last executing test programs: 4m28.455533524s ago: executing program 4 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x90, 0x6, @random="b4741b9e11e8"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 4m28.213859722s ago: executing program 4 (id=259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x80000001, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x10000008, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x9, 0x3, 0x0, 0x10001, 0x10000002, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m28.169996093s ago: executing program 4 (id=263): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m27.936601121s ago: executing program 4 (id=268): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4m27.656482089s ago: executing program 4 (id=271): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mlock2(&(0x7f0000751000/0x3000)=nil, 0x3000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 4m27.368251829s ago: executing program 4 (id=278): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@dioread_nolock}, {@data_err_ignore}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@delalloc}, {@orlov}]}, 0xff, 0x26c, &(0x7f00000002c0)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x10, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 4m27.364346749s ago: executing program 32 (id=278): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@dioread_nolock}, {@data_err_ignore}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@delalloc}, {@orlov}]}, 0xff, 0x26c, &(0x7f00000002c0)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x10, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 4m18.964050529s ago: executing program 3 (id=425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80000, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 4m18.885822041s ago: executing program 3 (id=415): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 4m18.824829713s ago: executing program 3 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) r2 = memfd_create(0x0, 0xb) fcntl$addseals(r2, 0x409, 0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 4m18.808716404s ago: executing program 3 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 4m18.748059796s ago: executing program 3 (id=419): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e459, 0x700000000000000) 4m18.432576526s ago: executing program 3 (id=424): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000480)={0x219, {{0xa, 0x2, 0xffffffff, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x22}}}}, 0x108) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7, 0x15, "b0bf2ebb48c855ac0007000200bf0200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x12) 4m18.432411176s ago: executing program 33 (id=424): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000480)={0x219, {{0xa, 0x2, 0xffffffff, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x22}}}}, 0x108) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7, 0x15, "b0bf2ebb48c855ac0007000200bf0200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x12) 4m12.765484438s ago: executing program 5 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000000500), 0x80, r2, 0x0, 0x7}, 0x38) 4m12.551259215s ago: executing program 5 (id=503): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0), 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x24e9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x14ef}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) 4m12.313312483s ago: executing program 5 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 4m12.176245197s ago: executing program 5 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 4m12.07516277s ago: executing program 5 (id=513): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 4m11.876512467s ago: executing program 5 (id=518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@nobh}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 4m11.876376707s ago: executing program 34 (id=518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@nobh}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 2m12.371427675s ago: executing program 6 (id=2150): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x20004000) 2m11.667471028s ago: executing program 6 (id=2152): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x4d) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r1, 0x50) 2m11.6203373s ago: executing program 6 (id=2153): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m11.508729733s ago: executing program 6 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x8) 2m11.508129363s ago: executing program 6 (id=2157): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x86) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000005c0)='.\x00', 0xc2000128) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 2m10.936565991s ago: executing program 6 (id=2163): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') setreuid(0xee01, 0xee01) pread64(r2, &(0x7f0000000140)=""/14, 0xe, 0x1) 2m10.919148672s ago: executing program 35 (id=2163): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') setreuid(0xee01, 0xee01) pread64(r2, &(0x7f0000000140)=""/14, 0xe, 0x1) 3.224066009s ago: executing program 0 (id=4242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x4, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x1ffffffffffffff}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 3.187724711s ago: executing program 0 (id=4243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00"], 0xc0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x200}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xef7ab6f359d7b58a}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) 2.446643734s ago: executing program 8 (id=4249): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 2.397840745s ago: executing program 8 (id=4250): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea3}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xffffffffffffffff}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 2.343210617s ago: executing program 8 (id=4253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lstat(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66962000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) 2.189771971s ago: executing program 0 (id=4258): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 2.160262573s ago: executing program 1 (id=4260): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0xd, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.136414843s ago: executing program 1 (id=4261): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x70, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x8007, 0x4, 0x46, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) listen(0xffffffffffffffff, 0x0) epoll_create(0x9) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x20000, 0xc0, 0x20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000440)={0x12e, @time={0x5, 0x7}, 0x4, {}, 0x2, 0x0, 0xf}) 2.104334804s ago: executing program 1 (id=4262): bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) chown(0x0, 0x0, 0x0) 1.945917919s ago: executing program 0 (id=4263): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @multicast2}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) 1.945811219s ago: executing program 1 (id=4264): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) 1.842279172s ago: executing program 0 (id=4265): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$binfmt_elf64(r1, 0x0, 0x78) 1.483485544s ago: executing program 8 (id=4266): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[], 0x5, 0x1215, &(0x7f0000001840)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write$P9_RREADLINK(r2, &(0x7f00000001c0)={0x17, 0x17, 0x2, {0xe, './bus/../file0'}}, 0x17) sendfile(r2, r1, 0x0, 0x3ffff) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x400000000008004) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 1.187149133s ago: executing program 2 (id=4270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x8ab3}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.132604134s ago: executing program 2 (id=4271): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 936.845511ms ago: executing program 2 (id=4272): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8e, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x1200) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x20000040) 812.431034ms ago: executing program 2 (id=4273): r0 = inotify_init() r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 786.445395ms ago: executing program 8 (id=4274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffe0}, {0xb, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 737.957137ms ago: executing program 2 (id=4275): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 597.771581ms ago: executing program 2 (id=4276): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x4004000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x800, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 544.945363ms ago: executing program 8 (id=4277): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x1}}, 0x26) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) 419.439387ms ago: executing program 0 (id=4278): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 344.894529ms ago: executing program 1 (id=4279): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff8}]}) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 325.78463ms ago: executing program 7 (id=4280): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 286.348781ms ago: executing program 7 (id=4281): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = semget$private(0x0, 0x3, 0x282) semctl$GETVAL(r2, 0x1, 0xc, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0xf1, r1, 0x0, 0x0, 0x1}}, 0x20) 286.118351ms ago: executing program 1 (id=4282): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) 285.901981ms ago: executing program 7 (id=4283): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 145.355726ms ago: executing program 7 (id=4284): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 60.036578ms ago: executing program 7 (id=4285): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r3}, './file1\x00'}) 0s ago: executing program 7 (id=4286): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x3) kernel console output (not intermixed with test programs): adv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.747330][T10534] netlink: 'syz.7.2199': attribute type 1 has an invalid length. [ 189.754661][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.766400][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.784677][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.832090][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.858656][ T28] audit: type=1400 audit(1780057967.790:1094): avc: denied { write } for pid=10531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.875338][T10539] macvlan2: entered promiscuous mode [ 189.909113][ T28] audit: type=1400 audit(1780057967.840:1095): avc: denied { write } for pid=10546 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.914367][T10539] macvlan2: entered allmulticast mode [ 189.941269][T10539] bond2: entered promiscuous mode [ 189.965834][T10539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.289686][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 190.335218][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'. [ 190.418001][T10539] bond2: left promiscuous mode [ 190.476760][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 190.514083][T10393] hsr_slave_0: entered promiscuous mode [ 190.537648][T10393] hsr_slave_1: entered promiscuous mode [ 190.560500][T10393] debugfs: 'hsr0' already exists in 'hsr' [ 190.577649][T10393] Cannot