last executing test programs: 793.442079ms ago: executing program 4 (id=11297): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1040, 0x8, 0x0, 0x6, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x5a, &(0x7f00000006c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@private=0xa010100}]}, @lsrr={0x83, 0xb, 0x40, [@multicast1, @multicast1]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 695.344744ms ago: executing program 4 (id=11303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 656.859406ms ago: executing program 1 (id=11305): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x890b, 0x0) 623.841567ms ago: executing program 4 (id=11307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 611.920698ms ago: executing program 3 (id=11309): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB="08001f000f000700"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 551.307331ms ago: executing program 4 (id=11311): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 0xffff: 262144 [ 400.865481][T29883] team0: left promiscuous mode [ 400.892863][T29883] dummy0: left promiscuous mode [ 400.929354][T29883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.323510][T29919] netlink: 'syz.3.10743': attribute type 13 has an invalid length. [ 401.373413][T29919] netlink: 'syz.3.10743': attribute type 12 has an invalid length. [ 401.759800][T29941] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 401.854495][T29946] netlink: 'syz.3.10752': attribute type 4 has an invalid length. [ 401.863238][T29945] loop1: detected capacity change from 0 to 512 [ 401.928055][T29945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.941607][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 402.076260][T29959] netlink: 'syz.3.10757': attribute type 39 has an invalid length. [ 402.096153][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.129272][T29959] hsr_slave_1 (unregistering): left promiscuous mode [ 403.246011][T30018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10774'. [ 403.503060][T30036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10785'. [ 403.615784][ T28] kauditd_printk_skb: 262 callbacks suppressed [ 403.615801][ T28] audit: type=1400 audit(527776.799:14232): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.673749][ T28] audit: type=1400 audit(527776.836:14233): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.708040][ T28] audit: type=1400 audit(527776.855:14234): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.740148][ T28] audit: type=1400 audit(527776.920:14235): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.813115][T30053] netlink: 'syz.4.10791': attribute type 21 has an invalid length. [ 403.823511][T30053] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10791'. [ 403.840803][ T28] audit: type=1400 audit(527777.004:14236): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.898338][ T28] audit: type=1400 audit(527777.004:14237): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.949877][ T28] audit: type=1400 audit(527777.042:14238): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 403.981899][ T28] audit: type=1400 audit(527777.070:14239): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.010831][ T28] audit: type=1400 audit(527777.145:14240): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.052092][T30063] netlink: 'syz.1.10797': attribute type 30 has an invalid length. [ 404.069631][ T28] audit: type=1400 audit(527777.201:14241): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 404.419356][T30118] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 404.667636][T30134] netlink: 'syz.0.10813': attribute type 2 has an invalid length. [ 404.781301][T30139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10817'. [ 405.086797][T30157] netlink: 'syz.1.10826': attribute type 2 has an invalid length. [ 405.174250][T30164] netlink: 'syz.0.10829': attribute type 3 has an invalid length. [ 405.186038][T30165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.448262][T30184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.908749][T30232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10864'. [ 405.940612][T30235] xt_SECMARK: invalid mode: 3 [ 405.981723][T30242] x_tables: duplicate underflow at hook 2 [ 406.123345][T30261] netlink: 'syz.3.10876': attribute type 13 has an invalid length. [ 406.150145][T30261] gretap0: refused to change device tx_queue_len [ 406.167153][T30261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 406.351382][T30289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10889'. [ 406.564088][T30309] xt_ipcomp: unknown flags 1D [ 406.686966][T30331] netlink: 'syz.3.10907': attribute type 21 has an invalid length. [ 406.696410][T30331] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10907'. [ 406.865090][T30352] x_tables: duplicate entry at hook 2 [ 407.037192][T30373] netlink: 'syz.0.10927': attribute type 10 has an invalid length. [ 407.080708][T30373] team0: Port device vxcan1 added [ 407.354096][T30410] netlink: 