last executing test programs: 12.444970927s ago: executing program 0 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.351215593s ago: executing program 0 (id=2193): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) 12.291151646s ago: executing program 0 (id=2196): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) 12.290768267s ago: executing program 0 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='console\x00', r1, 0x0, 0x91}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 12.198244222s ago: executing program 0 (id=2205): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 12.183704103s ago: executing program 0 (id=2206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) 838.297887ms ago: executing program 2 (id=2487): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0) 787.98118ms ago: executing program 2 (id=2489): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCSBRKP(r1, 0x5425, 0x8) 780.738081ms ago: executing program 2 (id=2491): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') unshare(0x8040480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa7, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xfc, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08606, 0x7, 0xaa, 0x81, 0x2, 0x72, 0x5, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xa, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 714.871825ms ago: executing program 2 (id=2493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0005}]}) r2 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000440)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d7374726963742c6e6f726f636b2c73657373696f6e3d3078303030303030303030303030303133342c6d6f64653d3078303030303030303030303030303030372c696f636861727365743d63703433372c756e686964650c696f636861727365743d6e6f6e652c00b198652ec0cd3f76fa015649aed760e178e8b79fa93eb5b2dcba4f6c5ed86a10b7d9f0fc7c90eb21428339056b360dfa35989d407b6fe6e4073a1240f5"], 0x1, 0x544, &(0x7f0000001000)="$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") r3 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x1a, 0x4000, @fd_index=0x1, 0xbf3, 0x0, 0x0, 0x6840abb1c9b4ef6d, 0x0, {0x2}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) getpeername$unix(r3, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES64=r1], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) fchmodat(r2, &(0x7f0000000500)='./file1\x00', 0xd6) r7 = syz_io_uring_setup(0x451d, &(0x7f0000000400)={0x0, 0x59fc, 0x8000, 0x203, 0x356}, &(0x7f0000000ac0)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000037c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x5535, 0x3acd, 0x22, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="3f0bc0ff10000000ae733220239c66e1d53f608bc7ab20022d314ce6781b33abf02fe6df8cde9e0f73aa4d34f3b642fd2781ad3b4902550db9549ace4af30794c507e0f408da9a0967f488aba73d7a7670aba9e143770819104107b7caf0ffdfece56c480d70e038bd9cb7b0257d93015b1dd614eafdfcead227ff1f5810eb465d0b8da2557b2fe93b"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x78, &(0x7f00000000c0)=""/120, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x3, 0x7, 0x6}, {0x1, 0x1, 0xc, 0x1}, {0x5, 0x5, 0xf0, 0x5}], 0x10, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f00000008c0)='fscache_cookie\x00', r10}, 0x18) syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, 0x0, 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000003c0)=0x4) 619.098151ms ago: executing program 2 (id=2495): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) 530.868347ms ago: executing program 1 (id=2496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 456.575031ms ago: executing program 1 (id=2497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00@\x00', 0x10, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x40}}}}}}}}, 0x0) 454.573311ms ago: executing program 2 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xfc1d2000) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f00003b3000/0x3000)=nil, 0x3000, 0x9, 0xc3072, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRESHEX=r1, @ANYRES64=r4, @ANYRES64, @ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = epoll_create1(0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r7, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000001c0)={0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20040) 409.038894ms ago: executing program 1 (id=2500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 404.389544ms ago: executing program 4 (id=2501): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff1, 0x0) 375.258686ms ago: executing program 4 (id=2502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 362.969057ms ago: executing program 1 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 338.092809ms ago: executing program 4 (id=2504): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8001, @loopback, 0x3}, {0xa, 0x4e23, 0x80007, @mcast2, 0xffffffff}, r1, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0x2, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, r1}}, 0x48) 283.446632ms ago: executing program 1 (id=2505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x810) 277.066663ms ago: executing program 4 (id=2506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 269.488393ms ago: executing program 3 (id=2507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x429, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x340c, 0x678f2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8044}, 0x52) 248.759114ms ago: executing program 4 (id=2508): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000022, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000"], 0x50) 232.506495ms ago: executing program 1 (id=2509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES16=r0], 0x48) r2 = socket(0xa, 0x800, 0xff) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='fsi_master_aspeed_opb_write\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0xd44c2b9154e30bcc) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e657400000000050004"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0/file1\x00', 0x2a48038, &(0x7f0000000000)={[{@noblock_validity}, {@delalloc}]}, 0x3, 0x4ac, &(0x7f0000000f80)="$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") r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 218.114416ms ago: executing program 3 (id=2510): syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) r0 = syz_io_uring_setup(0x6924, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x0, 0xffffffff}, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 146.021961ms ago: executing program 4 (id=2511): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x340) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nolazytime}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x0, 0x4}], 0x2, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010300000094d10000000000009e060c001980", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004810) add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x1}, 0x18) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000260e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005"], 0x174}}, 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000080)={0x6, 0x40}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0xe98, 0x30, 0x100, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x20000000}, 0x97, 0x0, [{0x0, 0x0, 0x9c, 0xfffffffc}, {0x0, 0x0, 0x3, 0xffffffff}]}, [{}, {}, {0x0, 0x1000007, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x20000, 0x2000}, {0x0, 0x10000, 0x0, 0x0, 0xd5}, {}, {0x2, 0x3fd}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x1, 0x2, 0x6, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {0xd5}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x10000}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xc, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x3}, {}, {}, {0x4, 0xfffffffe}, {}, {0xa7, 0x0, 0x0, 0x0, 0x1}, {0x10000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x100000}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x9}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x5}, {0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x8000000, 0x0, 0x0, 0x3}, {}, {0x20, 0x6, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x3}, {}, {0x0, 0x0, 0x1}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 145.627361ms ago: executing program 3 (id=2512): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) 20.132068ms ago: executing program 3 (id=2513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 19.654339ms ago: executing program 3 (id=2514): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 0s ago: executing program 3 (id=2515): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x340) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nolazytime}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x0, 0x4}], 0x2, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002010300000094d10000000000009e060c001980", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004810) add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000260e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005"], 0x174}}, 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000080)={0x6, 0x40}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0xe98, 0x30, 0x100, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x20000000}, 0x97, 0x0, [{0x0, 0x0, 0x9c, 0xfffffffc}, {0x0, 0x0, 0x3, 0xffffffff}]}, [{}, {}, {0x0, 0x1000007, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x20000, 0x2000}, {0x0, 0x10000, 0x0, 0x0, 0xd5}, {}, {0x2, 0x3fd}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x1, 0x2, 0x6, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {0xd5}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x10000}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xc, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x3}, {}, {}, {0x4, 0xfffffffe}, {}, {0xa7, 0x0, 0x0, 0x0, 0x1}, {0x10000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x100000}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x9}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x5}, {0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x8000000, 0x0, 0x0, 0x3}, {}, {0x20, 0x6, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x3}, {}, {0x0, 0x0, 0x1}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) kernel console output (not intermixed with test programs): in process `syz.4.799'. [ 137.316116][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 137.613522][ T6987] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 137.621284][ T6987] netlink: 224 bytes leftover after parsing attributes in process `syz.0.802'. [ 137.667053][ T6998] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 137.674850][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.803'. [ 137.688483][ T6998] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 137.717288][ T6994] wireguard0: entered promiscuous mode [ 137.722834][ T6994] wireguard0: entered allmulticast mode [ 137.768340][ T7001] pim6reg1: entered promiscuous mode [ 137.773671][ T7001] pim6reg1: entered allmulticast mode [ 137.791200][ T7001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.912442][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 137.986518][ T7009] lo speed is unknown, defaulting to 1000 [ 138.101826][ T7009] lo speed is unknown, defaulting to 1000 [ 138.177815][ T7013] x_tables: ip_tables: ah match: only valid for protocol 51 [ 138.286904][ T7023] pim6reg1: entered promiscuous mode [ 138.292366][ T7023] pim6reg1: entered allmulticast mode [ 138.317228][ T7026] xt_hashlimit: max too large, truncated to 1048576 [ 138.330669][ T7026] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.343765][ T7023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.569998][ T7028] lo speed is unknown, defaulting to 1000 [ 138.672702][ T7030] lo speed is unknown, defaulting to 1000 [ 138.756911][ T7028] lo speed is unknown, defaulting to 1000 [ 138.772163][ T7032] lo speed is unknown, defaulting to 1000 [ 138.855173][ T7030] lo speed is unknown, defaulting to 1000 [ 138.913488][ T7032] lo speed is unknown, defaulting to 1000 [ 139.108298][ T7058] Cannot find del_set index 0 as target [ 139.237410][ T7057] lo speed is unknown, defaulting to 1000 [ 139.330297][ T7068] sd 0:0:1:0: device reset [ 139.388149][ T7057] lo speed is unknown, defaulting to 1000 [ 139.394274][ T7063] siw: device registration error -23 [ 139.450539][ T7073] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 139.460515][ T7073] SELinux: failed to load policy [ 139.518254][ T7066] lo speed is unknown, defaulting to 1000 [ 139.643057][ T7066] lo speed is unknown, defaulting to 1000 [ 140.463597][ T7085] IPVS: length: 111 != 24 [ 141.257147][ T7084] lo speed is unknown, defaulting to 1000 [ 141.433644][ T7084] lo speed is unknown, defaulting to 1000 [ 141.693118][ T7095] __nla_validate_parse: 15 callbacks suppressed [ 141.693134][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.828'. [ 141.708313][ T7095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.828'. [ 141.797366][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 141.903978][ T7094] netem: incorrect ge model size [ 141.908986][ T7094] netem: change failed [ 142.173773][ T7106] validate_nla: 5 callbacks suppressed [ 142.173790][ T7106] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 142.416256][ T7106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.587761][ T7127] tap0: tun_chr_ioctl cmd 1074025677 [ 142.637214][ T7127] tap0: linktype set to 773 [ 143.286144][ T7145] netlink: 172 bytes leftover after parsing attributes in process `syz.4.842'. [ 143.297337][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 143.306377][ T7144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.841'. [ 143.354684][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 143.475599][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.845'. [ 143.484561][ T7154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.845'. [ 143.499577][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'. [ 143.512826][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 143.512839][ T29] audit: type=1400 audit(148.404:15431): avc: denied { ioctl } for pid=7156 comm="syz.0.847" path="socket:[19892]" dev="sockfs" ino=19892 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.589476][ T7160] pim6reg1: entered promiscuous mode [ 143.594799][ T7160] pim6reg1: entered allmulticast mode [ 143.687774][ T7166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.708998][ T29] audit: type=1326 audit(148.604:15432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.732032][ T29] audit: type=1326 audit(148.604:15433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.754854][ T29] audit: type=1326 audit(148.625:15434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.777755][ T29] audit: type=1326 audit(148.625:15435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.800691][ T29] audit: type=1326 audit(148.625:15436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.823596][ T29] audit: type=1326 audit(148.625:15437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.846590][ T29] audit: type=1326 