last executing test programs: 21.915387136s ago: executing program 0 (id=2401): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x3) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) name_to_handle_at(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x1200) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x210, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21.618519154s ago: executing program 0 (id=2412): r0 = socket$inet6(0xa, 0x2, 0xb) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x14, 0x29, 0x37, {0x2c}}}], 0x14}, 0x20040084) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e000000000000109022400030000000009"], 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000130700000000000000000a01010000000000680e000000000000ac"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x231, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x30}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'wg1\x00', {}, 0x3}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xa, 0x0, 0x0) 20.84138951s ago: executing program 0 (id=2438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r2, &(0x7f0000000400)=[{0x0}, {&(0x7f00000003c0)=""/4, 0x4}], 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x2400c040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x43b, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) 20.772249123s ago: executing program 0 (id=2440): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000400000000000000000000180000000400004000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) 20.704000708s ago: executing program 0 (id=2442): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_CARRIER={0x5, 0x21, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 20.561699526s ago: executing program 0 (id=2445): pipe2$9p(&(0x7f0000000000), 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) unshare(0x22020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x11a, 0x1e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=mixed,rodir,uni_xlate=0,discard,uni_xlate=0,utf8=1,nocase,showexec,shortname=win95,nonumtail=0,shortname=lower,gid=', @ANYRESHEX=0xee00, @ANYBLOB="00004301000000883d89e17db5daafcf0fce22b06479fe010e8c27cdebd09d8e1084d4ea0f0b7579bffbdedb9ac9f5c18579fc54607308000000a4c220492c433365c1e935f04985b3fedf8de90e29b46f3fa52baaea48", @ANYRESDEC=r0, @ANYRES32, @ANYRES8], 0x0, 0x2b0, &(0x7f0000000840)="$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") r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x40) faccessat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x7) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x100) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)) eventfd2(0x7, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) io_uring_setup(0x7458, &(0x7f0000000280)={0x0, 0x473d, 0x800, 0x1, 0x179, 0x0, r3}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xc8a1, 0x100, 0x0, 0x294, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r9, r8, 0x2000200000000, 0x3) socket$packet(0x11, 0x2, 0x300) syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) 5.537553013s ago: executing program 32 (id=2445): pipe2$9p(&(0x7f0000000000), 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) unshare(0x22020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x11a, 0x1e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=mixed,rodir,uni_xlate=0,discard,uni_xlate=0,utf8=1,nocase,showexec,shortname=win95,nonumtail=0,shortname=lower,gid=', @ANYRESHEX=0xee00, @ANYBLOB="00004301000000883d89e17db5daafcf0fce22b06479fe010e8c27cdebd09d8e1084d4ea0f0b7579bffbdedb9ac9f5c18579fc54607308000000a4c220492c433365c1e935f04985b3fedf8de90e29b46f3fa52baaea48", @ANYRESDEC=r0, @ANYRES32, @ANYRES8], 0x0, 0x2b0, &(0x7f0000000840)="$eJzs3M9qE18UwPHTSdO0KW2y+PEDBfGgG90MbXyCIC2IAaU2oi6EqZ1oyJgpmViJiO3Orc9RXLoT1Bfoxp17cVMEwU0X0kiTuXammaKtbVPT7wfKnN57T+bOn5YzA7kbd149rlUCu+I0xRpVsURWZVMkvx2FhsKt1YlHJGpVLo9//3Tu1t1714ul0syc6mxx/kpBVSfPv3v6/PWFD83x228m32ZkPX9/41vh8/r/62c2tubNp/siji74ftNZ8FxdrAY1W/Wm5zqBq9V64DaaGumveP7SUkud+uJEdqnhBoE69ZbW3JY2fW02Wuo8dKp1tW1bJ7LSazWhbXCk9p1RXpubc4pHMhn0w1hSY6NRdFKJneW145gUAAA4WY6q/je1xl71/6NqoNVA636svu+t/y05zPofcdT/p8F2/Z8N/37jqP8BAAAAAAAAAAAAAAAAAAAAAPgXbLbbuXa7nTNb85MRkVERMb+b8SP9nS4O2X6vPwZL5It7oyLey+Xycrm77fYXK1IVT1yZSov86NwPoW48e600M6UdeXnvrYT5K8vllGRMvpFPzp/u5ms8Py3Z6P4LkpP/kvMLifkjcumiyU+7YktOPj4QXzxZ7NzXO/kvplWv3ijtyh/rjAMAAAAAYBDY+kvP83un31azbMiu/m7jzvsByf3m/cCu5+thOTvcv+MGAAAAAOA0CVrPao7nuY1YYPW0DEJg1iQ+lA/c69QRRIOtjMiB0y0ROejeU9tXeSh8wbT/9K8ikpa/PgnWCbtJvjzpnpCkMe1UvKVv/5IAAAAAHBFT/Q/tOSJzrPMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA0+tPFw8z4g6w9Ftldqj9HCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwMPwMAAP//OycTew==") r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x40) faccessat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x7) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x100) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)) eventfd2(0x7, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) io_uring_setup(0x7458, &(0x7f0000000280)={0x0, 0x473d, 0x800, 0x1, 0x179, 0x0, r3}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xc8a1, 0x100, 0x0, 0x294, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r9, r8, 0x2000200000000, 0x3) socket$packet(0x11, 0x2, 0x300) syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) 2.283983335s ago: executing program 3 (id=2806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESTOP(r2, 0x80081280, 0x604000000000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0xac9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x0, 0x10}, 0xc) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 2.227351578s ago: executing program 4 (id=2808): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d010900500011"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.188454291s ago: executing program 4 (id=2811): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) socket$vsock_stream(0x28, 0x1, 0x28) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x7, 0xffffffffffffffff, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x3ff}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 2.186282321s ago: executing program 4 (id=2813): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a000000911195000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000200)="0affb5660df73bbb7468458d21b9bdd4b19127766d1209615c6bfd23a3b97b4e4a1efea16236c896cbe639ad1b394ca12bf2eccbae71a9dbdb09a20ce1fdb011a18fb50ef464accd2864739a84f7535c950c656da3d6518d60a0b17323cba0e53db7585cdb1e2b8312f37408c7149a0073c5048fc64410eb0bd350073bba7dd393daffd0e0dffd653ee014135229e65b7a7e92a146a2a4af195b1d3a0bd27eb15395c61af450384691ddc903ba1516e338c3e0c4", 0xb4}, {&(0x7f00000005c0)="b732569855891f336c075798d17283ac714d83d2f2d5811a6112be8b7f9f0cde36771a0c07941fc313ce7f691c61c4051752d8650f7761fe1b49e5bbd5f2acf072540b715d9de177e78693d15f95b8f04b58c06f9184e44ce24870730cb4e0de3975c835ed4871042dc2d9b078e111e8779c55a4ab2c9c9e7c980ec129f4a96f66ff86ba8d4de4384eb4254e505b4bffd431b44e1e89f4aed00e9eaf6b8c4d782521fbd65fe0fb1e0b85", 0xaa}, {&(0x7f00000002c0)="ada9025e1af4dc0cf6dfde406b41375f76a8310d58e8234018c54b51445f06", 0x1f}, {&(0x7f0000000380)="da3ff8fb615e9c469aeec220e1feece6972733d4c1e3e334d793ac2ba4c6f033cf1f362af399e979979cb11a5326cfdcdaaa5d724cd8d9ee2957ef81e2e3dd18c57759e4257098c8b2ed0789", 0x4c}], 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x10, 0x4008, 0x0, 0x3, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0xc, 0x42, 0x40, 0x40042}, 0x50) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "213133602eee115c519070ac67c632e8"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r7, r6}, 0xc) accept4$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, &(0x7f0000000740)=0x6e, 0x0) 1.951478685s ago: executing program 2 (id=2818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x39) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0xcc040) 1.941879515s ago: executing program 2 (id=2819): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000000)='XZ', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5012, 0x1, 0x400, 0xfffffffb}, 0x868dade923c0cf82}}]}, {0x4}, {0xffffffffffffff19}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x34004000}, 0x0) 1.900024837s ago: executing program 2 (id=2820): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0xfffffffffffdfffb, 0x8}, 0x4, 0xfffffffffffffffc, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = dup3(r5, r6, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x3fa, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048800}, 0xc080) connect$unix(r6, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002ac37000fcdbdf250b0000000800030200000009ff01802800018008000700", @ANYRES32=r2, @ANYBLOB="060005004e200000000006001100000008000400d4fe000008000200010000000500050009000000"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) 1.632908693s ago: executing program 4 (id=2826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xf2, "54e9e5c0869237764beae25086443afbfd48d33d6e027e4d1f1c7578e9f80963b92045bfc097820e77848752a4beb2bc8460785f59cf75e1aba380a8308321b0dc633b8ccb815e56b73e1e8b3c6e62fab74f057abdb5b945e7e49945c04153552b49d7abd0b86dd785cadb0f6c63c81ad35739b84f43c599e79349550544c04333d1209d0ad1f156018911a044c5a6a33d9ef113bb0c2a4e88134eed4eef2243539e4b05458e940c60204c176dce0e5cb0e54fab0b2cd97d5c6ed1af729b7710b65c0ffc8e60312b98bca1512025307015b9d84fb2d0920f03860857bd359488786facbc05db68ee818bd7bc380784aeefcc"}, &(0x7f0000000140)=0xfa) (rerun: 32) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x3}, &(0x7f00000001c0)=0x8) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0xfffffffe, 0x3}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfc01}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1.590511476s ago: executing program 4 (id=2827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$netlink(0x10, 0x3, 0xe) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x1000}, 0x102802, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000200)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@deltaction={0xb0, 0x31, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfa02}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xf38}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24f}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4ad6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xfffffffffffffd74, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3427}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}]}]}, 0xb0}}, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f00000001c0)="b700001811005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000480)="a3d624010004000000000000a093daf45405a92f30688ad6901172d94b5d9b9acc77", 0x22}], 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x45, 0x0, 0x0, 0x0, 0x2000004, 0x514, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x4}, 0x14800, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r2, 0x2) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 1.428790426s ago: executing program 4 (id=2828): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000500)={0x0, 0x52, 0x0, 0x0, 0x0, 0xfffffffc}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r4, @ANYRES32=r7], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0xb8}}, 0x0) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.419106766s ago: executing program 3 (id=2829): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.359716059s ago: executing program 3 (id=2831): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x149240, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0c5efd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) lseek(r0, 0x0, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000", 0x28}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9", 0xf}], 0x2}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) socket(0xa, 0x1, 0x0) (async) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201000000000000000008"], 0x1508}}, 0x0) writev(r8, &(0x7f0000000040), 0x2) (async) writev(r8, &(0x7f0000000040), 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket(0xa, 0x1, 0x40002) (async) r9 = socket(0xa, 0x1, 0x40002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r11, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, 0x0, 0x0) 1.062524037s ago: executing program 3 (id=2837): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xd0db8000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1018658, &(0x7f0000000640)={[{@jqfmt_vfsold}, {@dax_inode}, {@nombcache}, {@auto_da_alloc}, {@nodiscard}, {@debug}, {@data_err_ignore}]}, 0x0, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) setuid(r2) sendto(r0, &(0x7f0000000000)="adfd96fe1066cd4aeb97dfc4e2d91649c780b3dc74ccde9307370e612565ccc472985d57c81ef3fe37aa45b7e3100d7a2dd1589a948b553acbb7e727069d2f3f0af39c63dad6ed2cc0c61c3fed6beaf1f8a5a83f3fe6ff8959ce91b57402286b497b59220cb9b9bbc41ccc04", 0x6c, 0x8000, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x3d13, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/kcm\x00') pread64(r5, &(0x7f0000000040)=""/26, 0x1a, 0x7fffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000140)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000380)={0x0, 0x1, [@broadcast]}) lseek(r5, 0x10001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0xe0, 0x290, 0x290, 0xe0, 0x1c0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x6, 0x2, 0xa22db0f404b6e738}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 1.042709098s ago: executing program 2 (id=2838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$netlink(0x10, 0x3, 0xe) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x1000}, 0x102802, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000200)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@deltaction={0xb0, 0x31, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfa02}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xf38}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24f}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4ad6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xfffffffffffffd74, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3427}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}]}]}, 0xb0}}, 0x0) writev(r6, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000480)="a3d624010004000000000000a093daf45405a92f30688ad6901172d94b5d9b9acc77", 0x22}], 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x45, 0x0, 0x0, 0x0, 0x2000004, 0x514, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x4}, 0x14800, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r2, 0x2) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 994.064301ms ago: executing program 5 (id=2840): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) 932.908624ms ago: executing program 1 (id=2841): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x8008084) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010003c0002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 889.835397ms ago: executing program 3 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xcc, 0x1, 0x64, @rand_addr=' \x01\x00', @local, 0x7800, 0x700, 0x6, 0x8}}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xd07, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x48a5b, 0x4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000006}, 0x0) 859.153789ms ago: executing program 1 (id=2843): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',nocompress,block=0x0000000000000200\a\x00\x00\x00\x00\x00\x00\x00x0000000000000200,nocompress,hide,gid=', @ANYRESHEX=0x0, @ANYBLOB=',unhide,utf8,\x00'], 0x1, 0x56c, &(0x7f0000000580)="$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") semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000000)=""/8) 766.933634ms ago: executing program 2 (id=2844): syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x10}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x580, &(0x7f00000007c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000a45bffff00000000000000008500000041000000950000000000000095c798e4d1ce5a7f6236e0aee0fda840b6a902926e24ed6d441738bb28f7d1a08c3d7e91382d7f0259f2c6"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a0000000000ffffff810000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 762.216485ms ago: executing program 1 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044840}, 0x8800) (async) socket(0x1f, 0x6, 