create hsr debugfs directory [ 190.704026][T10561] loop1: detected capacity change from 0 to 1024 [ 190.780099][T10561] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.818259][T10393] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 190.851021][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.861787][T10561] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 190.876519][T10393] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 190.889576][T10561] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #2: comm syz.1.2202: casefold flag without casefold feature [ 190.891316][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.934882][T10393] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 190.949256][T10561] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 190.949616][T10561] EXT4-fs (loop1): no journal found [ 190.958721][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 190.958745][ C1] EXT4-fs (loop1): initial error at time 1780057968: ext4_get_journal_inode:5896: inode 2 [ 190.958773][ C1] EXT4-fs (loop1): last error at time 1780057968: ext4_get_journal_inode:5896: inode 2 [ 191.003101][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.024578][T10393] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.036027][T10393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.044611][T10561] EXT4-fs (loop1): can't get journal size [ 191.060161][T10561] EXT4-fs error (device loop1): __ext4_fill_super:5596: inode #2: comm syz.1.2202: casefold flag without casefold feature [ 191.104634][T10561] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 191.107801][T10561] EXT4-fs (loop1): get root inode failed [ 191.176690][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.194125][T10561] EXT4-fs (loop1): mount failed [ 191.223517][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.254216][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.261318][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.286899][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.294004][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.527885][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.740383][T10393] veth0_vlan: entered promiscuous mode [ 191.763428][T10393] veth1_vlan: entered promiscuous mode [ 191.799774][T10393] veth0_macvtap: entered promiscuous mode [ 191.816474][T10393] veth1_macvtap: entered promiscuous mode [ 191.846977][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.888204][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.911001][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.922237][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.963793][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.974770][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.115598][T10608] loop8: detected capacity change from 0 to 128 [ 192.266835][T10609] bio_check_eod: 256 callbacks suppressed [ 192.266855][T10609] syz.8.2166: attempt to access beyond end of device [ 192.266855][T10609] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 192.326105][T10609] syz.8.2166: attempt to access beyond end of device [ 192.326105][T10609] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 192.425566][T10609] syz.8.2166: attempt to access beyond end of device [ 192.425566][T10609] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 192.506749][T10609] syz.8.2166: attempt to access beyond end of device [ 192.506749][T10609] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 192.572508][T10609] syz.8.2166: attempt to access beyond end of device [ 192.572508][T10609] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 192.586557][T10609] syz.8.2166: attempt to access beyond end of device [ 192.586557][T10609] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 192.622508][T10609] syz.8.2166: attempt to access beyond end of device [ 192.622508][T10609] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 192.674145][T10609] syz.8.2166: attempt to access beyond end of device [ 192.674145][T10609] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 192.729545][T10609] syz.8.2166: attempt to access beyond end of device [ 192.729545][T10609] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 192.764982][T10609] syz.8.2166: attempt to access beyond end of device [ 192.764982][T10609] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 193.177482][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2216'. [ 193.351064][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2221'. [ 193.391197][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2221'. [ 193.563485][ T54] batadv1: left promiscuous mode [ 194.010628][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2241'. [ 194.089931][T10701] loop8: detected capacity change from 0 to 512 [ 194.162784][T10701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.236938][ T28] audit: type=1400 audit(1780057972.170:1096): avc: denied { write } for pid=10700 comm="syz.8.2244" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.261073][ T28] audit: type=1400 audit(1780057972.170:1097): avc: denied { write } for pid=10700 comm="syz.8.2244" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.289219][T10393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.584114][T10717] bridge0: port 3(gretap0) entered blocking state [ 194.617369][T10717] bridge0: port 3(gretap0) entered disabled state [ 194.687623][T10717] gretap0: entered allmulticast mode [ 194.848827][T10717] gretap0: entered promiscuous mode [ 195.070250][T10741] capability: warning: `syz.8.2260' uses 32-bit capabilities (legacy support in use) [ 195.118870][ T28] audit: type=1400 audit(1780057973.050:1098): avc: denied { mounton } for pid=10740 comm="syz.8.2260" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.156261][T10746] netlink: 'syz.8.2262': attribute type 27 has an invalid length. [ 195.185840][T10746] netlink: 'syz.8.2262': attribute type 3 has an invalid length. [ 195.200637][T10746] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2262'. [ 195.379308][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2267'. [ 195.860039][ T28] audit: type=1400 audit(1780057973.790:1099): avc: denied { create } for pid=10784 comm="syz.1.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.910065][ T28] audit: type=1400 audit(1780057973.820:1100): avc: denied { setopt } for pid=10784 comm="syz.1.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.972892][ T28] audit: type=1400 audit(1780057973.820:1101): avc: denied { bind } for pid=10784 comm="syz.1.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.367146][ T28] audit: type=1326 audit(1780057974.300:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.2.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65393dce59 code=0x7ffc0000 [ 196.432472][ T28] audit: type=1326 audit(1780057974.300:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.2.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65393dce59 code=0x7ffc0000 [ 196.498557][ T28] audit: type=1326 audit(1780057974.300:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.2.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65393dce59 code=0x7ffc0000 [ 196.538865][T10828] netlink: 'syz.8.2291': attribute type 3 has an invalid length. [ 196.553313][T10828] netlink: 'syz.8.2291': attribute type 7 has an invalid length. [ 196.568682][ T28] audit: type=1326 audit(1780057974.300:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.2.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f65393dce59 code=0x7ffc0000 [ 196.603474][T10828] netlink: 198320 bytes leftover after parsing attributes in process `syz.8.2291'. [ 196.642420][ T54] batadv1: left promiscuous mode [ 197.503945][T10867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2308'. [ 198.117673][T10902] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.2321'. [ 198.127238][T10902] net_ratelimit: 30 callbacks suppressed [ 198.127258][T10902] netlink: zone id is out of range [ 198.146833][T10902] netlink: zone id is out of range [ 198.158127][T10902] netlink: zone id is out of range [ 198.170085][T10902] netlink: zone id is out of range [ 198.180980][T10902] netlink: zone id is out of range [ 198.192605][T10902] netlink: zone id is out of range [ 198.203216][T10902] netlink: zone id is out of range [ 198.216059][T10902] netlink: zone id is out of range [ 198.227342][T10902] netlink: zone id is out of range [ 198.318404][T10902] netlink: set zone limit has 8 unknown bytes [ 198.412666][T10911] netlink: 'syz.8.2324': attribute type 16 has an invalid length. [ 198.436049][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.452608][T10911] netlink: 'syz.8.2324': attribute type 17 has an invalid length. [ 198.475421][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.649329][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.656478][T10911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.669375][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.676540][T10911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.778603][T10916] netlink: 'syz.0.2328': attribute type 7 has an invalid length. [ 198.795653][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2328'. [ 198.807535][T10945] hsr0: entered promiscuous mode [ 198.814990][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 198.830422][T10945] hsr_slave_0: left promiscuous mode [ 198.837031][T10945] hsr_slave_1: left promiscuous mode [ 198.843397][T10949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2338'. [ 198.854252][T10945] hsr0 (unregistering): left promiscuous mode [ 198.871976][T10949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2338'. [ 198.901969][T10955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.911248][T10955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.130827][T10982] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2350'. [ 199.265508][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 199.265525][ T28] audit: type=1400 audit(1780057977.200:1123): avc: denied { write } for pid=10988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.319729][ T28] audit: type=1400 audit(1780057977.250:1124): avc: denied { write } for pid=11013 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.358011][ T28] audit: type=1400 audit(1780057977.250:1125): avc: denied { bind } for pid=11014 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 199.359745][ T3020] veth0_vlan: left promiscuous mode [ 199.391956][ T28] audit: type=1326 audit(1780057977.320:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.1.2362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x0 [ 199.419483][ T3020] veth0_vlan: entered promiscuous mode [ 199.516159][ T28] audit: type=1400 audit(1780057977.450:1127): avc: denied { write } for pid=11020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.555372][ T28] audit: type=1400 audit(1780057977.490:1128): avc: denied { write } for pid=11035 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.157587][ T28] audit: type=1400 audit(1780057978.080:1129): avc: denied { getopt } for pid=11076 comm="syz.2.2380" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.188098][ T28] audit: type=1400 audit(1780057978.120:1130): avc: denied { remount } for pid=11079 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 200.281079][ T28] audit: type=1400 audit(1780057978.210:1131): avc: denied { setcurrent } for pid=11088 comm="syz.1.