0xd8/0x8a0 [ 298.602693][T15123] do_swap_page+0x2a2/0x1ec0 [ 298.603466][T15123] handle_mm_fault+0xb3c/0x2da0 [ 298.604293][T15123] do_user_addr_fault+0x402/0x1060 [ 298.605167][T15123] exc_page_fault+0x62/0xa0 [ 298.605940][T15123] asm_exc_page_fault+0x26/0x30 [ 298.606831][T15123] __put_user_4+0xd/0x30 [ 298.607583][T15123] mm_release+0x7b/0x180 [ 298.608316][T15123] exit_mm_release+0x25/0x30 [ 298.609117][T15123] exit_mm+0x37/0x1a0 [ 298.609826][T15123] do_exit+0x438/0x1500 [ 298.610547][T15123] do_group_exit+0xfe/0x140 [ 298.611375][T15123] get_signal+0xe07/0xf10 [ 298.612160][T15123] arch_do_signal_or_restart+0x96/0x480 [ 298.613047][T15123] exit_to_user_mode_loop+0x15d/0x8c0 [ 298.613970][T15123] do_syscall_64+0x23c/0x3c0 [ 298.614748][T15123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.615810][T15123] [ 298.616199][T15123] value changed: 0x00000000ffffff2f -> 0x00000000ffffff30 [ 298.617311][T15123] [ 298.617726][T15123] Reported by Kernel Concurrency Sanitizer on: [ 298.618739][T15123] CPU: 1 UID: 0 PID: 15123 Comm: syz.0.3621 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 298.620639][T15123] Tainted: [W]=WARN [ 298.621328][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.623024][T15123] ================================================================== [ 298.782078][ T3375] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 298.914643][T14952] veth0_vlan: entered promiscuous mode [ 298.920763][T14952] veth1_vlan: entered promiscuous mode [ 298.944335][T14952] veth0_macvtap: entered promiscuous mode [ 298.948874][T14952] veth1_macvtap: entered promiscuous mode [ 298.959953][T14952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.973756][T14952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.571709][ T9571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.577908][ T9571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.621977][ T9556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.623675][ T9556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.281875][ T3564] usb usb8-port8: attempt power cycle [ 303.101810][ T3564] usb usb8-port8: unable to enumerate USB device