last executing test programs: 7.990936541s ago: executing program 2 (id=2792): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r3 = io_uring_setup(0x155, &(0x7f0000000080)={0x0, 0xd1b1, 0x40, 0x2, 0x319, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 7.682838851s ago: executing program 2 (id=2795): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xffb9}}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 7.412260944s ago: executing program 2 (id=2798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="86de25800717", 0x6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="34000000000000000000000007000000440893800000000900440491a00713baac1414aa00000000ac1e00010a01010207020000000000001400000000000000000000000200000003000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff000000000000000014000000000000000000f3"], 0xa0}, 0x742108b30e2cd9ac) 7.286188098s ago: executing program 2 (id=2801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x400400, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.063938707s ago: executing program 2 (id=2804): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x10]}, &(0x7f00000000c0), &(0x7f00000001c0), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x8e}}, 0x40) 6.965070118s ago: executing program 2 (id=2806): r0 = io_uring_setup(0x1694, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r2, r2, r1], 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)=0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r7, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.373842904s ago: executing program 1 (id=2832): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) nanosleep(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) unshare(0x22000600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000180), 0x0}, 0x20) 5.150448615s ago: executing program 1 (id=2835): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32=r0], 0x48) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 4.591903108s ago: executing program 1 (id=2840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.296043827s ago: executing program 1 (id=2851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'bridge_slave_0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'geneve0\x00'}}, 0x1e) close(r1) 3.159913695s ago: executing program 1 (id=2853): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf23f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r4}) 1.69585691s ago: executing program 1 (id=2863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000001c0)={0x2, 0x6}) ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(0x0, 0x205, 0x8401) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.455210821s ago: executing program 3 (id=2865): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/36, 0x24) getdents(r1, 0xfffffffffffffffd, 0xbb) 1.37769968s ago: executing program 0 (id=2867): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 1.25560226s ago: executing program 3 (id=2869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.177989855s ago: executing program 0 (id=2870): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@generic={0x0, 0x8000000004, 0x80000000}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) memfd_create(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.020110274s ago: executing program 3 (id=2872): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf23f, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) 893.671342ms ago: executing program 0 (id=2874): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 713.398107ms ago: executing program 3 (id=2875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b0001006772657461700000", @ANYBLOB="080014"], 0xc0}}, 0x0) 543.653093ms ago: executing program 4 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 532.887887ms ago: executing program 0 (id=2879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 443.96294ms ago: executing program 4 (id=2880): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$inet(r0, 0x0, 0x20000020) 425.039857ms ago: executing program 0 (id=2881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x7, {[@timestamp={0x8, 0xa, 0xfffffe00, 0x9}]}}}}}}}, 0x0) 397.002246ms ago: executing program 4 (id=2882): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, 0x0, 0x0, 0x40000) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000740), &(0x7f0000000780)=0x4) 227.2737ms ago: executing program 4 (id=2883): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@generic={0x0, 0x8000000004, 0x80000000}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) memfd_create(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 226.885385ms ago: executing program 0 (id=2884): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) 189.720184ms ago: executing program 3 (id=2885): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0xffffffffbffffffc, 0x0, 0x0, 0x4000000, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000048"], 0xb8}}, 0x4000) 145.119814ms ago: executing program 4 (id=2886): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x102) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x18fd62e8, 0x6}, {0x9ba7, 0x5}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 81.042314ms ago: executing program 3 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xe803}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 0s ago: executing program 4 (id=2888): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): n main item tag 0x0 [ 461.479587][ T5841] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 461.498388][ T5841] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 461.513684][ T5841] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 461.522902][ T5841] hid-generic 0000:007F:FFFFFFFE.001A: unknown main item tag 0x0 [ 461.535040][ T5841] hid-generic 0000:007F:FFFFFFFE.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.562172][ T5896] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 461.722085][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 461.730181][ T5896] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 461.743605][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.761134][ T5896] usb 4-1: config 0 descriptor?? [ 461.776399][ T5896] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 462.256009][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 462.766213][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.794645][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.022095][ T5841] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 463.152064][ T5841] usb 5-1: device descriptor read/64, error -71 [ 463.392092][ T5841] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 463.522403][ T5841] usb 5-1: device descriptor read/64, error -71 [ 463.574557][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 463.574579][ T30] audit: type=1800 audit(1744721300.141:404): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1445" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 463.633309][ T5841] usb usb5-port1: attempt power cycle [ 463.972682][ T5841] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 464.012905][ T5841] usb 5-1: device descriptor read/8, error -71 [ 464.064419][ T5896] gspca_vc032x: reg_w err -71 [ 464.099298][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.107501][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.115500][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.124481][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.133990][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.141821][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.150004][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x4 [ 464.158036][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.166091][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.174063][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.182273][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.190066][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.198530][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.206508][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.214405][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.222528][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.230301][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.238132][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.245771][T10811] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1447'. [ 464.246184][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.264066][ T5841] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 464.271839][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.279930][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.287899][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.296257][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.306805][ T5841] usb 5-1: device descriptor read/8, error -71 [ 464.313700][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.321669][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.333998][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.342656][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.350570][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.358606][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.366675][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.374645][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.387534][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.397767][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.405999][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.413851][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.421618][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.429897][ T5841] usb usb5-port1: unable to enumerate USB device [ 464.437102][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.446158][ T10] hid-generic 0000:007F:FFFFFFFE.001B: unknown main item tag 0x0 [ 464.457880][ T10] hid-generic 0000:007F:FFFFFFFE.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.649402][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 465.619477][T10831] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 465.635747][T10831] netdevsim netdevsim3 : left promiscuous mode [ 465.642658][T10831] netdevsim netdevsim3 : left allmulticast mode [ 465.677315][T10835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.162095][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 466.333605][ T30] audit: type=1326 audit(1744721302.901:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.2.1460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fdcd8e169 code=0x0 [ 466.351949][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 466.362853][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 466.371994][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.390848][ T10] usb 5-1: config 0 descriptor?? [ 466.410711][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 466.591369][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.617533][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.646183][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.654867][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.662818][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.697708][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.723898][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x4 [ 466.731788][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.741215][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.750409][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.758639][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.767423][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.775706][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.784701][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.793055][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.801064][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.810101][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.818366][T10852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1461'. [ 466.828731][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.837247][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.846010][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.854409][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.863306][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.871231][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.879656][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.888429][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.896927][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.905546][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.914018][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.925917][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.934281][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.944582][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.956316][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.965418][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.976906][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.985319][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 466.996766][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 467.005087][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 467.016714][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: unknown main item tag 0x0 [ 467.031828][ T1206] hid-generic 0000:007F:FFFFFFFE.