audit(148.625:15438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.869274][ T29] audit: type=1326 audit(148.625:15439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 143.892133][ T29] audit: type=1326 audit(148.625:15440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb03935efc9 code=0x7ffc0000 [ 144.028734][ T7171] tap0: tun_chr_ioctl cmd 1074025677 [ 144.034169][ T7171] tap0: linktype set to 773 [ 144.140384][ T7181] rdma_rxe: rxe_newlink: failed to add bond0 [ 144.264745][ T7192] pim6reg1: entered promiscuous mode [ 144.270105][ T7192] pim6reg1: entered allmulticast mode [ 144.496315][ T1051] Process accounting resumed [ 144.509991][ T7206] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.546910][ T7207] ref_ctr increment failed for inode: 0x39b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812ffa9140 [ 145.135072][ T7225] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 145.166237][ T7238] pim6reg1: entered promiscuous mode [ 145.171595][ T7238] pim6reg1: entered allmulticast mode [ 145.208021][ T7225] lo speed is unknown, defaulting to 1000 [ 145.269661][ T7225] lo speed is unknown, defaulting to 1000 [ 146.783195][ T7274] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 146.830200][ T7262] Set syz1 is full, maxelem 65536 reached [ 146.874217][ T7278] pim6reg1: entered promiscuous mode [ 146.879689][ T7278] pim6reg1: entered allmulticast mode [ 146.998193][ T7291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7291 comm=syz.1.888 [ 147.085961][ T7298] serio: Serial port ptm0 [ 147.125411][ T7296] syz.1.888 (7296): /proc/7290/oom_adj is deprecated, please use /proc/7290/oom_score_adj instead. [ 147.350788][ T7295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.873209][ T7319] pim6reg1: entered promiscuous mode [ 147.878724][ T7319] pim6reg1: entered allmulticast mode [ 148.607828][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 148.607842][ T29] audit: type=1326 audit(153.748:16031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618457efc9 code=0x7ffc0000 [ 148.636840][ T29] audit: type=1326 audit(153.748:16032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618457efc9 code=0x7ffc0000 [ 148.659776][ T29] audit: type=1326 audit(153.748:16033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f618457efc9 code=0x7ffc0000 [ 148.665878][ T7417] pim6reg1: entered promiscuous mode [ 148.682589][ T29] audit: type=1326 audit(153.748:16034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f618457f003 code=0x7ffc0000 [ 148.687879][ T7417] pim6reg1: entered allmulticast mode [ 148.699688][ T7417] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 148.710513][ T29] audit: type=1326 audit(153.748:16035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f618457da7f code=0x7ffc0000 [ 148.729215][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.745913][ T29] audit: type=1326 audit(153.748:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f618457f057 code=0x7ffc0000 [ 148.756322][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.775460][ T29] audit: type=1326 audit(153.748:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f618457d810 code=0x7ffc0000 [ 148.805145][ T29] audit: type=1326 audit(153.748:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f618457dc2a code=0x7ffc0000 [ 148.827843][ T29] audit: type=1326 audit(153.748:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618457efc9 code=0x7ffc0000 [ 148.850856][ T29] audit: type=1326 audit(153.748:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618457efc9 code=0x7ffc0000 [ 148.875434][ T7417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.078506][ T7427] __nla_validate_parse: 11 callbacks suppressed [ 149.078519][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 149.352418][ T7483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7483 comm=syz.2.968 [ 149.750858][ T7462] syz.3.961 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 149.765093][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.3.961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.765132][ T7462] Tainted: [W]=WARN [ 149.765138][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.765161][ T7462] Call Trace: [ 149.765168][ T7462] [ 149.765176][ T7462] __dump_stack+0x1d/0x30 [ 149.765195][ T7462] dump_stack_lvl+0xe8/0x140 [ 149.765214][ T7462] dump_stack+0x15/0x1b [ 149.765233][ T7462] dump_header+0x81/0x220 [ 149.765251][ T7462] oom_kill_process+0x342/0x400 [ 149.765308][ T7462] out_of_memory+0x979/0xb80 [ 149.765336][ T7462] try_charge_memcg+0x610/0xa10 [ 149.765368][ T7462] obj_cgroup_charge_pages+0xa6/0x150 [ 149.765431][ T7462] __memcg_kmem_charge_page+0x9f/0x170 [ 149.765452][ T7462] __alloc_frozen_pages_noprof+0x188/0x360 [ 149.765488][ T7462] alloc_pages_mpol+0xb3/0x260 [ 149.765552][ T7462] alloc_pages_noprof+0x90/0x130 [ 149.765570][ T7462] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 149.765672][ T7462] __kvmalloc_node_noprof+0x483/0x670 [ 149.765702][ T7462] ? ip_set_alloc+0x24/0x30 [ 149.765729][ T7462] ? ip_set_alloc+0x24/0x30 [ 149.765806][ T7462] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 149.765835][ T7462] ip_set_alloc+0x24/0x30 [ 149.765863][ T7462] hash_netiface_create+0x282/0x740 [ 149.765939][ T7462] ? __pfx_hash_netiface_create+0x10/0x10 [ 149.765979][ T7462] ip_set_create+0x3cc/0x970 [ 149.766010][ T7462] ? __nla_parse+0x40/0x60 [ 149.766036][ T7462] nfnetlink_rcv_msg+0x4c6/0x590 [ 149.766150][ T7462] netlink_rcv_skb+0x123/0x220 [ 149.766184][ T7462] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.766218][ T7462] nfnetlink_rcv+0x167/0x16c0 [ 149.766280][ T7462] ? kmem_cache_free+0xe4/0x3d0 [ 149.766310][ T7462] ? __kfree_skb+0x109/0x150 [ 149.766340][ T7462] ? nlmon_xmit+0x4f/0x60 [ 149.766436][ T7462] ? consume_skb+0x49/0x150 [ 149.766462][ T7462] ? nlmon_xmit+0x4f/0x60 [ 149.766489][ T7462] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 149.766583][ T7462] ? __dev_queue_xmit+0x1200/0x2000 [ 149.766613][ T7462] ? __dev_queue_xmit+0x182/0x2000 [ 149.766647][ T7462] ? ref_tracker_free+0x37d/0x3e0 [ 149.766731][ T7462] ? __netlink_deliver_tap+0x4dc/0x500 [ 149.766761][ T7462] netlink_unicast+0x5c0/0x690 [ 149.766789][ T7462] netlink_sendmsg+0x58b/0x6b0 [ 149.766856][ T7462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.766874][ T7462] __sock_sendmsg+0x145/0x180 [ 149.766895][ T7462] ____sys_sendmsg+0x31e/0x4e0 [ 149.766931][ T7462] ___sys_sendmsg+0x17b/0x1d0 [ 149.767062][ T7462] __x64_sys_sendmsg+0xd4/0x160 [ 149.767100][ T7462] x64_sys_call+0x191e/0x3000 [ 149.767128][ T7462] do_syscall_64+0xd2/0x200 [ 149.767148][ T7462] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.767180][ T7462] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 149.767205][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.767297][ T7462] RIP: 0033:0x7f618457efc9 [ 149.767311][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.767330][ T7462] RSP: 002b:00007f6182fdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.767350][ T7462] RAX: ffffffffffffffda RBX: 00007f61847d5fa0 RCX: 00007f618457efc9 [ 149.767433][ T7462] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 149.767447][ T7462] RBP: 00007f6184601f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.767461][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.767472][ T7462] R13: 00007f61847d6038 R14: 00007f61847d5fa0 R15: 00007ffd0e687998 [ 149.767489][ T7462] [ 149.767495][ T7462] memory: usage 307200kB, limit 307200kB, failcnt 1120 [ 150.118480][ T7462] memory+swap: usage 307960kB, limit 9007199254740988kB, failcnt 0 [ 150.126372][ T7462] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 150.133753][ T7462] Memory cgroup stats for /syz3: [ 150.135135][ T7462] cache 0 [ 150.143033][ T7462] rss 0 [ 150.145786][ T7462] shmem 0 [ 150.148714][ T7462] mapped_file 0 [ 150.152231][ T7462] dirty 0 [ 150.155165][ T7462] writeback 0 [ 150.158910][ T7462] workingset_refault_anon 149 [ 150.163676][ T7462] workingset_refault_file 1188 [ 150.168636][ T7462] swap 778240 [ 150.171971][ T7462] swapcached 4096 [ 150.175598][ T7462] pgpgin 155747 [ 150.179044][ T7462] pgpgout 155746 [ 150.182953][ T7462] pgfault 166423 [ 150.186599][ T7462] pgmajfault 72 [ 150.190074][ T7462] inactive_anon 0 [ 150.193690][ T7462] active_anon 4096 [ 150.197437][ T7462] inactive_file 0 [ 150.201066][ T7462] active_file 0 [ 150.204512][ T7462] unevictable 0 [ 150.208054][ T7462] hierarchical_memory_limit 314572800 [ 150.213407][ T7462] hierarchical_memsw_limit 9223372036854771712 [ 150.219572][ T7462] total_cache 0 [ 150.223042][ T7462] total_rss 0 [ 150.226302][ T7462] total_shmem 0 [ 150.229786][ T7462] total_mapped_file 0 [ 150.233765][ T7462] total_dirty 0 [ 150.233773][ T7462] total_writeback 0 [ 150.233780][ T7462] total_workingset_refault_anon 149 [ 150.246241][ T7462] total_workingset_refault_file 1188 [ 150.246251][ T7462] total_swap 778240 [ 150.255304][ T7462] total_swapcached 4096 [ 150.259468][ T7462] total_pgpgin 155747 [ 150.263434][ T7462] total_pgpgout 155746 [ 150.267507][ T7462] total_pgfault 166423 [ 150.271565][ T7462] total_pgmajfault 72 [ 150.275536][ T7462] total_inactive_anon 0 [ 150.279740][ T7462] total_active_anon 4096 [ 150.283960][ T7462] total_inactive_file 0 [ 150.288130][ T7462] total_active_file 0 [ 150.292144][ T7462] total_unevictable 0 [ 150.296124][ T7462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.961,pid=7461,uid=0 [ 150.310759][ T7462] Memory cgroup out of memory: Killed process 7461 (syz.3.961) total-vm:94076kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 150.570636][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 150.797821][ T7568] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1007'. [ 151.107107][ T7540] syz.0.996 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 151.121335][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: syz.0.996 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.121371][ T7540] Tainted: [W]=WARN [ 151.121379][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.121392][ T7540] Call Trace: [ 151.121399][ T7540] [ 151.121407][ T7540] __dump_stack+0x1d/0x30 [ 151.121446][ T7540] dump_stack_lvl+0xe8/0x140 [ 151.121468][ T7540] dump_stack+0x15/0x1b [ 151.121482][ T7540] dump_header+0x81/0x220 [ 151.121499][ T7540] oom_kill_process+0x342/0x400 [ 151.121557][ T7540] out_of_memory+0x979/0xb80 [ 151.121616][ T7540] try_charge_memcg+0x610/0xa10 [ 151.121734][ T7540] obj_cgroup_charge_pages+0xa6/0x150 [ 151.121754][ T7540] __memcg_kmem_charge_page+0x9f/0x170 [ 151.121772][ T7540] __alloc_frozen_pages_noprof+0x188/0x360 [ 151.121878][ T7540] alloc_pages_mpol+0xb3/0x260 [ 151.121903][ T7540] alloc_pages_noprof+0x90/0x130 [ 151.121959][ T7540] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 151.122018][ T7540] __kvmalloc_node_noprof+0x483/0x670 [ 151.122062][ T7540] ? ip_set_alloc+0x24/0x30 [ 151.122105][ T7540] ? ip_set_alloc+0x24/0x30 [ 151.122129][ T7540] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 151.122159][ T7540] ip_set_alloc+0x24/0x30 [ 151.122184][ T7540] hash_netiface_create+0x282/0x740 [ 151.122305][ T7540] ? __pfx_hash_netiface_create+0x10/0x10 [ 151.122337][ T7540] ip_set_create+0x3cc/0x970 [ 151.122363][ T7540] ? __nla_parse+0x40/0x60 [ 151.122410][ T7540] nfnetlink_rcv_msg+0x4c6/0x590 [ 151.122494][ T7540] netlink_rcv_skb+0x123/0x220 [ 151.122519][ T7540] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 151.122558][ T7540] nfnetlink_rcv+0x167/0x16c0 [ 151.122661][ T7540] ? kmem_cache_free+0xe4/0x3d0 [ 151.122688][ T7540] ? __kfree_skb+0x109/0x150 [ 151.122760][ T7540] ? nlmon_xmit+0x4f/0x60 [ 151.122785][ T7540] ? consume_skb+0x49/0x150 [ 151.122887][ T7540] ? nlmon_xmit+0x4f/0x60 [ 151.122906][ T7540] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 151.123015][ T7540] ? __dev_queue_xmit+0x1200/0x2000 [ 151.123119][ T7540] ? __dev_queue_xmit+0x182/0x2000 [ 151.123150][ T7540] ? ref_tracker_free+0x37d/0x3e0 [ 151.123185][ T7540] ? __netlink_deliver_tap+0x2e3/0x500 [ 151.123237][ T7540] ? __netlink_deliver_tap+0x4dc/0x500 [ 151.123266][ T7540] netlink_unicast+0x5c0/0x690 [ 151.123294][ T7540] netlink_sendmsg+0x58b/0x6b0 [ 151.123383][ T7540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.123400][ T7540] __sock_sendmsg+0x145/0x180 [ 151.123421][ T7540] ____sys_sendmsg+0x31e/0x4e0 [ 151.123473][ T7540] ___sys_sendmsg+0x17b/0x1d0 [ 151.123518][ T7540] __x64_sys_sendmsg+0xd4/0x160 [ 151.123558][ T7540] x64_sys_call+0x191e/0x3000 [ 151.123593][ T7540] do_syscall_64+0xd2/0x200 [ 151.123616][ T7540] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.123675][ T7540] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.123750][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.123771][ T7540] RIP: 0033:0x7fb03935efc9 [ 151.123784][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.123827][ T7540] RSP: 002b:00007fb037dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.123922][ T7540] RAX: ffffffffffffffda RBX: 00007fb0395b5fa0 RCX: 00007fb03935efc9 [ 151.123936][ T7540] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 151.123950][ T7540] RBP: 00007fb0393e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 151.123962][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.123975][ T7540] R13: 00007fb0395b6038 R14: 00007fb0395b5fa0 R15: 00007ffda2248858 [ 151.124003][ T7540] [ 151.474914][ T7540] memory: usage 307200kB, limit 307200kB, failcnt 179 [ 151.481721][ T7540] memory+swap: usage 308312kB, limit 9007199254740988kB, failcnt 0 [ 151.490063][ T7540] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 151.497370][ T7540] Memory cgroup stats for /syz0: [ 151.506263][ T7540] cache 0 [ 151.514340][ T7540] rss 0 [ 151.517128][ T7540] shmem 0 [ 151.520054][ T7540] mapped_file 1642496 [ 151.524424][ T7540] dirty 0 [ 151.527356][ T7540] writeback 0 [ 151.530626][ T7540] workingset_refault_anon 24 [ 151.535372][ T7540] workingset_refault_file 256 [ 151.540047][ T7540] swap 1138688 [ 151.543546][ T7540] swapcached 8192 [ 151.547161][ T7540] pgpgin 226666 [ 151.550600][ T7540] pgpgout 226664 [ 151.554294][ T7540] pgfault 201249 [ 151.557837][ T7540] pgmajfault 12 [ 151.561401][ T7540] inactive_anon 0 [ 151.565044][ T7540] active_anon 8192 [ 151.568740][ T7540] inactive_file 0 [ 151.572388][ T7540] active_file 0 [ 151.575833][ T7540] unevictable 0 [ 151.579270][ T7540] hierarchical_memory_limit 314572800 [ 151.584650][ T7540] hierarchical_memsw_limit 9223372036854771712 [ 151.590827][ T7540] total_cache 0 [ 151.594264][ T7540] total_rss 0 [ 151.597533][ T7540] total_shmem 0 [ 151.600994][ T7540] total_mapped_file 1642496 [ 151.605484][ T7540] total_dirty 0 [ 151.609002][ T7540] total_writeback 0 [ 151.612796][ T7540] total_workingset_refault_anon 24 [ 151.617909][ T7540] total_workingset_refault_file 256 [ 151.623120][ T7540] total_swap 1138688 [ 151.626995][ T7540] total_swapcached 8192 [ 151.631192][ T7540] total_pgpgin 226666 [ 151.635248][ T7540] total_pgpgout 226664 [ 151.639316][ T7540] total_pgfault 201249 [ 151.643368][ T7540] total_pgmajfault 12 [ 151.647358][ T7540] total_inactive_anon 0 [ 151.651499][ T7540] total_active_anon 8192 [ 151.655716][ T7540] total_inactive_file 0 [ 151.659865][ T7540] total_active_file 0 [ 151.663828][ T7540] total_unevictable 0 [ 151.667813][ T7540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.996,pid=7539,uid=0 [ 151.682369][ T7540] Memory cgroup out of memory: Killed process 7539 (syz.0.996) total-vm:94076kB, anon-rss:1140kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 151.863423][ T7599] usb usb9: usbfs: process 7599 (syz.1.1023) did not claim interface 4 before use [ 151.899692][ T7602] pim6reg1: entered promiscuous mode [ 151.905050][ T7602] pim6reg1: entered allmulticast mode [ 151.918200][ T7602] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 151.931597][ T7602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.965825][ T7603] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1019'. [ 152.392002][ T7640] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 152.476416][ T7640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.519334][ T7646] pim6reg1: entered promiscuous mode [ 152.524757][ T7646] pim6reg1: entered allmulticast mode [ 152.915103][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1046'. [ 152.924098][ T7673] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1046'. [ 152.977261][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 153.007129][ T7679] usb usb1: usbfs: process 7679 (syz.1.1054) did not claim interface 22 before use [ 153.029843][ T7676] pim6reg1: entered promiscuous mode [ 153.035226][ T7676] pim6reg1: entered allmulticast mode [ 153.080023][ T7681] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 153.116285][ T7681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.246921][ T7706] pim6reg1: entered promiscuous mode [ 153.252273][ T7706] pim6reg1: entered allmulticast mode [ 153.271732][ T7706] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 153.303119][ T7706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.326991][ T7720] pim6reg1: entered promiscuous mode [ 153.332560][ T7720] pim6reg1: entered allmulticast mode [ 153.355436][ T7724] pim6reg1: entered promiscuous mode [ 153.361003][ T7724] pim6reg1: entered allmulticast mode [ 153.396260][ T7735] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1075'. [ 153.452621][ T7738] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 153.467024][ T7738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.497342][ T29] kauditd_printk_skb: 731 callbacks suppressed [ 153.497358][ T29] audit: type=1400 audit(158.881:16772): avc: denied { connect } for pid=7747 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.567096][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 153.620092][ T7768] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 153.629348][ T7772] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1093' sets config #6 [ 153.641876][ T7768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.677334][ T7775] pim6reg1: entered promiscuous mode [ 153.682664][ T7775] pim6reg1: entered allmulticast mode [ 153.696314][ T7780] usb usb8: usbfs: process 7780 (syz.1.1095) did not claim interface 0 before use [ 153.708787][ T7775] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 153.737364][ T7775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.837672][ T7802] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 153.862519][ T7802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.984329][ T7828] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 153.991342][ T29] audit: type=1326 audit(159.312:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 153.992138][ T7828] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1113'. [ 154.015003][ T29] audit: type=1326 audit(159.312:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 154.047102][ T29] audit: type=1326 audit(159.312:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 154.070186][ T29] audit: type=1326 audit(159.312:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1dd6bef003 code=0x7ffc0000 [ 154.093363][ T29] audit: type=1326 audit(159.322:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1dd6beda7f code=0x7ffc0000 [ 154.116190][ T29] audit: type=1326 audit(159.322:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1dd6bef057 code=0x7ffc0000 [ 154.126790][ T7829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.139153][ T29] audit: type=1326 audit(159.322:16779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dd6bed810 code=0x7ffc0000 [ 154.145692][ T7829] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 154.214748][ T7839] pim6reg1: entered promiscuous mode [ 154.220536][ T7839] pim6reg1: entered allmulticast mode [ 154.246627][ T7839] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 154.286815][ T7839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.337631][ T7843] lo speed is unknown, defaulting to 1000 [ 154.397428][ T7843] lo speed is unknown, defaulting to 1000 [ 154.453012][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 154.529924][ T7857] random: crng reseeded on system resumption [ 154.754246][ T7873] random: crng reseeded on system resumption [ 154.973424][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1138'. [ 154.982443][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1138'. [ 155.034144][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 155.297397][ T7916] IPv6: Can't replace route, no match found [ 155.359297][ T7925] random: crng reseeded on system resumption [ 155.432342][ T7936] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 155.462938][ T7940] SELinux: failed to load policy [ 155.473875][ T7942] IPv6: Can't replace route, no match found [ 155.543557][ T7958] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 155.551310][ T7958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1172'. [ 155.696010][ T7983] vhci_hcd: invalid port number 23 [ 155.701164][ T7983] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 155.792452][ T8001] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.800432][ T8001] vhci_hcd: invalid port number 96 [ 155.805570][ T8001] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 155.883959][ T8023] xt_connbytes: Forcing CT accounting to be enabled [ 155.991330][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 156.000597][ T8045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1207'. [ 156.017072][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 156.040161][ T8049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1214'. [ 156.129296][ T8067] sg_write: data in/out 196864/1 bytes for SCSI command 0x0-- guessing data in; [ 156.129296][ T8067] program syz.4.1221 not setting count and/or reply_len properly [ 156.239569][ T8083] pim6reg1: entered promiscuous mode [ 156.244948][ T8083] pim6reg1: entered allmulticast mode [ 156.261758][ T8085] random: crng reseeded on system resumption [ 156.381557][ T8109] random: crng reseeded on system resumption [ 156.435927][ T8115] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 156.460407][ T8115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.546694][ T8123] SELinux: failed to load policy [ 156.641134][ T8143] pim6reg1: entered promiscuous mode [ 156.646679][ T8143] pim6reg1: entered allmulticast mode [ 156.658985][ T8143] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 156.667006][ T8147] 9pnet: Unknown protocol version 9 [ 156.683524][ T8143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.906418][ T8188] pim6reg1: entered promiscuous mode [ 156.911757][ T8188] pim6reg1: entered allmulticast mode [ 156.925557][ T8188] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 156.948853][ T8188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.060108][ T8221] qrtr: Invalid version 0 [ 157.166576][ T8241] pim6reg1: entered promiscuous mode [ 157.172045][ T8241] pim6reg1: entered allmulticast mode [ 157.221761][ T8251] pim6reg1: entered promiscuous mode [ 157.227089][ T8251] pim6reg1: entered allmulticast mode [ 157.237854][ T8251] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 157.255565][ T8251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.390895][ T8287] pim6reg1: entered promiscuous mode [ 157.396459][ T8287] pim6reg1: entered allmulticast mode [ 157.412752][ T8289] pim6reg1: entered promiscuous mode [ 157.418097][ T8289] pim6reg1: entered allmulticast mode [ 157.458970][ T8295] usb usb8: usbfs: process 8295 (syz.2.1329) did not claim interface 0 before use [ 157.680593][ T8333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.150034][ T8381] pim6reg1: entered promiscuous mode [ 158.159002][ T8384] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 158.163504][ T8381] pim6reg1: entered allmulticast mode [ 158.179010][ T8384] SELinux: failed to load policy [ 158.285936][ T8381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.407519][ T8312] Set syz1 is full, maxelem 65536 reached [ 158.445041][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 158.445056][ T29] audit: type=1326 audit(164.078:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.483812][ T29] audit: type=1326 audit(164.088:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.506822][ T29] audit: type=1326 audit(164.088:17315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.529633][ T29] audit: type=1326 audit(164.088:17316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.552538][ T29] audit: type=1326 audit(164.088:17317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.575422][ T29] audit: type=1326 audit(164.088:17318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.589095][ T8420] pim6reg1: entered promiscuous mode [ 158.598376][ T29] audit: type=1326 audit(164.088:17319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.603754][ T8420] pim6reg1: entered allmulticast mode [ 158.626644][ T29] audit: type=1326 audit(164.088:17320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.626754][ T29] audit: type=1326 audit(164.088:17321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.677849][ T29] audit: type=1326 audit(164.088:17322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 158.683340][ T8420] validate_nla: 2 callbacks suppressed [ 158.683356][ T8420] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 158.718575][ T8420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.744813][ T8422] pim6reg1: entered promiscuous mode [ 158.750220][ T8422] pim6reg1: entered allmulticast mode [ 158.770520][ T8422] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 158.788422][ T8429] __nla_validate_parse: 17 callbacks suppressed [ 158.788433][ T8429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1390'. [ 158.803816][ T8429] openvswitch: netlink: Flow actions attr not present in new flow. [ 158.813782][ T8422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.905403][ T8448] pim6reg1: entered promiscuous mode [ 158.910807][ T8448] pim6reg1: entered allmulticast mode [ 158.942497][ T8448] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 158.987716][ T8448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.183568][ T8492] bond0: (slave veth1_to_bond): Enslaving as an active interface with an up link [ 159.277896][ T8502] pim6reg1: entered promiscuous mode [ 159.283227][ T8502] pim6reg1: entered allmulticast mode [ 159.291840][ T8502] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 159.353809][ T8502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.982921][ T8572] netlink: 'syz.0.1445': attribute type 13 has an invalid length. [ 160.006709][ T8572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.186551][ T8596] pim6reg1: entered promiscuous mode [ 160.191944][ T8596] pim6reg1: entered allmulticast mode [ 160.203866][ T8596] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 160.212843][ T8598] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 160.220879][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.241737][ T8598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.433973][ T8619] unsupported nla_type 52263 [ 160.472168][ T8617] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 160.500060][ T8617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.550215][ T8631] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1468'. [ 160.623694][ T8590] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.662661][ T8434] Set syz1 is full, maxelem 65536 reached [ 160.725263][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1478'. [ 160.734340][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1478'. [ 160.744591][ T8645] usb usb8: usbfs: process 8645 (syz.2.1475) did not claim interface 0 before use [ 160.762951][ T8649] pim6reg1: entered promiscuous mode [ 160.768294][ T8649] pim6reg1: entered allmulticast mode [ 160.876883][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'. [ 160.885900][ T8676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1484'. [ 160.925543][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 160.947696][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 161.148390][ T8717] xt_connbytes: Forcing CT accounting to be enabled [ 161.178124][ T8721] pim6reg1: entered promiscuous mode [ 161.183625][ T8721] pim6reg1: entered allmulticast mode [ 161.192228][ T8721] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 161.367099][ T8742] pim6reg1: entered promiscuous mode [ 161.372622][ T8742] pim6reg1: entered allmulticast mode [ 161.398041][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1522'. [ 161.414229][ T8742] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 161.570478][ T8780] $Hÿ: renamed from bond0 (while UP) [ 161.582385][ T8780] $Hÿ: entered promiscuous mode [ 161.648275][ T8796] program syz.3.1542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.733469][ T8812] usb usb1: usbfs: process 8812 (syz.3.1550) did not claim interface 0 before use [ 161.792507][ T8820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1551'. [ 161.822604][ T8821] pim6reg1: entered promiscuous mode [ 161.828056][ T8821] pim6reg1: entered allmulticast mode [ 161.879221][ T8833] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 161.895494][ T8821] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 162.095420][ T1051] hid_parser_main: 25 callbacks suppressed [ 162.095437][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.108810][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.116366][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.123806][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.131243][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.138790][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.146444][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.153889][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.161451][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.168977][ T1051] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 162.177809][ T1051] hid-generic 00A0:0008:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 162.202225][ T8878] fido_id[8878]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.264921][ T8885] pim6reg1: entered promiscuous mode [ 162.270300][ T8885] pim6reg1: entered allmulticast mode [ 162.445107][ T8899] random: crng reseeded on system resumption [ 162.564678][ T8917] pim6reg1: entered promiscuous mode [ 162.570032][ T8917] pim6reg1: entered allmulticast mode [ 162.712876][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.722968][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.755943][ T8951] pim6reg1: entered promiscuous mode [ 162.761260][ T8951] pim6reg1: entered allmulticast mode [ 162.979355][ T8967] block device autoloading is deprecated and will be removed. [ 163.239677][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 163.239692][ T29] audit: type=1400 audit(169.106:17818): avc: denied { map } for pid=9006 comm="syz.2.1633" path="socket:[25141]" dev="sockfs" ino=25141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 163.291941][ T29] audit: type=1326 audit(169.159:17819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.323510][ T29] audit: type=1326 audit(169.159:17820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.346761][ T29] audit: type=1326 audit(169.159:17821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.371449][ T29] audit: type=1326 audit(169.159:17822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.394469][ T29] audit: type=1326 audit(169.159:17823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.417887][ T29] audit: type=1326 audit(169.159:17824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.440909][ T29] audit: type=1326 audit(169.159:17825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.463801][ T29] audit: type=1326 audit(169.159:17826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.486712][ T29] audit: type=1326 audit(169.159:17827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9006 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 163.611629][ T9028] __nla_validate_parse: 12 callbacks suppressed [ 163.611647][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1639'. [ 163.685703][ T9038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1644'. [ 163.695588][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'. [ 163.777575][ T9042] validate_nla: 5 callbacks suppressed [ 163.777599][ T9042] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 163.803159][ T9042] net_ratelimit: 6 callbacks suppressed [ 163.803169][ T9042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.826666][ T9056] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1651'. [ 163.837110][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 163.918648][ T9064] pim6reg1: entered promiscuous mode [ 163.924022][ T9064] pim6reg1: entered allmulticast mode [ 163.952474][ T9064] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 163.968490][ T9064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.015883][ T9006] syz.2.1633 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 164.027292][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.2.1633 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.027371][ T9006] Tainted: [W]=WARN [ 164.027377][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.027389][ T9006] Call Trace: [ 164.027394][ T9006] [ 164.027402][ T9006] __dump_stack+0x1d/0x30 [ 164.027424][ T9006] dump_stack_lvl+0xe8/0x140 [ 164.027485][ T9006] dump_stack+0x15/0x1b [ 164.027502][ T9006] dump_header+0x81/0x220 [ 164.027521][ T9006] oom_kill_process+0x342/0x400 [ 164.027547][ T9006] out_of_memory+0x979/0xb80 [ 164.027620][ T9006] try_charge_memcg+0x610/0xa10 [ 164.027653][ T9006] charge_memcg+0x51/0xc0 [ 164.027675][ T9006] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 164.027701][ T9006] __read_swap_cache_async+0x17b/0x2d0 [ 164.027761][ T9006] swap_cluster_readahead+0x262/0x3c0 [ 164.027788][ T9006] swapin_readahead+0xde/0x6f0 [ 164.027807][ T9006] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 164.027879][ T9006] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 164.027904][ T9006] ? __rcu_read_unlock+0x4f/0x70 [ 164.027926][ T9006] ? swap_cache_get_folio+0x277/0x280 [ 164.027960][ T9006] do_swap_page+0x2ae/0x2370 [ 164.027985][ T9006] ? css_rstat_updated+0xb7/0x240 [ 164.028006][ T9006] ? __pfx_default_wake_function+0x10/0x10 [ 164.028085][ T9006] handle_mm_fault+0x9a5/0x2be0 [ 164.028105][ T9006] ? vma_start_read+0x141/0x1f0 [ 164.028151][ T9006] do_user_addr_fault+0x630/0x1080 [ 164.028169][ T9006] ? fpregs_restore_userregs+0xe2/0x1d0 [ 164.028245][ T9006] ? switch_fpu_return+0xe/0x20 [ 164.028273][ T9006] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 164.028401][ T9006] exc_page_fault+0x62/0xa0 [ 164.028521][ T9006] asm_exc_page_fault+0x26/0x30 [ 164.028537][ T9006] RIP: 0033:0x7f8bbb0e58ec [ 164.028551][ T9006] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 164.028630][ T9006] RSP: 002b:00007ffd6ba0c460 EFLAGS: 00010202 [ 164.028646][ T9006] RAX: 0000000000000000 RBX: 00007f8bbb465fa0 RCX: 0000000000000000 [ 164.028657][ T9006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559121d808 [ 164.028668][ T9006] RBP: 00007f8bbb467da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 164.028678][ T9006] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000297d5 [ 164.028688][ T9006] R13: 00007f8bbb466180 R14: ffffffffffffffff R15: 00007ffd6ba0c570 [ 164.028704][ T9006] [ 164.028715][ T9006] memory: usage 307200kB, limit 307200kB, failcnt 230 [ 164.122381][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 164.123433][ T9006] memory+swap: usage 308116kB, limit 9007199254740988kB, failcnt 0 [ 164.123448][ T9006] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 164.299726][ T9006] Memory cgroup stats for /syz2: [ 164.300058][ T9006] cache 0 [ 164.307982][ T9006] rss 0 [ 164.310769][ T9006] shmem 0 [ 164.313699][ T9006] mapped_file 0 [ 164.317343][ T9006] dirty 0 [ 164.320268][ T9006] writeback 4096 [ 164.323842][ T9006] workingset_refault_anon 51 [ 164.328538][ T9006] workingset_refault_file 703 [ 164.333204][ T9006] swap 937984 [ 164.336585][ T9006] swapcached 12288 [ 164.340322][ T9006] pgpgin 181882 [ 164.343798][ T9006] pgpgout 181879 [ 164.347381][ T9006] pgfault 182763 [ 164.350949][ T9006] pgmajfault 46 [ 164.354449][ T9006] inactive_anon 12288 [ 164.358436][ T9006] active_anon 0 [ 164.361891][ T9006] inactive_file 0 [ 164.363822][ T1051] kernel write not supported for file /input/event2 (pid: 1051 comm: kworker/1:2) [ 164.365632][ T9006] active_file 0 [ 164.378223][ T9006] unevictable 0 [ 164.381797][ T9006] hierarchical_memory_limit 314572800 [ 164.387287][ T9006] hierarchical_memsw_limit 9223372036854771712 [ 164.393533][ T9006] total_cache 0 [ 164.397022][ T9006] total_rss 0 [ 164.400382][ T9006] total_shmem 0 [ 164.403883][ T9006] total_mapped_file 0 [ 164.404187][ T9104] netlink: 'syz.0.1665': attribute type 13 has an invalid length. [ 164.407853][ T9006] total_dirty 0 [ 164.407863][ T9006] total_writeback 4096 [ 164.407870][ T9006] total_workingset_refault_anon 51 [ 164.407879][ T9006] total_workingset_refault_file 703 [ 164.433515][ T9006] total_swap 937984 [ 164.437308][ T9006] total_swapcached 12288 [ 164.441612][ T9006] total_pgpgin 181882 [ 164.445591][ T9006] total_pgpgout 181879 [ 164.449652][ T9006] total_pgfault 182763 [ 164.453715][ T9006] total_pgmajfault 46 [ 164.457690][ T9006] total_inactive_anon 12288 [ 164.462204][ T9006] total_active_anon 0 [ 164.466174][ T9006] total_inactive_file 0 [ 164.470337][ T9006] total_active_file 0 [ 164.474292][ T9006] total_unevictable 0 [ 164.478266][ T9006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1633,pid=9006,uid=0 [ 164.492915][ T9006] Memory cgroup out of memory: Killed process 9006 (syz.2.1633) total-vm:94076kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 164.556696][ T9104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.668925][ T9124] block device autoloading is deprecated and will be removed. [ 164.689591][ T9122] pim6reg1: entered promiscuous mode [ 164.695105][ T9122] pim6reg1: entered allmulticast mode [ 164.718721][ T9122] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 164.753081][ T9122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.870246][ T9149] pim6reg1: entered promiscuous mode [ 164.875735][ T9149] pim6reg1: entered allmulticast mode [ 164.891392][ T9149] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 164.914633][ T9160] program syz.4.1689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.925948][ T9149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.059591][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1694'. [ 165.068685][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1694'. [ 165.081858][ T9183] pim6reg1: entered promiscuous mode [ 165.087300][ T9183] pim6reg1: entered allmulticast mode [ 165.116883][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 165.127198][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1699'. [ 165.155641][ T9183] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 165.182427][ T9183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.235205][ T9197] program syz.3.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.414357][ T9212] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 165.433634][ T9216] pim6reg1: entered promiscuous mode [ 165.438966][ T9216] pim6reg1: entered allmulticast mode [ 165.450444][ T9216] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 165.473172][ T9216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.546474][ T9228] pim6reg1: entered promiscuous mode [ 165.551813][ T9228] pim6reg1: entered allmulticast mode [ 165.779068][ T9254] pim6reg1: entered promiscuous mode [ 165.784597][ T9254] pim6reg1: entered allmulticast mode [ 165.799144][ T9254] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 165.816714][ T9254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.895660][ T9179] syz.1.1696 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 165.909844][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.1.1696 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.909878][ T9179] Tainted: [W]=WARN [ 165.909903][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.909915][ T9179] Call Trace: [ 165.909923][ T9179] [ 165.909931][ T9179] __dump_stack+0x1d/0x30 [ 165.909976][ T9179] dump_stack_lvl+0xe8/0x140 [ 165.909994][ T9179] dump_stack+0x15/0x1b [ 165.910012][ T9179] dump_header+0x81/0x220 [ 165.910077][ T9179] oom_kill_process+0x342/0x400 [ 165.910140][ T9179] out_of_memory+0x979/0xb80 [ 165.910174][ T9179] try_charge_memcg+0x610/0xa10 [ 165.910205][ T9179] obj_cgroup_charge_pages+0xa6/0x150 [ 165.910268][ T9179] __memcg_kmem_charge_page+0x9f/0x170 [ 165.910328][ T9179] __alloc_frozen_pages_noprof+0x188/0x360 [ 165.910367][ T9179] alloc_pages_mpol+0xb3/0x260 [ 165.910418][ T9179] alloc_pages_noprof+0x90/0x130 [ 165.910437][ T9179] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 165.910479][ T9179] __kvmalloc_node_noprof+0x483/0x670 [ 165.910506][ T9179] ? ip_set_alloc+0x24/0x30 [ 165.910529][ T9179] ? ip_set_alloc+0x24/0x30 [ 165.910555][ T9179] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 165.910586][ T9179] ip_set_alloc+0x24/0x30 [ 165.910622][ T9179] hash_netiface_create+0x282/0x740 [ 165.910652][ T9179] ? __pfx_hash_netiface_create+0x10/0x10 [ 165.910760][ T9179] ip_set_create+0x3cc/0x970 [ 165.910793][ T9179] ? __nla_parse+0x40/0x60 [ 165.910818][ T9179] nfnetlink_rcv_msg+0x4c6/0x590 [ 165.910865][ T9179] netlink_rcv_skb+0x123/0x220 [ 165.910956][ T9179] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 165.911067][ T9179] nfnetlink_rcv+0x167/0x16c0 [ 165.911111][ T9179] ? kmem_cache_free+0xe4/0x3d0 [ 165.911141][ T9179] ? __kfree_skb+0x109/0x150 [ 165.911196][ T9179] ? nlmon_xmit+0x4f/0x60 [ 165.911235][ T9179] ? consume_skb+0x49/0x150 [ 165.911262][ T9179] ? nlmon_xmit+0x4f/0x60 [ 165.911370][ T9179] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 165.911403][ T9179] ? __dev_queue_xmit+0x1200/0x2000 [ 165.911435][ T9179] ? __dev_queue_xmit+0x182/0x2000 [ 165.911468][ T9179] ? ref_tracker_free+0x37d/0x3e0 [ 165.911506][ T9179] ? __netlink_deliver_tap+0x4dc/0x500 [ 165.911565][ T9179] netlink_unicast+0x5c0/0x690 [ 165.911624][ T9179] netlink_sendmsg+0x58b/0x6b0 [ 165.911642][ T9179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.911661][ T9179] __sock_sendmsg+0x145/0x180 [ 165.911721][ T9179] ____sys_sendmsg+0x31e/0x4e0 [ 165.911810][ T9179] ___sys_sendmsg+0x17b/0x1d0 [ 165.911851][ T9179] __x64_sys_sendmsg+0xd4/0x160 [ 165.911952][ T9179] x64_sys_call+0x191e/0x3000 [ 165.911976][ T9179] do_syscall_64+0xd2/0x200 [ 165.911996][ T9179] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.912042][ T9179] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.912068][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.912091][ T9179] RIP: 0033:0x7f1dd6beefc9 [ 165.912153][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.912172][ T9179] RSP: 002b:00007f1dd564f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.912192][ T9179] RAX: ffffffffffffffda RBX: 00007f1dd6e45fa0 RCX: 00007f1dd6beefc9 [ 165.912206][ T9179] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 165.912217][ T9179] RBP: 00007f1dd6c71f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.912231][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.912242][ T9179] R13: 00007f1dd6e46038 R14: 00007f1dd6e45fa0 R15: 00007ffd88b24dc8 [ 165.912259][ T9179] [ 165.912322][ T9179] memory: usage 307200kB, limit 307200kB, failcnt 662 [ 166.264122][ T9179] memory+swap: usage 307968kB, limit 9007199254740988kB, failcnt 0 [ 166.272023][ T9179] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 166.279308][ T9179] Memory cgroup stats for /syz1: [ 166.280216][ T9179] cache 4096 [ 166.288381][ T9179] rss 0 [ 166.291282][ T9179] shmem 0 [ 166.294203][ T9179] mapped_file 0 [ 166.297746][ T9179] dirty 0 [ 166.300683][ T9179] writeback 0 [ 166.303943][ T9179] workingset_refault_anon 115 [ 166.308643][ T9179] workingset_refault_file 714 [ 166.313309][ T9179] swap 786432 [ 166.316655][ T9179] swapcached 0 [ 166.320022][ T9179] pgpgin 214539 [ 166.323472][ T9179] pgpgout 214538 [ 166.327036][ T9179] pgfault 210099 [ 166.330573][ T9179] pgmajfault 75 [ 166.334019][ T9179] inactive_anon 0 [ 166.337671][ T9179] active_anon 0 [ 166.341131][ T9179] inactive_file 0 [ 166.344770][ T9179] active_file 4096 [ 166.348561][ T9179] unevictable 0 [ 166.352003][ T9179] hierarchical_memory_limit 314572800 [ 166.357392][ T9179] hierarchical_memsw_limit 9223372036854771712 [ 166.363569][ T9179] total_cache 4096 [ 166.367340][ T9179] total_rss 0 [ 166.370612][ T9179] total_shmem 0 [ 166.374082][ T9179] total_mapped_file 0 [ 166.378053][ T9179] total_dirty 0 [ 166.381492][ T9179] total_writeback 0 [ 166.385299][ T9179] total_workingset_refault_anon 115 [ 166.390576][ T9179] total_workingset_refault_file 714 [ 166.395830][ T9179] total_swap 786432 [ 166.399705][ T9179] total_swapcached 0 [ 166.403628][ T9179] total_pgpgin 214539 [ 166.407599][ T9179] total_pgpgout 214538 [ 166.411688][ T9179] total_pgfault 210099 [ 166.415772][ T9179] total_pgmajfault 75 [ 166.419726][ T9179] total_inactive_anon 0 [ 166.423898][ T9179] total_active_anon 0 [ 166.427885][ T9179] total_inactive_file 0 [ 166.432052][ T9179] total_active_file 4096 [ 166.436273][ T9179] total_unevictable 0 [ 166.440306][ T9179] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1696,pid=9178,uid=0 [ 166.454952][ T9179] Memory cgroup out of memory: Killed process 9178 (syz.1.1696) total-vm:93944kB, anon-rss:1088kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 166.706002][ T9] kernel read not supported for file /934/schedstat (pid: 9 comm: kworker/0:0) [ 166.740462][ T9290] SELinux: syz.0.1742 (9290) set checkreqprot to 1. This is no longer supported. [ 166.899746][ T9318] pim6reg1: entered promiscuous mode [ 166.905081][ T9318] pim6reg1: entered allmulticast mode [ 166.926249][ T23] hid-generic 0101:0002:0002.0007: item fetching failed at offset 0/1 [ 166.945632][ T9324] pim6reg1: entered promiscuous mode [ 166.951000][ T9324] pim6reg1: entered allmulticast mode [ 166.955651][ T23] hid-generic 0101:0002:0002.0007: probe with driver hid-generic failed with error -22 [ 166.967333][ T9324] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 166.997017][ T9324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.086380][ T9329] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 167.112083][ T9329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.443785][ T9384] pim6reg1: entered promiscuous mode [ 167.449100][ T9384] pim6reg1: entered allmulticast mode [ 167.652733][ T9405] pim6reg1: entered promiscuous mode [ 167.658072][ T9405] pim6reg1: entered allmulticast mode [ 167.789199][ T9420] pim6reg1: entered promiscuous mode [ 167.794870][ T9420] pim6reg1: entered allmulticast mode [ 167.843160][ T9426] block device autoloading is deprecated and will be removed. [ 167.928298][ T9432] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.936931][ T9432] vhci_hcd: invalid port number 96 [ 167.942304][ T9432] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 167.991266][ T9457] pim6reg1: entered promiscuous mode [ 167.996632][ T9457] pim6reg1: entered allmulticast mode [ 168.031478][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 168.031494][ T29] audit: type=1400 audit(174.145:18293): avc: denied { bind } for pid=9449 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.067591][ T29] audit: type=1400 audit(174.177:18294): avc: denied { listen } for pid=9465 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.128038][ T29] audit: type=1400 audit(174.208:18295): avc: denied { write } for pid=9467 comm="syz.0.