last executing test programs: 2.310404434s ago: executing program 0 (id=4658): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lstat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 2.300919675s ago: executing program 0 (id=4660): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_io_uring_setup(0x7b35, &(0x7f0000010400)={0x0, 0x6827, 0x400, 0x3, 0x4000000}, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x28254, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x1, @perf_bp={0x0}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf25890000000c0099000e0000004c00000028011d80ec00007cdc000d80700000803d0002005003403d132b30514141094452094d3d35504538010a0924093d4e1c08361a4c2949290038243d501a254e51463f2f2a4a1b441f163f02574d0000000d000100180c3603480c0b0660000000190001001b18010903160c050b180b361b09160436480609300000004400018014000300ff89080000000000060006000600020014000300000002000800c1af03000001fcffa50005000400010000000500070002"], 0x14c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.075011139s ago: executing program 0 (id=4664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}, {0x0}], 0x2) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x16, 0x2c, 0x1, 0xf, 0x7, 0xeb8e, 0x5, 0x9b}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = gettid() r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.998565273s ago: executing program 3 (id=4665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="6c6f636b20696f52e4f2daac9313de6b23cc560c2b6d655500"], 0xc) r5 = epoll_create(0xff7feffc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x3000000d}) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213000000"], 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.413094707s ago: executing program 1 (id=4666): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x60000480) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1.281241124s ago: executing program 3 (id=4667): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.170719691s ago: executing program 2 (id=4669): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r1, 0x118, 0x2, 0x0, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x2, 0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_setup(0x1416, &(0x7f0000000500)={0x0, 0xb31a, 0xfd, 0x3, 0x104}) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x19400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x5d2, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.159603682s ago: executing program 0 (id=4670): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) epoll_create1(0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x3b00, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 907.047356ms ago: executing program 4 (id=4671): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lstat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 887.919777ms ago: executing program 3 (id=4672): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0xe8a, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x875b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x5988, 0x4) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x800, @loopback={0xff00000000000000}}, 0x1c, 0x0}}], 0x1, 0x24004040) getpgid(r0) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = semget(0x3, 0x4, 0x200) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="57fbb0e09123e9d48f89632668163f2057f5a1f4067945c6df72598f79c93d03e4a072d803d38ad4c40e7233f88f09bf59c1cc6265aa03105562e9ea66d1f7a394b02dbc0683e84e7b07fc143a5ae0ae2e747cee48fd6edaabb5c6927af3edcc4ddaaec99af552e343ed7b1adfac4796ef526b242de510ab0d7823d29fc297ba069d61b994fcc6e29aa02664f15d11044fd1adad40d6be618ae1de496b5658ade8cb8d0a001fd5aa93be02a06e9974340edf977078d471e17abf34cd461bc538bb11ff048a1df200551a68458ba5293d71e792d37d52afa5df132ef1af1c9a7ba37d3486625c2623225b60", 0xe38f34ef6b7bd44c}], 0x1, 0x0) semctl$SETVAL(r4, 0x3, 0x10, &(0x7f00000001c0)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0xb677190aa666096d, 0x3}, 0x3}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="b3562f2cd837cd0aed8af911f1c0513a7bad497a0e706e84304f710950af2d3546ac3094ce5ebb6dda34acdbb1a29eada9f2634a01f98b01067851ea6993c9db79f34681816559ee95d03eb969461b6aff31ec8da9897dc3b47a76892e6ad5827b69e2f07a9313cb1af7ac036a4f1100c1c8e2a867c01794e5c04a0edd6e3b907ec47bf6080e3987d80a5f7880ee4d82", 0x90}, {&(0x7f00000005c0)="935126a125bc785f914b657c03c1436702089dc9a9c9e45b4fa3f9b302e40379028e3be339f9fec117ad5eea7f72ec2e0678b546f189d323b4caed197fc6ee4ab6cf531b9440d63349873106", 0x4c}, {&(0x7f0000000640)="e7a8f3910f709f68552b4a0872341abd466569", 0x13}], 0x3, &(0x7f00000006c0)="634eb269ff4073aa86fc97b625df11a0105bddc72ddfce1221145fd9951406d6ed0ac898c17484c1fdd9fa85cacba0", 0x2f, 0x8400}, 0x81) r5 = shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r5) 866.031799ms ago: executing program 4 (id=4673): sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c1, &(0x7f00000012c0)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x124) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 667.89284ms ago: executing program 4 (id=4674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc1c4, 0x5, 0x4, 0xd311, 0x400, 0x9da, 0x92eb, 0x9fbd, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x280, 0x7f, 0xfff, 0xe2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4090) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 667.39987ms ago: executing program 3 (id=4675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001a40)={0x200}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 620.189073ms ago: executing program 4 (id=4676): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 506.65946ms ago: executing program 2 (id=4677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000540), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7d16e354b6f02b95}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x20000000) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r3 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0xd4) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x449) r4 = syz_create_resource$binfmt(&(0x7f0000000480)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 499.30154ms ago: executing program 4 (id=4678): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, @in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x60}, @in6={0xa, 0x4e20, 0x800, @local, 0x80000000}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xb928, @mcast1, 0xfffffe00}], 0x8c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000002580)={[0x1]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, @value=r4}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 471.398782ms ago: executing program 1 (id=4679): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251b8000000600210062ff"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x20048040) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1000}) 458.894132ms ago: executing program 2 (id=4680): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4a, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}]}, 0x58) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x3c}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={[0x1c0]}, 0x0, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[], 0x110) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r4 = fsmount(0xffffffffffffffff, 0x1, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f000014e000/0x2000)=nil, 0x2000, 0x5, 0x8010, r4, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0xa00000, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000040)) 433.786974ms ago: executing program 3 (id=4681): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) mount$tmpfs(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000001880), 0x40, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x7}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x78}}, 0x40008040) mkdirat(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 433.251194ms ago: executing program 2 (id=4682): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 431.850104ms ago: executing program 4 (id=4683): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lstat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 404.274375ms ago: executing program 1 (id=4684): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = dup2(r1, r2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="e984"], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6}, 0x4) semget$private(0x0, 0x4, 0x48) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) connect$802154_dgram(r0, &(0x7f0000000580)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0xfffffffffffffffd, 0x6) 403.680886ms ago: executing program 2 (id=4685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYBLOB="30f88a22208b359a5c16ed49d33da5b6d6f9789089a32a70656b35df5c23aaf783e2eef901734f5cc31df329603a74f4b8a94e65fa30a8908f90a423a36d739e10ed816188f0e5ede8bd98619923a8f1d90108a7c2cb011af91d18d70d78fa95337a004888a235e236466b98134af7e24771eabbb008ab7a0bd848550a7062ead2d11bb3", @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYBLOB="d9faf32b465ed3a2fa0337433d7647cd46ffd962561ccac3ee8f9c8d3eaf8755d23625bb86e1f5fd695d6e17291f587a84ad", @ANYRES8, @ANYRES8=r0], 0x1, 0x1268, &(0x7f0000002500)="$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") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'vlan0\x00', 0xe903}) write(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x6, 0x800003, 0x3, 0x2, 0x5, 0x0, 0x0, 0x40, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) rename(0x0, 0x0) inotify_init1(0x80800) 356.449629ms ago: executing program 1 (id=4686): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, 0x0}) times(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x894) capset(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0xff, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x98}, 0x50) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) fcntl$setstatus(r3, 0x4, 0x1800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x1, 'bridge_slave_1\x00', {}, 0x5}) times(&(0x7f00000002c0)) 295.213172ms ago: executing program 1 (id=4687): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f000000b800)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unshare(0x40000000) getdents64(r0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000a00), 0x0) r2 = socket(0x2b, 0x1, 0x1) getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) 249.198325ms ago: executing program 3 (id=4688): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r1, 0x118, 0x2, 0x0, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x2, 0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_setup(0x1416, &(0x7f0000000500)={0x0, 0xb31a, 0xfd, 0x3, 0x104}) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x19400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x5d2, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 149.74848ms ago: executing program 0 (id=4689): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socketpair(0x1a, 0x2, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a5ae4c65dce95956162d85bf465d0b26b42af3277e9683cd5783e296ca2"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1dd}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @remote}}, 0x0, 0xb4}, 0x90) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12) 148.29591ms ago: executing program 1 (id=4690): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffe0}, {0x0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x10001}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x4000000, 0xf1}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00'}) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 30.387237ms ago: executing program 2 (id=4691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff000000", @ANYRES16=0x0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x641a9dc005ac4bdc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x50d000) syz_clone3(&(0x7f0000000640)={0x8000, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f0000000440), {0x2b}, &(0x7f00000004c0)=""/101, 0x65, &(0x7f0000000540)=""/118, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, r1, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$msr(r2, &(0x7f00000002c0)=""/108, 0x6c) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000a00)=""/4096, 0x1000}) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) 0s ago: executing program 0 (id=4692): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) kernel console output (not intermixed with test programs): nset [1, 0] type 2 family 0 port 20004 - 0 [ 234.182103][T14274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.190871][T14274] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.200207][T14274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.217623][T11559] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.226461][T11559] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.236338][T11559] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 234.570229][T14337] netlink: 'syz.2.3931': attribute type 10 has an invalid length. [ 234.580534][T14337] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 234.931506][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3933'. [ 235.045060][T14408] lo speed is unknown, defaulting to 1000 [ 235.165464][T14408] netlink: 'syz.3.3935': attribute type 2 has an invalid length. [ 235.273168][T14408] loop3: detected capacity change from 0 to 8192 [ 235.343095][T14408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3935'. [ 235.788627][T14457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3951'. [ 235.838775][T14463] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.856612][T11559] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.864570][T11559] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.872606][ T7534] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.907050][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3954'. [ 236.163749][ T7534] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 236.746654][T14499] syzkaller0: entered promiscuous mode [ 236.752229][T14499] syzkaller0: entered allmulticast mode [ 236.822450][T14508] netlink: 'syz.1.3965': attribute type 1 has an invalid length. [ 236.836656][T14508] 8021q: adding VLAN 0 to HW filter on device bond15 [ 236.868668][ T7534] Process accounting resumed [ 236.903755][ T7546] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 236.913366][T14508] 8021q: adding VLAN 0 to HW filter on device bond15 [ 236.936151][T14515] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 236.952666][T14508] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.967343][T14508] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 236.984837][T14519] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 237.005314][T14516] veth19: entered promiscuous mode [ 237.012348][T14516] bond15: (slave veth19): Enslaving as an active interface with a down link [ 237.021194][T14519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3968'. [ 237.031190][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 237.031203][ T29] audit: type=1400 audit(1769065518.695:5679): avc: denied { add_name } for pid=14518 comm="syz.0.3968" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 237.070141][T14520] macvlan2: entered promiscuous mode [ 237.075537][T14520] macvlan2: entered allmulticast mode [ 237.103453][ T29] audit: type=1400 audit(1769065518.695:5680): avc: denied { create } for pid=14518 comm="syz.0.3968" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 237.124613][ T29] audit: type=1400 audit(1769065518.715:5681): avc: denied { remove_name } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=4041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 237.132736][T14520] bond15: entered promiscuous mode [ 237.151498][ T29] audit: type=1400 audit(1769065518.715:5682): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=4041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 237.179276][ T29] audit: type=1400 audit(1769065518.715:5683): avc: denied { rmdir } for pid=3315 comm="syz-executor" name="769" dev="tmpfs" ino=4036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 237.215697][T14520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.241343][T14527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14527 comm=syz.4.3971 [ 237.290995][T14520] bond15: left promiscuous mode [ 237.336268][T14527] netlink: 'syz.4.3971': attribute type 1 has an invalid length. [ 237.350028][T14527] 8021q: adding VLAN 0 to HW filter on device bond17 [ 237.366126][T14527] bond10: (slave dummy0): Releasing active interface [ 237.378934][T14527] dummy0: left allmulticast mode [ 237.392017][T14527] bond17: (slave dummy0): making interface the new active one [ 237.418966][T14527] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 237.452982][ T29] audit: type=1326 audit(1769065519.105:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 237.476706][ T29] audit: type=1326 audit(1769065519.105:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 237.500488][ T29] audit: type=1326 audit(1769065519.105:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 237.524224][ T29] audit: type=1326 audit(1769065519.105:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 237.547808][ T29] audit: type=1326 audit(1769065519.105:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 237.650989][T14539] loop3: detected capacity change from 0 to 1024 [ 237.665778][T14539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.678973][T14539] ext4 filesystem being mounted at /742/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.695040][T14539] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.3974: inode has both inline data and extents flags [ 237.717599][T14539] EXT4-fs (loop3): Remounting filesystem read-only [ 237.786937][T14539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3974'. [ 237.808758][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.031451][T14556] lo speed is unknown, defaulting to 1000 [ 238.457566][T14565] netlink: 'syz.0.3984': attribute type 39 has an invalid length. [ 238.490822][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 238.915868][T14574] netlink: 'syz.4.3987': attribute type 39 has an invalid length. [ 239.058895][T14584] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 239.471016][T14592] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.3995'. [ 239.577890][T14576] syz.0.3989 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 239.592137][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.0.3989 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.592170][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.592216][T14576] Call Trace: [ 239.592223][T14576] [ 239.592232][T14576] __dump_stack+0x1d/0x30 [ 239.592319][T14576] dump_stack_lvl+0x95/0xd0 [ 239.592351][T14576] dump_stack+0x15/0x1b [ 239.592369][T14576] dump_header+0x80/0x240 [ 239.592391][T14576] oom_kill_process+0x295/0x350 [ 239.592515][T14576] out_of_memory+0x97d/0xb80 [ 239.592541][T14576] try_charge_memcg+0x62e/0xa10 [ 239.592588][T14576] obj_cgroup_charge_pages+0xa6/0x150 [ 239.592660][T14576] __memcg_kmem_charge_page+0x9e/0x170 [ 239.592691][T14576] __alloc_frozen_pages_noprof+0x18a/0x350 [ 239.592778][T14576] alloc_pages_mpol+0xb3/0x260 [ 239.592812][T14576] alloc_pages_noprof+0x8f/0x130 [ 239.592843][T14576] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 239.592956][T14576] __kvmalloc_node_noprof+0x471/0x680 [ 239.592984][T14576] ? ip_set_alloc+0x24/0x30 [ 239.593062][T14576] ? ip_set_alloc+0x24/0x30 [ 239.593089][T14576] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 239.593129][T14576] ip_set_alloc+0x24/0x30 [ 239.593151][T14576] hash_netiface_create+0x282/0x740 [ 239.593179][T14576] ? __pfx_hash_netiface_create+0x10/0x10 [ 239.593219][T14576] ip_set_create+0x3cf/0x970 [ 239.593253][T14576] ? __nla_parse+0x40/0x60 [ 239.593323][T14576] nfnetlink_rcv_msg+0x509/0x5d0 [ 239.593363][T14576] netlink_rcv_skb+0x123/0x220 [ 239.593386][T14576] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.593423][T14576] nfnetlink_rcv+0x167/0x1720 [ 239.593517][T14576] ? free_frozen_page_commit+0x79/0x3b0 [ 239.593549][T14576] ? _raw_spin_unlock+0x9/0x30 [ 239.593644][T14576] ? __free_frozen_pages+0x278/0x4e0 [ 239.593668][T14576] ? bpf_check+0x9d8c/0xc890 [ 239.593716][T14576] ? emit_mov_imm64+0x2ca/0x2e0 [ 239.593744][T14576] ? xas_load+0x413/0x430 [ 239.593769][T14576] ? mas_next_slot+0x69b/0x6f0 [ 239.593795][T14576] ? _raw_spin_lock_bh+0x56/0xb0 [ 239.593933][T14576] ? should_fail_ex+0x30/0x280 [ 239.593956][T14576] ? selinux_nlmsg_lookup+0x99/0x890 [ 239.593980][T14576] ? __rcu_read_unlock+0x33/0x70 [ 239.594000][T14576] ? __netlink_lookup+0x276/0x2b0 [ 239.594105][T14576] netlink_unicast+0x5c0/0x690 [ 239.594128][T14576] netlink_sendmsg+0x5c8/0x6f0 [ 239.594155][T14576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.594186][T14576] __sock_sendmsg+0x145/0x170 [ 239.594228][T14576] ____sys_sendmsg+0x31e/0x4a0 [ 239.594263][T14576] ___sys_sendmsg+0x195/0x1e0 [ 239.594419][T14576] __x64_sys_sendmsg+0xd4/0x160 [ 239.594447][T14576] x64_sys_call+0x17ba/0x3000 [ 239.594471][T14576] do_syscall_64+0xc0/0x2a0 [ 239.594499][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.594628][T14576] RIP: 0033:0x7ff59e39acb9 [ 239.594647][T14576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.594677][T14576] RSP: 002b:00007ff59cdf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.594696][T14576] RAX: ffffffffffffffda RBX: 00007ff59e615fa0 RCX: 00007ff59e39acb9 [ 239.594709][T14576] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 239.594722][T14576] RBP: 00007ff59e408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 239.594802][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.594815][T14576] R13: 00007ff59e616038 R14: 00007ff59e615fa0 R15: 00007ffed7e71fd8 [ 239.594834][T14576] [ 239.934125][T14576] memory: usage 307200kB, limit 307200kB, failcnt 307 [ 239.940899][T14576] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 239.948932][T14576] kmem: usage 240776kB, limit 9007199254740988kB, failcnt 0 [ 239.956340][T14576] Memory cgroup stats for /syz0: [ 240.014453][T14576] cache 68481024 [ 240.023085][T14576] rss 569344 [ 240.026371][T14576] shmem 67448832 [ 240.029992][T14576] mapped_file 4096 [ 240.033792][T14576] dirty 4096 [ 240.037059][T14576] writeback 0 [ 240.040346][T14576] workingset_refault_anon 2304 [ 240.045249][T14576] workingset_refault_file 380 [ 240.049976][T14576] swap 0 [ 240.052820][T14576] swapcached 0 [ 240.056241][T14576] pgpgin 479325 [ 240.059694][T14576] pgpgout 462466 [ 240.063239][T14576] pgfault 341794 [ 240.066822][T14576] pgmajfault 314 [ 240.070374][T14576] inactive_anon 68014080 [ 240.074658][T14576] active_anon 4096 [ 240.078375][T14576] inactive_file 0 [ 240.082060][T14576] active_file 1032192 [ 240.086066][T14576] unevictable 0 [ 240.089529][T14576] hierarchical_memory_limit 314572800 [ 240.094938][T14576] hierarchical_memsw_limit 9223372036854771712 [ 240.101092][T14576] total_cache 68481024 [ 240.103656][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.105176][T14576] total_rss 569344 [ 240.116647][T14576] total_shmem 67448832 [ 240.120709][T14576] total_mapped_file 4096 [ 240.125005][T14576] total_dirty 4096 [ 240.128719][T14576] total_writeback 0 [ 240.132517][T14576] total_workingset_refault_anon 2304 [ 240.137839][T14576] total_workingset_refault_file 380 [ 240.143033][T14576] total_swap 0 [ 240.146428][T14576] total_swapcached 0 [ 240.150308][T14576] total_pgpgin 479325 [ 240.154304][T14576] total_pgpgout 462466 [ 240.158432][T14576] total_pgfault 341794 [ 240.162497][T14576] total_pgmajfault 314 [ 240.166618][T14576] total_inactive_anon 68014080 [ 240.171938][T14576] total_active_anon 4096 [ 240.176336][T14576] total_inactive_file 0 [ 240.180491][T14576] total_active_file 1032192 [ 240.185042][T14576] total_unevictable 0 [ 240.189029][T14576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1915,pid=8622,uid=0 [ 240.203971][T14576] Memory cgroup out of memory: Killed process 8622 (syz.0.1915) total-vm:94000kB, anon-rss:1212kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 240.228896][T14599] tipc: Started in network mode [ 240.233865][T14599] tipc: Node identity ac14140f, cluster identity 4711 [ 240.253795][T14599] tipc: New replicast peer: 255.255.255.255 [ 240.259905][T14599] tipc: Enabled bearer , priority 10 [ 240.307381][T14603] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 240.324543][T14603] bond19: entered promiscuous mode [ 240.329827][T14603] bond19: entered allmulticast mode [ 240.335476][T14603] 8021q: adding VLAN 0 to HW filter on device bond19 [ 240.352886][T14603] erspan1: entered allmulticast mode [ 240.361114][T14603] bond19: (slave erspan1): making interface the new active one [ 240.368765][T14603] erspan1: entered promiscuous mode [ 240.375561][T14603] bond19: (slave erspan1): Enslaving as an active interface with an up link [ 240.391781][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'. [ 240.424130][T14603] bond19 (unregistering): (slave erspan1): Releasing active interface [ 240.432397][T14603] erspan1: left promiscuous mode [ 240.443009][T14603] bond19 (unregistering): Released all slaves [ 240.471812][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4000'. [ 240.626034][T14616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4004'. [ 240.661965][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 240.671387][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 241.254548][ T7546] tipc: Node number set to 2886997007 [ 241.418661][T14636] lo speed is unknown, defaulting to 1000 [ 241.457385][T14638] netlink: 'syz.3.4006': attribute type 2 has an invalid length. [ 241.685530][T14647] tipc: Enabling of bearer rejected, failed to enable media [ 241.750187][T14653] netlink: 'syz.2.4017': attribute type 1 has an invalid length. [ 241.810570][T14660] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 241.844560][T14660] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 241.911841][T14653] bond9: (slave bridge13): Enslaving as an active interface with a down link [ 241.924577][T14671] macvlan0: entered promiscuous mode [ 241.929924][T14671] macvlan0: entered allmulticast mode [ 241.936493][T14670] Cannot find map_set index 135 as target [ 241.937056][T14671] bond9: entered promiscuous mode [ 241.948330][T14671] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 241.965536][T14671] bond9: left promiscuous mode [ 241.995851][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4025'. [ 242.019982][T14676] vlan0: entered allmulticast mode [ 242.027362][T14676] dummy0: entered allmulticast mode [ 242.061024][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4023'. [ 242.216123][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 242.216137][ T29] audit: type=1400 audit(1769065523.875:5758): avc: denied { ioctl } for pid=14694 comm="syz.3.4031" path="socket:[60756]" dev="sockfs" ino=60756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.447809][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4034'. [ 242.966878][T14712] tipc: Enabling of bearer rejected, failed to enable media [ 243.287471][ T29] audit: type=1326 audit(1769065524.945:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.484443][T14733] netlink: 'syz.3.4043': attribute type 4 has an invalid length. [ 243.511320][T14728] netlink: 'syz.3.4043': attribute type 4 has an invalid length. [ 243.535767][ T29] audit: type=1326 audit(1769065525.025:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.559382][ T29] audit: type=1326 audit(1769065525.025:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.583250][ T29] audit: type=1326 audit(1769065525.025:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.606836][ T29] audit: type=1326 audit(1769065525.025:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.630423][ T29] audit: type=1326 audit(1769065525.025:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.653987][ T29] audit: type=1326 audit(1769065525.025:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.677467][ T29] audit: type=1326 audit(1769065525.025:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 243.700998][ T29] audit: type=1326 audit(1769065525.025:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.0.