last executing test programs: 10.442391168s ago: executing program 2 (id=9876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x11d938) 10.442211928s ago: executing program 2 (id=9877): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/27, 0x1b}, 0xffffff00}], 0x1, 0x40010003, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 10.330316099s ago: executing program 2 (id=9882): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 10.328260629s ago: executing program 2 (id=9883): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1c5008, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x172) 10.314353771s ago: executing program 2 (id=9884): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 10.147727027s ago: executing program 2 (id=9885): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) 10.128544379s ago: executing program 32 (id=9885): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) 2.24892726s ago: executing program 0 (id=10184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 1.42782126s ago: executing program 0 (id=10214): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f00011400ef220e0e00ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b03599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1, 0x0, 0x0, 0x10}, 0x0) 1.42718023s ago: executing program 5 (id=10216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 1.401167832s ago: executing program 5 (id=10217): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000088f7ffffffffffffffffffffffff88a830008100250008004500002a00682000fc2f"], 0x44) 1.400882923s ago: executing program 0 (id=10218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = timerfd_create(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, 0x0, 0x0) 1.306002222s ago: executing program 0 (id=10220): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x61c9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2, 0x208fc000}, {0xa, 0x0, 0xb, @loopback}, 0xffffffffffffffff, 0x4}}, 0x48) acct(0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000000000000030000000000000f00"/28], 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r4, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a00), 0x0, 0x72, &(0x7f0000002a40), 0x0, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x800c9, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0xe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0800000000000000000000000000e9bb000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000500"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0xf, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000940)=[{0x5, 0x1, 0x5, 0x5}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="edff00000bd6e2840000000018f6b54a7dae4b99cd601d2340adf07b50dd0d89b7f04e67b307afa29058432880a762634a7774dbbe9d0a73b70bb0ae29dc94d235bced7913f99835579b48aedb9fe2fcad90", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000ff0300000000000001000000cc6801000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000183100000100"/80], &(0x7f0000000540)='syzkaller\x00', 0x0, 0xf9, &(0x7f0000000880)=""/249, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x9, 0xd}, 0x10, r5, r3, 0x3, &(0x7f0000000740)=[r1], &(0x7f0000000780)=[{0x3, 0x2, 0xf}, {0x0, 0x1, 0xc, 0x5}, {0x4, 0x2, 0xc, 0x8}], 0x10, 0xbf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) memfd_create(&(0x7f0000000500)='!\x00', 0x6) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e22], 0x0, 0x8, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @dev, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'tunl0\x00', {}, {}, 0x67, 0x0, 0x23}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x3, 0xe}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0xc, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x10, 0x1e, 0x105, &(0x7f00000000c0)}) 1.238910258s ago: executing program 5 (id=10224): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000500)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000009000000000000000600000d000000000600000002000000040600000000000000000000000000000200000000000000020000000200000003000000000000000000000000000006040000000a00000000000002030000000f00000000000007000000000f000000000000060400000000305f5f2ea1302e00091dea6cbe474c7b97ff8072239c3a86ca1db18e1c18de034b0f5d718c2b49029969f37f0eff495600e1ef3b7b6073d4799005a576a8b1f2c38779"], &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000ff00000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0xd4, &(0x7f00000002c0)={0x40000, 0x80002, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000f00)={0x0, 0x10000e, 0x20000}, 0x20) io_uring_setup(0x5b55, &(0x7f0000000040)={0x0, 0xdf49, 0x40, 0x0, 0x2ae}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510000006000000180000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x18}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 1.085141133s ago: executing program 0 (id=10225): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/locks\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendfile(r0, r1, 0x0, 0xfd85) 833.417778ms ago: executing program 5 (id=10235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x44801) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 815.88848ms ago: executing program 5 (id=10236): mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x40c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0700000004000000005a98e20a31286888c801000006000000280000004a6fde244f5daf18fec0a5424f137ef65fd7f065ec2d0317d8e127dbef4be553e043d352a40f3a5d27b6557d5545f356519436c2aba14faad399bdd19eb344b9b99c3d916636de49f4ba45f5bc5706f9504348f42fe042fc10889718f7b5fa96ba05faa1d24ee63a6dcf2ac4c368eadc95e1af28f867f566e0bce792f4f80a635c4de88b8929576674b418569089eaa83d7b4d8a3dd45835d597abe28d59e26318eccea80d156dd4e4e3cbf855fea389663cbe347b0b00000049281d9b1044", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001b00)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x20000004007b1}}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe9}}, {@abort}, {@grpjquota_path={'grpjquota', 0x3d, './file1/file0'}}, {@noquota}, {@stripe={'stripe', 0x3d, 0x154}}], [{@smackfsfloor}, {@obj_user}, {@flag='sync'}, {@smackfsfloor}]}, 0x1, 0x571, &(0x7f00000022c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0f0f29bd7000fedbdf2519"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r5) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41091aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e7890200000065ccd19545b778fb470ef7c7247c631882fe3cee1ad627ad729a6854be4caee94165189cececc6ed604084f0de672a6143348dff41ef68fb47af35228b6eeb54e1afe8564aa6b18234add638dfecef8df0f90b274de0edd802c6295f55af1965e8904d0bbe9083e2264eb82d0704440bd01c8ee32d09636bef65fa39451137ba", 0xf1}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000002840)="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", 0xa93}], 0x3}, 0x20000044) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f0000000500)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x29}, 0x1c, 0x0}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r9, 0x200, 0x8002}, 0xfd6f) 733.288428ms ago: executing program 1 (id=10242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) 706.65394ms ago: executing program 1 (id=10243): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 646.387307ms ago: executing program 1 (id=10245): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c2, &(0x7f00000015c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 630.333138ms ago: executing program 1 (id=10246): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000500)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000009000000000000000600000d000000000600000002000000040600000000000000000000000000000200000000000000020000000200000003000000000000000000000000000006040000000a00000000000002030000000f00000000000007000000000f000000000000060400000000305f5f2ea1302e00091dea6cbe474c7b97ff8072239c3a86ca1db18e1c18de034b0f5d718c2b49029969f37f0eff495600e1ef3b7b6073d4799005a576a8b1f2c38779"], &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000ff00000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0xd4, &(0x7f00000002c0)={0x40000, 0x80002, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000f00)={0x0, 0x10000e, 0x20000}, 0x20) io_uring_setup(0x5b55, &(0x7f0000000040)={0x0, 0xdf49, 0x40, 0x0, 0x2ae}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510000006000000180000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x18}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 510.20745ms ago: executing program 4 (id=10250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x85d2e1caca603495, 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5000000000800030006010000418e01400004fcff", 0x58}], 0x1) 462.379465ms ago: executing program 4 (id=10251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0x6a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 406.32253ms ago: executing program 1 (id=10253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) 401.12831ms ago: executing program 4 (id=10254): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x8000}], 0x1, 0x40002002, 0x0) 343.683036ms ago: executing program 4 (id=10256): unshare(0x8000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 343.372036ms ago: executing program 4 (id=10258): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x14542, &(0x7f0000000b40)=ANY=[], 0x0, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x8500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 343.084906ms ago: executing program 1 (id=10259): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 268.141254ms ago: executing program 3 (id=10260): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) getdents64(r0, &(0x7f00000001c0)=""/90, 0x5a) 267.882863ms ago: executing program 3 (id=10261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$rfkill(r3, &(0x7f0000000040), 0x8) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) 141.979176ms ago: executing program 3 (id=10267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 0s ago: executing program 5 (id=10268): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) kernel console output (not intermixed with test programs): syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 457.901166][T18868] tmpfs: Bad value for 'mpol' [ 458.116939][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6752'. [ 458.308892][T18990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.317824][T18990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.798653][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6764'. [ 458.841011][T19010] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6766'. [ 458.896132][T19022] netlink: 'syz.0.6763': attribute type 13 has an invalid length. [ 458.963104][T10807] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.005475][T10807] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.036418][T10807] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.065188][T10807] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.216062][T19154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.239468][T19154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.757526][T19298] tmpfs: Bad value for 'size' [ 459.758586][T19285] x_tables: ip_tables: ah match: only valid for protocol 51 [ 459.905185][T19402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.922789][T19402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.397154][T19453] netlink: 'syz.1.6820': attribute type 39 has an invalid length. [ 460.845387][T19603] hub 2-0:1.0: USB hub found [ 460.850382][T19603] hub 2-0:1.0: 8 ports detected [ 461.747897][T19977] netlink: 'syz.4.6867': attribute type 1 has an invalid length. [ 461.803612][T19979] __nla_validate_parse: 9 callbacks suppressed [ 461.803646][T19979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6869'. [ 461.852294][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6872'. [ 462.038350][T20019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6884'. [ 462.160891][T20082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6890'. [ 462.411074][ T29] kauditd_printk_skb: 928 callbacks suppressed [ 462.411090][ T29] audit: type=1326 audit(483.149:94013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20079 comm="syz.0.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729f80efc9 code=0x7ffc0000 [ 462.440312][ T29] audit: type=1326 audit(483.149:94014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20079 comm="syz.0.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729f80efc9 code=0x7ffc0000 [ 462.499338][ T29] audit: type=1326 audit(483.212:94015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.522519][ T29] audit: type=1326 audit(483.212:94016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.545598][ T29] audit: type=1326 audit(483.222:94017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.568587][ T29] audit: type=1326 audit(483.222:94018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.591578][ T29] audit: type=1326 audit(483.222:94019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.614638][ T29] audit: type=1326 audit(483.222:94020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.638210][ T29] audit: type=1326 audit(483.275:94021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.661195][ T29] audit: type=1326 audit(483.275:94022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.4.6903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 462.793458][T20199] x_tables: ip_tables: ah match: only valid for protocol 51 [ 463.014831][T20309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6919'. [ 463.227211][T20343] x_tables: ip_tables: ah match: only valid for protocol 51 [ 463.448275][T20538] x_tables: ip_tables: ah match: only valid for protocol 51 [ 463.519052][T20570] netlink: 'syz.3.6942': attribute type 1 has an invalid length. [ 463.588324][T20579] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 463.704299][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6950'. [ 464.136736][T20644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.146655][T20644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.575877][T20704] hub 2-0:1.0: USB hub found [ 464.581004][T20704] hub 2-0:1.0: 8 ports detected [ 464.626020][T20704] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6994'. [ 464.666129][T20710] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6996'. [ 464.733024][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7004'. [ 464.742364][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7004'. [ 464.770245][T20735] x_tables: ip_tables: ah match: only valid for protocol 51 [ 464.838356][T20748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.852593][T20748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.919675][T20763] 9pnet: Could not find request transport: r [ 465.027411][T20784] netlink: 'syz.4.7027': attribute type 1 has an invalid length. [ 465.458704][T20833] x_tables: ip_tables: ah match: only valid for protocol 51 [ 465.538752][T20937] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.966210][T21079] x_tables: ip_tables: ah match: only valid for protocol 51 [ 465.993186][T21085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.001755][T21085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.412507][T21127] netlink: 