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.783880][ T10] gspca_vc032x: reg_w err -71 [ 469.709344][T10861] syz.0.1465: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.752563][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.0.1465 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 469.752599][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.752613][T10861] Call Trace: [ 469.752622][T10861] [ 469.752631][T10861] dump_stack_lvl+0x241/0x360 [ 469.752672][T10861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.752706][T10861] ? __pfx__printk+0x10/0x10 [ 469.752740][T10861] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 469.752774][T10861] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 469.752805][T10861] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 469.752839][T10861] warn_alloc+0x27c/0x410 [ 469.752866][T10861] ? __pfx_warn_alloc+0x10/0x10 [ 469.752894][T10861] ? translate_table+0x183/0x2390 [ 469.752921][T10861] ? __get_vm_area_node+0x1c8/0x2d0 [ 469.752953][T10861] ? __get_vm_area_node+0x25c/0x2d0 [ 469.753002][T10861] __vmalloc_node_range_noprof+0x634/0x1390 [ 469.753054][T10861] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.753076][T10861] ? __kasan_kmalloc_large+0x1a/0xa0 [ 469.753108][T10861] ? translate_table+0x183/0x2390 [ 469.753137][T10861] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 469.753171][T10861] ? translate_table+0x183/0x2390 [ 469.753198][T10861] ? translate_table+0x183/0x2390 [ 469.753232][T10861] translate_table+0x183/0x2390 [ 469.753258][T10861] ? do_syscall_64+0xf3/0x230 [ 469.753285][T10861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.753328][T10861] ? __lock_acquire+0xad5/0xd80 [ 469.753355][T10861] ? __pfx_translate_table+0x10/0x10 [ 469.753412][T10861] ? copy_from_sockptr_offset+0x60/0xb0 [ 469.753443][T10861] do_ipt_set_ctl+0xe44/0x1260 [ 469.753479][T10861] ? __pfx___mutex_trylock_common+0x10/0x10 [ 469.753509][T10861] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 469.753555][T10861] ? __mutex_unlock_slowpath+0x229/0x800 [ 469.753594][T10861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.753620][T10861] ? aa_sk_perm+0x96f/0xac0 [ 469.753655][T10861] ? __lock_acquire+0xad5/0xd80 [ 469.753676][T10861] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.753708][T10861] nf_setsockopt+0x295/0x2c0 [ 469.753748][T10861] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 469.753781][T10861] do_sock_setsockopt+0x3b1/0x710 [ 469.753810][T10861] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 469.753830][T10861] ? __fget_files+0x2a/0x420 [ 469.753854][T10861] ? __fget_files+0x39d/0x420 [ 469.753871][T10861] ? __fget_files+0x2a/0x420 [ 469.753900][T10861] __x64_sys_setsockopt+0x1ee/0x280 [ 469.753930][T10861] do_syscall_64+0xf3/0x230 [ 469.753957][T10861] ? clear_bhb_loop+0x45/0xa0 [ 469.753982][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.754010][T10861] RIP: 0033:0x7efc12d8e169 [ 469.754029][T10861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.754046][T10861] RSP: 002b:00007efc13b7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 469.754071][T10861] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e169 [ 469.754087][T10861] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 469.754100][T10861] RBP: 00007efc12e10a68 R08: 0000000000000388 R09: 0000000000000000 [ 469.754114][T10861] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 469.754128][T10861] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007efc130dfa28 [ 469.754160][T10861] [ 469.754329][T10861] Mem-Info: [ 470.091996][T10861] active_anon:6640 inactive_anon:0 isolated_anon:0 [ 470.091996][T10861] active_file:16485 inactive_file:38461 isolated_file:0 [ 470.091996][T10861] unevictable:933 dirty:185 writeback:0 [ 470.091996][T10861] slab_reclaimable:10604 slab_unreclaimable:98668 [ 470.091996][T10861] mapped:29866 shmem:2111 pagetables:1059 [ 470.091996][T10861] sec_pagetables:0 bounce:0 [ 470.091996][T10861] kernel_misc_reclaimable:0 [ 470.091996][T10861] free:1288627 free_pcp:13629 free_cma:0 [ 470.158214][T10861] Node 0 active_anon:26760kB inactive_anon:0kB active_file:65940kB inactive_file:153768kB unevictable:2196kB isolated(anon):0kB isolated(file):0kB mapped:119464kB dirty:740kB writeback:0kB shmem:6908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11152kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 470.218536][T10861] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 470.280434][T10861] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.355422][T10861] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 470.373918][T10861] Node 0 DMA32 free:1259984kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:28820kB inactive_anon:0kB active_file:65940kB inactive_file:153668kB unevictable:2196kB writepending:740kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:27732kB local_pcp:968kB free_cma:0kB [ 470.491681][T10861] lowmem_reserve[]: 0 0 0 0 0 [ 470.510517][T10861] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.620384][T10861] lowmem_reserve[]: 0 0 0 0 0 [ 470.636062][T10861] Node 1 Normal free:3878728kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25264kB local_pcp:3368kB free_cma:0kB [ 470.669233][T10861] lowmem_reserve[]: 0 0 0 0 0 [ 470.674426][T10861] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 470.687268][T10861] Node 0 DMA32: 745*4kB (UME) 820*8kB (ME) 659*16kB (UME) 442*32kB (UME) 6*64kB (UM) 29*128kB (UM) 44*256kB (M) 21*512kB (ME) 11*1024kB (ME) 4*2048kB (M) 289*4096kB (M) = 1263540kB [ 470.705641][T10861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.718057][T10861] Node 1 Normal: 242*4kB (UM) 60*8kB (UME) 32*16kB (UME) 199*32kB (UM) 101*64kB (UME) 31*128kB (UME) 22*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 7*2048kB (UME) 935*4096kB (M) = 3878728kB [ 470.737409][T10861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.748915][T10861] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 470.758345][T10861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.768107][T10861] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 470.777629][T10861] 57059 total pagecache pages [ 470.782445][T10861] 0 pages in swap cache [ 470.786606][T10861] Free swap = 124996kB [ 470.790759][T10861] Total swap = 124996kB [ 470.835336][T10861] 2097051 pages RAM [ 470.862106][T10861] 0 pages HighMem/MovableOnly [ 470.891769][T10861] 428585 pages reserved [ 470.909670][T10861] 0 pages cma reserved [ 471.405836][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1476'. [ 471.839187][T10900] UHID_CREATE from different security context by process 968 (syz.3.1479), this is not allowed. [ 471.992915][T10901] block device autoloading is deprecated and will be removed. [ 472.032610][T10901] syz.2.1477: attempt to access beyond end of device [ 472.032610][T10901] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 472.144755][T10907] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 472.144755][T10907] program syz.3.1482 not setting count and/or reply_len properly [ 472.656903][T10922] dvmrp5: entered allmulticast mode [ 472.697512][T10922] dvmrp5: left allmulticast mode [ 472.711144][ T30] audit: type=1326 audit(1744721309.251:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 472.735867][T10928] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 472.797467][ T30] audit: type=1326 audit(1744721309.271:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 472.860567][ T30] audit: type=1326 audit(1744721309.301:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 472.947304][ T30] audit: type=1326 audit(1744721309.301:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.035876][ T30] audit: type=1326 audit(1744721309.311:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.151981][ T30] audit: type=1326 audit(1744721309.311:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.270288][ T30] audit: type=1326 audit(1744721309.311:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.422047][ T30] audit: type=1326 audit(1744721309.311:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.543340][ T30] audit: type=1326 audit(1744721309.311:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.872370][ T30] audit: type=1326 audit(1744721309.311:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 473.938490][T10956] netlink: 'syz.4.1504': attribute type 6 has an invalid length. [ 474.001495][T10958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 474.316179][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1494'. [ 474.354201][ T5841] IPVS: starting estimator thread 0... [ 474.490257][T10973] IPVS: using max 27 ests per chain, 64800 per kthread [ 475.180839][T11017] sg_write: data in/out 987/154 bytes for SCSI command 0x6-- guessing data in; [ 475.180839][T11017] program syz.1.1530 not setting count and/or reply_len properly [ 475.627909][T11037] veth0_macvtap: left promiscuous mode [ 475.651983][T11037] macvtap0: entered promiscuous mode [ 475.657443][T11037] macvtap0: entered allmulticast mode [ 475.705271][T11037] veth0_macvtap: entered promiscuous mode [ 475.727170][T11037] veth0_macvtap: entered allmulticast mode [ 475.753434][T11037] team0: Device macvtap0 failed to register rx_handler [ 475.786220][T11037] veth0_macvtap: left allmulticast mode [ 475.803080][T11037] veth0_macvtap: left promiscuous mode [ 476.066478][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'. [ 476.109623][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.373738][T11062] bridge_slave_1 (unregistering): left allmulticast mode [ 476.395215][T11062] bridge_slave_1 (unregistering): left promiscuous mode [ 476.417106][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.631551][T11091] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1561'. [ 476.688648][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1565'. [ 477.392479][T11117] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1576'. [ 478.554248][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x1 [ 478.593270][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.611274][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.634311][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.656486][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.675063][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.697299][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.724658][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.757799][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.785323][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x2 [ 478.817521][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.828319][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 478.828337][ T30] audit: type=1326 audit(1744721315.391:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.870824][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902797][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902835][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902866][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902894][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902922][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902951][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.902980][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903009][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903037][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903067][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903095][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903133][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903162][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903191][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903219][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903248][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903276][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903306][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903334][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903363][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903392][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903421][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.903450][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 478.911705][ T30] audit: type=1326 audit(1744721315.391:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.911756][ T30] audit: type=1326 audit(1744721315.391:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.911796][ T30] audit: type=1326 audit(1744721315.391:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.911834][ T30] audit: type=1326 audit(1744721315.391:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.913022][ T30] audit: type=1326 audit(1744721315.391:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.913073][ T30] audit: type=1326 audit(1744721315.391:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.914286][ T30] audit: type=1326 audit(1744721315.391:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.914335][ T30] audit: type=1326 audit(1744721315.391:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.1.