'syz.0.10944': attribute type 13 has an invalid length. [ 407.367116][T30412] netlink: 'syz.2.10945': attribute type 3 has an invalid length. [ 407.380260][T30412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10945'. [ 407.380995][T30416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10948'. [ 407.403949][T30416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10948'. [ 407.434092][T30416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10948'. [ 407.455936][T30416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10948'. [ 407.555630][T30429] bond1: option all_slaves_active: invalid value (5) [ 407.570530][T30429] bond1 (unregistering): Released all slaves [ 407.672980][T30507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 408.103372][T30569] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 408.124508][T30569] bond5 (unregistering): Released all slaves [ 408.228712][T30640] bond5 (unregistering): Released all slaves [ 408.708708][T30756] xt_TPROXY: Can be used only with -p tcp or -p udp [ 408.720621][T30759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.728111][T30759] IPv6: NLM_F_CREATE should be set when creating new route [ 408.735698][T30759] IPv6: NLM_F_CREATE should be set when creating new route [ 408.977846][ T28] kauditd_printk_skb: 269 callbacks suppressed [ 408.977865][ T28] audit: type=1400 audit(527781.816:14511): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.023105][ T28] audit: type=1400 audit(527781.862:14512): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.056240][ T28] audit: type=1400 audit(527781.890:14513): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.151010][ T28] audit: type=1400 audit(527781.900:14514): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.179939][ T28] audit: type=1400 audit(527781.937:14515): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.218603][ T28] audit: type=1400 audit(527781.965:14516): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.237449][T30845] __nla_validate_parse: 18 callbacks suppressed [ 409.237469][T30845] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11017'. [ 409.246193][ T28] audit: type=1400 audit(527781.993:14517): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.267400][T30848] IPv6: sit3: Disabled Multicast RS [ 409.286013][ T28] audit: type=1400 audit(527782.012:14518): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.321736][T30848] sit3: entered allmulticast mode [ 409.333749][ T28] audit: type=1400 audit(527782.040:14519): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.379519][ T28] audit: type=1400 audit(527782.040:14520): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.534024][T30874] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 409.583886][T30881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11034'. [ 409.717597][T30892] bond5: option arp_all_targets: invalid value (262144) [ 409.733047][T30892] bond5 (unregistering): Released all slaves [ 409.841726][T30970] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 409.960749][T30987] xt_hashlimit: max too large, truncated to 1048576 [ 410.011281][T30991] validate_nla: 1 callbacks suppressed [ 410.011301][T30991] netlink: 'syz.3.11056': attribute type 10 has an invalid length. [ 410.091304][T31001] netlink: 'syz.2.11069': attribute type 1 has an invalid length. [ 410.100290][T31000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11061'. [ 410.137297][T31000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11061'. [ 410.152458][T31000] netlink: 'syz.4.11061': attribute type 6 has an invalid length. [ 410.160946][T31006] xt_socket: unknown flags 0x4c [ 410.169797][T31007] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 410.555606][T31044] bond5: Removing last arp target with arp_interval on [ 410.583477][T31044] bond5: entered promiscuous mode [ 410.602277][T31044] bond5: entered allmulticast mode [ 410.621154][T31044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.712952][T31091] netlink: 'syz.3.11087': attribute type 4 has an invalid length. [ 410.755043][T31091] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11087'. [ 410.970317][T31114] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 411.196491][T31129] x_tables: unsorted entry at hook 1 [ 411.277908][T31134] xt_hashlimit: max too large, truncated to 1048576 [ 411.321045][T31137] netlink: 'syz.3.11109': attribute type 16 has an invalid length. [ 411.354164][T31137] netlink: 'syz.3.11109': attribute type 17 has an invalid length. [ 411.385905][T31137] lo: left promiscuous mode [ 411.407032][T31137] lo: left allmulticast mode [ 411.480621][T31137] 8021q: adding VLAN 0 to HW filter on device .