'syz.4.7087': attribute type 2 has an invalid length. [ 466.819063][T21161] netlink: 'syz.0.7103': attribute type 2 has an invalid length. [ 467.188855][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 467.188948][ T29] audit: type=1326 audit(488.177:95022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.222327][ T29] audit: type=1326 audit(488.209:95023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.245237][ T29] audit: type=1326 audit(488.209:95024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.268309][ T29] audit: type=1326 audit(488.209:95025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.291394][ T29] audit: type=1326 audit(488.209:95026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.314394][ T29] audit: type=1326 audit(488.209:95027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.337344][ T29] audit: type=1326 audit(488.209:95028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.360360][ T29] audit: type=1326 audit(488.209:95029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.383358][ T29] audit: type=1326 audit(488.209:95030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.406399][ T29] audit: type=1326 audit(488.209:95031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.4.7119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 467.464570][T21193] x_tables: ip_tables: ah match: only valid for protocol 51 [ 467.531223][T21208] tipc: Enabling of bearer rejected, failed to enable media [ 467.628156][T21228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.631576][T21219] __nla_validate_parse: 7 callbacks suppressed [ 467.631590][T21219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7128'. [ 467.637273][T21228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.785410][T21242] 9pnet_fd: Insufficient options for proto=fd [ 467.838467][T21252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7144'. [ 467.919438][T21270] x_tables: ip_tables: ah match: only valid for protocol 51 [ 467.956418][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7152'. [ 468.273484][T21419] tipc: Enabling of bearer rejected, failed to enable media [ 468.516130][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7178'. [ 468.581797][T21552] smc: net device bond0 applied user defined pnetid SYZ2 [ 468.618755][T21556] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7184'. [ 468.662469][T21556] hub 2-0:1.0: USB hub found [ 468.668495][T21556] hub 2-0:1.0: 8 ports detected [ 468.732979][T21556] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7184'. [ 468.891345][T21789] vhci_hcd: invalid port number 236 [ 469.053344][T21803] netlink: 324 bytes leftover after parsing attributes in process `syz.4.7201'. [ 469.117680][T21803] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7201'. [ 469.376175][T21937] 9pnet_fd: Insufficient options for proto=fd [ 469.538345][T21956] netlink: 324 bytes leftover after parsing attributes in process `syz.4.7219'. [ 469.606289][T21956] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7219'. [ 469.830625][T22160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.855220][T22160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.418006][T22502] tipc: Started in network mode [ 471.422912][T22502] tipc: Node identity ac141441, cluster identity 4711 [ 471.452664][T22502] tipc: Enabled bearer , priority 10 [ 471.501102][T22614] xt_nat: multiple ranges no longer supported [ 471.893719][T22749] hub 2-0:1.0: USB hub found [ 471.899323][T22749] hub 2-0:1.0: 8 ports detected [ 471.960636][ T29] kauditd_printk_skb: 1003 callbacks suppressed [ 471.960651][ T29] audit: type=1326 audit(493.174:96035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 471.991656][ T29] audit: type=1326 audit(493.216:96036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.014662][ T29] audit: type=1326 audit(493.216:96037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.037682][ T29] audit: type=1326 audit(493.216:96038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.070686][ T29] audit: type=1326 audit(493.290:96039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.093623][ T29] audit: type=1326 audit(493.290:96040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.116688][ T29] audit: type=1326 audit(493.290:96041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.157981][ T29] audit: type=1326 audit(493.374:96042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.181174][ T29] audit: type=1326 audit(493.384:96043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.204141][ T29] audit: type=1326 audit(493.384:96044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz.3.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 472.327749][T22873] x_tables: ip_tables: ah match: only valid for protocol 51 [ 472.512970][ T36] tipc: Node number set to 2886997057 [ 472.593935][T23012] x_tables: ip_tables: ah match: only valid for protocol 51 [ 473.043693][T23165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.061796][T23165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.158673][T23281] __nla_validate_parse: 5 callbacks suppressed [ 473.158688][T23281] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7351'. [ 473.339318][T23305] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7359'. [ 473.400345][T23305] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7359'. [ 473.502893][T23414] netlink: 'syz.2.7362': attribute type 21 has an invalid length. [ 473.541419][T23419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7364'. [ 473.647443][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7369'. [ 473.656530][T23432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7369'. [ 473.680770][T23436] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7371'. [ 473.765304][T23436] hub 2-0:1.0: USB hub found [ 473.770432][T23436] hub 2-0:1.0: 8 ports detected [ 473.800463][T23436] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7371'. [ 473.834548][T23543] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7373'. [ 473.897387][T23543] hub 2-0:1.0: USB hub found [ 473.907321][T23543] hub 2-0:1.0: 8 ports detected [ 473.964510][T23543] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7373'. [ 474.036066][T23663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.053465][T23663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.152427][T23678] x_tables: ip_tables: ah match: only valid for protocol 51 [ 474.408731][T23814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.418299][T23814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.726205][T23839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.735530][T23839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.802543][T23845] tipc: Enabling of bearer rejected, failed to enable media [ 474.836491][T23849] 9pnet_rdma: rdma_create_trans (23849): problem binding to privport: 13 [ 475.111688][T23886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.120622][T23886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.140222][T23890] x_tables: ip_tables: ah match: only valid for protocol 51 [ 475.432067][T23925] x_tables: ip_tables: ah match: only valid for protocol 51 [ 475.495698][T24037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.504501][T24037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.500319][T24132] hub 2-0:1.0: USB hub found [ 476.509106][T24132] hub 2-0:1.0: 8 ports detected [ 476.788786][ T29] kauditd_printk_skb: 770 callbacks suppressed [ 476.788799][ T29] audit: type=1326 audit(498.245:96815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.3.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 476.818341][ T29] audit: type=1326 audit(498.245:96816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.3.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 476.866043][ T29] audit: type=1326 audit(498.329:96817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 476.889076][ T29] audit: type=1326 audit(498.329:96818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 476.917680][ T29] audit: type=1326 audit(498.381:96819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 476.940700][ T29] audit: type=1326 audit(498.381:96820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 476.963746][ T29] audit: type=1326 audit(498.381:96821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 476.986931][ T29] audit: type=1326 audit(498.381:96822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 477.010235][ T29] audit: type=1326 audit(498.381:96823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 477.033271][ T29] audit: type=1326 audit(498.381:96824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24164 comm="syz.4.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 477.463162][T24327] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 477.785130][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.798623][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.935560][T24463] ------------[ cut here ]------------ [ 477.941090][T24463] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 477.965829][T24463] WARNING: CPU: 0 PID: 24463 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 477.976482][T24463] Modules linked in: [ 477.980486][T24463] CPU: 0 UID: 0 PID: 24463 Comm: syz.4.7542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 477.990462][T24463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.000615][T24463] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 478.007091][T24463] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 32 f9 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 478.026820][T24463] RSP: 0018:ffffc900105ef408 EFLAGS: 00010282 [ 478.032992][T24463] RAX: 5dc520ffd3d2d900 RBX: ffff888119a53a70 RCX: 0000000000080000 [ 478.041027][T24463] RDX: ffffc90003e37000 RSI: 0000000000005971 RDI: 0000000000005972 [ 478.049122][T24463] RBP: 00000000ffffdfcc R08: 0001c900105ef257 R09: 0000000000000000 [ 478.057135][T24463] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119a53a30 [ 478.065144][T24463] R13: ffff88810bf78000 R14: ffff88810bf78000 R15: ffff888119a53a68 [ 478.073135][T24463] FS: 00007f6999d5f6c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 478.082088][T24463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.088782][T24463] CR2: 00000000ffffffff CR3: 000000016ca7a000 CR4: 00000000003506f0 [ 478.096829][T24463] DR0: 0000000000000000 DR1: 0000000000000006 DR2: 0000000000000000 [ 478.104819][T24463] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600 [ 478.112785][T24463] Call Trace: [ 478.116146][T24463] [ 478.119078][T24463] reg_set_min_max+0x1c1/0x260 [ 478.123924][T24463] check_cond_jmp_op+0x1370/0x19e0 [ 478.129091][T24463] do_check+0x3363/0x8460 [ 478.133467][T24463] do_check_common+0xc5e/0x12b0 [ 478.138457][T24463] bpf_check+0xaaae/0xd9d0 [ 478.142969][T24463] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 478.149007][T24463] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 478.155183][T24463] ? _find_next_zero_bit+0x29/0xa0 [ 478.160363][T24463] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 478.166576][T24463] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 478.172715][T24463] ? css_rstat_updated+0xb7/0x240 [ 478.177750][T24463] ? __rcu_read_unlock+0x4f/0x70 [ 478.182735][T24463] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 478.188552][T24463] ? bpf_prog_alloc+0x5b/0x150 [ 478.193392][T24463] ? pcpu_alloc_noprof+0xd29/0x1250 [ 478.198637][T24463] ? should_fail_ex+0x30/0x280 [ 478.203457][T24463] ? should_failslab+0x8c/0xb0 [ 478.208279][T24463] ? __kmalloc_noprof+0x2a2/0x570 [ 478.213309][T24463] ? security_bpf_prog_load+0x60/0x140 [ 478.218846][T24463] ? selinux_bpf_prog_load+0xad/0xd0 [ 478.224127][T24463] ? security_bpf_prog_load+0x9e/0x140 [ 478.229596][T24463] bpf_prog_load+0xf6e/0x1100 [ 478.234424][T24463] ? security_bpf+0x2b/0x90 [ 478.239067][T24463] __sys_bpf+0x469/0x7c0 [ 478.243336][T24463] __x64_sys_bpf+0x41/0x50 [ 478.247803][T24463] x64_sys_call+0x2aee/0x3000 [ 478.252488][T24463] do_syscall_64+0xd2/0x200 [ 478.257017][T24463] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 478.263143][T24463] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 478.268913][T24463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.275115][T24463] RIP: 0033:0x7f699b2fefc9 [ 478.279661][T24463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.299437][T24463] RSP: 002b:00007f6999d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.307926][T24463] RAX: ffffffffffffffda RBX: 00007f699b555fa0 RCX: 00007f699b2fefc9 [ 478.315936][T24463] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 478.323948][T24463] RBP: 00007f699b381f91 R08: 0000000000000000 R09: 0000000000000000 [ 478.331954][T24463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.339953][T24463] R13: 00007f699b556038 R14: 00007f699b555fa0 R15: 00007fff6884a788 [ 478.348004][T24463] [ 478.351074][T24463] ---[ end trace 0000000000000000 ]--- [ 478.522734][T24485] 9p: Unknown access argument ‘SWrRHÜ„;: -22 [ 478.694249][T24508] __nla_validate_parse: 12 callbacks suppressed [ 478.694266][T24508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7561'. [ 478.927457][T24640] x_tables: ip_tables: ah match: only valid for protocol 51 [ 479.655315][T24716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7606'. [ 479.748150][T24730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7613'. [ 479.773231][T24736] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7616'. [ 479.825733][T24736] hub 2-0:1.0: USB hub found [ 479.835528][T24736] hub 2-0:1.0: 8 ports detected [ 479.902189][T24736] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7616'. [ 479.955160][T24850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24850 comm=syz.1.7620 [ 480.240734][T24979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7630'. [ 480.665309][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7654'. [ 480.665403][T25124] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7653'. [ 480.674397][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7654'. [ 480.683408][T25124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7653'. [ 481.609872][ T29] kauditd_printk_skb: 1123 callbacks suppressed [ 481.609887][ T29] audit: type=1326 audit(503.305:97948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 481.639322][ T29] audit: type=1326 audit(503.305:97949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 481.683595][ T29] audit: type=1326 audit(503.389:97950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.706862][ T29] audit: type=1326 audit(503.389:97951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.729944][ T29] audit: type=1326 audit(503.389:97952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.752923][ T29] audit: type=1326 audit(503.389:97953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.775954][ T29] audit: type=1326 audit(503.389:97954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.798961][ T29] audit: type=1326 audit(503.389:97955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.822000][ T29] audit: type=1326 audit(503.389:97956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 481.845006][ T29] audit: type=1326 audit(503.389:97957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.2.