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 200.320293][T11093] loop1: detected capacity change from 0 to 512 [ 200.327531][ T28] audit: type=1401 audit(1780057978.210:1132): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 200.356324][T11093] EXT4-fs: Ignoring removed orlov option [ 200.362128][T11093] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.391237][T11093] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.2385: corrupted in-inode xattr: e_value size too large [ 200.405521][T11093] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.408831][T11093] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2385: couldn't read orphan inode 15 (err -117) [ 200.418133][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 200.418154][ C1] EXT4-fs (loop1): initial error at time 1780057978: ext4_iget_extra_inode:5128: inode 15 [ 200.418189][ C1] EXT4-fs (loop1): last error at time 1780057978: ext4_iget_extra_inode:5128: inode 15 [ 200.456595][T11093] loop1: lost filesystem error report for type 5 error -117 [ 200.457561][T11093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.499179][ T8396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.779605][T11210] netlink: 'syz.7.2425': attribute type 1 has an invalid length. [ 201.864626][T11210] bond3: (slave veth3): Enslaving as an active interface with a down link [ 201.875940][T11210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.925948][T11231] netlink: 'syz.8.2432': attribute type 1 has an invalid length. [ 201.976055][T11231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.004125][T11231] bond1: (slave veth3): Enslaving as an active interface with a down link [ 202.042223][T11231] bond2: entered allmulticast mode [ 202.048466][T11231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.057589][T11231] bond1: (slave bond2): Enslaving as an active interface with a down link [ 202.219778][T11264] tipc: Failed to remove unknown binding: 66,1,1/0:716239657/716239659 [ 202.663469][T11313] netlink: 'syz.8.2460': attribute type 8 has an invalid length. [ 202.671461][T11313] netlink: 'syz.8.2460': attribute type 7 has an invalid length. [ 202.679548][T11313] __nla_validate_parse: 33 callbacks suppressed [ 202.679562][T11313] netlink: 194488 bytes leftover after parsing attributes in process `syz.8.2460'. [ 202.706688][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 202.773175][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2466'. [ 203.152613][T11345] loop1: detected capacity change from 0 to 512 [ 203.232270][T11345] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.2472: Bad quota inum: 2, type: 1 [ 203.258563][T11345] loop1: lost filesystem error report for type 5 error -117 [ 203.258796][T11345] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 203.266187][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 203.266209][ C0] EXT4-fs (loop1): initial error at time 1780057981: ext4_quota_enable:7221 [ 203.266252][ C0] EXT4-fs (loop1): last error at time 1780057981: ext4_quota_enable:7221 [ 203.343770][T11345] EXT4-fs (loop1): mount failed [ 204.982196][T11400] loop1: detected capacity change from 0 to 512 [ 205.014055][T11400] EXT4-fs: Ignoring removed nobh option [ 205.055730][T11400] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.2486: corrupted inode contents [ 205.092470][T11400] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 205.101074][T11400] EXT4-fs (loop1): Remounting filesystem read-only [ 205.110195][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 205.110221][ C1] EXT4-fs (loop1): initial error at time 1780057983: ext4_do_update_inode:5690: inode 3 [ 205.110254][ C1] EXT4-fs (loop1): last error at time 1780057983: ext4_do_update_inode:5690: inode 3 [ 205.147070][T11400] __quota_error: 505 callbacks suppressed [ 205.147090][T11400] Quota error (device loop1): write_blk: dquota write failed [ 205.169659][T11400] Quota error (device loop1): qtree_write_dquot: Error -30 occurred while creating quota [ 205.190157][T11400] EXT4-fs (loop1): 1 truncate cleaned up [ 205.196557][T11400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.209169][T11400] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.395568][ T8396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.669490][T11429] netlink: 'syz.2.2497': attribute type 16 has an invalid length. [ 205.686355][T11429] netlink: 'syz.2.2497': attribute type 17 has an invalid length. [ 205.734428][T11429] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.755096][T11429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.814020][T11429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.831533][T11429] batadv_slave_1: left promiscuous mode [ 205.843554][T11429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.862499][ T3393] page_pool_release_retry() stalled pool shutdown: id 84, 1 inflight 60 sec [ 205.875114][T11429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.897172][T11429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.921551][T11429] veth1_vlan: left promiscuous mode [ 205.932141][T11429] veth0_vlan: left promiscuous mode [ 205.938725][T11429] veth0_vlan: entered promiscuous mode [ 205.947138][T11429] veth1_vlan: entered promiscuous mode [ 205.955726][T11429] veth1_macvtap: left promiscuous mode [ 205.962798][T11429] veth0_macvtap: left promiscuous mode [ 205.968832][T11429] veth0_macvtap: entered promiscuous mode [ 205.975791][T11429] veth1_macvtap: entered promiscuous mode [ 206.003421][T11429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.016999][T11429] 8021q: adding VLAN 0 to HW filter on device eth0 [ 206.026623][T11429] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.045420][T11429] 8021q: adding VLAN 0 to HW filter on device eth2 [ 206.054249][T11429] 8021q: adding VLAN 0 to HW filter on device eth3 [ 206.064691][T11429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.090391][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.097524][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.127989][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.135253][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.182595][ T9058] syz2: Port: 1 Link ACTIVE [ 206.187296][ T30] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.195742][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.207152][ T30] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.229306][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.243158][ T344] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 206.263030][ T344] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 206.272668][ T9063] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 206.288422][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 206.297881][ T310] bond2: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 206.333943][ T30] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.350284][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.381831][ T30] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.390215][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.414857][T11459] netlink: 'syz.8.2507': attribute type 1 has an invalid length. [ 206.466972][T11459] bond3: (slave veth7): Enslaving as an active interface with a down link [ 206.499324][T11468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.622277][ T28] audit: type=1400 audit(1780057984.550:1638): avc: denied { write } for pid=11475 comm="syz.8.2512" name="file0" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.678305][ T28] audit: type=1400 audit(1780057984.550:1639): avc: denied { open } for pid=11475 comm="syz.8.2512" path="/70/file0" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.746394][ T28] audit: type=1400 audit(1780057984.590:1640): avc: denied { ioctl } for pid=11475 comm="syz.8.2512" path="/70/file0" dev="tmpfs" ino=377 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.784777][T11483] netlink: 'syz.7.2514': attribute type 16 has an invalid length. [ 206.820503][T11483] netlink: 'syz.7.2514': attribute type 17 has an invalid length. [ 206.867127][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.894088][ T3393] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 206.902649][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.935027][ T28] audit: type=1400 audit(1780057984.870:1641): avc: denied { ioctl } for pid=11488 comm="syz.8.2518" path="socket:[49460]" dev="sockfs" ino=49460 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 207.133888][ T3393] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 207.166623][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.173769][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.209192][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.216331][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.376846][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 207.402896][T11483] bond1: left promiscuous mode [ 207.423192][T11483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.541076][T11511] syzkaller1: entered promiscuous mode [ 207.550984][T11514] netlink: 'syz.2.2529': attribute type 3 has an invalid length. [ 207.566007][T11514] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 207.574161][T11514] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2529'. [ 207.579702][T11511] syzkaller1: entered allmulticast mode [ 207.596680][ T54] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 207.606273][ T54] bond3: (slave veth3): making interface the new active one [ 207.615127][ T54] bond3: active interface up! [ 208.583152][ T28] audit: type=1400 audit(1780057986.520:1642): avc: denied { remount } for pid=11560 comm="syz.8.2547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.774312][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2557'. [ 209.642184][ T28] audit: type=1400 audit(1780057987.570:1643): avc: denied { unmount } for pid=11609 comm="syz.1.2566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.874121][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2576'. [ 209.972735][ T28] audit: type=1400 audit(1780057987.900:1644): avc: denied { write } for pid=11627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.018633][ T28] audit: type=1400 audit(1780057987.950:1645): avc: denied { write } for pid=11646 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.422484][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 210.523066][T11652] xt_hashlimit: invalid rate [ 212.207892][T11701] netlink: 'syz.1.2599': attribute type 1 has an invalid length. [ 212.244378][T11701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.311232][T11701] macvlan2: entered promiscuous mode [ 212.342689][T11701] macvlan2: entered allmulticast mode [ 212.380751][T11701] bond1: entered promiscuous mode [ 212.395125][T11701] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.410600][T11701] bond1: left promiscuous mode [ 212.507987][ T28] audit: type=1400 audit(1780057990.440:1646): avc: denied { create } for pid=11719 comm="syz.8.