` [ 411.494192][T31137] team0: left promiscuous mode [ 411.502732][T31137] team_slave_0: left promiscuous mode [ 411.516301][T31137] team_slave_1: left promiscuous mode [ 411.527741][T31137] team0: left allmulticast mode [ 411.539959][T31137] team_slave_0: left allmulticast mode [ 411.543321][T31098] syz.2.11091 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 411.552233][T31137] team_slave_1: left allmulticast mode [ 411.561088][T31098] CPU: 0 UID: 0 PID: 31098 Comm: syz.2.11091 Not tainted syzkaller #0 PREEMPT(full) [ 411.561121][T31098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 411.561180][T31098] Call Trace: [ 411.561188][T31098] [ 411.561197][T31098] __dump_stack+0x1d/0x30 [ 411.561230][T31098] dump_stack_lvl+0x95/0xd0 [ 411.561372][T31098] dump_stack+0x15/0x1b [ 411.561405][T31098] dump_header+0x80/0x240 [ 411.561431][T31098] oom_kill_process+0x295/0x350 [ 411.561508][T31098] out_of_memory+0x97d/0xb80 [ 411.561531][T31098] try_charge_memcg+0x62f/0xa10 [ 411.561571][T31098] __memcg_kmem_charge_page+0x139/0x2b0 [ 411.561715][T31098] __alloc_frozen_pages_noprof+0x18a/0x350 [ 411.561748][T31098] alloc_pages_mpol+0xb3/0x260 [ 411.561779][T31098] alloc_pages_noprof+0x8f/0x140 [ 411.561854][T31098] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 411.561949][T31098] __kvmalloc_node_noprof+0x3d4/0x640 [ 411.562049][T31098] ? futex_hash_allocate+0x190/0x9a0 [ 411.562079][T31098] ? futex_hash_allocate+0x190/0x9a0 [ 411.562111][T31098] futex_hash_allocate+0x190/0x9a0 [ 411.562135][T31098] ? cap_task_prctl+0x13f/0x6b0 [ 411.562218][T31098] futex_hash_prctl+0xd8/0xf0 [ 411.562240][T31098] __se_sys_prctl+0x4f4/0x1400 [ 411.562340][T31098] __x64_sys_prctl+0x67/0x80 [ 411.562371][T31098] x64_sys_call+0x2533/0x3020 [ 411.562402][T31098] do_syscall_64+0x12c/0x3b0 [ 411.562518][T31098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.562543][T31098] RIP: 0033:0x7fc5b8a5c819 [ 411.562562][T31098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.562583][T31098] RSP: 002b:00007fc5b74af028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 411.562654][T31098] RAX: ffffffffffffffda RBX: 00007fc5b8cd5fa0 RCX: 00007fc5b8a5c819 [ 411.562715][T31098] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 411.562731][T31098] RBP: 00007fc5b8af2c91 R08: 0000000000000000 R09: 0000000000000000 [ 411.562747][T31098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.562763][T31098] R13: 00007fc5b8cd6038 R14: 00007fc5b8cd5fa0 R15: 00007ffdecdb0438 [ 411.562784][T31098] [ 411.562853][T31098] memory: usage 307200kB, limit 307200kB, failcnt 132 [ 411.589153][T31137] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.591081][T31098] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 411.602248][T31137] bridge0: port 3(dummy0) entered blocking state [ 411.606097][T31098] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 411.610391][T31137] bridge0: port 3(dummy0) entered forwarding state [ 411.615302][T31098] Memory cgroup stats for [ 411.646040][T31137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.646669][T31098] /syz2: [ 411.842958][T31098] cache 69632 [ 411.866773][T31137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.875860][T31137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.883865][T31098] rss 32768 [ 411.888695][T31098] shmem 0 [ 411.894595][T31137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.906105][T31098] mapped_file 4096 [ 411.910550][T31098] dirty 0 [ 411.913599][T31098] writeback 0 [ 411.917053][T31098] workingset_refault_anon 40 [ 411.924218][T31137] veth1_macvtap: left promiscuous mode [ 411.931658][T31098] workingset_refault_file 636 [ 411.936537][T31137] veth0_macvtap: left promiscuous mode [ 411.942343][T31098] swap 131072 [ 411.946699][T31098] swapcached 331776 [ 411.951591][T31137] veth0_macvtap: entered promiscuous mode [ 411.958057][T31098] pgpgin 153623 [ 411.962488][T31137] veth1_macvtap: entered promiscuous mode [ 411.970015][T31098] pgpgout 153594 [ 411.974088][T31098] pgfault 242574 [ 411.980997][T31098] pgmajfault 30 [ 411.986545][T31137] 8021q: adding VLAN 0 to HW filter on device ì [ 411.992905][T31098] inactive_anon 45056 [ 411.999178][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.006423][T31098] active_anon 0 [ 412.010976][T31098] inactive_file 8192 [ 412.017165][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.024464][T31098] active_file 65536 [ 412.036785][T31098] unevictable 0 [ 412.041106][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.053249][T31098] hierarchical_memory_limit 314572800 [ 412.067370][T31137] gretap2: left allmulticast mode [ 412.075156][T31098] hierarchical_memsw_limit 9223372036854771712 [ 412.075245][T31145] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11114'. [ 412.085061][T31137] bond0: left promiscuous mode [ 412.096540][T31098] total_cache 69632 [ 412.100385][T31098] total_rss 32768 [ 412.104819][T31137] bond0: left allmulticast mode [ 412.110795][T31098] total_shmem 0 [ 412.117204][T31137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.124738][T31098] total_mapped_file 4096 [ 412.129044][T31098] total_dirty 0 [ 412.132527][T31098] total_writeback 0 [ 412.145906][T31098] total_workingset_refault_anon 40 [ 412.152953][T31137] ip6tnl3: left allmulticast mode [ 412.159354][T31098] total_workingset_refault_file 636 [ 