last executing test programs: 2.401294502s ago: executing program 1 (id=5531): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0x60) 2.400942022s ago: executing program 1 (id=5532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x148}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x48}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x90) 2.389382612s ago: executing program 1 (id=5533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000202010800000000000000000a0000031800028014000180070001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x48000) 2.368678992s ago: executing program 1 (id=5534): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, 0x0, 0x0, 0xe, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.305237139s ago: executing program 3 (id=5547): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000440)=[{0x3, 0x3, {0x2, 0xf0, 0x3}, {0x2, 0x1, 0x3}, 0x2, 0xff}, {0x3, 0x3, {0x0, 0xff, 0x1}, {0x2, 0xf0, 0x2}, 0xfd, 0x2}, {0x2, 0x2, {0x0, 0xf0}, {0x3, 0xf0, 0x1}, 0xff, 0x1}, {0x1, 0x3, {0x0, 0xff, 0x2}, {0x2, 0xff, 0x2}, 0x2}, {0x0, 0x0, {0x2, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0x9f86a390acebff7b}, {0x1, 0x1, {}, {0x1, 0x1, 0x2}, 0x2, 0xfe}, {0x1, 0x2, {0x1, 0xf0, 0x1}, {}, 0x0, 0xfd}], 0xe0) 1.289526079s ago: executing program 3 (id=5548): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000900)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00\xae|\x92/\x06\x81\xe2O \xd3\xb2O{b\x9e=M\x86\xc7{\x1c\x92\'\xe7\x0f\x18\x94B\x8d\x02\xfa\x864Lp\x10\xf83\xd1>_\xa6\xc2\xe3\xb0\xc6\x02S\xe1\xc0\xab\xd2\x92@\x1c\x9b\x01[3\x8e\xaf\x93\xcf7u\xef\xea\xf3\xcd\xffZ\x99O\x97\xc4\xe4\x8e7\xf2f', 0x2, 0x2c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x43, 0x0) timer_create(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00defffffffffffffff913b75fa73052ba000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, {0x1, @link_local}, 0x4, {0x2, 0x0, @multicast2}, 'lo\x00'}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) 1.164377391s ago: executing program 0 (id=5553): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x10, 0x140c, 0x501, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x14) 1.147765922s ago: executing program 0 (id=5554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4844}, 0x20) 1.104453443s ago: executing program 0 (id=5556): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x5, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) close(r1) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x8, 0x13, &(0x7f00000002c0)="b800000500000020", &(0x7f00000014c0)=""/19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xb423, 0x400, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x6, 0x4000, @fd_index=0xa, 0x2, 0x0, 0x0, 0x6, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2e, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0x10, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) io_uring_enter(r6, 0x3680, 0x58e3, 0x0, 0x0, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000001500)=0xf, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x19, 0x1ffffffffffffda9, &(0x7f00000016c0)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@jqfmt_vfsv1}, {@nogrpid}, {@orlov}, {@dax_always}, {@sysvgroups}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000016c0)='btrfs_convert_extent_bit\x00', r11}, 0x18) fspick(0xffffffffffffffff, 0x0, 0x0) 1.008732384s ago: executing program 0 (id=5559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="428280f46aa1d3f08a90b1e2e0dc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 944.207695ms ago: executing program 0 (id=5560): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000001240)=""/160, 0x1f, 0xa0, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x7e031, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0x5e, 0x0, 0x1}, 0x28) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x5, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r2 = getuid() getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0), 0x0, 0x607, &(0x7f0000001300)="$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") pread64(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x8) futex(0x0, 0x2, 0xffffffff, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x3, 0x2) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x47) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x458880, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000e40)=ANY=[@ANYRES8=r4, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES8=r0, @ANYBLOB="0ff77cd98353dfdc0db7ffdd9055410b6f448867abf16a94f745b2725c4f11fb6c6fd1d8bc684e6416f32fdd896a5e704bf2a5125139296a2eb82ea149645d0af08de6d7cb6f50a4a5336cd46b00d4b6de8f9db1642b328de6a11fdd4687cc1297375e4bcc3ec41a27b6a99bb4ec01d69ea8f319b7c5960210c0949385d26718d5cc2d4a7ebf069618d2d2827f58eaf3d4d84bb92e1eb664dff578d59af0b047a6372fd6c50ce9b84e497557594b658f2bbcb402a5d8b71b07ac49d6884d6b32d758c2d490ed20e15f"], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x46, "0040001e1d113c812e5d6000"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xd439, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) 932.334235ms ago: executing program 4 (id=5562): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2000000000000000}, 0x18) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r5, &(0x7f0000004200)='t', 0x1) unshare(0x8040600) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x40040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r10, 0x25, 0x13, @val=@netkit={@void, @value=r2}}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010849000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080000000000000014002b80080003000300000008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendfile(r5, r4, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$tipc(0x1e, 0x2, 0x0) timer_getoverrun(0x0) sendmsg$tipc(r11, 0x0, 0x24000801) rt_sigqueueinfo(0x0, 0x2f, &(0x7f00000002c0)={0xd, 0x4}) 911.806045ms ago: executing program 1 (id=5563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x1d9}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write$cgroup_pid(r11, &(0x7f0000000000), 0xffffff98) splice(r7, 0x0, r11, 0x0, 0x80, 0x4) write(r9, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0xb0, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x6e715b80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x2, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, @perf_config_ext={0x80, 0xffffffbfffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 871.311216ms ago: executing program 2 (id=5564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="0300f977030ffa030000004256fd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 404.379234ms ago: executing program 3 (id=5565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) 404.184354ms ago: executing program 2 (id=5566): r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x1, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7ffffffd, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x2) 403.985123ms ago: executing program 3 (id=5567): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 381.039404ms ago: executing program 2 (id=5568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="ac0000000000ec67838717bd86dd", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 380.568654ms ago: executing program 3 (id=5569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="64010000100001000000000000000000fc000000000000000000000000000001fe8800000000000000000000000001010000000000000000000000000000ac00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000001000000000000000000000000000000006c000000e000000200000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000004200000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x164}}, 0x0) 358.877674ms ago: executing program 2 (id=5570): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff7ff7}]}) clock_gettime(0x0, &(0x7f0000000080)) 292.409405ms ago: executing program 2 (id=5571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) 292.130885ms ago: executing program 3 (id=5572): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x9704, 0x0, 0x9, 0x0, 0x4, 0x3, 0x80000, 0x6, 0x2, 0xf1b, 0x0, 0x5, 0x2000000000000, 0x2, 0x4, 0x1, 0x0, 0x4000000, 0x3, 0xfff, 0x3, 0x1, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) dup3(r6, r4, 0x80000) pipe2$9p(&(0x7f0000000000), 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 291.851455ms ago: executing program 2 (id=5573): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, 0x0, 0x0, 0xe, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 175.946587ms ago: executing program 0 (id=5574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 124.293478ms ago: executing program 4 (id=5575): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x7e031, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0x5e, 0x0, 0x1}, 0x28) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x5, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r3 = getuid() getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0), 0x0, 0x607, &(0x7f0000001300)="$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") pread64(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x8) futex(0x0, 0x2, 0xffffffff, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x3, 0x2) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x47) syz_read_part_table(0x5c8, &(0x7f0000000600)="$eJzs2z1oE2gYB/Anaq6Hwrk4ORzWwclFcTSDlSQqCiHaRRwUFBEzRRAiBAQdbIaWZigdu5RCln5MTcPR4WhpoXMpHXoUOnQ62qXQpTl6fY+7sXdtD4TfD17er3/y5BkyvsF37Vz83u12MxHR7fn3n+5v5QsPr5XulZ9FZOJFRPT++tP04U0mJf761utpv5H242MXOwO7D7Kt9ad7N14uNM6l+89pXJpo95+4Oc7cZG7x8pev1eJgLfdurVjf+ra68mRqJ19uP240px9l779OuaU0X0jzh6jFp3gfr6ISlXgT1VOqP9ravHVwtdiafXt3v9AZmr+dcqUT9nnc+h97h5836303Z66M3KnNLZe3zx/lKv/h3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9vMrd4+cvXanGwlnu3VqxvfVtdeTK1ky+3Hzea04+y91/HLz2HuaWUv5DmD1GLT/E+XkUlKvEmqqdUf7S1eevgarE1+/bufqEzNH875Uonb/VY9T/2Dj9v1vtuzlwZuVObWy5vnz/KVXrO6AcAAAAAAAAAAAAAAAAAAABAROQLD6+V7pWfRWTiRUS0f+7786l/N713z6Tc9bTYSOfjYxc7A7sPsq31p3s3Xi40fkvnn9O4NNHu/2edH/5e/nj2XXFcfwQAAP//HQGWmQ==") openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x458880, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000e40)=ANY=[@ANYRES8=r5, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES32=r5, @ANYRES8=r1, @ANYBLOB="0ff77cd98353dfdc0db7ffdd9055410b6f448867abf16a94f745b2725c4f11fb6c6fd1d8bc684e6416f32fdd896a5e704bf2a5125139296a2eb82ea149645d0af08de6d7cb6f50a4a5336cd46b00d4b6de8f9db1642b328de6a11fdd4687cc1297375e4bcc3ec41a27b6a99bb4ec01d69ea8f319b7c5960210c0949385d26718d5cc2d4a7ebf069618d2d2827f58eaf3d4d84bb92e1eb664dff578d59af0b047a6372fd6c50ce9b84e497557594b658f2bbcb402a5d8b71b07ac49d6884d6b32d758c2d490ed20e15f"], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x46, "0040001e1d113c812e5d6000"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xd439, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) 88.373879ms ago: executing program 1 (id=5576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) 56.31457ms ago: executing program 4 (id=5577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x400, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x4, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3503}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@multicast1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x4}]}]}, 0x23c}}, 0x0) 355.2µs ago: executing program 4 (id=5578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="410c5bbca14ce79f33de0163e557", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 68.52µs ago: executing program 4 (id=5579): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x0, 0x96c9, 0x7, 0x20, 0x8, 0x1, 0x9}, 0xc) 0s ago: executing program 4 (id=5580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): ´à–ƒÝ¡¯ â·û [ 637.760884][T28888] ) failed (rc=-5) [ 638.520712][T28909] rdma_rxe: rxe_newlink: failed to add geneve1 [ 638.528472][T28909] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 639.037605][ T29] kauditd_printk_skb: 1238 callbacks suppressed [ 639.037619][ T29] audit: type=1326 audit(2010485838.176:63973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.067716][ T29] audit: type=1326 audit(2010485838.176:63974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.091405][ T29] audit: type=1326 audit(2010485838.176:63975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.114811][ T29] audit: type=1326 audit(2010485838.176:63976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.138559][ T29] audit: type=1326 audit(2010485838.176:63977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.162268][ T29] audit: type=1326 audit(2010485838.176:63978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.185917][ T29] audit: type=1326 audit(2010485838.176:63979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.209610][ T29] audit: type=1326 audit(2010485838.176:63980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.233242][ T29] audit: type=1326 audit(2010485838.176:63981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.256849][ T29] audit: type=1326 audit(2010485838.176:63982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28923 comm="syz.0.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 639.536658][T28866] Set syz1 is full, maxelem 65536 reached [ 639.682476][T28947] netlink: 'syz.4.4829': attribute type 10 has an invalid length. [ 639.692713][T28947] team0: Port device dummy0 added [ 639.719602][T28947] netlink: 'syz.4.4829': attribute type 10 has an invalid length. [ 639.728046][T28947] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 639.738307][T28947] team0: Failed to send options change via netlink (err -105) [ 639.746288][T28947] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 639.756745][T28947] team0: Port device dummy0 removed [ 639.851754][T28955] netlink: 'syz.1.4835': attribute type 13 has an invalid length. [ 639.927943][ T3393] lo speed is unknown, defaulting to 1000 [ 639.933875][ T3393] syz2: Port: 1 Link DOWN [ 641.319777][T28985] rdma_rxe: rxe_newlink: failed to add geneve1 [ 641.443306][T28995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4847'. [ 641.514268][T29002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 641.626231][T28995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4847'. [ 641.657043][T29020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4849'. [ 641.825006][T29033] netlink: 'syz.4.4852': attribute type 13 has an invalid length. [ 641.862035][T29033] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.890089][T29033] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 641.905993][T27740] lo speed is unknown, defaulting to 1000 [ 641.911945][T27740] sz1: Port: 1 Link ACTIVE [ 641.923285][ T3400] lo speed is unknown, defaulting to 1000 [ 641.973384][T29047] xt_hashlimit: max too large, truncated to 1048576 [ 642.016507][T29051] lo speed is unknown, defaulting to 1000 [ 642.024477][T29051] lo speed is unknown, defaulting to 1000 [ 642.031608][T29051] lo speed is unknown, defaulting to 1000 [ 642.037846][T29051] lo speed is unknown, defaulting to 1000 [ 642.044398][T29051] lo speed is unknown, defaulting to 1000 [ 642.419117][T29094] veth0: mtu less than device minimum [ 642.439474][T29094] xt_hashlimit: max too large, truncated to 1048576 [ 642.497474][T29099] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.537930][T29104] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 642.590027][T29107] tmpfs: Bad value for 'defcontext' [ 642.600680][T29113] lo speed is unknown, defaulting to 1000 [ 642.607110][T29113] lo speed is unknown, defaulting to 1000 [ 642.614759][T29113] lo speed is unknown, defaulting to 1000 [ 642.621464][T29113] lo speed is unknown, defaulting to 1000 [ 642.627723][T29113] lo speed is unknown, defaulting to 1000 [ 642.734001][T29112] rdma_rxe: rxe_newlink: failed to add geneve1 [ 642.736595][T29112] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 643.098032][T29162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4871'. [ 643.502200][T29181] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4877'. [ 643.519437][T29181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4877'. [ 643.533758][T29181] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4877'. [ 643.568325][T29186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.703174][T29198] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.734090][ T29] kauditd_printk_skb: 1384 callbacks suppressed [ 643.734104][ T29] audit: type=1326 audit(2011534419.200:65367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.775727][ T29] audit: type=1326 audit(2011534419.200:65368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.799575][ T29] audit: type=1326 