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 212.661378][T11728] netlink: 'syz.1.2610': attribute type 16 has an invalid length. [ 212.681304][ T28] audit: type=1400 audit(1780057990.610:1647): avc: denied { write } for pid=11731 comm="syz.2.2613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 212.718160][T11728] netlink: 'syz.1.2610': attribute type 17 has an invalid length. [ 212.805863][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.847562][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.884751][T11728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.031541][T11728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.056114][T11728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.109714][T11728] veth1_vlan: left promiscuous mode [ 213.121533][T11728] veth1_vlan: entered promiscuous mode [ 213.140973][T11728] veth0_macvtap: left promiscuous mode [ 213.153889][T11728] veth0_macvtap: entered promiscuous mode [ 213.185357][T11728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.204980][T11728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.218203][T11728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.226815][T11728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.245116][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.252250][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.265957][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.273180][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.333314][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.352577][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.378563][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.399296][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.750089][ T28] audit: type=1400 audit(1780057991.680:1648): avc: denied { map } for pid=11785 comm="syz.8.2627" path="socket:[50496]" dev="sockfs" ino=50496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 213.802449][ T28] audit: type=1326 audit(1780057991.730:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 213.828744][ T28] audit: type=1326 audit(1780057991.730:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 213.858033][ T28] audit: type=1326 audit(1780057991.730:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 213.884271][ T28] audit: type=1326 audit(1780057991.730:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 213.912005][ T28] audit: type=1326 audit(1780057991.730:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 213.938178][ T28] audit: type=1326 audit(1780057991.730:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 213.969135][ T28] audit: type=1326 audit(1780057991.730:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.8.2628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 214.438844][T11811] loop1: detected capacity change from 0 to 128 [ 214.490291][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2640'. [ 214.526868][T11811] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 214.616133][T11811] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.628777][T11811] ext2 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.703885][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2643'. [ 214.841621][ T8396] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.478898][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2656'. [ 215.797673][ T9058] IPVS: starting estimator thread 0... [ 215.902473][T11877] IPVS: using max 2880 ests per chain, 144000 per kthread [ 215.969123][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2670'. [ 216.044433][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'. [ 216.080832][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 217.349704][T11957] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 217.354939][T11960] netlink: 'syz.1.2701': attribute type 4 has an invalid length. [ 217.365727][T11957] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2699'. [ 217.409147][T11964] batadv_slave_1: entered promiscuous mode [ 217.411054][T11960] netlink: 'syz.1.2701': attribute type 4 has an invalid length. [ 217.509017][T11963] batadv_slave_1: left promiscuous mode [ 217.664280][ T35] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 217.715519][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2711'. [ 217.762279][T11988] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2712'. [ 217.784182][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2712'. [ 217.840597][T11987] loop1: detected capacity change from 0 to 512 [ 217.861217][T11992] netlink: 'syz.2.2715': attribute type 7 has an invalid length. [ 217.869531][T11992] netlink: 'syz.2.2715': attribute type 8 has an invalid length. [ 217.878200][T11987] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.889387][T11987] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 217.932990][ T35] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 219.109641][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.116975][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.216299][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 219.457519][T12051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.469117][T12051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.488210][T12051] veth0_vlan: left promiscuous mode [ 219.519035][T12063] tipc: Enabling of bearer rejected, failed to enable media [ 219.529865][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.547884][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.565835][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.597249][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.771548][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 219.771634][ T28] audit: type=1400 audit(1780057997.700:1659): avc: denied { write } for pid=12070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.839024][T12103] netlink: 'syz.2.2753': attribute type 2 has an invalid length. [ 219.861458][T12103] __nla_validate_parse: 5 callbacks suppressed [ 219.861476][T12103] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2753'. [ 219.867963][ T28] audit: type=1400 audit(1780057997.790:1660): avc: denied { write } for pid=12106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.899957][T12105] syzkaller1: entered promiscuous mode [ 219.906488][T12105] syzkaller1: entered allmulticast mode [ 220.095567][ T28] audit: type=1326 audit(1780057998.030:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.174904][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2758'. [ 220.194565][ T28] audit: type=1326 audit(1780057998.030:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.223606][T12125] netlink: 'syz.8.2758': attribute type 30 has an invalid length. [ 220.254225][ T28] audit: type=1326 audit(1780057998.030:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.275268][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2758'. [ 220.279861][ T5073] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.306867][ T5073] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.324413][ T5073] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.336457][ T5073] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.346401][ T28] audit: type=1326 audit(1780057998.030:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.356111][T12132] netlink: 'syz.8.2758': attribute type 30 has an invalid length. [ 220.421972][ T28] audit: type=1326 audit(1780057998.080:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.456554][ T28] audit: type=1326 audit(1780057998.080:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.484590][ T28] audit: type=1326 audit(1780057998.110:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.536332][ T28] audit: type=1326 audit(1780057998.140:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 220.676256][T12154] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.704377][T12154] bridge_slave_0 (unregistering): left allmulticast mode [ 220.714708][T12154] bridge_slave_0 (unregistering): left promiscuous mode [ 220.729368][T12154] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.013859][ T35] page_pool_release_retry() stalled pool shutdown: id 105, 1 inflight 60 sec [ 222.630923][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2785'. [ 222.925662][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2801'. [ 222.940768][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2801'. [ 223.379105][T12235] loop1: detected capacity change from 0 to 512 [ 223.416358][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2815'. [ 223.567766][T12235] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2799: inode has both inline data and extents flags [ 223.589342][T12235] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.592400][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 223.608024][ C0] EXT4-fs (loop1): initial error at time 1780058001: ext4_orphan_get:1397: inode 15 [ 223.617473][ C0] EXT4-fs (loop1): last error at time 1780058001: ext4_orphan_get:1397: inode 15 [ 223.629688][T12235] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2799: couldn't read orphan inode 15 (err -117) [ 223.644292][T12235] loop1: lost filesystem error report for type 5 error -117 [ 223.777018][T12235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.109901][T12288] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.117782][T12288] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.486738][T12288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.498025][T12288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.523883][T12303] netlink: 'syz.8.2828': attribute type 39 has an invalid length. [ 224.606189][ T8894] syz2: Port: 1 Link DOWN [ 224.619193][ T4214] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.628020][ T4214] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.637966][ T8396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.638464][ T4214] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.673135][ T4214] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.701429][ T4214] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.717636][ T4214] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.738601][ T4214] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.756634][ T4214] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.897092][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2843'. [ 225.002404][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 225.002423][ T28] audit: type=1400 audit(1780058002.930:1713): avc: denied { accept } for pid=12345 comm="syz.8.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.058170][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 225.166195][T12371] tipc: Started in network mode [ 225.175225][T12371] tipc: Node identity 2007ff, cluster identity 4711 [ 225.182149][T12371] tipc: Node number set to 2099199 [ 225.259123][ T54] tipc: Subscription rejected, illegal request [ 225.489744][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2869'. [ 225.737276][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 225.747896][T12416] netlink: 'syz.2.2874': attribute type 30 has an invalid length. [ 225.788827][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 225.796329][ T54] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.798246][T12417] netlink: 'syz.2.2874': attribute type 30 has an invalid length. [ 225.806504][ T54] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.838546][ T54] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.868513][ T54] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.116116][ T28] audit: type=1400 audit(1780058004.040:1714): avc: denied { mount } for pid=12420 comm="syz.0.2876" name="/" dev="mqueue" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.720217][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 226.763182][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 227.308047][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2911'. [ 227.336660][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 227.369044][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 227.541055][T12521] netlink: 'syz.7.2917': attribute type 4 has an invalid length. [ 227.592452][T12523] netlink: 'syz.7.2917': attribute type 4 has an invalid length. [ 227.785655][T12525] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.793002][T12525] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.898690][T12525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.933816][T12525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.133194][ T4226] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.166467][ T4226] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.211408][ T4226] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.243640][ T4226] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.261793][T12496] syz.0.2908 (12496) used greatest stack depth: 8440 bytes left [ 228.310908][ T4226] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.338771][ T4226] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.368931][ T4226] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.394704][ T4226] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.673126][T12574] sctp: [Deprecated]: syz.0.2934 (pid 12574) Use of int in max_burst socket option. [ 228.673126][T12574] Use struct sctp_assoc_value instead [ 228.900060][T12587] netlink: 'syz.8.2938': attribute type 11 has an invalid length. [ 229.562843][ T28] audit: type=1400 audit(1780058007.500:1715): avc: denied { watch } for pid=12608 comm="syz.1.2951" path="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.668782][T12571] syz.2.2935 (12571) used greatest stack depth: 8312 bytes left [ 231.153338][T12683] __nla_validate_parse: 9 callbacks suppressed [ 231.153425][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 231.186614][T12683] netlink: 'syz.1.2979': attribute type 30 has an invalid length. [ 231.209898][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 231.230470][T12688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.248169][T12686] netlink: 'syz.1.2979': attribute type 30 has an invalid length. [ 231.263754][T12688] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 231.274585][ T4226] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.283465][ T4226] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.299610][ T4226] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.311493][ T4226] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.371606][T12700] geneve2: entered promiscuous mode [ 231.377862][T12700] geneve2: entered allmulticast mode [ 231.884896][T12714] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 232.162798][ T28] audit: type=1400 audit(1780058010.090:1716): avc: denied { name_bind } for pid=12735 comm="syz.2.3003" src=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 232.776673][ T28] audit: type=1326 audit(1780058010.710:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 232.843390][ T28] audit: type=1326 audit(1780058010.710:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 232.947469][ T28] audit: type=1326 audit(1780058010.760:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 232.990859][ T28] audit: type=1326 audit(1780058010.760:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 233.020633][ T28] audit: type=1326 audit(1780058010.760:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 233.075653][ T28] audit: type=1326 audit(1780058010.760:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 233.142835][ T28] audit: type=1326 audit(1780058010.760:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 233.207969][ T28] audit: type=1326 audit(1780058010.760:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 233.277823][ T28] audit: type=1326 audit(1780058010.760:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.3015" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe54ce59 code=0x7ffc0000 [ 234.457844][T12826] netlink: 'syz.2.3038': attribute type 4 has an invalid length. [ 234.492891][T12826] netlink: 'syz.2.3038': attribute type 4 has an invalid length. [ 234.538857][ T54] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.556566][ T54] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.589082][ T54] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.609756][ T54] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.780682][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3065'. [ 235.802114][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3065'. [ 237.081014][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 237.182218][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 237.182236][ T28] audit: type=1326 audit(1780058015.110:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.0.3096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2fe54ce59 code=0x0 [ 237.358527][T12973] ref_ctr increment failed for inode: 0x405 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811fb22880 [ 237.381538][T12972] uprobe: syz.8.3098:12972 failed to unregister, leaking uprobe [ 237.391637][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3099'. [ 237.447544][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3104'. [ 237.580597][T12987] loop1: detected capacity change from 0 to 128 [ 237.680706][T12987] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.702172][T12987] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.759001][T12993] netlink: 'syz.8.3105': attribute type 4 has an invalid length. [ 237.777371][T12993] netlink: 'syz.8.3105': attribute type 4 has an invalid length. [ 237.825419][ T28] audit: type=1400 audit(1780058015.760:1764): avc: denied { write } for pid=12985 comm="syz.1.3103" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.857183][ T8396] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.476317][ T28] audit: type=1400 audit(1780058016.410:1765): avc: denied { setopt } for pid=13019 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.557829][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3116'. [ 239.001140][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 239.156119][T13060] xt_hashlimit: size too large, truncated to 1048576 [ 239.227050][T13063] netlink: 'syz.0.3130': attribute type 2 has an invalid length. [ 239.291239][T13063] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3130'. [ 239.977903][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3138'. [ 240.016383][T13087] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3139'. [ 240.100149][T13093] netlink: 'syz.8.3142': attribute type 5 has an invalid length. [ 240.109995][T13093] netlink: 'syz.8.3142': attribute type 5 has an invalid length. [ 240.356939][ T28] audit: type=1400 audit(1780058018.290:1766): avc: denied { cmd } for pid=13114 comm="syz.7.3151" path="socket:[54780]" dev="sockfs" ino=54780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.443646][T13117] bond5: entered promiscuous mode [ 241.787680][T13186] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 241.820303][T13186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.829837][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3179'. [ 242.953039][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 243.140188][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.152036][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.177073][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.200303][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.251843][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.286229][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.300235][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.312193][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 243.393073][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3201'. [ 244.201711][T13287] pim6reg: entered allmulticast mode [ 244.234047][ T28] audit: type=1326 audit(1780058022.170:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.270444][ T28] audit: type=1326 audit(1780058022.170:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.296801][ T28] audit: type=1326 audit(1780058022.170:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.323722][ T28] audit: type=1326 audit(1780058022.170:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.362661][T13308] xt_hashlimit: size too large, truncated to 1048576 [ 244.383964][ T28] audit: type=1326 audit(1780058022.170:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.457669][ T28] audit: type=1326 audit(1780058022.170:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.486294][ T28] audit: type=1326 audit(1780058022.170:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.561581][ T28] audit: type=1326 audit(1780058022.170:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.592322][ T28] audit: type=1326 audit(1780058022.170:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 244.620247][ T28] audit: type=1326 audit(1780058022.170:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.8.3226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 246.114082][ T5073] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.126218][ T5073] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.180376][ T5073] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.189909][ T5073] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.216184][T13401] tipc: Enabled bearer , priority 10 [ 247.697800][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.790335][T13459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.806331][T13459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.944118][ T4214] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.978731][ T4214] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.006820][ T4214] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.022119][ T4214] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.037307][ T4214] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.047515][ T4214] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.066261][ T4214] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.075987][ T4214] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.206921][T13504] __nla_validate_parse: 177 callbacks suppressed [ 248.206939][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 248.222832][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 248.358691][T13514] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3309'. [ 248.545609][T13531] bond4: entered promiscuous mode [ 248.583952][T13531] ip6gre2: entered promiscuous mode [ 248.595331][T13531] ip6gre2: entered allmulticast mode [ 248.612542][T13531] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 248.655126][T13531] bond4: (slave ip6gre2): Error -95 calling set_mac_address [ 248.980427][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3321'. [ 249.029926][T13547] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.116735][T13554] ipvlan2: entered allmulticast mode [ 249.179439][T13554] bond6: entered allmulticast mode [ 249.225894][T13547] bond6: (slave ipip0): refused to change device type [ 250.156789][T13587] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3336'. [ 250.858997][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 250.859016][ T28] audit: type=1400 audit(1780058536.785:1781): avc: denied { unmount } for pid=13610 comm="syz.7.3343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 250.969978][T13616] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3345'. [ 251.246696][ T28] audit: type=1400 audit(1780058537.175:1782): avc: denied { listen } for pid=13629 comm="syz.7.