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f056a42d810 code=0x7ffc0000 [ 481.871267][T25346] netlink: 'syz.1.7701': attribute type 10 has an invalid length. [ 481.879442][T25346] netlink: 'syz.1.7701': attribute type 10 has an invalid length. [ 482.095988][T25482] netlink: 'syz.2.7717': attribute type 3 has an invalid length. [ 482.437840][T25627] 9pnet_fd: Insufficient options for proto=fd [ 482.559886][T25638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.571424][T25638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.194738][T25685] netlink: 'syz.2.7759': attribute type 142 has an invalid length. [ 483.275350][T25699] rtc_cmos 00:00: Alarms can be up to one day in the future [ 483.504481][T25735] __nla_validate_parse: 16 callbacks suppressed [ 483.504498][T25735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7782'. [ 483.603330][T25741] wireguard2: entered promiscuous mode [ 483.608847][T25741] wireguard2: entered allmulticast mode [ 483.991994][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7801'. [ 484.020140][T25876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7802'. [ 484.089881][T25886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.098836][T25886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.286924][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7808'. [ 484.524909][T25917] tipc: Enabling of bearer rejected, failed to enable media [ 484.734431][T25945] netlink: 'syz.1.7832': attribute type 195 has an invalid length. [ 485.037069][T26057] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7837'. [ 485.092024][T26057] hub 2-0:1.0: USB hub found [ 485.111467][T26057] hub 2-0:1.0: 8 ports detected [ 485.195085][T26057] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7837'. [ 485.220311][T26061] 9pnet_fd: Insufficient options for proto=fd [ 485.909377][T26110] tipc: Invalid UDP bearer configuration [ 485.909407][T26110] tipc: Enabling of bearer rejected, failed to enable media [ 485.947233][T26112] 9pnet_fd: Insufficient options for proto=fd [ 485.986054][T26116] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 486.052095][T26124] ip6t_rpfilter: unknown options [ 486.110234][T26129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.119151][T26129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.186870][T26133] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.7867' sets config #1 [ 486.282896][T26151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7876'. [ 486.291928][T26151] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7876'. [ 486.300929][T26151] netlink: 'syz.3.7876': attribute type 5 has an invalid length. [ 486.308989][T26151] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7876'. [ 486.334145][T26154] x_tables: ip_tables: ah match: only valid for protocol 51 [ 486.382602][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 486.382694][ T29] audit: type=1326 audit(508.323:98456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.414601][T26168] deleting an unspecified loop device is not supported. [ 486.429675][ T29] audit: type=1326 audit(508.323:98457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.452879][ T29] audit: type=1326 audit(508.323:98458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.476253][ T29] audit: type=1326 audit(508.323:98459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.499351][ T29] audit: type=1326 audit(508.323:98460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.522486][ T29] audit: type=1326 audit(508.323:98461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.545442][ T29] audit: type=1326 audit(508.323:98462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.561079][T26172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7880'. [ 486.568699][ T29] audit: type=1326 audit(508.323:98463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.600286][ T29] audit: type=1326 audit(508.323:98464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 486.623452][ T29] audit: type=1326 audit(508.323:98465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26159 comm="syz.3.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f214655da7f code=0x7ffc0000 [ 486.699424][T26179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.708192][T26179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.774296][T26185] 9pnet_fd: Insufficient options for proto=fd [ 486.804907][T26192] 9pnet_fd: Insufficient options for proto=fd [ 487.311329][T26237] hub 2-0:1.0: USB hub found [ 487.316379][T26237] hub 2-0:1.0: 8 ports detected [ 487.378411][T26244] IPVS: Unknown mcast interface: vcan0 [ 487.455736][T26254] netlink: 'syz.4.7918': attribute type 3 has an invalid length. [ 487.655146][T26360] x_tables: ip_tables: ah match: only valid for protocol 51 [ 487.893398][T26489] SELinux: security policydb version 18 (MLS) not backwards compatible [ 487.907640][T26489] SELinux: failed to load policy [ 488.072377][T26514] x_tables: ip_tables: ah match: only valid for protocol 51 [ 488.424560][T26646] __nla_validate_parse: 10 callbacks suppressed [ 488.424574][T26646] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7953'. [ 488.561737][T26646] hub 2-0:1.0: USB hub found [ 488.572306][T26646] hub 2-0:1.0: 8 ports detected [ 488.579715][T26660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7957'. [ 488.651278][T26646] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7953'. [ 488.743290][T26668] x_tables: ip_tables: ah match: only valid for protocol 51 [ 489.051272][T26793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7962'. [ 489.338437][T26910] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7971'. [ 489.451086][T26910] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7971'. [ 489.599705][T27040] x_tables: ip_tables: ah match: only valid for protocol 51 [ 490.064466][T27375] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 490.093185][T27381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.102547][T27381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.175856][T27388] x_tables: ip_tables: ah match: only valid for protocol 51 [ 490.264850][T27385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8005'. [ 490.416363][T27514] pim6reg: entered allmulticast mode [ 490.637908][T27633] 9pnet: Could not find request transport: fd0x000000000000000a [ 490.703749][T27648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.712782][T27648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.966861][T27670] x_tables: ip_tables: ah match: only valid for protocol 51 [ 491.167032][ T29] kauditd_printk_skb: 1092 callbacks suppressed [ 491.167046][ T29] audit: type=1326 audit(519.347:99558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27790 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729f80efc9 code=0x7ffc0000 [ 491.197446][ T29] audit: type=1326 audit(519.347:99559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.220552][ T29] audit: type=1326 audit(519.347:99560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.243573][ T29] audit: type=1326 audit(519.347:99561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.266615][ T29] audit: type=1326 audit(519.347:99562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.289780][ T29] audit: type=1326 audit(519.347:99563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.312643][ T29] audit: type=1326 audit(519.357:99564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.335639][ T29] audit: type=1326 audit(519.357:99565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.338849][T27803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27803 comm=syz.1.8052 [ 491.358614][ T29] audit: type=1326 audit(519.357:99566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.358670][ T29] audit: type=1326 audit(519.357:99567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27792 comm="syz.4.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 491.444690][T27806] netlink: 324 bytes leftover after parsing attributes in process `syz.3.8054'. [ 491.470501][T27810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8050'. [ 491.486754][T27816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8049'. [ 491.736137][T27823] x_tables: ip_tables: ah match: only valid for protocol 51 [ 492.004275][T27946] hub 2-0:1.0: USB hub found [ 492.016868][T27946] hub 2-0:1.0: 8 ports detected [ 492.022907][T27961] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 492.029485][T27961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.037097][T27961] vhci_hcd vhci_hcd.0: Device attached [ 492.062034][T27961] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 492.068597][T27961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 492.076348][T27961] vhci_hcd vhci_hcd.0: Device attached [ 492.082681][T27962] vhci_hcd: connection closed [ 492.082915][T10746] vhci_hcd: stop threads [ 492.084289][T27969] vhci_hcd: connection closed [ 492.087586][T10746] vhci_hcd: release socket [ 492.101063][T10746] vhci_hcd: disconnect device [ 492.105936][T10746] vhci_hcd: stop threads [ 492.110282][T10746] vhci_hcd: release socket [ 492.114737][T10746] vhci_hcd: disconnect device [ 492.158052][T27976] x_tables: ip_tables: ah match: only valid for protocol 51 [ 492.989902][T28353] tipc: Enabling of bearer rejected, failed to enable media [ 492.999376][T28355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.008637][T28355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.237511][T28376] __nla_validate_parse: 10 callbacks suppressed [ 493.237565][T28376] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8120'. [ 493.364236][T28398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8124'. [ 494.094133][T28763] x_tables: ip_tables: ah match: only valid for protocol 51 [ 494.231458][T28792] SELinux: syz.1.8169 (28792) set checkreqprot to 1. This is no longer supported. [ 494.310663][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8174'. [ 494.407458][T28916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8171'. [ 494.668626][T28918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8179'. [ 494.945088][T28934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8185'. [ 495.019530][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 495.030567][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 495.030617][ T3313] Tainted: [W]=WARN [ 495.030623][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.030634][ T3313] Call Trace: [ 495.030640][ T3313] [ 495.030647][ T3313] __dump_stack+0x1d/0x30 [ 495.030668][ T3313] dump_stack_lvl+0xe8/0x140 [ 495.030685][ T3313] dump_stack+0x15/0x1b [ 495.030699][ T3313] dump_header+0x81/0x220 [ 495.030772][ T3313] oom_kill_process+0x342/0x400 [ 495.030799][ T3313] out_of_memory+0x979/0xb80 [ 495.030873][ T3313] try_charge_memcg+0x610/0xa10 [ 495.030920][ T3313] charge_memcg+0x51/0xc0 [ 495.030939][ T3313] __mem_cgroup_charge+0x28/0xb0 [ 495.031035][ T3313] filemap_add_folio+0x111/0x360 [ 495.031083][ T3313] __filemap_get_folio+0x31e/0x650 [ 495.031150][ T3313] filemap_fault+0x447/0xb60 [ 495.031171][ T3313] __do_fault+0xbc/0x200 [ 495.031194][ T3313] handle_mm_fault+0xf78/0x2be0 [ 495.031220][ T3313] ? vma_start_read+0x141/0x1f0 [ 495.031276][ T3313] do_user_addr_fault+0x630/0x1080 [ 495.031297][ T3313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 495.031355][ T3313] exc_page_fault+0x62/0xa0 [ 495.031389][ T3313] asm_exc_page_fault+0x26/0x30 [ 495.031409][ T3313] RIP: 0033:0x7f52ab2a5ed4 [ 495.031426][ T3313] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f7 ea 00 48 01 d1 [ 495.031443][ T3313] RSP: 002b:00007ffface69ea0 EFLAGS: 00010206 [ 495.031460][ T3313] RAX: 0000001b33924000 RBX: 0000000000001881 RCX: 000000000007e388 [ 495.031513][ T3313] RDX: 0000000005367c32 RSI: 00007ffface69f30 RDI: 0000000000000001 [ 495.031527][ T3313] RBP: 00007ffface69edc R08: 0000000013e2a828 R09: 7fffffffffffffff [ 495.031540][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 495.031550][ T3313] R13: 00000000000927c0 R14: 000000000007e29f R15: 00007ffface69f30 [ 495.031567][ T3313] [ 495.225477][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 800 [ 495.232262][ T3313] memory+swap: usage 371120kB, limit 9007199254740988kB, failcnt 0 [ 495.240152][ T3313] kmem: usage 298592kB, limit 9007199254740988kB, failcnt 0 [ 495.247463][ T3313] Memory cgroup stats for /syz1: [ 495.248044][ T3313] cache 2523136 [ 495.256564][ T3313] rss 4440064 [ 495.259883][ T3313] shmem 2523136 [ 495.263540][ T3313] mapped_file 0 [ 495.266985][ T3313] dirty 0 [ 495.270162][ T3313] writeback 0 [ 495.273445][ T3313] workingset_refault_anon 1919 [ 495.278344][ T3313] workingset_refault_file 2950 [ 495.283277][ T3313] swap 65454080 [ 495.286738][ T3313] swapcached 1847296 [ 495.290774][ T3313] pgpgin 927782 [ 495.294291][ T3313] pgpgout 925630 [ 495.297821][ T3313] pgfault 894722 [ 495.301606][ T3313] pgmajfault 213 [ 495.305139][ T3313] inactive_anon 5185536 [ 495.309525][ T3313] active_anon 3624960 [ 495.313546][ T3313] inactive_file 4096 [ 495.317658][ T3313] active_file 0 [ 495.321107][ T3313] unevictable 0 [ 495.324559][ T3313] hierarchical_memory_limit 314572800 [ 495.330167][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 495.336496][ T3313] total_cache 2523136 [ 495.340473][ T3313] total_rss 4440064 [ 495.344266][ T3313] total_shmem 2523136 [ 495.348433][ T3313] total_mapped_file 0 [ 495.352430][ T3313] total_dirty 0 [ 495.356039][ T3313] total_writeback 0 [ 495.359833][ T3313] total_workingset_refault_anon 1919 [ 495.365380][ T3313] total_workingset_refault_file 2950 [ 495.370758][ T3313] total_swap 65454080 [ 495.374907][ T3313] total_swapcached 1847296 [ 495.379315][ T3313] total_pgpgin 927782 [ 495.383286][ T3313] total_pgpgout 925630 [ 495.387564][ T3313] total_pgfault 894722 [ 495.391830][ T3313] total_pgmajfault 213 [ 495.396061][ T3313] total_inactive_anon 5185536 [ 495.400755][ T3313] total_active_anon 3624960 [ 495.405458][ T3313] total_inactive_file 4096 [ 495.409873][ T3313] total_active_file 0 [ 495.414130][ T3313] total_unevictable 0 [ 495.418292][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8178,pid=28913,uid=0 [ 495.433334][ T3313] Memory cgroup out of memory: Killed process 28913 (syz.1.8178) total-vm:95872kB, anon-rss:1264kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 495.671003][T28963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8191'. [ 495.763701][T28975] netlink: 324 bytes leftover after parsing attributes in process `syz.1.8201'. [ 495.822025][T28975] hub 2-0:1.0: USB hub found [ 495.832019][T28975] hub 2-0:1.0: 8 ports detected [ 495.901738][T28975] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8201'. [ 495.909594][T29002] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8204'. [ 495.962851][T29086] netlink: 'syz.1.8205': attribute type 16 has an invalid length. [ 496.176114][ T29] kauditd_printk_skb: 890 callbacks suppressed [ 496.176128][ T29] audit: type=1326 audit(530.599:100458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.205548][ T29] audit: type=1326 audit(530.599:100459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.245962][ T29] audit: type=1326 audit(530.673:100460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.268951][ T29] audit: type=1326 audit(530.673:100461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.292244][ T29] audit: type=1326 audit(530.673:100462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.315475][ T29] audit: type=1326 audit(530.673:100463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.338962][ T29] audit: type=1326 audit(530.673:100464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.362075][ T29] audit: type=1326 audit(530.673:100465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.385317][ T29] audit: type=1326 audit(530.673:100466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.408468][ T29] audit: type=1326 audit(530.673:100467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29204 comm="syz.4.