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 244.114628][T14740] tipc: Started in network mode [ 244.119627][T14740] tipc: Node identity ac14140f, cluster identity 4711 [ 244.139186][T14740] tipc: New replicast peer: 255.255.255.255 [ 244.145352][T14740] tipc: Enabled bearer , priority 10 [ 245.153666][ T7534] tipc: Node number set to 2886997007 [ 245.814376][T14811] tipc: Started in network mode [ 245.819312][T14811] tipc: Node identity ac14140f, cluster identity 4711 [ 245.912097][T14811] tipc: New replicast peer: 255.255.255.255 [ 245.918433][T14811] tipc: Enabled bearer , priority 10 [ 246.422191][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'. [ 246.784953][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4078'. [ 246.802440][T14836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14836 comm=syz.4.4078 [ 247.312497][ T10] tipc: Node number set to 2886997007 [ 247.504338][T14799] syz.0.4067 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 247.514003][T14799] CPU: 0 UID: 0 PID: 14799 Comm: syz.0.4067 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.514055][T14799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.514120][T14799] Call Trace: [ 247.514130][T14799] [ 247.514139][T14799] __dump_stack+0x1d/0x30 [ 247.514164][T14799] dump_stack_lvl+0x95/0xd0 [ 247.514248][T14799] dump_stack+0x15/0x1b [ 247.514271][T14799] dump_header+0x80/0x240 [ 247.514310][T14799] oom_kill_process+0x295/0x350 [ 247.514332][T14799] out_of_memory+0x97d/0xb80 [ 247.514400][T14799] try_charge_memcg+0x62e/0xa10 [ 247.514486][T14799] charge_memcg+0x51/0xc0 [ 247.514516][T14799] __mem_cgroup_charge+0x28/0xb0 [ 247.514620][T14799] shmem_get_folio_gfp+0x47b/0xd60 [ 247.514655][T14799] shmem_write_begin+0xfc/0x1f0 [ 247.514686][T14799] generic_perform_write+0x183/0x490 [ 247.514741][T14799] shmem_file_write_iter+0xc5/0xf0 [ 247.514822][T14799] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 247.514883][T14799] vfs_write+0x5a6/0x9f0 [ 247.514935][T14799] ksys_write+0xdc/0x1a0 [ 247.515035][T14799] __x64_sys_write+0x40/0x50 [ 247.515056][T14799] x64_sys_call+0x2847/0x3000 [ 247.515082][T14799] do_syscall_64+0xc0/0x2a0 [ 247.515111][T14799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.515195][T14799] RIP: 0033:0x7ff59e39acb9 [ 247.515215][T14799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.515236][T14799] RSP: 002b:00007ff59cdc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.515385][T14799] RAX: ffffffffffffffda RBX: 00007ff59e616090 RCX: 00007ff59e39acb9 [ 247.515402][T14799] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 247.515418][T14799] RBP: 00007ff59e408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 247.515431][T14799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.515443][T14799] R13: 00007ff59e616128 R14: 00007ff59e616090 R15: 00007ffed7e71fd8 [ 247.515463][T14799] [ 247.515491][T14799] memory: usage 307200kB, limit 307200kB, failcnt 2201 [ 247.669610][T14846] RDS: rds_bind could not find a transport for b7d6:6aeb:db8b:b5c5:e6e6:9dda:4ab3:b9d2, load rds_tcp or rds_rdma? [ 247.669828][T14799] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 247.708674][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4082'. [ 247.709901][T14799] kmem: usage 149524kB, limit 9007199254740988kB, failcnt 0 [ 247.712887][T14848] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4082'. [ 247.719928][T14799] Memory cgroup stats for [ 247.731949][T14848] netlink: 'syz.1.4082': attribute type 3 has an invalid length. [ 247.739887][T14799] /syz0 [ 247.748810][T14848] netlink: 'syz.1.4082': attribute type 2 has an invalid length. [ 247.756139][T14799] : [ 247.765064][T14848] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4082'. [ 247.800321][T14799] cache 152408064 [ 247.804096][T14799] rss 9052160 [ 247.807435][T14799] shmem 82919424 [ 247.810990][T14799] mapped_file 0 [ 247.814504][T14799] dirty 0 [ 247.817554][T14799] writeback 0 [ 247.820848][T14799] workingset_refault_anon 2304 [ 247.825696][T14799] workingset_refault_file 10992 [ 247.830595][T14799] swap 0 [ 247.833530][T14799] swapcached 0 [ 247.837098][T14799] pgpgin 529913 [ 247.840586][T14799] pgpgout 490494 [ 247.844249][T14799] pgfault 357858 [ 247.847874][T14799] pgmajfault 323 [ 247.851434][T14799] inactive_anon 466944 [ 247.855689][T14799] active_anon 91504640 [ 247.859787][T14799] inactive_file 69632 [ 247.863866][T14799] active_file 0 [ 247.867367][T14799] unevictable 69419008 [ 247.871416][T14799] hierarchical_memory_limit 314572800 [ 247.876993][T14799] hierarchical_memsw_limit 9223372036854771712 [ 247.883142][T14799] total_cache 152408064 [ 247.887344][T14799] total_rss 9052160 [ 247.891155][T14799] total_shmem 82919424 [ 247.895265][T14799] total_mapped_file 0 [ 247.899241][T14799] total_dirty 0 [ 247.902693][T14799] total_writeback 0 [ 247.906559][T14799] total_workingset_refault_anon 2304 [ 247.911840][T14799] total_workingset_refault_file 10992 [ 247.917249][T14799] total_swap 0 [ 247.920617][T14799] total_swapcached 0 [ 247.924555][T14799] total_pgpgin 529913 [ 247.928587][T14799] total_pgpgout 490494 [ 247.932649][T14799] total_pgfault 357858 [ 247.936732][T14799] total_pgmajfault 323 [ 247.940785][T14851] tipc: Enabling of bearer rejected, already enabled [ 247.940795][T14799] total_inactive_anon 466944 [ 247.940806][T14799] total_active_anon 91504640 [ 247.957635][T14799] total_inactive_file 69632 [ 247.962117][T14799] total_active_file 0 [ 247.966151][T14799] total_unevictable 69419008 [ 247.970730][T14799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4067,pid=14797,uid=0 [ 247.985738][T14799] Memory cgroup out of memory: Killed process 14797 (syz.0.4067) total-vm:100616kB, anon-rss:9528kB, file-rss:26292kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 248.022437][T14823] Cannot find map_set index 135 as target [ 248.216161][T14868] lo speed is unknown, defaulting to 1000 [ 248.245553][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4089'. [ 248.270119][T14871] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 248.328861][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'. [ 248.487149][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 248.487163][ T29] audit: type=1400 audit(1769065530.145:5810): avc: denied { mount } for pid=14883 comm="syz.0.4094" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 248.535387][ T29] audit: type=1400 audit(1769065530.175:5811): avc: denied { search } for pid=14883 comm="syz.0.4094" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 248.557335][ T29] audit: type=1400 audit(1769065530.185:5812): avc: denied { search } for pid=14883 comm="syz.0.4094" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 248.579345][ T29] audit: type=1400 audit(1769065530.185:5813): avc: denied { read open } for pid=14883 comm="syz.0.4094" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 248.602311][T14879] netlink: 'syz.4.4091': attribute type 2 has an invalid length. [ 248.653665][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.801691][ T29] audit: type=1326 audit(1769065530.455:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 248.842145][ T29] audit: type=1326 audit(1769065530.485:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 248.865721][ T29] audit: type=1326 audit(1769065530.485:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 248.889361][ T29] audit: type=1326 audit(1769065530.485:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 248.912860][ T29] audit: type=1326 audit(1769065530.485:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 248.936548][ T29] audit: type=1326 audit(1769065530.485:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.1.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 249.065613][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 249.136435][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4108'. [ 249.166349][T14922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14922 comm=syz.1.4108 [ 249.706859][T14930] syz.3.4110 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 249.721125][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.3.4110 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.721226][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.721241][T14930] Call Trace: [ 249.721251][T14930] [ 249.721261][T14930] __dump_stack+0x1d/0x30 [ 249.721304][T14930] dump_stack_lvl+0x95/0xd0 [ 249.721318][T14930] dump_stack+0x15/0x1b [ 249.721329][T14930] dump_header+0x80/0x240 [ 249.721343][T14930] oom_kill_process+0x295/0x350 [ 249.721360][T14930] out_of_memory+0x97d/0xb80 [ 249.721380][T14930] try_charge_memcg+0x62e/0xa10 [ 249.721439][T14930] obj_cgroup_charge_pages+0xa6/0x150 [ 249.721474][T14930] __memcg_kmem_charge_page+0x9e/0x170 [ 249.721491][T14930] __alloc_frozen_pages_noprof+0x18a/0x350 [ 249.721510][T14930] alloc_pages_mpol+0xb3/0x260 [ 249.721588][T14930] alloc_pages_noprof+0x8f/0x130 [ 249.721605][T14930] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 249.721630][T14930] __kvmalloc_node_noprof+0x471/0x680 [ 249.721689][T14930] ? ip_set_alloc+0x24/0x30 [ 249.721705][T14930] ? ip_set_alloc+0x24/0x30 [ 249.721718][T14930] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 249.721757][T14930] ip_set_alloc+0x24/0x30 [ 249.721772][T14930] hash_netiface_create+0x282/0x740 [ 249.721860][T14930] ? __pfx_hash_netiface_create+0x10/0x10 [ 249.721911][T14930] ip_set_create+0x3cf/0x970 [ 249.721940][T14930] ? __nla_parse+0x40/0x60 [ 249.721957][T14930] nfnetlink_rcv_msg+0x509/0x5d0 [ 249.722076][T14930] netlink_rcv_skb+0x123/0x220 [ 249.722100][T14930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 249.722146][T14930] nfnetlink_rcv+0x167/0x1720 [ 249.722166][T14930] ? __list_del_entry_valid_or_report+0x65/0x130 [ 249.722185][T14930] ? __rmqueue_pcplist+0x9b6/0xb80 [ 249.722212][T14930] ? _raw_spin_lock_bh+0x56/0xb0 [ 249.722231][T14930] ? should_fail_ex+0x30/0x280 [ 249.722244][T14930] ? selinux_nlmsg_lookup+0x99/0x890 [ 249.722259][T14930] ? __rcu_read_unlock+0x33/0x70 [ 249.722348][T14930] ? __netlink_lookup+0x276/0x2b0 [ 249.722370][T14930] netlink_unicast+0x5c0/0x690 [ 249.722394][T14930] netlink_sendmsg+0x5c8/0x6f0 [ 249.722411][T14930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.722465][T14930] __sock_sendmsg+0x145/0x170 [ 249.722484][T14930] ____sys_sendmsg+0x31e/0x4a0 [ 249.722500][T14930] ___sys_sendmsg+0x195/0x1e0 [ 249.722574][T14930] __x64_sys_sendmsg+0xd4/0x160 [ 249.722590][T14930] x64_sys_call+0x17ba/0x3000 [ 249.722605][T14930] do_syscall_64+0xc0/0x2a0 [ 249.722674][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.722736][T14930] RIP: 0033:0x7fdf0be8acb9 [ 249.722748][T14930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.722837][T14930] RSP: 002b:00007fdf0a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.722851][T14930] RAX: ffffffffffffffda RBX: 00007fdf0c105fa0 RCX: 00007fdf0be8acb9 [ 249.722859][T14930] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 249.722868][T14930] RBP: 00007fdf0bef8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 249.722922][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.722937][T14930] R13: 00007fdf0c106038 R14: 00007fdf0c105fa0 R15: 00007ffd85efb2e8 [ 249.722957][T14930] [ 249.722965][T14930] memory: usage 307200kB, limit 307200kB, failcnt 957 [ 250.045366][T14930] memory+swap: usage 356608kB, limit 9007199254740988kB, failcnt 0 [ 250.053266][T14930] kmem: usage 272036kB, limit 9007199254740988kB, failcnt 0 [ 250.060647][T14930] Memory cgroup stats for /syz3: [ 250.061699][T14930] cache 35737600 [ 250.070274][T14930] rss 200704 [ 250.073478][T14930] shmem 35737600 [ 250.077140][T14930] mapped_file 0 [ 250.080626][T14930] dirty 0 [ 250.083620][T14930] writeback 0 [ 250.086904][T14930] workingset_refault_anon 383 [ 250.091583][T14930] workingset_refault_file 2802 [ 250.096433][T14930] swap 50593792 [ 250.099889][T14930] swapcached 65536 [ 250.103669][T14930] pgpgin 366270 [ 250.107119][T14930] pgpgout 357479 [ 250.110662][T14930] pgfault 358355 [ 250.114232][T14930] pgmajfault 89 [ 250.117689][T14930] inactive_anon 8855552 [ 250.121907][T14930] active_anon 27148288 [ 250.126002][T14930] inactive_file 0 [ 250.129688][T14930] active_file 4096 [ 250.133403][T14930] unevictable 0 [ 250.136899][T14930] hierarchical_memory_limit 314572800 [ 250.142355][T14930] hierarchical_memsw_limit 9223372036854771712 [ 250.148580][T14930] total_cache 35737600 [ 250.152646][T14930] total_rss 200704 [ 250.156406][T14930] total_shmem 35737600 [ 250.160471][T14930] total_mapped_file 0 [ 250.164484][T14930] total_dirty 0 [ 250.167948][T14930] total_writeback 0 [ 250.171746][T14930] total_workingset_refault_anon 383 [ 250.177132][T14930] total_workingset_refault_file 2802 [ 250.182465][T14930] total_swap 50593792 [ 250.186554][T14930] total_swapcached 65536 [ 250.190888][T14930] total_pgpgin 366270 [ 250.194911][T14930] total_pgpgout 357479 [ 250.198973][T14930] total_pgfault 358355 [ 250.203035][T14930] total_pgmajfault 89 [ 250.207055][T14930] total_inactive_anon 8855552 [ 250.211730][T14930] total_active_anon 27148288 [ 250.216406][T14930] total_inactive_file 0 [ 250.220625][T14930] total_active_file 4096 [ 250.224904][T14930] total_unevictable 0 [ 250.228881][T14930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4110,pid=14929,uid=0 [ 250.243928][T14930] Memory cgroup out of memory: Killed process 14929 (syz.3.4110) total-vm:96180kB, anon-rss:1204kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 250.575794][T14954] syz.1.4120 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 250.589695][T14954] CPU: 0 UID: 0 PID: 14954 Comm: syz.1.4120 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.589727][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.589775][T14954] Call Trace: [ 250.589784][T14954] [ 250.589794][T14954] __dump_stack+0x1d/0x30 [ 250.589824][T14954] dump_stack_lvl+0x95/0xd0 [ 250.589888][T14954] dump_stack+0x15/0x1b [ 250.589907][T14954] dump_header+0x80/0x240 [ 250.589927][T14954] oom_kill_process+0x295/0x350 [ 250.589948][T14954] out_of_memory+0x97d/0xb80 [ 250.590035][T14954] try_charge_memcg+0x62e/0xa10 [ 250.590099][T14954] obj_cgroup_charge_pages+0xa6/0x150 [ 250.590130][T14954] __memcg_kmem_charge_page+0x9e/0x170 [ 250.590166][T14954] __alloc_frozen_pages_noprof+0x18a/0x350 [ 250.590273][T14954] alloc_pages_mpol+0xb3/0x260 [ 250.590370][T14954] ? __get_vm_area_node+0x195/0x1d0 [ 250.590396][T14954] alloc_pages_noprof+0x8f/0x130 [ 250.590425][T14954] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 250.590466][T14954] __kvmalloc_node_noprof+0x471/0x680 [ 250.590561][T14954] ? ip_set_alloc+0x24/0x30 [ 250.590590][T14954] ? ip_set_alloc+0x24/0x30 [ 250.590617][T14954] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 250.590703][T14954] ip_set_alloc+0x24/0x30 [ 250.590729][T14954] hash_netiface_create+0x282/0x740 [ 250.590796][T14954] ? __pfx_hash_netiface_create+0x10/0x10 [ 250.590898][T14954] ip_set_create+0x3cf/0x970 [ 250.590939][T14954] ? __nla_parse+0x40/0x60 [ 250.590966][T14954] nfnetlink_rcv_msg+0x509/0x5d0 [ 250.591070][T14954] netlink_rcv_skb+0x123/0x220 [ 250.591154][T14954] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.591207][T14954] nfnetlink_rcv+0x167/0x1720 [ 250.591301][T14954] ? __list_add_valid_or_report+0x38/0xe0 [ 250.591332][T14954] ? merge_sched_in+0x605/0xa30 [ 250.591354][T14954] ? rb_next+0x5c/0x80 [ 250.591416][T14954] ? visit_groups_merge+0xf7e/0xfd0 [ 250.591442][T14954] ? _raw_spin_lock_bh+0x56/0xb0 [ 250.591553][T14954] ? should_fail_ex+0x30/0x280 [ 250.591613][T14954] ? selinux_nlmsg_lookup+0x99/0x890 [ 250.591719][T14954] ? __rcu_read_unlock+0x33/0x70 [ 250.591741][T14954] ? __netlink_lookup+0x276/0x2b0 [ 250.591775][T14954] netlink_unicast+0x5c0/0x690 [ 250.591807][T14954] netlink_sendmsg+0x5c8/0x6f0 [ 250.591834][T14954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.591862][T14954] __sock_sendmsg+0x145/0x170 [ 250.591892][T14954] ____sys_sendmsg+0x31e/0x4a0 [ 250.591945][T14954] ___sys_sendmsg+0x195/0x1e0 [ 250.591984][T14954] __x64_sys_sendmsg+0xd4/0x160 [ 