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.335148][T13636] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3352'. [ 251.750350][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'. [ 251.777055][T13659] ip6gre1: entered promiscuous mode [ 251.792675][T13659] ip6gre1: entered allmulticast mode [ 251.838517][T13659] netlink: 'syz.2.3362': attribute type 6 has an invalid length. [ 251.866936][T13659] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3362'. [ 252.295734][T13685] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 252.311011][T13685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.336917][T13685] vlan4: entered allmulticast mode [ 252.352267][T13685] bond4: entered allmulticast mode [ 252.401640][T13685] bond4: (slave geneve3): making interface the new active one [ 252.421656][T13685] geneve3: entered allmulticast mode [ 252.428493][T13685] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 252.437370][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.445922][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.456930][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.465325][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.556970][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 252.580351][T13694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.598659][T13694] ipvlan3: entered allmulticast mode [ 252.604050][T13694] bond7: entered allmulticast mode [ 252.615275][T13694] bond7: (slave ipip1): refused to change device type [ 252.728070][ T28] audit: type=1400 audit(1780058538.655:1783): avc: denied { ioctl } for pid=13711 comm="syz.7.3384" path="socket:[56659]" dev="sockfs" ino=56659 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.235866][ T28] audit: type=1326 audit(1780058539.165:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 253.300243][ T28] audit: type=1326 audit(1780058539.165:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 253.346275][ T28] audit: type=1326 audit(1780058539.165:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 253.393164][ T28] audit: type=1326 audit(1780058539.165:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 253.460809][ T28] audit: type=1326 audit(1780058539.165:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 253.518788][ T28] audit: type=1326 audit(1780058539.165:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 253.553184][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3400'. [ 253.578783][ T28] audit: type=1326 audit(1780058539.165:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.1.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 254.339428][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3420'. [ 255.103915][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3429'. [ 255.378955][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 255.391908][ T344] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.393068][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 255.408536][ T344] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.437193][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 255.439103][ T344] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.455418][ T344] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.516019][T13862] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3446'. [ 255.564380][ T4214] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.573141][ T4214] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.592730][ T4214] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.605945][ T4214] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.652123][ T4214] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.660827][ T4214] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.669278][ T4214] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.677811][ T4214] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.802103][T13871] tipc: Enabling of bearer rejected, failed to enable media [ 256.044361][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 256.044379][ T28] audit: type=1400 audit(1780058541.975:1809): avc: denied { map } for pid=13892 comm="syz.1.3457" path="socket:[57609]" dev="sockfs" ino=57609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.134041][ T28] audit: type=1400 audit(1780058541.975:1810): avc: denied { read accept } for pid=13892 comm="syz.1.3457" path="socket:[57609]" dev="sockfs" ino=57609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.253918][ T28] audit: type=1400 audit(1780058542.185:1811): avc: denied { mounton } for pid=13913 comm="syz.7.3467" path="/364/file0" dev="tmpfs" ino=1892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 256.297115][T13922] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3470'. [ 256.335050][T13922] geneve2: entered promiscuous mode [ 256.345989][ T5073] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.358216][ T5073] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.374028][ T5073] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.390078][ T5073] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.876520][T13957] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3482'. [ 258.075358][T14007] batadv_slave_0: entered promiscuous mode [ 258.081679][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 258.092287][T14007] batadv_slave_0 (unregistering): left promiscuous mode [ 258.100836][T14007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.220559][T14013] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 258.246685][T14013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.259405][T14013] vlan4: entered allmulticast mode [ 258.265009][T14013] veth0_to_bond: entered allmulticast mode [ 258.271853][T14013] bond2: (slave vlan4): Opening slave failed [ 258.363517][T14022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.384021][T14022] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 258.472413][ T344] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.592402][ T344] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.979037][T14042] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 259.141842][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'. [ 259.937406][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3532'. [ 259.982823][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 259.991958][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 260.066962][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 260.092727][T14096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.128437][T14100] vlan4: entered allmulticast mode [ 260.145952][T14100] bond4: entered allmulticast mode [ 260.183658][T14096] bond4: (slave wireguard0): refused to change device type [ 261.101010][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 261.140818][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 261.588671][ T28] audit: type=1400 audit(1780058547.515:1812): avc: denied { name_bind } for pid=14167 comm="syz.0.3563" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 263.273803][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3580'. [ 263.326996][T14211] macvlan0: entered allmulticast mode [ 263.352533][T14211] gretap0: entered allmulticast mode [ 263.455852][T14213] ref_ctr_offset mismatch. inode: 0x5cc offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 263.835178][T14206] kexec: Could not allocate control_code_buffer [ 263.892163][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 263.905622][T14225] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 263.921520][T14225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3587'. [ 265.585553][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3601'. [ 265.743865][T14287] netlink: 'syz.8.3607': attribute type 7 has an invalid length. [ 265.777111][T14291] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3609'. [ 265.792462][T14291] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3609'. [ 265.819694][T14291] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3609'. [ 265.988248][T14299] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3613'. [ 266.616762][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3626'. [ 267.514877][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'. [ 267.951056][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3639'. [ 267.969891][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 268.114425][T14425] tipc: Enabling of bearer rejected, failed to enable media [ 268.258384][ T28] audit: type=1400 audit(1780058554.185:1813): avc: denied { connect } for pid=14441 comm="syz.1.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.164971][T14440] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3651'. [ 269.823078][T14488] netlink: 'syz.2.3674': attribute type 2 has an invalid length. [ 269.867557][T14494] netlink: 'syz.0.3686': attribute type 2 has an invalid length. [ 270.301419][ T28] audit: type=1400 audit(1780058556.225:1814): avc: denied { shutdown } for pid=14513 comm="syz.0.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.656017][T14539] bridge_slave_0: left allmulticast mode [ 270.661863][T14539] bridge_slave_0: left promiscuous mode [ 270.671107][T14539] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.679578][ T28] audit: type=1400 audit(1780058556.605:1815): avc: denied { accept } for pid=14538 comm="syz.8.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.680045][T14539] bridge_slave_1: left allmulticast mode [ 270.705462][T14539] bridge_slave_1: left promiscuous mode [ 270.711646][T14539] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.722728][T14539] team0: Port device team_slave_0 removed [ 270.730319][T14539] team0: Port device team_slave_1 removed [ 270.736296][T14539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.747149][T14539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.759356][T14539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.777071][T14541] team0: Mode changed to "loadbalance" [ 271.167370][ T28] audit: type=1400 audit(1780058557.095:1816): avc: denied { create } for pid=14548 comm="syz.2.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 271.260133][T14557] netlink: 'syz.2.3701': attribute type 1 has an invalid length. [ 271.867876][ T28] audit: type=1400 audit(1780058557.795:1817): avc: denied { read } for pid=14575 comm="syz.1.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.173223][T14594] __nla_validate_parse: 2 callbacks suppressed [ 272.173241][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3716'. [ 272.207408][ T310] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.214811][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3716'. [ 272.239183][ T310] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.261189][T14311] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.274243][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3716'. [ 272.283432][T14311] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.322140][ T28] audit: type=1400 audit(1780058558.245:1818): avc: denied { read } for pid=14598 comm="syz.0.3719" name="file0" dev="tmpfs" ino=3917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.351253][T14599] block device autoloading is deprecated and will be removed. [ 272.887395][ T28] audit: type=1326 audit(1780058558.815:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14630 comm="syz.7.3733" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 272.926448][ T28] audit: type=1326 audit(1780058558.815:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14630 comm="syz.7.3733" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 272.953860][ T28] audit: type=1326 audit(1780058558.815:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14630 comm="syz.7.3733" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 272.981498][ T28] audit: type=1326 audit(1780058558.815:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14630 comm="syz.7.3733" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 273.979405][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 273.979498][ T28] audit: type=1326 audit(1780058559.905:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.038242][ T28] audit: type=1326 audit(1780058559.905:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.104516][ T28] audit: type=1326 audit(1780058559.905:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.156619][ T28] audit: type=1326 audit(1780058559.905:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.208195][ T28] audit: type=1326 audit(1780058559.935:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.258594][ T28] audit: type=1326 audit(1780058559.935:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.322434][ T28] audit: type=1326 audit(1780058559.935:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.328737][T14677] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3753'. [ 274.363048][ T28] audit: type=1326 audit(1780058559.935:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.398243][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3753'. [ 