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.147240][ T29] audit: type=1400 audit(174.208:18296): avc: denied { connect } for pid=9465 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.239227][ T29] audit: type=1400 audit(174.324:18297): avc: denied { create } for pid=9474 comm="syz.0.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 168.258282][ T29] audit: type=1400 audit(174.324:18298): avc: denied { write } for pid=9479 comm="syz.4.1823" name="tcp6" dev="proc" ino=4026532849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 168.306753][ T29] audit: type=1400 audit(174.429:18299): avc: denied { mount } for pid=9491 comm="syz.4.1827" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.336789][ T9488] vhci_hcd: invalid port number 255 [ 168.347148][ T29] audit: type=1400 audit(174.429:18300): avc: denied { remount } for pid=9491 comm="syz.4.1827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.369327][ T29] audit: type=1400 audit(174.492:18301): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.416622][ T29] audit: type=1400 audit(174.523:18302): avc: denied { accept } for pid=9496 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.437282][ T9506] pim6reg1: entered promiscuous mode [ 168.442718][ T9506] pim6reg1: entered allmulticast mode [ 168.456935][ T9507] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.488240][ T9509] __nla_validate_parse: 4 callbacks suppressed [ 168.488257][ T9509] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1835'. [ 168.514006][ T9515] usb usb5: usbfs: process 9515 (syz.3.1838) did not claim interface 0 before use [ 168.518088][ T9507] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.538185][ T9517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1839'. [ 168.552748][ T9513] pim6reg1: entered promiscuous mode [ 168.558297][ T9513] pim6reg1: entered allmulticast mode [ 168.579064][ T9507] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.599155][ T9513] validate_nla: 5 callbacks suppressed [ 168.599171][ T9513] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 168.618465][ T9525] pim6reg1: entered promiscuous mode [ 168.624249][ T9525] pim6reg1: entered allmulticast mode [ 168.645880][ T9513] net_ratelimit: 6 callbacks suppressed [ 168.645889][ T9513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.650088][ T9525] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 168.681891][ T9507] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.703664][ T9525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.719629][ T9538] bridge0: Device is already in use. [ 168.787589][ T1752] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.815176][ T1752] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.823590][ T9556] pim6reg1: entered promiscuous mode [ 168.828904][ T9556] pim6reg1: entered allmulticast mode [ 168.860436][ T9556] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 168.864024][ T1752] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.896147][ T9556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.911629][ T1752] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.930644][ T9566] pim6reg1: entered promiscuous mode [ 168.936104][ T9566] pim6reg1: entered allmulticast mode [ 168.944788][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1862'. [ 168.953795][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1862'. [ 168.976471][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 168.991422][ T9566] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 169.003714][ T9566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.029517][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1866'. [ 169.086962][ T9584] pim6reg1: entered promiscuous mode [ 169.092835][ T9584] pim6reg1: entered allmulticast mode [ 169.106706][ T9584] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 169.133563][ T9584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.149319][ T9597] tipc: Started in network mode [ 169.154229][ T9597] tipc: Node identity ac141441, cluster identity 4711 [ 169.163079][ T9597] tipc: Enabling of bearer rejected, failed to enable media [ 169.251852][ T9617] pim6reg1: entered promiscuous mode [ 169.257231][ T9617] pim6reg1: entered allmulticast mode [ 169.269103][ T9617] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 169.289614][ T9617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.678838][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 169.752444][ T9624] syz.2.1889 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 169.763567][ T9624] CPU: 0 UID: 0 PID: 9624 Comm: syz.2.1889 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 169.763598][ T9624] Tainted: [W]=WARN [ 169.763604][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.763614][ T9624] Call Trace: [ 169.763621][ T9624] [ 169.763629][ T9624] __dump_stack+0x1d/0x30 [ 169.763650][ T9624] dump_stack_lvl+0xe8/0x140 [ 169.763745][ T9624] dump_stack+0x15/0x1b [ 169.763759][ T9624] dump_header+0x81/0x220 [ 169.763777][ T9624] oom_kill_process+0x342/0x400 [ 169.763878][ T9624] out_of_memory+0x979/0xb80 [ 169.763906][ T9624] try_charge_memcg+0x610/0xa10 [ 169.763957][ T9624] charge_memcg+0x51/0xc0 [ 169.763976][ T9624] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 169.764035][ T9624] __read_swap_cache_async+0x17b/0x2d0 [ 169.764057][ T9624] swap_cluster_readahead+0x262/0x3c0 [ 169.764082][ T9624] swapin_readahead+0xde/0x6f0 [ 169.764125][ T9624] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 169.764151][ T9624] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 169.764177][ T9624] ? __rcu_read_unlock+0x4f/0x70 [ 169.764199][ T9624] ? swap_cache_get_folio+0x277/0x280 [ 169.764271][ T9624] do_swap_page+0x2ae/0x2370 [ 169.764323][ T9624] ? css_rstat_updated+0xb7/0x240 [ 169.764358][ T9624] ? __pfx_default_wake_function+0x10/0x10 [ 169.764490][ T9624] handle_mm_fault+0x9a5/0x2be0 [ 169.764516][ T9624] ? vma_start_read+0x141/0x1f0 [ 169.764546][ T9624] do_user_addr_fault+0x630/0x1080 [ 169.764641][ T9624] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 169.764667][ T9624] exc_page_fault+0x62/0xa0 [ 169.764690][ T9624] asm_exc_page_fault+0x26/0x30 [ 169.764738][ T9624] RIP: 0033:0x7f8bbb0e58ec [ 169.764754][ T9624] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 169.764772][ T9624] RSP: 002b:00007ffd6ba0c460 EFLAGS: 00010202 [ 169.764794][ T9624] RAX: 0000000000000000 RBX: 00007f8bbb465fa0 RCX: 0000000000000000 [ 169.764826][ T9624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559121d808 [ 169.764836][ T9624] RBP: 00007f8bbb467da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 169.764846][ T9624] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002b0c3 [ 169.764907][ T9624] R13: 00007f8bbb466090 R14: ffffffffffffffff R15: 00007ffd6ba0c570 [ 169.764925][ T9624] [ 169.993438][ T9624] memory: usage 307200kB, limit 307200kB, failcnt 658 [ 170.000269][ T9624] memory+swap: usage 308112kB, limit 9007199254740988kB, failcnt 0 [ 170.008263][ T9624] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 170.015604][ T9624] Memory cgroup stats for /syz2: [ 170.020358][ T9624] cache 0 [ 170.021036][ T9640] pim6reg1: entered promiscuous mode [ 170.025352][ T9624] rss 4096 [ 170.028270][ T9640] pim6reg1: entered allmulticast mode [ 170.033541][ T9624] shmem 0 [ 170.033552][ T9624] mapped_file 0 [ 170.048377][ T9624] dirty 0 [ 170.051356][ T9624] writeback 4096 [ 170.053147][ T9640] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 170.054893][ T9624] workingset_refault_anon 100 [ 170.067026][ T9624] workingset_refault_file 971 [ 170.071780][ T9624] swap 933888 [ 170.075058][ T9624] swapcached 8192 [ 170.078794][ T9624] pgpgin 184363 [ 170.082250][ T9624] pgpgout 184361 [ 170.085787][ T9624] pgfault 187778 [ 170.089489][ T9624] pgmajfault 80 [ 170.092948][ T9624] inactive_anon 8192 [ 170.096875][ T9624] active_anon 0 [ 170.100343][ T9624] inactive_file 0 [ 170.104047][ T9624] active_file 0 [ 170.107534][ T9624] unevictable 0 [ 170.110989][ T9624] hierarchical_memory_limit 314572800 [ 170.116423][ T9624] hierarchical_memsw_limit 9223372036854771712 [ 170.122725][ T9624] total_cache 0 [ 170.126238][ T9624] total_rss 4096 [ 170.129836][ T9624] total_shmem 0 [ 170.133292][ T9624] total_mapped_file 0 [ 170.137290][ T9624] total_dirty 0 [ 170.140739][ T9624] total_writeback 4096 [ 170.144795][ T9624] total_workingset_refault_anon 100 [ 170.149998][ T9624] total_workingset_refault_file 971 [ 170.155200][ T9624] total_swap 933888 [ 170.159001][ T9624] total_swapcached 8192 [ 170.163153][ T9624] total_pgpgin 184363 [ 170.167152][ T9624] total_pgpgout 184361 [ 170.171214][ T9624] total_pgfault 187778 [ 170.175303][ T9624] total_pgmajfault 80 [ 170.179273][ T9624] total_inactive_anon 8192 [ 170.183714][ T9624] total_active_anon 0 [ 170.187746][ T9624] total_inactive_file 0 [ 170.191893][ T9624] total_active_file 0 [ 170.195924][ T9624] total_unevictable 0 [ 170.199951][ T9624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1889,pid=9624,uid=0 [ 170.214652][ T9624] Memory cgroup out of memory: Killed process 9624 (syz.2.1889) total-vm:93944kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 170.231983][ T9640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.336715][ T9661] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 170.418264][ T9677] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 170.418264][ T9677] program syz.0.1912 not setting count and/or reply_len properly [ 170.474114][ T23] hid_parser_main: 5 callbacks suppressed [ 170.474131][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.487554][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.495110][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.502586][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.510198][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.517800][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.525242][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.532967][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.540433][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.547918][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.563928][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 170.600821][ T9693] fido_id[9693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.616636][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 170.928124][ T23] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.964675][ T9736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.976847][ T9734] fido_id[9734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.013560][ T9736] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.062934][ T9736] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.109603][ T9736] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.170174][ T4999] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.185120][ T4999] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.201371][ T4999] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.209881][ T9756] pim6reg1: entered promiscuous mode [ 171.215331][ T9756] pim6reg1: entered allmulticast mode [ 171.230221][ T9756] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 171.231416][ T4999] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.260573][ T9688] syz.2.1918 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 171.271699][ T9688] CPU: 0 UID: 0 PID: 9688 Comm: syz.2.1918 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.271734][ T9688] Tainted: [W]=WARN [ 171.271740][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.271752][ T9688] Call Trace: [ 171.271757][ T9688] [ 171.271765][ T9688] __dump_stack+0x1d/0x30 [ 171.271783][ T9688] dump_stack_lvl+0xe8/0x140 [ 171.271864][ T9688] dump_stack+0x15/0x1b [ 171.271880][ T9688] dump_header+0x81/0x220 [ 171.271897][ T9688] oom_kill_process+0x342/0x400 [ 171.272018][ T9688] out_of_memory+0x979/0xb80 [ 171.272049][ T9688] try_charge_memcg+0x610/0xa10 [ 171.272144][ T9688] charge_memcg+0x51/0xc0 [ 171.272165][ T9688] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 171.272186][ T9688] __read_swap_cache_async+0x17b/0x2d0 [ 171.272208][ T9688] swap_cluster_readahead+0x262/0x3c0 [ 171.272238][ T9688] swapin_readahead+0xde/0x6f0 [ 171.272301][ T9688] ? bpf_trace_run4+0x105/0x1d0 [ 171.272329][ T9688] ? __rcu_read_unlock+0x4f/0x70 [ 171.272355][ T9688] ? __rcu_read_unlock+0x4f/0x70 [ 171.272445][ T9688] ? swap_cache_get_folio+0x277/0x280 [ 171.272465][ T9688] do_swap_page+0x2ae/0x2370 [ 171.272556][ T9688] ? _raw_spin_unlock+0x26/0x50 [ 171.272639][ T9688] ? finish_task_switch+0xad/0x2b0 [ 171.272665][ T9688] ? __pfx_default_wake_function+0x10/0x10 [ 171.272690][ T9688] handle_mm_fault+0x9a5/0x2be0 [ 171.272711][ T9688] ? vma_start_read+0x141/0x1f0 [ 171.272812][ T9688] do_user_addr_fault+0x630/0x1080 [ 171.272835][ T9688] ? fpregs_restore_userregs+0xe2/0x1d0 [ 171.272937][ T9688] ? switch_fpu_return+0xe/0x20 [ 171.272961][ T9688] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.272989][ T9688] exc_page_fault+0x62/0xa0 [ 