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 496.461378][T29205] x_tables: ip_tables: ah match: only valid for protocol 51 [ 496.640373][T29444] ip6t_rpfilter: unknown options [ 496.822672][T29558] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 497.009374][T29585] hub 2-0:1.0: USB hub found [ 497.014397][T29585] hub 2-0:1.0: 8 ports detected [ 497.175632][T29721] IPv6: Can't replace route, no match found [ 497.235512][T29735] bridge0: port 1(batadv0) entered blocking state [ 497.242068][T29735] bridge0: port 1(batadv0) entered disabled state [ 497.253794][T29735] batadv0: entered allmulticast mode [ 497.266482][T29735] batadv0: entered promiscuous mode [ 497.392822][T29763] netlink: 'syz.1.8280': attribute type 6 has an invalid length. [ 497.720588][T10763] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 497.729903][T10763] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 498.592516][T30168] x_tables: ip_tables: ah match: only valid for protocol 51 [ 498.815510][T30175] __nla_validate_parse: 12 callbacks suppressed [ 498.815524][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8301'. [ 498.884653][T30180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8302'. [ 498.909390][T30182] netlink: 324 bytes leftover after parsing attributes in process `syz.3.8303'. [ 498.981956][T30182] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8303'. [ 499.023532][T30193] xt_nat: multiple ranges no longer supported [ 499.183978][T30220] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8319'. [ 499.254355][T30220] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8319'. [ 499.265479][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8312'. [ 500.063220][T30404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8356'. [ 500.219582][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8359'. [ 500.240521][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8359'. [ 500.364712][T30531] hub 2-0:1.0: USB hub found [ 500.381190][T30531] hub 2-0:1.0: 8 ports detected [ 501.058594][T31051] netem: change failed [ 501.064149][T31096] tipc: Enabled bearer , priority 10 [ 501.093472][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 501.093486][ T29] audit: type=1326 audit(535.764:100997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31122 comm="syz.1.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 501.132358][ T29] audit: type=1326 audit(535.764:100998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31122 comm="syz.1.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 501.155554][ T29] audit: type=1326 audit(535.806:100999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31122 comm="syz.1.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 501.178690][ T29] audit: type=1326 audit(535.806:101000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31122 comm="syz.1.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 501.201927][ T29] audit: type=1326 audit(535.806:101001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31122 comm="syz.1.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 501.225243][ T29] audit: type=1326 audit(535.848:101002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.3.8406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 501.248338][ T29] audit: type=1326 audit(535.848:101003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.3.8406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 501.271498][ T29] audit: type=1326 audit(535.848:101004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.3.8406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 501.294591][ T29] audit: type=1326 audit(535.848:101005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.3.8406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 501.317631][ T29] audit: type=1326 audit(535.848:101006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.3.8406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214655efc9 code=0x7ffc0000 [ 502.150859][T31397] hub 2-0:1.0: USB hub found [ 502.159950][T31397] hub 2-0:1.0: 8 ports detected [ 503.331597][T32048] hub 2-0:1.0: USB hub found [ 503.342523][T32048] hub 2-0:1.0: 8 ports detected [ 503.531061][T32110] netlink: 'syz.1.8513': attribute type 21 has an invalid length. [ 503.606370][T32194] __nla_validate_parse: 27 callbacks suppressed [ 503.606463][T32194] netlink: 324 bytes leftover after parsing attributes in process `syz.1.8517'. [ 503.685321][T32194] hub 2-0:1.0: USB hub found [ 503.690273][T32194] hub 2-0:1.0: 8 ports detected [ 503.721693][T32194] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8517'. [ 503.778165][T32239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8522'. [ 504.034524][T32474] netlink: 324 bytes leftover after parsing attributes in process `syz.1.8530'. [ 504.124676][T32474] hub 2-0:1.0: USB hub found [ 504.132614][T32474] hub 2-0:1.0: 8 ports detected [ 504.178654][T32474] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8530'. [ 504.297160][T32687] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 504.330499][T32689] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 504.411897][T32703] netlink: 324 bytes leftover after parsing attributes in process `syz.1.8549'. [ 504.458137][T32703] hub 2-0:1.0: USB hub found [ 504.463251][T32703] hub 2-0:1.0: 8 ports detected [ 504.501267][T32703] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8549'. [ 504.746049][ T473] netlink: 324 bytes leftover after parsing attributes in process `syz.2.8561'. [ 504.816559][ T473] hub 2-0:1.0: USB hub found [ 504.825125][ T473] hub 2-0:1.0: 8 ports detected [ 504.884378][ T473] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8561'. [ 505.048159][ T598] x_tables: ip_tables: ah match: only valid for protocol 51 [ 505.346091][ T624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8574'. [ 505.546405][ T638] x_tables: ip_tables: ah match: only valid for protocol 51 [ 506.067797][ T876] hub 2-0:1.0: USB hub found [ 506.073797][ T876] hub 2-0:1.0: 8 ports detected [ 506.183536][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 506.183583][ T29] audit: type=1107 audit(541.108:101605): pid=991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 506.230364][ T29] audit: type=1326 audit(541.150:101606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.253367][ T29] audit: type=1326 audit(541.150:101607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.318884][ T29] audit: type=1326 audit(541.213:101608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.341987][ T29] audit: type=1326 audit(541.213:101609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.364980][ T29] audit: type=1326 audit(541.213:101610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.388016][ T29] audit: type=1326 audit(541.213:101611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.410914][ T29] audit: type=1326 audit(541.213:101612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.433814][ T29] audit: type=1326 audit(541.213:101613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.456721][ T29] audit: type=1326 audit(541.213:101614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.2.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 506.517492][ T1010] netlink: 'syz.1.8615': attribute type 6 has an invalid length. [ 506.602027][ T1113] hub 2-0:1.0: USB hub found [ 506.613790][ T1113] hub 2-0:1.0: 8 ports detected [ 507.018502][ T1416] random: crng reseeded on system resumption [ 507.093721][ T1420] netlink: 'syz.2.8638': attribute type 1 has an invalid length. [ 507.346444][ T1578] netlink: 'syz.0.8657': attribute type 10 has an invalid length. [ 507.355363][ T1578] ipvlan0: entered allmulticast mode [ 507.360827][ T1578] veth0_vlan: entered allmulticast mode [ 507.621812][ T1806] x_tables: ip_tables: ah match: only valid for protocol 51 [ 507.819014][ T2024] team0: Device ipip0 is up. Set it down before adding it as a team port [ 507.864839][ T2031] syzkaller1: entered promiscuous mode [ 507.870328][ T2031] syzkaller1: entered allmulticast mode [ 507.902738][ T2026] hub 2-0:1.0: USB hub found [ 507.907746][ T2026] hub 2-0:1.0: 8 ports detected [ 508.039485][ T2052] syzkaller1: entered promiscuous mode [ 508.045617][ T2052] syzkaller1: entered allmulticast mode [ 508.199803][ T2071] hub 2-0:1.0: USB hub found [ 508.207804][ T2071] hub 2-0:1.0: 8 ports detected [ 508.344631][ T2209] x_tables: ip_tables: ah match: only valid for protocol 51 [ 508.599543][ T2439] xt_hashlimit: size too large, truncated to 1048576 [ 508.604360][ T2441] __nla_validate_parse: 14 callbacks suppressed [ 508.604376][ T2441] netlink: 324 bytes leftover after parsing attributes in process `syz.2.8726'. [ 508.606350][ T2439] xt_hashlimit: max too large, truncated to 1048576 [ 508.681091][ T2439] Cannot find del_set index 3 as target [ 508.693530][ T2441] hub 2-0:1.0: USB hub found [ 508.718715][ T2441] hub 2-0:1.0: 8 ports detected [ 508.773441][ T2441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8726'. [ 508.857149][T30147] Bluetooth: hci0: Frame reassembly failed (-84) [ 509.420616][ T2712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8756'. [ 509.618500][ T2824] blktrace: Concurrent blktraces are not allowed on loop5 [ 509.656608][ T2828] sd 0:0:1:0: device reset [ 509.855051][ T2945] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8771'. [ 510.124918][ T3078] syzkaller1: entered promiscuous mode [ 510.131361][ T3078] syzkaller1: entered allmulticast mode [ 510.284569][ T3092] netlink: 660 bytes leftover after parsing attributes in process `syz.4.8787'. [ 510.354305][ T3107] geneve2: entered promiscuous mode [ 510.360190][ T3107] geneve2: entered allmulticast mode [ 510.656247][ T3262] 9pnet_fd: Insufficient options for proto=fd [ 510.786931][ T2473] Bluetooth: hci0: command 0x1003 tx timeout [ 510.787525][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 510.948651][ T3539] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.010311][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 511.010326][ T29] audit: type=1400 audit(546.178:102259): avc: denied { write } for pid=3543 comm="syz.1.8824" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 511.141939][ T29] audit: type=1326 audit(546.315:102260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.165793][ T29] audit: type=1326 audit(546.315:102261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.188966][ T29] audit: type=1326 audit(546.315:102262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.212470][ T29] audit: type=1326 audit(546.315:102263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.236133][ T29] audit: type=1326 audit(546.315:102264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.259146][ T29] audit: type=1326 audit(546.315:102265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.282829][ T29] audit: type=1326 audit(546.315:102266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.301600][ T3771] xt_CONNSECMARK: invalid mode: 66 [ 511.305903][ T29] audit: type=1326 audit(546.315:102267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.334460][ T29] audit: type=1326 audit(546.315:102268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.2.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 511.535721][ T3802] syzkaller1: entered promiscuous mode [ 511.541367][ T3802] syzkaller1: entered allmulticast mode [ 511.729312][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8864'. [ 511.760693][ T3941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8867'. [ 512.251371][ T4431] SELinux: policydb version 0 does not match my version range 15-35 [ 512.263528][ T4431] SELinux: failed to load policy [ 512.592684][ T4488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8911'. [ 512.725555][ T4445] cgroup: fork rejected by pids controller in /syz4 [ 513.111233][ T4775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8933'. [ 513.231472][ T4960] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8947'. [ 513.320721][ T5074] x_tables: ip_tables: ah match: only valid for protocol 51 [ 513.657855][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8956'. [ 514.004807][ T5530] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.050995][ T5535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8972'. [ 514.060040][ T5535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8972'. [ 514.093680][ T5540] SELinux: policydb version 0 does not match my version range 15-35 [ 514.102479][ T5540] SELinux: failed to load policy [ 514.195378][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8978'. [ 514.374804][ T5675] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8987'. [ 514.745409][ T5919] SELinux: failed to load policy [ 514.810343][T30117] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.112808][ T5938] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9012'. [ 515.163876][ T5946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9015'. [ 515.785143][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 515.785157][ T29] audit: type=1326 audit(551.186:103067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.815172][ T29] audit: type=1326 audit(551.186:103068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.840357][ T29] audit: type=1326 audit(551.196:103069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.863446][ T29] audit: type=1326 audit(551.196:103070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.887182][ T29] audit: type=1326 audit(551.196:103071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.910180][ T29] audit: type=1326 audit(551.228:103072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.933799][ T29] audit: type=1326 audit(551.228:103073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.956868][ T29] audit: type=1326 audit(551.228:103074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 515.980442][ T29] audit: type=1326 audit(551.228:103075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 516.003442][ T29] audit: type=1326 audit(551.228:103076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 516.058909][ T6115] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9040'. [ 516.100599][ T6115] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9040'. [ 516.309254][ T6243] netlink: 'syz.4.9051': attribute type 1 has an invalid length. [ 516.486572][ T6363] netlink: 272 bytes leftover after parsing attributes in process `syz.0.9058'. [ 516.730583][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 