audit(2011534419.200:65369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.823400][ T29] audit: type=1326 audit(2011534419.221:65370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.847167][ T29] audit: type=1326 audit(2011534419.221:65371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.870983][ T29] audit: type=1326 audit(2011534419.221:65372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.894909][ T29] audit: type=1326 audit(2011534419.221:65373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.919087][ T29] audit: type=1326 audit(2011534419.221:65374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.937488][T29208] bridge0: port 1(batadv1) entered blocking state [ 643.942844][ T29] audit: type=1326 audit(2011534419.221:65375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29196 comm="syz.3.4883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 643.942968][ T29] audit: type=1400 audit(2011534419.221:65376): avc: denied { ioctl } for pid=29196 comm="syz.3.4883" path="socket:[69258]" dev="sockfs" ino=69258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 643.948270][T29211] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4887'. [ 643.950143][T29208] bridge0: port 1(batadv1) entered disabled state [ 644.058024][T29208] batadv1: entered allmulticast mode [ 644.066767][T29208] batadv1: entered promiscuous mode [ 644.104948][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4886'. [ 644.387090][ T3330] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 644.396488][ T3330] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 646.076180][T29315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29315 comm=syz.0.4910 [ 646.124630][T29316] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 646.663394][T29339] program syz.3.4917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.054446][T29364] __nla_validate_parse: 2 callbacks suppressed [ 647.054514][T29364] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4924'. [ 647.687056][T29389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.757881][T29389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.786870][T29393] rdma_rxe: rxe_newlink: failed to add geneve1 [ 647.794219][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4930'. [ 647.803212][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4930'. [ 647.823627][T29393] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 647.932343][T29389] lo speed is unknown, defaulting to 1000 [ 647.946063][T29389] lo speed is unknown, defaulting to 1000 [ 647.979177][T29389] lo speed is unknown, defaulting to 1000 [ 648.002906][T29389] lo speed is unknown, defaulting to 1000 [ 648.024837][T29389] lo speed is unknown, defaulting to 1000 [ 648.226617][T29380] syz.1.4928 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 648.240484][T29380] CPU: 0 UID: 0 PID: 29380 Comm: syz.1.4928 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 648.240555][T29380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.240567][T29380] Call Trace: [ 648.240574][T29380] [ 648.240582][T29380] __dump_stack+0x1d/0x30 [ 648.240605][T29380] dump_stack_lvl+0xe8/0x140 [ 648.240698][T29380] dump_stack+0x15/0x1b [ 648.240717][T29380] dump_header+0x81/0x220 [ 648.240750][T29380] oom_kill_process+0x334/0x3f0 [ 648.240852][T29380] out_of_memory+0x979/0xb80 [ 648.240920][T29380] try_charge_memcg+0x5e6/0x9e0 [ 648.240969][T29380] obj_cgroup_charge_pages+0xa6/0x150 [ 648.241054][T29380] __memcg_kmem_charge_page+0x9f/0x170 [ 648.241088][T29380] __alloc_frozen_pages_noprof+0x188/0x360 [ 648.241128][T29380] alloc_pages_mpol+0xb3/0x250 [ 648.241191][T29380] alloc_pages_noprof+0x90/0x130 [ 648.241302][T29380] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 648.241349][T29380] __kvmalloc_node_noprof+0x30f/0x4e0 [ 648.241425][T29380] ? ip_set_alloc+0x1f/0x30 [ 648.241466][T29380] ? ip_set_alloc+0x1f/0x30 [ 648.241555][T29380] ip_set_alloc+0x1f/0x30 [ 648.241581][T29380] hash_netiface_create+0x282/0x740 [ 648.241623][T29380] ? __pfx_hash_netiface_create+0x10/0x10 [ 648.241664][T29380] ip_set_create+0x3c9/0x960 [ 648.241709][T29380] nfnetlink_rcv_msg+0x4c6/0x590 [ 648.241733][T29380] ? bpf_get_stack+0x33/0x50 [ 648.241797][T29380] ? selinux_capable+0x1f9/0x270 [ 648.241833][T29380] netlink_rcv_skb+0x123/0x220 [ 648.241950][T29380] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 648.241981][T29380] nfnetlink_rcv+0x16b/0x1690 [ 648.242086][T29380] ? bsearch+0x95/0xc0 [ 648.242186][T29380] ? __pfx_cmp_ex_search+0x10/0x10 [ 648.242224][T29380] ? copy_from_kernel_nofault+0x6a/0x200 [ 648.242314][T29380] ? cmp_ex_search+0x25/0x40 [ 648.242337][T29380] ? bsearch+0x95/0xc0 [ 648.242396][T29380] ? __pfx_cmp_ex_search+0x10/0x10 [ 648.242418][T29380] ? copy_from_kernel_nofault+0x6a/0x200 [ 648.242456][T29380] ? search_extable+0x53/0x80 [ 648.242530][T29380] ? copy_from_kernel_nofault+0x6a/0x200 [ 648.242566][T29380] ? copy_from_kernel_nofault+0x6a/0x200 [ 648.242603][T29380] ? fixup_exception+0x72e/0xd00 [ 648.242626][T29380] ? is_bpf_text_address+0x141/0x160 [ 648.242725][T29380] ? __rcu_read_unlock+0x34/0x70 [ 648.242749][T29380] ? unwind_next_frame+0xada/0xc80 [ 648.242810][T29380] ? spurious_kernel_fault+0xf4/0x4a0 [ 648.242842][T29380] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 648.242891][T29380] ? __bpf_get_stack+0x5ff/0x630 [ 648.242915][T29380] ? should_fail_ex+0x30/0x280 [ 648.242947][T29380] ? selinux_nlmsg_lookup+0x99/0x890 [ 648.243041][T29380] ? selinux_netlink_send+0x59f/0x5f0 [ 648.243133][T29380] ? __rcu_read_unlock+0x34/0x70 [ 648.243153][T29380] ? __netlink_lookup+0x266/0x2a0 [ 648.243239][T29380] netlink_unicast+0x5a8/0x680 [ 648.243278][T29380] netlink_sendmsg+0x58b/0x6b0 [ 648.243328][T29380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.243348][T29380] __sock_sendmsg+0x142/0x180 [ 648.243433][T29380] ____sys_sendmsg+0x31e/0x4e0 [ 648.243458][T29380] ___sys_sendmsg+0x17b/0x1d0 [ 648.243496][T29380] __x64_sys_sendmsg+0xd4/0x160 [ 648.243583][T29380] x64_sys_call+0x2999/0x2fb0 [ 648.243605][T29380] do_syscall_64+0xd2/0x200 [ 648.243673][T29380] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 648.243698][T29380] ? clear_bhb_loop+0x40/0x90 [ 648.243793][T29380] ? clear_bhb_loop+0x40/0x90 [ 648.243814][T29380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.243893][T29380] RIP: 0033:0x7fd68726e9a9 [ 648.243909][T29380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.243926][T29380] RSP: 002b:00007fd6858d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.243943][T29380] RAX: ffffffffffffffda RBX: 00007fd687495fa0 RCX: 00007fd68726e9a9 [ 648.243962][T29380] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 648.243974][T29380] RBP: 00007fd6872f0d69 R08: 0000000000000000 R09: 0000000000000000 [ 648.243988][T29380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.244001][T29380] R13: 0000000000000000 R14: 00007fd687495fa0 R15: 00007ffcc6854138 [ 648.244023][T29380] [ 648.648065][T29380] memory: usage 307200kB, limit 307200kB, failcnt 13306 [ 648.655094][T29380] memory+swap: usage 310104kB, limit 9007199254740988kB, failcnt 0 [ 648.663015][T29380] kmem: usage 239844kB, limit 9007199254740988kB, failcnt 0 [ 648.670385][T29380] Memory cgroup stats for /syz1: [ 648.710569][T29380] cache 68939776 [ 648.719429][T29380] rss 0 [ 648.722370][T29380] shmem 0 [ 648.725367][T29380] mapped_file 1052672 [ 648.729485][T29380] dirty 0 [ 648.732500][T29380] writeback 24576 [ 648.736176][T29380] workingset_refault_anon 5443 [ 648.741289][T29380] workingset_refault_file 9610 [ 648.746141][T29380] swap 2973696 [ 648.749506][T29380] swapcached 28672 [ 648.753255][T29380] pgpgin 736994 [ 648.756707][T29380] pgpgout 720155 [ 648.760287][T29380] pgfault 774546 [ 648.763942][T29380] pgmajfault 1956 [ 648.767596][T29380] inactive_anon 28672 [ 648.771641][T29380] active_anon 0 [ 648.775151][T29380] inactive_file 0 [ 648.778970][T29380] active_file 4096 [ 648.782800][T29380] unevictable 68939776 [ 648.786896][T29380] hierarchical_memory_limit 314572800 [ 648.792301][T29380] hierarchical_memsw_limit 9223372036854771712 [ 648.798776][T29380] total_cache 68939776 [ 648.803046][T29380] total_rss 0 [ 648.806363][T29380] total_shmem 0 [ 648.809867][T29380] total_mapped_file 1052672 [ 648.814363][T29380] total_dirty 0 [ 648.817899][T29380] total_writeback 24576 [ 648.822061][T29380] total_workingset_refault_anon 5443 [ 648.825391][ T29] kauditd_printk_skb: 1439 callbacks suppressed [ 648.825403][ T29] audit: type=1326 audit(2011534424.621:66816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.827367][T29380] total_workingset_refault_file 9610 [ 648.842094][ T29] audit: type=1326 audit(2011534424.631:66817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.857269][T29380] total_swap 2973696 [ 648.862615][ T29] audit: type=1326 audit(2011534424.631:66818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.886069][T29380] total_swapcached 28672 [ 648.889873][ T29] audit: type=1326 audit(2011534424.631:66819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.913473][T29380] total_pgpgin 736994 [ 648.917608][ T29] audit: type=1326 audit(2011534424.631:66820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.941117][T29380] total_pgpgout 720155 [ 648.941126][T29380] total_pgfault 774546 [ 648.941135][T29380] total_pgmajfault 1956 [ 648.945110][ T29] audit: type=1326 audit(2011534424.631:66821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.968601][T29380] total_inactive_anon 28672 [ 648.968612][T29380] total_active_anon 0 [ 648.968619][T29380] total_inactive_file 0 [ 648.968628][T29380] total_active_file 4096 [ 648.972684][ T29] audit: type=1326 audit(2011534424.631:66822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 648.976737][T29380] total_unevictable 68939776 [ 648.980857][ T29] audit: type=1326 audit(2011534424.631:66823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 649.004411][T29380] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 649.008868][ T29] audit: type=1326 audit(2011534424.631:66824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 649.012799][T29380] ,cpuset=/ [ 649.016944][ T29] audit: type=1326 audit(2011534424.631:66825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29424 comm="syz.0.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f76a943e9a9 code=0x7ffc0000 [ 649.130244][T29380] ,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4928,pid=29379,uid=0 [ 649.140433][T29380] Memory cgroup out of memory: Killed process 29379 (syz.1.4928) total-vm:93760kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 649.468896][T29448] IPv6: Can't replace route, no match found [ 649.569023][T29448] rdma_op ffff888103e93180 conn xmit_rdma 0000000000000000 [ 649.603681][T29454] netlink: 'syz.3.4939': attribute type 1 has an invalid length. [ 649.657874][T29450] rdma_rxe: rxe_newlink: failed to add geneve1 [ 649.722599][T29462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.729898][T29462] IPv6: NLM_F_CREATE should be set when creating new route [ 649.737147][T29462] IPv6: NLM_F_CREATE should be set when creating new route [ 649.824861][T29462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 650.053538][T29470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4944'. [ 650.299965][T29454] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 650.372465][T29481] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4946'. [ 650.677432][T29503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4955'. [ 651.778741][T29536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 652.227533][T29558] lo speed is unknown, defaulting to 1000 [ 652.234376][T29558] lo speed is unknown, defaulting to 1000 [ 652.241054][T29558] lo speed is unknown, defaulting to 1000 [ 652.255106][T29558] lo speed is unknown, defaulting to 1000 [ 652.261560][T29558] lo speed is unknown, defaulting to 1000 [ 652.352070][T29549] rdma_rxe: rxe_newlink: failed to add geneve1 [ 653.429553][T29596] syz.4.4979 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 653.443500][T29596] CPU: 1 UID: 0 PID: 29596 Comm: syz.4.4979 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 653.443538][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.443550][T29596] Call Trace: [ 653.443557][T29596] [ 653.443565][T29596] __dump_stack+0x1d/0x30 [ 653.443588][T29596] dump_stack_lvl+0xe8/0x140 [ 653.443611][T29596] dump_stack+0x15/0x1b [ 653.443687][T29596] dump_header+0x81/0x220 [ 653.443728][T29596] oom_kill_process+0x334/0x3f0 [ 653.443853][T29596] out_of_memory+0x979/0xb80 [ 653.443889][T29596] try_charge_memcg+0x5e6/0x9e0 [ 653.444005][T29596] obj_cgroup_charge_pages+0xa6/0x150 [ 653.444036][T29596] __memcg_kmem_charge_page+0x9f/0x170 [ 653.444065][T29596] __alloc_frozen_pages_noprof+0x188/0x360 [ 653.444102][T29596] alloc_pages_mpol+0xb3/0x250 [ 653.444135][T29596] alloc_pages_noprof+0x90/0x130 [ 653.444163][T29596] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 653.444250][T29596] __kvmalloc_node_noprof+0x30f/0x4e0 [ 653.444356][T29596] ? ip_set_alloc+0x1f/0x30 [ 653.444396][T29596] ? ip_set_alloc+0x1f/0x30 [ 653.444430][T29596] ip_set_alloc+0x1f/0x30 [ 653.444514][T29596] hash_netiface_create+0x282/0x740 [ 653.444546][T29596] ? __pfx_hash_netiface_create+0x10/0x10 [ 653.444580][T29596] ip_set_create+0x3c9/0x960 [ 653.444698][T29596] ? __nla_parse+0x40/0x60 [ 653.444715][T29596] nfnetlink_rcv_msg+0x4c6/0x590 [ 653.444763][T29596] ? selinux_capable+0x1f9/0x270 [ 653.444797][T29596] netlink_rcv_skb+0x123/0x220 [ 653.444903][T29596] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 653.445001][T29596] nfnetlink_rcv+0x16b/0x1690 [ 653.445042][T29596] ? __kfree_skb+0x109/0x150 [ 653.445076][T29596] ? nlmon_xmit+0x4f/0x60 [ 653.445145][T29596] ? consume_skb+0x49/0x150 [ 653.445179][T29596] ? nlmon_xmit+0x4f/0x60 [ 653.445215][T29596] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 653.445253][T29596] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 653.445270][T29596] ? __dev_queue_xmit+0x182/0x1fb0 [ 653.445289][T29596] ? perf_callchain_kernel+0x30b/0x330 [ 653.445383][T29596] ? ref_tracker_free+0x37d/0x3e0 [ 653.445425][T29596] ? __netlink_deliver_tap+0x4dc/0x500 [ 653.445451][T29596] netlink_unicast+0x5a8/0x680 [ 653.445493][T29596] netlink_sendmsg+0x58b/0x6b0 [ 653.445518][T29596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.445541][T29596] __sock_sendmsg+0x142/0x180 [ 653.445566][T29596] ____sys_sendmsg+0x31e/0x4e0 [ 653.445586][T29596] ___sys_sendmsg+0x17b/0x1d0 [ 653.445640][T29596] __x64_sys_sendmsg+0xd4/0x160 [ 653.445768][T29596] x64_sys_call+0x2999/0x2fb0 [ 653.445789][T29596] do_syscall_64+0xd2/0x200 [ 653.445808][T29596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 653.445886][T29596] ? clear_bhb_loop+0x40/0x90 [ 653.445924][T29596] ? clear_bhb_loop+0x40/0x90 [ 653.445991][T29596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.446016][T29596] RIP: 0033:0x7ff8de34e9a9 [ 653.446033][T29596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.446053][T29596] RSP: 002b:00007ff8dc9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.446146][T29596] RAX: ffffffffffffffda RBX: 00007ff8de575fa0 RCX: 00007ff8de34e9a9 [ 653.446160][T29596] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 653.446174][T29596] RBP: 00007ff8de3d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 653.446189][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.446202][T29596] R13: 0000000000000000 R14: 00007ff8de575fa0 R15: 00007fff29bf8aa8 [ 653.446224][T29596] [ 653.446232][T29596] memory: usage 307200kB, limit 307200kB, failcnt 15009 [ 653.797645][T29596] memory+swap: usage 376272kB, limit 9007199254740988kB, failcnt 0 [ 653.805533][T29596] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 653.812846][T29596] Memory cgroup stats for /syz4: [ 653.813173][T29596] cache 0 [ 653.821138][T29596] rss 0 [ 653.824117][T29596] shmem 0 [ 653.827152][T29596] mapped_file 0 [ 653.830663][T29596] dirty 0 [ 653.832794][ T29] kauditd_printk_skb: 1114 callbacks suppressed [ 653.832806][ T29] audit: type=1326 audit(2012058717.961:67940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.833583][T29596] writeback 0 [ 653.833592][T29596] workingset_refault_anon 4435 [ 653.833601][T29596] workingset_refault_file 8988 [ 653.839900][ T29] audit: type=1326 audit(2012058717.961:67941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.848861][ T29] audit: type=1326 audit(2012058717.982:67942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.862893][T29596] swap 70729728 [ 653.866255][ T29] audit: type=1326 audit(2012058717.982:67943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.870917][T29596] swapcached 0 [ 653.870926][T29596] pgpgin 783217 [ 653.875697][ T29] audit: type=1326 audit(2012058717.982:67944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.875752][ T29] audit: type=1326 audit(2012058717.982:67945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.898531][T29596] pgpgout 783216 [ 653.898540][T29596] pgfault 775663 [ 653.898547][T29596] pgmajfault 1432 [ 653.898555][T29596] inactive_anon 0 [ 653.898562][T29596] active_anon 0 [ 653.898570][T29596] inactive_file 0 [ 653.921412][ T29] audit: type=1326 audit(2012058717.982:67946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.924862][T29596] active_file 4096 [ 653.924871][T29596] unevictable 0 [ 653.947799][ T29] audit: type=1326 audit(2012058717.982:67947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.951109][T29596] hierarchical_memory_limit 314572800 [ 653.954557][ T29] audit: type=1326 audit(2012058717.982:67948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 653.977368][T29596] hierarchical_memsw_limit 9223372036854771712 [ 653.977378][T29596] total_cache 0 [ 653.977391][T29596] total_rss 0 [ 654.000057][ T29] audit: type=1326 audit(2012058717.982:67949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29634 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 654.003593][T29596] total_shmem 0 [ 654.003602][T29596] total_mapped_file 0 [ 654.146707][T29596] total_dirty 0 [ 654.150355][T29596] total_writeback 0 [ 654.154157][T29596] total_workingset_refault_anon 4435 [ 654.159468][T29596] total_workingset_refault_file 8988 [ 654.164825][T29596] total_swap 70729728 [ 654.168792][T29596] total_swapcached 0 [ 654.172750][T29596] total_pgpgin 783217 [ 654.176814][T29596] total_pgpgout 783216 [ 654.180919][T29596] total_pgfault 775663 [ 654.185013][T29596] total_pgmajfault 1432 [ 654.189159][T29596] total_inactive_anon 0 [ 654.193331][T29596] total_active_anon 0 [ 654.197797][T29596] total_inactive_file 0 [ 654.201984][T29596] total_active_file 4096 [ 654.206269][T29596] total_unevictable 0 [ 654.210276][T29596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1793,pid=13651,uid=0 [ 654.225002][T29596] Memory cgroup out of memory: Killed process 13651 (syz.4.1793) total-vm:93628kB, anon-rss:984kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 654.389821][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 654.400778][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 654.400803][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.400815][ T3313] Call Trace: [ 654.400836][ T3313] [ 654.400843][ T3313] __dump_stack+0x1d/0x30 [ 654.400870][ T3313] dump_stack_lvl+0xe8/0x140 [ 654.400888][ T3313] dump_stack+0x15/0x1b [ 654.400903][ T3313] dump_header+0x81/0x220 [ 654.400997][ T3313] oom_kill_process+0x334/0x3f0 [ 654.401028][ T3313] out_of_memory+0x979/0xb80 [ 654.401060][ T3313] try_charge_memcg+0x5e6/0x9e0 [ 654.401182][ T3313] charge_memcg+0x51/0xc0 [ 654.401212][ T3313] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 654.401255][ T3313] __read_swap_cache_async+0x1df/0x350 [ 654.401356][ T3313] swap_cluster_readahead+0x277/0x3e0 [ 654.401393][ T3313] swapin_readahead+0xde/0x6f0 [ 654.401424][ T3313] ? __filemap_get_folio+0x4f7/0x6b0 [ 654.401522][ T3313] ? swap_cache_get_folio+0x77/0x200 [ 654.401550][ T3313] do_swap_page+0x301/0x2430 [ 654.401570][ T3313] ? finish_task_switch+0xad/0x2b0 [ 654.401594][ T3313] ? __pfx_default_wake_function+0x10/0x10 [ 654.401700][ T3313] handle_mm_fault+0x9a5/0x2be0 [ 654.401720][ T3313] ? mas_walk+0xf2/0x120 [ 654.401813][ T3313] do_user_addr_fault+0x636/0x1090 [ 654.401844][ T3313] ? fpregs_restore_userregs+0xe2/0x1d0 [ 654.401870][ T3313] ? switch_fpu_return+0xe/0x20 [ 654.401971][ T3313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 654.401994][ T3313] exc_page_fault+0x62/0xa0 [ 654.402021][ T3313] asm_exc_page_fault+0x26/0x30 [ 654.402148][ T3313] RIP: 0033:0x7ff8de381225 [ 654.402164][ T3313] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 654.402182][ T3313] RSP: 002b:00007fff29bf8de8 EFLAGS: 00010246 [ 654.402198][ T3313] RAX: 0000000000000000 RBX: 0000000000000c25 RCX: 00007ff8de381223 [ 654.402212][ T3313] RDX: 00007fff29bf8e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.402243][ T3313] RBP: 00007fff29bf8e6c R08: 000000001f4bd666 R09: 0000000000000000 [ 654.402255][ T3313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 654.402268][ T3313] R13: 00000000000927c0 R14: 00000000000a8697 R15: 00007fff29bf8ec0 [ 654.402350][ T3313] [ 654.402356][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 15081 [ 654.632988][ T3313] memory+swap: usage 376084kB, limit 9007199254740988kB, failcnt 0 [ 654.640955][ T3313] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 654.648238][ T3313] Memory cgroup stats for /syz4: [ 654.648364][ T3313] cache 0 [ 654.656269][ T3313] rss 0 [ 654.659052][ T3313] shmem 0 [ 654.661972][ T3313] mapped_file 0 [ 654.665443][ T3313] dirty 0 [ 654.668365][ T3313] writeback 4096 [ 654.671965][ T3313] workingset_refault_anon 4437 [ 654.676702][ T3313] workingset_refault_file 8988 [ 654.681456][ T3313] swap 70537216 [ 654.684896][ T3313] swapcached 8192 [ 654.688508][ T3313] pgpgin 783219 [ 654.691964][ T3313] pgpgout 783216 [ 654.695501][ T3313] pgfault 775664 [ 654.699073][ T3313] pgmajfault 1433 [ 654.699872][T29669] rdma_rxe: rxe_newlink: failed to add geneve1 [ 654.702738][ T3313] inactive_anon 4096 [ 654.702748][ T3313] active_anon 4096 [ 654.712184][T29664] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 654.712782][ T3313] inactive_file 0 [ 654.712792][ T3313] active_file 4096 [ 654.731369][ T3313] unevictable 0 [ 654.734805][ T3313] hierarchical_memory_limit 314572800 [ 654.740165][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 654.746330][ T3313] total_cache 0 [ 654.749800][ T3313] total_rss 0 [ 654.753064][ T3313] total_shmem 0 [ 654.756576][ T3313] total_mapped_file 0 [ 654.760536][ T3313] total_dirty 0 [ 654.763994][ T3313] total_writeback 4096 [ 654.768053][ T3313] total_workingset_refault_anon 4437 [ 654.773344][ T3313] total_workingset_refault_file 8988 [ 654.778622][ T3313] total_swap 70537216 [ 654.782723][ T3313] total_swapcached 8192 [ 654.786870][ T3313] total_pgpgin 783219 [ 654.790828][ T3313] total_pgpgout 783216 [ 654.794940][ T3313] total_pgfault 775664 [ 654.799056][ T3313] total_pgmajfault 1433 [ 654.803271][ T3313] total_inactive_anon 4096 [ 654.807669][ T3313] total_active_anon 4096 [ 654.811960][ T3313] total_inactive_file 0 [ 654.816119][ T3313] total_active_file 4096 [ 654.820335][ T3313] total_unevictable 0 [ 654.824443][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=+}[@,pid=10328,uid=0 [ 654.838582][ T3313] Memory cgroup out of memory: Killed process 10328 (+}[@) total-vm:95676kB, anon-rss:984kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 654.863193][T29596] syz.4.4979 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 654.877221][T29596] CPU: 1 UID: 0 PID: 29596 Comm: syz.4.4979 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 654.877324][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.877338][T29596] Call Trace: [ 654.877344][T29596] [ 654.877352][T29596] __dump_stack+0x1d/0x30 [ 654.877433][T29596] dump_stack_lvl+0xe8/0x140 [ 654.877533][T29596] dump_stack+0x15/0x1b [ 654.877550][T29596] dump_header+0x81/0x220 [ 654.877580][T29596] oom_kill_process+0x334/0x3f0 [ 654.877609][T29596] out_of_memory+0x979/0xb80 [ 654.877712][T29596] try_charge_memcg+0x5e6/0x9e0 [ 654.877762][T29596] obj_cgroup_charge_pages+0xa6/0x150 [ 654.877793][T29596] __memcg_kmem_charge_page+0x9f/0x170 [ 654.877857][T29596] __alloc_frozen_pages_noprof+0x188/0x360 [ 654.877894][T29596] alloc_pages_mpol+0xb3/0x250 [ 654.877927][T29596] alloc_pages_noprof+0x90/0x130 [ 654.877955][T29596] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 654.877980][T29596] __kvmalloc_node_noprof+0x30f/0x4e0 [ 654.877996][T29596] ? ip_set_alloc+0x1f/0x30 [ 654.878012][T29596] ? ip_set_alloc+0x1f/0x30 [ 654.878061][T29596] ip_set_alloc+0x1f/0x30 [ 654.878077][T29596] hash_netiface_create+0x282/0x740 [ 654.878106][T29596] ? __pfx_hash_netiface_create+0x10/0x10 [ 654.878170][T29596] ip_set_create+0x3c9/0x960 [ 654.878194][T29596] ? __nla_parse+0x40/0x60 [ 654.878218][T29596] nfnetlink_rcv_msg+0x4c6/0x590 [ 654.878280][T29596] ? selinux_capable+0x1f9/0x270 [ 654.878297][T29596] netlink_rcv_skb+0x123/0x220 [ 654.878315][T29596] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 654.878340][T29596] nfnetlink_rcv+0x16b/0x1690 [ 654.878356][T29596] ? __kfree_skb+0x109/0x150 [ 654.878373][T29596] ? nlmon_xmit+0x4f/0x60 [ 654.878386][T29596] ? consume_skb+0x49/0x150 [ 654.878406][T29596] ? nlmon_xmit+0x4f/0x60 [ 654.878452][T29596] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 654.878505][T29596] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 654.878516][T29596] ? __dev_queue_xmit+0x182/0x1fb0 [ 654.878532][T29596] ? perf_callchain_kernel+0x30b/0x330 [ 654.878608][T29596] ? ref_tracker_free+0x37d/0x3e0 [ 654.878629][T29596] ? __netlink_deliver_tap+0x4dc/0x500 [ 654.878701][T29596] netlink_unicast+0x5a8/0x680 [ 654.878719][T29596] netlink_sendmsg+0x58b/0x6b0 [ 654.878732][T29596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.878817][T29596] __sock_sendmsg+0x142/0x180 [ 654.878831][T29596] ____sys_sendmsg+0x31e/0x4e0 [ 654.878844][T29596] ___sys_sendmsg+0x17b/0x1d0 [ 654.878863][T29596] __x64_sys_sendmsg+0xd4/0x160 [ 654.878915][T29596] x64_sys_call+0x2999/0x2fb0 [ 654.878927][T29596] do_syscall_64+0xd2/0x200 [ 654.878939][T29596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 654.879022][T29596] ? clear_bhb_loop+0x40/0x90 [ 654.879149][T29596] ? clear_bhb_loop+0x40/0x90 [ 654.879216][T29596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.879262][T29596] RIP: 0033:0x7ff8de34e9a9 [ 654.879274][T29596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.879311][T29596] RSP: 002b:00007ff8dc9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.879323][T29596] RAX: ffffffffffffffda RBX: 00007ff8de575fa0 RCX: 00007ff8de34e9a9 [ 654.879330][T29596] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 654.879338][T29596] RBP: 00007ff8de3d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 654.879345][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.879424][T29596] R13: 0000000000000000 R14: 00007ff8de575fa0 R15: 00007fff29bf8aa8 [ 654.879435][T29596] [ 654.879439][T29596] memory: usage 307200kB, limit 307200kB, failcnt 15103 [ 655.230371][T29596] memory+swap: usage 375864kB, limit 9007199254740988kB, failcnt 0 [ 655.238265][T29596] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 655.245540][T29596] Memory cgroup stats for /syz4: [ 655.245818][T29596] cache 0 [ 655.254010][T29596] rss 24576 [ 655.257155][T29596] shmem 0 [ 655.260078][T29596] mapped_file 0 [ 655.263584][T29596] dirty 0 [ 655.266504][T29596] writeback 0 [ 655.269792][T29596] workingset_refault_anon 4450 [ 655.274639][T29596] workingset_refault_file 8988 [ 655.279395][T29596] swap 70311936 [ 655.282871][T29596] swapcached 28672 [ 655.286577][T29596] pgpgin 783232 [ 655.290013][T29596] pgpgout 783219 [ 655.293599][T29596] pgfault 775681 [ 655.297118][T29596] pgmajfault 1442 [ 655.300735][T29596] inactive_anon 49152 [ 655.304745][T29596] active_anon 0 [ 655.308178][T29596] inactive_file 4096 [ 655.312059][T29596] active_file 0 [ 655.315496][T29596] unevictable 0 [ 655.318988][T29596] hierarchical_memory_limit 314572800 [ 655.324335][T29596] hierarchical_memsw_limit 9223372036854771712 [ 655.330518][T29596] total_cache 0 [ 655.333972][T29596] total_rss 24576 [ 655.337642][T29596] total_shmem 0 [ 655.341103][T29596] total_mapped_file 0 [ 655.345085][T29596] total_dirty 0 [ 655.348569][T29596] total_writeback 0 [ 655.352373][T29596] total_workingset_refault_anon 4450 [ 655.357673][T29596] total_workingset_refault_file 8988 [ 655.362976][T29596] total_swap 70311936 [ 655.366983][T29596] total_swapcached 28672 [ 655.371308][T29596] total_pgpgin 783232 [ 655.375284][T29596] total_pgpgout 783219 [ 655.379393][T29596] total_pgfault 775681 [ 655.383555][T29596] total_pgmajfault 1442 [ 655.387910][T29596] total_inactive_anon 49152 [ 655.392433][T29596] total_active_anon 0 [ 655.396468][T29596] total_inactive_file 4096 [ 655.400861][T29596] total_active_file 0 [ 655.404834][T29596] total_unevictable 0 [ 655.408841][T29596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.48,pid=3735,uid=0 [ 655.423330][T29596] Memory cgroup out of memory: Killed process 3735 (syz.4.48) total-vm:95676kB, anon-rss:984kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 655.500206][T29596] syz.4.4979 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 655.514113][T29596] CPU: 0 UID: 0 PID: 29596 Comm: syz.4.4979 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 655.514138][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.514189][T29596] Call Trace: [ 655.514197][T29596] [ 655.514205][T29596] __dump_stack+0x1d/0x30 [ 655.514226][T29596] dump_stack_lvl+0xe8/0x140 [ 655.514246][T29596] dump_stack+0x15/0x1b [ 655.514264][T29596] dump_header+0x81/0x220 [ 655.514300][T29596] oom_kill_process+0x334/0x3f0 [ 655.514329][T29596] out_of_memory+0x979/0xb80 [ 655.514400][T29596] try_charge_memcg+0x5e6/0x9e0 [ 655.514445][T29596] obj_cgroup_charge_pages+0xa6/0x150 [ 655.514544][T29596] __memcg_kmem_charge_page+0x9f/0x170 [ 655.514579][T29596] __alloc_frozen_pages_noprof+0x188/0x360 [ 655.514682][T29596] alloc_pages_mpol+0xb3/0x250 [ 655.514711][T29596] alloc_pages_noprof+0x90/0x130 [ 655.514741][T29596] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 655.514806][T29596] __kvmalloc_node_noprof+0x30f/0x4e0 [ 655.514833][T29596] ? ip_set_alloc+0x1f/0x30 [ 655.514861][T29596] ? ip_set_alloc+0x1f/0x30 [ 655.514937][T29596] ip_set_alloc+0x1f/0x30 [ 655.514966][T29596] hash_netiface_create+0x282/0x740 [ 655.515003][T29596] ? __pfx_hash_netiface_create+0x10/0x10 [ 655.515037][T29596] ip_set_create+0x3c9/0x960 [ 655.515128][T29596] ? __nla_parse+0x40/0x60 [ 655.515222][T29596] nfnetlink_rcv_msg+0x4c6/0x590 [ 655.515342][T29596] ? selinux_capable+0x1f9/0x270 [ 655.515428][T29596] netlink_rcv_skb+0x123/0x220 [ 655.515458][T29596] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 655.515504][T29596] nfnetlink_rcv+0x16b/0x1690 [ 655.515565][T29596] ? __kfree_skb+0x109/0x150 [ 655.515634][T29596] ? nlmon_xmit+0x4f/0x60 [ 655.515653][T29596] ? consume_skb+0x49/0x150 [ 655.515745][T29596] ? nlmon_xmit+0x4f/0x60 [ 655.515764][T29596] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 655.515803][T29596] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 655.515823][T29596] ? __dev_queue_xmit+0x182/0x1fb0 [ 655.515887][T29596] ? perf_callchain_kernel+0x30b/0x330 [ 655.515926][T29596] ? ref_tracker_free+0x37d/0x3e0 [ 655.516024][T29596] ? __netlink_deliver_tap+0x4dc/0x500 [ 655.516045][T29596] netlink_unicast+0x5a8/0x680 [ 655.516100][T29596] netlink_sendmsg+0x58b/0x6b0 [ 655.516121][T29596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.516140][T29596] __sock_sendmsg+0x142/0x180 [ 655.516165][T29596] ____sys_sendmsg+0x31e/0x4e0 [ 655.516256][T29596] ___sys_sendmsg+0x17b/0x1d0 [ 655.516289][T29596] __x64_sys_sendmsg+0xd4/0x160 [ 655.516333][T29596] x64_sys_call+0x2999/0x2fb0 [ 655.516355][T29596] do_syscall_64+0xd2/0x200 [ 655.516375][T29596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 655.516450][T29596] ? clear_bhb_loop+0x40/0x90 [ 655.516473][T29596] ? clear_bhb_loop+0x40/0x90 [ 655.516505][T29596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.516543][T29596] RIP: 0033:0x7ff8de34e9a9 [ 655.516636][T29596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.516653][T29596] RSP: 002b:00007ff8dc9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.516700][T29596] RAX: ffffffffffffffda RBX: 00007ff8de575fa0 RCX: 00007ff8de34e9a9 [ 655.516714][T29596] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 655.516803][T29596] RBP: 00007ff8de3d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 655.516874][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.516886][T29596] R13: 0000000000000000 R14: 00007ff8de575fa0 R15: 00007fff29bf8aa8 [ 655.516943][T29596] [ 655.858685][T29596] memory: usage 307200kB, limit 307200kB, failcnt 15285 [ 655.865697][T29596] memory+swap: usage 375728kB, limit 9007199254740988kB, failcnt 0 [ 655.873643][T29596] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 655.881050][T29596] Memory cgroup stats for /syz4: [ 655.883180][T29596] cache 0 [ 655.891131][T29596] rss 0 [ 655.894016][T29596] shmem 0 [ 655.896949][T29596] mapped_file 0 [ 655.900411][T29596] dirty 0 [ 655.903453][T29596] writeback 0 [ 655.906733][T29596] workingset_refault_anon 4459 [ 655.911595][T29596] workingset_refault_file 8988 [ 655.916415][T29596] swap 70172672 [ 655.919869][T29596] swapcached 12288 [ 655.923794][T29596] pgpgin 783241 [ 655.927257][T29596] pgpgout 783237 [ 655.930917][T29596] pgfault 775685 [ 655.934579][T29596] pgmajfault 