171.273094][ T9688] asm_exc_page_fault+0x26/0x30 [ 171.273181][ T9688] RIP: 0033:0x7f8bbb241888 [ 171.273197][ T9688] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 171.273215][ T9688] RSP: 002b:00007ffd6ba0c3f0 EFLAGS: 00010293 [ 171.273231][ T9688] RAX: 0000000000000000 RBX: 00007f8bbb465fa0 RCX: 00007f8bbb241885 [ 171.273242][ T9688] RDX: 00007ffd6ba0c430 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.273252][ T9688] RBP: 00007f8bbb467da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 171.273324][ T9688] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002b590 [ 171.273386][ T9688] R13: 00007f8bbb466180 R14: ffffffffffffffff R15: 00007ffd6ba0c570 [ 171.273409][ T9688] [ 171.273422][ T9688] memory: usage 307200kB, limit 307200kB, failcnt 1044 [ 171.284721][ T9688] memory+swap: usage 308128kB, limit 9007199254740988kB, failcnt 0 [ 171.298612][ T9688] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 171.298630][ T9688] Memory cgroup stats for /syz2: [ 171.298814][ T9688] cache 0 [ 171.548196][ T9688] rss 0 [ 171.548209][ T9688] shmem 0 [ 171.548215][ T9688] mapped_file 0 [ 171.548222][ T9688] dirty 0 [ 171.548228][ T9688] writeback 0 [ 171.548234][ T9688] workingset_refault_anon 120 [ 171.568217][ T9688] workingset_refault_file 1386 [ 171.573026][ T9688] swap 950272 [ 171.576324][ T9688] swapcached 0 [ 171.579694][ T9688] pgpgin 185054 [ 171.583148][ T9688] pgpgout 185054 [ 171.586785][ T9688] pgfault 188228 [ 171.590318][ T9688] pgmajfault 96 [ 171.593800][ T9688] inactive_anon 0 [ 171.597504][ T9688] active_anon 0 [ 171.600948][ T9688] inactive_file 0 [ 171.604588][ T9688] active_file 0 [ 171.608044][ T9688] unevictable 0 [ 171.611495][ T9688] hierarchical_memory_limit 314572800 [ 171.616883][ T9688] hierarchical_memsw_limit 9223372036854771712 [ 171.623047][ T9688] total_cache 0 [ 171.626502][ T9688] total_rss 0 [ 171.629778][ T9688] total_shmem 0 [ 171.633342][ T9688] total_mapped_file 0 [ 171.637321][ T9688] total_dirty 0 [ 171.640797][ T9688] total_writeback 0 [ 171.644594][ T9688] total_workingset_refault_anon 120 [ 171.649868][ T9688] total_workingset_refault_file 1386 [ 171.655193][ T9688] total_swap 950272 [ 171.659058][ T9688] total_swapcached 0 [ 171.662981][ T9688] total_pgpgin 185054 [ 171.666959][ T9688] total_pgpgout 185054 [ 171.671065][ T9688] total_pgfault 188228 [ 171.675130][ T9688] total_pgmajfault 96 [ 171.679153][ T9688] total_inactive_anon 0 [ 171.683330][ T9688] total_active_anon 0 [ 171.687322][ T9688] total_inactive_file 0 [ 171.691540][ T9688] total_active_file 0 [ 171.695512][ T9688] total_unevictable 0 [ 171.699512][ T9688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1918,pid=9688,uid=0 [ 171.714110][ T9688] Memory cgroup out of memory: Killed process 9688 (syz.2.1918) total-vm:94076kB, anon-rss:1132kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 171.731829][ T9756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.945900][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1958'. [ 172.070987][ T9792] pim6reg1: entered promiscuous mode [ 172.076311][ T9792] pim6reg1: entered allmulticast mode [ 172.083993][ T9794] ALSA: seq fatal error: cannot create timer (-22) [ 172.174353][ T9792] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 172.218726][ T9800] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 172.227865][ T9742] Set syz1 is full, maxelem 65536 reached [ 172.233682][ T9792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.251810][ T9800] team0: Port device dummy0 added [ 172.273941][ T9802] team0: Port device dummy0 removed [ 172.284441][ T9802] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.378552][ T9818] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 172.415912][ T9824] pim6reg1: entered promiscuous mode [ 172.421260][ T9824] pim6reg1: entered allmulticast mode [ 172.432770][ T9830] ALSA: seq fatal error: cannot create timer (-22) [ 172.496712][ T9838] Failed to initialize the IGMP autojoin socket (err -2) [ 172.508166][ T9836] can0: slcan on ttyS3. [ 172.555962][ T9835] can0 (unregistered): slcan off ttyS3. [ 172.571916][ T9843] pim6reg1: entered promiscuous mode [ 172.577529][ T9843] pim6reg1: entered allmulticast mode [ 172.606337][ T9849] netem: change failed [ 172.778218][ T9870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2001'. [ 172.813272][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 172.813286][ T29] audit: type=1326 audit(179.163:18711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 172.894699][ T29] audit: type=1326 audit(179.163:18712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 172.917697][ T29] audit: type=1326 audit(179.163:18713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 172.940857][ T29] audit: type=1326 audit(179.163:18714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 172.964054][ T29] audit: type=1326 audit(179.163:18715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 172.987004][ T29] audit: type=1326 audit(179.163:18716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 173.010125][ T29] audit: type=1326 audit(179.163:18717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 173.033089][ T29] audit: type=1326 audit(179.163:18718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.2.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 173.056165][ T29] audit: type=1400 audit(179.237:18719): avc: denied { create } for pid=9881 comm="syz.0.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 173.160112][ T29] audit: type=1400 audit(179.457:18720): avc: denied { create } for pid=9885 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.608818][ T9938] 9pnet: Unknown protocol version 9p20 [ 173.695824][ T9941] pim6reg1: entered promiscuous mode [ 173.701295][ T9941] pim6reg1: entered allmulticast mode [ 173.723873][ T9941] validate_nla: 5 callbacks suppressed [ 173.723888][ T9941] netlink: 'syz.0.2031': attribute type 13 has an invalid length. [ 173.782208][ T9941] net_ratelimit: 3 callbacks suppressed [ 173.782229][ T9941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.811271][ T9950] __nla_validate_parse: 6 callbacks suppressed [ 173.811288][ T9950] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2035'. [ 173.856306][ T9950] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2035'. [ 173.946827][ T9956] pim6reg1: entered promiscuous mode [ 173.952212][ T9956] pim6reg1: entered allmulticast mode [ 173.990020][ T9966] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2043'. [ 174.131742][ T9991] tap0: tun_chr_ioctl cmd 1074025677 [ 174.139083][ T9991] tap0: linktype set to 825 [ 174.224290][T10001] pim6reg1: entered promiscuous mode [ 174.229622][T10001] pim6reg1: entered allmulticast mode [ 174.464657][T10031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2070'. [ 174.473709][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2070'. [ 174.513731][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 174.642897][T10051] pim6reg1: entered promiscuous mode [ 174.644923][T10049] 9pnet: Unknown protocol version 9p20 [ 174.648350][T10051] pim6reg1: entered allmulticast mode [ 174.668206][T10051] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 174.689320][T10051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.916291][T10078] 9pnet: Unknown protocol version 9p20 [ 174.916317][T10082] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2098'. [ 174.944822][T10084] pim6reg1: entered promiscuous mode [ 174.950431][T10084] pim6reg1: entered allmulticast mode [ 174.966046][T10084] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 174.984368][T10084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.009220][T10088] pim6reg1: entered promiscuous mode [ 175.014599][T10088] pim6reg1: entered allmulticast mode [ 175.048136][T10088] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 175.074982][T10088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.218905][T10111] tap0: tun_chr_ioctl cmd 2148553947 [ 175.243960][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 175.311507][T10126] pim6reg1: entered promiscuous mode [ 175.316840][T10126] pim6reg1: entered allmulticast mode [ 175.332273][T10126] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 175.354759][T10126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.407238][T10130] pim6reg1: entered promiscuous mode [ 175.412554][T10130] pim6reg1: entered allmulticast mode [ 175.434356][T10130] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 175.474843][T10130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.601573][T10151] netlink: 'syz.3.2130': attribute type 20 has an invalid length. [ 175.673929][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 175.741240][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 175.832101][T10169] pim6reg1: entered promiscuous mode [ 175.837453][T10169] pim6reg1: entered allmulticast mode [ 175.849946][T10169] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 175.867505][T10169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.020753][T10179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.255197][T10203] SELinux: policydb version 0 does not match my version range 15-35 [ 176.264134][T10203] SELinux: failed to load policy [ 176.282994][T10205] program syz.3.2153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.435392][T10217] SELinux: ebitmap: truncated map [ 176.440919][T10217] SELinux: failed to load policy [ 176.464598][T10223] pim6reg1: entered promiscuous mode [ 176.469956][T10223] pim6reg1: entered allmulticast mode [ 176.629008][T10262] autofs4:pid:10262:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189374) [ 176.642206][T10262] autofs4:pid:10262:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 176.713675][T10273] pim6reg1: entered promiscuous mode [ 176.713690][T10273] pim6reg1: entered allmulticast mode [ 176.758515][T10279] Failed to initialize the IGMP autojoin socket (err -2) [ 176.912347][T10304] pim6reg1: entered promiscuous mode [ 176.917771][T10304] pim6reg1: entered allmulticast mode [ 176.960000][T10312] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 176.967962][T10312] SELinux: failed to load policy [ 177.350802][T10339] pim6reg1: entered promiscuous mode [ 177.356154][T10339] pim6reg1: entered allmulticast mode [ 177.640724][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 177.640737][ T29] audit: type=1400 audit(185.227:19420): avc: denied { create } for pid=10350 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.763019][ T29] audit: type=1400 audit(185.269:19421): avc: denied { bind } for pid=10350 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.782130][ T29] audit: type=1400 audit(185.269:19422): avc: denied { getopt } for pid=10350 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.801129][ T29] audit: type=1326 audit(185.321:19423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 177.824218][ T29] audit: type=1326 audit(185.321:19424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 177.847351][ T29] audit: type=1326 audit(185.332:19425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8bbb20efc9 code=0x7ffc0000 [ 177.870430][ T29] audit: type=1326 audit(185.332:19426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bbb20f003 code=0x7ffc0000 [ 177.872798][T10360] netlink: 'syz.2.2226': attribute type 10 has an invalid length. [ 177.893257][ T29] audit: type=1326 audit(185.332:19427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8bbb20da7f code=0x7ffc0000 [ 177.893299][ T29] audit: type=1326 audit(185.332:19428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8bbb20f057 code=0x7ffc0000 [ 177.947005][ T29] audit: type=1326 audit(185.332:19429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bbb20d810 code=0x7ffc0000 [ 178.010221][T10360] bond0: option arp_all_targets: invalid value (196616) [ 178.019361][ T3650] bond0: (slave veth1_to_bond): link status definitely down, disabling slave [ 178.051365][T10363] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 178.089978][T10363] SELinux: failed to load policy [ 179.176244][T10399] syz.3.2245 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 179.187273][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.3.2245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.187300][T10399] Tainted: [W]=WARN [ 179.187366][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.187393][T10399] Call Trace: [ 179.187399][T10399] [ 179.187406][T10399] __dump_stack+0x1d/0x30 [ 179.187426][T10399] dump_stack_lvl+0xe8/0x140 [ 179.187519][T10399] dump_stack+0x15/0x1b [ 179.187615][T10399] dump_header+0x81/0x220 [ 179.187631][T10399] oom_kill_process+0x342/0x400 [ 179.187656][T10399] out_of_memory+0x979/0xb80 [ 179.187680][T10399] try_charge_memcg+0x610/0xa10 [ 179.187780][T10399] charge_memcg+0x51/0xc0 [ 179.187802][T10399] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 179.187824][T10399] __read_swap_cache_async+0x17b/0x2d0 [ 179.187904][T10399] swap_cluster_readahead+0x362/0x3c0 [ 179.187932][T10399] swapin_readahead+0xde/0x6f0 [ 179.187953][T10399] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 179.187977][T10399] ? __rcu_read_unlock+0x34/0x70 [ 179.188064][T10399] ? __rcu_read_unlock+0x4f/0x70 [ 179.188087][T10399] ? swap_cache_get_folio+0x277/0x280 [ 179.188109][T10399] do_swap_page+0x2ae/0x2370 [ 179.188133][T10399] ? css_rstat_updated+0xb7/0x240 [ 179.188159][T10399] ? __pfx_default_wake_function+0x10/0x10 [ 179.188260][T10399] handle_mm_fault+0x9a5/0x2be0 [ 179.188281][T10399] ? vma_start_read+0x141/0x1f0 [ 179.188314][T10399] do_user_addr_fault+0x630/0x1080 [ 179.188340][T10399] exc_page_fault+0x62/0xa0 [ 179.188419][T10399] asm_exc_page_fault+0x26/0x30 [ 179.188435][T10399] RIP: 0033:0x7f61844558c8 [ 179.188448][T10399] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 24 38 00 00 0f 8e 09 fe ff ff e8 f3 9b fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 [ 179.188527][T10399] RSP: 002b:00007ffd0e687b00 EFLAGS: 00010212 [ 179.188594][T10399] RAX: 000000000002d5ca RBX: 00007f61847d7da0 RCX: 000000000002d2a8 [ 179.188607][T10399] RDX: 0000000000000322 RSI: 00007ffd0e687ae0 RDI: 0000000000000001 [ 179.188620][T10399] RBP: 00007f61847d7da0 R08: 000000002fcf8bcf R09: 7fffffffffffffff [ 179.188633][T10399] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002d601 [ 179.188646][T10399] R13: 00007f61847d6090 R14: ffffffffffffffff R15: 00007ffd0e687c10 [ 179.188689][T10399] [ 179.188694][T10399] memory: usage 307200kB, limit 307200kB, failcnt 1432 [ 179.418764][T10399] memory+swap: usage 307980kB, limit 9007199254740988kB, failcnt 0 [ 179.426758][T10399] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 179.434064][T10399] Memory cgroup stats for /syz3: [ 179.434206][T10399] cache 0 [ 179.442038][T10399] rss 0 [ 179.444835][T10399] shmem 0 [ 179.447787][T10399] mapped_file 0 [ 179.451225][T10399] dirty 0 [ 179.454173][T10399] writeback 0 [ 179.457491][T10399] workingset_refault_anon 253 [ 179.462174][T10399] workingset_refault_file 1726 [ 179.466922][T10399] swap 798720 [ 179.470195][T10399] swapcached 0 [ 179.473586][T10399] pgpgin 179161 [ 179.477026][T10399] pgpgout 179161 [ 179.480609][T10399] pgfault 208996 [ 179.484143][T10399] pgmajfault 125 [ 