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 478.917371][ T5898] hid-generic 0000:007F:FFFFFFFE.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 479.027262][T11173] netlink: 'syz.1.1602': attribute type 21 has an invalid length. [ 480.800962][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 480.920250][T11219] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1623'. [ 481.178511][T11233] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1630'. [ 481.263459][ T30] audit: type=1326 audit(1744721317.821:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11238 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 481.610291][T11255] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 481.658308][T11255] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 481.806809][ T5898] IPVS: starting estimator thread 0... [ 481.909974][T11274] macvtap0: entered promiscuous mode [ 481.925708][T11274] macvtap0: entered allmulticast mode [ 481.952133][T11268] IPVS: using max 27 ests per chain, 64800 per kthread [ 483.794782][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 483.922866][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1676'. [ 483.949860][T11373] netlink: 'syz.4.1676': attribute type 21 has an invalid length. [ 484.610088][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 484.610108][ T30] audit: type=1326 audit(1744721321.171:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 484.660162][ T30] audit: type=1326 audit(1744721321.171:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 484.683655][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 484.699814][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 484.711006][ T30] audit: type=1326 audit(1744721321.211:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 484.825348][ T30] audit: type=1326 audit(1744721321.211:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 484.877804][ T30] audit: type=1326 audit(1744721321.211:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 484.932201][ T30] audit: type=1326 audit(1744721321.211:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 485.009236][ T30] audit: type=1326 audit(1744721321.211:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 485.054821][ T30] audit: type=1326 audit(1744721321.211:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 485.090250][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 485.106223][ T30] audit: type=1326 audit(1744721321.211:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 485.140248][T11412] openvswitch: netlink: Flow key attr not present in new flow. [ 485.147852][ T30] audit: type=1326 audit(1744721321.211:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 485.335194][T11418] syzkaller1: entered promiscuous mode [ 485.350952][T11418] syzkaller1: entered allmulticast mode [ 485.700224][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 486.354209][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'. [ 486.521765][T11468] syz.1.1738: attempt to access beyond end of device [ 486.521765][T11468] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 486.548227][T11401] warn_alloc: 1 callbacks suppressed [ 486.548248][T11401] syz.0.1706: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 486.603239][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.0.1706 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 486.603271][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.603285][T11401] Call Trace: [ 486.603293][T11401] [ 486.603302][T11401] dump_stack_lvl+0x241/0x360 [ 486.603342][T11401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.603372][T11401] ? __pfx__printk+0x10/0x10 [ 486.603401][T11401] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 486.603446][T11401] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 486.603476][T11401] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 486.603510][T11401] warn_alloc+0x27c/0x410 [ 486.603554][T11401] ? __pfx_warn_alloc+0x10/0x10 [ 486.603583][T11401] ? hash_netiface_create+0x356/0x1040 [ 486.603605][T11401] ? __get_vm_area_node+0x1c8/0x2d0 [ 486.603637][T11401] ? __get_vm_area_node+0x25c/0x2d0 [ 486.603677][T11401] __vmalloc_node_range_noprof+0x634/0x1390 [ 486.603729][T11401] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 486.603761][T11401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 486.603785][T11401] ? hash_netiface_create+0x356/0x1040 [ 486.603806][T11401] ? __get_vm_area_node+0x1c8/0x2d0 [ 486.603838][T11401] ? __get_vm_area_node+0x25c/0x2d0 [ 486.603885][T11401] __vmalloc_node_range_noprof+0x53f/0x1390 [ 486.603906][T11401] ? hash_netiface_create+0x356/0x1040 [ 486.603959][T11401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 486.603980][T11401] ? __kasan_kmalloc_large+0x1a/0xa0 [ 486.604012][T11401] ? hash_netiface_create+0x356/0x1040 [ 486.604034][T11401] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 486.604065][T11401] ? hash_netiface_create+0x356/0x1040 [ 486.604085][T11401] ? hash_netiface_create+0x356/0x1040 [ 486.604105][T11401] ? hash_netiface_create+0x2fa/0x1040 [ 486.604131][T11401] hash_netiface_create+0x356/0x1040 [ 486.604165][T11401] ? __pfx_hash_netiface_create+0x10/0x10 [ 486.604189][T11401] ip_set_create+0xa7d/0x1960 [ 486.604214][T11401] ? ip_set_create+0x48c/0x1960 [ 486.604242][T11401] ? __pfx_ip_set_create+0x10/0x10 [ 486.604299][T11401] ? nfnetlink_rcv_msg+0x227/0x1190 [ 486.604323][T11401] nfnetlink_rcv_msg+0xbf7/0x1190 [ 486.604346][T11401] ? nfnetlink_rcv_msg+0x227/0x1190 [ 486.604392][T11401] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 486.604420][T11401] ? stack_trace_save+0x11a/0x1d0 [ 486.604476][T11401] ? dev_hard_start_xmit+0x2d4/0x840 [ 486.604498][T11401] ? __dev_queue_xmit+0x1b80/0x3f60 [ 486.604520][T11401] ? __netlink_deliver_tap+0x561/0x7f0 [ 486.604549][T11401] ? netlink_deliver_tap+0x19d/0x1b0 [ 486.604576][T11401] ? netlink_unicast+0x7c6/0x9a0 [ 486.604599][T11401] ? netlink_sendmsg+0x8c3/0xcd0 [ 486.604628][T11401] ? __sock_sendmsg+0x221/0x270 [ 486.604655][T11401] ? ____sys_sendmsg+0x523/0x860 [ 486.604675][T11401] ? __sys_sendmsg+0x271/0x360 [ 486.604712][T11401] netlink_rcv_skb+0x208/0x480 [ 486.604743][T11401] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 486.604769][T11401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.604815][T11401] ? apparmor_capable+0x13b/0x1b0 [ 486.604840][T11401] ? bpf_lsm_capable+0x9/0x10 [ 486.604864][T11401] ? security_capable+0x7e/0x2d0 [ 486.604900][T11401] nfnetlink_rcv+0x296/0x28f0 [ 486.604926][T11401] ? __dev_queue_xmit+0x2f9/0x3f60 [ 486.604950][T11401] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 486.604977][T11401] ? __dev_queue_xmit+0x2f9/0x3f60 [ 486.605000][T11401] ? __dev_queue_xmit+0x2f9/0x3f60 [ 486.605027][T11401] ? __dev_queue_xmit+0x1780/0x3f60 [ 486.605049][T11401] ? kasan_save_track+0x3f/0x80 [ 486.605070][T11401] ? __kasan_slab_alloc+0x66/0x80 [ 486.605101][T11401] ? do_syscall_64+0xf3/0x230 [ 486.605132][T11401] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 486.605153][T11401] ? __dev_queue_xmit+0x2f9/0x3f60 [ 486.605182][T11401] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.605225][T11401] ? ref_tracker_free+0x63e/0x7e0 [ 486.605249][T11401] ? __asan_memcpy+0x40/0x70 [ 486.605269][T11401] ? __pfx_ref_tracker_free+0x10/0x10 [ 486.605311][T11401] ? skb_clone+0x240/0x390 [ 486.605347][T11401] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.605380][T11401] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.605448][T11401] netlink_unicast+0x7f8/0x9a0 [ 486.605486][T11401] ? __pfx_netlink_unicast+0x10/0x10 [ 486.605517][T11401] ? skb_put+0x114/0x1f0 [ 486.605544][T11401] netlink_sendmsg+0x8c3/0xcd0 [ 486.605590][T11401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.605626][T11401] ? aa_sock_msg_perm+0x91/0x160 [ 486.605664][T11401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.605693][T11401] __sock_sendmsg+0x221/0x270 [ 486.605726][T11401] ____sys_sendmsg+0x523/0x860 [ 486.605759][T11401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.605779][T11401] ? __fget_files+0x2a/0x420 [ 486.605803][T11401] ? __fget_files+0x2a/0x420 [ 486.605833][T11401] __sys_sendmsg+0x271/0x360 [ 486.605855][T11401] ? __pfx_futex_wake+0x10/0x10 [ 486.605881][T11401] ? __pfx___sys_sendmsg+0x10/0x10 [ 486.605964][T11401] ? do_syscall_64+0xb6/0x230 [ 486.605995][T11401] do_syscall_64+0xf3/0x230 [ 486.606022][T11401] ? clear_bhb_loop+0x45/0xa0 [ 486.606048][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.606069][T11401] RIP: 0033:0x7efc12d8e169 [ 486.606089][T11401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.606107][T11401] RSP: 002b:00007efc13b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.606131][T11401] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e169 [ 486.606146][T11401] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 486.606161][T11401] RBP: 00007efc12e10a68 R08: 0000000000000000 R09: 0000000000000000 [ 486.606174][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.606187][T11401] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007efc130dfa28 [ 486.606220][T11401] [ 486.606510][T11401] Mem-Info: [ 486.619377][T11401] active_anon:5912 inactive_anon:0 isolated_anon:0 [ 486.619377][T11401] active_file:16485 inactive_file:38469 isolated_file:0 [ 486.619377][T11401] unevictable:933 dirty:125 writeback:0 [ 486.619377][T11401] slab_reclaimable:10173 slab_unreclaimable:100617 [ 486.619377][T11401] mapped:29843 shmem:2069 pagetables:1059 [ 486.619377][T11401] sec_pagetables:0 bounce:0 [ 486.619377][T11401] kernel_misc_reclaimable:0 [ 486.619377][T11401] free:1277635 free_pcp:7660 free_cma:0 [ 487.222441][T11401] Node 0 active_anon:23812kB inactive_anon:0kB active_file:65940kB inactive_file:153800kB unevictable:2196kB isolated(anon):0kB isolated(file):0kB mapped:119384kB dirty:572kB writeback:0kB shmem:6752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 487.370144][T11401] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 487.439690][T11401] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.529142][T11401] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 487.555348][T11401] Node 0 DMA32 free:1216688kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:23884kB inactive_anon:0kB active_file:65940kB inactive_file:153700kB unevictable:2196kB writepending:572kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:3640kB local_pcp:624kB free_cma:0kB [ 487.612918][T11401] lowmem_reserve[]: 0 0 0 0 0 [ 487.617737][T11401] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.724877][T11401] lowmem_reserve[]: 0 0 0 0 0 [ 487.729712][T11401] Node 1 Normal free:3881500kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22536kB local_pcp:20396kB free_cma:0kB [ 487.795060][T11401] lowmem_reserve[]: 0 0 0 0 0 [ 487.799960][T11401] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 487.831218][T11401] Node 0 DMA32: 4*4kB (UE) 567*8kB (ME) 665*16kB (UME) 614*32kB (UME) 302*64kB (UME) 60*128kB (UME) 47*256kB (UME) 21*512kB (ME) 13*1024kB (UME) 6*2048kB (UM) 269*4096kB (M) = 1212056kB [ 487.876562][T11401] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.912118][T11401] Node 1 Normal: 255*4kB (UM) 74*8kB (UME) 45*16kB (UME) 202*32kB (UM) 101*64kB (UME) 31*128kB (UME) 25*256kB (UME) 7*512kB (UE) 8*1024kB (UME) 7*2048kB (UME) 935*4096kB (M) = 3881500kB [ 487.971070][T11401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.012179][T11401] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 488.038191][T11401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.062043][T11401] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 488.082345][T11401] 59604 total pagecache pages [ 488.092565][T11401] 0 pages in swap cache [ 488.112374][T11401] Free swap = 124996kB [ 488.133132][T11401] Total swap = 124996kB [ 488.145657][T11401] 2097051 pages RAM [ 488.155637][T11401] 0 pages HighMem/MovableOnly [ 488.162994][T11401] 428585 pages reserved [ 488.169714][T11401] 0 pages cma reserved [ 488.360525][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 488.424681][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 489.169158][T11550] netlink: 'syz.1.1774': attribute type 21 has an invalid length. [ 489.268522][T11552] pim6reg: entered allmulticast mode [ 489.312535][T11552] pim6reg: left allmulticast mode [ 490.585855][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 491.012055][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 491.012077][ T30] audit: type=1326 audit(1744721327.551:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.107717][ T30] audit: type=1326 audit(1744721327.551:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.158609][ T30] audit: type=1326 audit(1744721327.561:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.247868][ T30] audit: type=1326 audit(1744721327.561:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.320386][ T30] audit: type=1326 audit(1744721327.561:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.409473][ T30] audit: type=1326 audit(1744721327.561:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.495450][ T30] audit: type=1326 audit(1744721327.561:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 491.937970][T11627] netlink: 'syz.2.1808': attribute type 6 has an invalid length. [ 491.945764][ T30] audit: type=1326 audit(1744721328.501:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.2.