1445 [ 655.938248][T29596] inactive_anon 8192 [ 655.942233][T29596] active_anon 4096 [ 655.946168][T29596] inactive_file 0 [ 655.949964][T29596] active_file 4096 [ 655.953685][T29596] unevictable 0 [ 655.957209][T29596] hierarchical_memory_limit 314572800 [ 655.962858][T29596] hierarchical_memsw_limit 9223372036854771712 [ 655.969103][T29596] total_cache 0 [ 655.972558][T29596] total_rss 0 [ 655.976030][T29596] total_shmem 0 [ 655.979569][T29596] total_mapped_file 0 [ 655.983643][T29596] total_dirty 0 [ 655.987106][T29596] total_writeback 0 [ 655.990966][T29596] total_workingset_refault_anon 4459 [ 655.996259][T29596] total_workingset_refault_file 8988 [ 656.001541][T29596] total_swap 70172672 [ 656.005587][T29596] total_swapcached 12288 [ 656.009803][T29596] total_pgpgin 783241 [ 656.013765][T29596] total_pgpgout 783237 [ 656.017848][T29596] total_pgfault 775685 [ 656.021940][T29596] total_pgmajfault 1445 [ 656.026164][T29596] total_inactive_anon 8192 [ 656.030591][T29596] total_active_anon 4096 [ 656.034908][T29596] total_inactive_file 0 [ 656.039059][T29596] total_active_file 4096 [ 656.043298][T29596] total_unevictable 0 [ 656.047255][T29596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1473,pid=11600,uid=0 [ 656.061954][T29596] Memory cgroup out of memory: Killed process 11600 (syz.4.1473) total-vm:95676kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 656.324799][T29706] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5018'. [ 656.336959][T29709] netlink: zone id is out of range [ 656.342200][T29709] netlink: set zone limit has 4 unknown bytes [ 656.354813][T29710] SELinux: Context system_u:object_r:lib_t:s0 is not valid (left unmapped). [ 656.392193][T29718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5024'. [ 656.401381][T29718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 656.489855][T29729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5027'. [ 657.093564][T29761] loop9: detected capacity change from 0 to 7 [ 657.099898][T29761] Buffer I/O error on dev loop9, logical block 0, async page read [ 657.107866][T29761] Buffer I/O error on dev loop9, logical block 0, async page read [ 657.115685][T29761] loop9: unable to read partition table [ 657.121379][T29761] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 657.121379][T29761] ) failed (rc=-5) [ 657.175293][T29768] openvswitch: netlink: Message has 6 unknown bytes. [ 657.359804][T29779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5042'. [ 657.368932][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 657.473251][T29792] bridge0: port 1(syz_tun) entered blocking state [ 657.479875][T29792] bridge0: port 1(syz_tun) entered disabled state [ 657.494777][T29792] syz_tun: entered allmulticast mode [ 657.501483][T29792] syz_tun: entered promiscuous mode [ 657.526034][T29792] lo speed is unknown, defaulting to 1000 [ 657.532142][T29792] lo speed is unknown, defaulting to 1000 [ 657.578149][T29792] lo speed is unknown, defaulting to 1000 [ 657.588255][T29792] lo speed is unknown, defaulting to 1000 [ 657.607155][T29792] lo speed is unknown, defaulting to 1000 [ 657.720318][T29785] lo speed is unknown, defaulting to 1000 [ 657.727834][T29785] lo speed is unknown, defaulting to 1000 [ 657.761485][T29785] lo speed is unknown, defaulting to 1000 [ 657.802916][T29785] lo speed is unknown, defaulting to 1000 [ 657.855249][T29785] lo speed is unknown, defaulting to 1000 [ 657.939759][T29848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.953925][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'. [ 658.667432][ T29] kauditd_printk_skb: 1179 callbacks suppressed [ 658.667446][ T29] audit: type=1326 audit(2013107299.122:69129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.728931][ T29] audit: type=1326 audit(2013107299.122:69130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.752520][ T29] audit: type=1326 audit(2013107299.122:69131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.776279][ T29] audit: type=1326 audit(2013107299.122:69132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.799941][ T29] audit: type=1326 audit(2013107299.122:69133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.823627][ T29] audit: type=1326 audit(2013107299.122:69134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.847289][ T29] audit: type=1326 audit(2013107299.122:69135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.870964][ T29] audit: type=1326 audit(2013107299.122:69136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.895298][ T29] audit: type=1326 audit(2013107299.122:69137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 658.919133][ T29] audit: type=1326 audit(2013107299.122:69138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29882 comm="syz.2.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 659.591348][T29923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.603204][T29923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5074'. [ 660.348609][T29925] syz.1.5076 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 660.362564][T29925] CPU: 0 UID: 0 PID: 29925 Comm: syz.1.5076 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 660.362645][T29925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.362658][T29925] Call Trace: [ 660.362699][T29925] [ 660.362709][T29925] __dump_stack+0x1d/0x30 [ 660.362729][T29925] dump_stack_lvl+0xe8/0x140 [ 660.362748][T29925] dump_stack+0x15/0x1b [ 660.362764][T29925] dump_header+0x81/0x220 [ 660.362863][T29925] oom_kill_process+0x334/0x3f0 [ 660.362892][T29925] out_of_memory+0x979/0xb80 [ 660.362924][T29925] try_charge_memcg+0x5e6/0x9e0 [ 660.363036][T29925] obj_cgroup_charge_pages+0xa6/0x150 [ 660.363144][T29925] __memcg_kmem_charge_page+0x9f/0x170 [ 660.363218][T29925] __alloc_frozen_pages_noprof+0x188/0x360 [ 660.363253][T29925] alloc_pages_mpol+0xb3/0x250 [ 660.363287][T29925] alloc_pages_noprof+0x90/0x130 [ 660.363370][T29925] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 660.363415][T29925] __kvmalloc_node_noprof+0x30f/0x4e0 [ 660.363441][T29925] ? ip_set_alloc+0x1f/0x30 [ 660.363540][T29925] ? ip_set_alloc+0x1f/0x30 [ 660.363593][T29925] ip_set_alloc+0x1f/0x30 [ 660.363620][T29925] hash_netiface_create+0x282/0x740 [ 660.363711][T29925] ? __pfx_hash_netiface_create+0x10/0x10 [ 660.363746][T29925] ip_set_create+0x3c9/0x960 [ 660.363838][T29925] ? __nla_parse+0x40/0x60 [ 660.363856][T29925] nfnetlink_rcv_msg+0x4c6/0x590 [ 660.363880][T29925] ? bpf_get_stack+0x33/0x50 [ 660.363930][T29925] ? selinux_capable+0x1f9/0x270 [ 660.363965][T29925] netlink_rcv_skb+0x123/0x220 [ 660.364077][T29925] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 660.364115][T29925] nfnetlink_rcv+0x16b/0x1690 [ 660.364144][T29925] ? bsearch+0x95/0xc0 [ 660.364228][T29925] ? __pfx_cmp_ex_search+0x10/0x10 [ 660.364264][T29925] ? copy_from_kernel_nofault+0x6a/0x200 [ 660.364297][T29925] ? cmp_ex_search+0x25/0x40 [ 660.364316][T29925] ? bsearch+0x95/0xc0 [ 660.364412][T29925] ? __pfx_cmp_ex_search+0x10/0x10 [ 660.364437][T29925] ? copy_from_kernel_nofault+0x6a/0x200 [ 660.364475][T29925] ? search_extable+0x53/0x80 [ 660.364494][T29925] ? copy_from_kernel_nofault+0x6a/0x200 [ 660.364527][T29925] ? copy_from_kernel_nofault+0x6a/0x200 [ 660.364617][T29925] ? fixup_exception+0x72e/0xd00 [ 660.364637][T29925] ? spurious_kernel_fault+0xf4/0x4a0 [ 660.364672][T29925] ? spurious_kernel_fault+0xf4/0x4a0 [ 660.364712][T29925] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 660.364783][T29925] ? __bpf_get_stack+0x5ff/0x630 [ 660.364808][T29925] ? should_fail_ex+0x30/0x280 [ 660.364836][T29925] ? selinux_nlmsg_lookup+0x99/0x890 [ 660.364875][T29925] ? selinux_netlink_send+0x59f/0x5f0 [ 660.364959][T29925] ? __rcu_read_unlock+0x34/0x70 [ 660.365029][T29925] ? __netlink_lookup+0x266/0x2a0 [ 660.365053][T29925] netlink_unicast+0x5a8/0x680 [ 660.365092][T29925] netlink_sendmsg+0x58b/0x6b0 [ 660.365113][T29925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.365144][T29925] __sock_sendmsg+0x142/0x180 [ 660.365172][T29925] ____sys_sendmsg+0x31e/0x4e0 [ 660.365209][T29925] ___sys_sendmsg+0x17b/0x1d0 [ 660.365250][T29925] __x64_sys_sendmsg+0xd4/0x160 [ 660.365301][T29925] x64_sys_call+0x2999/0x2fb0 [ 660.365321][T29925] do_syscall_64+0xd2/0x200 [ 660.365338][T29925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 660.365435][T29925] ? clear_bhb_loop+0x40/0x90 [ 660.365455][T29925] ? clear_bhb_loop+0x40/0x90 [ 660.365476][T29925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.365500][T29925] RIP: 0033:0x7fd68726e9a9 [ 660.365584][T29925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.365601][T29925] RSP: 002b:00007fd6858d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.365622][T29925] RAX: ffffffffffffffda RBX: 00007fd687495fa0 RCX: 00007fd68726e9a9 [ 660.365640][T29925] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 660.365654][T29925] RBP: 00007fd6872f0d69 R08: 0000000000000000 R09: 0000000000000000 [ 660.365669][T29925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.365681][T29925] R13: 0000000000000000 R14: 00007fd687495fa0 R15: 00007ffcc6854138 [ 660.365705][T29925] [ 660.365713][T29925] memory: usage 307200kB, limit 307200kB, failcnt 18043 [ 660.772886][T29925] memory+swap: usage 326428kB, limit 9007199254740988kB, failcnt 0 [ 660.780870][T29925] kmem: usage 239836kB, limit 9007199254740988kB, failcnt 0 [ 660.788169][T29925] Memory cgroup stats for /syz1: [ 660.789004][T29925] cache 68943872 [ 660.797741][T29925] rss 4096 [ 660.800874][T29925] shmem 0 [ 660.803910][T29925] mapped_file 1056768 [ 660.807893][T29925] dirty 0 [ 660.810808][T29925] writeback 0 [ 660.814212][T29925] workingset_refault_anon 5607 [ 660.818953][T29925] workingset_refault_file 9677 [ 660.823822][T29925] swap 19718144 [ 660.827277][T29925] swapcached 4096 [ 660.831035][T29925] pgpgin 763076 [ 660.834478][T29925] pgpgout 746242 [ 660.838019][T29925] pgfault 819498 [ 660.841595][T29925] pgmajfault 2064 [ 660.845287][T29925] inactive_anon 4096 [ 660.849330][T29925] active_anon 0 [ 660.852765][T29925] inactive_file 4096 [ 660.856635][T29925] active_file 4096 [ 660.860372][T29925] unevictable 68939776 [ 660.864417][T29925] hierarchical_memory_limit 314572800 [ 660.869851][T29925] hierarchical_memsw_limit 9223372036854771712 [ 660.875979][T29925] total_cache 68943872 [ 660.880116][T29925] total_rss 4096 [ 660.883702][T29925] total_shmem 0 [ 660.887172][T29925] total_mapped_file 1056768 [ 660.891699][T29925] total_dirty 0 [ 660.895133][T29925] total_writeback 0 [ 660.898968][T29925] total_workingset_refault_anon 5607 [ 660.904241][T29925] total_workingset_refault_file 9677 [ 660.909551][T29925] total_swap 19718144 [ 660.913587][T29925] total_swapcached 4096 [ 660.917819][T29925] total_pgpgin 763076 [ 660.921787][T29925] total_pgpgout 746242 [ 660.925859][T29925] total_pgfault 819498 [ 660.929911][T29925] total_pgmajfault 2064 [ 660.934071][T29925] total_inactive_anon 4096 [ 660.938467][T29925] total_active_anon 0 [ 660.942421][T29925] total_inactive_file 4096 [ 660.946842][T29925] total_active_file 4096 [ 660.951059][T29925] total_unevictable 68939776 [ 660.955648][T29925] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5076,pid=29924,uid=0 [ 660.970381][T29925] Memory cgroup out of memory: Killed process 29924 (syz.1.5076) total-vm:98128kB, anon-rss:1068kB, file-rss:26408kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 661.624723][T29974] rdma_rxe: rxe_newlink: failed to add geneve1 [ 661.632138][T29974] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 662.272211][T30004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.284684][T30004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.079381][T30042] rdma_rxe: rxe_newlink: failed to add geneve1 [ 663.100170][T30042] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 663.680881][ T29] kauditd_printk_skb: 1490 callbacks suppressed [ 663.680894][ T29] audit: type=1326 audit(2014680168.461:70629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.758710][ T29] audit: type=1326 audit(2014680168.461:70630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.782491][ T29] audit: type=1326 audit(2014680168.461:70631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.806356][ T29] audit: type=1326 audit(2014680168.461:70632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.830097][ T29] audit: type=1326 audit(2014680168.461:70633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.854016][ T29] audit: type=1326 audit(2014680168.461:70634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.878032][ T29] audit: type=1326 audit(2014680168.461:70635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.895519][T30062] rdma_rxe: rxe_newlink: failed to add geneve1 [ 663.901650][ T29] audit: type=1326 audit(2014680168.461:70636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.931654][ T29] audit: type=1326 audit(2014680168.461:70637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff8de34e9a9 code=0x7ffc0000 [ 663.955389][ T29] audit: type=1326 audit(2014680168.461:70638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.4.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8de34e9e3 code=0x7ffc0000 [ 663.984037][T30062] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 664.755709][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 664.766724][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 664.766752][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 664.766832][ T3303] Call Trace: [ 664.766897][ T3303] [ 664.766905][ T3303] __dump_stack+0x1d/0x30 [ 664.766940][ T3303] dump_stack_lvl+0xe8/0x140 [ 664.766961][ T3303] dump_stack+0x15/0x1b [ 664.766978][ T3303] dump_header+0x81/0x220 [ 664.767011][ T3303] oom_kill_process+0x334/0x3f0 [ 664.767081][ T3303] out_of_memory+0x979/0xb80 [ 664.767113][ T3303] try_charge_memcg+0x5e6/0x9e0 [ 664.767186][ T3303] charge_memcg+0x51/0xc0 [ 664.767218][ T3303] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 664.767259][ T3303] __read_swap_cache_async+0x1df/0x350 [ 664.767324][ T3303] swap_cluster_readahead+0x277/0x3e0 [ 664.767362][ T3303] swapin_readahead+0xde/0x6f0 [ 664.767396][ T3303] ? __filemap_get_folio+0x4f7/0x6b0 [ 664.767429][ T3303] ? swap_cache_get_folio+0x77/0x200 [ 664.767460][ T3303] do_swap_page+0x301/0x2430 [ 664.767480][ T3303] ? finish_task_switch+0xad/0x2b0 [ 664.767531][ T3303] ? __pfx_default_wake_function+0x10/0x10 [ 664.767558][ T3303] handle_mm_fault+0x9a5/0x2be0 [ 664.767582][ T3303] ? mas_walk+0xf2/0x120 [ 664.767621][ T3303] do_user_addr_fault+0x636/0x1090 [ 664.767734][ T3303] ? fpregs_restore_userregs+0xe2/0x1d0 [ 664.767765][ T3303] ? switch_fpu_return+0xe/0x20 [ 664.767797][ T3303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 664.767825][ T3303] exc_page_fault+0x62/0xa0 [ 664.767857][ T3303] asm_exc_page_fault+0x26/0x30 [ 664.767879][ T3303] RIP: 0033:0x7fd6872a1225 [ 664.767970][ T3303] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 664.767988][ T3303] RSP: 002b:00007ffcc6854478 EFLAGS: 00010246 [ 664.768003][ T3303] RAX: 0000000000000000 RBX: 0000000000000d1c RCX: 00007fd6872a1223 [ 664.768014][ T3303] RDX: 00007ffcc6854490 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.768025][ T3303] RBP: 00007ffcc68544fc R08: 0000000022390884 R09: 0000000000000000 [ 664.768036][ T3303] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 664.768047][ T3303] R13: 00000000000927c0 R14: 00000000000ab606 R15: 00007ffcc6854550 [ 664.768068][ T3303] [ 664.768109][ T3303] memory: usage 307200kB, limit 307200kB, failcnt 18274 [ 664.999043][ T3303] memory+swap: usage 310060kB, limit 9007199254740988kB, failcnt 0 [ 665.006987][ T3303] kmem: usage 239864kB, limit 9007199254740988kB, failcnt 0 [ 665.014303][ T3303] Memory cgroup stats for /syz1: [ 665.014833][ T3303] cache 68939776 [ 665.023328][ T3303] rss 0 [ 665.026153][ T3303] shmem 0 [ 665.029149][ T3303] mapped_file 1052672 [ 665.033160][ T3303] dirty 0 [ 665.036087][ T3303] writeback 0 [ 665.039386][ T3303] workingset_refault_anon 5643 [ 665.044141][ T3303] workingset_refault_file 9709 [ 665.048919][ T3303] swap 2928640 [ 665.052325][ T3303] swapcached 8192 [ 665.055947][ T3303] pgpgin 770526 [ 665.059420][ T3303] pgpgout 753692 [ 665.063049][ T3303] pgfault 827881 [ 665.066678][ T3303] pgmajfault 2080 [ 665.070358][ T3303] inactive_anon 0 [ 665.073970][ T3303] active_anon 8192 [ 665.077682][ T3303] inactive_file 0 [ 665.081333][ T3303] active_file 4096 [ 665.085037][ T3303] unevictable 68939776 [ 665.089110][ T3303] hierarchical_memory_limit 314572800 [ 665.094459][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 665.100658][ T3303] total_cache 68939776 [ 665.104723][ T3303] total_rss 0 [ 665.108006][ T3303] total_shmem 0 [ 665.111439][ T3303] total_mapped_file 1052672 [ 