179.487760][T10399] inactive_anon 0 [ 179.491408][T10399] active_anon 0 [ 179.494911][T10399] inactive_file 0 [ 179.498529][T10399] active_file 0 [ 179.501998][T10399] unevictable 0 [ 179.505467][T10399] hierarchical_memory_limit 314572800 [ 179.510852][T10399] hierarchical_memsw_limit 9223372036854771712 [ 179.517056][T10399] total_cache 0 [ 179.520529][T10399] total_rss 0 [ 179.523807][T10399] total_shmem 0 [ 179.527264][T10399] total_mapped_file 0 [ 179.531282][T10399] total_dirty 0 [ 179.534754][T10399] total_writeback 0 [ 179.538558][T10399] total_workingset_refault_anon 253 [ 179.543741][T10399] total_workingset_refault_file 1726 [ 179.549031][T10399] total_swap 798720 [ 179.552871][T10399] total_swapcached 0 [ 179.556824][T10399] total_pgpgin 179161 [ 179.560792][T10399] total_pgpgout 179161 [ 179.564877][T10399] total_pgfault 208996 [ 179.568957][T10399] total_pgmajfault 125 [ 179.573012][T10399] total_inactive_anon 0 [ 179.577176][T10399] total_active_anon 0 [ 179.581144][T10399] total_inactive_file 0 [ 179.585393][T10399] total_active_file 0 [ 179.589364][T10399] total_unevictable 0 [ 179.593338][T10399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2245,pid=10399,uid=0 [ 179.608192][T10399] Memory cgroup out of memory: Killed process 10399 (syz.3.2245) total-vm:94076kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 179.893870][T10458] pim6reg1: entered promiscuous mode [ 179.899189][T10458] pim6reg1: entered allmulticast mode [ 179.908104][T10458] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 179.924366][T10458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.078929][T10473] tap0: tun_chr_ioctl cmd 1074025681 [ 180.231282][T10488] pim6reg1: entered promiscuous mode [ 180.237256][T10488] pim6reg1: entered allmulticast mode [ 180.284605][T10488] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 180.319723][T10488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.417352][T10500] __nla_validate_parse: 7 callbacks suppressed [ 180.417365][T10500] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2288'. [ 180.513620][T10510] program syz.2.2293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.816152][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 180.827204][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.827296][ T3313] Tainted: [W]=WARN [ 180.827303][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.827372][ T3313] Call Trace: [ 180.827378][ T3313] [ 180.827386][ T3313] __dump_stack+0x1d/0x30 [ 180.827405][ T3313] dump_stack_lvl+0xe8/0x140 [ 180.827422][ T3313] dump_stack+0x15/0x1b [ 180.827438][ T3313] dump_header+0x81/0x220 [ 180.827456][ T3313] oom_kill_process+0x342/0x400 [ 180.827578][ T3313] out_of_memory+0x979/0xb80 [ 180.827643][ T3313] try_charge_memcg+0x610/0xa10 [ 180.827786][ T3313] charge_memcg+0x51/0xc0 [ 180.827807][ T3313] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 180.827830][ T3313] __read_swap_cache_async+0x17b/0x2d0 [ 180.827882][ T3313] swap_cluster_readahead+0x262/0x3c0 [ 180.827951][ T3313] swapin_readahead+0xde/0x6f0 [ 180.827970][ T3313] ? next_uptodate_folio+0x81c/0x890 [ 180.827987][ T3313] ? percpu_counter_add_batch+0xb6/0x130 [ 180.828072][ T3313] ? __rcu_read_unlock+0x4f/0x70 [ 180.828091][ T3313] ? swap_cache_get_folio+0x277/0x280 [ 180.828221][ T3313] do_swap_page+0x2ae/0x2370 [ 180.828242][ T3313] ? fput+0x8f/0xc0 [ 180.828262][ T3313] ? css_rstat_updated+0xb7/0x240 [ 180.828282][ T3313] ? __pfx_default_wake_function+0x10/0x10 [ 180.828304][ T3313] handle_mm_fault+0x9a5/0x2be0 [ 180.828399][ T3313] ? vma_start_read+0x141/0x1f0 [ 180.828467][ T3313] do_user_addr_fault+0x630/0x1080 [ 180.828494][ T3313] exc_page_fault+0x62/0xa0 [ 180.828521][ T3313] asm_exc_page_fault+0x26/0x30 [ 180.828553][ T3313] RIP: 0033:0x7f6184455ed7 [ 180.828569][ T3313] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f7 ea 00 48 01 d1 39 7c 24 [ 180.828586][ T3313] RSP: 002b:00007ffd0e687d20 EFLAGS: 00010206 [ 180.828633][ T3313] RAX: 0000001b33a24000 RBX: 00000000000004db RCX: 000000000002da78 [ 180.828646][ T3313] RDX: 00000000080bd9d9 RSI: 00007ffd0e687db0 RDI: 000000000000001c [ 180.828657][ T3313] RBP: 00007ffd0e687d5c R08: 000000001eb1b538 R09: 7fffffffffffffff [ 180.828697][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 180.828710][ T3313] R13: 00000000000927c0 R14: 000000000002da4a R15: 00007ffd0e687db0 [ 180.828729][ T3313] [ 180.828743][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 1794 [ 181.062681][ T3313] memory+swap: usage 307952kB, limit 9007199254740988kB, failcnt 0 [ 181.070575][ T3313] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 181.077862][ T3313] Memory cgroup stats for /syz3: [ 181.080048][ T3313] cache 0 [ 181.088014][ T3313] rss 0 [ 181.090835][ T3313] shmem 0 [ 181.093755][ T3313] mapped_file 0 [ 181.097222][ T3313] dirty 0 [ 181.100187][ T3313] writeback 0 [ 181.103481][ T3313] workingset_refault_anon 270 [ 181.108141][ T3313] workingset_refault_file 2239 [ 181.112905][ T3313] swap 770048 [ 181.116173][ T3313] swapcached 28672 [ 181.119897][ T3313] pgpgin 179938 [ 181.123430][ T3313] pgpgout 179931 [ 181.126960][ T3313] pgfault 209377 [ 181.130512][ T3313] pgmajfault 142 [ 181.134045][ T3313] inactive_anon 28672 [ 181.138062][ T3313] active_anon 0 [ 181.141621][ T3313] inactive_file 0 [ 181.145236][ T3313] active_file 0 [ 181.148689][ T3313] unevictable 0 [ 181.152155][ T3313] hierarchical_memory_limit 314572800 [ 181.157520][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 181.163662][ T3313] total_cache 0 [ 181.167157][ T3313] total_rss 0 [ 181.170427][ T3313] total_shmem 0 [ 181.173952][ T3313] total_mapped_file 0 [ 181.177941][ T3313] total_dirty 0 [ 181.181385][ T3313] total_writeback 0 [ 181.185243][ T3313] total_workingset_refault_anon 270 [ 181.190502][ T3313] total_workingset_refault_file 2239 [ 181.195813][ T3313] total_swap 770048 [ 181.199612][ T3313] total_swapcached 28672 [ 181.203836][ T3313] total_pgpgin 179938 [ 181.207855][ T3313] total_pgpgout 179931 [ 181.211922][ T3313] total_pgfault 209377 [ 181.216051][ T3313] total_pgmajfault 142 [ 181.220116][ T3313] total_inactive_anon 28672 [ 181.224623][ T3313] total_active_anon 0 [ 181.228612][ T3313] total_inactive_file 0 [ 181.232849][ T3313] total_active_file 0 [ 181.236910][ T3313] total_unevictable 0 [ 181.240880][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2279,pid=10474,uid=0 [ 181.255586][ T3313] Memory cgroup out of memory: Killed process 10474 (syz.3.2279) total-vm:94076kB, anon-rss:1132kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 181.408247][T10537] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 4294967286. macoff=82 [ 181.446448][T10539] pim6reg1: entered promiscuous mode [ 181.446465][T10539] pim6reg1: entered allmulticast mode [ 181.456409][T10539] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 181.474785][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.626970][T10543] smc: net device bond0 applied user defined pnetid SYZ0 [ 181.646747][T10543] smc: net device bond0 erased user defined pnetid SYZ0 [ 181.753457][T10566] pim6reg1: entered promiscuous mode [ 181.758909][T10566] pim6reg1: entered allmulticast mode [ 181.780690][T10566] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 181.795787][T10566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.910227][T10571] program syz.3.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.159501][T10582] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 182.159528][T10582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.159595][T10582] vhci_hcd vhci_hcd.0: Device attached [ 182.168471][T10583] vhci_hcd: connection closed [ 182.175756][ T1692] vhci_hcd: stop threads [ 182.175768][ T1692] vhci_hcd: release socket [ 182.175775][ T1692] vhci_hcd: disconnect device [ 182.231596][T10586] netlink: 'syz.1.2326': attribute type 1 has an invalid length. [ 182.239385][T10586] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2326'. [ 182.418556][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 182.418569][ T29] audit: type=1400 audit(190.245:19960): avc: denied { read } for pid=10597 comm="syz.1.2332" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.483781][ T29] audit: type=1400 audit(190.245:19961): avc: denied { open } for pid=10597 comm="syz.1.2332" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.507309][ T29] audit: type=1400 audit(190.287:19962): avc: denied { ioctl } for pid=10597 comm="syz.1.2332" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.532364][ T29] audit: type=1400 audit(190.318:19963): avc: denied { create } for pid=10600 comm="syz.1.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.623875][ T29] audit: type=1326 audit(190.318:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 182.646884][ T29] audit: type=1326 audit(190.318:19965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 182.670030][ T29] audit: type=1326 audit(190.392:19966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 182.693047][ T29] audit: type=1326 audit(190.392:19967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 182.716169][ T29] audit: type=1326 audit(190.392:19968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd6beefc9 code=0x7ffc0000 [ 182.739157][ T29] audit: type=1400 audit(190.444:19969): avc: denied { write } for pid=10602 comm="syz.1.2334" name="unix" dev="proc" ino=4026532541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.929327][T10616] pim6reg1: entered promiscuous mode [ 182.934693][T10616] pim6reg1: entered allmulticast mode [ 182.964591][T10616] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 182.987092][T10616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.002968][T10622] hub 1-0:1.0: USB hub found [ 183.008129][T10622] hub 1-0:1.0: 8 ports detected [ 183.103403][T10629] pim6reg1: entered promiscuous mode [ 183.108756][T10629] pim6reg1: entered allmulticast mode [ 183.130196][T10631] tap0: tun_chr_ioctl cmd 1074025676 [ 183.135524][T10631] tap0: owner set to 1 [ 183.147546][T10629] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 183.183323][T10629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.300635][T10648] random: crng reseeded on system resumption [ 183.418268][T10668] pim6reg1: entered promiscuous mode [ 183.423732][T10668] pim6reg1: entered allmulticast mode [ 183.447528][T10668] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 183.476293][T10668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.626772][T10677] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2367'. [ 183.692149][T10683] wireguard: wireguard0: Could not create IPv4 socket [ 183.698989][T10683] wireguard0: entered promiscuous mode [ 183.704506][T10683] wireguard0: entered allmulticast mode [ 183.717298][T10686] program syz.1.2370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.755753][T10688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.773527][T10688] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 183.781620][T10688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2371'. [ 183.824953][T10692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'. [ 183.853370][T10696] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2375'. [ 183.862482][T10696] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2375'. [ 183.891588][T10698] pim6reg1: entered promiscuous mode [ 183.896910][T10698] pim6reg1: entered allmulticast mode [ 183.908903][T10698] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 183.928776][T10698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.944652][T10700] pim6reg1: entered promiscuous mode [ 183.950024][T10700] pim6reg1: entered allmulticast mode [ 183.974608][T10700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.222722][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2386'. [ 184.231807][T10726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2386'. [ 184.235458][T10725] hub 1-0:1.0: USB hub found [ 184.247723][T10724] pim6reg1: entered promiscuous mode [ 184.253154][T10724] pim6reg1: entered allmulticast mode [ 184.264667][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 184.267112][T10725] hub 1-0:1.0: 8 ports detected [ 184.542809][T10743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.671795][T10749] pim6reg1: entered promiscuous mode [ 184.677126][T10749] pim6reg1: entered allmulticast mode [ 185.012349][T10755] hub 1-0:1.0: USB hub found [ 185.020865][T10757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.023445][T10755] hub 1-0:1.0: 8 ports detected [ 185.260379][T10773] pim6reg1: entered promiscuous mode [ 185.265817][T10773] pim6reg1: entered allmulticast mode [ 185.380764][ T3650] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.418400][T10785] SELinux: security_context_str_to_sid (˜) failed with errno=-22 [ 185.650182][T10797] sg_write: data in/out 8156/251 bytes for SCSI command 0x0-- guessing data in; [ 185.650182][T10797] program syz.3.2422 not setting count and/or reply_len properly [ 185.708039][T10801] net_ratelimit: 1 callbacks suppressed [ 185.708055][T10801] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 185.960504][T10821] ALSA: seq fatal error: cannot create timer (-22) [ 186.006170][T10823] SELinux: failed to load policy [ 186.043828][T10826] pim6reg1: entered promiscuous mode [ 186.049151][T10826] pim6reg1: entered allmulticast mode [ 186.078324][T10826] validate_nla: 2 callbacks suppressed [ 186.078345][T10826] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 186.114202][T10826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.133927][T10834] __nla_validate_parse: 3 callbacks suppressed [ 186.133942][T10834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2438'. [ 186.149305][T10834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2438'. [ 186.186789][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 186.511593][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2449'. [ 186.802494][T10882] pim6reg0: tun_chr_ioctl cmd 35108 [ 187.077103][T10895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 187.083634][T10895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.091260][T10895] vhci_hcd vhci_hcd.0: Device attached [ 187.131050][T10896] vhci_hcd: connection closed [ 187.131601][ T3650] vhci_hcd: stop threads [ 187.140649][ T3650] vhci_hcd: release socket [ 187.145216][ T3650] vhci_hcd: disconnect device [ 187.243299][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 187.243365][ T29] audit: type=1400 audit(195.305:20673): avc: denied { write } for pid=10903 comm="syz.3.2471" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.300880][ T29] audit: type=1400 audit(195.357:20674): avc: denied { allowed } for pid=10903 comm="syz.3.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.319822][ T29] audit: type=1400 audit(195.357:20675): avc: denied { create } for pid=10903 comm="syz.3.2471" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.338707][T10783] Bluetooth: hci0: command 0x1003 tx timeout [ 187.346738][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.396354][ T29] audit: type=1400 audit(195.462:20676): avc: denied { read } for pid=10905 comm="syz.4.2472" dev="nsfs" ino=4026532758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 187.417201][ T29] audit: type=1400 audit(195.462:20677): avc: denied { open } for pid=10905 comm="syz.4.2472" path="net:[4026532758]" dev="nsfs" ino=4026532758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 187.440030][ T29] audit: type=1400 audit(195.462:20678): avc: denied { create } for pid=10905 comm="syz.4.