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 491.945827][ T30] audit: type=1326 audit(1744721328.501:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.2.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 491.945875][ T30] audit: type=1326 audit(1744721328.501:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.2.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 492.782856][T11662] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1824'. [ 493.624367][ T5895] gspca_vc032x: Unknown sensor... [ 493.627138][T11697] netlink: 'syz.4.1839': attribute type 3 has an invalid length. [ 493.630285][ T5895] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 493.691273][ T5895] usb 2-1: USB disconnect, device number 58 [ 494.891399][T11724] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 494.932576][T11724] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 494.941351][T11724] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 495.344513][T11743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1859'. [ 495.928786][T11757] vcan0: tx drop: invalid sa for name 0x4000000000000000 [ 496.730249][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 496.730270][ T30] audit: type=1326 audit(1744721333.291:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 496.832063][ T30] audit: type=1326 audit(1744721333.291:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 496.896033][ T30] audit: type=1326 audit(1744721333.291:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 496.971951][ T30] audit: type=1326 audit(1744721333.301:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 497.071069][ T30] audit: type=1326 audit(1744721333.301:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 497.131928][ T30] audit: type=1326 audit(1744721333.411:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 497.232431][ T30] audit: type=1326 audit(1744721333.411:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 497.234553][T11813] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1894'. [ 497.311320][T11818] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1893'. [ 499.466200][T11896] openvswitch: netlink: Message has 8 unknown bytes. [ 500.301996][ T9018] gspca_vc032x: Unknown sensor... [ 500.307177][ T9018] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 500.344700][ T9018] usb 3-1: USB disconnect, device number 65 [ 500.628368][ T30] audit: type=1326 audit(1744721337.191:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 500.721973][ T30] audit: type=1326 audit(1744721337.191:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 500.777989][ T30] audit: type=1326 audit(1744721337.191:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 501.150100][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1951'. [ 501.444646][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.451022][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.926617][T11992] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 502.960619][T11992] team0: Device hsr_slave_0 failed to register rx_handler [ 502.978997][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 502.979017][ T30] audit: type=1326 audit(1744721339.541:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 503.097097][ T30] audit: type=1326 audit(1744721339.541:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 503.186589][ T30] audit: type=1326 audit(1744721339.541:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 503.270003][T12001] program syz.1.1977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.278529][ T30] audit: type=1326 audit(1744721339.541:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 503.325842][ T30] audit: type=1326 audit(1744721339.541:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 503.654605][T12014] pim6reg: entered allmulticast mode [ 503.765242][T12014] pim6reg: left allmulticast mode [ 503.925332][T12018] ÿÿÿÿÿÿ: renamed from vlan1 [ 504.459883][ T30] audit: type=1326 audit(1744721341.021:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 504.535294][ T30] audit: type=1326 audit(1744721341.021:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 504.588075][ T30] audit: type=1326 audit(1744721341.021:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 504.652315][ T30] audit: type=1326 audit(1744721341.021:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 504.695957][ T30] audit: type=1326 audit(1744721341.031:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 505.398810][T12063] usb usb1: usbfs: process 12063 (syz.2.2003) did not claim interface 0 before use [ 507.335717][T12118] loop9: detected capacity change from 0 to 8 [ 507.372080][T12118] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 507.378041][T12118] loop9: partition table partially beyond EOD, truncated [ 507.402577][T12118] loop9: p1 size 81768186 extends beyond EOD, truncated [ 507.518442][ T5950] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 507.525698][ T5950] loop9: partition table partially beyond EOD, truncated [ 507.536951][ T5950] loop9: p1 size 81768186 extends beyond EOD, truncated [ 507.569208][T12120] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 507.584835][T12120] loop9: partition table partially beyond EOD, truncated [ 507.608054][T12120] loop9: p1 size 81768186 extends beyond EOD, truncated [ 507.908465][T12081] warn_alloc: 3 callbacks suppressed [ 507.908487][T12081] syz.4.2011: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 508.161974][T12081] CPU: 0 UID: 0 PID: 12081 Comm: syz.4.2011 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 508.162008][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.162023][T12081] Call Trace: [ 508.162033][T12081] [ 508.162043][T12081] dump_stack_lvl+0x241/0x360 [ 508.162081][T12081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.162113][T12081] ? __pfx__printk+0x10/0x10 [ 508.162142][T12081] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 508.162177][T12081] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 508.162209][T12081] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 508.162245][T12081] warn_alloc+0x27c/0x410 [ 508.162292][T12081] ? __pfx_warn_alloc+0x10/0x10 [ 508.162322][T12081] ? hash_netiface_create+0x356/0x1040 [ 508.162345][T12081] ? __get_vm_area_node+0x1c8/0x2d0 [ 508.162378][T12081] ? __get_vm_area_node+0x25c/0x2d0 [ 508.162420][T12081] __vmalloc_node_range_noprof+0x634/0x1390 [ 508.162473][T12081] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 508.162507][T12081] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 508.162532][T12081] ? hash_netiface_create+0x356/0x1040 [ 508.162554][T12081] ? __get_vm_area_node+0x1c8/0x2d0 [ 508.162587][T12081] ? __get_vm_area_node+0x25c/0x2d0 [ 508.162626][T12081] __vmalloc_node_range_noprof+0x53f/0x1390 [ 508.162650][T12081] ? hash_netiface_create+0x356/0x1040 [ 508.162712][T12081] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 508.162735][T12081] ? __kasan_kmalloc_large+0x1a/0xa0 [ 508.162770][T12081] ? hash_netiface_create+0x356/0x1040 [ 508.162794][T12081] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 508.162829][T12081] ? hash_netiface_create+0x356/0x1040 [ 508.162852][T12081] ? hash_netiface_create+0x356/0x1040 [ 508.162873][T12081] ? hash_netiface_create+0x2fa/0x1040 [ 508.162901][T12081] hash_netiface_create+0x356/0x1040 [ 508.162937][T12081] ? __pfx_hash_netiface_create+0x10/0x10 [ 508.162962][T12081] ip_set_create+0xa7d/0x1960 [ 508.162991][T12081] ? ip_set_create+0x48c/0x1960 [ 508.163021][T12081] ? __pfx_ip_set_create+0x10/0x10 [ 508.163082][T12081] ? nfnetlink_rcv_msg+0x227/0x1190 [ 508.163108][T12081] nfnetlink_rcv_msg+0xbf7/0x1190 [ 508.163134][T12081] ? nfnetlink_rcv_msg+0x227/0x1190 [ 508.163183][T12081] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 508.163207][T12081] ? stack_trace_save+0x11a/0x1d0 [ 508.163267][T12081] ? dev_hard_start_xmit+0x2d4/0x840 [ 508.163292][T12081] ? __dev_queue_xmit+0x1b80/0x3f60 [ 508.163316][T12081] ? __netlink_deliver_tap+0x561/0x7f0 [ 508.163348][T12081] ? netlink_deliver_tap+0x19d/0x1b0 [ 508.163379][T12081] ? netlink_unicast+0x7c6/0x9a0 [ 508.163423][T12081] ? netlink_sendmsg+0x8c3/0xcd0 [ 508.163452][T12081] ? __sock_sendmsg+0x221/0x270 [ 508.163478][T12081] ? ____sys_sendmsg+0x523/0x860 [ 508.163501][T12081] ? __sys_sendmsg+0x271/0x360 [ 508.163541][T12081] netlink_rcv_skb+0x208/0x480 [ 508.163575][T12081] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 508.163603][T12081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.163752][T12081] ? apparmor_capable+0x13b/0x1b0 [ 508.163788][T12081] ? bpf_lsm_capable+0x9/0x10 [ 508.163814][T12081] ? security_capable+0x7e/0x2d0 [ 508.163852][T12081] nfnetlink_rcv+0x296/0x28f0 [ 508.163884][T12081] ? __dev_queue_xmit+0x2f9/0x3f60 [ 508.163910][T12081] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 508.163940][T12081] ? __dev_queue_xmit+0x2f9/0x3f60 [ 508.163967][T12081] ? __dev_queue_xmit+0x2f9/0x3f60 [ 508.163997][T12081] ? __dev_queue_xmit+0x1780/0x3f60 [ 508.164021][T12081] ? kasan_save_track+0x3f/0x80 [ 508.164045][T12081] ? __kasan_slab_alloc+0x66/0x80 [ 508.164078][T12081] ? do_syscall_64+0xf3/0x230 [ 508.164110][T12081] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 508.164133][T12081] ? __dev_queue_xmit+0x2f9/0x3f60 [ 508.164163][T12081] ? __pfx___dev_queue_xmit+0x10/0x10 [ 508.164210][T12081] ? ref_tracker_free+0x63e/0x7e0 [ 508.164237][T12081] ? __asan_memcpy+0x40/0x70 [ 508.164260][T12081] ? __pfx_ref_tracker_free+0x10/0x10 [ 508.164305][T12081] ? skb_clone+0x240/0x390 [ 508.164344][T12081] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.164380][T12081] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.164425][T12081] netlink_unicast+0x7f8/0x9a0 [ 508.164466][T12081] ? __pfx_netlink_unicast+0x10/0x10 [ 508.164499][T12081] ? skb_put+0x114/0x1f0 [ 508.164525][T12081] netlink_sendmsg+0x8c3/0xcd0 [ 508.164573][T12081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.164612][T12081] ? aa_sock_msg_perm+0x91/0x160 [ 508.164651][T12081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.164681][T12081] __sock_sendmsg+0x221/0x270 [ 508.164715][T12081] ____sys_sendmsg+0x523/0x860 [ 508.164751][T12081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.164773][T12081] ? __fget_files+0x2a/0x420 [ 508.164798][T12081] ? __fget_files+0x2a/0x420 [ 508.164829][T12081] __sys_sendmsg+0x271/0x360 [ 508.164861][T12081] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.164947][T12081] ? do_syscall_64+0xb6/0x230 [ 508.164979][T12081] do_syscall_64+0xf3/0x230 [ 508.165009][T12081] ? clear_bhb_loop+0x45/0xa0 [ 508.165037][T12081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.165059][T12081] RIP: 0033:0x7f7a4e78e169 [ 508.165080][T12081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.165100][T12081] RSP: 002b:00007f7a4f6c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.165124][T12081] RAX: ffffffffffffffda RBX: 00007f7a4e9b5fa0 RCX: 00007f7a4e78e169 [ 508.165141][T12081] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 508.165155][T12081] RBP: 00007f7a4e810a68 R08: 0000000000000000 R09: 0000000000000000 [ 508.165170][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.165183][T12081] R13: 0000000000000000 R14: 00007f7a4e9b5fa0 R15: 00007f7a4eadfa28 [ 508.165217][T12081] [ 508.165228][T12081] Mem-Info: [ 508.785068][T12081] active_anon:23225 inactive_anon:0 isolated_anon:0 [ 508.785068][T12081] active_file:16485 inactive_file:38478 isolated_file:0 [ 508.785068][T12081] unevictable:933 dirty:37 writeback:0 [ 508.785068][T12081] slab_reclaimable:10177 slab_unreclaimable:101218 [ 508.785068][T12081] mapped:30881 shmem:18423 pagetables:1185 [ 508.785068][T12081] sec_pagetables:0 bounce:0 [ 508.785068][T12081] kernel_misc_reclaimable:0 [ 508.785068][T12081] free:1262229 free_pcp:6430 free_cma:0 [ 508.852360][T12081] Node 0 active_anon:92900kB inactive_anon:0kB active_file:65940kB inactive_file:153836kB unevictable:2196kB isolated(anon):0kB isolated(file):0kB mapped:123524kB dirty:144kB writeback:0kB shmem:72156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11076kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.990504][T12081] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 509.046779][T12081] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.090638][T12081] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 509.168111][T12081] Node 0 DMA32 free:1154816kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:89344kB inactive_anon:0kB active_file:65940kB inactive_file:153736kB unevictable:2196kB writepending:148kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:2480kB local_pcp:1392kB free_cma:0kB [ 