250.592014][T14954] x64_sys_call+0x17ba/0x3000 [ 250.592071][T14954] do_syscall_64+0xc0/0x2a0 [ 250.592158][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.592226][T14954] RIP: 0033:0x7f0e247eacb9 [ 250.592310][T14954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.592332][T14954] RSP: 002b:00007f0e23247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.592355][T14954] RAX: ffffffffffffffda RBX: 00007f0e24a65fa0 RCX: 00007f0e247eacb9 [ 250.592372][T14954] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 250.592388][T14954] RBP: 00007f0e24858bf7 R08: 0000000000000000 R09: 0000000000000000 [ 250.592425][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.592441][T14954] R13: 00007f0e24a66038 R14: 00007f0e24a65fa0 R15: 00007ffe20359888 [ 250.592462][T14954] [ 250.592468][T14954] memory: usage 307200kB, limit 307200kB, failcnt 3570 [ 250.713439][T14957] loop3: detected capacity change from 0 to 8192 [ 250.717422][T14954] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 250.717440][T14954] kmem: usage 306844kB, limit 9007199254740988kB, failcnt 0 [ 250.717454][T14954] Memory cgroup stats for /syz1: [ 250.964381][T14954] cache 69632 [ 250.972648][T14954] rss 294912 [ 250.976014][T14954] shmem 65536 [ 250.979292][T14954] mapped_file 4096 [ 250.983190][T14954] dirty 0 [ 250.986131][T14954] writeback 0 [ 250.989411][T14954] workingset_refault_anon 4989 [ 250.994250][T14954] workingset_refault_file 2869 [ 250.999014][T14954] swap 0 [ 251.001862][T14954] swapcached 0 [ 251.005251][T14954] pgpgin 491871 [ 251.008705][T14954] pgpgout 491782 [ 251.012243][T14954] pgfault 405694 [ 251.015891][T14954] pgmajfault 813 [ 251.019433][T14954] inactive_anon 360448 [ 251.023502][T14954] active_anon 0 [ 251.027050][T14954] inactive_file 0 [ 251.030733][T14954] active_file 4096 [ 251.034514][T14954] unevictable 0 [ 251.038044][T14954] hierarchical_memory_limit 314572800 [ 251.043899][T14954] hierarchical_memsw_limit 9223372036854771712 [ 251.050118][T14954] total_cache 69632 [ 251.053976][T14954] total_rss 294912 [ 251.057691][T14954] total_shmem 65536 [ 251.061835][T14954] total_mapped_file 4096 [ 251.067181][T14954] total_dirty 0 [ 251.070652][T14954] total_writeback 0 [ 251.074540][T14954] total_workingset_refault_anon 4989 [ 251.079836][T14954] total_workingset_refault_file 2869 [ 251.085197][T14954] total_swap 0 [ 251.088560][T14954] total_swapcached 0 [ 251.092499][T14954] total_pgpgin 491871 [ 251.096555][T14954] total_pgpgout 491782 [ 251.100628][T14954] total_pgfault 405694 [ 251.104799][T14954] total_pgmajfault 813 [ 251.109553][T14954] total_inactive_anon 360448 [ 251.114264][T14954] total_active_anon 0 [ 251.118244][T14954] total_inactive_file 0 [ 251.122743][T14954] total_active_file 4096 [ 251.127020][T14954] total_unevictable 0 [ 251.131003][T14954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4120,pid=14953,uid=0 [ 251.146533][T14954] Memory cgroup out of memory: Killed process 14953 (syz.1.4120) total-vm:96048kB, anon-rss:1336kB, file-rss:22168kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 252.036599][T14970] syz_tun: entered allmulticast mode [ 252.133255][T14974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4127'. [ 252.180515][T14976] netlink: 'syz.2.4128': attribute type 1 has an invalid length. [ 252.260946][T14983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'. [ 252.314233][T14976] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.357946][T14984] lo speed is unknown, defaulting to 1000 [ 252.397547][T14983] bond10: entered promiscuous mode [ 252.419653][T14989] bond3: (slave dummy0): Releasing active interface [ 252.431237][T14989] dummy0: left allmulticast mode [ 252.439519][T14989] bond10: (slave dummy0): making interface the new active one [ 253.288653][T14989] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 253.461889][T15005] netlink: 'syz.0.4137': attribute type 27 has an invalid length. [ 253.470833][T15005] bond4: left allmulticast mode [ 253.476113][T15005] bond6: left promiscuous mode [ 253.481493][T15005] bond7: left promiscuous mode [ 253.486819][T15005] ipip0: left promiscuous mode [ 253.491712][T15005] bond9: left promiscuous mode [ 253.496652][T15005] veth19: left promiscuous mode [ 253.501645][T15005] bond9: left allmulticast mode [ 253.506590][T15005] veth19: left allmulticast mode [ 253.836701][T15019] bridge0: entered allmulticast mode [ 254.287472][T15026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4147'. [ 254.365105][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 254.388303][T15033] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 254.397207][T11555] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.402482][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 254.414345][T11555] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.434489][T15033] bond12 (unregistering): (slave geneve2): Releasing backup interface [ 254.455608][T15033] bond12 (unregistering): Released all slaves [ 254.473434][T11555] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 254.482335][T11555] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 254.521440][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4153'. [ 254.534597][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'. [ 254.543638][T15040] netlink: 'syz.3.4153': attribute type 1 has an invalid length. [ 254.548544][T15042] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 254.582932][T15042] 8021q: adding VLAN 0 to HW filter on device bond13 [ 254.590867][T15042] bond12: (slave bond13): making interface the new active one [ 254.598734][T15042] bond12: (slave bond13): Enslaving as an active interface with an up link [ 254.616819][T15042] bond12: (slave gretap1): Enslaving as a backup interface with an up link [ 254.628509][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4154'. [ 254.638457][T15042] 8021q: adding VLAN 0 to HW filter on device bond12 [ 254.660047][T15048] netlink: 'syz.3.4157': attribute type 2 has an invalid length. [ 254.662656][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'. [ 254.736423][T15050] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 254.768028][T15050] macvlan0: entered promiscuous mode [ 254.773395][T15050] macvlan0: entered allmulticast mode [ 254.780284][T15050] bond14: entered promiscuous mode [ 254.785550][T15050] bridge8: entered promiscuous mode [ 254.791794][T15050] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 254.801002][T15050] bond14: left promiscuous mode [ 254.805933][T15050] bridge8: left promiscuous mode [ 255.001198][T15059] macvlan1: entered promiscuous mode [ 255.032588][T15059] dummy0: entered promiscuous mode [ 255.038940][T15059] hsr0: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network [ 255.049137][T15059] hsr0: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 255.059898][T15059] hsr0: entered promiscuous mode [ 255.064924][T15059] hsr0: entered allmulticast mode [ 255.070049][T15059] macvlan1: entered allmulticast mode [ 255.083894][T15064] netlink: 'syz.0.4162': attribute type 10 has an invalid length. [ 255.108423][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 255.118839][T15059] dummy0: entered allmulticast mode [ 255.157184][T15064] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 257.744235][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 257.744251][ T29] audit: type=1326 audit(1769065539.405:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.786260][ T29] audit: type=1326 audit(1769065539.405:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.809762][ T29] audit: type=1326 audit(1769065539.405:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.833393][ T29] audit: type=1326 audit(1769065539.405:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.856988][ T29] audit: type=1326 audit(1769065539.405:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.880508][ T29] audit: type=1326 audit(1769065539.405:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.904191][ T29] audit: type=1326 audit(1769065539.405:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.927635][ T29] audit: type=1326 audit(1769065539.405:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.951233][ T29] audit: type=1326 audit(1769065539.405:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.4.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8883b6acb9 code=0x7ffc0000 [ 257.974676][ T29] audit: type=1326 audit(1769065539.405:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.0.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 257.998465][T15123] netlink: 'syz.1.4177': attribute type 10 has an invalid length. [ 258.008346][T15123] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 262.093714][T15175] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.111178][T15175] bond11: (slave lo): Enslaving as a backup interface with an up link [ 262.145602][T15175] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 262.234441][ T7546] lo speed is unknown, defaulting to 1000 [ 262.240234][ T7546] syz2: Port: 1 Link ACTIVE [ 262.244950][ T7534] lo speed is unknown, defaulting to 1000 [ 262.286736][T15178] __nla_validate_parse: 1 callbacks suppressed [ 262.286762][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4196'. [ 262.399955][T15191] netlink: 'syz.1.4201': attribute type 7 has an invalid length. [ 262.407859][T15191] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4201'. [ 262.539977][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4201'. [ 262.592915][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 262.632517][T15200] netlink: 'syz.3.4202': attribute type 13 has an invalid length. [ 262.669437][T15200] gretap0: refused to change device tx_queue_len [ 262.691101][T15200] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 262.727066][T15200] netlink: 'syz.3.4202': attribute type 4 has an invalid length. [ 262.795704][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4205'. [ 262.804830][T15209] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4205'. [ 262.813847][T15209] netlink: 'syz.3.4205': attribute type 3 has an invalid length. [ 262.821617][T15209] netlink: 'syz.3.4205': attribute type 2 has an invalid length. [ 262.829488][T15209] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4205'. [ 262.998463][T15216] netlink: 'syz.4.4209': attribute type 1 has an invalid length. [ 263.024737][T15216] 8021q: adding VLAN 0 to HW filter on device bond19 [ 263.033063][T15216] bond18: (slave bond19): making interface the new active one [ 263.041098][T15216] bond18: (slave bond19): Enslaving as an active interface with an up link [ 263.058966][T15216] bond18: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 263.071513][T15216] bond18: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 263.153015][T15226] netlink: 'syz.3.4221': attribute type 1 has an invalid length. [ 263.171099][T15226] 8021q: adding VLAN 0 to HW filter on device bond19 [ 263.278198][T15226] 8021q: adding VLAN 0 to HW filter on device bond19 [ 263.313271][T15226] bond19: (slave vxcan4): The slave device specified does not support setting the MAC address [ 263.326262][T15235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4214'. [ 263.357436][T15226] bond19: (slave vxcan4): Error -95 calling set_mac_address [ 263.396606][T15236] veth15: entered promiscuous mode [ 263.426135][T15236] bond19: (slave veth15): Enslaving as an active interface with a down link [ 263.438494][T15238] macvlan3: entered promiscuous mode [ 263.444025][T15238] macvlan3: entered allmulticast mode [ 263.454201][T15238] bond19: entered promiscuous mode [ 263.521567][T15238] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.551454][T15238] bond19: left promiscuous mode [ 263.619640][T15229] syz.0.4211 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 263.633599][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.0.4211 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.633630][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.633642][T15229] Call Trace: [ 263.633651][T15229] [ 263.633661][T15229] __dump_stack+0x1d/0x30 [ 263.633694][T15229] dump_stack_lvl+0x95/0xd0 [ 263.633719][T15229] dump_stack+0x15/0x1b [ 263.633738][T15229] dump_header+0x80/0x240 [ 263.633758][T15229] oom_kill_process+0x295/0x350 [ 263.633783][T15229] out_of_memory+0x97d/0xb80 [ 263.633817][T15229] try_charge_memcg+0x62e/0xa10 [ 263.633864][T15229] obj_cgroup_charge_pages+0xa6/0x150 [ 263.633892][T15229] __memcg_kmem_charge_page+0x9e/0x170 [ 263.633937][T15229] __alloc_frozen_pages_noprof+0x18a/0x350 [ 263.633972][T15229] alloc_pages_mpol+0xb3/0x260 [ 263.634073][T15229] alloc_pages_noprof+0x8f/0x130 [ 263.634178][T15229] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 263.634213][T15229] __kvmalloc_node_noprof+0x471/0x680 [ 263.634236][T15229] ? ip_set_alloc+0x24/0x30 [ 263.634311][T15229] ? ip_set_alloc+0x24/0x30 [ 263.634333][T15229] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 263.634427][T15229] ip_set_alloc+0x24/0x30 [ 263.634454][T15229] hash_netiface_create+0x282/0x740 [ 263.634546][T15229] ? __pfx_hash_netiface_create+0x10/0x10 [ 263.634571][T15229] ip_set_create+0x3cf/0x970 [ 263.634607][T15229] ? __nla_parse+0x40/0x60 [ 263.634677][T15229] nfnetlink_rcv_msg+0x509/0x5d0 [ 263.634722][T15229] netlink_rcv_skb+0x123/0x220 [ 263.634750][T15229] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 263.634791][T15229] nfnetlink_rcv+0x167/0x1720 [ 263.634907][T15229] ? __list_del_entry_valid_or_report+0x65/0x130 [ 263.634996][T15229] ? __rmqueue_pcplist+0x9b6/0xb80 [ 263.635021][T15229] ? _raw_spin_lock_bh+0x56/0xb0 [ 263.635055][T15229] ? should_fail_ex+0x30/0x280 [ 263.635074][T15229] ? selinux_nlmsg_lookup+0x99/0x890 [ 263.635161][T15229] ? __rcu_read_unlock+0x33/0x70 [ 263.635183][T15229] ? __netlink_lookup+0x276/0x2b0 [ 263.635304][T15229] netlink_unicast+0x5c0/0x690 [ 263.635341][T15229] netlink_sendmsg+0x5c8/0x6f0 [ 263.635370][T15229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.635403][T15229] __sock_sendmsg+0x145/0x170 [ 263.635489][T15229] ____sys_sendmsg+0x31e/0x4a0 [ 263.635515][T15229] ___sys_sendmsg+0x195/0x1e0 [ 263.635549][T15229] __x64_sys_sendmsg+0xd4/0x160 [ 263.635575][T15229] x64_sys_call+0x17ba/0x3000 [ 263.635609][T15229] do_syscall_64+0xc0/0x2a0 [ 263.635635][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.635737][T15229] RIP: 0033:0x7ff59e39acb9 [ 263.635756][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.635778][T15229] RSP: 002b:00007ff59cdf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.635836][T15229] RAX: ffffffffffffffda RBX: 00007ff59e615fa0 RCX: 00007ff59e39acb9 [ 263.635852][T15229] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 263.635864][T15229] RBP: 00007ff59e408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 