0x0) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2b}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x3}}]}, {0x4, 0x4}, {0x9}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}}, 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r7, 0xd5ba8000) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x7fff) r8 = eventfd2(0xffffffff, 0x1) write$eventfd(r8, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async, rerun: 32) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x102, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x52b}, &(0x7f00000001c0)=0x8) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x9a, 0x8, 0x0, 0x0}}, 0x10) 732.429866ms ago: executing program 5 (id=2846): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x1) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7", 0x60}], 0x1) r7 = accept4$x25(r5, 0x0, &(0x7f0000000340), 0x80800) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x2b, @local, 0x4e21, 0x3, 'rr\x00', 0x2, 0x1, 0x3c}, 0x2c) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r9, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x4049804) 601.409844ms ago: executing program 1 (id=2847): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001200010100000000fedbdf250700000014000000ff0100000000000009000000000e00010800e88004004380"], 0x30}}, 0x50040) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001200010100000000fedbdf250700000014000000ff0100000000000009000000000e00010800e88004004380"], 0x30}}, 0x50040) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0}}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x20008000) set_mempolicy(0x3, &(0x7f0000000000)=0x318e, 0x2502) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x4) setsockopt$inet6_tcp_buf(r4, 0x6, 0x25, &(0x7f0000000440)="436ed9d0", 0x4) 492.500651ms ago: executing program 3 (id=2848): prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x64000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xffff}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100), 0x2, 0x46b, &(0x7f0000000580)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000040)=0x1c) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x20, 0x0, 0x310, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_PBSS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x80) accept4$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80800) 435.724024ms ago: executing program 2 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000000000000024100000014001369623a626f6e645f736c6176655f3000"], 0x30}, 0x1, 0x0, 0x0, 0x4008082}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x44}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000ac0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSG,\xa4\x96=\xfc\xef_\rf\xc3\xe0\xb3\xc7\x87#\xd4\x16\x03|z\x8e\xe8\xb5\xa5\x83\x15\x0f\xed\xc4\xc4Eh~\x1b\xf5\x96\x9dL\xd6b\x81\xf3z\\^f\t\xabq\a\\7\xb1\r\x1f\xd4\xdcJ\x14\xfd>\xb3\x15/w\xfd\xf0a\xa5\xe4\x15\x89{0L\x0f+%/\x9c\xbf\x87\xa2\xa7\x8b\\\x97\xd2\xa6\x90\xc9\xe7\xc1\x82g,\xa5Z\x17\x95\x83\x17k\x19\x1e\x06,\xce\xfe\x9du\xc1l4\xa9\x1d\xa0\xed\xc7\a>8\xcf\xa0\x85L\xa2\xa73\x00\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00OioO\xed\xd6\x1bj\t \xbe-%\xf7\xe4Gw\be\xa0ng\xca\f\x8c\xca\xd5\xa1}\tG&M\xed\xd4?\xe0At6&\xe5\xdeI\xdb\x1fXcz\n5i/\xf2x\xb0\x9c\x92\xa0T.i\x9e\"\xfa\xfe\xe82qt*^\xcb:y\f\xfa\xb9\xe1\xd8\xd8?\x1cz\xafUB\xa1\xa43\x7f6FmF\xa3\x1bN\x10\xfaO\xc7\x0e\xe2V\x98\xa3\x99(\xdb\t\x86\x185qm!\x00 /Sv\xbf\xac\xd9\x12\xe3|S\xb0\xf6\x92\x04\xf3\xe9s\xcf\xd2\x11\"2S\xd4l\x98P\x0f\xfd', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 430.808634ms ago: executing program 1 (id=2850): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = gettid() socket$inet6(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) process_vm_writev(r6, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x400, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x8034ff, 0x0, 0x0, 0x0, 0xffffb12a, 0x0, 0x203c}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x4000) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) fcntl$getownex(r7, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) r11 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3, 0x9, 0x7f, 0xe, 0x0, 0x9, 0x1000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x100, 0x0, 0xf66, 0x0, 0xff, 0x7, 0x0, 0x0, 0x6, 0x0, 0x1}, r9, 0x8, r0, 0x0) 243.563095ms ago: executing program 5 (id=2851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffffeff5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x80001800, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4000080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xefc, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}}, 0x41, 0x2b}, 0x90) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x0) 148.826931ms ago: executing program 5 (id=2852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x800, 0x4) sendmmsg$inet(r1, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) 84.288274ms ago: executing program 5 (id=2853): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x37, 0x9, 0x70bd2c, 0x0, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r6) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 11.058919ms ago: executing program 5 (id=2854): mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) (rerun: 64) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xb, 0x1, 0x1, 0xbf26, 0x3, "2589c781fe9740a5ca8d0a4d8ae3229eccc6ad"}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000001000000000000000008000100544545000900020073797a32000000000900010073797a31"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) getdents(r8, &(0x7f0000001180)=""/4096, 0x1000) (async, rerun: 64) setuid(r7) (async, rerun: 64) ioprio_get$uid(0x3, r7) (async) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 0s ago: executing program 1 (id=2855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) write$binfmt_misc(r1, &(0x7f0000000200)="e4b2c0c84d5187c8b07a8f621ff0efae456d4991724f487f5d4710fc6991b6cc3775f33f3a09224322e58e2c07d739058708be581f06e37d20d06f8d4f72e83a3dd19f081af2884a2fc9dd3c137af1d750edd2a8ee1f3bf6513dc16c8eaad35075239f87f09e4c0b99c8cc3a0f6388f4cb40538a4de9b903ed13a03b0e41ccef30788c9d7b508f89f47dea6a89ee69080784589d6ffbf7931ba562e32c40dcabf8e4d589b9ebe5fb414811e74b8164740de792ab49b6d725499e8ca9f4ab1f44692fb68b2fe794a09b48042029", 0xcd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) kernel console output (not intermixed with test programs): void problems! [ 193.857157][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.868604][ T8382] batman_adv: batadv0: Interface activated: ipvlan2 [ 193.891133][ T8384] netlink: 'syz.4.1656': attribute type 12 has an invalid length. [ 193.983876][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 193.992894][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 194.001867][ T8408] netlink: 'syz.0.1664': attribute type 6 has an invalid length. [ 194.009711][ T8408] netlink: 'syz.0.1664': attribute type 5 has an invalid length. [ 194.075809][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 194.084736][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 194.093667][ T8408] netlink: 'syz.0.1664': attribute type 6 has an invalid length. [ 194.101451][ T8408] netlink: 'syz.0.1664': attribute type 5 has an invalid length. [ 194.279113][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1669'. [ 194.354347][ T8441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1675'. [ 194.485773][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 194.653829][ T8476] netlink: 'syz.0.1684': attribute type 7 has an invalid length. [ 194.661743][ T8476] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1684'. [ 194.691096][ T8417] syz.1.1667 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 194.705144][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.1.1667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.705180][ T8417] Tainted: [W]=WARN [ 194.705189][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.705207][ T8417] Call Trace: [ 194.705243][ T8417] [ 194.705253][ T8417] __dump_stack+0x1d/0x30 [ 194.705286][ T8417] dump_stack_lvl+0x95/0xd0 [ 194.705314][ T8417] dump_stack+0x15/0x1b [ 194.705334][ T8417] dump_header+0x80/0x240 [ 194.705355][ T8417] oom_kill_process+0x295/0x350 [ 194.705448][ T8417] out_of_memory+0x97d/0xb80 [ 194.705474][ T8417] try_charge_memcg+0x62e/0xa10 [ 194.705553][ T8417] obj_cgroup_charge_pages+0x23/0xc0 [ 194.705612][ T8417] __memcg_kmem_charge_page+0x9e/0x170 [ 194.705660][ T8417] __alloc_frozen_pages_noprof+0x18a/0x350 [ 194.705692][ T8417] alloc_pages_mpol+0xb3/0x260 [ 194.705724][ T8417] alloc_pages_noprof+0x8f/0x130 [ 194.705755][ T8417] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 194.705867][ T8417] __kvmalloc_node_noprof+0x471/0x680 [ 194.705945][ T8417] ? ip_set_alloc+0x24/0x30 [ 194.705973][ T8417] ? ip_set_alloc+0x24/0x30 [ 194.706008][ T8417] ip_set_alloc+0x24/0x30 [ 194.706177][ T8417] hash_netiface_create+0x282/0x740 [ 194.706220][ T8417] ? __pfx_hash_netiface_create+0x10/0x10 [ 194.706251][ T8417] ip_set_create+0x3cf/0x970 [ 194.706303][ T8417] ? __nla_parse+0x40/0x60 [ 194.706380][ T8417] nfnetlink_rcv_msg+0x509/0x5d0 [ 194.706474][ T8417] netlink_rcv_skb+0x123/0x220 [ 194.706518][ T8417] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.706573][ T8417] nfnetlink_rcv+0x167/0x1720 [ 194.706645][ T8417] ? __kfree_skb+0x109/0x150 [ 194.706680][ T8417] ? nlmon_xmit+0x4f/0x60 [ 194.706764][ T8417] ? consume_skb+0x49/0x140 [ 194.706856][ T8417] ? nlmon_xmit+0x4f/0x60 [ 194.706900][ T8417] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 194.706950][ T8417] ? __dev_queue_xmit+0x139a/0x1f20 [ 194.706990][ T8417] ? __dev_queue_xmit+0x148/0x1f20 [ 194.707054][ T8417] ? ref_tracker_free+0x37d/0x3e0 [ 194.707160][ T8417] ? __netlink_deliver_tap+0x4dc/0x500 [ 194.707207][ T8417] netlink_unicast+0x5c0/0x690 [ 194.707248][ T8417] netlink_sendmsg+0x5c8/0x6f0 [ 194.707331][ T8417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.707363][ T8417] ____sys_sendmsg+0x5af/0x600 [ 194.707402][ T8417] ___sys_sendmsg+0x195/0x1e0 [ 194.707479][ T8417] __x64_sys_sendmsg+0xd4/0x160 [ 194.707506][ T8417] x64_sys_call+0x17ba/0x3000 [ 194.707571][ T8417] do_syscall_64+0xc0/0x2a0 [ 194.707637][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.707753][ T8417] RIP: 0033:0x7fee47a6aeb9 [ 194.707774][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.707799][ T8417] RSP: 002b:00007fee464bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.707821][ T8417] RAX: ffffffffffffffda RBX: 00007fee47ce5fa0 RCX: 00007fee47a6aeb9 [ 194.707835][ T8417] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 194.707874][ T8417] RBP: 00007fee47ad8c1f R08: 0000000000000000 R09: 0000000000000000 [ 194.707890][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.707903][ T8417] R13: 00007fee47ce6038 R14: 00007fee47ce5fa0 R15: 00007ffd3a1521e8 [ 194.707923][ T8417] [ 195.025934][ T8417] memory: usage 307200kB, limit 307200kB, failcnt 488 [ 195.032770][ T8417] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 195.040704][ T8417] kmem: usage 241560kB, limit 9007199254740988kB, failcnt 0 [ 195.048074][ T8417] Memory cgroup stats for /syz1: [ 195.048521][ T8417] cache 67211264 [ 195.057244][ T8417] rss 0 [ 195.060031][ T8417] shmem 0 [ 195.062980][ T8417] mapped_file 0 [ 195.066549][ T8417] dirty 0 [ 195.069544][ T8417] writeback 0 [ 195.072848][ T8417] workingset_refault_anon 91 [ 195.077486][ T8417] workingset_refault_file 4264 [ 195.082414][ T8417] swap 266240 [ 195.085754][ T8417] swapcached 4096 [ 195.089410][ T8417] pgpgin 602860 [ 195.092880][ T8417] pgpgout 586450 [ 195.096494][ T8417] pgfault 195894 [ 195.100073][ T8417] pgmajfault 69 [ 195.103573][ T8417] inactive_anon 0 [ 195.107260][ T8417] active_anon 4096 [ 195.111018][ T8417] inactive_file 0 [ 195.114711][ T8417] active_file 0 [ 195.118248][ T8417] unevictable 67211264 [ 195.122402][ T8417] hierarchical_memory_limit 314572800 [ 195.127860][ T8417] hierarchical_memsw_limit 9223372036854771712 [ 195.134164][ T8417] total_cache 67211264 [ 195.138310][ T8417] total_rss 0 [ 195.141603][ T8417] total_shmem 0 [ 195.145058][ T8417] total_mapped_file 0 [ 195.149095][ T8417] total_dirty 0 [ 195.152571][ T8417] total_writeback 0 [ 195.156487][ T8417] total_workingset_refault_anon 91 [ 195.161607][ T8417] total_workingset_refault_file 4264 [ 195.166966][ T8417] total_swap 266240 [ 195.170853][ T8417] total_swapcached 4096 [ 195.175035][ T8417] total_pgpgin 602860 [ 195.179112][ T8417] total_pgpgout 586450 [ 195.183194][ T8417] total_pgfault 195894 [ 195.187315][ T8417] total_pgmajfault 69 [ 195.191341][ T8417] total_inactive_anon 0 [ 195.195660][ T8417] total_active_anon 4096 [ 195.199933][ T8417] total_inactive_file 0 [ 195.204132][ T8417] total_active_file 0 [ 195.208178][ T8417] total_unevictable 67211264 [ 195.212776][ T8417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1667,pid=8416,uid=0 [ 195.227737][ T8417] Memory cgroup out of memory: Killed process 8416 (syz.1.1667) total-vm:94144kB, anon-rss:1208kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 195.244921][ T3371] net_ratelimit: 2 callbacks suppressed [ 195.244934][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.432358][ T8493] delete_channel: no stack [ 195.522794][ T8507] xt_l2tp: invalid flags combination: c [ 195.777486][ T8520] netlink: 'syz.2.1700': attribute type 13 has an invalid length. [ 195.783642][ T8521] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 195.827674][ T8528] netlink: 'syz.1.1704': attribute type 13 has an invalid length. [ 195.846549][ T8529] bridge5: entered promiscuous mode [ 195.851829][ T8529] bridge5: entered allmulticast mode [ 195.933089][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.940347][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.017657][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.070576][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.157246][ T4351] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.166016][ T4351] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.187382][ T4351] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.215718][ T4351] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.251261][ T8547] netlink: 'syz.1.1708': attribute type 21 has an invalid length. [ 196.259163][ T8547] __nla_validate_parse: 7 callbacks suppressed [ 196.259190][ T8547] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1708'. [ 196.277758][ T8549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1709'. [ 196.288322][ T8549] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 196.315800][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.489404][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 196.489422][ T29] audit: type=1326 audit(2000000004.810:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.519093][ T29] audit: type=1326 audit(2000000004.810:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.542613][ T29] audit: type=1326 audit(2000000004.810:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.566160][ T29] audit: type=1326 audit(2000000004.810:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.589708][ T29] audit: type=1326 audit(2000000004.810:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.613693][ T29] audit: type=1326 audit(2000000004.860:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.637294][ T29] audit: type=1326 audit(2000000004.930:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.660860][ T29] audit: type=1326 audit(2000000004.930:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.685400][ T29] audit: type=1326 audit(2000000004.930:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.709031][ T29] audit: type=1326 audit(2000000004.930:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 196.815431][ T8566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8566 comm=syz.3.1714 [ 196.886324][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.987178][ T8578] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1717'. [ 197.275440][ T8601] lo speed is unknown, defaulting to 1000 [ 197.355762][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.438599][ T8627] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1736'. [ 197.457819][ T8626] mmap: syz.2.1734 (8626): VmData 29196288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 197.475250][ T8627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=8627 comm=syz.4.1736 [ 198.326127][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1750'. [ 