509.237393][T12081] lowmem_reserve[]: 0 0 0 0 0 [ 509.257664][T12161] tipc: Started in network mode [ 509.267290][T12081] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.302428][T12161] tipc: Node identity 080211, cluster identity 4711 [ 509.312112][T12081] lowmem_reserve[]: 0 0 0 0 0 [ 509.331082][T12081] Node 1 Normal free:3880996kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23040kB local_pcp:2548kB free_cma:0kB [ 509.335434][T12161] tipc: Enabled bearer , priority 0 [ 509.383742][T12081] lowmem_reserve[]: 0 0 0 0 0 [ 509.388663][T12081] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 509.402223][T12081] Node 0 DMA32: 171*4kB (ME) 187*8kB (UME) 167*16kB (UME) 119*32kB (UME) 75*64kB (UME) 39*128kB (UME) 28*256kB (UME) 7*512kB (ME) 18*1024kB (UME) 9*2048kB (UME) 266*4096kB (UM) = 1155604kB [ 509.428974][T12081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.431307][T12161] syzkaller0: mtu less than device minimum [ 509.474761][T12081] Node 1 Normal: 75*4kB (UM) 19*8kB (UME) 18*16kB (UME) 152*32kB (UM) 111*64kB (UME) 31*128kB (UME) 25*256kB (UME) 9*512kB (UME) 9*1024kB (UME) 7*2048kB (UME) 935*4096kB (M) = 3880996kB [ 509.533128][T12081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.543197][T12081] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 509.552726][T12081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.562624][T12081] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 509.604990][T12081] 73386 total pagecache pages [ 509.625344][T12081] 0 pages in swap cache [ 509.629575][T12081] Free swap = 124996kB [ 509.654052][T12081] Total swap = 124996kB [ 509.658288][T12081] 2097051 pages RAM [ 509.674749][T12081] 0 pages HighMem/MovableOnly [ 509.679499][T12081] 428585 pages reserved [ 509.688590][T12081] 0 pages cma reserved [ 510.084996][ T30] kauditd_printk_skb: 262 callbacks suppressed [ 510.085015][ T30] audit: type=1326 audit(1744721346.651:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 510.182053][ T30] audit: type=1326 audit(1744721346.651:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 510.208251][T12191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2059'. [ 510.241705][ T30] audit: type=1326 audit(1744721346.651:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 510.295200][ T30] audit: type=1326 audit(1744721346.651:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 510.340204][ T30] audit: type=1326 audit(1744721346.681:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 510.399827][ T30] audit: type=1326 audit(1744721346.681:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 510.453311][ T5898] tipc: Node number set to 134353152 [ 510.533247][T12203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2062'. [ 511.602756][ C1] sd 0:0:1:0: [sda] tag#776 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 511.613311][ C1] sd 0:0:1:0: [sda] tag#776 CDB: Read(6) 08 00 00 00 00 2c [ 512.031508][ T30] audit: type=1326 audit(1744721348.591:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 512.122116][ T30] audit: type=1326 audit(1744721348.591:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 512.205083][ T30] audit: type=1326 audit(1744721348.591:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 512.285164][T12265] program syz.1.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.307890][ T30] audit: type=1326 audit(1744721348.591:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 512.582154][ T5896] gspca_vc032x: Unknown sensor... [ 512.587335][ T5896] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 512.603448][ T5896] usb 4-1: USB disconnect, device number 48 [ 515.084830][T12355] netlink: 'syz.3.2127': attribute type 10 has an invalid length. [ 515.096096][T12355] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2127'. [ 515.107756][T12355] team0: entered promiscuous mode [ 515.117198][T12355] team_slave_0: entered promiscuous mode [ 515.125925][T12355] team_slave_1: entered promiscuous mode [ 515.137931][T12355] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.147543][T12355] bridge0: port 3(team0) entered blocking state [ 515.159157][T12355] bridge0: port 3(team0) entered disabled state [ 515.167657][T12355] team0: entered allmulticast mode [ 515.176400][T12355] team_slave_0: entered allmulticast mode [ 515.191824][T12355] team_slave_1: entered allmulticast mode [ 515.219279][T12359] xt_hashlimit: max too large, truncated to 1048576 [ 515.339441][T12365] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 515.413757][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 515.413779][ T30] audit: type=1326 audit(1744721351.981:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.456531][ T30] audit: type=1326 audit(1744721351.981:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.485689][ T30] audit: type=1326 audit(1744721351.981:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.516188][ T30] audit: type=1326 audit(1744721351.981:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.636564][ T30] audit: type=1326 audit(1744721351.981:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.701478][ T30] audit: type=1326 audit(1744721351.981:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.791588][ T30] audit: type=1326 audit(1744721351.981:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 515.868497][ T30] audit: type=1326 audit(1744721351.981:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.1.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 516.350105][ T30] audit: type=1804 audit(1744721352.911:1118): pid=12406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2152" name="/newroot/438/file0" dev="tmpfs" ino=2266 res=1 errno=0 [ 516.627489][ T30] audit: type=1326 audit(1744721353.191:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12421 comm="syz.3.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 517.552543][ T10] gspca_vc032x: Unknown sensor... [ 517.560697][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 517.604418][ T10] usb 5-1: USB disconnect, device number 69 [ 518.219106][T12499] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 518.566276][T12513] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.303144][T12551] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2220'. [ 519.631776][T12558] bond0: entered promiscuous mode [ 519.682206][T12558] bond_slave_0: entered promiscuous mode [ 519.699069][T12558] bond_slave_1: entered promiscuous mode [ 519.725540][T12558] batadv0: entered promiscuous mode [ 519.782107][T12558] bond0: left promiscuous mode [ 519.792470][T12558] bond_slave_0: left promiscuous mode [ 519.798128][T12558] bond_slave_1: left promiscuous mode [ 519.834313][T12558] batadv0: left promiscuous mode [ 520.851258][T12566] warn_alloc: 3 callbacks suppressed [ 520.851281][T12566] syz.3.2229: vmalloc error: size 1075838976, failed to allocated page array size 2101248, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 520.900427][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.3.2229 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 520.900461][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 520.900476][T12566] Call Trace: [ 520.900485][T12566] [ 520.900494][T12566] dump_stack_lvl+0x241/0x360 [ 520.900535][T12566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.900577][T12566] ? __pfx__printk+0x10/0x10 [ 520.900607][T12566] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 520.900645][T12566] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 520.900677][T12566] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 520.900725][T12566] warn_alloc+0x27c/0x410 [ 520.900755][T12566] ? __pfx_warn_alloc+0x10/0x10 [ 520.900786][T12566] ? hash_netiface_create+0x356/0x1040 [ 520.900809][T12566] ? __get_vm_area_node+0x1c8/0x2d0 [ 520.900841][T12566] ? __get_vm_area_node+0x25c/0x2d0 [ 520.900900][T12566] __vmalloc_node_range_noprof+0x634/0x1390 [ 520.900953][T12566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.900976][T12566] ? __kasan_kmalloc_large+0x1a/0xa0 [ 520.901010][T12566] ? hash_netiface_create+0x356/0x1040 [ 520.901035][T12566] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 520.901069][T12566] ? hash_netiface_create+0x356/0x1040 [ 520.901091][T12566] ? hash_netiface_create+0x356/0x1040 [ 520.901113][T12566] ? hash_netiface_create+0x2fa/0x1040 [ 520.901141][T12566] hash_netiface_create+0x356/0x1040 [ 520.901177][T12566] ? __pfx_hash_netiface_create+0x10/0x10 [ 520.901202][T12566] ip_set_create+0xa7d/0x1960 [ 520.901231][T12566] ? ip_set_create+0x48c/0x1960 [ 520.901262][T12566] ? __pfx_ip_set_create+0x10/0x10 [ 520.901321][T12566] ? nfnetlink_rcv_msg+0x227/0x1190 [ 520.901347][T12566] nfnetlink_rcv_msg+0xbf7/0x1190 [ 520.901372][T12566] ? nfnetlink_rcv_msg+0x227/0x1190 [ 520.901418][T12566] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 520.901440][T12566] ? stack_trace_save+0x11a/0x1d0 [ 520.901508][T12566] ? __update_page_owner_handle+0x5a/0x550 [ 520.901544][T12566] ? __lock_acquire+0xad5/0xd80 [ 520.901585][T12566] netlink_rcv_skb+0x208/0x480 [ 520.901620][T12566] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 520.901648][T12566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.901696][T12566] ? apparmor_capable+0x13b/0x1b0 [ 520.901723][T12566] ? bpf_lsm_capable+0x9/0x10 [ 520.901750][T12566] ? security_capable+0x7e/0x2d0 [ 520.901788][T12566] nfnetlink_rcv+0x296/0x28f0 [ 520.901811][T12566] ? __kernel_text_address+0xd/0x40 [ 520.901836][T12566] ? arch_stack_walk+0xff/0x150 [ 520.901878][T12566] ? stack_trace_save+0x11a/0x1d0 [ 520.901912][T12566] ? __pfx_stack_trace_save+0x10/0x10 [ 520.901947][T12566] ? stack_depot_save_flags+0x44/0x940 [ 520.901969][T12566] ? stack_trace_snprint+0x31/0xf0 [ 520.902000][T12566] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 520.902029][T12566] ? kasan_save_track+0x51/0x80 [ 520.902052][T12566] ? kasan_save_track+0x3f/0x80 [ 520.902075][T12566] ? __kasan_slab_alloc+0x66/0x80 [ 520.902100][T12566] ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 520.902130][T12566] ? kmalloc_reserve+0xa8/0x2a0 [ 520.902149][T12566] ? __alloc_skb+0x1f2/0x480 [ 520.902167][T12566] ? netlink_sendmsg+0x638/0xcd0 [ 520.902197][T12566] ? __sock_sendmsg+0x221/0x270 [ 520.902224][T12566] ? ____sys_sendmsg+0x523/0x860 [ 520.902273][T12566] ? __lock_acquire+0xad5/0xd80 [ 520.902322][T12566] ? __lock_acquire+0xad5/0xd80 [ 520.902365][T12566] ? netlink_deliver_tap+0x2e/0x1b0 [ 520.902401][T12566] ? netlink_deliver_tap+0x2e/0x1b0 [ 520.902436][T12566] netlink_unicast+0x7f8/0x9a0 [ 520.902476][T12566] ? __pfx_netlink_unicast+0x10/0x10 [ 520.902508][T12566] ? skb_put+0x114/0x1f0 [ 520.902535][T12566] netlink_sendmsg+0x8c3/0xcd0 [ 520.902589][T12566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.902628][T12566] ? aa_sock_msg_perm+0x91/0x160 [ 520.902667][T12566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.902698][T12566] __sock_sendmsg+0x221/0x270 [ 520.902731][T12566] ____sys_sendmsg+0x523/0x860 [ 520.902767][T12566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.902789][T12566] ? __fget_files+0x2a/0x420 [ 520.902813][T12566] ? __fget_files+0x2a/0x420 [ 520.902844][T12566] __sys_sendmsg+0x271/0x360 [ 520.902874][T12566] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.902959][T12566] ? do_syscall_64+0xb6/0x230 [ 520.902991][T12566] do_syscall_64+0xf3/0x230 [ 520.903020][T12566] ? clear_bhb_loop+0x45/0xa0 [ 520.903047][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.903070][T12566] RIP: 0033:0x7ff80698e169 [ 520.903091][T12566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.903110][T12566] RSP: 002b:00007ff80771d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.903134][T12566] RAX: ffffffffffffffda RBX: 00007ff806bb5fa0 RCX: 00007ff80698e169 [ 520.903151][T12566] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 520.903165][T12566] RBP: 00007ff806a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 520.903180][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.903194][T12566] R13: 0000000000000000 R14: 00007ff806bb5fa0 R15: 00007ff806cdfa28 [ 520.903227][T12566] [ 521.419160][T12566] Mem-Info: [ 521.426421][T12566] active_anon:22304 inactive_anon:0 isolated_anon:0 [ 521.426421][T12566] active_file:16485 inactive_file:38484 isolated_file:0 [ 521.426421][T12566] unevictable:933 dirty:134 writeback:0 [ 521.426421][T12566] slab_reclaimable:10239 slab_unreclaimable:100953 [ 521.426421][T12566] mapped:29896 shmem:18423 pagetables:1065 [ 521.426421][T12566] sec_pagetables:0 bounce:0 [ 521.426421][T12566] kernel_misc_reclaimable:0 [ 521.426421][T12566] free:1264202 free_pcp:5664 free_cma:0 [ 521.539883][T12566] Node 0 active_anon:89216kB inactive_anon:0kB active_file:65940kB inactive_file:153860kB unevictable:2196kB isolated(anon):0kB isolated(file):0kB mapped:119584kB dirty:532kB writeback:0kB shmem:72156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.574237][T12566] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.607304][T12566] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.634948][T12566] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 521.640786][T12566] Node 0 DMA32 free:1153820kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:89108kB