665.115951][ T3303] total_dirty 0 [ 665.119458][ T3303] total_writeback 0 [ 665.123272][ T3303] total_workingset_refault_anon 5643 [ 665.128563][ T3303] total_workingset_refault_file 9709 [ 665.133845][ T3303] total_swap 2928640 [ 665.137716][ T3303] total_swapcached 8192 [ 665.141865][ T3303] total_pgpgin 770526 [ 665.145872][ T3303] total_pgpgout 753692 [ 665.149921][ T3303] total_pgfault 827881 [ 665.153983][ T3303] total_pgmajfault 2080 [ 665.158117][ T3303] total_inactive_anon 0 [ 665.162268][ T3303] total_active_anon 8192 [ 665.166505][ T3303] total_inactive_file 0 [ 665.170670][ T3303] total_active_file 4096 [ 665.174919][ T3303] total_unevictable 68939776 [ 665.179560][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5128,pid=30081,uid=0 [ 665.194265][ T3303] Memory cgroup out of memory: Killed process 30081 (syz.1.5128) total-vm:93760kB, anon-rss:940kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 665.439519][T30124] rdma_rxe: rxe_newlink: failed to add geneve1 [ 665.447429][T30124] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 665.500101][T30128] loop9: detected capacity change from 0 to 7 [ 665.514654][T30128] Buffer I/O error on dev loop9, logical block 0, async page read [ 665.532334][T30128] Buffer I/O error on dev loop9, logical block 0, async page read [ 665.540235][T30128] loop9: unable to read partition table [ 665.546799][T30128] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 665.546799][T30128] ) failed (rc=-5) [ 665.713972][T30142] rdma_rxe: rxe_newlink: failed to add geneve1 [ 665.722113][T30142] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 666.140589][T30176] program syz.3.5159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.220253][T30180] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 666.230874][T30180] SELinux: failed to load policy [ 666.533080][T30164] syz.1.5157 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 666.546955][T30164] CPU: 0 UID: 0 PID: 30164 Comm: syz.1.5157 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 666.546983][T30164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.547042][T30164] Call Trace: [ 666.547050][T30164] [ 666.547068][T30164] __dump_stack+0x1d/0x30 [ 666.547093][T30164] dump_stack_lvl+0xe8/0x140 [ 666.547116][T30164] dump_stack+0x15/0x1b [ 666.547134][T30164] dump_header+0x81/0x220 [ 666.547304][T30164] oom_kill_process+0x334/0x3f0 [ 666.547334][T30164] out_of_memory+0x979/0xb80 [ 666.547393][T30164] try_charge_memcg+0x5e6/0x9e0 [ 666.547481][T30164] obj_cgroup_charge_pages+0xa6/0x150 [ 666.547512][T30164] __memcg_kmem_charge_page+0x9f/0x170 [ 666.547540][T30164] __alloc_frozen_pages_noprof+0x188/0x360 [ 666.547618][T30164] alloc_pages_mpol+0xb3/0x250 [ 666.547720][T30164] alloc_pages_noprof+0x90/0x130 [ 666.547799][T30164] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 666.547935][T30164] __kvmalloc_node_noprof+0x30f/0x4e0 [ 666.547963][T30164] ? ip_set_alloc+0x1f/0x30 [ 666.547990][T30164] ? ip_set_alloc+0x1f/0x30 [ 666.548025][T30164] ip_set_alloc+0x1f/0x30 [ 666.548073][T30164] hash_netiface_create+0x282/0x740 [ 666.548111][T30164] ? __pfx_hash_netiface_create+0x10/0x10 [ 666.548288][T30164] ip_set_create+0x3c9/0x960 [ 666.548336][T30164] ? __nla_parse+0x40/0x60 [ 666.548358][T30164] nfnetlink_rcv_msg+0x4c6/0x590 [ 666.548438][T30164] ? htab_map_hash+0x15f/0x1d0 [ 666.548485][T30164] ? selinux_capable+0x1f9/0x270 [ 666.548583][T30164] netlink_rcv_skb+0x123/0x220 [ 666.548620][T30164] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 666.548657][T30164] nfnetlink_rcv+0x16b/0x1690 [ 666.548681][T30164] ? bsearch+0x95/0xc0 [ 666.548798][T30164] ? __pfx_cmp_ex_search+0x10/0x10 [ 666.548823][T30164] ? copy_from_kernel_nofault+0x6a/0x200 [ 666.548859][T30164] ? cmp_ex_search+0x25/0x40 [ 666.548895][T30164] ? bsearch+0x95/0xc0 [ 666.548913][T30164] ? __pfx_cmp_ex_search+0x10/0x10 [ 666.548933][T30164] ? copy_from_kernel_nofault+0x6a/0x200 [ 666.548997][T30164] ? search_extable+0x53/0x80 [ 666.549019][T30164] ? copy_from_kernel_nofault+0x6a/0x200 [ 666.549111][T30164] ? __rcu_read_unlock+0x34/0x70 [ 666.549135][T30164] ? bpf_prog_8609e4581ee7ade4+0x39/0x49 [ 666.549155][T30164] ? is_bpf_text_address+0x141/0x160 [ 666.549194][T30164] ? kernel_text_address+0x94/0xb0 [ 666.549227][T30164] ? __kernel_text_address+0xd/0x40 [ 666.549250][T30164] ? unwind_get_return_address+0x16/0x40 [ 666.549275][T30164] ? perf_callchain_kernel+0x30b/0x330 [ 666.549383][T30164] ? bcmp+0x2e/0x90 [ 666.549404][T30164] ? __bpf_get_stackid+0x7d4/0x800 [ 666.549447][T30164] ? should_fail_ex+0x30/0x280 [ 666.549483][T30164] ? selinux_nlmsg_lookup+0x99/0x890 [ 666.549518][T30164] ? selinux_netlink_send+0x59f/0x5f0 [ 666.549611][T30164] ? __rcu_read_unlock+0x34/0x70 [ 666.549632][T30164] ? __netlink_lookup+0x266/0x2a0 [ 666.549655][T30164] netlink_unicast+0x5a8/0x680 [ 666.549736][T30164] netlink_sendmsg+0x58b/0x6b0 [ 666.549757][T30164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.549839][T30164] __sock_sendmsg+0x142/0x180 [ 666.549867][T30164] ____sys_sendmsg+0x31e/0x4e0 [ 666.549914][T30164] ___sys_sendmsg+0x17b/0x1d0 [ 666.550018][T30164] __x64_sys_sendmsg+0xd4/0x160 [ 666.550046][T30164] x64_sys_call+0x2999/0x2fb0 [ 666.550078][T30164] do_syscall_64+0xd2/0x200 [ 666.550099][T30164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 666.550125][T30164] ? clear_bhb_loop+0x40/0x90 [ 666.550216][T30164] ? clear_bhb_loop+0x40/0x90 [ 666.550236][T30164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.550256][T30164] RIP: 0033:0x7fd68726e9a9 [ 666.550271][T30164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.550288][T30164] RSP: 002b:00007fd6858d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.550373][T30164] RAX: ffffffffffffffda RBX: 00007fd687495fa0 RCX: 00007fd68726e9a9 [ 666.550386][T30164] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 666.550399][T30164] RBP: 00007fd6872f0d69 R08: 0000000000000000 R09: 0000000000000000 [ 666.550412][T30164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.550427][T30164] R13: 0000000000000000 R14: 00007fd687495fa0 R15: 00007ffcc6854138 [ 666.550446][T30164] [ 666.550453][T30164] memory: usage 307200kB, limit 307200kB, failcnt 22402 [ 666.970138][T30164] memory+swap: usage 326452kB, limit 9007199254740988kB, failcnt 0 [ 666.978157][T30164] kmem: usage 239864kB, limit 9007199254740988kB, failcnt 0 [ 666.985541][T30164] Memory cgroup stats for /syz1: [ 666.987930][T30164] cache 68939776 [ 666.996428][T30164] rss 0 [ 666.999188][T30164] shmem 0 [ 667.002190][T30164] mapped_file 1052672 [ 667.006173][T30164] dirty 0 [ 667.009114][T30164] writeback 0 [ 667.012522][T30164] workingset_refault_anon 5748 [ 667.017263][T30164] workingset_refault_file 9789 [ 667.022055][T30164] swap 19714048 [ 667.025490][T30164] swapcached 8192 [ 667.029168][T30164] pgpgin 775726 [ 667.032619][T30164] pgpgout 758892 [ 667.036142][T30164] pgfault 837430 [ 667.039675][T30164] pgmajfault 2123 [ 667.043284][T30164] inactive_anon 0 [ 667.046894][T30164] active_anon 8192 [ 667.050641][T30164] inactive_file 0 [ 667.054250][T30164] active_file 4096 [ 667.058033][T30164] unevictable 68939776 [ 667.062101][T30164] hierarchical_memory_limit 314572800 [ 667.067474][T30164] hierarchical_memsw_limit 9223372036854771712 [ 667.073609][T30164] total_cache 68939776 [ 667.077669][T30164] total_rss 0 [ 667.080947][T30164] total_shmem 0 [ 667.084425][T30164] total_mapped_file 1052672 [ 667.088926][T30164] total_dirty 0 [ 667.092433][T30164] total_writeback 0 [ 667.096233][T30164] total_workingset_refault_anon 5748 [ 667.101492][T30164] total_workingset_refault_file 9789 [ 667.106766][T30164] total_swap 19714048 [ 667.110807][T30164] total_swapcached 8192 [ 667.114984][T30164] total_pgpgin 775726 [ 667.119023][T30164] total_pgpgout 758892 [ 667.123075][T30164] total_pgfault 837430 [ 667.127208][T30164] total_pgmajfault 2123 [ 667.131340][T30164] total_inactive_anon 0 [ 667.135488][T30164] total_active_anon 8192 [ 667.139730][T30164] total_inactive_file 0 [ 667.143928][T30164] total_active_file 4096 [ 667.148158][T30164] total_unevictable 68939776 [ 667.152767][T30164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5157,pid=30163,uid=0 [ 667.167525][T30164] Memory cgroup out of memory: Killed process 30163 (syz.1.5157) total-vm:98128kB, anon-rss:940kB, file-rss:26408kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 668.380692][ T29] kauditd_printk_skb: 1500 callbacks suppressed [ 668.380705][ T29] audit: type=1326 audit(2015728749.465:72139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.410889][ T29] audit: type=1326 audit(2015728749.486:72140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.435442][ T29] audit: type=1326 audit(2015728749.486:72141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.459709][ T29] audit: type=1326 audit(2015728749.486:72142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.483360][ T29] audit: type=1326 audit(2015728749.539:72143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.507033][ T29] audit: type=1326 audit(2015728749.539:72144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.530696][ T29] audit: type=1326 audit(2015728749.539:72145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.554548][ T29] audit: type=1326 audit(2015728749.539:72146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.578210][ T29] audit: type=1326 audit(2015728749.539:72147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.601828][ T29] audit: type=1326 audit(2015728749.539:72148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30243 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68726e9a9 code=0x7ffc0000 [ 668.815388][T30268] rdma_rxe: rxe_newlink: failed to add geneve1 [ 669.200615][T30280] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5195'. [ 669.797504][T30324] rdma_rxe: rxe_newlink: failed to add geneve1 [ 671.109033][T30384] rdma_rxe: rxe_newlink: failed to add geneve1 [ 671.394647][T30401] sctp: [Deprecated]: syz.2.5239 (pid 30401) Use of int in maxseg socket option. [ 671.394647][T30401] Use struct sctp_assoc_value instead [ 671.767038][T30419] program syz.3.5246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.966225][T30438] xt_hashlimit: size too large, truncated to 1048576 [ 672.153582][T30457] delete_channel: no stack [ 672.199618][T30445] rdma_rxe: rxe_newlink: failed to add geneve1 [ 673.020466][T30510] rdma_rxe: rxe_newlink: failed to add geneve1 [ 673.087000][ T29] kauditd_printk_skb: 2047 callbacks suppressed [ 673.087014][ T29] audit: type=1326 audit(2017301618.499:74196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.121668][ T29] audit: type=1326 audit(2017301618.542:74197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.144660][ T29] audit: type=1326 audit(2017301618.542:74198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.167738][ T29] audit: type=1326 audit(2017301618.542:74199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.190767][ T29] audit: type=1326 audit(2017301618.542:74200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.213592][ T29] audit: type=1326 audit(2017301618.542:74201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.236559][ T29] audit: type=1326 audit(2017301618.542:74202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.259506][ T29] audit: type=1326 audit(2017301618.542:74203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.282273][ T29] audit: type=1326 audit(2017301618.542:74204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.305254][ T29] audit: type=1326 audit(2017301618.542:74205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30526 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 673.403014][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5294'. [ 673.412150][T30541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5294'. [ 674.180445][T30607] rdma_rxe: rxe_newlink: failed to add geneve1 [ 674.426425][T30582] syz.3.5311 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 674.440558][T30582] CPU: 1 UID: 0 PID: 30582 Comm: syz.3.5311 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 674.440606][T30582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.440614][T30582] Call Trace: [ 674.440619][T30582] [ 674.440624][T30582] __dump_stack+0x1d/0x30 [ 674.440638][T30582] dump_stack_lvl+0xe8/0x140 [ 674.440665][T30582] dump_stack+0x15/0x1b [ 674.440675][T30582] dump_header+0x81/0x220 [ 674.440748][T30582] oom_kill_process+0x334/0x3f0 [ 674.440766][T30582] out_of_memory+0x979/0xb80 [ 674.440784][T30582] try_charge_memcg+0x5e6/0x9e0 [ 674.440909][T30582] obj_cgroup_charge_pages+0xa6/0x150 [ 674.440926][T30582] __memcg_kmem_charge_page+0x9f/0x170 [ 674.440944][T30582] __alloc_frozen_pages_noprof+0x188/0x360 [ 674.440994][T30582] alloc_pages_mpol+0xb3/0x250 [ 674.441063][T30582] alloc_pages_noprof+0x90/0x130 [ 674.441080][T30582] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 674.441107][T30582] __kvmalloc_node_noprof+0x30f/0x4e0 [ 674.441180][T30582] ? ip_set_alloc+0x1f/0x30 [ 674.441423][T30582] ? ip_set_alloc+0x1f/0x30 [ 674.441442][T30582] ip_set_alloc+0x1f/0x30 [ 674.441524][T30582] hash_netiface_create+0x282/0x740 [ 674.441543][T30582] ? __pfx_hash_netiface_create+0x10/0x10 [ 674.441562][T30582] ip_set_create+0x3c9/0x960 [ 674.441615][T30582] ? __nla_parse+0x40/0x60 [ 674.441627][T30582] nfnetlink_rcv_msg+0x4c6/0x590 [ 674.441687][T30582] ? __kfree_skb+0x109/0x150 [ 674.441718][T30582] ? selinux_capable+0x1f9/0x270 [ 674.441771][T30582] netlink_rcv_skb+0x123/0x220 [ 674.441789][T30582] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 674.441818][T30582] nfnetlink_rcv+0x16b/0x1690 [ 674.441834][T30582] ? __kfree_skb+0x109/0x150 [ 674.441922][T30582] ? nlmon_xmit+0x4f/0x60 [ 674.441934][T30582] ? consume_skb+0x49/0x150 [ 674.442004][T30582] ? nlmon_xmit+0x4f/0x60 [ 674.442016][T30582] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 674.442037][T30582] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 674.442048][T30582] ? __dev_queue_xmit+0x182/0x1fb0 [ 674.442114][T30582] ? ref_tracker_free+0x37d/0x3e0 [ 674.442135][T30582] ? __netlink_deliver_tap+0x4dc/0x500 [ 674.442199][T30582] netlink_unicast+0x5a8/0x680 [ 674.442218][T30582] netlink_sendmsg+0x58b/0x6b0 [ 674.442231][T30582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.442243][T30582] __sock_sendmsg+0x142/0x180 [ 674.442282][T30582] ____sys_sendmsg+0x31e/0x4e0 [ 674.442309][T30582] ___sys_sendmsg+0x17b/0x1d0 [ 674.442332][T30582] __x64_sys_sendmsg+0xd4/0x160 [ 674.442346][T30582] x64_sys_call+0x2999/0x2fb0 [ 674.442359][T30582] do_syscall_64+0xd2/0x200 [ 674.442382][T30582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 674.442413][T30582] ? clear_bhb_loop+0x40/0x90 [ 674.442434][T30582] ? clear_bhb_loop+0x40/0x90 [ 674.442455][T30582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.442479][T30582] RIP: 0033:0x7fa96758e9a9 [ 674.442574][T30582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.442593][T30582] RSP: 002b:00007fa965bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.442674][T30582] RAX: ffffffffffffffda RBX: 00007fa9677b5fa0 RCX: 00007fa96758e9a9 [ 674.442682][T30582] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 674.442689][T30582] RBP: 00007fa967610d69 R08: 0000000000000000 R09: 0000000000000000 [ 674.442750][T30582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.442800][T30582] R13: 0000000000000000 R14: 00007fa9677b5fa0 R15: 00007fffbcaf8b78 [ 674.442812][T30582] [ 674.783354][T30582] memory: usage 307200kB, limit 307200kB, failcnt 17798 [ 674.790325][T30582] memory+swap: usage 310176kB, limit 9007199254740988kB, failcnt 0 [ 674.798211][T30582] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 674.805505][T30582] Memory cgroup stats for /syz3: [ 674.805885][T30582] cache 0 [ 674.813867][T30582] rss 0 [ 674.816618][T30582] shmem 0 [ 674.819632][T30582] mapped_file 1052672 [ 674.823607][T30582] dirty 0 [ 674.826547][T30582] writeback 0 [ 674.829681][T30616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5323'. [ 674.829846][T30582] workingset_refault_anon 7390 [ 674.843492][T30582] workingset_refault_file 11175 [ 674.848379][T30582] swap 3047424 [ 674.851754][T30582] swapcached 0 [ 674.855128][T30582] pgpgin 830816 [ 674.858626][T30582] pgpgout 830816 [ 674.862496][T30582] pgfault 894649 [ 674.866156][T30582] pgmajfault 1932 [ 674.869786][T30582] inactive_anon 0 [ 674.873481][T30582] active_anon 0 [ 674.877325][T30582] inactive_file 0 [ 674.881117][T30582] active_file 0 [ 674.884663][T30582] unevictable 0 [ 674.888132][T30582] hierarchical_memory_limit 314572800 [ 674.893498][T30582] hierarchical_memsw_limit 9223372036854771712 [ 674.899691][T30582] total_cache 0 [ 674.903198][T30582] total_rss 0 [ 674.906501][T30582] total_shmem 0 [ 