516.988920][ T6512] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 517.250145][ T6754] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 517.546532][ T6980] lo speed is unknown, defaulting to 1000 [ 517.598893][ T6980] lo speed is unknown, defaulting to 1000 [ 517.724634][ T6980] lo speed is unknown, defaulting to 1000 [ 518.411652][ T7245] netlink: 'syz.3.9123': attribute type 1 has an invalid length. [ 518.439041][ T7241] __nla_validate_parse: 5 callbacks suppressed [ 518.439056][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9121'. [ 518.454464][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9121'. [ 518.469686][ T7248] x_tables: ip_tables: ah match: only valid for protocol 51 [ 518.569901][ T7260] netlink: 324 bytes leftover after parsing attributes in process `syz.1.9130'. [ 518.646472][ T7260] hub 2-0:1.0: USB hub found [ 518.652530][ T7265] lo speed is unknown, defaulting to 1000 [ 518.658674][ T7260] hub 2-0:1.0: 8 ports detected [ 518.737149][ T7265] lo speed is unknown, defaulting to 1000 [ 518.865597][ T7488] netlink: 324 bytes leftover after parsing attributes in process `syz.2.9140'. [ 518.881091][ T7265] lo speed is unknown, defaulting to 1000 [ 518.952991][ T7488] hub 2-0:1.0: USB hub found [ 518.961062][ T7488] hub 2-0:1.0: 8 ports detected [ 519.020353][ T7488] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9140'. [ 519.052119][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9143'. [ 519.061126][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9143'. [ 519.070092][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9143'. [ 519.464097][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9150'. [ 519.660962][ T7987] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9173'. [ 519.684753][ T7995] x_tables: ip_tables: ah match: only valid for protocol 51 [ 520.269709][ T8259] tipc: Enabling of bearer rejected, failed to enable media [ 520.553599][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 520.553672][ T29] audit: type=1326 audit(556.193:103903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.9203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.584818][ T29] audit: type=1326 audit(556.225:103904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.9203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.785980][ T29] audit: type=1326 audit(556.435:103905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.809220][ T29] audit: type=1326 audit(556.435:103906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.832216][ T29] audit: type=1326 audit(556.435:103907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.855519][ T29] audit: type=1326 audit(556.435:103908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.878813][ T29] audit: type=1326 audit(556.435:103909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.908136][ T29] audit: type=1326 audit(556.519:103910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.953889][ T29] audit: type=1326 audit(556.603:103911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 520.976961][ T29] audit: type=1326 audit(556.603:103912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.1.9214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 521.168375][ T8818] hub 2-0:1.0: USB hub found [ 521.180190][ T8818] hub 2-0:1.0: 8 ports detected [ 521.381491][ T8953] ip6t_srh: unknown srh match flags 4000 [ 521.424064][ T8948] hub 2-0:1.0: USB hub found [ 521.442457][ T8948] hub 2-0:1.0: 8 ports detected [ 521.553788][ T8983] bond0: option arp_interval: invalid value (18446744073265055750) [ 521.561903][ T8983] bond0: option arp_interval: allowed values 0 - 2147483647 [ 521.814165][ T9207] bridge0: port 1(macsec2) entered blocking state [ 521.820802][ T9207] bridge0: port 1(macsec2) entered disabled state [ 521.846331][ T9207] macsec2: entered allmulticast mode [ 521.856584][ T8998] cgroup: fork rejected by pids controller in /syz3 [ 521.863888][ T9207] macsec2: left allmulticast mode [ 522.032428][ T9331] lo speed is unknown, defaulting to 1000 [ 522.124881][ T9350] netlink: 'syz.3.9279': attribute type 10 has an invalid length. [ 522.133750][ T9331] lo speed is unknown, defaulting to 1000 [ 522.317591][ T9331] lo speed is unknown, defaulting to 1000 [ 522.791971][ T9627] Process accounting resumed [ 523.037769][ T9763] x_tables: ip_tables: ah match: only valid for protocol 51 [ 523.075179][ T9761] Falling back ldisc for ttyS3. [ 523.323786][ T9892] bridge_slave_0: default FDB implementation only supports local addresses [ 523.344471][ T9892] bridge_slave_0: default FDB implementation only supports local addresses [ 523.541379][T10016] __nla_validate_parse: 17 callbacks suppressed [ 523.541393][T10016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9334'. [ 523.603344][T10018] lo speed is unknown, defaulting to 1000 [ 523.687778][T10101] netlink: 'syz.1.9341': attribute type 21 has an invalid length. [ 523.702544][T10018] lo speed is unknown, defaulting to 1000 [ 523.709646][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9341'. [ 523.719312][T10101] netlink: 'syz.1.9341': attribute type 1 has an invalid length. [ 523.902632][T10018] lo speed is unknown, defaulting to 1000 [ 524.533425][T10209] syz!: rxe_newlink: already configured on team_slave_0 [ 524.557834][T10218] netlink: 324 bytes leftover after parsing attributes in process `syz.1.9381'. [ 524.565270][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9372'. [ 524.624565][T10218] hub 2-0:1.0: USB hub found [ 524.629718][T10218] hub 2-0:1.0: 8 ports detected [ 524.690687][T10218] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9381'. [ 524.701453][T10233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9380'. [ 524.884054][T10246] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9391'. [ 524.952672][T10250] $Hÿ: renamed from bond0 [ 524.974545][T10250] $Hÿ: entered promiscuous mode [ 525.036051][T10261] netlink: 324 bytes leftover after parsing attributes in process `syz.2.9397'. [ 525.102278][T10261] hub 2-0:1.0: USB hub found [ 525.108415][T10261] hub 2-0:1.0: 8 ports detected [ 525.166214][T10261] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9397'. [ 525.228944][T10384] Falling back ldisc for ttyS3. [ 525.383422][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 525.383438][ T29] audit: type=1326 audit(561.264:104439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.413478][ T29] audit: type=1326 audit(561.264:104440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.436642][ T29] audit: type=1326 audit(561.264:104441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.460206][ T29] audit: type=1326 audit(561.264:104442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.483323][ T29] audit: type=1326 audit(561.264:104443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.507010][ T29] audit: type=1326 audit(561.264:104444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.530135][ T29] audit: type=1326 audit(561.264:104445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.553781][ T29] audit: type=1326 audit(561.264:104446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.577003][ T29] audit: type=1326 audit(561.264:104447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.600535][ T29] audit: type=1326 audit(561.264:104448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.9411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 525.915634][T10752] x_tables: ip_tables: ah match: only valid for protocol 51 [ 526.107937][T10775] tipc: Bearer : already 2 bearers with priority 10 [ 526.116105][T10775] tipc: Bearer : trying with adjusted priority [ 526.123474][T10775] tipc: New replicast peer: 255.255.255.255 [ 526.129658][T10775] tipc: Enabled bearer , priority 9 [ 526.660672][T11129] netlink: 324 bytes leftover after parsing attributes in process `syz.2.9464'. [ 526.735108][T11129] hub 2-0:1.0: USB hub found [ 526.740264][T11129] hub 2-0:1.0: 8 ports detected [ 527.321684][T11281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.418585][T11296] x_tables: ip_tables: ah match: only valid for protocol 51 [ 527.552592][T11403] hub 2-0:1.0: USB hub found [ 527.562461][T11403] hub 2-0:1.0: 8 ports detected [ 527.998706][T11739] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 528.412533][T11880] __nla_validate_parse: 12 callbacks suppressed [ 528.412548][T11880] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9527'. [ 528.640152][T11940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.647412][T11940] IPv6: NLM_F_CREATE should be set when creating new route [ 528.654603][T11940] IPv6: NLM_F_CREATE should be set when creating new route [ 528.714754][T11940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.871113][T12018] vcan0: entered allmulticast mode [ 528.889292][T12018] vcan0: left allmulticast mode [ 528.932465][T12028] netlink: 324 bytes leftover after parsing attributes in process `syz.1.9547'. [ 529.016096][T12030] x_tables: ip_tables: ah match: only valid for protocol 51 [ 529.343397][T12274] netlink: 324 bytes leftover after parsing attributes in process `syz.1.9567'. [ 529.420074][T12283] x_tables: ip_tables: ah match: only valid for protocol 51 [ 529.840631][T12713] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9582'. [ 529.882483][T12713] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9582'. [ 530.224656][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 530.224669][ T29] audit: type=1326 audit(566.345:105112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.254591][ T29] audit: type=1326 audit(566.345:105113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.292441][ T29] audit: type=1326 audit(566.408:105114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.316044][ T29] audit: type=1326 audit(566.408:105115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.339288][ T29] audit: type=1326 audit(566.408:105116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.365404][ T29] audit: type=1326 audit(566.429:105117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.388696][ T29] audit: type=1326 audit(566.429:105118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.411877][ T29] audit: type=1326 audit(566.429:105119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.476124][ T29] audit: type=1326 audit(566.492:105120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.499863][ T29] audit: type=1326 audit(566.492:105121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.2.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056a42efc9 code=0x7ffc0000 [ 530.641665][T13664] pim6reg: entered allmulticast mode [ 530.679652][T13664] pim6reg: left allmulticast mode [ 530.771797][T13720] netlink: 'syz.3.9603': attribute type 1 has an invalid length. [ 530.886340][T13818] macsec1: entered promiscuous mode [ 530.891580][T13818] bridge0: entered promiscuous mode [ 530.907606][T13818] bridge0: port 1(macsec1) entered blocking state [ 530.914286][T13818] bridge0: port 1(macsec1) entered disabled state [ 530.925835][T13824] ref_ctr_offset mismatch. inode: 0x250f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 530.937685][T13818] macsec1: entered allmulticast mode [ 530.943160][T13818] bridge0: entered allmulticast mode [ 530.951453][T13818] macsec1: left allmulticast mode [ 530.956593][T13818] bridge0: left allmulticast mode [ 530.974220][T13818] bridge0: left promiscuous mode [ 531.024590][T13934] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 531.037167][T13934] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 531.048896][T13934] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 531.119535][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9627'. [ 531.129058][T13945] IPVS: Unknown mcast interface: ipvlan1 [ 531.157015][T13954] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9631'. [ 531.255260][T13965] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9631'. [ 531.365548][T14104] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9643'. [ 531.416912][T14104] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9643'. [ 531.481531][T14207] lo speed is unknown, defaulting to 1000 [ 531.562539][T14207] lo speed is unknown, defaulting to 1000 [ 531.715035][T14449] netlink: 'syz.1.9660': attribute type 1 has an invalid length. [ 531.740078][T14207] lo speed is unknown, defaulting to 1000 [ 531.870662][T14460] hub 2-0:1.0: USB hub found [ 531.878611][T14460] hub 2-0:1.0: 8 ports detected [ 531.943546][T14574] usb usb7: usbfs: process 14574 (syz.2.9671) did not claim interface 0 before use [ 532.183695][T14795] netlink: 'syz.1.9678': attribute type 33 has an invalid length. [ 532.610188][T14856] netlink: 'syz.3.9707': attribute type 3 has an invalid length. [ 532.955826][T14997] netlink: 'syz.2.9726': attribute type 3 has an invalid length. [ 533.068606][T14999] x_tables: ip_tables: ah match: only valid for protocol 51 [ 533.751554][T15582] netlink: 'syz.1.9764': attribute type 39 has an invalid length. [ 533.791036][T15585] __nla_validate_parse: 9 callbacks suppressed [ 533.791052][T15585] netlink: 324 bytes leftover after parsing attributes in process `syz.3.9765'. [ 533.858158][T15585] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9765'. [ 533.939169][T15585] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9765'. [ 534.162287][T15711] x_tables: ip_tables: ah match: only valid for protocol 51 [ 534.209268][T15741] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9784'. [ 534.261497][T15741] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9784'. [ 534.301501][T15741] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9784'. [ 534.457017][T15875] netlink: 324 bytes leftover after parsing attributes in process `syz.1.9797'. [ 534.527063][T15875] hub 2-0:1.0: USB hub found [ 534.534338][T15875] hub 2-0:1.0: 8 ports detected [ 534.566361][T15875] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9797'. [ 534.644295][T15875] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9797'. [ 534.698603][T15888] macsec1: entered promiscuous mode [ 534.703843][T15888] bridge0: entered promiscuous mode [ 534.709817][T15888] bridge0: port 2(macsec1) entered blocking state [ 534.716360][T15888] bridge0: port 2(macsec1) entered disabled state [ 534.723236][T15888] macsec1: entered allmulticast mode [ 534.728695][T15888] bridge0: entered allmulticast mode [ 534.735913][T15888] macsec1: left allmulticast mode [ 534.740966][T15888] bridge0: left allmulticast mode [ 534.747765][T15888] bridge0: left promiscuous mode [ 534.990388][T16002] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 535.041706][T15873] syz.0.9796 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 535.056236][T15873] CPU: 1 UID: 0 PID: 15873 Comm: syz.0.9796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.056340][T15873] Tainted: [W]=WARN [ 535.056360][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.056371][T15873] Call Trace: [ 535.056377][T15873] [ 535.056383][T15873] __dump_stack+0x1d/0x30 [ 535.056406][T15873] dump_stack_lvl+0xe8/0x140 [ 535.056462][T15873] dump_stack+0x15/0x1b [ 535.056480][T15873] dump_header+0x81/0x220 [ 535.056499][T15873] oom_kill_process+0x342/0x400 [ 535.056702][T15873] out_of_memory+0x979/0xb80 [ 535.056744][T15873] try_charge_memcg+0x610/0xa10 [ 