inactive_anon:0kB active_file:65940kB inactive_file:153760kB unevictable:2196kB writepending:532kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:2400kB local_pcp:1232kB free_cma:0kB [ 521.672971][T12566] lowmem_reserve[]: 0 0 0 0 0 [ 521.677994][T12566] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.705979][T12566] lowmem_reserve[]: 0 0 0 0 0 [ 521.710927][T12566] Node 1 Normal free:3883012kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:1540kB free_cma:0kB [ 521.741064][T12566] lowmem_reserve[]: 0 0 0 0 0 [ 521.751324][T12566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 521.764939][T12566] Node 0 DMA32: 202*4kB (UME) 218*8kB (UME) 177*16kB (UME) 144*32kB (UME) 72*64kB (UME) 29*128kB (UME) 33*256kB (UME) 13*512kB (UME) 14*1024kB (UME) 6*2048kB (UM) 267*4096kB (UME) = 1153672kB [ 521.784626][T12566] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.796677][T12566] Node 1 Normal: 255*4kB (UM) 55*8kB (UME) 17*16kB (ME) 184*32kB (UM) 111*64kB (UME) 31*128kB (UME) 25*256kB (UME) 9*512kB (UME) 9*1024kB (UME) 7*2048kB (UME) 935*4096kB (M) = 3883012kB [ 521.815815][T12566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.826207][T12566] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 521.836053][T12566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.847047][T12566] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 521.856908][T12566] 73395 total pagecache pages [ 521.861624][T12566] 0 pages in swap cache [ 521.866270][T12566] Free swap = 124996kB [ 521.870550][T12566] Total swap = 124996kB [ 521.875278][T12566] 2097051 pages RAM [ 521.879118][T12566] 0 pages HighMem/MovableOnly [ 521.884295][T12566] 428585 pages reserved [ 521.894745][T12566] 0 pages cma reserved [ 522.168766][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 522.213540][T12623] veth0_macvtap: left promiscuous mode [ 522.232371][T12623] macvtap0: entered promiscuous mode [ 522.237871][T12623] macvtap0: entered allmulticast mode [ 522.958144][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 523.947516][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 523.947537][ T30] audit: type=1326 audit(1744721360.511:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.067298][ T30] audit: type=1326 audit(1744721360.541:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.165664][ T30] audit: type=1326 audit(1744721360.541:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.219090][ T30] audit: type=1326 audit(1744721360.541:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.292321][ T30] audit: type=1326 audit(1744721360.541:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.0.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.435545][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 524.446121][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2293'. [ 524.491255][ T30] audit: type=1326 audit(1744721361.041:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.584322][ T30] audit: type=1326 audit(1744721361.041:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.635566][T12708] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 524.650626][T12708] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 524.658924][ T30] audit: type=1326 audit(1744721361.051:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.704005][ T30] audit: type=1326 audit(1744721361.051:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 524.782603][ T30] audit: type=1326 audit(1744721361.051:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12705 comm="syz.0.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc12d8e169 code=0x7ffc0000 [ 525.761027][T12740] lo: entered promiscuous mode [ 525.792356][T12740] lo: entered allmulticast mode [ 526.644806][T12762] block device autoloading is deprecated and will be removed. [ 526.683202][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2326'. [ 526.702265][T12762] syz.0.2323: attempt to access beyond end of device [ 526.702265][T12762] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 526.741983][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2326'. [ 527.157949][T12787] netlink: 'syz.3.2333': attribute type 16 has an invalid length. [ 527.715068][T12800] usb usb1: usbfs: process 12800 (syz.1.2339) did not claim interface 0 before use [ 528.264409][T12825] random: crng reseeded on system resumption [ 528.770712][T12849] vlan0: entered allmulticast mode [ 528.783735][T12849] bond0: entered allmulticast mode [ 528.794668][T12849] bond_slave_0: entered allmulticast mode [ 528.803953][T12849] bond_slave_1: entered allmulticast mode [ 528.955121][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 528.955142][ T30] audit: type=1326 audit(1744721365.521:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff806985127 code=0x7ffc0000 [ 529.008928][ T30] audit: type=1326 audit(1744721365.551:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff80692a359 code=0x7ffc0000 [ 529.037622][ T30] audit: type=1326 audit(1744721365.551:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff806985127 code=0x7ffc0000 [ 529.066326][ T30] audit: type=1326 audit(1744721365.551:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff80692a359 code=0x7ffc0000 [ 529.102943][ T30] audit: type=1326 audit(1744721365.551:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 529.161801][ T30] audit: type=1326 audit(1744721365.561:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff806985127 code=0x7ffc0000 [ 529.217172][ T30] audit: type=1326 audit(1744721365.561:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff80692a359 code=0x7ffc0000 [ 529.327740][ T30] audit: type=1326 audit(1744721365.561:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 529.410489][ T30] audit: type=1326 audit(1744721365.571:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff806985127 code=0x7ffc0000 [ 529.491408][ T30] audit: type=1326 audit(1744721365.571:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.3.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff80692a359 code=0x7ffc0000 [ 529.707210][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 531.436849][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2407'. [ 531.805217][T12964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2414'. [ 531.842825][T12964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2414'. [ 531.870553][T12964] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 531.920570][T12964] gretap1: entered promiscuous mode [ 531.926382][T12964] gretap1: entered allmulticast mode [ 532.250488][T12915] warn_alloc: 1 callbacks suppressed [ 532.250522][T12915] syz.3.2391: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 532.275496][T12915] CPU: 1 UID: 0 PID: 12915 Comm: syz.3.2391 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 532.275542][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 532.275557][T12915] Call Trace: [ 532.275567][T12915] [ 532.275577][T12915] dump_stack_lvl+0x241/0x360 [ 532.275617][T12915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.275649][T12915] ? __pfx__printk+0x10/0x10 [ 532.275675][T12915] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 532.275708][T12915] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 532.275736][T12915] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 532.275768][T12915] warn_alloc+0x27c/0x410 [ 532.275793][T12915] ? __pfx_warn_alloc+0x10/0x10 [ 532.275820][T12915] ? hash_netiface_create+0x356/0x1040 [ 532.275847][T12915] ? __get_vm_area_node+0x1c8/0x2d0 [ 532.275877][T12915] ? __get_vm_area_node+0x25c/0x2d0 [ 532.275913][T12915] __vmalloc_node_range_noprof+0x634/0x1390 [ 532.275960][T12915] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 532.275991][T12915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.276012][T12915] ? hash_netiface_create+0x356/0x1040 [ 532.276031][T12915] ? __get_vm_area_node+0x1c8/0x2d0 [ 532.276060][T12915] ? __get_vm_area_node+0x25c/0x2d0 [ 532.276095][T12915] __vmalloc_node_range_noprof+0x53f/0x1390 [ 532.276115][T12915] ? hash_netiface_create+0x356/0x1040 [ 532.276165][T12915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.276186][T12915] ? __kasan_kmalloc_large+0x1a/0xa0 [ 532.276216][T12915] ? hash_netiface_create+0x356/0x1040 [ 532.276238][T12915] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 532.276271][T12915] ? hash_netiface_create+0x356/0x1040 [ 532.276291][T12915] ? hash_netiface_create+0x356/0x1040 [ 532.276310][T12915] ? hash_netiface_create+0x2fa/0x1040 [ 532.276336][T12915] hash_netiface_create+0x356/0x1040 [ 532.276369][T12915] ? __pfx_hash_netiface_create+0x10/0x10 [ 532.276392][T12915] ip_set_create+0xa7d/0x1960 [ 532.276418][T12915] ? ip_set_create+0x48c/0x1960 [ 532.276445][T12915] ? __pfx_ip_set_create+0x10/0x10 [ 532.276500][T12915] ? nfnetlink_rcv_msg+0x227/0x1190 [ 532.276532][T12915] nfnetlink_rcv_msg+0xbf7/0x1190 [ 532.276555][T12915] ? nfnetlink_rcv_msg+0x227/0x1190 [ 532.276600][T12915] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 532.276621][T12915] ? stack_trace_save+0x11a/0x1d0 [ 532.276678][T12915] ? __update_page_owner_handle+0x5a/0x550 [ 532.276712][T12915] ? __lock_acquire+0xad5/0xd80 [ 532.276743][T12915] netlink_rcv_skb+0x208/0x480 [ 532.276774][T12915] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 532.276798][T12915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.276842][T12915] ? apparmor_capable+0x13b/0x1b0 [ 532.276867][T12915] ? bpf_lsm_capable+0x9/0x10 [ 532.276891][T12915] ? security_capable+0x7e/0x2d0 [ 532.276926][T12915] nfnetlink_rcv+0x296/0x28f0 [ 532.276947][T12915] ? __kernel_text_address+0xd/0x40 [ 532.276969][T12915] ? arch_stack_walk+0xff/0x150 [ 532.277010][T12915] ? stack_trace_save+0x11a/0x1d0 [ 532.277043][T12915] ? __pfx_stack_trace_save+0x10/0x10 [ 532.277075][T12915] ? stack_depot_save_flags+0x44/0x940 [ 532.277096][T12915] ? stack_trace_snprint+0x31/0xf0 [ 532.277126][T12915] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 532.277152][T12915] ? kasan_save_track+0x51/0x80 [ 532.277174][T12915] ? kasan_save_track+0x3f/0x80 [ 532.277195][T12915] ? __kasan_slab_alloc+0x66/0x80 [ 532.277218][T12915] ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 532.277246][T12915] ? kmalloc_reserve+0xa8/0x2a0 [ 532.277266][T12915] ? __alloc_skb+0x1f2/0x480 [ 532.277283][T12915] ? netlink_sendmsg+0x638/0xcd0 [ 532.277311][T12915] ? __sock_sendmsg+0x221/0x270 [ 532.277336][T12915] ? ____sys_sendmsg+0x523/0x860 [ 532.277362][T12915] ? __lock_acquire+0xad5/0xd80 [ 532.277411][T12915] ? __lock_acquire+0xad5/0xd80 [ 532.277452][T12915] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.277485][T12915] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.277527][T12915] netlink_unicast+0x7f8/0x9a0 [ 532.277564][T12915] ? __pfx_netlink_unicast+0x10/0x10 [ 532.277594][T12915] ? skb_put+0x114/0x1f0 [ 532.277619][T12915] netlink_sendmsg+0x8c3/0xcd0 [ 532.277664][T12915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.277700][T12915] ? aa_sock_msg_perm+0x91/0x160 [ 532.277736][T12915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.277765][T12915] __sock_sendmsg+0x221/0x270 [ 532.277797][T12915] ____sys_sendmsg+0x523/0x860 [ 532.277830][T12915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.277850][T12915] ? __fget_files+0x2a/0x420 [ 532.277873][T12915] ? __fget_files+0x2a/0x420 [ 532.277902][T12915] __sys_sendmsg+0x271/0x360 [ 532.277924][T12915] ? __pfx_futex_wake+0x10/0x10 [ 532.277950][T12915] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.278032][T12915] ? do_syscall_64+0xb6/0x230 [ 532.278063][T12915] do_syscall_64+0xf3/0x230 [ 532.278090][T12915] ? clear_bhb_loop+0x45/0xa0 [ 532.278116][T12915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.278136][T12915] RIP: 0033:0x7ff80698e169 [ 532.278156][T12915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.278175][T12915] RSP: 002b:00007ff80771d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.278197][T12915] RAX: ffffffffffffffda RBX: 00007ff806bb5fa0 RCX: 00007ff80698e169 [ 532.278214][T12915] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 532.278227][T12915] RBP: 00007ff806a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 532.278241][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.278254][T12915] R13: 0000000000000000 R14: 00007ff806bb5fa0 R15: 00007ff806cdfa28 [ 532.278287][T12915] [ 532.278297][T12915] Mem-Info: [ 532.371222][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2421'. [ 532.385456][T12915] active_anon:25697 inactive_anon:0 isolated_anon:0 [ 532.385456][T12915] active_file:16485 inactive_file:38488 isolated_file:0 [ 532.385456][T12915] unevictable:935 dirty:163 writeback:0 [ 532.385456][T12915] slab_reclaimable:10339 slab_unreclaimable:101781 [ 532.385456][T12915] mapped:30047 shmem:18430 pagetables:944 [ 532.385456][T12915] sec_pagetables:0 bounce:0 [ 532.385456][T12915] kernel_misc_reclaimable:0 [ 532.385456][T12915] free:1259112 free_pcp:6806 free_cma:0 [ 532.600781][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 532.645249][T12915] Node 0 active_anon:102788kB inactive_anon:0kB active_file:65940kB inactive_file:153876kB unevictable:2204kB isolated(anon):0kB isolated(file):0kB