274.436414][ T28] audit: type=1326 audit(1780058559.935:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.485562][T14681] tipc: Enabling of bearer rejected, failed to enable media [ 274.512711][ T28] audit: type=1326 audit(1780058559.945:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14670 comm="syz.1.3751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f468be8ce59 code=0x7ffc0000 [ 274.726321][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 275.063211][T14679] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3754'. [ 275.248785][T14707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3767'. [ 275.355424][T14713] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 275.712219][T14739] netlink: 'syz.8.3780': attribute type 298 has an invalid length. [ 275.750094][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 275.765851][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 277.011346][T14799] tipc: Enabling of bearer rejected, failed to enable media [ 277.346206][T14810] __nla_validate_parse: 5 callbacks suppressed [ 277.346264][T14810] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3808'. [ 277.386705][T14812] netlink: 'syz.8.3809': attribute type 1 has an invalid length. [ 278.330176][T14852] netem: change failed [ 278.768511][T14850] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3824'. [ 279.107995][T14871] netlink: 'syz.0.3830': attribute type 1 has an invalid length. [ 279.235210][T14878] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3834'. [ 279.249356][T14878] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3834'. [ 279.451462][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 279.485781][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 279.500942][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 279.523542][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 279.534799][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 280.625209][T14944] tipc: Enabling of bearer rejected, failed to enable media [ 280.657017][T14949] bond6: entered allmulticast mode [ 280.670654][T14949] macvlan1: entered promiscuous mode [ 280.676328][T14949] macvlan1: entered allmulticast mode [ 280.682619][T14949] bond6: (slave macvlan1): Opening slave failed [ 281.398661][T14972] tipc: Enabling of bearer rejected, failed to enable media [ 281.650281][T14979] macsec0: entered allmulticast mode [ 283.477110][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3900'. [ 283.534577][T15042] macvlan2: entered promiscuous mode [ 283.540044][T15042] macvlan2: entered allmulticast mode [ 283.546545][T15042] bond6: entered promiscuous mode [ 283.552035][T15042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.560636][T15042] bond6: left promiscuous mode [ 286.901363][T15082] tipc: Started in network mode [ 286.922469][T15082] tipc: Node identity 4, cluster identity 4711 [ 286.929073][T15082] tipc: Node number set to 4 [ 287.114566][ T9058] IPVS: starting estimator thread 0... [ 287.203526][T15103] IPVS: using max 2688 ests per chain, 134400 per kthread [ 287.604317][T14363] IPVS: stop unused estimator thread 0... [ 287.626015][T15126] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.045506][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3951'. [ 289.077435][T15174] netlink: 'syz.1.3951': attribute type 7 has an invalid length. [ 289.098601][T15174] netlink: 'syz.1.3951': attribute type 8 has an invalid length. [ 289.111005][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3951'. [ 290.015248][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3964'. [ 290.045801][T15215] team1: entered promiscuous mode [ 290.054635][T15215] team1: entered allmulticast mode [ 290.066161][T15215] 8021q: adding VLAN 0 to HW filter on device team1 [ 290.100495][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3964'. [ 290.127625][T15215] team2: entered promiscuous mode [ 290.142414][T15215] team2: entered allmulticast mode [ 290.155214][T15215] 8021q: adding VLAN 0 to HW filter on device team2 [ 290.224109][T15217] netlink: 'syz.7.3965': attribute type 4 has an invalid length. [ 290.453742][T15222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3968'. [ 290.531296][T15222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3968'. [ 290.643160][T15238] dns_resolver: Unsupported server list version (0) [ 290.654628][T15222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3968'. [ 290.712647][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 290.712674][ T28] audit: type=1400 audit(3927542480.643:1868): avc: denied { listen } for pid=15242 comm="syz.1.3975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.802808][T15250] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 290.812055][T15250] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 291.722962][T15267] syz.0.3983 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 291.732703][T15267] CPU: 1 UID: 0 PID: 15267 Comm: syz.0.3983 Not tainted syzkaller #0 PREEMPT(lazy) [ 291.732730][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.732793][T15267] Call Trace: [ 291.732800][T15267] [ 291.732809][T15267] __dump_stack+0x1d/0x30 [ 291.732834][T15267] dump_stack_lvl+0x95/0xd0 [ 291.732856][T15267] dump_stack+0x15/0x1b [ 291.732927][T15267] dump_header+0x80/0x240 [ 291.732957][T15267] oom_kill_process+0x295/0x350 [ 291.732989][T15267] out_of_memory+0x97d/0xb80 [ 291.733027][T15267] try_charge_memcg+0x62f/0xa10 [ 291.733139][T15267] charge_memcg+0x6d/0x120 [ 291.733230][T15267] __mem_cgroup_charge+0x28/0xb0 [ 291.733282][T15267] shmem_get_folio_gfp+0x47b/0xd60 [ 291.733308][T15267] shmem_write_begin+0xfc/0x1f0 [ 291.733329][T15267] generic_perform_write+0x183/0x490 [ 291.733350][T15267] ? current_time+0x188/0x240 [ 291.733410][T15267] shmem_file_write_iter+0xc5/0xf0 [ 291.733437][T15267] __kernel_write_iter+0x319/0x590 [ 291.733466][T15267] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 291.733509][T15267] dump_user_range+0xa73/0xd00 [ 291.733540][T15267] elf_core_dump+0x21a2/0x2330 [ 291.733572][T15267] ? 0xffffffffff600000 [ 291.733597][T15267] coredump_write+0xabd/0xdb0 [ 291.733636][T15267] vfs_coredump+0x26dd/0x31e0 [ 291.733668][T15267] ? __memcg_slab_free_hook+0x75/0x2c0 [ 291.733694][T15267] ? __sigqueue_free+0xf4/0x130 [ 291.733718][T15267] ? proc_coredump_connector+0x160/0x2b0 [ 291.733815][T15267] ? __sigqueue_free+0xf4/0x130 [ 291.733840][T15267] ? kmem_cache_free+0xca/0x380 [ 291.733864][T15267] get_signal+0xd5c/0xf20 [ 291.733899][T15267] arch_do_signal_or_restart+0x96/0x480 [ 291.733942][T15267] irqentry_exit+0x145/0x5d0 [ 291.733970][T15267] asm_exc_page_fault+0x26/0x30 [ 291.733990][T15267] RIP: 0033:0x7fe2fe54ce61 [ 291.734008][T15267] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 291.734058][T15267] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 291.734078][T15267] RAX: 0000000000000000 RBX: 00007fe2fe7c6090 RCX: 00007fe2fe54ce59 [ 291.734093][T15267] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 291.734107][T15267] RBP: 00007fe2fe5e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 291.734121][T15267] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.734186][T15267] R13: 00007fe2fe7c6128 R14: 00007fe2fe7c6090 R15: 00007ffc4f55e608 [ 291.734208][T15267] [ 291.734216][T15267] memory: usage 307200kB, limit 307200kB, failcnt 1883 [ 291.986266][T15267] memory+swap: usage 352024kB, limit 9007199254740988kB, failcnt 0 [ 291.994215][T15267] kmem: usage 216548kB, limit 9007199254740988kB, failcnt 0 [ 292.001522][T15267] Memory cgroup stats for /syz0: [ 292.001854][T15267] cache 92454912 [ 292.010391][T15267] rss 356352 [ 292.013640][T15267] shmem 92450816 [ 292.017264][T15267] mapped_file 11763712 [ 292.021421][T15267] dirty 0 [ 292.024412][T15267] writeback 0 [ 292.027708][T15267] workingset_refault_anon 1912 [ 292.032519][T15267] workingset_refault_file 4019 [ 292.037318][T15267] swap 45899776 [ 292.040835][T15267] swapcached 55664640 [ 292.044954][T15267] pgpgin 386452 [ 292.048470][T15267] pgpgout 363789 [ 292.052038][T15267] pgfault 246815 [ 292.055628][T15267] pgmajfault 4430 [ 292.059270][T15267] inactive_anon 70500352 [ 292.063556][T15267] active_anon 22323200 [ 292.067670][T15267] inactive_file 0 [ 292.071310][T15267] active_file 4096 [ 292.075102][T15267] unevictable 0 [ 292.078568][T15267] hierarchical_memory_limit 314572800 [ 292.084061][T15267] hierarchical_memsw_limit 9223372036854771712 [ 292.090251][T15267] total_cache 92454912 [ 292.094381][T15267] total_rss 356352 [ 292.098109][T15267] total_shmem 92450816 [ 292.102184][T15267] total_mapped_file 11763712 [ 292.106851][T15267] total_dirty 0 [ 292.110317][T15267] total_writeback 0 [ 292.114182][T15267] total_workingset_refault_anon 1912 [ 292.119537][T15267] total_workingset_refault_file 4019 [ 292.124875][T15267] total_swap 45899776 [ 292.128932][T15267] total_swapcached 55664640 [ 292.133478][T15267] total_pgpgin 386452 [ 292.137475][T15267] total_pgpgout 363789 [ 292.141553][T15267] total_pgfault 246815 [ 292.145655][T15267] total_pgmajfault 4430 [ 292.149817][T15267] total_inactive_anon 70500352 [ 292.154626][T15267] total_active_anon 22323200 [ 292.159225][T15267] total_inactive_file 0 [ 292.163445][T15267] total_active_file 4096 [ 292.167721][T15267] total_unevictable 0 [ 292.171714][T15267] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.483,pid=5126,uid=0 [ 292.186398][T15267] Memory cgroup out of memory: Killed process 5126 (syz.0.483) total-vm:87892kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 292.209638][T15267] syz.0.3983 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 292.219298][T15267] CPU: 1 UID: 0 PID: 15267 Comm: syz.0.3983 Not tainted syzkaller #0 PREEMPT(lazy) [ 292.219325][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.219337][T15267] Call Trace: [ 292.219347][T15267] [ 292.219355][T15267] __dump_stack+0x1d/0x30 [ 292.219377][T15267] dump_stack_lvl+0x95/0xd0 [ 292.219395][T15267] dump_stack+0x15/0x1b [ 292.219411][T15267] dump_header+0x80/0x240 [ 292.219431][T15267] oom_kill_process+0x295/0x350 [ 292.219525][T15267] out_of_memory+0x97d/0xb80 [ 292.219552][T15267] try_charge_memcg+0x62f/0xa10 [ 292.219604][T15267] charge_memcg+0x6d/0x120 [ 292.219626][T15267] __mem_cgroup_charge+0x28/0xb0 [ 292.219676][T15267] shmem_get_folio_gfp+0x47b/0xd60 [ 292.219700][T15267] shmem_write_begin+0xfc/0x1f0 [ 292.219786][T15267] generic_perform_write+0x183/0x490 [ 292.219808][T15267] shmem_file_write_iter+0xc5/0xf0 [ 292.219831][T15267] __kernel_write_iter+0x319/0x590 [ 292.219972][T15267] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 292.219998][T15267] dump_user_range+0xa73/0xd00 [ 292.220092][T15267] elf_core_dump+0x21a2/0x2330 [ 292.220120][T15267] ? 