674.909952][T30582] total_mapped_file 1052672 [ 674.914470][T30582] total_dirty 0 [ 674.917919][T30582] total_writeback 0 [ 674.921820][T30582] total_workingset_refault_anon 7390 [ 674.927101][T30582] total_workingset_refault_file 11175 [ 674.932546][T30582] total_swap 3047424 [ 674.936434][T30582] total_swapcached 0 [ 674.940341][T30582] total_pgpgin 830816 [ 674.944340][T30582] total_pgpgout 830816 [ 674.948475][T30582] total_pgfault 894649 [ 674.952564][T30582] total_pgmajfault 1932 [ 674.956706][T30582] total_inactive_anon 0 [ 674.960866][T30582] total_active_anon 0 [ 674.964832][T30582] total_inactive_file 0 [ 674.969069][T30582] total_active_file 0 [ 674.973042][T30582] total_unevictable 0 [ 674.977012][T30582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5311,pid=30581,uid=0 [ 674.991731][T30582] Memory cgroup out of memory: Killed process 30581 (syz.3.5311) total-vm:93760kB, anon-rss:940kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 675.421492][T30643] netlink: 'syz.3.5335': attribute type 3 has an invalid length. [ 675.429292][T30643] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5335'. [ 675.882503][T30656] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 675.898158][ T9898] lo speed is unknown, defaulting to 1000 [ 675.903976][ T9898] sz1: Port: 1 Link DOWN [ 675.908671][ T36] lo speed is unknown, defaulting to 1000 [ 676.998308][T30691] tmpfs: Bad value for 'mpol' [ 677.222398][T30651] Set syz1 is full, maxelem 65536 reached [ 677.283746][T30707] netlink: 4328 bytes leftover after parsing attributes in process `syz.0.5363'. [ 677.563536][T30747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5381'. [ 677.759049][T30756] rdma_rxe: rxe_newlink: failed to add geneve1 [ 677.766803][T30756] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 677.942845][T30773] rdma_rxe: rxe_newlink: failed to add geneve1 [ 677.950811][ T29] kauditd_printk_skb: 1776 callbacks suppressed [ 677.950827][ T29] audit: type=1326 audit(2017825911.679:75982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 677.980890][ T29] audit: type=1326 audit(2017825911.690:75983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.004589][ T29] audit: type=1326 audit(2017825911.690:75984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.028352][ T29] audit: type=1326 audit(2017825911.690:75985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.052077][ T29] audit: type=1326 audit(2017825911.690:75986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.075640][ T29] audit: type=1326 audit(2017825911.690:75987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.099305][ T29] audit: type=1326 audit(2017825911.690:75988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.122931][ T29] audit: type=1326 audit(2017825911.690:75989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.146570][ T29] audit: type=1326 audit(2017825911.690:75990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.170604][ T29] audit: type=1326 audit(2017825911.690:75991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30772 comm="syz.3.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96758e9a9 code=0x7ffc0000 [ 678.890731][T30818] rdma_rxe: rxe_newlink: failed to add geneve1 [ 679.215227][T30829] rdma_rxe: rxe_newlink: failed to add geneve1 [ 679.223062][T30829] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 679.543788][T30866] netlink: 'syz.1.5425': attribute type 6 has an invalid length. [ 680.066003][T30850] syz.4.5419 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 680.080013][T30850] CPU: 1 UID: 0 PID: 30850 Comm: syz.4.5419 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 680.080103][T30850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 680.080117][T30850] Call Trace: [ 680.080124][T30850] [ 680.080133][T30850] __dump_stack+0x1d/0x30 [ 680.080157][T30850] dump_stack_lvl+0xe8/0x140 [ 680.080176][T30850] dump_stack+0x15/0x1b [ 680.080195][T30850] dump_header+0x81/0x220 [ 680.080309][T30850] oom_kill_process+0x334/0x3f0 [ 680.080338][T30850] out_of_memory+0x979/0xb80 [ 680.080515][T30850] try_charge_memcg+0x5e6/0x9e0 [ 680.080595][T30850] obj_cgroup_charge_pages+0xa6/0x150 [ 680.080664][T30850] __memcg_kmem_charge_page+0x9f/0x170 [ 680.080694][T30850] __alloc_frozen_pages_noprof+0x188/0x360 [ 680.080728][T30850] alloc_pages_mpol+0xb3/0x250 [ 680.080775][T30850] alloc_pages_noprof+0x90/0x130 [ 680.080834][T30850] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 680.080888][T30850] __kvmalloc_node_noprof+0x30f/0x4e0 [ 680.080944][T30850] ? ip_set_alloc+0x1f/0x30 [ 680.080971][T30850] ? ip_set_alloc+0x1f/0x30 [ 680.081004][T30850] ip_set_alloc+0x1f/0x30 [ 680.081060][T30850] hash_netiface_create+0x282/0x740 [ 680.081103][T30850] ? __pfx_hash_netiface_create+0x10/0x10 [ 680.081177][T30850] ip_set_create+0x3c9/0x960 [ 680.081219][T30850] ? __nla_parse+0x40/0x60 [ 680.081241][T30850] nfnetlink_rcv_msg+0x4c6/0x590 [ 680.081341][T30850] ? selinux_capable+0x1f9/0x270 [ 680.081408][T30850] netlink_rcv_skb+0x123/0x220 [ 680.081437][T30850] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 680.081472][T30850] nfnetlink_rcv+0x16b/0x1690 [ 680.081560][T30850] ? __kfree_skb+0x109/0x150 [ 680.081666][T30850] ? nlmon_xmit+0x4f/0x60 [ 680.081690][T30850] ? consume_skb+0x49/0x150 [ 680.081725][T30850] ? nlmon_xmit+0x4f/0x60 [ 680.081795][T30850] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 680.081830][T30850] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 680.081846][T30850] ? __dev_queue_xmit+0x182/0x1fb0 [ 680.081924][T30850] ? perf_callchain_kernel+0x30b/0x330 [ 680.081959][T30850] ? ref_tracker_free+0x37d/0x3e0 [ 680.081995][T30850] ? __netlink_deliver_tap+0x4dc/0x500 [ 680.082055][T30850] netlink_unicast+0x5a8/0x680 [ 680.082162][T30850] netlink_sendmsg+0x58b/0x6b0 [ 680.082254][T30850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.082279][T30850] __sock_sendmsg+0x142/0x180 [ 680.082309][T30850] ____sys_sendmsg+0x31e/0x4e0 [ 680.082335][T30850] ___sys_sendmsg+0x17b/0x1d0 [ 680.082367][T30850] __x64_sys_sendmsg+0xd4/0x160 [ 680.082440][T30850] x64_sys_call+0x2999/0x2fb0 [ 680.082460][T30850] do_syscall_64+0xd2/0x200 [ 680.082477][T30850] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 680.082518][T30850] ? clear_bhb_loop+0x40/0x90 [ 680.082543][T30850] ? clear_bhb_loop+0x40/0x90 [ 680.082568][T30850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.082668][T30850] RIP: 0033:0x7ff8de34e9a9 [ 680.082682][T30850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.082698][T30850] RSP: 002b:00007ff8dc9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.082718][T30850] RAX: ffffffffffffffda RBX: 00007ff8de575fa0 RCX: 00007ff8de34e9a9 [ 680.082732][T30850] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 680.082745][T30850] RBP: 00007ff8de3d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 680.082757][T30850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.082826][T30850] R13: 0000000000000000 R14: 00007ff8de575fa0 R15: 00007fff29bf8aa8 [ 680.082844][T30850] [ 680.424720][T30850] memory: usage 307200kB, limit 307200kB, failcnt 18262 [ 680.431910][T30850] memory+swap: usage 375540kB, limit 9007199254740988kB, failcnt 0 [ 680.439924][T30850] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 680.447206][T30850] Memory cgroup stats for /syz4: [ 680.462486][T30850] cache 0 [ 680.470490][T30850] rss 0 [ 680.473322][T30850] shmem 0 [ 680.476304][T30850] mapped_file 0 [ 680.479842][T30850] dirty 0 [ 680.482806][T30850] writeback 0 [ 680.486311][T30850] workingset_refault_anon 4656 [ 680.491071][T30850] workingset_refault_file 8991 [ 680.495943][T30850] swap 69980160 [ 680.499399][T30850] swapcached 24576 [ 680.503179][T30850] pgpgin 817113 [ 680.506734][T30850] pgpgout 817106 [ 680.510283][T30850] pgfault 827675 [ 680.513860][T30850] pgmajfault 1546 [ 680.517491][T30850] inactive_anon 24576 [ 680.521486][T30850] active_anon 0 [ 680.524968][T30850] inactive_file 4096 [ 680.528859][T30850] active_file 0 [ 680.532351][T30850] unevictable 0 [ 680.535870][T30850] hierarchical_memory_limit 314572800 [ 680.541282][T30850] hierarchical_memsw_limit 9223372036854771712 [ 680.547465][T30850] total_cache 0 [ 680.550977][T30850] total_rss 0 [ 680.554354][T30850] total_shmem 0 [ 680.557937][T30850] total_mapped_file 0 [ 680.561963][T30850] total_dirty 0 [ 680.565417][T30850] total_writeback 0 [ 680.569276][T30850] total_workingset_refault_anon 4656 [ 680.574605][T30850] total_workingset_refault_file 8991 [ 680.579990][T30850] total_swap 69980160 [ 680.583972][T30850] total_swapcached 24576 [ 680.588654][T30850] total_pgpgin 817113 [ 680.592756][T30850] total_pgpgout 817106 [ 680.596841][T30850] total_pgfault 827675 [ 680.600942][T30850] total_pgmajfault 1546 [ 680.605152][T30850] total_inactive_anon 24576 [ 680.609660][T30850] total_active_anon 0 [ 680.613619][T30850] total_inactive_file 4096 [ 680.618030][T30850] total_active_file 0 [ 680.621989][T30850] total_unevictable 0 [ 680.626011][T30850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1030,pid=8441,uid=0 [ 680.640666][T30850] Memory cgroup out of memory: Killed process 8441 (syz.4.1030) total-vm:95668kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 680.747014][T30848] syz.4.5419 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 680.757917][T30848] CPU: 1 UID: 0 PID: 30848 Comm: syz.4.5419 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 680.757943][T30848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 680.757957][T30848] Call Trace: [ 680.758031][T30848] [ 680.758040][T30848] __dump_stack+0x1d/0x30 [ 680.758062][T30848] dump_stack_lvl+0xe8/0x140 [ 680.758079][T30848] dump_stack+0x15/0x1b [ 680.758094][T30848] dump_header+0x81/0x220 [ 680.758204][T30848] oom_kill_process+0x334/0x3f0 [ 680.758235][T30848] out_of_memory+0x979/0xb80 [ 680.758295][T30848] try_charge_memcg+0x5e6/0x9e0 [ 680.758387][T30848] charge_memcg+0x51/0xc0 [ 680.758441][T30848] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 680.758477][T30848] __read_swap_cache_async+0x1df/0x350 [ 680.758587][T30848] swap_cluster_readahead+0x277/0x3e0 [ 680.758624][T30848] swapin_readahead+0xde/0x6f0 [ 680.758711][T30848] ? __filemap_get_folio+0x4f7/0x6b0 [ 680.758741][T30848] ? swap_cache_get_folio+0x77/0x200 [ 680.758822][T30848] do_swap_page+0x301/0x2430 [ 680.758842][T30848] ? css_rstat_updated+0xcd/0x5b0 [ 680.758875][T30848] ? __pfx_default_wake_function+0x10/0x10 [ 680.758949][T30848] handle_mm_fault+0x9a5/0x2be0 [ 680.758969][T30848] ? mas_walk+0xf2/0x120 [ 680.759011][T30848] do_user_addr_fault+0x636/0x1090 [ 680.759048][T30848] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 680.759141][T30848] exc_page_fault+0x62/0xa0 [ 680.759169][T30848] asm_exc_page_fault+0x26/0x30 [ 680.759187][T30848] RIP: 0033:0x7ff8de211347 [ 680.759278][T30848] Code: 2f fb ff ff eb a6 b8 01 00 00 00 48 81 c4 b8 00 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 0f 1f 44 00 00 80 3d 62 68 36 00 00 <48> 8b 47 10 48 8b 4f 18 74 1f 48 8b 30 89 f2 83 c6 02 48 8d 04 f0 [ 680.759295][T30848] RSP: 002b:00007fff29bf8c08 EFLAGS: 00010202 [ 680.759319][T30848] RAX: 0000000000000001 RBX: 00007ff8de575fa0 RCX: 00000000000af898 [ 680.759331][T30848] RDX: 000000000000029e RSI: 00007fff29bf8bf0 RDI: 00007ff8de576038 [ 680.759341][T30848] RBP: 00007ff8de577ba0 R08: 00007ff8de575fa0 R09: 7fffffffffffffff [ 680.759353][T30848] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000af88e [ 680.759363][T30848] R13: 00007ff8de576080 R14: ffffffffffffffff R15: 00007fff29bf8d20 [ 680.759383][T30848] [ 680.759389][T30848] memory: usage 307200kB, limit 307200kB, failcnt 18441 [ 680.875748][T30900] rdma_rxe: rxe_newlink: failed to add geneve1 [ 680.878991][T30848] memory+swap: usage 375372kB, limit 9007199254740988kB, failcnt 0 [ 680.879065][T30848] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 680.887350][T30900] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 680.890256][T30848] Memory cgroup stats for /syz4: [ 681.008596][T30848] cache 0 [ 681.016604][T30848] rss 0 [ 681.019353][T30848] shmem 0 [ 681.022296][T30848] mapped_file 0 [ 681.025742][T30848] dirty 0 [ 681.028701][T30848] writeback 16384 [ 681.032324][T30848] workingset_refault_anon 4671 [ 681.037132][T30848] workingset_refault_file 8991 [ 681.041925][T30848] swap 69808128 [ 681.045415][T30848] swapcached 16384 [ 681.049125][T30848] pgpgin 817128 [ 681.052590][T30848] pgpgout 817123 [ 681.056113][T30848] pgfault 827686 [ 681.059680][T30848] pgmajfault 1554 [ 681.063293][T30848] inactive_anon 16384 [ 681.067262][T30848] active_anon 0 [ 681.070768][T30848] inactive_file 4096 [ 681.074737][T30848] active_file 0 [ 681.078203][T30848] unevictable 0 [ 681.081714][T30848] hierarchical_memory_limit 314572800 [ 681.087127][T30848] hierarchical_memsw_limit 9223372036854771712 [ 681.093268][T30848] total_cache 0 [ 681.096722][T30848] total_rss 0 [ 681.099996][T30848] total_shmem 0 [ 681.103433][T30848] total_mapped_file 0 [ 681.107407][T30848] total_dirty 0 [ 681.110913][T30848] total_writeback 16384 [ 681.115067][T30848] total_workingset_refault_anon 4671 [ 681.120411][T30848] total_workingset_refault_file 8991 [ 681.125735][T30848] total_swap 69808128 [ 681.129735][T30848] total_swapcached 16384 [ 681.133994][T30848] total_pgpgin 817128 [ 681.137958][T30848] total_pgpgout 817123 [ 681.142014][T30848] total_pgfault 827686 [ 681.146077][T30848] total_pgmajfault 1554 [ 681.150212][T30848] total_inactive_anon 16384 [ 681.154814][T30848] total_active_anon 0 [ 681.158786][T30848] total_inactive_file 4096 [ 681.163266][T30848] total_active_file 0 [ 681.167239][T30848] total_unevictable 0 [ 681.171214][T30848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.941,pid=7847,uid=0 [ 681.185735][T30848] Memory cgroup out of memory: Killed process 7847 (syz.4.941) total-vm:95676kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 681.250289][T30850] syz.4.5419 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 681.264237][T30850] CPU: 0 UID: 0 PID: 30850 Comm: syz.4.5419 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 681.264259][T30850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.264267][T30850] Call Trace: [ 681.264272][T30850] [ 681.264277][T30850] __dump_stack+0x1d/0x30 [ 681.264297][T30850] dump_stack_lvl+0xe8/0x140 [ 681.264326][T30850] dump_stack+0x15/0x1b [ 681.264335][T30850] dump_header+0x81/0x220 [ 681.264447][T30850] oom_kill_process+0x334/0x3f0 [ 681.264482][T30850] out_of_memory+0x979/0xb80 [ 681.264516][T30850] try_charge_memcg+0x5e6/0x9e0 [ 681.264616][T30850] obj_cgroup_charge_pages+0xa6/0x150 [ 681.264634][T30850] __memcg_kmem_charge_page+0x9f/0x170 [ 681.264651][T30850] __alloc_frozen_pages_noprof+0x188/0x360 [ 681.264715][T30850] alloc_pages_mpol+0xb3/0x250 [ 681.264732][T30850] alloc_pages_noprof+0x90/0x130 [ 681.264749][T30850] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 681.264800][T30850] __kvmalloc_node_noprof+0x30f/0x4e0 [ 681.264817][T30850] ? ip_set_alloc+0x1f/0x30 [ 681.264834][T30850] ? ip_set_alloc+0x1f/0x30 [ 681.264851][T30850] ip_set_alloc+0x1f/0x30 [ 681.264873][T30850] hash_netiface_create+0x282/0x740 [ 681.264900][T30850] ? __pfx_hash_netiface_create+0x10/0x10 [ 681.264933][T30850] ip_set_create+0x3c9/0x960 [ 681.265003][T30850] ? __nla_parse+0x40/0x60 [ 681.265024][T30850] nfnetlink_rcv_msg+0x4c6/0x590 [ 681.265072][T30850] ? selinux_capable+0x1f9/0x270 [ 681.265091][T30850] netlink_rcv_skb+0x123/0x220 [ 681.265143][T30850] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 681.265163][T30850] nfnetlink_rcv+0x16b/0x1690 [ 681.265227][T30850] ? __kfree_skb+0x109/0x150 [ 681.265245][T30850] ? nlmon_xmit+0x4f/0x60 [ 681.265257][T30850] ? consume_skb+0x49/0x150 [ 681.265274][T30850] ? nlmon_xmit+0x4f/0x60 [ 681.265332][T30850] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 681.265415][T30850] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 681.265433][T30850] ? __dev_queue_xmit+0x182/0x1fb0 [ 681.265453][T30850] ? perf_callchain_kernel+0x30b/0x330 [ 681.265564][T30850] ? ref_tracker_free+0x37d/0x3e0 [ 681.265602][T30850] ? __netlink_deliver_tap+0x4dc/0x500 [ 681.265649][T30850] netlink_unicast+0x5a8/0x680 [ 681.265681][T30850] netlink_sendmsg+0x58b/0x6b0 [ 681.265711][T30850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.265733][T30850] __sock_sendmsg+0x142/0x180 [ 681.265799][T30850] ____sys_sendmsg+0x31e/0x4e0 [ 681.265813][T30850] ___sys_sendmsg+0x17b/0x1d0 [ 681.265835][T30850] __x64_sys_sendmsg+0xd4/0x160 [ 681.265853][T30850] x64_sys_call+0x2999/0x2fb0 [ 681.265866][T30850] do_syscall_64+0xd2/0x200 [ 681.265877][T30850] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 681.265894][T30850] ? clear_bhb_loop+0x40/0x90 [ 681.265925][T30850] ? clear_bhb_loop+0x40/0x90 [ 