mapped:120188kB dirty:648kB writeback:0kB shmem:72184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10904kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.746579][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 532.757841][T12915] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.976706][T12915] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.006348][T12915] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 533.012718][T12915] Node 0 DMA32 free:1134700kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:102796kB inactive_anon:0kB active_file:65940kB inactive_file:153776kB unevictable:2196kB writepending:696kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:9172kB local_pcp:5852kB free_cma:0kB [ 533.122621][T12915] lowmem_reserve[]: 0 0 0 0 0 [ 533.127443][T12915] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.168583][T12915] lowmem_reserve[]: 0 0 0 0 0 [ 533.174127][T12915] Node 1 Normal free:3885592kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18492kB local_pcp:18476kB free_cma:0kB [ 533.235372][T12915] lowmem_reserve[]: 0 0 0 0 0 [ 533.262698][T12915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.316528][T12915] Node 0 DMA32: 1*4kB (E) 30*8kB (UME) 34*16kB (UME) 10*32kB (UME) 5*64kB (UME) 18*128kB (UME) 34*256kB (UME) 10*512kB (UME) 14*1024kB (UME) 7*2048kB (UM) 267*4096kB (UME) = 1139860kB [ 533.389960][T12915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 533.414608][T12915] Node 1 Normal: 250*4kB (UM) 68*8kB (UME) 43*16kB (UME) 205*32kB (UM) 117*64kB (UME) 33*128kB (UME) 26*256kB (UME) 8*512kB (UME) 10*1024kB (UME) 7*2048kB (UME) 935*4096kB (M) = 3885592kB [ 533.440925][T12915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.458445][T12915] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 533.468777][T12915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.479511][T12915] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 533.489674][T12915] 73406 total pagecache pages [ 533.495340][T12915] 0 pages in swap cache [ 533.499541][T12915] Free swap = 124996kB [ 533.521940][T12915] Total swap = 124996kB [ 533.526176][T12915] 2097051 pages RAM [ 533.530025][T12915] 0 pages HighMem/MovableOnly [ 533.542171][T12915] 428585 pages reserved [ 533.546530][T12915] 0 pages cma reserved [ 533.654743][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'. [ 533.774887][T13008] netlink: 'syz.0.2435': attribute type 5 has an invalid length. [ 534.194044][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 534.194072][ T30] audit: type=1326 audit(1744721370.761:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.270812][ T30] audit: type=1326 audit(1744721370.791:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.348018][ T30] audit: type=1326 audit(1744721370.791:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.405025][ T30] audit: type=1326 audit(1744721370.791:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.485541][T13036] all: renamed from lo (while UP) [ 534.497040][ T30] audit: type=1326 audit(1744721370.791:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.582359][ T30] audit: type=1326 audit(1744721370.791:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.648771][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 534.659209][ T30] audit: type=1326 audit(1744721370.791:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd6fb18fffc code=0x7ffc0000 [ 534.702355][ T30] audit: type=1326 audit(1744721370.791:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd6fb18ff34 code=0x7ffc0000 [ 534.772336][ T30] audit: type=1326 audit(1744721370.791:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 534.843291][ T30] audit: type=1326 audit(1744721370.791:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd6fb18e169 code=0x7ffc0000 [ 535.235549][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 535.310404][T13048] bond3: entered promiscuous mode [ 535.322029][T13048] bond3: entered allmulticast mode [ 535.332933][T13048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.498598][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 539.152475][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2504'. [ 539.551467][T13175] program syz.1.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.584536][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 539.584556][ T30] audit: type=1326 audit(1744721376.151:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 539.696989][ T30] audit: type=1326 audit(1744721376.181:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="syz.2.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 539.777690][ T30] audit: type=1326 audit(1744721376.181:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 539.838559][ T30] audit: type=1326 audit(1744721376.181:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 539.920120][ T30] audit: type=1326 audit(1744721376.181:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 539.964911][ T30] audit: type=1326 audit(1744721376.191:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 539.990411][ T30] audit: type=1326 audit(1744721376.191:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 540.018711][T13187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 540.031299][ T30] audit: type=1326 audit(1744721376.191:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 540.106433][ T30] audit: type=1326 audit(1744721376.191:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 540.154028][ T30] audit: type=1326 audit(1744721376.191:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 540.226664][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 540.247250][T13191] openvswitch: netlink: Flow key attr not present in new flow. [ 540.981672][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2529'. [ 541.999163][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'. [ 544.625306][ T30] kauditd_printk_skb: 419 callbacks suppressed [ 544.625328][ T30] audit: type=1326 audit(1744721381.191:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 544.722134][ T30] audit: type=1326 audit(1744721381.221:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 544.816922][ T30] audit: type=1326 audit(1744721381.221:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 544.916152][ T30] audit: type=1326 audit(1744721381.221:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 544.995013][ T30] audit: type=1326 audit(1744721381.231:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 545.089556][ T30] audit: type=1326 audit(1744721381.231:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 545.161954][ T30] audit: type=1326 audit(1744721381.231:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 545.210297][ T30] audit: type=1326 audit(1744721381.231:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 545.285737][ T30] audit: type=1326 audit(1744721381.231:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 545.357369][ T30] audit: type=1326 audit(1744721381.231:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4e78e169 code=0x7ffc0000 [ 545.966619][T13342] bridge_slave_0: left allmulticast mode [ 546.010123][T13342] bridge_slave_0: left promiscuous mode [ 546.032208][T13342] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.164886][T13342] bond0: (slave bond_slave_0): Releasing backup interface [ 546.194411][T13342] bond_slave_0: left allmulticast mode [ 546.227833][T13342] bond0: (slave bond_slave_1): Releasing backup interface [ 546.254905][T13342] bond_slave_1: left allmulticast mode [ 546.274971][T13342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.312138][T13342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.365898][T13342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.402274][T13342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.605259][T13342] syz.4.2584 (13342) used greatest stack depth: 18888 bytes left [ 546.942888][T13362] netlink: 'syz.0.2593': attribute type 10 has an invalid length. [ 546.981939][T13362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2593'. [ 547.094570][T13362] geneve0: entered promiscuous mode [ 547.137671][T13362] team0: Port device geneve0 added [ 547.479820][T13381] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2603'. [ 547.715878][T13392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2608'. [ 547.792347][T13392] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2608'. [ 547.844636][T13392] gretap1: entered promiscuous mode [ 547.849924][T13392] gretap1: entered allmulticast mode [ 548.340349][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2617'. [ 549.240505][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2629'. [ 549.289150][T13444] hub 9-0:1.0: USB hub found [ 549.297784][T13444] hub 9-0:1.0: 1 port detected [ 549.567986][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 549.603349][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2631'. [ 549.703886][T13219] Set syz1 is full, maxelem 65536 reached [ 550.078926][T13466] netlink: 'syz.1.2639': attribute type 4 has an invalid length. [ 550.182938][T13472] pim6reg1: entered promiscuous mode [ 550.199783][T13472] pim6reg1: entered allmulticast mode [ 550.867036][T13496] hub 1-0:1.0: USB hub found [ 550.876890][T13496] hub 1-0:1.0: 1 port detected [ 551.778130][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2665'. [ 553.116522][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 553.408720][T13570] vlan0: entered allmulticast mode [ 553.492004][T13570] bond0: entered allmulticast mode [ 553.515045][T13570] bond_slave_0: entered allmulticast mode [ 553.550531][T13570] bond_slave_1: entered allmulticast mode [ 553.561451][T13570] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 554.409112][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 554.425481][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'. [ 555.146629][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 555.165795][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2716'. [ 555.590393][T13665] xt_hashlimit: max too large, truncated to 1048576 [ 555.602849][T13665] No such timeout policy "syz1" [ 555.714027][T13669] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 555.749548][T13669] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 555.759374][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2731'. [ 555.766111][T13669] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 555.812709][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2731'. [ 555.970243][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 555.970264][ T30] audit: type=1326 audit(1744721392.531:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.009032][ T30] audit: type=1326 audit(1744721392.571:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.069063][ T30] audit: type=1326 audit(1744721392.571:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.092244][ T30] audit: type=1326 audit(1744721392.571:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.117045][ T30] audit: type=1326 audit(1744721392.571:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.169448][ T30] audit: type=1326 audit(1744721392.571:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.221679][ T30] audit: type=1326 audit(1744721392.571:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.271446][ T30] audit: type=1326 audit(1744721392.571:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13681 comm="syz.2.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdcd8e169 code=0x7ffc0000 [ 556.429223][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 556.876655][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2757'. [ 556.986358][ T30] audit: type=1326 audit(1744721393.551:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 557.051536][ T30] audit: type=1326 audit(1744721393.571:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13733 comm="syz.3.