263.635876][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.635934][T15229] R13: 00007ff59e616038 R14: 00007ff59e615fa0 R15: 00007ffed7e71fd8 [ 263.635954][T15229] [ 263.635961][T15229] memory: usage 307200kB, limit 307200kB, failcnt 2367 [ 263.958491][T15229] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 263.966407][T15229] kmem: usage 156504kB, limit 9007199254740988kB, failcnt 0 [ 263.973732][T15229] Memory cgroup stats for /syz0: [ 263.974141][T15229] cache 153649152 [ 263.982784][T15229] rss 663552 [ 263.986036][T15229] shmem 84226048 [ 263.989602][T15229] mapped_file 4096 [ 263.993327][T15229] dirty 0 [ 263.996352][T15229] writeback 0 [ 263.999636][T15229] workingset_refault_anon 2304 [ 264.004621][T15229] workingset_refault_file 11123 [ 264.009744][T15229] swap 0 [ 264.012807][T15229] swapcached 0 [ 264.016439][T15229] pgpgin 540043 [ 264.018994][T15258] netlink: 'syz.1.4219': attribute type 27 has an invalid length. [ 264.019901][T15229] pgpgout 502369 [ 264.019912][T15229] pgfault 365676 [ 264.019919][T15229] pgmajfault 325 [ 264.019930][T15229] inactive_anon 4096 [ 264.019938][T15229] active_anon 84885504 [ 264.019944][T15229] inactive_file 0 [ 264.019952][T15229] active_file 4096 [ 264.019959][T15229] unevictable 69419008 [ 264.058075][T15229] hierarchical_memory_limit 314572800 [ 264.063476][T15229] hierarchical_memsw_limit 9223372036854771712 [ 264.069735][T15229] total_cache 153649152 [ 264.073954][T15229] total_rss 663552 [ 264.077685][T15229] total_shmem 84226048 [ 264.081744][T15229] total_mapped_file 4096 [ 264.086004][T15229] total_dirty 0 [ 264.089465][T15229] total_writeback 0 [ 264.093279][T15229] total_workingset_refault_anon 2304 [ 264.098631][T15229] total_workingset_refault_file 11123 [ 264.104042][T15229] total_swap 0 [ 264.107433][T15229] total_swapcached 0 [ 264.111342][T15229] total_pgpgin 540043 [ 264.115444][T15229] total_pgpgout 502369 [ 264.119530][T15229] total_pgfault 365676 [ 264.123649][T15229] total_pgmajfault 325 [ 264.127726][T15229] total_inactive_anon 4096 [ 264.132230][T15229] total_active_anon 84885504 [ 264.136852][T15229] total_inactive_file 0 [ 264.139877][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 264.139893][ T29] audit: type=1400 audit(1769065545.795:6203): avc: denied { mount } for pid=15260 comm="syz.4.4230" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 264.141064][T15229] total_active_file 4096 [ 264.141080][T15229] total_unevictable 69419008 [ 264.178354][T15229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4211,pid=15228,uid=0 [ 264.193510][T15229] Memory cgroup out of memory: Killed process 15228 (syz.0.4211) total-vm:96180kB, anon-rss:1208kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 264.404172][T15258] bond8: left promiscuous mode [ 264.409275][T15258] veth3: left promiscuous mode [ 264.414480][T15258] bond8: left allmulticast mode [ 264.419488][T15258] veth3: left allmulticast mode [ 264.454035][T15258] bond10: left allmulticast mode [ 264.459169][T15258] veth11: left promiscuous mode [ 264.464377][T15258] bond12: left allmulticast mode [ 264.469498][T15258] geneve2: left promiscuous mode [ 264.476052][T15258] ip6gretap0: left allmulticast mode [ 264.481402][T15258] ip6gretap0: left promiscuous mode [ 264.491347][T15258] macsec2: left promiscuous mode [ 264.496504][T15258] macsec2: left allmulticast mode [ 264.508211][T15258] veth19: left promiscuous mode [ 264.524945][T15274] netlink: 'syz.4.4223': attribute type 1 has an invalid length. [ 264.534978][T15258] hsr0: left promiscuous mode [ 264.539718][T15258] hsr0: left allmulticast mode [ 264.544548][T15258] macvlan1: left allmulticast mode [ 264.550746][T15258] dummy0: left allmulticast mode [ 264.582740][T15262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.595743][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4223'. [ 264.605639][T15262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.637968][T15274] 8021q: adding VLAN 0 to HW filter on device bond20 [ 264.653641][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4226'. [ 264.662650][T15285] netlink: 'syz.0.4226': attribute type 3 has an invalid length. [ 264.670735][T15279] bond20: entered promiscuous mode [ 264.697914][T15274] bond17: (slave dummy0): Releasing active interface [ 264.715067][T15274] bond20: (slave dummy0): making interface the new active one [ 264.722713][T15274] dummy0: entered promiscuous mode [ 264.728383][T15274] bond20: (slave dummy0): Enslaving as an active interface with an up link [ 265.293637][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.430416][T15317] lo speed is unknown, defaulting to 1000 [ 265.721085][ T29] audit: type=1326 audit(1769065547.315:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 265.744716][ T29] audit: type=1326 audit(1769065547.315:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 265.768345][ T29] audit: type=1326 audit(1769065547.315:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e247e9b97 code=0x7ffc0000 [ 265.792065][ T29] audit: type=1326 audit(1769065547.315:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 265.815797][ T29] audit: type=1326 audit(1769065547.315:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 265.839421][ T29] audit: type=1326 audit(1769065547.315:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 265.863031][ T29] audit: type=1326 audit(1769065547.315:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.1.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 266.001426][T15334] 8021q: adding VLAN 0 to HW filter on device bond15 [ 266.044917][T15343] bond15: (slave dummy0): making interface the new active one [ 266.118556][T15343] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 266.153851][T15338] bond15: entered promiscuous mode [ 266.167697][T15338] dummy0: entered promiscuous mode [ 266.244455][T15350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15350 comm=syz.2.4249 [ 266.420611][ T29] audit: type=1326 audit(1769065548.075:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15354 comm="syz.2.4250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x0 [ 266.517115][T15365] lo speed is unknown, defaulting to 1000 [ 266.588444][T15367] lo speed is unknown, defaulting to 1000 [ 267.162669][T15384] lo speed is unknown, defaulting to 1000 [ 267.269340][T15393] 8021q: adding VLAN 0 to HW filter on device bond16 [ 267.295730][T15393] __nla_validate_parse: 8 callbacks suppressed [ 267.295748][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4261'. [ 267.321360][T15393] bond16: entered promiscuous mode [ 267.550878][ T29] audit: type=1326 audit(1769065549.205:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 268.065069][T15424] lo speed is unknown, defaulting to 1000 [ 268.445354][T15434] xt_hashlimit: size too large, truncated to 1048576 [ 268.572687][T15440] validate_nla: 4 callbacks suppressed [ 268.572703][T15440] netlink: 'syz.2.4274': attribute type 39 has an invalid length. [ 268.640851][T15440] syz_tun (unregistering): left allmulticast mode [ 268.650142][T15423] syz.1.4269 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 268.659845][T15423] CPU: 0 UID: 0 PID: 15423 Comm: syz.1.4269 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.659871][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.659884][T15423] Call Trace: [ 268.659891][T15423] [ 268.659899][T15423] __dump_stack+0x1d/0x30 [ 268.659923][T15423] dump_stack_lvl+0x95/0xd0 [ 268.659946][T15423] dump_stack+0x15/0x1b [ 268.660008][T15423] dump_header+0x80/0x240 [ 268.660030][T15423] oom_kill_process+0x295/0x350 [ 268.660131][T15423] out_of_memory+0x97d/0xb80 [ 268.660152][T15423] try_charge_memcg+0x62e/0xa10 [ 268.660197][T15423] charge_memcg+0x51/0xc0 [ 268.660258][T15423] __mem_cgroup_charge+0x28/0xb0 [ 268.660288][T15423] shmem_get_folio_gfp+0x47b/0xd60 [ 268.660377][T15423] shmem_write_begin+0xfc/0x1f0 [ 268.660479][T15423] generic_perform_write+0x183/0x490 [ 268.660550][T15423] shmem_file_write_iter+0xc5/0xf0 [ 268.660580][T15423] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 268.660609][T15423] vfs_write+0x5a6/0x9f0 [ 268.660664][T15423] ksys_write+0xdc/0x1a0 [ 268.660685][T15423] __x64_sys_write+0x40/0x50 [ 268.660737][T15423] x64_sys_call+0x2847/0x3000 [ 268.660825][T15423] do_syscall_64+0xc0/0x2a0 [ 268.660882][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.660904][T15423] RIP: 0033:0x7f0e247eacb9 [ 268.660998][T15423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.661015][T15423] RSP: 002b:00007f0e23215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.661033][T15423] RAX: ffffffffffffffda RBX: 00007f0e24a66090 RCX: 00007f0e247eacb9 [ 268.661106][T15423] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 268.661119][T15423] RBP: 00007f0e24858bf7 R08: 0000000000000000 R09: 0000000000000000 [ 268.661131][T15423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.661146][T15423] R13: 00007f0e24a66128 R14: 00007f0e24a66090 R15: 00007ffe20359888 [ 268.661166][T15423] [ 268.661174][T15423] memory: usage 307200kB, limit 307200kB, failcnt 4322 [ 268.865399][T15423] memory+swap: usage 215936kB, limit 9007199254740988kB, failcnt 0 [ 268.873300][T15423] kmem: usage 194172kB, limit 9007199254740988kB, failcnt 0 [ 268.880619][T15423] Memory cgroup stats for /syz1: [ 268.885685][T15423] cache 10911744 [ 268.894346][T15423] rss 8712192 [ 268.897640][T15423] shmem 10842112 [ 268.901188][T15423] mapped_file 0 [ 268.904742][T15423] dirty 0 [ 268.907700][T15423] writeback 0 [ 268.910981][T15423] workingset_refault_anon 5011 [ 268.915951][T15423] workingset_refault_file 5300 [ 268.920753][T15423] swap 0 [ 268.923636][T15423] swapcached 0 [ 268.927023][T15423] pgpgin 533525 [ 268.930480][T15423] pgpgout 528734 [ 268.934047][T15423] pgfault 418363 [ 268.937588][T15423] pgmajfault 822 [ 268.941152][T15423] inactive_anon 19202048 [ 268.945431][T15423] active_anon 352256 [ 268.949323][T15423] inactive_file 69632 [ 268.953311][T15423] active_file 0 [ 268.956825][T15423] unevictable 0 [ 268.960415][T15423] hierarchical_memory_limit 314572800 [ 268.965918][T15423] hierarchical_memsw_limit 9223372036854771712 [ 268.972121][T15423] total_cache 10911744 [ 268.976404][T15423] total_rss 8712192 [ 268.980298][T15423] total_shmem 10842112 [ 268.984455][T15423] total_mapped_file 0 [ 268.988447][T15423] total_dirty 0 [ 268.991915][T15423] total_writeback 0 [ 268.995839][T15423] total_workingset_refault_anon 5011 [ 269.001121][T15423] total_workingset_refault_file 5300 [ 269.006512][T15423] total_swap 0 [ 269.009877][T15423] total_swapcached 0 [ 269.013812][T15423] total_pgpgin 533525 [ 269.017792][T15423] total_pgpgout 528734 [ 269.021862][T15423] total_pgfault 418363 [ 269.026062][T15423] total_pgmajfault 822 [ 269.030128][T15423] total_inactive_anon 19202048 [ 269.034955][T15423] total_active_anon 352256 [ 269.039377][T15423] total_inactive_file 69632 [ 269.043919][T15423] total_active_file 0 [ 269.047981][T15423] total_unevictable 0 [ 269.051963][T15423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4269,pid=15419,uid=0 [ 269.067061][T15423] Memory cgroup out of memory: Killed process 15419 (syz.1.4269) total-vm:100616kB, anon-rss:9480kB, file-rss:26284kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 269.252666][T15450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4279'. [ 269.344047][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 269.344062][ T29] audit: type=1326 audit(1769065551.005:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.393748][ T29] audit: type=1326 audit(1769065551.035:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.417244][ T29] audit: type=1326 audit(1769065551.035:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.440793][ T29] audit: type=1326 audit(1769065551.035:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.464331][ T29] audit: type=1326 audit(1769065551.035:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.487887][ T29] audit: type=1326 audit(1769065551.035:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.511719][ T29] audit: type=1326 audit(1769065551.035:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.535335][ T29] audit: type=1326 audit(1769065551.045:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.558736][ T29] audit: type=1326 audit(1769065551.045:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.582249][ T29] audit: type=1326 audit(1769065551.045:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15456 comm="syz.2.4283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1553bacb9 code=0x7ffc0000 [ 269.943198][T15481] lo speed is unknown, defaulting to 1000 [ 270.079074][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 270.285889][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4292'. [ 270.424062][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4298'. [ 270.487683][ T9] IPVS: starting estimator thread 0... [ 270.603647][T15515] IPVS: using max 2496 ests per chain, 124800 per kthread [ 271.411532][T15547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4312'. [ 271.584282][T15558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15558 comm=syz.4.4314 [ 271.665608][T15564] netlink: 'syz.3.4317': attribute type 1 has an invalid length. [ 271.724234][T15564] 8021q: adding VLAN 0 to HW filter on device bond20 [ 271.770255][T15568] 8021q: adding VLAN 0 to HW filter on device bond20 [ 271.778237][T15568] bond20: (slave vxcan4): The slave device specified does not support setting the MAC address [ 271.805990][T15568] bond20: (slave vxcan4): Error -95 calling set_mac_address [ 271.882002][T15564] gretap1: entered promiscuous mode [ 271.915076][T15564] bond20: (slave gretap1): making interface the new active one [ 271.926426][T15564] bond20: (slave gretap1): Enslaving as an active interface with an up link [ 271.988843][T15547] syz.2.4312 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 272.003207][T15547] CPU: 1 UID: 0 PID: 15547 Comm: syz.2.4312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.003240][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.003255][T15547] Call Trace: [ 272.003263][T15547] [ 272.003309][T15547] __dump_stack+0x1d/0x30 [ 272.003343][T15547] dump_stack_lvl+0x95/0xd0 [ 272.003367][T15547] dump_stack+0x15/0x1b [ 272.003391][T15547] dump_header+0x80/0x240 [ 272.003479][T15547] oom_kill_process+0x295/0x350 [ 272.003505][T15547] out_of_memory+0x97d/0xb80 [ 272.003535][T15547] try_charge_memcg+0x62e/0xa10 [ 272.003575][T15547] obj_cgroup_charge_pages+0xa6/0x150 [ 272.003630][T15547] __memcg_kmem_charge_page+0x9e/0x170 [ 272.003778][T15547] __alloc_frozen_pages_noprof+0x18a/0x350 [ 272.003876][T15547] alloc_pages_mpol+0xb3/0x260 [ 272.003909][T15547] alloc_pages_noprof+0x8f/0x130 [ 272.004050][T15547] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 272.004127][T15547] __kvmalloc_node_noprof+0x471/0x680 [ 272.004150][T15547] ? ip_set_alloc+0x24/0x30 [ 272.004185][T15547] ? ip_set_alloc+0x24/0x30 [ 272.004214][T15547] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 272.004237][T15547] ip_set_alloc+0x24/0x30 [ 272.004289][T15547] hash_netiface_create+0x282/0x740 [ 272.004321][T15547] ? __pfx_hash_netiface_create+0x10/0x10 [ 272.004349][T15547] ip_set_create+0x3cf/0x970 [ 272.004390][T15547] ? __nla_parse+0x40/0x60 [ 272.004413][T15547] nfnetlink_rcv_msg+0x509/0x5d0 [ 272.004434][T15547] ? kfree+0x10a/0x3b0 [ 272.004546][T15547] netlink_rcv_skb+0x123/0x220 [ 272.004572][T15547] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 272.004597][T15547] nfnetlink_rcv+0x167/0x1720 [ 272.004617][T15547] ? __rcu_read_unlock+0x4e/0x70 [ 272.004637][T15547] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 272.004689][T15547] ? __rcu_read_unlock+0x4e/0x70 [ 272.004709][T15547] ? sock_def_readable+0xaf/0x190 [ 272.004737][T15547] ? netlink_sendskb+0x104/0x150 [ 272.004794][T15547] ? netlink_unicast+0x2a2/0x690 [ 272.004818][T15547] ? netlink_ack+0x4c8/0x500 [ 272.004848][T15547] ? _raw_spin_lock_bh+0x56/0xb0 [ 272.004927][T15547] ? should_fail_ex+0x30/0x280 [ 272.004946][T15547] ? selinux_nlmsg_lookup+0x99/0x890 [ 272.005009][T15547] ? __rcu_read_unlock+0x33/0x70 [ 272.005030][T15547] ? __netlink_lookup+0x276/0x2b0 [ 272.005065][T15547] netlink_unicast+0x5c0/0x690 [ 272.005122][T15547] netlink_sendmsg+0x5c8/0x6f0 [ 272.005200][T15547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.005226][T15547] __sock_sendmsg+0x145/0x170 [ 272.005255][T15547] ____sys_sendmsg+0x31e/0x4a0 [ 272.005309][T15547] ___sys_sendmsg+0x195/0x1e0 [ 272.005395][T15547] __x64_sys_sendmsg+0xd4/0x160 [ 272.005421][T15547] x64_sys_call+0x17ba/0x3000 [ 272.005451][T15547] do_syscall_64+0xc0/0x2a0 [ 272.005536][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.005588][T15547] RIP: 0033:0x7fb1553bacb9 [ 272.005604][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.005621][T15547] RSP: 002b:00007fb153e17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.005641][T15547] RAX: ffffffffffffffda RBX: 00007fb155635fa0 RCX: 00007fb1553bacb9 [ 272.005657][T15547] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 272.005673][T15547] RBP: 00007fb155428bf7 R08: 0000000000000000 R09: 0000000000000000 [ 272.005689][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.005769][T15547] R13: 00007fb155636038 R14: 00007fb155635fa0 R15: 00007ffde7078c58 [ 272.005793][T15547] [ 272.348613][T15547] memory: usage 307200kB, limit 307200kB, failcnt 1131 [ 272.355864][T15547] memory+swap: usage 323876kB, limit 9007199254740988kB, failcnt 0 [ 272.363888][T15547] kmem: usage 256868kB, limit 9007199254740988kB, failcnt 0 [ 272.371286][T15547] Memory cgroup stats for /syz2: [ 272.384012][T15547] cache 50569216 [ 272.392584][T15547] rss 950272 [ 272.395832][T15547] shmem 50569216 [ 272.399376][T15547] mapped_file 0 [ 272.402832][T15547] dirty 0 [ 272.405795][T15547] writeback 0 [ 272.409077][T15547] workingset_refault_anon 961 [ 272.413768][T15547] workingset_refault_file 771 [ 272.418463][T15547] swap 17076224 [ 272.421920][T15547] swapcached 12288 [ 272.425672][T15547] pgpgin 458448 [ 272.429192][T15547] pgpgout 445865 [ 272.432737][T15547] pgfault 373866 [ 272.436314][T15547] pgmajfault 137 [ 272.439947][T15547] inactive_anon 626688 [ 272.444124][T15547] active_anon 50905088 [ 272.448212][T15547] inactive_file 0 [ 272.451843][T15547] active_file 8192 [ 272.455608][T15547] unevictable 0 [ 272.459065][T15547] hierarchical_memory_limit 314572800 [ 272.464461][T15547] hierarchical_memsw_limit 9223372036854771712 [ 272.470649][T15547] total_cache 50569216 [ 272.474792][T15547] total_rss 950272 [ 272.478508][T15547] total_shmem 50569216 [ 272.482581][T15547] total_mapped_file 0 [ 272.486657][T15547] total_dirty 0 [ 272.490199][T15547] total_writeback 0 [ 272.494118][T15547] total_workingset_refault_anon 961 [ 272.499319][T15547] total_workingset_refault_file 771 [ 272.504707][T15547] total_swap 17076224 [ 272.508687][T15547] total_swapcached 12288 [ 272.512937][T15547] total_pgpgin 458448 [ 272.516975][T15547] total_pgpgout 445865 [ 272.521040][T15547] total_pgfault 373867 [ 272.525143][T15547] total_pgmajfault 137 [ 272.529331][T15547] total_inactive_anon 626688 [ 272.533945][T15547] total_active_anon 50905088 [ 272.538533][T15547] total_inactive_file 0 [ 272.542693][T15547] total_active_file 8192 [ 272.546960][T15547] total_unevictable 0 [ 272.550939][T15547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1488,pid=7498,uid=0 [ 272.565848][T15547] Memory cgroup out of memory: Killed process 7498 (syz.2.1488) total-vm:96048kB, anon-rss:1364kB, file-rss:20612kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 272.624220][T15546] syz.2.4312 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 272.635043][T15546] CPU: 1 UID: 0 PID: 15546 Comm: syz.2.4312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.635072][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.635086][T15546] Call Trace: [ 272.635095][T15546] [ 272.635105][T15546] __dump_stack+0x1d/0x30 [ 272.635204][T15546] dump_stack_lvl+0x95/0xd0 [ 272.635226][T15546] dump_stack+0x15/0x1b [ 272.635246][T15546] dump_header+0x80/0x240 [ 272.635267][T15546] oom_kill_process+0x295/0x350 [ 272.635320][T15546] out_of_memory+0x97d/0xb80 [ 272.635343][T15546] try_charge_memcg+0x62e/0xa10 [ 272.635382][T15546] charge_memcg+0x51/0xc0 [ 272.635412][T15546] __mem_cgroup_charge+0x28/0xb0 [ 272.635462][T15546] filemap_add_folio+0x110/0x350 [ 272.635484][T15546] __filemap_get_folio_mpol+0x326/0x680 [ 272.635567][T15546] filemap_fault+0x473/0xbb0 [ 272.635587][T15546] ? __rcu_read_lock+0x36/0x50 [ 272.635625][T15546] __do_fault+0xbc/0x200 [ 272.635802][T15546] handle_mm_fault+0xfa1/0x3030 [ 272.635885][T15546] ? vma_start_read+0x1c7/0x2c0 [ 272.635912][T15546] do_user_addr_fault+0x62f/0x1050 [ 272.635941][T15546] ? irqentry_exit+0x3c/0x510 [ 272.635975][T15546] exc_page_fault+0x62/0xa0 [ 272.635994][T15546] asm_exc_page_fault+0x26/0x30 [ 272.636091][T15546] RIP: 0033:0x7fb155283668 [ 272.636110][T15546] Code: be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 0f 21 ee 00 44 88 78 ff 44 8b 3d f4 20 ee 00 e8 5f 53 ff ff 48 8b 05 00 21 ee 00 <44> 89 38 41 bf 04 00 00 00 48 83 c0 08 66 44 89 78 fc 83 05 ef 20 [ 272.636128][T15546] RSP: 002b:00007ffde7078d50 EFLAGS: 00010206 [ 272.636147][T15546] RAX: 0000001b33c24220 RBX: 0000000000000026 RCX: ffffffff81888c56 [ 272.636167][T15546] RDX: 0000001b33c24220 RSI: 0000000000000008 RDI: 00007fb156165720 [ 272.636182][T15546] RBP: 00007fb156165720 R08: 00007fb155620000 R09: 00007fb155636038 [ 272.636196][T15546] R10: 0000000000000001 R11: 000000000000000e R12: 0000000000000000 [ 272.636209][T15546] R13: 0000000000000114 R14: 0000000000000000 R15: 0000000000000115 [ 272.636225][T15546] ? __vmalloc_node_range_noprof+0xf96/0x12b0 [ 272.636298][T15546] [ 272.636305][T15546] memory: usage 307200kB, limit 307200kB, failcnt 1199 [ 272.640609][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'. [ 272.646200][T15546] memory+swap: usage 323868kB, limit 9007199254740988kB, failcnt 0 [ 272.860066][T15546] kmem: usage 256940kB, limit 9007199254740988kB, failcnt 0 [ 272.867479][T15546] Memory cgroup stats for /syz2: [ 272.870647][T15546] cache 50569216 [ 272.879175][T15546] rss 786432 [ 272.882380][T15546] shmem 50569216 [ 272.885966][T15546] mapped_file 0 [ 272.889423][T15546] dirty 0 [ 272.892370][T15546] writeback 0 [ 272.895685][T15546] workingset_refault_anon 961 [ 272.900355][T15546] workingset_refault_file 771 [ 272.905077][T15546] swap 17068032 [ 272.908577][T15546] swapcached 4096 [ 272.912314][T15546] pgpgin 458448 [ 272.915817][T15546] pgpgout 445907 [ 272.919378][T15546] pgfault 373866 [ 272.923008][T15546] pgmajfault 137 [ 272.926669][T15546] inactive_anon 618496 [ 272.930747][T15546] active_anon 50741248 [ 272.934850][T15546] inactive_file 0 [ 272.938482][T15546] active_file 8192 [ 272.942252][T15546] unevictable 0 [ 272.945734][T15546] hierarchical_memory_limit 314572800 [ 272.951166][T15546] hierarchical_memsw_limit 9223372036854771712 [ 272.957353][T15546] total_cache 50569216 [ 272.961430][T15546] total_rss 786432 [ 272.965240][T15546] total_shmem 50569216 [ 272.969306][T15546] total_mapped_file 0 [ 272.973286][T15546] total_dirty 0 [ 272.976808][T15546] total_writeback 0 [ 272.980696][T15546] total_workingset_refault_anon 961 [ 272.985973][T15546] total_workingset_refault_file 771 [ 272.991217][T15546] total_swap 17068032 [ 272.995348][T15546] total_swapcached 4096 [ 272.999509][T15546] total_pgpgin 458448 [ 273.003488][T15546] total_pgpgout 445907 [ 273.007625][T15546] total_pgfault 373867 [ 273.011702][T15546] total_pgmajfault 137 [ 273.015805][T15546] total_inactive_anon 618496 [ 273.020542][T15546] total_active_anon 50741248 [ 273.025192][T15546] total_inactive_file 0 [ 273.029365][T15546] total_active_file 8192 [ 273.033635][T15546] total_unevictable 0 [ 273.037618][T15546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4312,pid=15546,uid=0 [ 273.052704][T15546] Memory cgroup out of memory: Killed process 15546 (syz.2.4312) total-vm:94000kB, anon-rss:1336kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 273.435821][T15606] netlink: 'syz.2.4330': attribute type 1 has an invalid length. [ 273.502442][T15606] 8021q: adding VLAN 0 to HW filter on device bond12 [ 273.525907][T15608] lo speed is unknown, defaulting to 1000 [ 273.563875][T15606] bond12: (slave veth33): Enslaving as an active interface with a down link [ 273.617949][T15617] netlink: 'syz.4.4332': attribute type 15 has an invalid length. [ 273.625832][T15617] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4332'. [ 273.668635][T15606] vlan0: entered allmulticast mode [ 273.674036][T15606] bond_slave_1: entered allmulticast mode [ 273.684374][T15606] bond12: (slave vlan0): Opening slave failed [ 273.774718][T15620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4333'. [ 273.941367][T15626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15626 comm=syz.0.4335 [ 274.953878][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 274.953893][ T29] audit: type=1400 audit(1769065556.615:6509): avc: denied { create } for pid=15663 comm="syz.4.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 274.990423][T15664] netlink: 'syz.4.4348': attribute type 39 has an invalid length. [ 275.047088][T15668] bond5: (slave bond0): Releasing backup interface [ 275.075179][T15668] bond20: (slave dummy0): Releasing active interface [ 275.081887][T15668] dummy0: left promiscuous mode [ 275.096286][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.424583][T15668] bond4: (slave veth13): Releasing active interface [ 275.440651][T15668] bond6: (slave geneve2): Releasing active interface [ 275.502981][T15668] bond7: (slave veth15): Releasing backup interface [ 275.568795][T15668] bond9: (slave bridge7): Releasing backup interface [ 275.611196][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.642645][T15668] bond11: (slave veth23): Releasing active interface [ 275.666862][T15668] bond11: (slave veth25): Releasing active interface [ 275.718067][T15677] netlink: 'syz.3.4351': attribute type 10 has an invalid length. [ 275.729234][T15668] bond13: (slave wireguard0): Releasing backup interface [ 275.743620][T15668] bond13: (slave wireguard1): making interface the new active one [ 275.757656][T15668] bond13: (slave wireguard1): Releasing backup interface [ 275.771424][T15668] bond14: (slave bond15): Releasing backup interface [ 275.778200][T15668] bond14: (slave bond15): the permanent HWaddr of slave - 66:d4:79:60:b7:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 275.815439][T15668] bond14: (slave gretap2): making interface the new active one [ 275.834003][T15668] bond14: (slave gretap2): Releasing backup interface [ 275.842536][T15668] bond16: (slave geneve3): Releasing active interface [ 275.853049][T15668] bond18: (slave bond19): Releasing backup interface [ 275.911842][T15677] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.920362][T15677] bond0: (slave team0): Enslaving as an active interface with an up link [ 275.944341][T15662] lo speed is unknown, defaulting to 1000 [ 275.989188][T15679] lo speed is unknown, defaulting to 1000 [ 275.996517][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4353'. [ 276.058482][T15682] vlan0: entered allmulticast mode [ 276.073845][T15682] dummy0: entered allmulticast mode [ 276.412361][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 276.423339][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.423368][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.423415][ T3316] Call Trace: [ 276.423422][ T3316] [ 276.423453][ T3316] __dump_stack+0x1d/0x30 [ 276.423478][ T3316] dump_stack_lvl+0x95/0xd0 [ 276.423500][ T3316] dump_stack+0x15/0x1b [ 276.423518][ T3316] dump_header+0x80/0x240 [ 276.423542][ T3316] oom_kill_process+0x295/0x350 [ 276.423593][ T3316] out_of_memory+0x97d/0xb80 [ 276.423650][ T3316] try_charge_memcg+0x62e/0xa10 [ 276.423764][ T3316] charge_memcg+0x51/0xc0 [ 276.423793][ T3316] __mem_cgroup_charge+0x28/0xb0 [ 276.423823][ T3316] filemap_add_folio+0x110/0x350 [ 276.423851][ T3316] __filemap_get_folio_mpol+0x326/0x680 [ 276.423942][ T3316] filemap_fault+0x473/0xbb0 [ 276.424052][ T3316] __do_fault+0xbc/0x200 [ 276.424083][ T3316] handle_mm_fault+0x11d7/0x3030 [ 276.424113][ T3316] ? vma_start_read+0x1c7/0x2c0 [ 276.424145][ T3316] do_user_addr_fault+0x62f/0x1050 [ 276.424217][ T3316] exc_page_fault+0x62/0xa0 [ 276.424310][ T3316] asm_exc_page_fault+0x26/0x30 [ 276.424334][ T3316] RIP: 0033:0x7fdf0bd58db4 [ 276.424352][ T3316] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 276.424396][ T3316] RSP: 002b:00007ffd85efb650 EFLAGS: 00010202 [ 276.424414][ T3316] RAX: 0000001b33d24000 RBX: 0000000000000816 RCX: 0000000000043620 [ 276.424429][ T3316] RDX: 0000000003f092a8 RSI: 00007ffd85efb6e0 RDI: 0000000000000001 [ 276.424443][ T3316] RBP: 00007ffd85efb68c R08: 000000000f076676 R09: 7fffffffffffffff [ 276.424487][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 276.424571][ T3316] R13: 00000000000927c0 R14: 0000000000043687 R15: 00007ffd85efb6e0 [ 276.424592][ T3316] [ 276.476184][ T29] audit: type=1400 audit(1769065558.085:6510): avc: denied { ioctl } for pid=15704 comm="syz.2.4360" path="socket:[66640]" dev="sockfs" ino=66640 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 276.478032][ T3316] memory: usage 290300kB, limit 307200kB, failcnt 1421 [ 276.641119][ T3316] memory+swap: usage 222608kB, limit 9007199254740988kB, failcnt 0 [ 276.649225][ T3316] kmem: usage 129680kB, limit 9007199254740988kB, failcnt 0 [ 276.656583][ T3316] Memory cgroup stats for /syz3: [ 276.664439][ T3316] cache 28594176 [ 