198.425856][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.546411][ T8677] lo speed is unknown, defaulting to 1000 [ 198.579997][ T8693] validate_nla: 1 callbacks suppressed [ 198.580016][ T8693] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 198.614765][ T8693] erspan1: entered allmulticast mode [ 198.665354][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.673724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.683361][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 199.091052][ T8738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 199.143538][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.152282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.331702][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.544473][ T8786] netlink: 'syz.3.1783': attribute type 13 has an invalid length. [ 199.757716][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 199.805906][ T8804] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1789'. [ 200.173280][ T8826] xt_hashlimit: size too large, truncated to 1048576 [ 200.270106][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1799'. [ 200.434004][ T8850] 9p: Bad value for 'rfdno' [ 200.467428][ T8855] netlink: 'syz.4.1805': attribute type 10 has an invalid length. [ 200.476387][ T3401] net_ratelimit: 30 callbacks suppressed [ 200.476471][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.494527][ T8855] : (slave syz_tun): Enslaving as an active interface with an up link [ 200.644010][ T8867] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 200.674459][ T8867] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 200.919129][ T8893] lo speed is unknown, defaulting to 1000 [ 201.235995][ T8905] tmpfs: Bad value for 'mpol' [ 201.330198][ T8912] x_tables: duplicate underflow at hook 1 [ 201.465743][ T8917] __nla_validate_parse: 4 callbacks suppressed [ 201.465762][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 201.481513][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 201.515671][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.728754][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 201.995667][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.306689][ T8949] lo speed is unknown, defaulting to 1000 [ 202.508514][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 202.508531][ T29] audit: type=1326 audit(2000000010.830:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.565725][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.600368][ T29] audit: type=1326 audit(2000000010.870:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.623873][ T29] audit: type=1326 audit(2000000010.870:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.647424][ T29] audit: type=1326 audit(2000000010.870:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.670820][ T29] audit: type=1326 audit(2000000010.870:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.694253][ T29] audit: type=1326 audit(2000000010.870:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.717744][ T29] audit: type=1326 audit(2000000010.870:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.741321][ T29] audit: type=1326 audit(2000000010.870:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8948 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 202.955913][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.175779][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1839'. [ 203.380970][ T8980] lo speed is unknown, defaulting to 1000 [ 203.596610][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.608969][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 203.661737][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1848'. [ 203.698264][ T9009] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1851'. [ 204.031677][ T29] audit: type=1326 audit(2000000012.350:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.4.1866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8745ffaeb9 code=0x0 [ 204.109237][ T9041] netlink: 'syz.0.1864': attribute type 13 has an invalid length. [ 204.117136][ T9041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1864'. [ 204.131047][ T9041] syz_tun: refused to change device tx_queue_len [ 204.137457][ T9041] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 204.458781][ T29] audit: type=1400 audit(2000000012.760:1589): avc: denied { create } for pid=9071 comm="syz.0.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 204.490274][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 204.514936][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 205.032817][ T9087] netlink: 'syz.3.1878': attribute type 2 has an invalid length. [ 205.040669][ T9087] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 205.146577][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.155394][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.164687][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.318636][ T9098] netlink: 'syz.3.1882': attribute type 13 has an invalid length. [ 205.336396][ T9098] syz_tun: refused to change device tx_queue_len [ 205.462285][ T9104] batadv_slave_1: entered promiscuous mode [ 205.509200][ T9103] batadv_slave_1: left promiscuous mode [ 206.074809][ T10] net_ratelimit: 2 callbacks suppressed [ 206.074825][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.169072][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.235938][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.323702][ T5534] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.341672][ T5534] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.380328][ T9125] lo speed is unknown, defaulting to 1000 [ 206.392952][ T5534] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.410694][ T9130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.535540][ T5534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.007318][ T9159] syzkaller0: entered allmulticast mode [ 207.013341][ T9157] __nla_validate_parse: 5 callbacks suppressed [ 207.013353][ T9157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1904'. [ 207.035631][ T9161] syzkaller0: entered promiscuous mode [ 207.086102][ T9159] syzkaller0 (unregistering): left allmulticast mode [ 207.092842][ T9159] syzkaller0 (unregistering): left promiscuous mode [ 207.218021][ T9174] team_slave_0: entered promiscuous mode [ 207.223759][ T9174] team_slave_1: entered promiscuous mode [ 207.263347][ T9178] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1913'. [ 207.275615][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.605356][ T9197] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.037977][ T9207] lo speed is unknown, defaulting to 1000 [ 208.138332][ T9216] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 208.181819][ T9216] bond1 (unregistering): Released all slaves [ 208.193014][ T9218] 9p: Bad value for 'rfdno' [ 208.333392][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.392781][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 208.392796][ T29] audit: type=1400 audit(2000000016.710:1633): avc: denied { mounton } for pid=9229 comm="syz.1.1929" path=2F3335382FE91F7189591E9233614B dev="tmpfs" ino=1922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 208.425056][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 208.434745][ T9230] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 208.445947][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 208.727685][ T9111] syz.0.1887 (9111) used greatest stack depth: 6128 bytes left [ 208.800968][ T9251] xt_l2tp: missing protocol rule (udp|l2tpip) [ 208.849170][ T29] audit: type=1400 audit(2000000017.170:1634): avc: denied { create } for pid=9258 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.881621][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1935'. [ 208.906673][ T9266] netlink: 'syz.1.1937': attribute type 13 has an invalid length. [ 208.914602][ T9266] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1937'. [ 208.924903][ T9266] syz_tun: refused to change device tx_queue_len [ 208.931316][ T9266] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 208.963777][ T29] audit: type=1326 audit(2000000017.280:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 208.987315][ T29] audit: type=1326 audit(2000000017.280:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.011100][ T29] audit: type=1326 audit(2000000017.280:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.034958][ T29] audit: type=1326 audit(2000000017.280:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.058450][ T29] audit: type=1326 audit(2000000017.280:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.082182][ T29] audit: type=1326 audit(2000000017.280:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.104309][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 209.105751][ T29] audit: type=1326 audit(2000000017.280:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.121878][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 209.138040][ T29] audit: type=1326 audit(2000000017.280:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 209.196923][ T9280] xt_hashlimit: size too large, truncated to 1048576 [ 209.209159][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.358969][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.403759][ T9292] lo speed is unknown, defaulting to 1000 [ 209.840461][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1950'. [ 209.898966][ T9316] netlink: 'syz.3.1954': attribute type 13 has an invalid length. [ 209.906904][ T9316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1954'. [ 209.916817][ T9316] syz_tun: refused to change device tx_queue_len [ 209.923205][ T9316] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 210.042726][ T9335] lo speed is unknown, defaulting to 1000 [ 210.239478][ T9361] delete_channel: no stack [ 210.309789][ T9366] netlink: 'syz.0.1970': attribute type 13 has an invalid length. [ 210.318152][ T9366] syz_tun: refused to change device tx_queue_len [ 210.324572][ T9366] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 210.351237][ T9369] lo speed is unknown, defaulting to 1000 [ 210.399201][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.408743][ T9360] delete_channel: no stack [ 210.649102][ T9402] vlan3: entered allmulticast mode [ 210.654836][ T9402] bridge0: port 3(vlan3) entered blocking state [ 210.661169][ T9402] bridge0: port 3(vlan3) entered disabled state [ 210.668402][ T9402] vlan3: entered promiscuous mode [ 210.737872][ T9407] lo speed is unknown, defaulting to 1000 [ 211.061409][ T9456] netlink: 'syz.1.1998': attribute type 10 has an invalid length. [ 211.438789][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.465546][ T9470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9470 comm=syz.4.2003 [ 211.506021][ T9472] lo speed is unknown, defaulting to 1000 [ 211.597004][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.136297][ T9504] __nla_validate_parse: 11 callbacks suppressed [ 212.136333][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2015'. [ 212.206866][ T9507] lo speed is unknown, defaulting to 1000 [ 212.226982][ T9513] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 212.246421][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.416733][ T9523] lo speed is unknown, defaulting to 1000 [ 212.481161][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.646665][ T9534] dvmrp0: entered allmulticast mode [ 213.014295][ T9545] lo speed is unknown, defaulting to 1000 [ 213.117247][ T9552] lo speed is unknown, defaulting to 1000 [ 213.201114][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 213.210873][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2034'. [ 213.258216][ T9563] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2035'. [ 213.354791][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 213.513899][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 213.513918][ T29] audit: type=1326 audit(2000000021.830:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.525332][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.622107][ T29] audit: type=1326 audit(2000000021.830:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.645747][ T29] audit: type=1326 audit(2000000021.870:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.669256][ T29] audit: type=1326 audit(2000000021.870:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.692712][ T29] audit: type=1326 audit(2000000021.880:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.716352][ T29] audit: type=1326 audit(2000000021.880:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.740174][ T29] audit: type=1326 audit(2000000021.880:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.763748][ T29] audit: type=1326 audit(2000000021.880:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.787305][ T29] audit: type=1326 audit(2000000021.880:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.810818][ T29] audit: type=1326 audit(2000000021.880:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9571 comm="syz.1.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 213.984968][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2041'. [ 213.994088][ T9594] netlink: 'syz.2.2041': attribute type 7 has an invalid length. [ 214.001877][ T9594] netlink: 'syz.2.2041': attribute type 8 has an invalid length. [ 214.009655][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 214.117168][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 214.136187][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2045'. [ 214.268785][ T9611] lo speed is unknown, defaulting to 1000 [ 214.289853][ T9618] ref_ctr increment failed for inode: 0x863 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a5686c0 [ 214.303978][ T9617] uprobe: syz.4.2052:9617 failed to unregister, leaking uprobe [ 214.371455][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2054'. [ 214.559000][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.785116][ T9656] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 214.846515][ T9654] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 214.889631][ T9659] lo speed is unknown, defaulting to 1000 [ 215.277201][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.398581][ T9701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9701 comm=syz.1.2075 [ 215.526568][ T9708] 9p: Bad value for 'wfdno' [ 215.598402][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.667286][ T9729] xt_socket: unknown flags 0x4c [ 215.744188][ T9740] sctp: [Deprecated]: syz.0.2089 (pid 9740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.744188][ T9740] Use struct sctp_sack_info instead [ 215.806349][ T9747] x_tables: duplicate underflow at hook 1 [ 215.949299][ T9768] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 215.949798][ T9769] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 216.010803][ T9769] bond1: entered promiscuous mode [ 216.072802][ T9769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.528580][ T9801] netlink: 'syz.0.2110': attribute type 14 has an invalid length. [ 216.599044][ T9810] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.639248][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.094685][ T9846] batadv_slave_1: entered promiscuous mode [ 217.172637][ T9848] lo speed is unknown, defaulting to 1000 [ 217.200844][ T9850] ip6erspan0: entered allmulticast mode [ 217.255716][ T9844] batadv_slave_1: left promiscuous mode [ 217.676317][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.804642][ T9891] lo speed is unknown, defaulting to 1000 [ 217.966063][ T9897] __nla_validate_parse: 8 callbacks suppressed [ 217.966114][ T9897] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2138'. [ 218.010712][ T9898] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2138'. [ 218.315744][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.329749][ T9878] syz.4.2133 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 218.343715][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.4.2133 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.343749][ T9878] Tainted: [W]=WARN [ 218.343755][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 218.343768][ T9878] Call Trace: [ 218.343775][ T9878] [ 218.343784][ T9878] __dump_stack+0x1d/0x30 [ 218.343891][ T9878] dump_stack_lvl+0x95/0xd0 [ 218.343914][ T9878] dump_stack+0x15/0x1b [ 218.343933][ T9878] dump_header+0x80/0x240 [ 218.343954][ T9878] oom_kill_process+0x295/0x350 [ 218.343983][ T9878] out_of_memory+0x97d/0xb80 [ 218.344070][ T9878] try_charge_memcg+0x62e/0xa10 [ 218.344159][ T9878] obj_cgroup_charge_pages+0x23/0xc0 [ 218.344195][ T9878] __memcg_kmem_charge_page+0x9e/0x170 [ 218.344273][ T9878] __alloc_frozen_pages_noprof+0x18a/0x350 [ 218.344420][ T9878] alloc_pages_mpol+0xb3/0x260 [ 218.344466][ T9878] alloc_pages_noprof+0x8f/0x130 [ 218.344571][ T9878] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 218.344640][ T9878] __kvmalloc_node_noprof+0x471/0x680 [ 218.344721][ T9878] ? ip_set_alloc+0x24/0x30 [ 218.344760][ T9878] ? ip_set_alloc+0x24/0x30 [ 218.344859][ T9878] ip_set_alloc+0x24/0x30 [ 218.344952][ T9878] hash_netiface_create+0x282/0x740 [ 218.344992][ T9878] ? __pfx_hash_netiface_create+0x10/0x10 [ 218.345087][ T9878] ip_set_create+0x3cf/0x970 [ 218.345189][ T9878] ? __nla_parse+0x40/0x60 [ 218.345209][ T9878] nfnetlink_rcv_msg+0x509/0x5d0 [ 218.345384][ T9878] netlink_rcv_skb+0x123/0x220 [ 218.345424][ T9878] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 218.345538][ T9878] nfnetlink_rcv+0x167/0x1720 [ 218.345633][ T9878] ? __kfree_skb+0x109/0x150 [ 218.345709][ T9878] ? nlmon_xmit+0x4f/0x60 [ 218.345761][ T9878] ? consume_skb+0x49/0x140 [ 218.345798][ T9878] ? nlmon_xmit+0x4f/0x60 [ 218.345828][ T9878] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 218.345890][ T9878] ? __dev_queue_xmit+0x139a/0x1f20 [ 218.345962][ T9878] ? __dev_queue_xmit+0x148/0x1f20 [ 218.345996][ T9878] ? ref_tracker_free+0x37d/0x3e0 [ 218.346103][ T9878] ? __netlink_deliver_tap+0x4dc/0x500 [ 218.346146][ T9878] netlink_unicast+0x5c0/0x690 [ 218.346176][ T9878] netlink_sendmsg+0x5c8/0x6f0 [ 218.346196][ T9878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.346291][ T9878] ____sys_sendmsg+0x5af/0x600 [ 218.346318][ T9878] ___sys_sendmsg+0x195/0x1e0 [ 218.346349][ T9878] __x64_sys_sendmsg+0xd4/0x160 [ 218.346374][ T9878] x64_sys_call+0x17ba/0x3000 [ 218.346488][ T9878] do_syscall_64+0xc0/0x2a0 [ 218.346521][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.346621][ T9878] RIP: 0033:0x7f8745ffaeb9 [ 218.346637][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.346679][ T9878] RSP: 002b:00007f8744a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.346704][ T9878] RAX: ffffffffffffffda RBX: 00007f8746275fa0 RCX: 00007f8745ffaeb9 [ 218.346788][ T9878] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 218.346801][ T9878] RBP: 00007f8746068c1f R08: 0000000000000000 R09: 0000000000000000 [ 218.346814][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.346830][ T9878] R13: 00007f8746276038 R14: 00007f8746275fa0 R15: 00007ffc90801718 [ 218.346856][ T9878] [ 218.664638][ T9878] memory: usage 307200kB, limit 307200kB, failcnt 3032 [ 218.671562][ T9878] memory+swap: usage 308052kB, limit 9007199254740988kB, failcnt 0 [ 218.679584][ T9878] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 218.686973][ T9878] Memory cgroup stats for /syz4: [ 218.696962][ T9878] cache 49152 [ 218.705255][ T9878] rss 4096 [ 218.708468][ T9878] shmem 0 [ 218.711432][ T9878] mapped_file 397312 [ 218.715352][ T9878] dirty 0 [ 218.718424][ T9878] writeback 0 [ 218.721743][ T9878] workingset_refault_anon 355 [ 218.726457][ T9878] workingset_refault_file 4716 [ 218.731273][ T9878] swap 872448 [ 218.734569][ T9878] swapcached 4096 [ 218.738254][ T9878] pgpgin 707426 [ 218.741806][ T9878] pgpgout 707412 [ 218.745540][ T9878] pgfault 224777 [ 218.749106][ T9878] pgmajfault 163 [ 218.752760][ T9878] inactive_anon 8192 [ 218.756789][ T9878] active_anon 0 [ 218.760339][ T9878] inactive_file 49152 [ 218.764347][ T9878] active_file 0 [ 218.767940][ T9878] unevictable 0 [ 218.771427][ T9878] hierarchical_memory_limit 314572800 [ 218.776910][ T9878] hierarchical_memsw_limit 9223372036854771712 [ 218.783086][ T9878] total_cache 49152 [ 218.787031][ T9878] total_rss 4096 [ 218.790639][ T9878] total_shmem 0 [ 218.794131][ T9878] total_mapped_file 397312 [ 218.798663][ T9878] total_dirty 0 [ 218.802144][ T9878] total_writeback 0 [ 218.806045][ T9878] total_workingset_refault_anon 355 [ 218.811267][ T9878] total_workingset_refault_file 4716 [ 218.816712][ T9878] total_swap 872448 [ 218.820695][ T9878] total_swapcached 4096 [ 218.824875][ T9878] total_pgpgin 707426 [ 218.828954][ T9878] total_pgpgout 707412 [ 218.833041][ T9878] total_pgfault 224777 [ 218.837154][ T9878] total_pgmajfault 163 [ 218.841253][ T9878] total_inactive_anon 8192 [ 218.845705][ T9878] total_active_anon 0 [ 218.849714][ T9878] total_inactive_file 49152 [ 218.854250][ T9878] total_active_file 0 [ 218.858272][ T9878] total_unevictable 0 [ 218.862268][ T9878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.39,pid=3608,uid=0 [ 218.877117][ T9878] Memory cgroup out of memory: Killed process 3608 (syz.4.39) total-vm:94012kB, anon-rss:1296kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 218.898224][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.925398][ T9878] syz.4.2133 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 218.939558][ T9878] CPU: 0 UID: 0 PID: 9878 Comm: syz.4.2133 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.939667][ T9878] Tainted: [W]=WARN [ 218.939675][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 218.939691][ T9878] Call Trace: [ 218.939700][ T9878] [ 218.939709][ T9878] __dump_stack+0x1d/0x30 [ 218.939740][ T9878] dump_stack_lvl+0x95/0xd0 [ 218.939796][ T9878] dump_stack+0x15/0x1b [ 218.939876][ T9878] dump_header+0x80/0x240 [ 218.939899][ T9878] oom_kill_process+0x295/0x350 [ 218.939937][ T9878] out_of_memory+0x97d/0xb80 [ 218.939963][ T9878] try_charge_memcg+0x62e/0xa10 [ 218.940056][ T9878] obj_cgroup_charge_pages+0x23/0xc0 [ 218.940105][ T9878] __memcg_kmem_charge_page+0x9e/0x170 [ 218.940162][ T9878] __alloc_frozen_pages_noprof+0x18a/0x350 [ 218.940198][ T9878] alloc_pages_mpol+0xb3/0x260 [ 218.940232][ T9878] alloc_pages_noprof+0x8f/0x130 [ 218.940311][ T9878] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 218.940374][ T9878] __kvmalloc_node_noprof+0x471/0x680 [ 218.940428][ T9878] ? ip_set_alloc+0x24/0x30 [ 218.940460][ T9878] ? ip_set_alloc+0x24/0x30 [ 218.940573][ T9878] ip_set_alloc+0x24/0x30 [ 218.940609][ T9878] hash_netiface_create+0x282/0x740 [ 218.940685][ T9878] ? __pfx_hash_netiface_create+0x10/0x10 [ 218.940780][ T9878] ip_set_create+0x3cf/0x970 [ 218.940857][ T9878] ? __nla_parse+0x40/0x60 [ 218.940879][ T9878] nfnetlink_rcv_msg+0x509/0x5d0 [ 218.940933][ T9878] netlink_rcv_skb+0x123/0x220 [ 218.940997][ T9878] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 218.941036][ T9878] nfnetlink_rcv+0x167/0x1720 [ 218.941088][ T9878] ? __kfree_skb+0x109/0x150 [ 218.941178][ T9878] ? nlmon_xmit+0x4f/0x60 [ 218.941214][ T9878] ? consume_skb+0x49/0x140 [ 218.941247][ T9878] ? nlmon_xmit+0x4f/0x60 [ 218.941345][ T9878] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 218.941385][ T9878] ? __dev_queue_xmit+0x139a/0x1f20 [ 218.941422][ T9878] ? __dev_queue_xmit+0x148/0x1f20 [ 218.941514][ T9878] ? ref_tracker_free+0x37d/0x3e0 [ 218.941566][ T9878] ? __netlink_deliver_tap+0x4dc/0x500 [ 218.941609][ T9878] netlink_unicast+0x5c0/0x690 [ 218.941645][ T9878] netlink_sendmsg+0x5c8/0x6f0 [ 218.941686][ T9878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.941706][ T9878] ____sys_sendmsg+0x5af/0x600 [ 218.941731][ T9878] ___sys_sendmsg+0x195/0x1e0 [ 218.941766][ T9878] __x64_sys_sendmsg+0xd4/0x160 [ 218.941792][ T9878] x64_sys_call+0x17ba/0x3000 [ 218.941875][ T9878] do_syscall_64+0xc0/0x2a0 [ 218.941910][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.941934][ T9878] RIP: 0033:0x7f8745ffaeb9 [ 218.941966][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.942063][ T9878] RSP: 002b:00007f8744a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.942084][ T9878] RAX: ffffffffffffffda RBX: 00007f8746275fa0 RCX: 00007f8745ffaeb9 [ 218.942099][ T9878] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 218.942112][ T9878] RBP: 00007f8746068c1f R08: 0000000000000000 R09: 0000000000000000 [ 218.942126][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.942190][ T9878] R13: 00007f8746276038 R14: 00007f8746275fa0 R15: 00007ffc90801718 [ 218.942212][ T9878] [ 218.942281][ T9878] memory: usage 307184kB, limit 307200kB, failcnt 3120 [ 219.267370][ T9878] memory+swap: usage 307840kB, limit 9007199254740988kB, failcnt 0 [ 219.275442][ T9878] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 219.282786][ T9878] Memory cgroup stats for /syz4: [ 219.283232][ T9878] cache 4096 [ 219.291448][ T9878] rss 24576 [ 219.294623][ T9878] shmem 0 [ 219.297615][ T9878] mapped_file 401408 [ 219.301741][ T9878] dirty 0 [ 219.304868][ T9878] writeback 0 [ 219.308222][ T9878] workingset_refault_anon 365 [ 219.312928][ T9878] workingset_refault_file 4717 [ 219.317740][ T9878] swap 671744 [ 219.321057][ T9878] swapcached 24576 [ 219.324796][ T9878] pgpgin 707437 [ 219.328316][ T9878] pgpgout 707428 [ 219.331886][ T9878] pgfault 224788 [ 219.335715][ T9878] pgmajfault 169 [ 219.339439][ T9878] inactive_anon 20480 [ 219.343447][ T9878] active_anon 12288 [ 219.347309][ T9878] inactive_file 0 [ 219.350971][ T9878] active_file 4096 [ 219.354736][ T9878] unevictable 0 [ 219.358260][ T9878] hierarchical_memory_limit 314572800 [ 219.363652][ T9878] hierarchical_memsw_limit 9223372036854771712 [ 219.369874][ T9878] total_cache 4096 [ 219.373675][ T9878] total_rss 24576 [ 219.377406][ T9878] total_shmem 0 [ 219.380907][ T9878] total_mapped_file 401408 [ 219.385354][ T9878] total_dirty 0 [ 219.388884][ T9878] total_writeback 0 [ 219.392742][ T9878] total_workingset_refault_anon 365 [ 219.398108][ T9878] total_workingset_refault_file 4717 [ 219.403489][ T9878] total_swap 671744 [ 219.407374][ T9878] total_swapcached 24576 [ 219.411658][ T9878] total_pgpgin 707437 [ 219.415690][ T9878] total_pgpgout 707428 [ 219.419809][ T9878] total_pgfault 224788 [ 219.423877][ T9878] total_pgmajfault 169 [ 219.427988][ T9878] total_inactive_anon 20480 [ 219.432503][ T9878] total_active_anon 12288 [ 219.436929][ T9878] total_inactive_file 0 [ 219.441133][ T9878] total_active_file 4096 [ 219.445375][ T9878] total_unevictable 0 [ 219.449398][ T9878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.754,pid=5744,uid=0 [ 219.464364][ T9878] Memory cgroup out of memory: Killed process 5744 (syz.4.754) total-vm:94012kB, anon-rss:1220kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 219.517939][ T29] kauditd_printk_skb: 583 callbacks suppressed [ 219.517956][ T29] audit: type=1326 audit(2000000027.840:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9942 comm="syz.1.2152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x0 [ 219.570796][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2153'. [ 219.619098][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 219.628140][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2156'. [ 219.637153][ T9953] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2156'. [ 219.665904][ T9957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2155'. [ 219.837522][ T9962] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2158'. [ 219.847866][ T9965] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2158'. [ 219.858291][ T9962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2158'. [ 219.909279][ T9969] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.917538][ T9969] lo: Caught tx_queue_len zero misconfig [ 219.921948][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.013019][ T9979] sctp: [Deprecated]: syz.4.2164 (pid 9979) Use of int in max_burst socket option. [ 220.013019][ T9979] Use struct sctp_assoc_value instead [ 220.033100][ T29] audit: type=1400 audit(2000000028.350:2675): avc: denied { ioctl } for pid=9978 comm="syz.4.2164" path="socket:[22441]" dev="sockfs" ino=22441 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 220.067531][ T9982] netlink: 'syz.4.2165': attribute type 29 has an invalid length. [ 220.076512][ T9982] netlink: 'syz.4.2165': attribute type 29 has an invalid length. [ 220.085370][ T9977] netlink: 'syz.0.2163': attribute type 13 has an invalid length. [ 220.093969][ T9977] syz_tun: refused to change device tx_queue_len [ 220.100335][ T9977] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 220.210351][ T9995] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9995 comm=syz.4.2169 [ 220.474654][ T29] audit: type=1400 audit(2000000028.780:2676): avc: denied { shutdown } for pid=10008 comm="syz.2.2173" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.495587][ T29] audit: type=1326 audit(2000000028.790:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.519390][ T29] audit: type=1326 audit(2000000028.790:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.543007][ T29] audit: type=1326 audit(2000000028.790:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.566618][ T29] audit: type=1326 audit(2000000028.790:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.590211][ T29] audit: type=1326 audit(2000000028.790:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.613810][ T29] audit: type=1326 audit(2000000028.790:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.637313][ T29] audit: type=1326 audit(2000000028.790:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10008 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 220.955939][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.005114][T10043] Invalid ELF header magic: != ELF [ 221.143675][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.150943][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.190163][T10075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10075 comm=syz.4.2191 [ 221.212856][T10074] lo speed is unknown, defaulting to 1000 [ 221.226239][T10082] lo speed is unknown, defaulting to 1000 [ 221.243615][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.250897][T10075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.258293][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.265351][T10075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.284683][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.291860][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.338465][T10091] lo speed is unknown, defaulting to 1000 [ 221.356083][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.998311][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.039780][T10187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.080849][T10200] xt_hashlimit: size too large, truncated to 1048576 [ 222.100686][T10202] lo speed is unknown, defaulting to 1000 [ 222.484825][T10263] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 222.505381][T10263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.534200][T10267] IPVS: nq: FWM 3 0x00000003 - no destination available [ 222.534886][T10269] IPVS: nq: FWM 3 0x00000003 - no destination available [ 222.541301][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.556458][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.564629][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 222.571726][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 222.578742][ T3415] IPVS: starting estimator thread 0... [ 222.665637][T10268] IPVS: using max 2256 ests per chain, 112800 per kthread [ 222.677441][T10261] macvlan2: entered promiscuous mode [ 222.713808][T10261] netlink: 'syz.4.2230': attribute type 10 has an invalid length. [ 222.726799][T10261] ipvlan2: entered promiscuous mode [ 222.732854][T10261] bridge0: port 3(ipvlan2) entered blocking state [ 222.739412][T10261] bridge0: port 3(ipvlan2) entered disabled state [ 222.746501][T10261] ipvlan2: entered allmulticast mode [ 222.751836][T10261] bridge0: entered allmulticast mode [ 222.757908][T10261] ipvlan2: left allmulticast mode [ 222.763090][T10261] bridge0: left allmulticast mode [ 222.980768][T10288] netlink: 'syz.4.2238': attribute type 13 has an invalid length. [ 222.988801][T10288] __nla_validate_parse: 9 callbacks suppressed [ 222.988818][T10288] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2238'. [ 223.005513][T10288] syz_tun: refused to change device tx_queue_len [ 223.012008][T10288] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 223.038962][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.143105][T10300] xt_CT: No such helper "snmp" [ 223.169490][T10307] 9p: Bad value for 'rfdno' [ 