681.265937][T30850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.265950][T30850] RIP: 0033:0x7ff8de34e9a9 [ 681.265960][T30850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.265971][T30850] RSP: 002b:00007ff8dc9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.266111][T30850] RAX: ffffffffffffffda RBX: 00007ff8de575fa0 RCX: 00007ff8de34e9a9 [ 681.266125][T30850] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 681.266137][T30850] RBP: 00007ff8de3d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 681.266148][T30850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.266236][T30850] R13: 0000000000000000 R14: 00007ff8de575fa0 R15: 00007fff29bf8aa8 [ 681.266259][T30850] [ 681.266267][T30850] memory: usage 307200kB, limit 307200kB, failcnt 18534 [ 681.604766][T30922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5447'. [ 681.606159][T30850] memory+swap: usage 374828kB, limit 9007199254740988kB, failcnt 0 [ 681.609177][T30922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5447'. [ 681.616256][T30850] kmem: usage 306716kB, limit 9007199254740988kB, failcnt 0 [ 681.649264][T30850] Memory cgroup stats for /syz4: [ 681.649650][T30850] cache 0 [ 681.657716][T30850] rss 114688 [ 681.660974][T30850] shmem 0 [ 681.663915][T30850] mapped_file 0 [ 681.667500][T30850] dirty 0 [ 681.670480][T30850] writeback 0 [ 681.673944][T30850] workingset_refault_anon 4707 [ 681.678755][T30850] workingset_refault_file 8991 [ 681.683521][T30850] swap 69517312 [ 681.687057][T30850] swapcached 8192 [ 681.690824][T30850] pgpgin 817164 [ 681.694389][T30850] pgpgout 817134 [ 681.697965][T30850] pgfault 827721 [ 681.701512][T30850] pgmajfault 1575 [ 681.705128][T30850] inactive_anon 28672 [ 681.709106][T30850] active_anon 90112 [ 681.712900][T30850] inactive_file 4096 [ 681.716892][T30850] active_file 0 [ 681.720335][T30850] unevictable 0 [ 681.723773][T30850] hierarchical_memory_limit 314572800 [ 681.729227][T30850] hierarchical_memsw_limit 9223372036854771712 [ 681.735381][T30850] total_cache 0 [ 681.738820][T30850] total_rss 114688 [ 681.742523][T30850] total_shmem 0 [ 681.746280][T30850] total_mapped_file 0 [ 681.750343][T30850] total_dirty 0 [ 681.753823][T30850] total_writeback 0 [ 681.757650][T30850] total_workingset_refault_anon 4707 [ 681.762973][T30850] total_workingset_refault_file 8991 [ 681.768284][T30850] total_swap 69517312 [ 681.772272][T30850] total_swapcached 8192 [ 681.776534][T30850] total_pgpgin 817164 [ 681.780552][T30850] total_pgpgout 817134 [ 681.784624][T30850] total_pgfault 827721 [ 681.788668][T30850] total_pgmajfault 1575 [ 681.792885][T30850] total_inactive_anon 28672 [ 681.797390][T30850] total_active_anon 90112 [ 681.801716][T30850] total_inactive_file 4096 [ 681.806116][T30850] total_active_file 0 [ 681.810097][T30850] total_unevictable 0 [ 681.814191][T30850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5419,pid=30848,uid=0 [ 681.828957][T30850] Memory cgroup out of memory: Killed process 30850 (syz.4.5419) total-vm:93760kB, anon-rss:1068kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 681.882026][T30930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5451'. [ 682.047412][T30950] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 682.110293][T30964] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.5468'. [ 682.136802][T30962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 682.197154][T30973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5472'. [ 682.245310][T30981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5475'. [ 682.343958][T30989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5479'. [ 682.352903][T30989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5479'. [ 682.745506][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 682.745521][ T29] audit: type=1326 audit(2018874492.805:76818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.814741][ T29] audit: type=1326 audit(2018874492.837:76819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.838248][ T29] audit: type=1326 audit(2018874492.847:76820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.861982][ T29] audit: type=1326 audit(2018874492.847:76821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.885936][ T29] audit: type=1326 audit(2018874492.847:76822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.909597][ T29] audit: type=1326 audit(2018874492.847:76823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.933304][ T29] audit: type=1326 audit(2018874492.847:76824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.957013][ T29] audit: type=1326 audit(2018874492.847:76825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 682.980994][ T29] audit: type=1326 audit(2018874492.847:76826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 683.004730][ T29] audit: type=1326 audit(2018874492.847:76827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.2.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e02ee9a9 code=0x7ffc0000 [ 683.186625][T31035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5497'. [ 683.195875][T31035] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 683.810918][T31045] syz.1.5501 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 683.824874][T31045] CPU: 0 UID: 0 PID: 31045 Comm: syz.1.5501 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 683.824951][T31045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.824958][T31045] Call Trace: [ 683.824962][T31045] [ 683.824968][T31045] __dump_stack+0x1d/0x30 [ 683.825009][T31045] dump_stack_lvl+0xe8/0x140 [ 683.825021][T31045] dump_stack+0x15/0x1b [ 683.825031][T31045] dump_header+0x81/0x220 [ 683.825049][T31045] oom_kill_process+0x334/0x3f0 [ 683.825084][T31045] out_of_memory+0x979/0xb80 [ 683.825102][T31045] try_charge_memcg+0x5e6/0x9e0 [ 683.825276][T31045] obj_cgroup_charge_pages+0xa6/0x150 [ 683.825299][T31045] __memcg_kmem_charge_page+0x9f/0x170 [ 683.825336][T31045] __alloc_frozen_pages_noprof+0x188/0x360 [ 683.825431][T31045] alloc_pages_mpol+0xb3/0x250 [ 683.825449][T31045] alloc_pages_noprof+0x90/0x130 [ 683.825476][T31045] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 683.825580][T31045] __kvmalloc_node_noprof+0x30f/0x4e0 [ 683.825629][T31045] ? ip_set_alloc+0x1f/0x30 [ 683.825656][T31045] ? ip_set_alloc+0x1f/0x30 [ 683.825699][T31045] ip_set_alloc+0x1f/0x30 [ 683.825717][T31045] hash_netiface_create+0x282/0x740 [ 683.825737][T31045] ? __pfx_hash_netiface_create+0x10/0x10 [ 683.825812][T31045] ip_set_create+0x3c9/0x960 [ 683.825899][T31045] ? __nla_parse+0x40/0x60 [ 683.825911][T31045] nfnetlink_rcv_msg+0x4c6/0x590 [ 683.825926][T31045] ? bpf_get_stack+0x33/0x50 [ 683.825951][T31045] ? selinux_capable+0x1f9/0x270 [ 683.826036][T31045] netlink_rcv_skb+0x123/0x220 [ 683.826055][T31045] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 683.826075][T31045] nfnetlink_rcv+0x16b/0x1690 [ 683.826163][T31045] ? bsearch+0x95/0xc0 [ 683.826175][T31045] ? __pfx_cmp_ex_search+0x10/0x10 [ 683.826188][T31045] ? copy_from_kernel_nofault+0x6a/0x200 [ 683.826254][T31045] ? cmp_ex_search+0x25/0x40 [ 683.826320][T31045] ? bsearch+0x95/0xc0 [ 683.826332][T31045] ? __pfx_cmp_ex_search+0x10/0x10 [ 683.826344][T31045] ? copy_from_kernel_nofault+0x6a/0x200 [ 683.826364][T31045] ? search_extable+0x53/0x80 [ 683.826420][T31045] ? copy_from_kernel_nofault+0x6a/0x200 [ 683.826438][T31045] ? copy_from_kernel_nofault+0x6a/0x200 [ 683.826457][T31045] ? fixup_exception+0x72e/0xd00 [ 683.826472][T31045] ? spurious_kernel_fault+0xf4/0x4a0 [ 683.826499][T31045] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 683.826518][T31045] ? rb_insert_color+0x71/0x2b0 [ 683.826550][T31045] ? should_fail_ex+0x30/0x280 [ 683.826689][T31045] ? selinux_nlmsg_lookup+0x99/0x890 [ 683.826708][T31045] ? selinux_netlink_send+0x59f/0x5f0 [ 683.826725][T31045] ? __rcu_read_unlock+0x34/0x70 [ 683.826795][T31045] ? __netlink_lookup+0x266/0x2a0 [ 683.826840][T31045] netlink_unicast+0x5a8/0x680 [ 683.826859][T31045] netlink_sendmsg+0x58b/0x6b0 [ 683.826872][T31045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.826885][T31045] __sock_sendmsg+0x142/0x180 [ 683.827045][T31045] ____sys_sendmsg+0x31e/0x4e0 [ 683.827059][T31045] ___sys_sendmsg+0x17b/0x1d0 [ 683.827081][T31045] __x64_sys_sendmsg+0xd4/0x160 [ 683.827095][T31045] x64_sys_call+0x2999/0x2fb0 [ 683.827157][T31045] do_syscall_64+0xd2/0x200 [ 683.827168][T31045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 683.827183][T31045] ? clear_bhb_loop+0x40/0x90 [ 683.827195][T31045] ? clear_bhb_loop+0x40/0x90 [ 683.827208][T31045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.827244][T31045] RIP: 0033:0x7fd68726e9a9 [ 683.827253][T31045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.827265][T31045] RSP: 002b:00007fd6858d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.827277][T31045] RAX: ffffffffffffffda RBX: 00007fd687495fa0 RCX: 00007fd68726e9a9 [ 683.827373][T31045] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 683.827380][T31045] RBP: 00007fd6872f0d69 R08: 0000000000000000 R09: 0000000000000000 [ 683.827439][T31045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.827446][T31045] R13: 0000000000000000 R14: 00007fd687495fa0 R15: 00007ffcc6854138 [ 683.827458][T31045] [ 683.827462][T31045] memory: usage 307200kB, limit 307200kB, failcnt 26363 [ 684.229230][T31045] memory+swap: usage 310044kB, limit 9007199254740988kB, failcnt 0 [ 684.237123][T31045] kmem: usage 239844kB, limit 9007199254740988kB, failcnt 0 [ 684.244457][T31045] Memory cgroup stats for /syz1: [ 684.244764][T31045] cache 68939776 [ 684.253295][T31045] rss 0 [ 684.256158][T31045] shmem 0 [ 684.259124][T31045] mapped_file 1052672 [ 684.263346][T31045] dirty 0 [ 684.266324][T31045] writeback 0 [ 684.269675][T31045] workingset_refault_anon 5878 [ 684.274714][T31045] workingset_refault_file 9885 [ 684.279676][T31045] swap 2912256 [ 684.283067][T31045] swapcached 28672 [ 684.286827][T31045] pgpgin 797210 [ 684.290281][T31045] pgpgout 780371 [ 684.293858][T31045] pgfault 871917 [ 684.297384][T31045] pgmajfault 2186 [ 684.300997][T31045] inactive_anon 28672 [ 684.304986][T31045] active_anon 0 [ 684.308442][T31045] inactive_file 4096 [ 684.312435][T31045] active_file 0 [ 684.316044][T31045] unevictable 68939776 [ 684.320182][T31045] hierarchical_memory_limit 314572800 [ 684.325773][T31045] hierarchical_memsw_limit 9223372036854771712 [ 684.331969][T31045] total_cache 68939776 [ 684.336146][T31045] total_rss 0 [ 684.339437][T31045] total_shmem 0 [ 684.342933][T31045] total_mapped_file 1052672 [ 684.347508][T31045] total_dirty 0 [ 684.351025][T31045] total_writeback 0 [ 684.354867][T31045] total_workingset_refault_anon 5878 [ 684.360168][T31045] total_workingset_refault_file 9885 [ 684.365434][T31045] total_swap 2912256 [ 684.369339][T31045] total_swapcached 28672 [ 684.373562][T31045] total_pgpgin 797210 [ 684.377756][T31045] total_pgpgout 780371 [ 684.382112][T31045] total_pgfault 871917 [ 684.386179][T31045] total_pgmajfault 2186 [ 684.390388][T31045] total_inactive_anon 28672 [ 684.394882][T31045] total_active_anon 0 [ 684.398899][T31045] total_inactive_file 4096 [ 684.403472][T31045] total_active_file 0 [ 684.407506][T31045] total_unevictable 68939776 [ 684.412139][T31045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5501,pid=31044,uid=0 [ 684.426992][T31045] Memory cgroup out of memory: Killed process 31044 (syz.1.5501) total-vm:93760kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 684.631466][T31109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5523'. [ 684.688431][T31120] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 684.762226][T31107] rdma_rxe: rxe_newlink: failed to add geneve1 [ 684.769710][T31107] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 685.200815][T31124] syz.1.5534 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 685.214738][T31124] CPU: 0 UID: 0 PID: 31124 Comm: syz.1.5534 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 685.214759][T31124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.214767][T31124] Call Trace: [ 685.214772][T31124] [ 685.214777][T31124] __dump_stack+0x1d/0x30 [ 685.214794][T31124] dump_stack_lvl+0xe8/0x140 [ 685.214806][T31124] dump_stack+0x15/0x1b [ 685.214816][T31124] dump_header+0x81/0x220 [ 685.214835][T31124] oom_kill_process+0x334/0x3f0 [ 685.214973][T31124] out_of_memory+0x979/0xb80 [ 685.215045][T31124] try_charge_memcg+0x5e6/0x9e0 [ 685.215071][T31124] obj_cgroup_charge_pages+0xa6/0x150 [ 685.215088][T31124] __memcg_kmem_charge_page+0x9f/0x170 [ 685.215119][T31124] __alloc_frozen_pages_noprof+0x188/0x360 [ 685.215140][T31124] alloc_pages_mpol+0xb3/0x250 [ 685.215224][T31124] alloc_pages_noprof+0x90/0x130 [ 685.215241][T31124] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 685.215267][T31124] __kvmalloc_node_noprof+0x30f/0x4e0 [ 685.215284][T31124] ? ip_set_alloc+0x1f/0x30 [ 685.215339][T31124] ? ip_set_alloc+0x1f/0x30 [ 685.215357][T31124] ip_set_alloc+0x1f/0x30 [ 685.215382][T31124] hash_netiface_create+0x282/0x740 [ 685.215415][T31124] ? __pfx_hash_netiface_create+0x10/0x10 [ 685.215433][T31124] ip_set_create+0x3c9/0x960 [ 685.215478][T31124] ? __nla_parse+0x40/0x60 [ 685.215490][T31124] nfnetlink_rcv_msg+0x4c6/0x590 [ 685.215578][T31124] ? bpf_get_stack+0x33/0x50 [ 685.215655][T31124] ? selinux_capable+0x1f9/0x270 [ 685.215689][T31124] netlink_rcv_skb+0x123/0x220 [ 685.215721][T31124] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 685.215816][T31124] nfnetlink_rcv+0x16b/0x1690 [ 685.215831][T31124] ? bsearch+0x95/0xc0 [ 685.215843][T31124] ? __pfx_cmp_ex_search+0x10/0x10 [ 685.215856][T31124] ? copy_from_kernel_nofault+0x6a/0x200 [ 685.215908][T31124] ? cmp_ex_search+0x25/0x40 [ 685.215920][T31124] ? bsearch+0x95/0xc0 [ 685.215932][T31124] ? __pfx_cmp_ex_search+0x10/0x10 [ 685.215943][T31124] ? copy_from_kernel_nofault+0x6a/0x200 [ 685.216001][T31124] ? search_extable+0x53/0x80 [ 685.216013][T31124] ? copy_from_kernel_nofault+0x6a/0x200 [ 685.216031][T31124] ? copy_from_kernel_nofault+0x6a/0x200 [ 685.216128][T31124] ? fixup_exception+0x72e/0xd00 [ 685.216141][T31124] ? spurious_kernel_fault+0xf4/0x4a0 [ 685.216160][T31124] ? spurious_kernel_fault+0xf4/0x4a0 [ 685.216246][T31124] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 685.216265][T31124] ? __bpf_get_stack+0x5ff/0x630 [ 685.216303][T31124] ? should_fail_ex+0x30/0x280 [ 685.216321][T31124] ? selinux_nlmsg_lookup+0x99/0x890 [ 685.216355][T31124] ? selinux_netlink_send+0x59f/0x5f0 [ 685.216378][T31124] ? __rcu_read_unlock+0x34/0x70 [ 685.216392][T31124] ? __netlink_lookup+0x266/0x2a0 [ 685.216443][T31124] netlink_unicast+0x5a8/0x680 [ 685.216473][T31124] netlink_sendmsg+0x58b/0x6b0 [ 685.216487][T31124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.216499][T31124] __sock_sendmsg+0x142/0x180 [ 685.216554][T31124] ____sys_sendmsg+0x31e/0x4e0 [ 685.216567][T31124] ___sys_sendmsg+0x17b/0x1d0 [ 685.216634][T31124] __x64_sys_sendmsg+0xd4/0x160 [ 685.216648][T31124] x64_sys_call+0x2999/0x2fb0 [ 685.216661][T31124] do_syscall_64+0xd2/0x200 [ 685.216672][T31124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 685.216694][T31124] ? clear_bhb_loop+0x40/0x90 [ 685.216769][T31124] ? clear_bhb_loop+0x40/0x90 [ 685.216841][T31124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.216853][T31124] RIP: 0033:0x7fd68726e9a9 [ 685.216863][T31124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.216873][T31124] RSP: 002b:00007fd6858d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.216885][T31124] RAX: ffffffffffffffda RBX: 00007fd687495fa0 RCX: 00007fd68726e9a9 [ 685.216956][T31124] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 685.216963][T31124] RBP: 00007fd6872f0d69 R08: 0000000000000000 R09: 0000000000000000 [ 685.216971][T31124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.216978][T31124] R13: 0000000000000000 R14: 00007fd687495fa0 R15: 00007ffcc6854138 [ 685.216989][T31124] [ 685.216993][T31124] memory: usage 307200kB, limit 307200kB, failcnt 26601 [ 685.624459][T31124] memory+swap: usage 310044kB, limit 9007199254740988kB, failcnt 0 [ 685.632380][T31124] kmem: usage 239844kB, limit 9007199254740988kB, failcnt 0 [ 685.639766][T31124] Memory cgroup stats for /syz1: [ 685.641954][T31124] cache 68939776 [ 685.650467][T31124] rss 0 [ 685.653294][T31124] shmem 0 [ 685.656260][T31124] mapped_file 1052672 [ 685.660247][T31124] dirty 0 [ 685.663212][T31124] writeback 0 [ 685.666495][T31124] workingset_refault_anon 5908 [ 685.671257][T31124] workingset_refault_file 10012 [ 685.676193][T31124] swap 2912256 [ 685.679558][T31124] swapcached 28672 [ 685.683401][T31124] pgpgin 797582 [ 685.686916][T31124] pgpgout 780743 [ 685.690454][T31124] pgfault 872526 [ 685.694085][T31124] pgmajfault 2207 [ 685.697732][T31124] inactive_anon 28672 [ 685.701727][T31124] active_anon 