412.165820][T31137] bridge1: left promiscuous mode [ 412.171587][T31137] bridge1: left allmulticast mode [ 412.177208][T31098] total_swap 131072 [ 412.182192][T31098] total_swapcached 331776 [ 412.189986][T31137] veth3: left promiscuous mode [ 412.194847][T31098] total_pgpgin 153623 [ 412.199901][T31137] veth3: left allmulticast mode [ 412.204905][T31098] total_pgpgout 153594 [ 412.213562][T31098] total_pgfault 242574 [ 412.218705][T31137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.226714][T31098] total_pgmajfault 30 [ 412.231546][T31098] total_inactive_anon 45056 [ 412.239112][T31098] total_active_anon 0 [ 412.247253][T31098] total_inactive_file 8192 [ 412.253517][T31137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.260328][T31098] total_active_file 65536 [ 412.264947][T31098] total_unevictable 0 [ 412.265460][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.269187][T31098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 412.276125][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.276488][T31098] ,cpuset= [ 412.285030][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.294473][T31098] / [ 412.301118][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.301162][T31098] ,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11091,pid=31097,uid=0 [ 412.327282][T31098] Memory cgroup out of memory: Killed process 31097 (syz.2.11091) total-vm:96080kB, anon-rss:1228kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 412.350955][T22204] !yz2: Port: 1 Link ACTIVE [ 412.367250][T31146] bond5 (unregistering): Released all slaves [ 412.394186][T31148] bond6: option arp_all_targets: invalid value (262144) [ 412.402397][T31148] bond6 (unregistering): Released all slaves [ 412.452759][ T69] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.473312][ T69] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.525913][ T69] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.864933][T31316] ip6erspan1: entered allmulticast mode [ 413.106276][T31347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11146'. [ 413.214321][T31361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11153'. [ 413.367459][T31379] IPVS: length: 1152 != 8 [ 413.434689][T31384] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 413.446933][T31420] netlink: 'syz.3.11164': attribute type 15 has an invalid length. [ 413.455872][T31384] bond4 (unregistering): Released all slaves [ 413.463677][T31420] netlink: 'syz.3.11164': attribute type 7 has an invalid length. [ 413.847431][T31489] netlink: 'syz.1.11182': attribute type 10 has an invalid length. [ 413.880668][T31489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.893246][T31489] team0: Port device netdevsim1 added [ 413.951090][T31497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.958777][T31497] IPv6: NLM_F_CREATE should be set when creating new route [ 413.966038][T31497] IPv6: NLM_F_CREATE should be set when creating new route [ 413.973316][T31497] IPv6: NLM_F_CREATE should be set when creating new route [ 414.264561][T31521] xt_l2tp: wrong L2TP version: 0 [ 414.327535][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 414.327551][ T28] audit: type=1400 audit(527786.833:14742): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.395457][T31525] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11202'. [ 414.404340][ T28] audit: type=1400 audit(527786.870:14743): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.416912][T31528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11204'. [ 414.441203][T31525] bridge_slave_1: default FDB implementation only supports local addresses [ 414.444497][T31530] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 414.483664][ T28] audit: type=1400 audit(527786.889:14744): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.555182][ T28] audit: type=1400 audit(527786.945:14745): avc: denied { create } for pid=31529 comm="syz.2.11201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 414.601083][ T28] audit: type=1400 audit(527786.964:14746): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.634962][T31542] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 414.660204][ T28] audit: type=1400 audit(527786.982:14747): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.737104][ T28] audit: type=1400 audit(527787.020:14748): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.795411][ T28] audit: type=1400 audit(527787.039:14749): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.848643][ T28] audit: type=1400 audit(527787.048:14750): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.893039][T31559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11216'. [ 414.905334][ T28] audit: type=1400 audit(527787.076:14751): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 415.169557][T31582] netlink: 'syz.0.11229': attribute type 9 has an invalid length. [ 415.335186][T31595] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 415.437876][T31603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11238'. [ 415.769306][T31628] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.777437][T31629] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 415.912899][T31637] bond6 (unregistering): Released all slaves [ 416.223939][T31720] validate_nla: 2 callbacks suppressed [ 416.223957][T31720] netlink: 'syz.2.11265': attribute type 16 has an invalid length. [ 416.246526][T31720] netlink: 'syz.2.11265': attribute type 17 has an invalid length. [ 416.334033][T31728] netlink: 'syz.0.11268': attribute type 16 has an invalid length. [ 416.343205][T31728] netlink: 'syz.0.11268': attribute type 17 has an invalid length. [ 416.347927][T31720] 8021q: adding VLAN 0 to HW filter on device .