535.056779][T15873] obj_cgroup_charge_pages+0xa6/0x150 [ 535.056832][T15873] __memcg_kmem_charge_page+0x9f/0x170 [ 535.056858][T15873] __alloc_frozen_pages_noprof+0x188/0x360 [ 535.056893][T15873] alloc_pages_mpol+0xb3/0x260 [ 535.056970][T15873] alloc_pages_noprof+0x90/0x130 [ 535.056990][T15873] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 535.057079][T15873] __kvmalloc_node_noprof+0x483/0x670 [ 535.057106][T15873] ? ip_set_alloc+0x24/0x30 [ 535.057133][T15873] ? ip_set_alloc+0x24/0x30 [ 535.057191][T15873] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 535.057218][T15873] ip_set_alloc+0x24/0x30 [ 535.057245][T15873] hash_netiface_create+0x282/0x740 [ 535.057275][T15873] ? __pfx_hash_netiface_create+0x10/0x10 [ 535.057401][T15873] ip_set_create+0x3cc/0x970 [ 535.057426][T15873] ? __nla_parse+0x40/0x60 [ 535.057486][T15873] nfnetlink_rcv_msg+0x4c6/0x590 [ 535.057531][T15873] netlink_rcv_skb+0x123/0x220 [ 535.057591][T15873] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 535.057623][T15873] nfnetlink_rcv+0x167/0x16c0 [ 535.057701][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.057723][T15873] ? bpf_prog_3be60dfa91274608+0x32/0x32 [ 535.057738][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.057833][T15873] ? bpf_prog_3be60dfa91274608+0x32/0x32 [ 535.057848][T15873] ? is_bpf_text_address+0x141/0x160 [ 535.057866][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.057887][T15873] ? is_bpf_text_address+0x141/0x160 [ 535.057939][T15873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.057961][T15873] ? kernel_text_address+0x94/0xb0 [ 535.058024][T15873] ? __kernel_text_address+0xd/0x40 [ 535.058046][T15873] ? unwind_get_return_address+0x16/0x40 [ 535.058073][T15873] ? perf_callchain_kernel+0x301/0x330 [ 535.058137][T15873] ? __bpf_get_stackid+0x166/0x800 [ 535.058160][T15873] ? should_fail_ex+0x30/0x280 [ 535.058176][T15873] ? selinux_nlmsg_lookup+0x99/0x890 [ 535.058197][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.058224][T15873] ? __netlink_lookup+0x266/0x2a0 [ 535.058249][T15873] netlink_unicast+0x5c0/0x690 [ 535.058304][T15873] netlink_sendmsg+0x58b/0x6b0 [ 535.058327][T15873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.058348][T15873] __sock_sendmsg+0x145/0x180 [ 535.058401][T15873] ____sys_sendmsg+0x31e/0x4e0 [ 535.058433][T15873] ___sys_sendmsg+0x17b/0x1d0 [ 535.058573][T15873] __x64_sys_sendmsg+0xd4/0x160 [ 535.058609][T15873] x64_sys_call+0x191e/0x3000 [ 535.058628][T15873] do_syscall_64+0xd2/0x200 [ 535.058645][T15873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 535.058705][T15873] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 535.058769][T15873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.058787][T15873] RIP: 0033:0x7f729f80efc9 [ 535.058800][T15873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.058816][T15873] RSP: 002b:00007f729e26f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.058836][T15873] RAX: ffffffffffffffda RBX: 00007f729fa65fa0 RCX: 00007f729f80efc9 [ 535.058908][T15873] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 535.058987][T15873] RBP: 00007f729f891f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.058998][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.059010][T15873] R13: 00007f729fa66038 R14: 00007f729fa65fa0 R15: 00007fffe287c728 [ 535.059028][T15873] [ 535.442671][T15873] memory: usage 307200kB, limit 307200kB, failcnt 1127 [ 535.449538][T15873] memory+swap: usage 311508kB, limit 9007199254740988kB, failcnt 0 [ 535.457446][T15873] kmem: usage 226348kB, limit 9007199254740988kB, failcnt 0 [ 535.463311][T16094] netlink: 324 bytes leftover after parsing attributes in process `syz.3.9812'. [ 535.464743][T15873] Memory cgroup stats for /syz0: [ 535.492813][T15873] cache 79667200 [ 535.501375][T15873] rss 3084288 [ 535.504694][T15873] shmem 79663104 [ 535.508278][T15873] mapped_file 0 [ 535.511731][T15873] dirty 0 [ 535.514728][T15873] writeback 0 [ 535.518105][T15873] workingset_refault_anon 1545 [ 535.522848][T15873] workingset_refault_file 13088 [ 535.527821][T15873] swap 4411392 [ 535.531188][T15873] swapcached 32768 [ 535.534955][T15873] pgpgin 1019242 [ 535.538489][T15873] pgpgout 999029 [ 535.542035][T15873] pgfault 936812 [ 535.545705][T15873] pgmajfault 229 [ 535.549236][T15873] inactive_anon 1073152 [ 535.553377][T15873] active_anon 81707008 [ 535.557533][T15873] inactive_file 0 [ 535.561154][T15873] active_file 12288 [ 535.564973][T15873] unevictable 0 [ 535.568418][T15873] hierarchical_memory_limit 314572800 [ 535.573871][T15873] hierarchical_memsw_limit 9223372036854771712 [ 535.580011][T15873] total_cache 79667200 [ 535.584205][T15873] total_rss 3084288 [ 535.588024][T15873] total_shmem 79663104 [ 535.592138][T15873] total_mapped_file 0 [ 535.596106][T15873] total_dirty 0 [ 535.599627][T15873] total_writeback 0 [ 535.603544][T15873] total_workingset_refault_anon 1545 [ 535.609024][T15873] total_workingset_refault_file 13088 [ 535.614428][T15873] total_swap 4411392 [ 535.618358][T15873] total_swapcached 32768 [ 535.622774][T15873] total_pgpgin 1019242 [ 535.627027][T15873] total_pgpgout 999029 [ 535.631179][T15873] total_pgfault 936812 [ 535.635287][T15873] total_pgmajfault 229 [ 535.639388][T15873] total_inactive_anon 1073152 [ 535.644112][T15873] total_active_anon 81707008 [ 535.648689][T15873] total_inactive_file 0 [ 535.652912][T15873] total_active_file 12288 [ 535.657239][T15873] total_unevictable 0 [ 535.661244][T15873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.199,pid=4294,uid=0 [ 535.675761][T15873] Memory cgroup out of memory: Killed process 4294 (syz.0.199) total-vm:93824kB, anon-rss:1176kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 535.697122][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 535.697135][ T29] audit: type=1326 audit(572.077:105389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.727270][ T29] audit: type=1326 audit(572.077:105390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.729184][T15873] syz.0.9796 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 535.750364][ T29] audit: type=1326 audit(572.077:105391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.750425][ T29] audit: type=1326 audit(572.077:105392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.764254][T15873] CPU: 0 UID: 0 PID: 15873 Comm: syz.0.9796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.764287][T15873] Tainted: [W]=WARN [ 535.764295][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.764385][T15873] Call Trace: [ 535.764391][T15873] [ 535.764398][T15873] __dump_stack+0x1d/0x30 [ 535.764422][T15873] dump_stack_lvl+0xe8/0x140 [ 535.764444][T15873] dump_stack+0x15/0x1b [ 535.764463][T15873] dump_header+0x81/0x220 [ 535.764486][T15873] oom_kill_process+0x342/0x400 [ 535.764565][T15873] out_of_memory+0x979/0xb80 [ 535.764594][T15873] try_charge_memcg+0x610/0xa10 [ 535.764708][T15873] obj_cgroup_charge_pages+0xa6/0x150 [ 535.764728][T15873] __memcg_kmem_charge_page+0x9f/0x170 [ 535.764758][T15873] __alloc_frozen_pages_noprof+0x188/0x360 [ 535.764852][T15873] alloc_pages_mpol+0xb3/0x260 [ 535.764872][T15873] alloc_pages_noprof+0x90/0x130 [ 535.764893][T15873] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 535.764973][T15873] __kvmalloc_node_noprof+0x483/0x670 [ 535.765005][T15873] ? ip_set_alloc+0x24/0x30 [ 535.765072][T15873] ? ip_set_alloc+0x24/0x30 [ 535.765100][T15873] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 535.765191][T15873] ip_set_alloc+0x24/0x30 [ 535.765218][T15873] hash_netiface_create+0x282/0x740 [ 535.765251][T15873] ? __pfx_hash_netiface_create+0x10/0x10 [ 535.765348][T15873] ip_set_create+0x3cc/0x970 [ 535.765379][T15873] ? __nla_parse+0x40/0x60 [ 535.765402][T15873] nfnetlink_rcv_msg+0x4c6/0x590 [ 535.765451][T15873] netlink_rcv_skb+0x123/0x220 [ 535.765585][T15873] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 535.765619][T15873] nfnetlink_rcv+0x167/0x16c0 [ 535.765645][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.765724][T15873] ? bpf_prog_3be60dfa91274608+0x32/0x32 [ 535.765740][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.765764][T15873] ? bpf_prog_3be60dfa91274608+0x32/0x32 [ 535.765781][T15873] ? is_bpf_text_address+0x141/0x160 [ 535.765806][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.765861][T15873] ? is_bpf_text_address+0x141/0x160 [ 535.765880][T15873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.766036][T15873] ? kernel_text_address+0x94/0xb0 [ 535.766064][T15873] ? __kernel_text_address+0xd/0x40 [ 535.766183][T15873] ? unwind_get_return_address+0x16/0x40 [ 535.766259][T15873] ? perf_callchain_kernel+0x301/0x330 [ 535.766294][T15873] ? __bpf_get_stackid+0x166/0x800 [ 535.766319][T15873] ? should_fail_ex+0x30/0x280 [ 535.766407][T15873] ? selinux_nlmsg_lookup+0x99/0x890 [ 535.766433][T15873] ? __rcu_read_unlock+0x34/0x70 [ 535.766457][T15873] ? __netlink_lookup+0x266/0x2a0 [ 535.766507][T15873] netlink_unicast+0x5c0/0x690 [ 535.766538][T15873] netlink_sendmsg+0x58b/0x6b0 [ 535.766625][T15873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.766645][T15873] __sock_sendmsg+0x145/0x180 [ 535.766669][T15873] ____sys_sendmsg+0x31e/0x4e0 [ 535.766704][T15873] ___sys_sendmsg+0x17b/0x1d0 [ 535.766868][T15873] __x64_sys_sendmsg+0xd4/0x160 [ 535.766938][T15873] x64_sys_call+0x191e/0x3000 [ 535.766960][T15873] do_syscall_64+0xd2/0x200 [ 535.767004][T15873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 535.767030][T15873] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 535.767059][T15873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.767080][T15873] RIP: 0033:0x7f729f80efc9 [ 535.767160][T15873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.767177][T15873] RSP: 002b:00007f729e26f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.767197][T15873] RAX: ffffffffffffffda RBX: 00007f729fa65fa0 RCX: 00007f729f80efc9 [ 535.767210][T15873] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 535.767222][T15873] RBP: 00007f729f891f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.767234][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.767247][T15873] R13: 00007f729fa66038 R14: 00007f729fa65fa0 R15: 00007fffe287c728 [ 535.767305][T15873] [ 535.767311][T15873] memory: usage 307200kB, limit 307200kB, failcnt 1173 [ 535.787962][ T29] audit: type=1326 audit(572.077:105393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.810939][T15873] memory+swap: usage 311348kB, limit 9007199254740988kB, failcnt 0 [ 535.810960][T15873] kmem: usage 226364kB, limit 9007199254740988kB, failcnt 0 [ 535.810973][T15873] Memory cgroup stats for /syz0: [ 535.811716][T15873] cache 79667200 [ 535.822995][ T29] audit: type=1326 audit(572.077:105394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.826724][T15873] rss 3084288 [ 535.836817][ T29] audit: type=1326 audit(572.077:105395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.840067][T15873] shmem 79663104 [ 535.840161][T15873] mapped_file 0 [ 535.840168][T15873] dirty 0 [ 535.840174][T15873] writeback 0 [ 535.840180][T15873] workingset_refault_anon 1545 [ 535.840248][T15873] workingset_refault_file 13088 [ 535.840256][T15873] swap 4247552 [ 535.840263][T15873] swapcached 16384 [ 535.840271][T15873] pgpgin 1019242 [ 535.840279][T15873] pgpgout 999033 [ 535.840287][T15873] pgfault 936814 [ 535.840294][T15873] pgmajfault 230 [ 535.840300][T15873] inactive_anon 81707008 [ 535.840322][T15873] active_anon 1056768 [ 535.840330][T15873] inactive_file 8192 [ 535.840338][T15873] active_file 4096 [ 535.840346][T15873] unevictable 0 [ 535.840354][T15873] hierarchical_memory_limit 314572800 [ 535.840381][T15873] hierarchical_memsw_limit 9223372036854771712 [ 535.840389][T15873] total_cache 79667200 [ 535.840395][T15873] total_rss 3084288 [ 535.840403][T15873] total_shmem 79663104 [ 535.840467][T15873] total_mapped_file 0 [ 535.840475][T15873] total_dirty 0 [ 535.840482][T15873] total_writeback 0 [ 535.840489][T15873] total_workingset_refault_anon 1545 [ 535.840497][T15873] total_workingset_refault_file 13088 [ 535.840506][T15873] total_swap 4247552 [ 535.840514][T15873] total_swapcached 16384 [ 535.840523][T15873] total_pgpgin 1019242 [ 535.840532][T15873] total_pgpgout 999033 [ 535.840540][T15873] total_pgfault 936814 [ 535.840577][T15873] total_pgmajfault 230 [ 535.840592][T15873] total_inactive_anon 81707008 [ 535.840601][T15873] total_active_anon 1056768 [ 535.840609][T15873] total_inactive_file 8192 [ 535.840616][T15873] total_active_file 4096 [ 535.840623][T15873] total_unevictable 0 [ 535.840630][T15873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0 [ 535.843662][ T29] audit: type=1326 audit(572.077:105396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.847961][T15873] ,oom_memcg=/syz0 [ 535.852568][ T29] audit: type=1326 audit(572.077:105397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 535.856675][T15873] ,task_memcg= [ 536.110957][ T29] audit: type=1326 audit(572.087:105398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.1.