276.672931][ T3316] rss 8601600 [ 276.676272][ T3316] shmem 28000256 [ 276.679818][ T3316] mapped_file 4096 [ 276.683617][ T3316] dirty 4096 [ 276.686813][ T3316] writeback 0 [ 276.690093][ T3316] workingset_refault_anon 427 [ 276.694803][ T3316] workingset_refault_file 5426 [ 276.699557][ T3316] swap 50593792 [ 276.703019][ T3316] swapcached 65536 [ 276.706785][ T3316] pgpgin 432018 [ 276.710248][ T3316] pgpgout 422920 [ 276.713829][ T3316] pgfault 410783 [ 276.717372][ T3316] pgmajfault 106 [ 276.720925][ T3316] inactive_anon 24530944 [ 276.725206][ T3316] active_anon 12066816 [ 276.729285][ T3316] inactive_file 73728 [ 276.733263][ T3316] active_file 524288 [ 276.737235][ T3316] unevictable 0 [ 276.740745][ T3316] hierarchical_memory_limit 314572800 [ 276.746169][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 276.752317][ T3316] total_cache 28594176 [ 276.756528][ T3316] total_rss 8601600 [ 276.760322][ T3316] total_shmem 28000256 [ 276.764525][ T3316] total_mapped_file 4096 [ 276.768763][ T3316] total_dirty 4096 [ 276.772485][ T3316] total_writeback 0 [ 276.776365][ T3316] total_workingset_refault_anon 427 [ 276.781557][ T3316] total_workingset_refault_file 5426 [ 276.786881][ T3316] total_swap 50593792 [ 276.790865][ T3316] total_swapcached 65536 [ 276.795150][ T3316] total_pgpgin 432018 [ 276.799157][ T3316] total_pgpgout 422920 [ 276.803221][ T3316] total_pgfault 410783 [ 276.807314][ T3316] total_pgmajfault 106 [ 276.811384][ T3316] total_inactive_anon 24530944 [ 276.816190][ T3316] total_active_anon 12066816 [ 276.820853][ T3316] total_inactive_file 73728 [ 276.822394][ T29] audit: type=1400 audit(1769065558.475:6511): avc: denied { setattr } for pid=15709 comm="syz.0.4361" name="" dev="pipefs" ino=66647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 276.825387][ T3316] total_active_file 524288 [ 276.825396][ T3316] total_unevictable 0 [ 276.825404][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0 [ 276.850142][T15710] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4361'. [ 276.852070][ T3316] ,oom_memcg=/syz3 [ 276.858187][T15710] 0ªî{X¹¦: renamed from gretap0 [ 276.865261][ T3316] ,task_memcg=/syz3,task=syz.3.205,pid=4007,uid=0 [ 276.889250][ T3316] Memory cgroup out of memory: Killed process 4007 (syz.3.205) total-vm:96048kB, anon-rss:1240kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 276.914003][T15710] 0ªî{X¹¦: entered allmulticast mode [ 276.947209][T15710] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 277.232730][T15728] netlink: 'syz.0.4366': attribute type 39 has an invalid length. [ 277.252877][T15728] bond10: (slave bond0): Releasing backup interface [ 277.300661][T15728] bond15: (slave dummy0): Releasing active interface [ 277.338043][T15728] dummy0: left promiscuous mode [ 277.424183][T15728] bond0: (slave bridge_slave_1): Releasing backup interface [ 277.494383][ T29] audit: type=1326 audit(1769065559.155:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.525358][T15728] bond9: (slave veth19): Releasing backup interface [ 277.540357][ T29] audit: type=1326 audit(1769065559.175:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.564066][ T29] audit: type=1326 audit(1769065559.175:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.587982][ T29] audit: type=1326 audit(1769065559.175:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.611702][ T29] audit: type=1326 audit(1769065559.175:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.635257][ T29] audit: type=1326 audit(1769065559.175:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.658943][ T29] audit: type=1326 audit(1769065559.175:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15741 comm="syz.1.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0e247eacb9 code=0x7ffc0000 [ 277.691389][T15728] bond12: (slave bond13): Releasing backup interface [ 277.698213][T15728] bond12: (slave bond13): the permanent HWaddr of slave - 62:60:df:17:da:49 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 277.731020][T15728] bond12: (slave gretap1): making interface the new active one [ 277.788634][T15728] bond12: (slave gretap1): Releasing backup interface [ 277.796836][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4378'. [ 277.954803][T15728] bond14: (slave bridge8): Releasing backup interface [ 279.180377][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4393'. [ 279.308877][T15832] netlink: 'syz.2.4396': attribute type 10 has an invalid length. [ 279.335036][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4396'. [ 279.591997][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 279.688589][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 279.749015][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 279.758591][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 279.768017][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 279.777487][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 279.786619][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 280.173054][T15858] netlink: 'syz.1.4405': attribute type 1 has an invalid length. [ 280.228892][T15861] vlan0: entered promiscuous mode [ 280.234048][T15861] erspan0: entered promiscuous mode [ 280.266747][T15858] bond17: entered promiscuous mode [ 280.289317][T15858] 8021q: adding VLAN 0 to HW filter on device bond17 [ 280.333781][T15860] bond17: entered allmulticast mode [ 280.476811][T15858] bond17: (slave bridge11): making interface the new active one [ 280.484553][T15858] bridge11: entered promiscuous mode [ 280.490030][T15858] bridge11: entered allmulticast mode [ 280.569530][T15858] bond17: (slave bridge11): Enslaving as an active interface with an up link [ 280.956435][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 280.956450][ T29] audit: type=1326 audit(1769065562.615:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 280.993621][ T29] audit: type=1326 audit(1769065562.645:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.017229][ T29] audit: type=1326 audit(1769065562.645:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.103652][ T29] audit: type=1326 audit(1769065562.685:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.127292][ T29] audit: type=1326 audit(1769065562.685:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.150848][ T29] audit: type=1326 audit(1769065562.705:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.174395][ T29] audit: type=1326 audit(1769065562.735:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.308129][ T29] audit: type=1326 audit(1769065562.765:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.331836][ T29] audit: type=1326 audit(1769065562.765:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.355410][ T29] audit: type=1326 audit(1769065562.765:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 281.501393][T15895] tipc: Enabling of bearer rejected, failed to enable media [ 281.724945][T15908] macvlan0: entered promiscuous mode [ 281.730318][T15908] bond0: entered promiscuous mode [ 281.735408][T15908] bridge_slave_1: entered promiscuous mode [ 281.752311][T15908] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 282.217413][T15926] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.539365][T15938] tipc: Enabling of bearer rejected, failed to enable media [ 282.912884][T15953] bond11: (slave lo): Releasing backup interface [ 283.001933][T15953] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 283.066320][T15953] bond10: (slave dummy0): Releasing active interface [ 283.077023][T15955] netlink: 'syz.3.4435': attribute type 13 has an invalid length. [ 283.090929][T15953] bond0: (slave bridge_slave_1): Releasing backup interface [ 283.098998][T15953] bridge_slave_1: left promiscuous mode [ 283.105458][T15953] bond1: (slave veth5): Releasing active interface [ 283.113250][T15953] bond2: (slave wireguard0): Releasing backup interface [ 283.120550][T15953] wireguard0: left promiscuous mode [ 283.127418][T15953] bond4: (slave bridge12): Releasing backup interface [ 283.135101][T15953] bridge12: left promiscuous mode [ 283.140294][T15953] bridge12: left allmulticast mode [ 283.146482][T15953] bond5: (slave ip6gretap1): Releasing active interface [ 283.154973][T15953] bond8: (slave ip6erspan0): Releasing active interface [ 283.163726][T15953] bond9: (slave bridge13): Releasing active interface [ 283.171857][T15953] bond12: (slave veth33): Releasing active interface [ 283.180208][ T7542] lo speed is unknown, defaulting to 1000 [ 283.186022][ T7542] syz2: Port: 1 Link DOWN [ 283.251810][T15963] bond10: left allmulticast mode [ 283.282866][T15965] __nla_validate_parse: 3 callbacks suppressed [ 283.282957][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.313131][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.332733][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.362464][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.423819][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.428529][T15969] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4438'. [ 283.433747][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.494693][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 283.536151][T15976] tipc: Enabling of bearer rejected, failed to enable media [ 283.563595][T15996] netlink: 'syz.0.4448': attribute type 1 has an invalid length. [ 283.574277][T15996] ip6tnl0: Caught tx_queue_len zero misconfig [ 283.711156][T16006] lo speed is unknown, defaulting to 1000 [ 283.891024][T16022] netlink: 'syz.4.4456': attribute type 39 has an invalid length. [ 283.989690][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 284.010264][T16038] netlink: 'syz.2.4462': attribute type 1 has an invalid length. [ 284.034958][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 284.101322][T16038] 8021q: adding VLAN 0 to HW filter on device bond13 [ 284.152685][T16045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16045 comm=syz.2.4462 [ 284.179460][T16047] netlink: 'syz.0.4465': attribute type 4 has an invalid length. [ 284.208320][T16047] .`: renamed from bond0 [ 284.238205][T16044] bond13: (slave gretap1): making interface the new active one [ 284.251849][T16044] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 285.323254][T16095] netlink: 'syz.2.4482': attribute type 39 has an invalid length. [ 285.453771][T16107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16107 comm=syz.2.4487 [ 286.483514][T16137] bond11: (slave bond0): Releasing backup interface [ 286.491399][T16137] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 287.984056][T16180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16180 comm=syz.3.4509 [ 288.051563][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 288.051579][ T29] audit: type=1326 audit(1769065569.705:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.114246][T16169] geneve3: entered promiscuous mode [ 288.119882][T16169] geneve3: entered allmulticast mode [ 288.164809][ T29] audit: type=1326 audit(1769065569.745:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.188624][ T29] audit: type=1326 audit(1769065569.745:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.212844][ T29] audit: type=1326 audit(1769065569.745:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.236645][ T29] audit: type=1326 audit(1769065569.795:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.260231][ T29] audit: type=1326 audit(1769065569.795:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.284525][ T29] audit: type=1326 audit(1769065569.795:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.308224][ T29] audit: type=1326 audit(1769065569.795:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.331857][ T29] audit: type=1326 audit(1769065569.795:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 288.355397][ T29] audit: type=1326 audit(1769065569.795:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.3.4509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 289.546705][T16225] __nla_validate_parse: 9 callbacks suppressed [ 289.546724][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4524'. [ 289.953854][ T3488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.625356][T16270] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.656366][ T3488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.881216][T16264] syz.3.4536 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 290.895303][T16264] CPU: 1 UID: 0 PID: 16264 Comm: syz.3.4536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 290.895336][T16264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.895382][T16264] Call Trace: [ 290.895388][T16264] [ 290.895396][T16264] __dump_stack+0x1d/0x30 [ 290.895430][T16264] dump_stack_lvl+0x95/0xd0 [ 290.895455][T16264] dump_stack+0x15/0x1b [ 290.895521][T16264] dump_header+0x80/0x240 [ 290.895595][T16264] oom_kill_process+0x295/0x350 [ 290.895617][T16264] out_of_memory+0x97d/0xb80 [ 290.895638][T16264] try_charge_memcg+0x62e/0xa10 [ 290.895733][T16264] obj_cgroup_charge_pages+0xa6/0x150 [ 290.895808][T16264] __memcg_kmem_charge_page+0x9e/0x170 [ 290.895861][T16264] __alloc_frozen_pages_noprof+0x18a/0x350 [ 290.895896][T16264] alloc_pages_mpol+0xb3/0x260 [ 290.895928][T16264] alloc_pages_noprof+0x8f/0x130 [ 290.896001][T16264] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 290.896048][T16264] __kvmalloc_node_noprof+0x471/0x680 [ 290.896075][T16264] ? ip_set_alloc+0x24/0x30 [ 290.896188][T16264] ? ip_set_alloc+0x24/0x30 [ 290.896214][T16264] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 290.896241][T16264] ip_set_alloc+0x24/0x30 [ 290.896328][T16264] hash_netiface_create+0x282/0x740 [ 290.896360][T16264] ? __pfx_hash_netiface_create+0x10/0x10 [ 290.896440][T16264] ip_set_create+0x3cf/0x970 [ 290.896480][T16264] ? __nla_parse+0x40/0x60 [ 290.896504][T16264] nfnetlink_rcv_msg+0x509/0x5d0 [ 290.896637][T16264] netlink_rcv_skb+0x123/0x220 [ 290.896665][T16264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 290.896765][T16264] nfnetlink_rcv+0x167/0x1720 [ 290.896790][T16264] ? obj_cgroup_charge_account+0x122/0x1a0 [ 290.896821][T16264] ? __rcu_read_unlock+0x4e/0x70 [ 290.896839][T16264] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 290.896915][T16264] ? trace_event_reg+0xe0/0x190 [ 290.896941][T16264] ? perf_trace_add+0x176/0x1a0 [ 290.897017][T16264] ? event_sched_in+0x6af/0x780 [ 290.897046][T16264] ? _raw_spin_lock_bh+0x56/0xb0 [ 290.897079][T16264] ? should_fail_ex+0x30/0x280 [ 290.897104][T16264] ? selinux_nlmsg_lookup+0x99/0x890 [ 290.897190][T16264] ? __rcu_read_unlock+0x33/0x70 [ 290.897210][T16264] ? __netlink_lookup+0x276/0x2b0 [ 290.897243][T16264] netlink_unicast+0x5c0/0x690 [ 290.897344][T16264] netlink_sendmsg+0x5c8/0x6f0 [ 290.897404][T16264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.897435][T16264] __sock_sendmsg+0x145/0x170 [ 290.897469][T16264] ____sys_sendmsg+0x31e/0x4a0 [ 290.897519][T16264] ___sys_sendmsg+0x195/0x1e0 [ 290.897616][T16264] __x64_sys_sendmsg+0xd4/0x160 [ 290.897643][T16264] x64_sys_call+0x17ba/0x3000 [ 290.897719][T16264] do_syscall_64+0xc0/0x2a0 [ 290.897752][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.897777][T16264] RIP: 0033:0x7fdf0be8acb9 [ 290.897796][T16264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.897814][T16264] RSP: 002b:00007fdf0a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.897858][T16264] RAX: ffffffffffffffda RBX: 00007fdf0c105fa0 RCX: 00007fdf0be8acb9 [ 290.897874][T16264] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 290.898014][T16264] RBP: 00007fdf0bef8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 290.898032][T16264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.898086][T16264] R13: 00007fdf0c106038 R14: 00007fdf0c105fa0 R15: 00007ffd85efb2e8 [ 290.898109][T16264] [ 290.898117][T16264] memory: usage 307200kB, limit 307200kB, failcnt 1756 [ 291.241025][T16264] memory+swap: usage 356668kB, limit 9007199254740988kB, failcnt 0 [ 291.249033][T16264] kmem: usage 288656kB, limit 9007199254740988kB, failcnt 0 [ 291.256376][T16264] Memory cgroup stats for /syz3: [ 291.257071][T16264] cache 18698240 [ 291.265826][T16264] rss 200704 [ 291.269167][T16264] shmem 18698240 [ 291.272719][T16264] mapped_file 0 [ 291.276262][T16264] dirty 0 [ 291.279204][T16264] writeback 0 [ 291.282495][T16264] workingset_refault_anon 432 [ 291.287226][T16264] workingset_refault_file 5811 [ 291.291998][T16264] swap 50655232 [ 291.295556][T16264] swapcached 86016 [ 291.299295][T16264] pgpgin 457311 [ 291.302753][T16264] pgpgout 452675 [ 291.306349][T16264] pgfault 435301 [ 291.309966][T16264] pgmajfault 112 [ 291.313515][T16264] inactive_anon 18911232 [ 291.317802][T16264] active_anon 73728 [ 291.321600][T16264] inactive_file 0 [ 291.325353][T16264] active_file 4096 [ 291.329153][T16264] unevictable 0 [ 291.332612][T16264] hierarchical_memory_limit 314572800 [ 291.338108][T16264] hierarchical_memsw_limit 9223372036854771712 [ 291.344290][T16264] total_cache 18698240 [ 291.348361][T16264] total_rss 200704 [ 291.352084][T16264] total_shmem 18698240 [ 291.356207][T16264] total_mapped_file 0 [ 291.360183][T16264] total_dirty 0 [ 291.363725][T16264] total_writeback 0 [ 291.367537][T16264] total_workingset_refault_anon 432 [ 291.372735][T16264] total_workingset_refault_file 5811 [ 291.378072][T16264] total_swap 50655232 [ 291.382063][T16264] total_swapcached 86016 [ 291.386346][T16264] total_pgpgin 457311 [ 291.390333][T16264] total_pgpgout 452675 [ 291.394444][T16264] total_pgfault 435301 [ 291.398522][T16264] total_pgmajfault 112 [ 291.402580][T16264] total_inactive_anon 18911232 [ 291.407376][T16264] total_active_anon 73728 [ 291.411700][T16264] total_inactive_file 0 [ 291.415902][T16264] total_active_file 4096 [ 291.420154][T16264] total_unevictable 0 [ 291.424189][T16264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4536,pid=16263,uid=0 [ 291.439192][T16264] Memory cgroup out of memory: Killed process 16263 (syz.3.4536) total-vm:94132kB, anon-rss:1332kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 291.666706][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4544'. [ 291.745592][T16300] netlink: 'syz.1.4545': attribute type 4 has an invalid length. [ 291.765132][T16300] netlink: 'syz.1.4545': attribute type 4 has an invalid length. [ 291.807608][T16299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16299 comm=syz.0.4548 [ 292.529571][T16316] tipc: Enabling of bearer rejected, failed to enable media [ 292.704984][T16322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4555'. [ 292.785742][T16322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16322 comm=syz.1.4555 [ 292.804778][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4570'. [ 292.818072][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4561'. [ 292.842698][T16341] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4562'. [ 292.894962][T16347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4565'. [ 292.925063][T16351] syz.0.4562 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 292.974060][T16357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4569'. [ 293.103958][T16363] bond12: (slave lo): Releasing backup interface [ 293.111191][T16363] bond12: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 293.120926][T16363] lo: left allmulticast mode [ 293.131478][T16363] bond0: (slave team0): Releasing backup interface [ 293.140737][T16363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.255145][T16368] lo speed is unknown, defaulting to 1000 [ 293.576757][T16384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16384 comm=syz.4.4577 [ 293.742217][T16404] netlink: 'syz.2.4584': attribute type 1 has an invalid length. [ 293.784354][T16404] bond14: entered promiscuous mode [ 293.790225][T16404] 8021q: adding VLAN 0 to HW filter on device bond14 [ 293.813351][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 293.813365][ T29] audit: type=1326 audit(1769065575.465:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.859737][ T29] audit: type=1326 audit(1769065575.495:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.883327][ T29] audit: type=1326 audit(1769065575.505:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.906899][ T29] audit: type=1326 audit(1769065575.505:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.930395][ T29] audit: type=1326 audit(1769065575.505:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.954178][ T29] audit: type=1326 audit(1769065575.505:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.977754][ T29] audit: type=1326 audit(1769065575.505:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 293.981594][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4584'. [ 294.001538][ T29] audit: type=1326 audit(1769065575.505:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 294.010522][T16414] bond14: left promiscuous mode [ 294.034265][ T29] audit: type=1326 audit(1769065575.505:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 294.063104][ T29] audit: type=1326 audit(1769065575.505:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16395 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff59e39acb9 code=0x7ffc0000 [ 294.067375][T16404] bond14: (slave bridge15): making interface the new active one [ 294.096231][T16404] bond14: (slave bridge15): Enslaving as an active interface with an up link [ 294.128789][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4589'. [ 294.130246][T16424] 9p: Bad value for 'rfdno' [ 294.311607][T16439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16439 comm=syz.2.4594 [ 294.471926][T16459] xt_connbytes: Forcing CT accounting to be enabled [ 294.489582][T16467] macvlan2: entered promiscuous mode [ 294.494964][T16467] bond0: entered promiscuous mode [ 294.500053][T16467] bridge_slave_1: entered promiscuous mode [ 294.506918][T16467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.568446][T16473] tipc: Enabling of bearer rejected, failed to enable media [ 294.735082][T16494] __nla_validate_parse: 2 callbacks suppressed [ 294.735138][T16494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4608'. [ 294.921838][T16515] netlink: 'syz.3.4612': attribute type 39 has an invalid length. [ 294.972744][T16513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.260397][T16526] netlink: 'syz.1.4616': attribute type 10 has an invalid length. [ 295.268736][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4616'. [ 295.331738][T16532] netlink: 'syz.1.4618': attribute type 39 has an invalid length. [ 295.387893][T16535] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 295.593982][T16548] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 296.115791][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'. [ 296.152002][T16566] netlink: 'syz.1.4627': attribute type 1 has an invalid length. [ 296.208966][T16566] 8021q: adding VLAN 0 to HW filter on device bond18 [ 296.234513][T16566] veth25: entered promiscuous mode [ 296.243636][T16566] bond18: (slave veth25): Enslaving as a backup interface with a down link [ 296.335965][T16574] netlink: 'syz.1.4630': attribute type 39 has an invalid length. [ 296.344644][T16574] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 296.405602][T16581] netlink: 'syz.1.4632': attribute type 39 has an invalid length. [ 296.770302][T16596] lo speed is unknown, defaulting to 1000 [ 296.887121][T16605] netlink: 'syz.2.4638': attribute type 21 has an invalid length. [ 296.897686][T16605] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 296.905470][T16605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4638'. [ 297.306487][T16615] netlink: 'syz.4.4641': attribute type 39 has an invalid length. [ 297.373697][ T3488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.504094][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 297.622457][T16631] netlink: 'syz.1.4647': attribute type 1 has an invalid length. [ 297.646337][T16631] bond19: (slave bridge12): making interface the new active one [ 297.655867][T16631] bond19: (slave bridge12): Enslaving as an active interface with an up link [ 297.683909][T16631] bond19: (slave gretap1): Enslaving as an active interface with an up link [ 297.700176][T16631] macvlan3: entered promiscuous mode [ 297.705680][T16631] macvlan3: entered allmulticast mode [ 297.712108][T16631] bond19: entered promiscuous mode [ 297.717267][T16631] bridge12: entered promiscuous mode [ 297.723358][T16631] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 297.731797][T16631] bond19: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 297.748944][T16631] bond19: left promiscuous mode [ 297.753923][T16631] bridge12: left promiscuous mode [ 297.889086][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 297.901218][T16656] ªªªªªª: renamed from hsr0 [ 297.939657][T16661] netlink: 'syz.2.4655': attribute type 39 has an invalid length. [ 297.954002][T16661] bond13: (slave gretap1): Releasing active interface [ 297.971307][T16661] bond14: (slave bridge15): Releasing backup interface [ 298.131578][T16672] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 298.140356][T16672] ref_ctr increment failed for inode: 0x13a3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810005f2c0 [ 298.187613][T16678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16678 comm=syz.3.4662 [ 298.205614][T16680] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 298.214440][T16680] ref_ctr decrement failed for inode: 0x13a3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810005f2c0 [ 298.226656][T16680] uprobe: syz.2.4659:16680 failed to unregister, leaking uprobe [ 298.334340][ T3488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 298.364117][T16685] 9p: Bad value for 'rfdno' [ 298.573639][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.153604][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 299.153624][ T29] audit: type=1326 audit(1769065580.785:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.183416][ T29] audit: type=1326 audit(1769065580.785:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.258495][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 299.349769][T16707] lo speed is unknown, defaulting to 1000 [ 299.431040][T16707] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4666'. [ 299.440433][T16707] netlink: zone id is out of range [ 299.445628][T16707] netlink: zone id is out of range [ 299.450980][T16707] netlink: zone id is out of range [ 299.471644][T16707] netlink: set zone limit has 8 unknown bytes [ 299.499346][T16706] netlink: 'syz.0.4670': attribute type 39 has an invalid length. [ 299.692023][T16717] tipc: Enabling of bearer rejected, failed to enable media [ 299.703065][ T29] audit: type=1326 audit(1769065581.255:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.726665][ T29] audit: type=1326 audit(1769065581.255:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.750381][ T29] audit: type=1326 audit(1769065581.255:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.774063][ T29] audit: type=1326 audit(1769065581.255:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.798128][ T29] audit: type=1326 audit(1769065581.255:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.821738][ T29] audit: type=1326 audit(1769065581.255:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.845425][ T29] audit: type=1326 audit(1769065581.255:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.869023][ T29] audit: type=1326 audit(1769065581.255:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16713 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf0be8acb9 code=0x7ffc0000 [ 299.936540][T16727] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4678'. [ 300.152598][T16748] lo speed is unknown, defaulting to 1000 [ 300.209777][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4688'. [ 300.467421][T16755] ================================================================== [ 300.475643][T16755] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 300.484258][T16755] [ 300.486576][T16755] write to 0xffff888177cc9ca8 of 8 bytes by task 16758 on cpu 1: [ 300.494291][T16755] shmem_file_splice_read+0x470/0x600 [ 300.499686][T16755] splice_direct_to_actor+0x26e/0x670 [ 300.505089][T16755] do_splice_direct+0x119/0x1a0 [ 300.509968][T16755] do_sendfile+0x380/0x650 [ 300.514388][T16755] __x64_sys_sendfile64+0x105/0x150 [ 300.519598][T16755] x64_sys_call+0x2db1/0x3000 [ 300.524281][T16755] do_syscall_64+0xc0/0x2a0 [ 300.528787][T16755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.534678][T16755] [ 300.536995][T16755] write to 0xffff888177cc9ca8 of 8 bytes by task 16755 on cpu 0: [ 300.544713][T16755] shmem_file_splice_read+0x470/0x600 [ 300.550101][T16755] splice_direct_to_actor+0x26e/0x670 [ 300.555498][T16755] do_splice_direct+0x119/0x1a0 [ 300.560375][T16755] do_sendfile+0x380/0x650 [ 300.564803][T16755] __x64_sys_sendfile64+0x105/0x150 [ 300.570008][T16755] x64_sys_call+0x2db1/0x3000 [ 300.574715][T16755] do_syscall_64+0xc0/0x2a0 [ 300.579238][T16755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.585143][T16755] [ 300.587554][T16755] value changed: 0x000000000001ce52 -> 0x000000000001ce63 [ 300.594651][T16755] [ 300.596977][T16755] Reported by Kernel Concurrency Sanitizer on: [ 300.598039][T16763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4692'. [ 300.603142][T16755] CPU: 0 UID: 0 PID: 16755 Comm: syz.1.4690 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.603176][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.631959][T16755] ================================================================== [ 300.730448][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4692'.