` [ 416.372531][T31720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.488244][T31720] Process accounting resumed [ 416.598532][T31742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11275'. [ 416.774244][T31758] Zero length message leads to an empty skb [ 416.797074][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11284'. [ 417.057901][T31791] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 417.081953][T31798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11303'. [ 417.100768][T31795] netlink: 'syz.2.11302': attribute type 13 has an invalid length. [ 417.220938][T31813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11309'. [ 417.237675][T31813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11309'. [ 417.442744][T31840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 417.449420][T31840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 417.471471][T31840] vhci_hcd vhci_hcd.0: Device attached [ 417.496046][T31840] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 417.502627][T31840] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 417.517180][T31850] netlink: 'syz.1.11325': attribute type 16 has an invalid length. [ 417.529837][T31840] vhci_hcd vhci_hcd.0: Device attached [ 417.539835][T31850] netlink: 'syz.1.11325': attribute type 17 has an invalid length. [ 417.545889][T31846] vhci_hcd: connection closed [ 417.548275][ T12] vhci_hcd vhci_hcd.4: stop threads [ 417.548320][T31841] vhci_hcd: connection closed [ 417.553945][ T12] vhci_hcd vhci_hcd.4: release socket [ 417.565699][T31850] lo: left promiscuous mode [ 417.577101][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 417.583980][ T12] vhci_hcd vhci_hcd.4: stop threads [ 417.589382][ T12] vhci_hcd vhci_hcd.4: release socket [ 417.595870][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 417.603492][T31850] gre0: left promiscuous mode [ 417.613653][T31850] gre0: left allmulticast mode [ 417.633570][T31858] netlink: 'syz.0.11331': attribute type 28 has an invalid length. [ 417.654287][T31858] netlink: 'syz.0.11331': attribute type 29 has an invalid length. [ 417.669500][T22179] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 417.679043][T31858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11331'. [ 417.717361][T31850] bridge0: port 3(dummy0) entered blocking state [ 417.723819][T31850] bridge0: port 3(dummy0) entered forwarding state [ 417.735233][T31850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.763325][T31862] bond2 (unregistering): Released all slaves [ 417.780486][ T3440] ================================================================== [ 417.788771][ T3440] BUG: KCSAN: data-race in copy_process / free_pid [ 417.795324][ T3440] [ 417.797683][ T3440] read-write to 0xffffffff86c5c368 of 4 bytes by task 31898 on cpu 0: [ 417.805955][ T3440] free_pid+0xb3/0x1b0 [ 417.810137][ T3440] free_pids+0x7a/0xb0 [ 417.814215][ T3440] release_task+0x9a7/0xb60 [ 417.818997][ T3440] do_exit+0xda4/0x1530 [ 417.823168][ T3440] call_usermodehelper_exec_async+0x246/0x250 [ 417.829343][ T3440] ret_from_fork+0x146/0x330 [ 417.834117][ T3440] ret_from_fork_asm+0x1a/0x30 [ 417.838986][ T3440] [ 417.841325][ T3440] read to 0xffffffff86c5c368 of 4 bytes by task 3440 on cpu 1: [ 417.849173][ T3440] copy_process+0x1b1d/0x23a0 [ 417.853978][ T3440] kernel_clone+0x1a5/0x5e0 [ 417.858498][ T3440] user_mode_thread+0x9c/0xd0 [ 417.863189][ T3440] call_usermodehelper_exec_work+0x41/0x160 [ 417.869190][ T3440] process_scheduled_works+0x4f0/0x9c0 [ 417.874689][ T3440] worker_thread+0x58a/0x780 [ 417.879304][ T3440] kthread+0x22a/0x280 [ 417.883384][ T3440] ret_from_fork+0x146/0x330 [ 417.888026][ T3440] ret_from_fork_asm+0x1a/0x30 [ 417.892811][ T3440] [ 417.895147][ T3440] value changed: 0x80000108 -> 0x80000107 [ 417.901136][ T3440] [ 417.903552][ T3440] Reported by Kernel Concurrency Sanitizer on: [ 417.909900][ T3440] CPU: 1 UID: 0 PID: 3440 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 417.919415][ T3440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.929485][ T3440] Workqueue: events_unbound call_usermodehelper_exec_work [ 417.936629][ T3440] ================================================================== [ 417.977858][T31933] lo: entered allmulticast mode [ 417.983890][T31933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.