0 [ 685.705183][T31124] inactive_file 4096 [ 685.709068][T31124] active_file 0 [ 685.712538][T31124] unevictable 68939776 [ 685.716606][T31124] hierarchical_memory_limit 314572800 [ 685.722001][T31124] hierarchical_memsw_limit 9223372036854771712 [ 685.728153][T31124] total_cache 68939776 [ 685.732293][T31124] total_rss 0 [ 685.735688][T31124] total_shmem 0 [ 685.739185][T31124] total_mapped_file 1052672 [ 685.743775][T31124] total_dirty 0 [ 685.747239][T31124] total_writeback 0 [ 685.751069][T31124] total_workingset_refault_anon 5908 [ 685.756374][T31124] total_workingset_refault_file 10012 [ 685.761764][T31124] total_swap 2912256 [ 685.765789][T31124] total_swapcached 28672 [ 685.770061][T31124] total_pgpgin 797582 [ 685.774056][T31124] total_pgpgout 780743 [ 685.778159][T31124] total_pgfault 872526 [ 685.782231][T31124] total_pgmajfault 2207 [ 685.786417][T31124] total_inactive_anon 28672 [ 685.791136][T31124] total_active_anon 0 [ 685.795205][T31124] total_inactive_file 4096 [ 685.799676][T31124] total_active_file 0 [ 685.803649][T31124] total_unevictable 68939776 [ 685.808251][T31124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5534,pid=31123,uid=0 [ 685.822973][T31124] Memory cgroup out of memory: Killed process 31123 (syz.1.5534) total-vm:93760kB, anon-rss:940kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 686.162534][T31202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.343973][T31205] rdma_rxe: rxe_newlink: failed to add geneve1 [ 686.352212][T31205] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 686.700899][T31221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5569'. [ 687.367492][ T3306] ================================================================== [ 687.375692][ T3306] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 687.385519][ T3306] [ 687.387834][ T3306] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 687.395890][ T3306] tick_do_update_jiffies64+0x113/0x1c0 [ 687.401448][ T3306] tick_nohz_handler+0x7f/0x2d0 [ 687.406298][ T3306] __hrtimer_run_queues+0x20c/0x5a0 [ 687.411493][ T3306] hrtimer_interrupt+0x21a/0x460 [ 687.416427][ T3306] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 687.422323][ T3306] sysvec_apic_timer_interrupt+0x6f/0x80 [ 687.427960][ T3306] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 687.433941][ T3306] kcsan_setup_watchpoint+0x415/0x430 [ 687.439310][ T3306] should_skip_vma+0x146/0x240 [ 687.444070][ T3306] walk_pud_range+0xff0/0x1340 [ 687.448830][ T3306] walk_pgd_range+0x559/0x14e0 [ 687.453593][ T3306] __walk_page_range+0xdd/0x340 [ 687.458443][ T3306] walk_page_range_mm+0x352/0x4a0 [ 687.463469][ T3306] walk_page_range+0x56/0x70 [ 687.468058][ T3306] try_to_inc_max_seq+0x79d/0xa60 [ 687.473077][ T3306] try_to_shrink_lruvec+0x72b/0x7e0 [ 687.478273][ T3306] shrink_lruvec+0x22e/0x1b40 [ 687.482947][ T3306] shrink_node+0x686/0x2120 [ 687.487454][ T3306] do_try_to_free_pages+0x3f6/0xcd0 [ 687.492644][ T3306] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 687.498539][ T3306] try_charge_memcg+0x358/0x9e0 [ 687.503406][ T3306] obj_cgroup_charge_pages+0xa6/0x150 [ 687.508792][ T3306] __memcg_kmem_charge_page+0x9f/0x170 [ 687.514262][ T3306] __alloc_frozen_pages_noprof+0x188/0x360 [ 687.520079][ T3306] alloc_pages_mpol+0xb3/0x250 [ 687.524847][ T3306] alloc_pages_noprof+0x90/0x130 [ 687.529789][ T3306] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 687.535601][ T3306] __kvmalloc_node_noprof+0x30f/0x4e0 [ 687.540974][ T3306] ip_set_alloc+0x1f/0x30 [ 687.545310][ T3306] hash_netiface_create+0x282/0x740 [ 687.550512][ T3306] ip_set_create+0x3c9/0x960 [ 687.555113][ T3306] nfnetlink_rcv_msg+0x4c6/0x590 [ 687.560047][ T3306] netlink_rcv_skb+0x123/0x220 [ 687.564859][ T3306] nfnetlink_rcv+0x16b/0x1690 [ 687.569533][ T3306] netlink_unicast+0x5a8/0x680 [ 687.574299][ T3306] netlink_sendmsg+0x58b/0x6b0 [ 687.579054][ T3306] __sock_sendmsg+0x142/0x180 [ 687.583726][ T3306] ____sys_sendmsg+0x31e/0x4e0 [ 687.588479][ T3306] ___sys_sendmsg+0x17b/0x1d0 [ 687.593147][ T3306] __x64_sys_sendmsg+0xd4/0x160 [ 687.597993][ T3306] x64_sys_call+0x2999/0x2fb0 [ 687.602668][ T3306] do_syscall_64+0xd2/0x200 [ 687.607164][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.613066][ T3306] [ 687.615386][ T3306] read to 0xffffffff868099c0 of 8 bytes by task 3306 on cpu 0: [ 687.622927][ T3306] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 687.629180][ T3306] count_shadow_nodes+0x6a/0x230 [ 687.634129][ T3306] do_shrink_slab+0x60/0x680 [ 687.638721][ T3306] shrink_slab+0x448/0x760 [ 687.643133][ T3306] shrink_node+0x6c3/0x2120 [ 687.647640][ T3306] do_try_to_free_pages+0x3f6/0xcd0 [ 687.652827][ T3306] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 687.658712][ T3306] try_charge_memcg+0x358/0x9e0 [ 687.663567][ T3306] charge_memcg+0x51/0xc0 [ 687.667902][ T3306] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 687.673963][ T3306] __read_swap_cache_async+0x1df/0x350 [ 687.679441][ T3306] swap_cluster_readahead+0x277/0x3e0 [ 687.684822][ T3306] swapin_readahead+0xde/0x6f0 [ 687.689593][ T3306] do_swap_page+0x301/0x2430 [ 687.694176][ T3306] handle_mm_fault+0x9a5/0x2be0 [ 687.699022][ T3306] do_user_addr_fault+0x636/0x1090 [ 687.704144][ T3306] exc_page_fault+0x62/0xa0 [ 687.708651][ T3306] asm_exc_page_fault+0x26/0x30 [ 687.713499][ T3306] [ 687.715821][ T3306] value changed: 0x000000010000a685 -> 0x000000010000a686 [ 687.722913][ T3306] [ 687.725225][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 687.731365][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 687.741862][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 687.751918][ T3306] ================================================================== [ 687.781933][T31231] syz.2.5573 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 687.795968][T31231] CPU: 1 UID: 0 PID: 31231 Comm: syz.2.5573 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 687.795995][T31231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 687.796010][T31231] Call Trace: [ 687.796017][T31231] [ 687.796025][T31231] __dump_stack+0x1d/0x30 [ 687.796049][T31231] dump_stack_lvl+0xe8/0x140 [ 687.796081][T31231] dump_stack+0x15/0x1b [ 687.796100][T31231] dump_header+0x81/0x220 [ 687.796134][T31231] oom_kill_process+0x334/0x3f0 [ 687.796164][T31231] out_of_memory+0x979/0xb80 [ 687.796269][T31231] try_charge_memcg+0x5e6/0x9e0 [ 687.796352][T31231] obj_cgroup_charge_pages+0xa6/0x150 [ 687.796380][T31231] __memcg_kmem_charge_page+0x9f/0x170 [ 687.796411][T31231] __alloc_frozen_pages_noprof+0x188/0x360 [ 687.796501][T31231] alloc_pages_mpol+0xb3/0x250 [ 687.796535][T31231] alloc_pages_noprof+0x90/0x130 [ 687.796615][T31231] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 687.796663][T31231] __kvmalloc_node_noprof+0x30f/0x4e0 [ 687.796689][T31231] ? ip_set_alloc+0x1f/0x30 [ 687.796717][T31231] ? ip_set_alloc+0x1f/0x30 [ 687.796762][T31231] ip_set_alloc+0x1f/0x30 [ 687.796806][T31231] hash_netiface_create+0x282/0x740 [ 687.796844][T31231] ? __pfx_hash_netiface_create+0x10/0x10 [ 687.796983][T31231] ip_set_create+0x3c9/0x960 [ 687.797071][T31231] ? __nla_parse+0x40/0x60 [ 687.797100][T31231] nfnetlink_rcv_msg+0x4c6/0x590 [ 687.797149][T31231] ? selinux_capable+0x1f9/0x270 [ 687.797239][T31231] netlink_rcv_skb+0x123/0x220 [ 687.797272][T31231] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 687.797356][T31231] nfnetlink_rcv+0x16b/0x1690 [ 687.797385][T31231] ? bsearch+0x95/0xc0 [ 687.797408][T31231] ? __pfx_cmp_ex_search+0x10/0x10 [ 687.797433][T31231] ? copy_from_kernel_nofault+0x6a/0x200 [ 687.797466][T31231] ? cmp_ex_search+0x25/0x40 [ 687.797486][T31231] ? bsearch+0x95/0xc0 [ 687.797507][T31231] ? __pfx_cmp_ex_search+0x10/0x10 [ 687.797612][T31231] ? copy_from_kernel_nofault+0x6a/0x200 [ 687.797711][T31231] ? search_extable+0x53/0x80 [ 687.797869][T31231] ? copy_from_kernel_nofault+0x6a/0x200 [ 687.797905][T31231] ? __rcu_read_unlock+0x34/0x70 [ 687.797929][T31231] ? bpf_prog_8609e4581ee7ade4+0x39/0x49 [ 687.797947][T31231] ? is_bpf_text_address+0x141/0x160 [ 687.798003][T31231] ? kernel_text_address+0x94/0xb0 [ 687.798119][T31231] ? __kernel_text_address+0xd/0x40 [ 687.798142][T31231] ? unwind_get_return_address+0x16/0x40 [ 687.798173][T31231] ? perf_callchain_kernel+0x30b/0x330 [ 687.798225][T31231] ? bcmp+0x2e/0x90 [ 687.798246][T31231] ? __bpf_get_stackid+0x7d4/0x800 [ 687.798273][T31231] ? should_fail_ex+0x30/0x280 [ 687.798372][T31231] ? selinux_nlmsg_lookup+0x99/0x890 [ 687.798404][T31231] ? selinux_netlink_send+0x59f/0x5f0 [ 687.798466][T31231] ? __rcu_read_unlock+0x34/0x70 [ 687.798491][T31231] ? __netlink_lookup+0x266/0x2a0 [ 687.798518][T31231] netlink_unicast+0x5a8/0x680 [ 687.798615][T31231] netlink_sendmsg+0x58b/0x6b0 [ 687.798641][T31231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.798664][T31231] __sock_sendmsg+0x142/0x180 [ 687.798692][T31231] ____sys_sendmsg+0x31e/0x4e0 [ 687.798727][T31231] ___sys_sendmsg+0x17b/0x1d0 [ 687.798763][T31231] __x64_sys_sendmsg+0xd4/0x160 [ 687.798845][T31231] x64_sys_call+0x2999/0x2fb0 [ 687.798913][T31231] do_syscall_64+0xd2/0x200 [ 687.798952][T31231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 687.798982][T31231] ? clear_bhb_loop+0x40/0x90 [ 687.799005][T31231] ? clear_bhb_loop+0x40/0x90 [ 687.799049][T31231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.799073][T31231] RIP: 0033:0x7f14e02ee9a9 [ 687.799088][T31231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.799125][T31231] RSP: 002b:00007f14de957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.799158][T31231] RAX: ffffffffffffffda RBX: 00007f14e0515fa0 RCX: 00007f14e02ee9a9 [ 687.799170][T31231] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 687.799181][T31231] RBP: 00007f14e0370d69 R08: 0000000000000000 R09: 0000000000000000 [ 687.799193][T31231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.799281][T31231] R13: 0000000000000000 R14: 00007f14e0515fa0 R15: 00007ffcdc36d7b8 [ 687.799310][T31231] [ 688.207599][T31231] memory: usage 307200kB, limit 307200kB, failcnt 13043 [ 688.214770][T31231] memory+swap: usage 325936kB, limit 9007199254740988kB, failcnt 0 [ 688.222703][T31231] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 688.229990][T31231] Memory cgroup stats for /syz2: [ 688.236550][T31231] cache 4096 [ 688.244680][T31231] rss 0 [ 688.247425][T31231] shmem 0 [ 688.250412][T31231] mapped_file 0 [ 688.253850][T31231] dirty 0 [ 688.256766][T31231] writeback 0 [ 688.260047][T31231] workingset_refault_anon 6731 [ 688.264793][T31231] workingset_refault_file 39864 [ 688.269638][T31231] swap 19185664 [ 688.273080][T31231] swapcached 0 [ 688.276428][T31231] pgpgin 1032115 [ 688.279966][T31231] pgpgout 1032112 [ 688.283578][T31231] pgfault 996235 [ 688.287189][T31231] pgmajfault 1978 [ 688.290877][T31231] inactive_anon 0 [ 688.294488][T31231] active_anon 0 [ 688.297945][T31231] inactive_file 0 [ 688.301596][T31231] active_file 8192 [ 688.305326][T31231] unevictable 4096 [ 688.309039][T31231] hierarchical_memory_limit 314572800 [ 688.314405][T31231] hierarchical_memsw_limit 9223372036854771712 [ 688.320735][T31231] total_cache 4096 [ 688.324455][T31231] total_rss 0 [ 688.327775][T31231] total_shmem 0 [ 688.331214][T31231] total_mapped_file 0 [ 688.335227][T31231] total_dirty 0 [ 688.338742][T31231] total_writeback 0 [ 688.342538][T31231] total_workingset_refault_anon 6731 [ 688.347837][T31231] total_workingset_refault_file 39864 [ 688.353204][T31231] total_swap 19185664 [ 688.357161][T31231] total_swapcached 0 [ 688.361032][T31231] total_pgpgin 1032115 [ 688.365118][T31231] total_pgpgout 1032112 [ 688.369330][T31231] total_pgfault 996235 [ 688.373465][T31231] total_pgmajfault 1978 [ 688.377628][T31231] total_inactive_anon 0 [ 688.381776][T31231] total_active_anon 0 [ 688.385743][T31231] total_inactive_file 0 [ 688.389879][T31231] total_active_file 8192 [ 688.394130][T31231] total_unevictable 4096 [ 688.398350][T31231] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4296,pid=26538,uid=0 [ 688.413075][T31231] Memory cgroup out of memory: Killed process 26538 (syz.2.4296) total-vm:100176kB, anon-rss:996kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0 [ 688.439081][T31230] syz.2.5573 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 688.449941][T31230] CPU: 1 UID: 0 PID: 31230 Comm: syz.2.5573 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 688.449966][T31230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.449979][T31230] Call Trace: [ 688.449985][T31230] [ 688.449993][T31230] __dump_stack+0x1d/0x30 [ 688.450014][T31230] dump_stack_lvl+0xe8/0x140 [ 688.450035][T31230] dump_stack+0x15/0x1b [ 688.450067][T31230] dump_header+0x81/0x220 [ 688.450108][T31230] oom_kill_process+0x334/0x3f0 [ 688.450143][T31230] out_of_memory+0x979/0xb80 [ 688.450189][T31230] try_charge_memcg+0x5e6/0x9e0 [ 688.450230][T31230] charge_memcg+0x51/0xc0 [ 688.450263][T31230] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 688.450382][T31230] __read_swap_cache_async+0x1df/0x350 [ 688.450421][T31230] swap_cluster_readahead+0x277/0x3e0 [ 688.450462][T31230] swapin_readahead+0xde/0x6f0 [ 688.450502][T31230] ? __filemap_get_folio+0x4f7/0x6b0 [ 688.450535][T31230] ? swap_cache_get_folio+0x77/0x200 [ 688.450562][T31230] do_swap_page+0x301/0x2430 [ 688.450619][T31230] ? finish_task_switch+0xad/0x2b0 [ 688.450641][T31230] ? __pfx_default_wake_function+0x10/0x10 [ 688.450687][T31230] handle_mm_fault+0x9a5/0x2be0 [ 688.450712][T31230] ? mas_walk+0xf2/0x120 [ 688.450755][T31230] do_user_addr_fault+0x636/0x1090 [ 688.450856][T31230] ? fpregs_restore_userregs+0xe2/0x1d0 [ 688.450919][T31230] ? switch_fpu_return+0xe/0x20 [ 688.450950][T31230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 688.450978][T31230] exc_page_fault+0x62/0xa0 [ 688.451020][T31230] asm_exc_page_fault+0x26/0x30 [ 688.451042][T31230] RIP: 0033:0x7f14e0321268 [ 688.451059][T31230] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 688.451078][T31230] RSP: 002b:00007ffcdc36d8b0 EFLAGS: 00010293 [ 688.451095][T31230] RAX: 0000000000000000 RBX: 00007f14e0515fa0 RCX: 00007f14e0321265 [ 688.451109][T31230] RDX: 00007ffcdc36d8f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.451181][T31230] RBP: 00007f14e0517ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 688.451192][T31230] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000b17a2 [ 688.451203][T31230] R13: 00007f14e0516080 R14: ffffffffffffffff R15: 00007ffcdc36da30 [ 688.451221][T31230] [ 688.451227][T31230] memory: usage 307200kB, limit 307200kB, failcnt 13073 [ 688.682050][T31230] memory+swap: usage 309376kB, limit 9007199254740988kB, failcnt 0 [ 688.689918][T31230] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 688.697198][T31230] Memory cgroup stats for /syz2: [ 688.697442][T31230] cache 4096 [ 688.705628][T31230] rss 0 [ 688.708368][T31230] shmem 0 [ 688.711331][T31230] mapped_file 0 [ 688.714884][T31230] dirty 0 [ 688.717808][T31230] writeback 0 [ 688.721138][T31230] workingset_refault_anon 6731 [ 688.725874][T31230] workingset_refault_file 39864 [ 688.730751][T31230] swap 2228224 [ 688.734101][T31230] swapcached 0 [ 688.737478][T31230] pgpgin 1032115 [ 688.740999][T31230] pgpgout 1032112 [ 688.744612][T31230] pgfault 996235 [ 688.748173][T31230] pgmajfault 1978 [ 688.751794][T31230] inactive_anon 0 [ 688.755513][T31230] active_anon 0 [ 688.758967][T31230] inactive_file 8192 [ 688.762837][T31230] active_file 0 [ 688.766287][T31230] unevictable 4096 [ 688.769981][T31230] hierarchical_memory_limit 314572800 [ 688.775446][T31230] hierarchical_memsw_limit 9223372036854771712 [ 688.781573][T31230] total_cache 4096 [ 688.785306][T31230] total_rss 0 [ 688.788620][T31230] total_shmem 0 [ 688.792067][T31230] total_mapped_file 0 [ 688.796044][T31230] total_dirty 0 [ 688.799520][T31230] total_writeback 0 [ 688.803334][T31230] total_workingset_refault_anon 6731 [ 688.808595][T31230] total_workingset_refault_file 39864 [ 688.813956][T31230] total_swap 2228224 [ 688.817824][T31230] total_swapcached 0 [ 688.821760][T31230] total_pgpgin 1032115 [ 688.825833][T31230] total_pgpgout 1032112 [ 688.829961][T31230] total_pgfault 996235 [ 688.834024][T31230] total_pgmajfault 1978 [ 688.838152][T31230] total_inactive_anon 0 [ 688.842299][T31230] total_active_anon 0 [ 688.846371][T31230] total_inactive_file 8192 [ 688.850782][T31230] total_active_file 0 [ 688.854788][T31230] total_unevictable 4096 [ 688.859006][T31230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5573,pid=31230,uid=0 [ 688.873794][T31230] Memory cgroup out of memory: Killed process 31230 (syz.2.5573) total-vm:93760kB, anon-rss:1068kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 693.770554][ T3393] page_pool_release_retry() stalled pool shutdown: id 56, 41 inflight 302 sec