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.558239][ T29] audit: type=1400 audit(195.567:20679): avc: denied { read write } for pid=10906 comm="syz.3.2473" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 187.581441][ T29] audit: type=1400 audit(195.567:20680): avc: denied { open } for pid=10906 comm="syz.3.2473" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 187.629048][T10883] syz.1.2463 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 187.640127][T10883] CPU: 1 UID: 0 PID: 10883 Comm: syz.1.2463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.640167][T10883] Tainted: [W]=WARN [ 187.640173][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.640182][T10883] Call Trace: [ 187.640189][T10883] [ 187.640197][T10883] __dump_stack+0x1d/0x30 [ 187.640215][T10883] dump_stack_lvl+0xe8/0x140 [ 187.640239][T10883] dump_stack+0x15/0x1b [ 187.640335][T10883] dump_header+0x81/0x220 [ 187.640353][T10883] oom_kill_process+0x342/0x400 [ 187.640383][T10883] out_of_memory+0x979/0xb80 [ 187.640413][T10883] try_charge_memcg+0x610/0xa10 [ 187.640499][T10883] charge_memcg+0x51/0xc0 [ 187.640521][T10883] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 187.640544][T10883] __read_swap_cache_async+0x17b/0x2d0 [ 187.640564][T10883] swap_cluster_readahead+0x262/0x3c0 [ 187.640646][T10883] swapin_readahead+0xde/0x6f0 [ 187.640664][T10883] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 187.640761][T10883] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 187.640787][T10883] ? __rcu_read_unlock+0x4f/0x70 [ 187.640809][T10883] ? swap_cache_get_folio+0x277/0x280 [ 187.640838][T10883] do_swap_page+0x2ae/0x2370 [ 187.640862][T10883] ? css_rstat_updated+0xb7/0x240 [ 187.640883][T10883] ? __pfx_default_wake_function+0x10/0x10 [ 187.640972][T10883] handle_mm_fault+0x9a5/0x2be0 [ 187.640997][T10883] ? vma_start_read+0x141/0x1f0 [ 187.641034][T10883] do_user_addr_fault+0x630/0x1080 [ 187.641057][T10883] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 187.641126][T10883] exc_page_fault+0x62/0xa0 [ 187.641148][T10883] asm_exc_page_fault+0x26/0x30 [ 187.641180][T10883] RIP: 0033:0x7f1dd6c21833 [ 187.641196][T10883] Code: f4 08 00 48 8d 3d 96 f4 08 00 e8 d8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 187.641212][T10883] RSP: 002b:00007ffd88b24ee8 EFLAGS: 00010293 [ 187.641231][T10883] RAX: 00000000fffffffa RBX: 00007f1dd6e45fa0 RCX: 0000000000000000 [ 187.641243][T10883] RDX: 00007ffd88b24f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.641308][T10883] RBP: 00007f1dd6e47da0 R08: 0000000025d8bd0d R09: 7fffffffffffffff [ 187.641321][T10883] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002f8c7 [ 187.641333][T10883] R13: 00007f1dd6e46090 R14: ffffffffffffffff R15: 00007ffd88b25040 [ 187.641352][T10883] [ 187.641358][T10883] memory: usage 307200kB, limit 307200kB, failcnt 921 [ 187.878480][T10883] memory+swap: usage 308180kB, limit 9007199254740988kB, failcnt 0 [ 187.886464][T10883] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 187.893762][T10883] Memory cgroup stats for /syz1: [ 187.895070][T10883] cache 0 [ 187.902981][T10883] rss 0 [ 187.905726][T10883] shmem 0 [ 187.908734][T10883] mapped_file 0 [ 187.912212][T10883] dirty 0 [ 187.915144][T10883] writeback 0 [ 187.918413][T10883] workingset_refault_anon 192 [ 187.923099][T10883] workingset_refault_file 4047 [ 187.927844][T10883] swap 1003520 [ 187.931235][T10883] swapcached 12288 [ 187.934998][T10883] pgpgin 247655 [ 187.938441][T10883] pgpgout 247652 [ 187.942017][T10883] pgfault 237100 [ 187.945559][T10883] pgmajfault 137 [ 187.945567][T10883] inactive_anon 0 [ 187.945574][T10883] active_anon 12288 [ 187.945581][T10883] inactive_file 0 [ 187.945587][T10883] active_file 0 [ 187.945594][T10883] unevictable 0 [ 187.967060][T10883] hierarchical_memory_limit 314572800 [ 187.967069][T10883] hierarchical_memsw_limit 9223372036854771712 [ 187.967076][T10883] total_cache 0 [ 187.967081][T10883] total_rss 0 [ 187.967087][T10883] total_shmem 0 [ 187.967092][T10883] total_mapped_file 0 [ 187.992776][T10883] total_dirty 0 [ 187.996256][T10883] total_writeback 0 [ 188.000051][T10883] total_workingset_refault_anon 192 [ 188.005278][T10883] total_workingset_refault_file 4047 [ 188.010606][T10883] total_swap 1003520 [ 188.014506][T10883] total_swapcached 12288 [ 188.018775][T10883] total_pgpgin 247655 [ 188.022748][T10883] total_pgpgout 247652 [ 188.026851][T10883] total_pgfault 237100 [ 188.030906][T10883] total_pgmajfault 137 [ 188.035101][T10883] total_inactive_anon 0 [ 188.039243][T10883] total_active_anon 12288 [ 188.043557][T10883] total_inactive_file 0 [ 188.047863][T10883] total_active_file 0 [ 188.051877][T10883] total_unevictable 0 [ 188.056028][T10883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2463,pid=10883,uid=0 [ 188.070814][T10883] Memory cgroup out of memory: Killed process 10883 (syz.1.2463) total-vm:93944kB, anon-rss:1068kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 188.147806][ T29] audit: type=1326 audit(196.250:20681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 188.170939][ T29] audit: type=1326 audit(196.250:20682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.4.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9125befc9 code=0x7ffc0000 [ 188.210026][T10930] pim6reg1: entered promiscuous mode [ 188.215373][T10930] pim6reg1: entered allmulticast mode [ 188.369498][T10943] program syz.4.2488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.596476][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 188.711360][T10958] Set syz1 is full, maxelem 65536 reached [ 189.105644][T11003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2511'. [ 189.114646][T11003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2511'. [ 189.153219][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 189.255862][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2515'. [ 189.264976][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2515'. [ 189.529551][T10966] ================================================================== [ 189.537657][T10966] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 189.543819][T10964] syz.2.2498 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 189.547470][T10966] [ 189.547476][T10966] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 189.558457][T10964] CPU: 1 UID: 0 PID: 10964 Comm: syz.2.2498 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.558488][T10964] Tainted: [W]=WARN [ 189.558494][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.558520][T10964] Call Trace: [ 189.558527][T10964] [ 189.558535][T10964] __dump_stack+0x1d/0x30 [ 189.558555][T10964] dump_stack_lvl+0xe8/0x140 [ 189.558575][T10964] dump_stack+0x15/0x1b [ 189.558591][T10964] dump_header+0x81/0x220 [ 189.558653][T10964] oom_kill_process+0x342/0x400 [ 189.558681][T10964] out_of_memory+0x979/0xb80 [ 189.558737][T10964] try_charge_memcg+0x610/0xa10 [ 189.558769][T10964] charge_memcg+0x51/0xc0 [ 189.558789][T10964] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 189.558813][T10964] __read_swap_cache_async+0x17b/0x2d0 [ 189.558861][T10964] swap_cluster_readahead+0x262/0x3c0 [ 189.558925][T10964] swapin_readahead+0xde/0x6f0 [ 189.558944][T10964] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 189.558972][T10964] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 189.559019][T10964] ? __rcu_read_unlock+0x4f/0x70 [ 189.559042][T10964] ? swap_cache_get_folio+0x277/0x280 [ 189.559062][T10964] do_swap_page+0x2ae/0x2370 [ 189.559085][T10964] ? css_rstat_updated+0xb7/0x240 [ 189.559106][T10964] ? __pfx_default_wake_function+0x10/0x10 [ 189.559180][T10964] handle_mm_fault+0x9a5/0x2be0 [ 189.559204][T10964] ? vma_start_read+0x141/0x1f0 [ 189.559239][T10964] do_user_addr_fault+0x630/0x1080 [ 189.559260][T10964] ? fpregs_restore_userregs+0xe2/0x1d0 [ 189.559318][T10964] ? switch_fpu_return+0xe/0x20 [ 189.559405][T10964] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 189.559453][T10964] exc_page_fault+0x62/0xa0 [ 189.559480][T10964] asm_exc_page_fault+0x26/0x30 [ 189.559499][T10964] RIP: 0033:0x7f8bbb0e58c8 [ 189.559584][T10964] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 24 38 00 00 0f 8e 09 fe ff ff e8 f3 9b fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 [ 189.559602][T10964] RSP: 002b:00007ffd6ba0c460 EFLAGS: 00010212 [ 189.559618][T10964] RAX: 0000000000030058 RBX: 00007f8bbb467da0 RCX: 000000000002fda0 [ 189.559717][T10964] RDX: 00000000000002b8 RSI: 00007ffd6ba0c440 RDI: 0000000000000001 [ 189.559730][T10964] RBP: 00007f8bbb467da0 R08: 000000002981d4dc R09: 7fffffffffffffff [ 189.559743][T10964] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000030074 [ 189.559788][T10964] R13: 00007f8bbb466090 R14: ffffffffffffffff R15: 00007ffd6ba0c570 [ 189.559808][T10964] [ 189.559814][T10964] memory: usage 307200kB, limit 307200kB, failcnt 1431 [ 189.560708][T10966] tick_do_update_jiffies64+0x113/0x1c0 [ 189.568788][T10964] memory+swap: usage 308112kB, limit 9007199254740988kB, failcnt 0 [ 189.580075][T10966] tick_nohz_handler+0x7f/0x2d0 [ 189.580104][T10966] __hrtimer_run_queues+0x20f/0x5a0 [ 189.580127][T10966] hrtimer_interrupt+0x21a/0x460 [ 189.580148][T10966] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 189.580172][T10966] sysvec_apic_timer_interrupt+0x6f/0x80 [ 189.584046][T10964] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 189.593976][T10966] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.594000][T10966] kcsan_setup_watchpoint+0x415/0x430 [ 189.597286][T10964] Memory cgroup stats for [ 189.600181][T10966] __tsan_memset+0x1da/0x1f0 [ 189.600203][T10966] bpf_probe_read_kernel_str+0x6c/0x70 [ 189.600222][T10966] bpf_prog_afb980c6e2e686a5+0x3f/0x46 [ 189.604521][T10964] /syz2 [ 189.609077][T10966] bpf_trace_run2+0x107/0x1c0 [ 189.613240][T10964] : [ 189.617525][T10966] __traceiter_kfree+0x2e/0x50 [ 189.617546][T10966] kfree+0x351/0x400 [ 189.617567][T10966] shrink_lruvec+0x2a5/0x1b50 [ 189.617584][T10966] shrink_node+0x686/0x2120 [ 189.617605][T10966] do_try_to_free_pages+0x3f6/0xcd0 [ 189.617622][T10966] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 189.698967][T10964] cache 0 [ 189.699098][T10966] try_charge_memcg+0x383/0xa10 [ 189.703963][T10964] rss 0 [ 189.709008][T10966] charge_memcg+0x51/0xc0 [ 189.714553][T10964] shmem 0 [ 189.719352][T10966] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 189.725452][T10964] mapped_file 0 [ 189.729865][T10966] __read_swap_cache_async+0x17b/0x2d0 [ 189.729886][T10966] swap_cluster_readahead+0x262/0x3c0 [ 189.734711][T10964] dirty 0 [ 189.734718][T10964] writeback 8192 [ 189.739096][T10966] swapin_readahead+0xde/0x6f0 [ 189.758716][T10964] workingset_refault_anon 208 [ 189.764720][T10966] do_swap_page+0x2ae/0x2370 [ 189.772710][T10964] workingset_refault_file 1695 [ 189.780730][T10966] handle_mm_fault+0x9a5/0x2be0 [ 189.780753][T10966] do_user_addr_fault+0x630/0x1080 [ 189.788735][T10964] swap 933888 [ 189.796651][T10966] exc_page_fault+0x62/0xa0 [ 189.796680][T10966] asm_exc_page_fault+0x26/0x30 [ 189.804625][T10964] swapcached 12288 [ 189.807625][T10966] [ 189.807631][T10966] read to 0xffffffff868099c0 of 8 bytes by task 10966 on cpu 0: [ 189.807646][T10966] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 189.814482][T10964] pgpgin 209969 [ 189.814491][T10964] pgpgout 209966 [ 189.820001][T10966] count_shadow_nodes+0x6a/0x230 [ 189.820020][T10966] do_shrink_slab+0x63/0x680 [ 189.820046][T10966] shrink_slab+0x448/0x760 [ 189.820068][T10966] shrink_node+0x6c3/0x2120 [ 189.820089][T10966] do_try_to_free_pages+0x3f6/0xcd0 [ 189.820106][T10966] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 189.827981][T10964] pgfault 216253 [ 189.832817][T10966] try_charge_memcg+0x383/0xa10 [ 189.838012][T10964] pgmajfault 162 [ 189.842905][T10966] obj_cgroup_charge_pages+0xa6/0x150 [ 189.842924][T10966] __memcg_kmem_charge_page+0x9f/0x170 [ 189.842939][T10966] __alloc_frozen_pages_noprof+0x188/0x360 [ 189.842966][T10966] alloc_pages_mpol+0xb3/0x260 [ 189.848859][T10964] inactive_anon 12288 [ 189.854449][T10966] alloc_pages_noprof+0x90/0x130 [ 189.854470][T10966] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 189.861727][T10964] active_anon 0 [ 189.861735][T10964] inactive_file 0 [ 189.867679][T10966] __kvmalloc_node_noprof+0x483/0x670 [ 189.873111][T10964] active_file 0 [ 189.877479][T10966] ip_set_alloc+0x24/0x30 [ 189.882046][T10964] unevictable 0 [ 189.882054][T10964] hierarchical_memory_limit 314572800 [ 189.887477][T10966] hash_netiface_create+0x282/0x740 [ 189.887505][T10966] ip_set_create+0x3cc/0x970 [ 189.892958][T10964] hierarchical_memsw_limit 9223372036854771712 [ 189.895712][T10966] nfnetlink_rcv_msg+0x4c6/0x590 [ 189.900360][T10964] total_cache 0 [ 189.900368][T10964] total_rss 0 [ 189.902780][T10966] netlink_rcv_skb+0x123/0x220 [ 189.902807][T10966] nfnetlink_rcv+0x167/0x16c0 [ 189.907556][T10964] total_shmem 0 [ 189.907564][T10964] total_mapped_file 0 [ 189.911430][T10966] netlink_unicast+0x5c0/0x690 [ 189.911456][T10966] netlink_sendmsg+0x58b/0x6b0 [ 189.911471][T10966] __sock_sendmsg+0x145/0x180 [ 189.916137][T10964] total_dirty 0 [ 189.916145][T10964] total_writeback 8192 [ 189.920636][T10966] ____sys_sendmsg+0x31e/0x4e0 [ 189.925821][T10964] total_workingset_refault_anon 208 [ 189.931685][T10966] ___sys_sendmsg+0x17b/0x1d0 [ 189.931714][T10966] __x64_sys_sendmsg+0xd4/0x160 [ 189.934635][T10964] total_workingset_refault_file 1695 [ 189.939456][T10966] x64_sys_call+0x191e/0x3000 [ 189.939479][T10966] do_syscall_64+0xd2/0x200 [ 189.942212][T10964] total_swap 933888 [ 189.942220][T10964] total_swapcached 12288 [ 189.946509][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.949441][T10964] total_pgpgin 209969 [ 189.955376][T10966] [ 189.955385][T10966] value changed: 0x00000000ffffd775 -> 0x00000000ffffd776 [ 189.958875][T10964] total_pgpgout 209966 [ 189.964251][T10966] [ 189.964257][T10966] Reported by Kernel Concurrency Sanitizer on: [ 189.969623][T10964] total_pgfault 216253 [ 189.972528][T10966] CPU: 0 UID: 0 PID: 10966 Comm: syz.2.2498 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.976042][T10964] total_pgmajfault 162 [ 189.980795][T10966] Tainted: [W]=WARN [ 189.980803][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.980814][T10966] ================================================================== [ 190.333140][T10964] total_inactive_anon 12288 [ 190.337632][T10964] total_active_anon 0 [ 190.341622][T10964] total_inactive_file 0 [ 190.345761][T10964] total_active_file 0 [ 190.349741][T10964] total_unevictable 0 [ 190.353758][T10964] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2498,pid=10964,uid=0 [ 190.368496][T10964] Memory cgroup out of memory: Killed process 10964 (syz.2.2498) total-vm:94076kB, anon-rss:1132kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 190.707378][T10992] Set syz1 is full, maxelem 65536 reached