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ab3cefc9 code=0x7ffc0000 [ 536.111316][T15873] /syz0,task=syz.0.9796,pid=15871,uid=0 [ 536.545980][T15873] Memory cgroup out of memory: Killed process 15871 (syz.0.9796) total-vm:95872kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 536.878082][T16165] hub 2-0:1.0: USB hub found [ 536.883191][T16165] hub 2-0:1.0: 8 ports detected [ 536.908706][T16178] netlink: 'syz.2.9839': attribute type 4 has an invalid length. [ 537.106243][T16306] netlink: 'syz.2.9847': attribute type 21 has an invalid length. [ 537.212064][T16328] SELinux: failed to load policy [ 537.263809][T16330] hub 2-0:1.0: USB hub found [ 537.269259][T16330] hub 2-0:1.0: 8 ports detected [ 537.542009][T16555] syzkaller1: entered promiscuous mode [ 537.547528][T16555] syzkaller1: entered allmulticast mode [ 537.775939][T16582] Falling back ldisc for ttyS3. [ 537.869638][T16701] x_tables: ip_tables: ah match: only valid for protocol 51 [ 538.199429][T16714] lo speed is unknown, defaulting to 1000 [ 538.225835][T16732] hub 2-0:1.0: USB hub found [ 538.230360][T16714] lo speed is unknown, defaulting to 1000 [ 538.230795][T16732] hub 2-0:1.0: 8 ports detected [ 538.312355][T16714] lo speed is unknown, defaulting to 1000 [ 538.405469][T16742] x_tables: ip_tables: ah match: only valid for protocol 51 [ 538.410529][T16714] chnl_net:caif_netlink_parms(): no params data found [ 538.497764][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.504828][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.535790][T16714] bridge_slave_0: entered allmulticast mode [ 538.542328][T16714] bridge_slave_0: entered promiscuous mode [ 538.557851][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.565675][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.573120][T16714] bridge_slave_1: entered allmulticast mode [ 538.579451][T16714] bridge_slave_1: entered promiscuous mode [ 538.604823][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.622997][T16874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16874 comm=syz.4.9912 [ 538.631815][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.661091][T16878] __nla_validate_parse: 13 callbacks suppressed [ 538.661104][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9914'. [ 538.699297][T16714] team0: Port device team_slave_0 added [ 538.705738][T16714] team0: Port device team_slave_1 added [ 538.750230][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.757224][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.783915][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.795242][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.802215][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.828850][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.874383][T16714] hsr_slave_0: entered promiscuous mode [ 538.891683][T16714] hsr_slave_1: entered promiscuous mode [ 538.903875][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 538.909768][T16714] Cannot create hsr debugfs directory [ 539.056036][T16714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 539.067960][T16714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 539.093816][T16714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 539.116081][T16714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 539.163473][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.180776][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.191930][T30099] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.199060][T30099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.220168][T16714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 539.230555][T16714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.246242][T30099] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.253331][T30099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.324110][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.358590][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9944'. [ 539.437823][T17179] rdma_op ffff8881b3871980 conn xmit_rdma 0000000000000000 [ 539.529852][T16714] veth0_vlan: entered promiscuous mode [ 539.548771][T16714] veth1_vlan: entered promiscuous mode [ 539.587706][T16714] veth0_macvtap: entered promiscuous mode [ 539.608977][T16714] veth1_macvtap: entered promiscuous mode [ 539.634467][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.654215][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.673599][T30115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.702227][T30115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.724147][T30115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.745336][T30115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.874732][T17327] netlink: 'syz.0.9967': attribute type 1 has an invalid length. [ 539.949182][T17436] lo speed is unknown, defaulting to 1000 [ 539.988834][T17436] lo speed is unknown, defaulting to 1000 [ 540.062387][T17436] lo speed is unknown, defaulting to 1000 [ 540.167318][T17450] ref_ctr_offset mismatch. inode: 0x2b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 540.420754][T17483] loop5: detected capacity change from 0 to 2048 [ 540.432328][T17483] EXT4-fs: Ignoring removed bh option [ 540.456417][T17483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.469346][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 540.469359][ T29] audit: type=1400 audit(577.105:105775): avc: denied { create } for pid=17494 comm="syz.3.9995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 540.505329][ T29] audit: type=1400 audit(577.126:105776): avc: denied { mount } for pid=17482 comm="syz.5.9992" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 540.527355][ T29] audit: type=1400 audit(577.137:105777): avc: denied { bind } for pid=17494 comm="syz.3.9995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 540.528423][T17483] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, [ 540.546252][ T29] audit: type=1400 audit(577.137:105778): avc: denied { write } for pid=17494 comm="syz.3.9995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 540.554567][T17483] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 540.583818][ T29] audit: type=1400 audit(577.137:105779): avc: denied { read write } for pid=17482 comm="syz.5.9992" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 540.606098][ T29] audit: type=1400 audit(577.137:105780): avc: denied { open } for pid=17482 comm="syz.5.9992" path="/9/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 540.611652][T17483] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 540.640999][T17483] EXT4-fs (loop5): This should not happen!! Data will be lost [ 540.640999][T17483] [ 540.650656][T17483] EXT4-fs (loop5): Total free blocks count 0 [ 540.652802][ T29] audit: type=1400 audit(577.200:105781): avc: denied { ioctl } for pid=17482 comm="syz.5.9992" path="/9/file1/file1" dev="loop5" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 540.656629][T17483] EXT4-fs (loop5): Free/Dirty block details [ 540.681270][ T29] audit: type=1400 audit(577.284:105782): avc: denied { open } for pid=17500 comm="syz.0.9998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 540.686494][T17483] EXT4-fs (loop5): free_blocks=2415919104 [ 540.705319][ T29] audit: type=1400 audit(577.284:105783): avc: denied { kernel } for pid=17500 comm="syz.0.9998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 540.730188][T17483] EXT4-fs (loop5): dirty_blocks=32 [ 540.735504][T17483] EXT4-fs (loop5): Block reservation details [ 540.741584][T17483] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 540.747872][T17498] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 540.783700][ T29] audit: type=1400 audit(577.420:105784): avc: denied { tracepoint } for pid=17506 comm="syz.3.10001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 541.121874][T17649] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10018'. [ 541.161454][T17657] x_tables: ip_tables: ah match: only valid for protocol 51 [ 541.186614][T17649] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10018'. [ 541.215903][T17649] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10018'. [ 541.693910][T17910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17910 comm=syz.4.10037 [ 541.706600][T17910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17910 comm=syz.4.10037 [ 541.747596][T17966] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10040'. [ 541.767810][T17994] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10041'. [ 541.782195][T18014] loop5: detected capacity change from 0 to 512 [ 541.810223][T18014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.836519][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.888871][T18026] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10041'. [ 541.972636][T18048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10053'. [ 542.010362][T18051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10063'. [ 542.268353][T18169] x_tables: ip_tables: ah match: only valid for protocol 51 [ 542.639969][T18029] Set syz1 is full, maxelem 65536 reached [ 542.791913][T18190] loop5: detected capacity change from 0 to 512 [ 542.814327][T18190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.902669][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.000719][T18216] x_tables: ip_tables: ah match: only valid for protocol 51 [ 543.146438][T18232] macvlan1: entered promiscuous mode [ 543.159872][T18232] ipvlan0: entered promiscuous mode [ 543.174515][T18232] ipvlan0: left promiscuous mode [ 543.184027][T18232] macvlan1: left promiscuous mode [ 543.418281][T18257] dvmrp0: entered allmulticast mode [ 543.447744][T18260] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 543.482002][T18258] x_tables: ip_tables: ah match: only valid for protocol 51 [ 543.757549][T18396] netlink: 324 bytes leftover after parsing attributes in process `syz.1.10117'. [ 543.822862][T18396] hub 2-0:1.0: USB hub found [ 543.832385][T18396] hub 2-0:1.0: 8 ports detected [ 543.875244][T18396] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10117'. [ 544.150732][T18595] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10126'. [ 544.202856][T18595] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10126'. [ 544.302028][T18641] x_tables: ip_tables: ah match: only valid for protocol 51 [ 544.492848][T18756] netlink: 'syz.3.10136': attribute type 10 has an invalid length. [ 544.501973][T18756] syz_tun: entered promiscuous mode [ 544.512017][T18756] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 544.522181][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10140'. [ 544.533229][T18762] netlink: 324 bytes leftover after parsing attributes in process `syz.1.10142'. [ 544.544345][T18765] netlink: 324 bytes leftover after parsing attributes in process `syz.5.10143'. [ 544.597648][T18765] hub 2-0:1.0: USB hub found [ 544.602791][T18765] hub 2-0:1.0: 8 ports detected [ 544.616856][T18765] loop5: detected capacity change from 0 to 512 [ 544.633242][T18765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 544.643181][T18765] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 544.656802][T18765] loop5: detected capacity change from 0 to 512 [ 544.667498][T18778] x_tables: ip_tables: ah match: only valid for protocol 51 [ 544.675068][T18765] ext4: Unknown parameter 'smackfshat' [ 544.696786][T18762] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10142'. [ 544.726870][T18765] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10143'. [ 544.786167][T18786] loop5: detected capacity change from 0 to 2048 [ 544.805006][T18786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 544.890903][T18798] sch_fq: defrate 0 ignored. [ 544.928794][T18796] SELinux: failed to load policy [ 545.045960][T18810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10158'. [ 545.064538][T18786] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 545.080540][T18786] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 545.092995][T18786] EXT4-fs (loop5): This should not happen!! Data will be lost [ 545.092995][T18786] [ 545.102647][T18786] EXT4-fs (loop5): Total free blocks count 0 [ 545.108710][T18786] EXT4-fs (loop5): Free/Dirty block details [ 545.114596][T18786] EXT4-fs (loop5): free_blocks=2415919104 [ 545.120401][T18786] EXT4-fs (loop5): dirty_blocks=8208 [ 545.125761][T18786] EXT4-fs (loop5): Block reservation details [ 545.131878][T18786] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 545.233871][T30114] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 545.391489][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 545.391502][ T29] audit: type=1400 audit(582.260:106213): avc: denied { read write } for pid=19045 comm="syz.5.10166" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 545.403149][ T3396] hid_parser_main: 25 callbacks suppressed [ 545.403227][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.434140][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.441736][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.449198][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.456637][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.464144][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.471681][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.479226][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.479632][ T29] audit: type=1400 audit(582.260:106214): avc: denied { open } for pid=19045 comm="syz.5.10166" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 545.486773][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.517079][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 545.579601][ T3396] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 545.703534][ T29] audit: type=1326 audit(582.596:106215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.727466][ T29] audit: type=1326 audit(582.596:106216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.750688][ T29] audit: type=1326 audit(582.596:106217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.774346][ T29] audit: type=1326 audit(582.596:106218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.797580][ T29] audit: type=1326 audit(582.596:106219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.797806][T19179] loop5: detected capacity change from 0 to 1024 [ 545.821279][ T29] audit: type=1326 audit(582.596:106220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.850248][ T29] audit: type=1326 audit(582.596:106221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.874150][ T29] audit: type=1326 audit(582.596:106222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19170 comm="syz.4.10180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699b2fefc9 code=0x7ffc0000 [ 545.880383][T19188] x_tables: ip_tables: ah match: only valid for protocol 51 [ 545.917340][T19179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.982962][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.050752][T19299] Falling back ldisc for ttyS3. [ 546.389476][T19540] loop5: detected capacity change from 0 to 1024 [ 546.396590][T19540] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 546.781919][T19674] loop5: detected capacity change from 0 to 512 [ 546.788893][T19674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.801932][T19674] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.10217: bad orphan inode 11 [ 546.815061][T19667] hub 2-0:1.0: USB hub found [ 546.821854][T19667] hub 2-0:1.0: 8 ports detected [ 546.827954][T19674] ext4_test_bit(bit=10, block=4) = 1 [ 546.833464][T19674] is_bad_inode(inode)=0 [ 546.837608][T19674] NEXT_ORPHAN(inode)=2080374784 [ 546.842550][T19674] max_ino=32 [ 546.845738][T19674] i_nlink=0 [ 546.849328][T19674] EXT4-fs (loop5): 1 truncate cleaned up [ 546.855524][T19674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.942103][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.975670][T19685] x_tables: ip_tables: ah match: only valid for protocol 51 [ 547.009031][T19705] loop5: detected capacity change from 0 to 1024 [ 547.026978][T19705] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 547.191124][T19807] netlink: 'syz.1.10228': attribute type 12 has an invalid length. [ 547.216840][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 547.262438][T19819] x_tables: ip_tables: ah match: only valid for protocol 51 [ 547.396049][T19927] loop5: detected capacity change from 0 to 2048 [ 547.415567][T19927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.497275][T19946] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10236: bg 0: block 345: padding at end of block bitmap is not set [ 547.512574][T19946] EXT4-fs (loop5): Remounting filesystem read-only [ 547.519196][T30114] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 547.763506][T20067] team0: Mode changed to "broadcast" [ 547.803636][T20065] Falling back ldisc for ttyS3. [ 548.181035][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.222183][T20195] ================================================================== [ 548.230306][T20195] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 548.240121][T20195] [ 548.242436][T20195] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 548.250503][T20195] tick_do_update_jiffies64+0x113/0x1c0 [ 548.256056][T20195] tick_nohz_handler+0x7f/0x2d0 [ 548.260912][T20195] __hrtimer_run_queues+0x20f/0x5a0 [ 548.266115][T20195] hrtimer_interrupt+0x21a/0x460 [ 548.271043][T20195] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 548.276941][T20195] sysvec_apic_timer_interrupt+0x6f/0x80 [ 548.282571][T20195] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.288544][T20195] kcsan_setup_watchpoint+0x415/0x430 [ 548.293911][T20195] page_vma_mapped_walk+0x110/0xde0 [ 548.299101][T20195] page_vma_mkclean_one+0x165/0x350 [ 548.304303][T20195] page_mkclean_one+0xdb/0x120 [ 548.309052][T20195] __rmap_walk_file+0x1ec/0x2b0 [ 548.313891][T20195] folio_mkclean+0x1bc/0x210 [ 548.318463][T20195] folio_clear_dirty_for_io+0xa5/0x3f0 [ 548.323916][T20195] mpage_process_page_bufs+0x400/0x620 [ 548.329392][T20195] mpage_prepare_extent_to_map+0x786/0xc00 [ 548.335190][T20195] ext4_do_writepages+0x708/0x2750 [ 548.340286][T20195] ext4_writepages+0x176/0x300 [ 548.345038][T20195] do_writepages+0x1c6/0x310 [ 548.349615][T20195] __writeback_single_inode+0x80/0x7c0 [ 548.355061][T20195] writeback_sb_inodes+0x48f/0xa30 [ 548.360163][T20195] __writeback_inodes_wb+0x94/0x1a0 [ 548.365345][T20195] wb_writeback+0x266/0x5c0 [ 548.369832][T20195] wb_workfn+0x4c9/0x910 [ 548.374062][T20195] process_scheduled_works+0x4ce/0x9d0 [ 548.379516][T20195] worker_thread+0x582/0x770 [ 548.384089][T20195] kthread+0x489/0x510 [ 548.388148][T20195] ret_from_fork+0x122/0x1b0 [ 548.392729][T20195] ret_from_fork_asm+0x1a/0x30 [ 548.397481][T20195] [ 548.399787][T20195] read to 0xffffffff868099c0 of 8 bytes by task 20195 on cpu 0: [ 548.407400][T20195] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 548.413638][T20195] count_shadow_nodes+0x6a/0x230 [ 548.418562][T20195] do_shrink_slab+0x63/0x680 [ 548.423153][T20195] shrink_slab+0x448/0x760 [ 548.427565][T20195] shrink_node+0x6c3/0x2120 [ 548.432056][T20195] do_try_to_free_pages+0x3f6/0xcd0 [ 548.437239][T20195] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 548.443118][T20195] try_charge_memcg+0x383/0xa10 [ 548.447961][T20195] obj_cgroup_charge_pages+0xa6/0x150 [ 548.453324][T20195] __memcg_kmem_charge_page+0x9f/0x170 [ 548.458780][T20195] __alloc_frozen_pages_noprof+0x188/0x360 [ 548.464588][T20195] alloc_pages_mpol+0xb3/0x260 [ 548.469340][T20195] alloc_pages_noprof+0x90/0x130 [ 548.474263][T20195] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 548.480067][T20195] __kvmalloc_node_noprof+0x483/0x670 [ 548.485439][T20195] ip_set_alloc+0x24/0x30 [ 548.489759][T20195] hash_netiface_create+0x282/0x740 [ 548.494949][T20195] ip_set_create+0x3cc/0x970 [ 548.499522][T20195] nfnetlink_rcv_msg+0x4c6/0x590 [ 548.504446][T20195] netlink_rcv_skb+0x123/0x220 [ 548.509202][T20195] nfnetlink_rcv+0x167/0x16c0 [ 548.513866][T20195] netlink_unicast+0x5c0/0x690 [ 548.518622][T20195] netlink_sendmsg+0x58b/0x6b0 [ 548.523371][T20195] __sock_sendmsg+0x145/0x180 [ 548.528036][T20195] ____sys_sendmsg+0x31e/0x4e0 [ 548.532793][T20195] ___sys_sendmsg+0x17b/0x1d0 [ 548.537461][T20195] __x64_sys_sendmsg+0xd4/0x160 [ 548.542314][T20195] x64_sys_call+0x191e/0x3000 [ 548.546975][T20195] do_syscall_64+0xd2/0x200 [ 548.551462][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.557340][T20195] [ 548.559678][T20195] value changed: 0x0000000100006a91 -> 0x0000000100006a92 [ 548.566763][T20195] [ 548.569065][T20195] Reported by Kernel Concurrency Sanitizer on: [ 548.575201][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.3.10267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 548.586657][T20195] Tainted: [W]=WARN [ 548.590446][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.600483][T20195] ================================================================== [ 548.891916][T20195] syz.3.10267 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 548.905947][T20195] CPU: 1 UID: 0 PID: 20195 Comm: syz.3.10267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 548.905984][T20195] Tainted: [W]=WARN [ 548.905991][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.906005][T20195] Call Trace: [ 548.906011][T20195] [ 548.906017][T20195] __dump_stack+0x1d/0x30 [ 548.906037][T20195] dump_stack_lvl+0xe8/0x140 [ 548.906104][T20195] dump_stack+0x15/0x1b [ 548.906181][T20195] dump_header+0x81/0x220 [ 548.906198][T20195] oom_kill_process+0x342/0x400 [ 548.906229][T20195] out_of_memory+0x979/0xb80 [ 548.906263][T20195] try_charge_memcg+0x610/0xa10 [ 548.906371][T20195] obj_cgroup_charge_pages+0xa6/0x150 [ 548.906396][T20195] __memcg_kmem_charge_page+0x9f/0x170 [ 548.906442][T20195] __alloc_frozen_pages_noprof+0x188/0x360 [ 548.906479][T20195] alloc_pages_mpol+0xb3/0x260 [ 548.906496][T20195] ? alloc_pages_noprof+0x61/0x130 [ 548.906520][T20195] alloc_pages_noprof+0x90/0x130 [ 548.906560][T20195] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 548.906637][T20195] __kvmalloc_node_noprof+0x483/0x670 [ 548.906669][T20195] ? ip_set_alloc+0x24/0x30 [ 548.906700][T20195] ? ip_set_alloc+0x24/0x30 [ 548.906776][T20195] ip_set_alloc+0x24/0x30 [ 548.906803][T20195] hash_netiface_create+0x282/0x740 [ 548.906837][T20195] ? __pfx_hash_netiface_create+0x10/0x10 [ 548.906941][T20195] ip_set_create+0x3cc/0x970 [ 548.906979][T20195] nfnetlink_rcv_msg+0x4c6/0x590 [ 548.907030][T20195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.907070][T20195] netlink_rcv_skb+0x123/0x220 [ 548.907106][T20195] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 548.907142][T20195] nfnetlink_rcv+0x167/0x16c0 [ 548.907170][T20195] ? kmem_cache_free+0xe4/0x3d0 [ 548.907197][T20195] ? __kfree_skb+0x109/0x150 [ 548.907241][T20195] ? nlmon_xmit+0x4f/0x60 [ 548.907282][T20195] ? consume_skb+0x49/0x150 [ 548.907311][T20195] ? nlmon_xmit+0x4f/0x60 [ 548.907334][T20195] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 548.907396][T20195] ? __dev_queue_xmit+0x1200/0x2000 [ 548.907423][T20195] ? __dev_queue_xmit+0x182/0x2000 [ 548.907556][T20195] ? ref_tracker_free+0x37d/0x3e0 [ 548.907599][T20195] ? __netlink_deliver_tap+0x4dc/0x500 [ 548.907678][T20195] netlink_unicast+0x5c0/0x690 [ 548.907708][T20195] netlink_sendmsg+0x58b/0x6b0 [ 548.907726][T20195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.907744][T20195] __sock_sendmsg+0x145/0x180 [ 548.907767][T20195] ____sys_sendmsg+0x31e/0x4e0 [ 548.907909][T20195] ___sys_sendmsg+0x17b/0x1d0 [ 548.907962][T20195] __x64_sys_sendmsg+0xd4/0x160 [ 548.907997][T20195] x64_sys_call+0x191e/0x3000 [ 548.908097][T20195] do_syscall_64+0xd2/0x200 [ 548.908113][T20195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 548.908137][T20195] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 548.908182][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.908202][T20195] RIP: 0033:0x7f214655efc9 [ 548.908215][T20195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.908232][T20195] RSP: 002b:00007f2144fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.908311][T20195] RAX: ffffffffffffffda RBX: 00007f21467b5fa0 RCX: 00007f214655efc9 [ 548.908323][T20195] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 548.908334][T20195] RBP: 00007f21465e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 548.908345][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.908359][T20195] R13: 00007f21467b6038 R14: 00007f21467b5fa0 R15: 00007ffe6be26bd8 [ 548.908457][T20195] [ 549.252680][T20195] memory: usage 307200kB, limit 307200kB, failcnt 9558 [ 549.259525][T20195] memory+swap: usage 359384kB, limit 9007199254740988kB, failcnt 0 [ 549.267597][T20195] kmem: usage 191448kB, limit 9007199254740988kB, failcnt 0 [ 549.274877][T20195] Memory cgroup stats for /syz3: [ 549.275335][T20195] cache 115429376 [ 549.284334][T20195] rss 3063808 [ 549.287591][T20195] shmem 34164736 [ 549.291134][T20195] mapped_file 0 [ 549.294566][T20195] dirty 0 [ 549.297476][T20195] writeback 0 [ 549.300750][T20195] workingset_refault_anon 11 [ 549.305340][T20195] workingset_refault_file 2909 [ 549.310418][T20195] swap 53436416 [ 549.313856][T20195] swapcached 32768 [ 549.317593][T20195] pgpgin 996211 [ 549.321090][T20195] pgpgout 967273 [ 549.324619][T20195] pgfault 988501 [ 549.328282][T20195] pgmajfault 22 [ 549.331717][T20195] inactive_anon 1617920 [ 549.335844][T20195] active_anon 35627008 [ 549.340314][T20195] inactive_file 0 [ 549.343932][T20195] active_file 266240 [ 549.347814][T20195] unevictable 81018880 [ 549.351856][T20195] hierarchical_memory_limit 314572800 [ 549.357250][T20195] hierarchical_memsw_limit 9223372036854771712 [ 549.363381][T20195] total_cache 115429376 [ 549.367862][T20195] total_rss 3063808 [ 549.371647][T20195] total_shmem 34164736 [ 549.375714][T20195] total_mapped_file 0 [ 549.379679][T20195] total_dirty 0 [ 549.383150][T20195] total_writeback 0 [ 549.386959][T20195] total_workingset_refault_anon 11 [ 549.392039][T20195] total_workingset_refault_file 2909 [ 549.397681][T20195] total_swap 53436416 [ 549.401639][T20195] total_swapcached 32768 [ 549.405884][T20195] total_pgpgin 996211 [ 549.409836][T20195] total_pgpgout 967273 [ 549.413958][T20195] total_pgfault 988501 [ 549.417997][T20195] total_pgmajfault 22 [ 549.421950][T20195] total_inactive_anon 1617920 [ 549.427055][T20195] total_active_anon 35627008 [ 549.431643][T20195] total_inactive_file 0 [ 549.435826][T20195] total_active_file 266240 [ 549.440216][T20195] total_unevictable 81018880 [ 549.444794][T20195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1169,pid=7928,uid=0 [ 549.459852][T20195] Memory cgroup out of memory: Killed process 7928 (syz.3.1169) total-vm:93824kB, anon-rss:1176kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 549.501577][T20195] syz.3.10267 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 549.516297][T20195] CPU: 1 UID: 0 PID: 20195 Comm: syz.3.10267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 549.516401][T20195] Tainted: [W]=WARN [ 549.516409][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.516423][T20195] Call Trace: [ 549.516430][T20195] [ 549.516438][T20195] __dump_stack+0x1d/0x30 [ 549.516498][T20195] dump_stack_lvl+0xe8/0x140 [ 549.516519][T20195] dump_stack+0x15/0x1b [ 549.516552][T20195] dump_header+0x81/0x220 [ 549.516569][T20195] oom_kill_process+0x342/0x400 [ 549.516596][T20195] out_of_memory+0x979/0xb80 [ 549.516628][T20195] try_charge_memcg+0x610/0xa10 [ 549.516715][T20195] obj_cgroup_charge_pages+0xa6/0x150 [ 549.516738][T20195] __memcg_kmem_charge_page+0x9f/0x170 [ 549.516762][T20195] __alloc_frozen_pages_noprof+0x188/0x360 [ 549.516863][T20195] alloc_pages_mpol+0xb3/0x260 [ 549.516897][T20195] ? alloc_pages_noprof+0x61/0x130 [ 549.516921][T20195] alloc_pages_noprof+0x90/0x130 [ 549.516943][T20195] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 549.517018][T20195] __kvmalloc_node_noprof+0x483/0x670 [ 549.517049][T20195] ? ip_set_alloc+0x24/0x30 [ 549.517088][T20195] ? ip_set_alloc+0x24/0x30 [ 549.517160][T20195] ip_set_alloc+0x24/0x30 [ 549.517188][T20195] hash_netiface_create+0x282/0x740 [ 549.517292][T20195] ? __pfx_hash_netiface_create+0x10/0x10 [ 549.517323][T20195] ip_set_create+0x3cc/0x970 [ 549.517357][T20195] nfnetlink_rcv_msg+0x4c6/0x590 [ 549.517382][T20195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.517451][T20195] netlink_rcv_skb+0x123/0x220 [ 549.517479][T20195] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 549.517581][T20195] nfnetlink_rcv+0x167/0x16c0 [ 549.517606][T20195] ? kmem_cache_free+0xe4/0x3d0 [ 549.517650][T20195] ? __kfree_skb+0x109/0x150 [ 549.517705][T20195] ? nlmon_xmit+0x4f/0x60 [ 549.517725][T20195] ? consume_skb+0x49/0x150 [ 549.517848][T20195] ? nlmon_xmit+0x4f/0x60 [ 549.517906][T20195] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 549.517975][T20195] ? __dev_queue_xmit+0x1200/0x2000 [ 549.518001][T20195] ? __dev_queue_xmit+0x182/0x2000 [ 549.518028][T20195] ? ref_tracker_free+0x37d/0x3e0 [ 549.518116][T20195] ? __netlink_deliver_tap+0x4dc/0x500 [ 549.518227][T20195] netlink_unicast+0x5c0/0x690 [ 549.518259][T20195] netlink_sendmsg+0x58b/0x6b0 [ 549.518279][T20195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.518297][T20195] __sock_sendmsg+0x145/0x180 [ 549.518348][T20195] ____sys_sendmsg+0x31e/0x4e0 [ 549.518426][T20195] ___sys_sendmsg+0x17b/0x1d0 [ 549.518616][T20195] __x64_sys_sendmsg+0xd4/0x160 [ 549.518691][T20195] x64_sys_call+0x191e/0x3000 [ 549.518710][T20195] do_syscall_64+0xd2/0x200 [ 549.518728][T20195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 549.518751][T20195] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 549.518779][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.518797][T20195] RIP: 0033:0x7f214655efc9 [ 549.518863][T20195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.518880][T20195] RSP: 002b:00007f2144fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.518901][T20195] RAX: ffffffffffffffda RBX: 00007f21467b5fa0 RCX: 00007f214655efc9 [ 549.518915][T20195] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 549.518975][T20195] RBP: 00007f21465e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.518986][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.518997][T20195] R13: 00007f21467b6038 R14: 00007f21467b5fa0 R15: 00007ffe6be26bd8 [ 549.519020][T20195] [ 549.863243][T20195] memory: usage 307200kB, limit 307200kB, failcnt 9666 [ 549.870202][T20195] memory+swap: usage 359208kB, limit 9007199254740988kB, failcnt 0 [ 549.878156][T20195] kmem: usage 191560kB, limit 9007199254740988kB, failcnt 0 [ 549.885557][T20195] Memory cgroup stats for /syz3: [ 549.886223][T20195] cache 115318784 [ 549.895522][T20195] rss 3059712 [ 549.898796][T20195] shmem 34164736 [ 549.902360][T20195] mapped_file 65536 [ 549.906210][T20195] dirty 0 [ 549.909161][T20195] writeback 0 [ 549.912527][T20195] workingset_refault_anon 11 [ 549.917140][T20195] workingset_refault_file 2950 [ 549.922556][T20195] swap 53256192 [ 549.926056][T20195] swapcached 32768 [ 549.929814][T20195] pgpgin 996252 [ 549.933262][T20195] pgpgout 967342 [ 549.936794][T20195] pgfault 988508 [ 549.940404][T20195] pgmajfault 26 [ 549.943957][T20195] inactive_anon 1613824 [ 549.948508][T20195] active_anon 35627008 [ 549.952554][T20195] inactive_file 143360 [ 549.956683][T20195] active_file 12288 [ 549.960477][T20195] unevictable 81018880 [ 549.964531][T20195] hierarchical_memory_limit 314572800 [ 549.969931][T20195] hierarchical_memsw_limit 9223372036854771712 [ 549.976779][T20195] total_cache 115318784 [ 549.980968][T20195] total_rss 3059712 [ 549.984879][T20195] total_shmem 34164736 [ 549.988970][T20195] total_mapped_file 65536 [ 549.993288][T20195] total_dirty 0 [ 549.996763][T20195] total_writeback 0 [ 550.000543][T20195] total_workingset_refault_anon 11 [ 550.006106][T20195] total_workingset_refault_file 2950 [ 550.011382][T20195] total_swap 53256192 [ 550.015385][T20195] total_swapcached 32768 [ 550.019644][T20195] total_pgpgin 996252 [ 550.023695][T20195] total_pgpgout 967342 [ 550.027780][T20195] total_pgfault 988508 [ 550.031895][T20195] total_pgmajfault 26 [ 550.036549][T20195] total_inactive_anon 1613824 [ 550.041211][T20195] total_active_anon 35627008 [ 550.045989][T20195] total_inactive_file 143360 [ 550.050597][T20195] total_active_file 12288 [ 550.055022][T20195] total_unevictable 81018880 [ 550.059587][T20195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1137,pid=7802,uid=0 [ 550.074636][T20195] Memory cgroup out of memory: Killed process 7802 (syz.3.1137) total-vm:93824kB, anon-rss:1304kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 550.429179][T20179] Set syz1 is full, maxelem 65536 reached