223.183357][T10308] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.193216][T10308] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.257775][T10308] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.267787][T10308] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.327628][T10308] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.337605][T10308] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.369964][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2248'. [ 223.428956][T10308] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.438898][T10308] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.571827][ T5522] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.580246][ T5522] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.608964][ T5522] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.617286][ T5522] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.627244][ T5522] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.635625][ T5522] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.644804][ T5522] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.653100][ T5522] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.663821][T10338] netlink: 'syz.3.2253': attribute type 13 has an invalid length. [ 223.671703][T10338] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2253'. [ 223.682213][T10338] syz_tun: refused to change device tx_queue_len [ 223.786681][T10355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.896837][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 223.905796][T10360] netlink: 'syz.0.2260': attribute type 30 has an invalid length. [ 223.977634][T10360] nfs: Deprecated parameter 'nointr' [ 224.281751][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 224.290894][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 224.308205][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 224.317847][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 224.608831][T10397] netlink: 'syz.2.2271': attribute type 13 has an invalid length. [ 224.616761][T10397] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2271'. [ 224.630448][T10402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10402 comm=syz.4.2274 [ 224.769219][T10413] netlink: 'syz.1.2277': attribute type 8 has an invalid length. [ 224.777034][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2277'. [ 224.787492][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 224.787509][ T29] audit: type=1326 audit(2000000033.110:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 224.812136][T10413] bond0: entered promiscuous mode [ 224.822462][T10413] bond_slave_0: entered promiscuous mode [ 224.828207][T10413] bond_slave_1: entered promiscuous mode [ 224.833866][ T29] audit: type=1326 audit(2000000033.150:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 224.851770][T10413] gretap0: entered promiscuous mode [ 224.867533][T10413] hsr1: entered promiscuous mode [ 224.914685][ T29] audit: type=1400 audit(2000000033.190:2851): avc: denied { create } for pid=10408 comm="syz.4.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.934364][ T29] audit: type=1326 audit(2000000033.210:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10417 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78d0bdb78e code=0x7ffc0000 [ 224.957923][ T29] audit: type=1326 audit(2000000033.210:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 224.981685][ T29] audit: type=1326 audit(2000000033.210:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 225.011348][ T29] audit: type=1326 audit(2000000033.330:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 225.034934][ T29] audit: type=1326 audit(2000000033.330:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 225.058551][ T29] audit: type=1326 audit(2000000033.330:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d0c1aeb9 code=0x7ffc0000 [ 225.082076][ T29] audit: type=1326 audit(2000000033.330:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.3.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f78d0bdb78e code=0x7ffc0000 [ 225.182577][T10425] netlink: 'syz.1.2280': attribute type 12 has an invalid length. [ 225.384587][T10425] lo speed is unknown, defaulting to 1000 [ 225.443145][T10443] lo speed is unknown, defaulting to 1000 [ 225.938224][T10489] netlink: 'syz.2.2301': attribute type 5 has an invalid length. [ 226.088823][T10507] tipc: Enabling of bearer rejected, failed to enable media [ 226.161356][T10514] Cannot find del_set index 2 as target [ 226.704175][T10542] netlink: 'syz.4.2316': attribute type 39 has an invalid length. [ 226.818630][T10546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10546 comm=syz.1.2318 [ 226.854170][T10546] bond1: entered allmulticast mode [ 226.887091][T10554] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 226.900037][T10554] team0: Port device netdevsim1 added [ 227.199479][ T3371] net_ratelimit: 6 callbacks suppressed [ 227.199570][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.441102][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.725140][T10626] bridge0: port 3(veth0_to_bridge) entered blocking state [ 227.732417][T10626] bridge0: port 3(veth0_to_bridge) entered disabled state [ 227.798274][T10626] veth0_to_bridge: entered allmulticast mode [ 227.805160][T10626] veth0_to_bridge: entered promiscuous mode [ 227.811474][T10626] bridge0: port 3(veth0_to_bridge) entered blocking state [ 227.818659][T10626] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 227.910052][T10635] netlink: zone id is out of range [ 227.915256][T10635] netlink: zone id is out of range [ 227.920997][T10635] netlink: zone id is out of range [ 227.927410][T10635] netlink: zone id is out of range [ 227.932562][T10635] netlink: zone id is out of range [ 227.937815][T10635] netlink: zone id is out of range [ 227.942943][T10635] netlink: zone id is out of range [ 227.948105][T10635] netlink: zone id is out of range [ 228.070156][ T9] Process accounting resumed [ 228.076858][ T9] Process accounting resumed [ 228.189895][T10659] __nla_validate_parse: 15 callbacks suppressed [ 228.189914][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 228.398495][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 228.413237][T10677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2358'. [ 229.015864][T10696] xt_TCPMSS: Only works on TCP SYN packets [ 229.201004][T10711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2373'. [ 229.362567][T10718] ip6erspan0: entered promiscuous mode [ 229.369644][T10718] atomic_op ffff88811a353928 conn xmit_atomic 0000000000000000 [ 229.579079][T10732] validate_nla: 65 callbacks suppressed [ 229.579100][T10732] netlink: 'syz.2.2380': attribute type 10 has an invalid length. [ 229.592787][T10732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2380'. [ 229.643779][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 229.680509][T10732] team0: Port device geneve1 added [ 229.706772][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.714281][T10742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.740021][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.747552][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.791189][T10737] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 229.799189][T10737] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 229.830950][T10751] ip6_vti0: Caught tx_queue_len zero misconfig [ 229.908914][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 229.925575][T10760] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 229.933451][T10760] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2388'. [ 229.996854][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 230.416139][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 230.585508][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 230.585527][ T29] audit: type=1326 audit(2000000038.900:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.615390][ T29] audit: type=1326 audit(2000000038.900:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.639036][ T29] audit: type=1326 audit(2000000038.900:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.662661][ T29] audit: type=1326 audit(2000000038.900:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.686255][ T29] audit: type=1326 audit(2000000038.900:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.709955][ T29] audit: type=1326 audit(2000000038.900:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.733504][ T29] audit: type=1326 audit(2000000038.900:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.757403][ T29] audit: type=1326 audit(2000000038.900:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.780929][ T29] audit: type=1326 audit(2000000038.900:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.804817][ T29] audit: type=1326 audit(2000000038.900:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 230.900828][T10802] lo speed is unknown, defaulting to 1000 [ 230.985619][T10813] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 231.264750][T10847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.307905][T10847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.337313][T10847] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 231.351768][T10847] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 231.624794][T10885] lo speed is unknown, defaulting to 1000 [ 232.356635][T10929] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 232.631725][T10906] syz.3.2437 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 232.645753][T10906] CPU: 0 UID: 0 PID: 10906 Comm: syz.3.2437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.645818][T10906] Tainted: [W]=WARN [ 232.645826][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.645860][T10906] Call Trace: [ 232.645869][T10906] [ 232.645880][T10906] __dump_stack+0x1d/0x30 [ 232.645913][T10906] dump_stack_lvl+0x95/0xd0 [ 232.645939][T10906] dump_stack+0x15/0x1b [ 232.645960][T10906] dump_header+0x80/0x240 [ 232.646003][T10906] oom_kill_process+0x295/0x350 [ 232.646030][T10906] out_of_memory+0x97d/0xb80 [ 232.646061][T10906] try_charge_memcg+0x62e/0xa10 [ 232.646121][T10906] obj_cgroup_charge_pages+0x23/0xc0 [ 232.646166][T10906] __memcg_kmem_charge_page+0x9e/0x170 [ 232.646210][T10906] __alloc_frozen_pages_noprof+0x18a/0x350 [ 232.646250][T10906] alloc_pages_mpol+0xb3/0x260 [ 232.646312][T10906] alloc_pages_noprof+0x8f/0x130 [ 232.646402][T10906] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 232.646462][T10906] __kvmalloc_node_noprof+0x471/0x680 [ 232.646568][T10906] ? ip_set_alloc+0x24/0x30 [ 232.646602][T10906] ? ip_set_alloc+0x24/0x30 [ 232.646665][T10906] ip_set_alloc+0x24/0x30 [ 232.646704][T10906] hash_netiface_create+0x282/0x740 [ 232.646808][T10906] ? __pfx_hash_netiface_create+0x10/0x10 [ 232.646838][T10906] ip_set_create+0x3cf/0x970 [ 232.646884][T10906] ? __nla_parse+0x40/0x60 [ 232.646923][T10906] nfnetlink_rcv_msg+0x509/0x5d0 [ 232.646977][T10906] netlink_rcv_skb+0x123/0x220 [ 232.647013][T10906] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 232.647097][T10906] nfnetlink_rcv+0x167/0x1720 [ 232.647131][T10906] ? _raw_spin_lock+0x52/0xa0 [ 232.647164][T10906] ? _raw_spin_unlock+0x9/0x30 [ 232.647202][T10906] ? inode_add_bytes+0xc0/0xe0 [ 232.647310][T10906] ? __dquot_alloc_space+0x180/0x8a0 [ 232.647371][T10906] ? css_rstat_updated+0xbb/0x280 [ 232.647523][T10906] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 232.647551][T10906] ? __rcu_read_unlock+0x33/0x70 [ 232.647583][T10906] ? lruvec_stat_mod_folio+0xd2/0x110 [ 232.647690][T10906] ? folio_add_file_rmap_ptes+0x1a8/0x1e0 [ 232.647736][T10906] ? set_pte_range+0x325/0x4f0 [ 232.647860][T10906] ? _raw_spin_lock_bh+0x56/0xb0 [ 232.647968][T10906] ? should_fail_ex+0x30/0x280 [ 232.648006][T10906] ? selinux_nlmsg_lookup+0x99/0x890 [ 232.648034][T10906] ? __rcu_read_unlock+0x33/0x70 [ 232.648074][T10906] ? __netlink_lookup+0x276/0x2b0 [ 232.648099][T10906] netlink_unicast+0x5c0/0x690 [ 232.648139][T10906] netlink_sendmsg+0x5c8/0x6f0 [ 232.648166][T10906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.648231][T10906] ____sys_sendmsg+0x5af/0x600 [ 232.648260][T10906] ___sys_sendmsg+0x195/0x1e0 [ 232.648300][T10906] __x64_sys_sendmsg+0xd4/0x160 [ 232.648330][T10906] x64_sys_call+0x17ba/0x3000 [ 232.648400][T10906] do_syscall_64+0xc0/0x2a0 [ 232.648431][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.648462][T10906] RIP: 0033:0x7f78d0c1aeb9 [ 232.648482][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.648501][T10906] RSP: 002b:00007f78cf66f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.648590][T10906] RAX: ffffffffffffffda RBX: 00007f78d0e95fa0 RCX: 00007f78d0c1aeb9 [ 232.648608][T10906] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 232.648624][T10906] RBP: 00007f78d0c88c1f R08: 0000000000000000 R09: 0000000000000000 [ 232.648653][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.648664][T10906] R13: 00007f78d0e96038 R14: 00007f78d0e95fa0 R15: 00007ffe0802a038 [ 232.648683][T10906] [ 232.648702][T10906] memory: usage 307200kB, limit 307200kB, failcnt 507 [ 233.006326][T10906] memory+swap: usage 308180kB, limit 9007199254740988kB, failcnt 0 [ 233.014301][T10906] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 233.021616][T10906] Memory cgroup stats for /syz3: [ 233.022046][T10906] cache 0 [ 233.029961][T10906] rss 0 [ 233.032822][T10906] shmem 0 [ 233.035895][T10906] mapped_file 0 [ 233.039425][T10906] dirty 0 [ 233.042360][T10906] writeback 0 [ 233.045772][T10906] workingset_refault_anon 794 [ 233.050502][T10906] workingset_refault_file 3739 [ 233.055275][T10906] swap 1003520 [ 233.058701][T10906] swapcached 4096 [ 233.062350][T10906] pgpgin 726136 [ 233.065904][T10906] pgpgout 726133 [ 233.069572][T10906] pgfault 252140 [ 233.073114][T10906] pgmajfault 254 [ 233.076696][T10906] inactive_anon 0 [ 233.080338][T10906] active_anon 4096 [ 233.084144][T10906] inactive_file 0 [ 233.087826][T10906] active_file 8192 [ 233.091650][T10906] unevictable 0 [ 233.095106][T10906] hierarchical_memory_limit 314572800 [ 233.100596][T10906] hierarchical_memsw_limit 9223372036854771712 [ 233.106837][T10906] total_cache 0 [ 233.110306][T10906] total_rss 0 [ 233.113591][T10906] total_shmem 0 [ 233.117237][T10906] total_mapped_file 0 [ 233.121270][T10906] total_dirty 0 [ 233.124743][T10906] total_writeback 0 [ 233.128666][T10906] total_workingset_refault_anon 794 [ 233.133878][T10906] total_workingset_refault_file 3739 [ 233.139196][T10906] total_swap 1003520 [ 233.143151][T10906] total_swapcached 4096 [ 233.147363][T10906] total_pgpgin 726136 [ 233.151394][T10906] total_pgpgout 726133 [ 233.155567][T10906] total_pgfault 252140 [ 233.159660][T10906] total_pgmajfault 254 [ 233.163742][T10906] total_inactive_anon 0 [ 233.167966][T10906] total_active_anon 4096 [ 233.172242][T10906] total_inactive_file 0 [ 233.176445][T10906] total_active_file 8192 [ 233.180801][T10906] total_unevictable 0 [ 233.184833][T10906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.510,pid=5020,uid=0 [ 233.199787][T10906] Memory cgroup out of memory: Killed process 5020 (syz.3.510) total-vm:94012kB, anon-rss:1216kB, file-rss:20720kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 233.282599][T10906] syz.3.2437 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 233.296636][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.3.2437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.296677][T10906] Tainted: [W]=WARN [ 233.296684][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.296697][T10906] Call Trace: [ 233.296707][T10906] [ 233.296749][T10906] __dump_stack+0x1d/0x30 [ 233.296772][T10906] dump_stack_lvl+0x95/0xd0 [ 233.296798][T10906] dump_stack+0x15/0x1b [ 233.296824][T10906] dump_header+0x80/0x240 [ 233.296850][T10906] oom_kill_process+0x295/0x350 [ 233.296914][T10906] out_of_memory+0x97d/0xb80 [ 233.296949][T10906] try_charge_memcg+0x62e/0xa10 [ 233.296978][T10906] obj_cgroup_charge_pages+0x23/0xc0 [ 233.297057][T10906] __memcg_kmem_charge_page+0x9e/0x170 [ 233.297155][T10906] __alloc_frozen_pages_noprof+0x18a/0x350 [ 233.297306][T10906] alloc_pages_mpol+0xb3/0x260 [ 233.297341][T10906] alloc_pages_noprof+0x8f/0x130 [ 233.297372][T10906] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 233.297465][T10906] __kvmalloc_node_noprof+0x471/0x680 [ 233.297503][T10906] ? ip_set_alloc+0x24/0x30 [ 233.297577][T10906] ? ip_set_alloc+0x24/0x30 [ 233.297615][T10906] ip_set_alloc+0x24/0x30 [ 233.297659][T10906] hash_netiface_create+0x282/0x740 [ 233.297699][T10906] ? __pfx_hash_netiface_create+0x10/0x10 [ 233.297894][T10906] ip_set_create+0x3cf/0x970 [ 233.297951][T10906] ? __nla_parse+0x40/0x60 [ 233.297974][T10906] nfnetlink_rcv_msg+0x509/0x5d0 [ 233.298039][T10906] netlink_rcv_skb+0x123/0x220 [ 233.298087][T10906] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.298162][T10906] nfnetlink_rcv+0x167/0x1720 [ 233.298196][T10906] ? _raw_spin_lock+0x52/0xa0 [ 233.298239][T10906] ? _raw_spin_unlock+0x9/0x30 [ 233.298292][T10906] ? inode_add_bytes+0xc0/0xe0 [ 233.298401][T10906] ? __dquot_alloc_space+0x180/0x8a0 [ 233.298507][T10906] ? css_rstat_updated+0xbb/0x280 [ 233.298538][T10906] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 233.298575][T10906] ? __rcu_read_unlock+0x33/0x70 [ 233.298683][T10906] ? lruvec_stat_mod_folio+0xd2/0x110 [ 233.298720][T10906] ? folio_add_file_rmap_ptes+0x1a8/0x1e0 [ 233.298761][T10906] ? set_pte_range+0x325/0x4f0 [ 233.298843][T10906] ? _raw_spin_lock_bh+0x56/0xb0 [ 233.298921][T10906] ? should_fail_ex+0x30/0x280 [ 233.298953][T10906] ? selinux_nlmsg_lookup+0x99/0x890 [ 233.299025][T10906] ? __rcu_read_unlock+0x33/0x70 [ 233.299057][T10906] ? __netlink_lookup+0x276/0x2b0 [ 233.299080][T10906] netlink_unicast+0x5c0/0x690 [ 233.299191][T10906] netlink_sendmsg+0x5c8/0x6f0 [ 233.299220][T10906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.299245][T10906] ____sys_sendmsg+0x5af/0x600 [ 233.299275][T10906] ___sys_sendmsg+0x195/0x1e0 [ 233.299354][T10906] __x64_sys_sendmsg+0xd4/0x160 [ 233.299377][T10906] x64_sys_call+0x17ba/0x3000 [ 233.299461][T10906] do_syscall_64+0xc0/0x2a0 [ 233.299503][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.299526][T10906] RIP: 0033:0x7f78d0c1aeb9 [ 233.299541][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.299562][T10906] RSP: 002b:00007f78cf66f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.299706][T10906] RAX: ffffffffffffffda RBX: 00007f78d0e95fa0 RCX: 00007f78d0c1aeb9 [ 233.299726][T10906] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 233.299744][T10906] RBP: 00007f78d0c88c1f R08: 0000000000000000 R09: 0000000000000000 [ 233.299761][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.299775][T10906] R13: 00007f78d0e96038 R14: 00007f78d0e95fa0 R15: 00007ffe0802a038 [ 233.299835][T10906] [ 233.299843][T10906] memory: usage 307200kB, limit 307200kB, failcnt 674 [ 233.658472][T10906] memory+swap: usage 308004kB, limit 9007199254740988kB, failcnt 0 [ 233.666416][T10906] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 233.673795][T10906] Memory cgroup stats for /syz3: [ 233.674371][T10906] cache 106496 [ 233.682912][T10906] rss 4096 [ 233.686002][T10906] shmem 0 [ 233.688956][T10906] mapped_file 65536 [ 233.692789][T10906] dirty 0 [ 233.695790][T10906] writeback 0 [ 233.699195][T10906] workingset_refault_anon 817 [ 233.703888][T10906] workingset_refault_file 3765 [ 233.708689][T10906] swap 823296 [ 233.711986][T10906] swapcached 4096 [ 233.715659][T10906] pgpgin 726185 [ 233.719128][T10906] pgpgout 726156 [ 233.722689][T10906] pgfault 252158 [ 233.726301][T10906] pgmajfault 270 [ 233.729872][T10906] inactive_anon 4096 [ 233.733797][T10906] active_anon 0 [ 233.737402][T10906] inactive_file 114688 [ 233.741487][T10906] active_file 0 [ 233.744976][T10906] unevictable 0 [ 233.748469][T10906] hierarchical_memory_limit 314572800 [ 233.753857][T10906] hierarchical_memsw_limit 9223372036854771712 [ 233.760069][T10906] total_cache 106496 [ 233.764142][T10906] total_rss 4096 [ 233.767727][T10906] total_shmem 0 [ 233.771285][T10906] total_mapped_file 65536 [ 233.775644][T10906] total_dirty 0 [ 233.779200][T10906] total_writeback 0 [ 233.783024][T10906] total_workingset_refault_anon 817 [ 233.788250][T10906] total_workingset_refault_file 3765 [ 233.793623][T10906] total_swap 823296 [ 233.797549][T10906] total_swapcached 4096 [ 233.801796][T10906] total_pgpgin 726185 [ 233.805813][T10906] total_pgpgout 726156 [ 233.809934][T10906] total_pgfault 252158 [ 233.814023][T10906] total_pgmajfault 270 [ 233.818130][T10906] total_inactive_anon 4096 [ 233.822613][T10906] total_active_anon 0 [ 233.826662][T10906] total_inactive_file 114688 [ 233.831330][T10906] total_active_file 0 [ 233.835414][T10906] total_unevictable 0 [ 233.839436][T10906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.203,pid=4096,uid=0 [ 233.854334][T10906] Memory cgroup out of memory: Killed process 4096 (syz.3.203) total-vm:94012kB, anon-rss:1220kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 233.879503][T10905] syz.3.2437 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 233.890272][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.3.2437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.890314][T10905] Tainted: [W]=WARN [ 233.890362][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.890376][T10905] Call Trace: [ 233.890384][T10905] [ 233.890393][T10905] __dump_stack+0x1d/0x30 [ 233.890423][T10905] dump_stack_lvl+0x95/0xd0 [ 233.890504][T10905] dump_stack+0x15/0x1b [ 233.890530][T10905] dump_header+0x80/0x240 [ 233.890565][T10905] oom_kill_process+0x295/0x350 [ 233.890599][T10905] out_of_memory+0x97d/0xb80 [ 233.890662][T10905] try_charge_memcg+0x62e/0xa10 [ 233.890699][T10905] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 233.890765][T10905] __read_swap_cache_async+0x17b/0x2d0 [ 233.890836][T10905] swap_cluster_readahead+0x262/0x3c0 [ 233.890914][T10905] swapin_readahead+0xde/0x840 [ 233.891092][T10905] ? __rcu_read_unlock+0x33/0x70 [ 233.891132][T10905] ? __rcu_read_unlock+0x4e/0x70 [ 233.891165][T10905] ? swap_cache_get_folio+0x26f/0x280 [ 233.891201][T10905] do_swap_page+0x59b/0x2a50 [ 233.891255][T10905] ? __rcu_read_lock+0x36/0x50 [ 233.891293][T10905] ? __pfx_default_wake_function+0x10/0x10 [ 233.891403][T10905] handle_mm_fault+0xb40/0x3030 [ 233.891450][T10905] ? vma_start_read+0x1c7/0x2c0 [ 233.891492][T10905] do_user_addr_fault+0x62f/0x1050 [ 233.891552][T10905] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 233.891663][T10905] ? irqentry_exit+0x3c/0x510 [ 233.891732][T10905] exc_page_fault+0x62/0xa0 [ 233.891759][T10905] asm_exc_page_fault+0x26/0x30 [ 233.891782][T10905] RIP: 0033:0x7f78d0acf770 [ 233.891833][T10905] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 233.891856][T10905] RSP: 002b:00007ffe0802a0c8 EFLAGS: 00010246 [ 233.891876][T10905] RAX: 000000008465f0bf RBX: ffffffff8465f0bf RCX: ffffffff8465f0bf [ 233.891893][T10905] RDX: 00000000000010bf RSI: ffffffff8465f0bf RDI: 000000000000000a [ 233.891908][T10905] RBP: 0000000000000000 R08: 00007f78d0e80000 R09: 00007f78d0e82000 [ 233.891925][T10905] R10: 000000008465f0c3 R11: 000000000000000a R12: 00007f78d0e96038 [ 233.891952][T10905] R13: 0000000000000000 R14: ffffffff8465f9d5 R15: 00007f78d19c5720 [ 233.891974][T10905] ? __x64_sys_sendmsg+0x25/0x160 [ 233.891999][T10905] ? ____sys_sendmsg+0x6f/0x600 [ 233.892022][T10905] ? ____sys_sendmsg+0x6f/0x600 [ 233.892044][T10905] ? ____sys_sendmsg+0x6f/0x600 [ 233.892068][T10905] [ 233.892077][T10905] memory: usage 307172kB, limit 307200kB, failcnt 683 [ 234.142813][T10905] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 234.150802][T10905] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 234.158167][T10905] Memory cgroup stats for /syz3: [ 234.160615][T10905] cache 0 [ 234.168575][T10905] rss 4096 [ 234.171681][T10905] shmem 0 [ 234.174632][T10905] mapped_file 0 [ 234.178217][T10905] dirty 0 [ 234.181216][T10905] writeback 0 [ 234.184517][T10905] workingset_refault_anon 822 [ 234.189301][T10905] workingset_refault_file 3767 [ 234.194122][T10905] swap 712704 [ 234.197446][T10905] swapcached 12288 [ 234.201188][T10905] pgpgin 726192 [ 234.204660][T10905] pgpgout 726187 [ 234.208246][T10905] pgfault 252163 [ 234.211836][T10905] pgmajfault 273 [ 234.215522][T10905] inactive_anon 0 [ 234.219244][T10905] active_anon 12288 [ 234.223122][T10905] inactive_file 0 [ 234.226828][T10905] active_file 8192 [ 234.230568][T10905] unevictable 0 [ 234.234120][T10905] hierarchical_memory_limit 314572800 [ 234.239545][T10905] hierarchical_memsw_limit 9223372036854771712 [ 234.245742][T10905] total_cache 0 [ 234.249265][T10905] total_rss 4096 [ 234.252814][T10905] total_shmem 0 [ 234.256339][T10905] total_mapped_file 0 [ 234.260414][T10905] total_dirty 0 [ 234.263872][T10905] total_writeback 0 [ 234.267706][T10905] total_workingset_refault_anon 822 [ 234.272915][T10905] total_workingset_refault_file 3767 [ 234.278342][T10905] total_swap 712704 [ 234.282159][T10905] total_swapcached 12288 [ 234.286428][T10905] total_pgpgin 726192 [ 234.290481][T10905] total_pgpgout 726187 [ 234.294547][T10905] total_pgfault 252163 [ 234.298748][T10905] total_pgmajfault 273 [ 234.302827][T10905] total_inactive_anon 0 [ 234.307107][T10905] total_active_anon 12288 [ 234.311452][T10905] total_inactive_file 0 [ 234.315636][T10905] total_active_file 8192 [ 234.319911][T10905] total_unevictable 0 [ 234.323973][T10905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2437,pid=10905,uid=0 [ 234.339057][T10905] Memory cgroup out of memory: Killed process 10905 (syz.3.2437) total-vm:94144kB, anon-rss:1340kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 234.491741][T10971] team0 (unregistering): Port device team_slave_0 removed [ 234.507975][T10971] team0 (unregistering): Port device team_slave_1 removed [ 234.747527][T10995] __nla_validate_parse: 4 callbacks suppressed [ 234.747547][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 234.763502][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2470'. [ 234.916277][T11004] 9p: Could not find request transport: fdrndno=0xffffffffffffffff [ 235.279566][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 235.290644][ T3319] CPU: 0 UID: 0 PID: 3319 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.290689][ T3319] Tainted: [W]=WARN [ 235.290699][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 235.290716][ T3319] Call Trace: [ 235.290723][ T3319] [ 235.290730][ T3319] __dump_stack+0x1d/0x30 [ 235.290811][ T3319] dump_stack_lvl+0x95/0xd0 [ 235.290840][ T3319] dump_stack+0x15/0x1b [ 235.290934][ T3319] dump_header+0x80/0x240 [ 235.290956][ T3319] oom_kill_process+0x295/0x350 [ 235.290988][ T3319] out_of_memory+0x97d/0xb80 [ 235.291071][ T3319] try_charge_memcg+0x62e/0xa10 [ 235.291108][ T3319] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 235.291230][ T3319] __read_swap_cache_async+0x17b/0x2d0 [ 235.291350][ T3319] swap_cluster_readahead+0x362/0x3c0 [ 235.291457][ T3319] swapin_readahead+0xde/0x840 [ 235.291498][ T3319] ? __rcu_read_unlock+0x33/0x70 [ 235.291538][ T3319] ? __rcu_read_unlock+0x4e/0x70 [ 235.291656][ T3319] ? swap_cache_get_folio+0x26f/0x280 [ 235.291766][ T3319] do_swap_page+0x59b/0x2a50 [ 235.291876][ T3319] ? __rcu_read_lock+0x36/0x50 [ 235.291903][ T3319] ? __pfx_default_wake_function+0x10/0x10 [ 235.291973][ T3319] handle_mm_fault+0xb40/0x3030 [ 235.292015][ T3319] ? vma_start_read+0x1c7/0x2c0 [ 235.292061][ T3319] do_user_addr_fault+0x62f/0x1050 [ 235.292086][ T3319] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 235.292134][ T3319] ? irqentry_exit+0x3c/0x510 [ 235.292164][ T3319] exc_page_fault+0x62/0xa0 [ 235.292192][ T3319] asm_exc_page_fault+0x26/0x30 [ 235.292239][ T3319] RIP: 0033:0x7fad0d6db9f6 [ 235.292318][ T3319] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 235.292342][ T3319] RSP: 002b:00007ffc6ba3a0f0 EFLAGS: 00010246 [ 235.292371][ T3319] RAX: 0000000000000bb8 RBX: 0000000000000540 RCX: 00000000000396be [ 235.292388][ T3319] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710 [ 235.292408][ T3319] RBP: 00007ffc6ba3a15c R08: 000000000bd819d9 R09: 0000000000000000 [ 235.292422][ T3319] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 235.292439][ T3319] R13: 00000000000927c0 R14: 00000000000394c0 R15: 00007ffc6ba3a1b0 [ 235.292464][ T3319] [ 235.292471][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 6291 [ 235.524367][ T3319] memory+swap: usage 308196kB, limit 9007199254740988kB, failcnt 0 [ 235.532309][ T3319] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 235.539717][ T3319] Memory cgroup stats for /syz2: [ 235.549715][ T3319] cache 0 [ 235.557706][ T3319] rss 0 [ 235.560489][ T3319] shmem 0 [ 235.563439][ T3319] mapped_file 0 [ 235.566975][ T3319] dirty 0 [ 235.570023][ T3319] writeback 0 [ 235.573322][ T3319] workingset_refault_anon 364 [ 235.578102][ T3319] workingset_refault_file 4047 [ 235.583139][ T3319] swap 1019904 [ 235.586593][ T3319] swapcached 0 [ 235.589980][ T3319] pgpgin 574174 [ 235.593458][ T3319] pgpgout 574170 [ 235.596417][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 235.596448][ T29] audit: type=1326 audit(2000000043.920:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 235.597394][ T3319] pgfault 235709 [ 235.604037][ T29] audit: type=1326 audit(2000000043.920:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 235.626791][ T3319] pgmajfault 305 [ 235.626802][ T3319] inactive_anon 0 [ 235.626810][ T3319] active_anon 0 [ 235.664508][ T3319] inactive_file 0 [ 235.668224][ T3319] active_file 16384 [ 235.672238][ T3319] unevictable 0 [ 235.675776][ T3319] hierarchical_memory_limit 314572800 [ 235.681500][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 235.682516][ T29] audit: type=1326 audit(2000000043.960:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 235.687705][ T3319] total_cache 0 [ 235.687715][ T3319] total_rss 0 [ 235.711199][ T29] audit: type=1326 audit(2000000043.960:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 235.714679][ T3319] total_shmem 0 [ 235.714689][ T3319] total_mapped_file 0 [ 235.717998][ T29] audit: type=1326 audit(2000000043.960:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 235.741466][ T3319] total_dirty 0 [ 235.775946][ T3319] total_writeback 0 [ 235.779775][ T3319] total_workingset_refault_anon 364 [ 235.785028][ T3319] total_workingset_refault_file 4047 [ 235.790367][ T3319] total_swap 1019904 [ 235.794274][ T3319] total_swapcached 0 [ 235.798301][ T3319] total_pgpgin 574174 [ 235.802296][ T3319] total_pgpgout 574170 [ 235.806409][ T3319] total_pgfault 235709 [ 235.810542][ T3319] total_pgmajfault 305 [ 235.814629][ T3319] total_inactive_anon 0 [ 235.818907][ T3319] total_active_anon 0 [ 235.822913][ T3319] total_inactive_file 0 [ 235.827189][ T3319] total_active_file 16384 [ 235.831569][ T3319] total_unevictable 0 [ 235.835622][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2468,pid=10988,uid=0 [ 235.850995][ T3319] Memory cgroup out of memory: Killed process 10988 (syz.2.2468) total-vm:94144kB, anon-rss:1212kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 235.934248][ T29] audit: type=1326 audit(2000000044.250:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11018 comm="syz.1.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 235.990731][ T29] audit: type=1400 audit(2000000044.310:3659): avc: denied { execute } for pid=11052 comm="syz.4.2487" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=27732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 236.046797][ T29] audit: type=1326 audit(2000000044.370:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 236.070387][ T29] audit: type=1326 audit(2000000044.370:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 236.093990][ T29] audit: type=1326 audit(2000000044.370:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.1.