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 558.243043][T13788] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2785'. [ 558.300342][T13790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2786'. [ 558.325431][T13790] unsupported nlmsg_type 40 [ 558.426605][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 558.612050][ T10] usb 2-1: device descriptor read/64, error -71 [ 558.883812][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 559.063330][ T10] usb 2-1: device descriptor read/64, error -71 [ 559.177486][ T10] usb usb2-port1: attempt power cycle [ 559.562075][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 559.618110][ T10] usb 2-1: device descriptor read/8, error -71 [ 559.862521][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 559.884360][T13842] IPv6: Can't replace route, no match found [ 559.922685][ T10] usb 2-1: device descriptor read/8, error -71 [ 560.042655][ T10] usb usb2-port1: unable to enumerate USB device [ 560.407791][T13868] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2819'. [ 560.671348][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x1 [ 560.681726][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.690345][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.707334][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.719602][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.730072][T13881] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2824'. [ 560.739937][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.748856][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.765877][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.782442][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.792316][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x2 [ 560.814985][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.833351][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.857558][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.878228][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.897645][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.919008][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 560.949342][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.001516][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.049241][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.081802][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.108744][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.137282][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.157879][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.185566][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.219195][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.241249][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.258425][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.290434][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.299943][T13891] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2831'. [ 561.322169][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.349503][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.377733][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.409125][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.437288][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.461760][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.495439][ T10] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 561.527184][ T10] hid-generic 0000:007F:FFFFFFFE.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 561.614748][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.628164][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.636908][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.645328][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.655434][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.660580][ T6216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.718478][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.726653][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.735678][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.746706][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.758250][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.779802][T13906] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 561.822265][T13906] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 561.956202][ T6216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.145628][ T6216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.165979][T13923] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2843'. [ 562.269532][ T6216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.560455][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 562.560476][ T30] audit: type=1326 audit(1744721399.121:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.569074][T13908] chnl_net:caif_netlink_parms(): no params data found [ 562.657847][ T30] audit: type=1326 audit(1744721399.171:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.806364][ T30] audit: type=1326 audit(1744721399.171:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.866748][ T30] audit: type=1326 audit(1744721399.171:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.883034][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.893658][ T30] audit: type=1326 audit(1744721399.171:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.895588][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.918622][ T30] audit: type=1326 audit(1744721399.171:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.946816][ T30] audit: type=1326 audit(1744721399.171:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 562.970607][ T30] audit: type=1326 audit(1744721399.171:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 563.022325][ T6216] bridge_slave_1: left allmulticast mode [ 563.028390][ T6216] bridge_slave_1: left promiscuous mode [ 563.035787][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.045408][ T30] audit: type=1326 audit(1744721399.171:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 563.068970][ T30] audit: type=1326 audit(1744721399.171:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff80698e169 code=0x7ffc0000 [ 563.093090][ T6216] bridge_slave_0: left allmulticast mode [ 563.098779][ T6216] bridge_slave_0: left promiscuous mode [ 563.110988][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.822181][ T5844] Bluetooth: hci2: command tx timeout [ 563.845801][ T6216] bond1 (unregistering): (slave gretap1): Releasing active interface [ 564.165074][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.177984][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.190030][ T6216] bond0 (unregistering): (slave è): Releasing backup interface [ 564.200156][ T6216] bond0 (unregistering): Released all slaves [ 564.389800][ T6216] bond1 (unregistering): Released all slaves [ 564.550833][ T6216] bond2 (unregistering): Released all slaves [ 564.703587][ T6216] bond3 (unregistering): Released all slaves [ 564.965507][T13978] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2861'. [ 565.028482][T13978] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2861'. [ 565.038560][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2862'. [ 565.117329][T13986] IPv6: Can't replace route, no match found [ 565.132205][T13908] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.140012][T13908] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.148119][T13908] bridge_slave_0: entered allmulticast mode [ 565.203362][T13908] bridge_slave_0: entered promiscuous mode [ 565.387124][T13908] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.410179][T13908] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.432094][T13908] bridge_slave_1: entered allmulticast mode [ 565.440030][T13908] bridge_slave_1: entered promiscuous mode [ 565.500908][T14004] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 565.626324][T13908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.693177][T13908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.753593][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'. [ 565.903599][ T5844] Bluetooth: hci2: command tx timeout [ 565.959719][T14024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2875'. [ 565.969243][T14024] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2875'. [ 566.292990][T13908] team0: Port device team_slave_0 added [ 566.321491][T13908] team0: Port device team_slave_1 added [ 566.438511][T14042] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2885'. [ 566.483057][ T6216] hsr_slave_0: left promiscuous mode [ 566.504503][ T6216] hsr_slave_1: left promiscuous mode [ 566.512830][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.530139][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.547677][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.557367][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.581076][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'. [ 566.602359][ T6216] [ 566.604807][ T6216] ============================================ [ 566.610950][ T6216] WARNING: possible recursive locking detected [ 566.617131][ T6216] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 566.624271][ T6216] -------------------------------------------- [ 566.630416][ T6216] kworker/u8:8/6216 is trying to acquire lock: [ 566.636567][ T6216] ffff888034e6cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 566.646680][ T6216] [ 566.646680][ T6216] but task is already holding lock: [ 566.654046][ T6216] ffff888034e6cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 566.665647][ T6216] and the lock comparison function returns 0: [ 566.671720][ T6216] [ 566.671720][ T6216] other info that might help us debug this: [ 566.679791][ T6216] Possible unsafe locking scenario: [ 566.679791][ T6216] [ 566.687254][ T6216] CPU0 [ 566.690537][ T6216] ---- [ 566.693819][ T6216] lock(&dev_instance_lock_key#3); [ 566.699037][ T6216] lock(&dev_instance_lock_key#3); [ 566.704258][ T6216] [ 566.704258][ T6216] *** DEADLOCK *** [ 566.704258][ T6216] [ 566.712401][ T6216] May be due to missing lock nesting notation [ 566.712401][ T6216] [ 566.720717][ T6216] 5 locks held by kworker/u8:8/6216: [ 566.726001][ T6216] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 566.736901][ T6216] #1: ffffc9000365fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 566.747445][ T6216] #2: ffffffff900f0a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 566.756870][ T6216] #3: ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 566.766899][ T6216] #4: ffff888034e6cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 566.778928][ T6216] [ 566.778928][ T6216] stack backtrace: [ 566.784822][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: kworker/u8:8 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 566.784844][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.784858][ T6216] Workqueue: netns cleanup_net [ 566.784884][ T6216] Call Trace: [ 566.784891][ T6216] [ 566.784899][ T6216] dump_stack_lvl+0x241/0x360 [ 566.784926][ T6216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.784950][ T6216] ? __pfx__printk+0x10/0x10 [ 566.784974][ T6216] ? print_lock+0x171/0x1a0 [ 566.784995][ T6216] print_deadlock_bug+0x2be/0x2d0 [ 566.785018][ T6216] validate_chain+0x928/0x24e0 [ 566.785042][ T6216] ? stack_trace_save+0x11a/0x1d0 [ 566.785079][ T6216] __lock_acquire+0xad5/0xd80 [ 566.785100][ T6216] lock_acquire+0x116/0x2f0 [ 566.785117][ T6216] ? dev_set_allmulti+0x11c/0x270 [ 566.785137][ T6216] __mutex_lock+0x1a5/0x10c0 [ 566.785158][ T6216] ? dev_set_allmulti+0x11c/0x270 [ 566.785178][ T6216] ? dev_set_allmulti+0x11c/0x270 [ 566.785193][ T6216] ? __pfx___mutex_lock+0x10/0x10 [ 566.785217][ T6216] ? lockdep_hardirqs_on+0x9d/0x150 [ 566.785238][ T6216] ? __local_bh_enable_ip+0x168/0x200 [ 566.785255][ T6216] ? macvlan_stop+0x129/0x420 [ 566.785276][ T6216] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 566.785294][ T6216] dev_set_allmulti+0x11c/0x270 [ 566.785313][ T6216] macvlan_stop+0x20f/0x420 [ 566.785332][ T6216] ? __pfx_macvlan_stop+0x10/0x10 [ 566.785353][ T6216] __dev_close_many+0x3d7/0x760 [ 566.785380][ T6216] ? __pfx___dev_close_many+0x10/0x10 [ 566.785408][ T6216] dev_close_many+0x250/0x4c0 [ 566.785432][ T6216] ? __pfx_dev_close_many+0x10/0x10 [ 566.785455][ T6216] ? __lock_acquire+0xad5/0xd80 [ 566.785476][ T6216] unregister_netdevice_many_notify+0x628/0x2510 [ 566.785500][ T6216] ? lockdep_hardirqs_on+0x9d/0x150 [ 566.785520][ T6216] ? __local_bh_enable_ip+0x168/0x200 [ 566.785537][ T6216] ? batadv_tt_local_remove+0x119/0x230 [ 566.785556][ T6216] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 566.785572][ T6216] ? batadv_tt_local_remove+0x119/0x230 [ 566.785589][ T6216] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 566.785616][ T6216] ? unregister_netdevice_queue+0x2c4/0x400 [ 566.785639][ T6216] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 566.785665][ T6216] default_device_exit_batch+0x7ff/0x880 [ 566.785695][ T6216] ? __pfx_default_device_exit_batch+0x10/0x10 [ 566.785721][ T6216] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 566.785746][ T6216] ? cfg802154_pernet_exit+0xc3/0xe0 [ 566.785762][ T6216] ? __pfx_default_device_exit_batch+0x10/0x10 [ 566.785788][ T6216] cleanup_net+0x8af/0xd60 [ 566.785816][ T6216] ? __pfx_cleanup_net+0x10/0x10 [ 566.785846][ T6216] ? process_scheduled_works+0x9cb/0x18e0 [ 566.785866][ T6216] process_scheduled_works+0xac3/0x18e0 [ 566.785896][ T6216] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.785918][ T6216] ? assign_work+0x367/0x3d0 [ 566.785938][ T6216] worker_thread+0x870/0xd50 [ 566.785963][ T6216] ? __kthread_parkme+0x1a8/0x200 [ 566.785985][ T6216] ? __pfx_worker_thread+0x10/0x10 [ 566.786005][ T6216] kthread+0x7b7/0x940 [ 566.786028][ T6216] ? __pfx_worker_thread+0x10/0x10 [ 566.786048][ T6216] ? __pfx_kthread+0x10/0x10 [ 566.786076][ T6216] ? __pfx_kthread+0x10/0x10 [ 566.786099][ T6216] ? __pfx_kthread+0x10/0x10 [ 566.786121][ T6216] ? __pfx_kthread+0x10/0x10 [ 566.786144][ T6216] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 566.786161][ T6216] ? lockdep_hardirqs_on+0x9d/0x150 [ 566.786180][ T6216] ? __pfx_kthread+0x10/0x10 [ 566.786203][ T6216] ret_from_fork+0x4b/0x80 [ 566.786221][ T6216] ? __pfx_kthread+0x10/0x10 [ 566.786244][ T6216] ret_from_fork_asm+0x1a/0x30 [ 566.786265][ T6216] [ 567.982374][ T5844] Bluetooth: hci2: command tx timeout [ 570.062007][ T5844] Bluetooth: hci2: command tx timeout