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 236.127633][T11055] netlink: 'syz.1.2488': attribute type 8 has an invalid length. [ 236.316325][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 236.326413][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2491'. [ 236.370020][T11053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2487'. [ 236.432350][T11074] 9p: Bad value for 'rfdno' [ 236.437306][T11074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2495'. [ 236.446948][T11075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2494'. [ 236.510009][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2498'. [ 236.529253][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 236.650653][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2505'. [ 236.661507][T11096] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 236.676833][T11096] bond0: entered promiscuous mode [ 236.681913][T11096] bond0: entered allmulticast mode [ 236.703122][T11096] bond0: (slave ip6gretap2): making interface the new active one [ 236.711012][T11096] ip6gretap2: entered promiscuous mode [ 236.716691][T11096] ip6gretap2: entered allmulticast mode [ 236.727441][T11096] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 237.176936][T11145] set match dimension is over the limit! [ 237.316629][T11152] 9p: Bad value for 'rfdno' [ 237.435145][T11162] lo speed is unknown, defaulting to 1000 [ 237.836368][ T12] net_ratelimit: 26 callbacks suppressed [ 237.836383][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.850399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.866497][T11189] x_tables: duplicate underflow at hook 3 [ 237.872758][T11189] netlink: 'syz.1.2532': attribute type 33 has an invalid length. [ 238.046594][T11210] netlink: 'syz.3.2537': attribute type 46 has an invalid length. [ 238.473133][T11244] tipc: Enabling of bearer rejected, failed to enable media [ 238.889140][T11266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=11266 comm=syz.3.2556 [ 238.925736][T11266] ip6gre2: entered promiscuous mode [ 238.931059][T11266] ip6gre2: entered allmulticast mode [ 238.965965][ T58] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.973609][ T58] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.993348][T11266] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 239.005652][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 239.289972][T11302] ip6tnl1: entered promiscuous mode [ 239.675642][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 239.683861][ T994] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 239.924295][T11353] netlink: 'syz.3.2587': attribute type 15 has an invalid length. [ 239.932213][T11353] __nla_validate_parse: 14 callbacks suppressed [ 239.932227][T11353] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2587'. [ 240.003429][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2588'. [ 240.012601][T11360] netlink: 'syz.1.2588': attribute type 7 has an invalid length. [ 240.020420][T11360] netlink: 'syz.1.2588': attribute type 8 has an invalid length. [ 240.028291][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2588'. [ 240.253949][T11368] netlink: 'syz.3.2592': attribute type 63 has an invalid length. [ 240.261927][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 240.399920][T11372] tmpfs: Unknown parameter 'nr_blo?4ZRz<75.*:W꿎' [ 240.605744][ T29] kauditd_printk_skb: 918 callbacks suppressed [ 240.605829][ T29] audit: type=1326 audit(2000000048.930:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 240.646038][ T29] audit: type=1326 audit(2000000048.970:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 240.669861][ T29] audit: type=1326 audit(2000000048.990:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 240.694015][ T29] audit: type=1326 audit(2000000049.010:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 240.717837][ T29] audit: type=1326 audit(2000000049.040:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 240.743362][ T29] audit: type=1326 audit(2000000049.060:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee47a2b78e code=0x7ffc0000 [ 240.769526][ T29] audit: type=1326 audit(2000000049.090:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 240.865706][ T29] audit: type=1326 audit(2000000049.190:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee47a6aeb9 code=0x7ffc0000 [ 240.907491][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2598'. [ 241.017817][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2597'. [ 241.259064][ T29] audit: type=1326 audit(2000000049.580:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.2.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 241.282778][ T29] audit: type=1326 audit(2000000049.580:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.2.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 241.382302][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'. [ 241.391790][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2607'. [ 241.497408][ T994] IPVS: starting estimator thread 0... [ 241.585645][T11430] IPVS: using max 2496 ests per chain, 124800 per kthread [ 241.683421][T11438] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2615'. [ 241.730188][T11441] veth0: entered promiscuous mode [ 241.736442][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 241.746182][T11441] veth0 (unregistering): left promiscuous mode [ 242.090989][T11463] tmpfs: Unknown parameter 'nr_blo?4ZRz<75.*:W꿎' [ 242.407156][T11486] netlink: 'syz.2.2632': attribute type 4 has an invalid length. [ 242.715542][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.921752][T11524] 8021q: VLANs not supported on vcan0 [ 243.146661][T11557] TCP: TCP_TX_DELAY enabled [ 243.219815][T11567] lo speed is unknown, defaulting to 1000 [ 243.463717][T11580] netlink: 'syz.4.2662': attribute type 4 has an invalid length. [ 243.596073][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.604427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.680364][T11598] dvmrp0: entered allmulticast mode [ 243.695758][T11598] dvmrp0: left allmulticast mode [ 244.149618][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.160263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.804193][T11611] syz.1.2671 (11611) used greatest stack depth: 6104 bytes left [ 244.875716][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.883982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.981898][T11649] netlink: 'syz.3.2682': attribute type 4 has an invalid length. [ 245.027018][T11662] __nla_validate_parse: 14 callbacks suppressed [ 245.027031][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2686'. [ 245.065445][T11662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11662 comm=syz.3.2686 [ 245.095165][T11667] pim6reg: entered allmulticast mode [ 245.130653][T11667] pim6reg: left allmulticast mode [ 245.149135][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 245.185243][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 245.249070][T11682] netlink: 'syz.3.2693': attribute type 13 has an invalid length. [ 245.257308][T11682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2693'. [ 245.273532][T11682] syz_tun: refused to change device tx_queue_len [ 245.279960][T11682] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 245.382182][T11702] hsr1: left promiscuous mode [ 245.404837][T11702] ip6erspan0: left promiscuous mode [ 245.575370][T11714] netlink: 'syz.1.2701': attribute type 3 has an invalid length. [ 245.782376][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 245.903497][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2707'. [ 245.986110][T11743] bridge0: Caught tx_queue_len zero misconfig [ 246.145111][ T29] kauditd_printk_skb: 785 callbacks suppressed [ 246.145136][ T29] audit: type=1400 audit(2000000054.460:5376): avc: denied { bind } for pid=11761 comm="syz.4.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.200592][T11726] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 246.210111][T11726] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 246.226036][T11726] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 246.245098][T11726] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 246.335702][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2714'. [ 246.353366][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2723'. [ 246.362872][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2723'. [ 246.546346][ T29] audit: type=1326 audit(2000000054.870:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.582150][T11785] lo speed is unknown, defaulting to 1000 [ 246.612913][T11789] SET target dimension over the limit! [ 246.643483][ T29] audit: type=1326 audit(2000000054.870:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.667269][ T29] audit: type=1326 audit(2000000054.920:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.691084][ T29] audit: type=1326 audit(2000000054.920:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.714835][ T29] audit: type=1326 audit(2000000054.920:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.738583][ T29] audit: type=1326 audit(2000000054.920:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.762133][ T29] audit: type=1326 audit(2000000054.920:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.785713][ T29] audit: type=1326 audit(2000000054.920:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.809253][ T29] audit: type=1326 audit(2000000054.920:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad0d6daeb9 code=0x7ffc0000 [ 246.890931][T11805] lo speed is unknown, defaulting to 1000 [ 246.933017][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 247.076520][T11829] No such timeout policy "syz0" [ 247.100123][T11829] dummy0: entered allmulticast mode [ 247.494750][T11864] lo speed is unknown, defaulting to 1000 [ 247.661765][T11864] chnl_net:caif_netlink_parms(): no params data found [ 247.705828][T11864] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.712928][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.720261][T11864] bridge_slave_0: entered allmulticast mode [ 247.727057][T11864] bridge_slave_0: entered promiscuous mode [ 247.733966][T11864] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.741173][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.748524][T11864] bridge_slave_1: entered allmulticast mode [ 247.754967][T11864] bridge_slave_1: entered promiscuous mode [ 247.772731][T11864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.783205][T11864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.799883][T11815] dummy0: left allmulticast mode [ 247.827803][T11864] team0: Port device team_slave_0 added [ 247.834379][T11864] team0: Port device team_slave_1 added [ 247.853894][T11864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.860999][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.886967][T11864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.942040][T11864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.949091][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.975182][T11864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.017086][T11918] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 248.044673][T11864] hsr_slave_0: entered promiscuous mode [ 248.051209][T11864] hsr_slave_1: entered promiscuous mode [ 248.057286][T11864] debugfs: 'hsr0' already exists in 'hsr' [ 248.063056][T11864] Cannot create hsr debugfs directory [ 248.196010][T11864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.205349][T11864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.214668][T11864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.230291][T11864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.383846][T11864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.400165][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.410138][T11864] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.420657][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.427811][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.432293][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.447772][T11960] netlink: 'syz.4.2770': attribute type 83 has an invalid length. [ 248.448974][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.490098][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.497248][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.512993][T11964] netlink: 'syz.2.2771': attribute type 3 has an invalid length. [ 248.620604][T11864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.717830][T11728] net_ratelimit: 5 callbacks suppressed [ 248.717844][T11728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.731894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.806082][T12014] macvtap1: entered promiscuous mode [ 248.811445][T12014] bridge0: entered promiscuous mode [ 248.816903][T12014] macvtap1: entered allmulticast mode [ 248.822311][T12014] bridge0: entered allmulticast mode [ 248.826385][T12018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.835957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.844198][T12014] bridge0: port 3(macvtap1) entered blocking state [ 248.850940][T12014] bridge0: port 3(macvtap1) entered disabled state [ 248.858679][T12014] bridge0: left allmulticast mode [ 248.863761][T12014] bridge0: left promiscuous mode [ 248.883957][T11864] veth0_vlan: entered promiscuous mode [ 248.892595][T11864] veth1_vlan: entered promiscuous mode [ 248.910585][T11864] veth0_macvtap: entered promiscuous mode [ 248.918706][T11864] veth1_macvtap: entered promiscuous mode [ 248.932166][T11864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.946588][T11864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.962663][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.986817][ T4298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.004057][ T4298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.021999][ T4298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.143299][T12047] xt_bpf: check failed: parse error [ 249.181600][T12057] macvtap1: entered promiscuous mode [ 249.187094][T12057] hsr0: entered promiscuous mode [ 249.192884][T12057] hsr0: left promiscuous mode [ 249.236834][T12063] : entered allmulticast mode [ 249.296854][T12068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12068 comm=syz.3.2796 [ 249.310064][T12068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12068 comm=syz.3.2796 [ 249.893780][T12077] syz.1.2798 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 249.907891][T12077] CPU: 0 UID: 0 PID: 12077 Comm: syz.1.2798 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.907980][T12077] Tainted: [W]=WARN [ 249.907989][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.908006][T12077] Call Trace: [ 249.908015][T12077] [ 249.908026][T12077] __dump_stack+0x1d/0x30 [ 249.908058][T12077] dump_stack_lvl+0x95/0xd0 [ 249.908086][T12077] dump_stack+0x15/0x1b [ 249.908112][T12077] dump_header+0x80/0x240 [ 249.908214][T12077] oom_kill_process+0x295/0x350 [ 249.908242][T12077] out_of_memory+0x97d/0xb80 [ 249.908275][T12077] try_charge_memcg+0x62e/0xa10 [ 249.908342][T12077] obj_cgroup_charge_pages+0x23/0xc0 [ 249.908382][T12077] __memcg_kmem_charge_page+0x9e/0x170 [ 249.908486][T12077] __alloc_frozen_pages_noprof+0x18a/0x350 [ 249.908580][T12077] alloc_pages_mpol+0xb3/0x260 [ 249.908634][T12077] alloc_pages_noprof+0x8f/0x130 [ 249.908677][T12077] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 249.908751][T12077] __kvmalloc_node_noprof+0x471/0x680 [ 249.908782][T12077] ? ip_set_alloc+0x24/0x30 [ 249.908823][T12077] ? ip_set_alloc+0x24/0x30 [ 249.908934][T12077] ? __slab_alloc+0x25/0x50 [ 249.909008][T12077] ip_set_alloc+0x24/0x30 [ 249.909072][T12077] hash_netiface_create+0x282/0x740 [ 249.909105][T12077] ? __pfx_hash_netiface_create+0x10/0x10 [ 249.909190][T12077] ip_set_create+0x3cf/0x970 [ 249.909296][T12077] ? __nla_parse+0x40/0x60 [ 249.909323][T12077] nfnetlink_rcv_msg+0x509/0x5d0 [ 249.909388][T12077] netlink_rcv_skb+0x123/0x220 [ 249.909436][T12077] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 249.909475][T12077] nfnetlink_rcv+0x167/0x1720 [ 249.909511][T12077] ? _raw_spin_lock+0x52/0xa0 [ 249.909548][T12077] ? _raw_spin_unlock+0x9/0x30 [ 249.909636][T12077] ? inode_add_bytes+0xc0/0xe0 [ 249.909668][T12077] ? __dquot_alloc_space+0x180/0x8a0 [ 249.909698][T12077] ? arch_scale_cpu_capacity+0x15/0x70 [ 249.909727][T12077] ? sched_balance_rq+0x77e/0x1e80 [ 249.909818][T12077] ? __rcu_read_unlock+0x33/0x70 [ 249.909856][T12077] ? _raw_spin_lock_bh+0x56/0xb0 [ 249.909891][T12077] ? should_fail_ex+0x30/0x280 [ 249.909987][T12077] ? selinux_nlmsg_lookup+0x99/0x890 [ 249.910009][T12077] ? __rcu_read_unlock+0x33/0x70 [ 249.910116][T12077] ? __netlink_lookup+0x276/0x2b0 [ 249.910183][T12077] netlink_unicast+0x5c0/0x690 [ 249.910241][T12077] netlink_sendmsg+0x5c8/0x6f0 [ 249.910263][T12077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.910353][T12077] ____sys_sendmsg+0x5af/0x600 [ 249.910376][T12077] ___sys_sendmsg+0x195/0x1e0 [ 249.910409][T12077] __x64_sys_sendmsg+0xd4/0x160 [ 249.910432][T12077] x64_sys_call+0x17ba/0x3000 [ 249.910495][T12077] do_syscall_64+0xc0/0x2a0 [ 249.910526][T12077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.910567][T12077] RIP: 0033:0x7fee47a6aeb9 [ 249.910583][T12077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.910601][T12077] RSP: 002b:00007fee464bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.910639][T12077] RAX: ffffffffffffffda RBX: 00007fee47ce5fa0 RCX: 00007fee47a6aeb9 [ 249.910750][T12077] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 249.910805][T12077] RBP: 00007fee47ad8c1f R08: 0000000000000000 R09: 0000000000000000 [ 249.910819][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.910832][T12077] R13: 00007fee47ce6038 R14: 00007fee47ce5fa0 R15: 00007ffd3a1521e8 [ 249.910854][T12077] [ 249.910879][T12077] memory: usage 307200kB, limit 307200kB, failcnt 1424 [ 250.258671][T12077] memory+swap: usage 197244kB, limit 9007199254740988kB, failcnt 0 [ 250.266624][T12077] kmem: usage 126264kB, limit 9007199254740988kB, failcnt 0 [ 250.274059][T12077] Memory cgroup stats for /syz1: [ 250.275933][T12077] cache 67211264 [ 250.284697][T12077] rss 45056 [ 250.287921][T12077] shmem 0 [ 250.290876][T12077] mapped_file 0 [ 250.294365][T12077] dirty 0 [ 250.297374][T12077] writeback 0 [ 250.300749][T12077] workingset_refault_anon 294 [ 250.305504][T12077] workingset_refault_file 8450 [ 250.310283][T12077] swap 561152 [ 250.313592][T12077] swapcached 61440 [ 250.317531][T12077] pgpgin 743362 [ 250.321063][T12077] pgpgout 726938 [ 250.324631][T12077] pgfault 279532 [ 250.328235][T12077] pgmajfault 182 [ 250.331794][T12077] inactive_anon 36864 [ 250.335810][T12077] active_anon 24576 [ 250.339634][T12077] inactive_file 0 [ 250.343280][T12077] active_file 0 [ 250.346798][T12077] unevictable 67211264 [ 250.350878][T12077] hierarchical_memory_limit 314572800 [ 250.356331][T12077] hierarchical_memsw_limit 9223372036854771712 [ 250.362547][T12077] total_cache 67211264 [ 250.366854][T12077] total_rss 45056 [ 250.370505][T12077] total_shmem 0 [ 250.374014][T12077] total_mapped_file 0 [ 250.378099][T12077] total_dirty 0 [ 250.381558][T12077] total_writeback 0 [ 250.385395][T12077] total_workingset_refault_anon 294 [ 250.390689][T12077] total_workingset_refault_file 8450 [ 250.396084][T12077] total_swap 561152 [ 250.399913][T12077] total_swapcached 61440 [ 250.404179][T12077] total_pgpgin 743362 [ 250.408325][T12077] total_pgpgout 726938 [ 250.412412][T12077] total_pgfault 279532 [ 250.416617][T12077] total_pgmajfault 182 [ 250.420789][T12077] total_inactive_anon 36864 [ 250.425341][T12077] total_active_anon 24576 [ 250.429845][T12077] total_inactive_file 0 [ 250.434030][T12077] total_active_file 0 [ 250.438267][T12077] total_unevictable 67211264 [ 250.442875][T12077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2798,pid=12076,uid=0 [ 250.458119][T12077] Memory cgroup out of memory: Killed process 12076 (syz.1.2798) total-vm:96192kB, anon-rss:1336kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 250.635655][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 250.686412][T12135] hub 2-0:1.0: USB hub found [ 250.691369][T12135] hub 2-0:1.0: 8 ports detected [ 250.701859][T12135] __nla_validate_parse: 18 callbacks suppressed [ 250.701873][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2812'. [ 250.718648][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2812'. [ 250.809044][T12146] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 250.809044][T12146] The task syz.1.2814 (12146) triggered the difference, watch for misbehavior. [ 250.913788][T12153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12153 comm=syz.2.2820 [ 250.964029][T12154] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 251.258534][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 251.278173][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2827'. [ 251.470152][T12187] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 251.497638][T12187] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 251.534392][T12187] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 251.576446][T12188] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2831'. [ 251.585941][ T4974] : (slave syz_tun): Releasing backup interface [ 251.592601][T12198] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2831'. [ 251.665028][T12189] lo speed is unknown, defaulting to 1000 [ 251.780827][T12189] chnl_net:caif_netlink_parms(): no params data found [ 251.825891][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 251.838817][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 251.838851][ T29] audit: type=1400 audit(6000000170.166:5693): avc: denied { create } for pid=12231 comm="syz.1.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.838948][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'. [ 251.846773][ T29] audit: type=1400 audit(6000000170.176:5694): avc: denied { write } for pid=12231 comm="syz.1.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.917800][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.924906][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.932649][T12189] bridge_slave_0: entered allmulticast mode [ 251.939654][T12189] bridge_slave_0: entered promiscuous mode [ 251.946921][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.954066][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.961555][T12189] bridge_slave_1: entered allmulticast mode [ 251.968327][T12189] bridge_slave_1: entered promiscuous mode [ 251.992998][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.003938][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.025982][T12189] team0: Port device team_slave_0 added [ 252.032913][T12189] team0: Port device team_slave_1 added [ 252.049570][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.056681][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.082662][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.094379][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.101395][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.127372][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.157034][T12189] hsr_slave_0: entered promiscuous mode [ 252.163119][T12189] hsr_slave_1: entered promiscuous mode [ 252.175565][ T29] audit: type=1326 audit(6000000170.496:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.199141][ T29] audit: type=1326 audit(6000000170.496:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.222747][ T29] audit: type=1326 audit(6000000170.496:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.233910][T12189] debugfs: 'hsr0' already exists in 'hsr' [ 252.246344][ T29] audit: type=1326 audit(6000000170.496:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.246375][ T29] audit: type=1326 audit(6000000170.496:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.299663][T12189] Cannot create hsr debugfs directory [ 252.307398][T12255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=12255 comm=syz.1.2847 [ 252.338286][ T29] audit: type=1400 audit(6000000170.666:5700): avc: denied { accept } for pid=12251 comm="syz.5.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.384353][ T29] audit: type=1326 audit(6000000170.706:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.408109][ T29] audit: type=1326 audit(6000000170.706:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12251 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4374aeb9 code=0x7ffc0000 [ 252.434529][T12258] lo speed is unknown, defaulting to 1000 [ 252.485535][T12262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12262 comm=syz.3.2848 [ 252.529390][T12189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.539835][T12189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 252.558354][T12264] netlink: 'syz.1.2850': attribute type 13 has an invalid length. [ 252.566334][T12264] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2850'. [ 252.662505][T12266] bond5 (unregistering): Released all slaves [ 252.675579][T12264] syz_tun: refused to change device tx_queue_len [ 252.682013][T12264] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 252.713770][T12189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.724448][T12189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 252.796375][T12189] team0: Port device netdevsim1 removed [ 252.805426][T12189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.815802][T12189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 252.885382][T12286] ================================================================== [ 252.893611][T12286] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 252.900944][T12286] [ 252.903286][T12286] read-write to 0xffffc90003587e28 of 8 bytes by task 12285 on cpu 0: [ 252.911446][T12286] shmem_writeout+0x2f1/0x920 [ 252.916152][T12286] shrink_folio_list+0x1e75/0x2710 [ 252.921300][T12286] evict_folios+0x2a4e/0x35b0 [ 252.925999][T12286] try_to_shrink_lruvec+0x5f6/0x960 [ 252.931220][T12286] shrink_lruvec+0x24e/0x1bc0 [ 252.935943][T12286] shrink_node+0x68e/0x2000 [ 252.940471][T12286] do_try_to_free_pages+0x404/0xcc0 [ 252.945794][T12286] try_to_free_mem_cgroup_pages+0x222/0x470 [ 252.951720][T12286] try_charge_memcg+0x37e/0xa10 [ 252.956588][T12286] obj_cgroup_charge_pages+0x23/0xc0 [ 252.961905][T12286] __memcg_kmem_charge_page+0x9e/0x170 [ 252.967405][T12286] __alloc_frozen_pages_noprof+0x18a/0x350 [ 252.973238][T12286] alloc_pages_mpol+0xb3/0x260 [ 252.978054][T12286] alloc_pages_noprof+0x8f/0x130 [ 252.983010][T12286] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 252.988927][T12286] __kvmalloc_node_noprof+0x471/0x680 [ 252.994328][T12286] ip_set_alloc+0x24/0x30 [ 252.998710][T12286] hash_netiface_create+0x282/0x740 [ 253.003939][T12286] ip_set_create+0x3cf/0x970 [ 253.008562][T12286] nfnetlink_rcv_msg+0x509/0x5d0 [ 253.013526][T12286] netlink_rcv_skb+0x123/0x220 [ 253.018323][T12286] nfnetlink_rcv+0x167/0x1720 [ 253.023027][T12286] netlink_unicast+0x5c0/0x690 [ 253.027835][T12286] netlink_sendmsg+0x5c8/0x6f0 [ 253.032616][T12286] ____sys_sendmsg+0x5af/0x600 [ 253.037405][T12286] ___sys_sendmsg+0x195/0x1e0 [ 253.042104][T12286] __x64_sys_sendmsg+0xd4/0x160 [ 253.046972][T12286] x64_sys_call+0x17ba/0x3000 [ 253.051718][T12286] do_syscall_64+0xc0/0x2a0 [ 253.056255][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.062173][T12286] [ 253.064504][T12286] read to 0xffffc90003587e28 of 8 bytes by task 12286 on cpu 1: [ 253.072148][T12286] shmem_fallocate+0x5c0/0x920 [ 253.076946][T12286] vfs_fallocate+0x3b6/0x450 [ 253.081558][T12286] __x64_sys_fallocate+0x7a/0xd0 [ 253.086514][T12286] x64_sys_call+0x1cd4/0x3000 [ 253.091213][T12286] do_syscall_64+0xc0/0x2a0 [ 253.095745][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.101681][T12286] [ 253.104019][T12286] value changed: 0x0000000000000018 -> 0x000000000000001b [ 253.111135][T12286] [ 253.113470][T12286] Reported by Kernel Concurrency Sanitizer on: [ 253.119635][T12286] CPU: 1 UID: 0 PID: 12286 Comm: syz.1.2855 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.131031][T12286] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.134847][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 253.145005][T12286] ================================================================== [ 253.217069][T12189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.227462][T12189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 253.408897][T10738] bond0: (slave syz_tun): Releasing backup interface [ 253.742258][ T4370] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.787341][ T4370] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.837452][ T4370] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.887413][ T4370] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.976498][ T4370] bridge_slave_1: left allmulticast mode [ 253.982199][ T4370] bridge_slave_1: left promiscuous mode [ 253.987968][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.996199][ T4370] bridge_slave_0: left allmulticast mode [ 254.001908][ T4370] bridge_slave_0: left promiscuous mode [ 254.007674][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.015934][ T4370] vlan3: left promiscuous mode [ 254.020937][ T4370] bridge0: port 3(vlan3) entered disabled state [ 254.027979][ T4370] bridge_slave_1: left allmulticast mode [ 254.033618][ T4370] bridge_slave_1: left promiscuous mode [ 254.039306][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.047261][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.059443][ T4370] bridge_slave_1: left allmulticast mode [ 254.065161][ T4370] bridge_slave_1: left promiscuous mode [ 254.070962][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.078795][ T4370] bridge_slave_0: left allmulticast mode [ 254.084457][ T4370] bridge_slave_0: left promiscuous mode [ 254.090492][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.187310][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.197106][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.206664][ T4370] bond0 (unregistering): Released all slaves [ 254.227212][ T4370] gretap0 (unregistering): left promiscuous mode [ 254.717038][ T4370] bond0 (unregistering): left promiscuous mode [ 254.723418][ T4370] bond_slave_0: left promiscuous mode [ 254.729018][ T4370] bond_slave_1: left promiscuous mode [ 254.736802][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.746083][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.755080][ T4370] bond0 (unregistering): Released all slaves [ 254.762712][ T4370] bond1 (unregistering): Released all slaves [ 254.771423][ T4370] bond2 (unregistering): Released all slaves [ 254.782884][ T4370] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 254.808538][ T4370] team0: Port device geneve1 removed [ 255.277564][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.287782][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.297412][ T4370] bond0 (unregistering): Released all slaves [ 255.305552][ T4370] bond1 (unregistering): Released all slaves [ 255.314084][ T4370] bond2 (unregistering): Released all slaves [ 255.323002][ T4370] bond3 (unregistering): Released all slaves [ 255.331656][ T4370] bond4 (unregistering): Released all slaves [ 255.373948][ T4370] tipc: Disabling bearer [ 255.379298][ T4370] tipc: Left network mode [ 255.453106][ T4370] hsr_slave_0: left promiscuous mode [ 255.460016][ T4370] hsr_slave_1: left promiscuous mode [ 255.465872][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.473508][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.483459][ T4370] hsr_slave_0: left promiscuous mode [ 255.489721][ T4370] hsr_slave_1: left promiscuous mode [ 255.495408][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.503759][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.513368][ T4370] hsr_slave_0: left promiscuous mode [ 255.519129][ T4370] hsr_slave_1: left promiscuous mode [ 255.529217][ T4370] veth1_macvtap: left promiscuous mode [ 255.534699][ T4370] veth0_macvtap: left promiscuous mode [ 255.540330][ T4370] veth1_vlan: left promiscuous mode [ 255.545735][ T4370] veth0_vlan: left promiscuous mode [ 255.617420][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 255.627357][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 255.693319][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 255.703031][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 255.710803][ T4298] smc: removing ib device !yz! [ 255.770359][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 255.780460][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 256.380334][ T4370] IPVS: stop unused estimator thread 0... [ 256.489267][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.558668][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.618107][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.678833][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.748925][ T52] bridge_slave_1: left allmulticast mode [ 256.754613][ T52] bridge_slave_1: left promiscuous mode [ 256.760365][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.768530][ T52] bridge_slave_0: left allmulticast mode [ 256.774183][ T52] bridge_slave_0: left promiscuous mode [ 256.779999][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.857945][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.868271][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.878237][ T52] bond0 (unregistering): Released all slaves [ 256.920354][ T52] hsr_slave_0: left promiscuous mode [ 256.926537][ T52] hsr_slave_1: left promiscuous mode [ 256.933838][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.941342][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.949801][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.957375][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.969380][ T52] veth1_macvtap: left promiscuous mode [ 256.974900][ T52] veth0_macvtap: left promiscuous mode [ 256.980619][ T52] veth1_vlan: left promiscuous mode [ 256.985940][ T52] veth0_vlan: left promiscuous mode [ 257.064326][ T52] team0 (unregistering): Port device team_slave_1 removed [ 257.073957][ T52] team0 (unregistering): Port device team_slave_0 removed