0xffffffffff600000 [ 292.220142][T15267] coredump_write+0xabd/0xdb0 [ 292.220168][T15267] vfs_coredump+0x26dd/0x31e0 [ 292.220254][T15267] ? __memcg_slab_free_hook+0x75/0x2c0 [ 292.220340][T15267] ? __sigqueue_free+0xf4/0x130 [ 292.220413][T15267] ? proc_coredump_connector+0x160/0x2b0 [ 292.220432][T15267] ? __sigqueue_free+0xf4/0x130 [ 292.220451][T15267] ? kmem_cache_free+0xca/0x380 [ 292.220502][T15267] get_signal+0xd5c/0xf20 [ 292.220536][T15267] arch_do_signal_or_restart+0x96/0x480 [ 292.220617][T15267] irqentry_exit+0x145/0x5d0 [ 292.220644][T15267] asm_exc_page_fault+0x26/0x30 [ 292.220663][T15267] RIP: 0033:0x7fe2fe54ce61 [ 292.220681][T15267] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 292.220769][T15267] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 292.220817][T15267] RAX: 0000000000000000 RBX: 00007fe2fe7c6090 RCX: 00007fe2fe54ce59 [ 292.220833][T15267] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 292.220847][T15267] RBP: 00007fe2fe5e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.220871][T15267] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.220886][T15267] R13: 00007fe2fe7c6128 R14: 00007fe2fe7c6090 R15: 00007ffc4f55e608 [ 292.220907][T15267] [ 292.220916][T15267] memory: usage 307200kB, limit 307200kB, failcnt 1914 [ 292.468195][T15267] memory+swap: usage 351856kB, limit 9007199254740988kB, failcnt 0 [ 292.476177][T15267] kmem: usage 216516kB, limit 9007199254740988kB, failcnt 0 [ 292.483505][T15267] Memory cgroup stats for /syz0: [ 292.483791][T15267] cache 92483584 [ 292.492280][T15267] rss 356352 [ 292.495556][T15267] shmem 92454912 [ 292.499139][T15267] mapped_file 11788288 [ 292.503245][T15267] dirty 0 [ 292.506187][T15267] writeback 0 [ 292.509558][T15267] workingset_refault_anon 1912 [ 292.514395][T15267] workingset_refault_file 4026 [ 292.519169][T15267] swap 45727744 [ 292.522670][T15267] swapcached 55664640 [ 292.526783][T15267] pgpgin 386460 [ 292.530249][T15267] pgpgout 363790 [ 292.533840][T15267] pgfault 246816 [ 292.537753][T15267] pgmajfault 4431 [ 292.541391][T15267] inactive_anon 70500352 [ 292.545663][T15267] active_anon 22327296 [ 292.549751][T15267] inactive_file 0 [ 292.553425][T15267] active_file 28672 [ 292.557267][T15267] unevictable 0 [ 292.560746][T15267] hierarchical_memory_limit 314572800 [ 292.566255][T15267] hierarchical_memsw_limit 9223372036854771712 [ 292.572473][T15267] total_cache 92483584 [ 292.576551][T15267] total_rss 356352 [ 292.580281][T15267] total_shmem 92454912 [ 292.584392][T15267] total_mapped_file 11788288 [ 292.589147][T15267] total_dirty 0 [ 292.592639][T15267] total_writeback 0 [ 292.596590][T15267] total_workingset_refault_anon 1912 [ 292.601907][T15267] total_workingset_refault_file 4026 [ 292.607341][T15267] total_swap 45727744 [ 292.611339][T15267] total_swapcached 55664640 [ 292.615953][T15267] total_pgpgin 386460 [ 292.619945][T15267] total_pgpgout 363790 [ 292.624113][T15267] total_pgfault 246816 [ 292.628188][T15267] total_pgmajfault 4431 [ 292.632387][T15267] total_inactive_anon 70500352 [ 292.637157][T15267] total_active_anon 22327296 [ 292.641839][T15267] total_inactive_file 0 [ 292.646178][T15267] total_active_file 28672 [ 292.656921][T15267] total_unevictable 0 [ 292.660953][T15267] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3983,pid=15267,uid=0 [ 292.679477][T15267] Memory cgroup out of memory: Killed process 15267 (syz.0.3983) total-vm:94168kB, anon-rss:1424kB, file-rss:53828kB, shmem-rss:11480kB, UID:0 pgtables:220kB oom_score_adj:0 [ 293.598243][T15292] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 293.612301][T15292] bond5: entered allmulticast mode [ 293.629350][T15292] ip6gretap2: entered promiscuous mode [ 293.641236][T15292] ip6gretap2: entered allmulticast mode [ 293.651083][T15292] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 294.102446][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4001'. [ 294.186010][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4001'. [ 294.304039][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4001'. [ 294.446576][T15328] netlink: 'syz.8.4005': attribute type 1 has an invalid length. [ 294.467355][T15328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.506106][T15328] bond7: entered allmulticast mode [ 294.525018][T15328] bond7: (slave ip6gretap1): making interface the new active one [ 294.549024][T15328] ip6gretap1: entered allmulticast mode [ 294.566901][T15328] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 294.676161][ T28] audit: type=1326 audit(3927542484.613:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 294.746946][ T28] audit: type=1326 audit(3927542484.613:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 294.793834][ T28] audit: type=1326 audit(3927542484.643:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 294.843689][ T28] audit: type=1326 audit(3927542484.643:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 294.891969][ T28] audit: type=1326 audit(3927542484.643:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 294.941009][ T28] audit: type=1326 audit(3927542484.643:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 294.983867][ T28] audit: type=1326 audit(3927542484.643:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 295.028183][ T28] audit: type=1326 audit(3927542484.643:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 295.056018][ T28] audit: type=1326 audit(3927542484.643:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.8.4007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80b71ce59 code=0x7ffc0000 [ 297.264057][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4022'. [ 297.420721][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4022'. [ 298.051310][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 298.051370][ T28] audit: type=1326 audit(3927542487.983:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.1.4026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468be8ce59 code=0x7fc00000 [ 298.129601][ T28] audit: type=1326 audit(3927542488.023:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.1.4026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f468be8ce59 code=0x7fc00000 [ 298.376078][T15415] bond0: (slave vlan3): Opening slave failed [ 298.492424][T15422] netlink: 'syz.7.4037': attribute type 1 has an invalid length. [ 298.547897][ T28] audit: type=1400 audit(3927542488.483:1891): avc: denied { create } for pid=15424 comm="syz.2.4038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 298.632984][T15422] bond7: (slave veth5): Enslaving as an active interface with a down link [ 298.662396][T15422] gretap0: entered promiscuous mode [ 298.679113][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.687111][T15422] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.697644][T15422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.727502][T15422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.736403][T15422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.757180][T15422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.767890][T15422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.795623][T15422] veth1_vlan: left promiscuous mode [ 298.805891][T15422] veth0_vlan: left promiscuous mode [ 298.815677][T15422] veth0_vlan: entered promiscuous mode [ 298.829337][T15422] veth1_vlan: entered promiscuous mode [ 298.840963][T15422] veth1_macvtap: left promiscuous mode [ 298.854640][T15422] veth0_macvtap: left promiscuous mode [ 298.866498][T15422] veth0_macvtap: entered promiscuous mode [ 298.875327][T15422] veth1_macvtap: entered promiscuous mode [ 298.881664][T15422] veth1_macvtap: entered allmulticast mode [ 298.899870][T15422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.915301][T15422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.931406][T15422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.984631][T15422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.000995][T15422] 8021q: adding VLAN 0 to HW filter on device eth0 [ 299.015682][T15422] 8021q: adding VLAN 0 to HW filter on device eth1 [ 299.028857][T15422] 8021q: adding VLAN 0 to HW filter on device eth2 [ 299.041739][T15422] 8021q: adding VLAN 0 to HW filter on device eth3 [ 299.059697][T15422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.068575][T15422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.077518][T15422] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 299.091744][T15422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.104481][ T35] bridge0: entered promiscuous mode [ 299.115537][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.122734][ T5073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.133350][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.140536][ T5073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.181794][T15447] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.4043'. [ 299.191336][T15431] bond7: (slave dummy0): making interface the new active one [ 299.201006][T15431] dummy0: entered promiscuous mode [ 299.207261][T15431] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 299.216388][T14350] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.225153][T14350] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.251745][T14350] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.262915][T14350] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.312759][T14319] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 299.366218][T15458] syz_tun: entered promiscuous mode [ 299.371902][T15458] vlan3: entered promiscuous mode [ 299.792693][ T28] audit: type=1400 audit(3927542489.723:1892): avc: denied { setattr } for pid=15466 comm="syz.8.4051" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.844815][ T9068] IPVS: starting estimator thread 0... [ 299.881101][T15465] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 299.933033][T15468] IPVS: using max 2304 ests per chain, 115200 per kthread [ 300.269119][T15489] netlink: 'syz.2.4058': attribute type 1 has an invalid length. [ 300.316465][T15489] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.356135][T15491] bond7: entered allmulticast mode [ 300.434473][T15489] bond7: (slave ip6gretap1): making interface the new active one [ 300.453689][T15489] ip6gretap1: entered allmulticast mode [ 300.460125][T15489] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 300.579135][T15495] geneve0: entered promiscuous mode [ 300.584760][T15495] geneve0: entered allmulticast mode [ 300.586303][T15508] netlink: 'syz.1.4065': attribute type 1 has an invalid length. [ 300.592942][ T28] audit: type=1326 audit(3927542490.523:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.7.4063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 300.624065][ T28] audit: type=1326 audit(3927542490.523:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.7.4063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 300.633649][T15511] netlink: 'syz.8.4066': attribute type 4 has an invalid length. [ 300.649701][ T28] audit: type=1326 audit(3927542490.523:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.7.4063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 300.685151][ T28] audit: type=1326 audit(3927542490.523:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.7.4063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 300.691516][T15504] netlink: 'syz.8.4066': attribute type 4 has an invalid length. [ 300.711496][ T28] audit: type=1326 audit(3927542490.523:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.7.4063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 300.725307][T15508] bond6: entered promiscuous mode [ 300.747599][ T28] audit: type=1326 audit(3927542490.523:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.7.4063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 300.749679][T15508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.859093][T15508] bond6: (slave bridge3): making interface the new active one [ 300.867400][T15508] bridge3: entered promiscuous mode [ 300.893245][T15508] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 301.779539][T15536] netlink: 'syz.7.4073': attribute type 1 has an invalid length. [ 301.799687][T15536] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.4073'. [ 302.016944][T15540] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4077'. [ 302.264593][T15552] sctp: [Deprecated]: syz.1.4080 (pid 15552) Use of int in max_burst socket option deprecated. [ 302.264593][T15552] Use struct sctp_assoc_value instead [ 302.338975][T15559] netlink: 'syz.1.4084': attribute type 10 has an invalid length. [ 302.347210][T15559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4084'. [ 302.357218][T15559] bond0: entered promiscuous mode [ 302.362496][T15559] bond_slave_0: entered promiscuous mode [ 302.368410][T15559] bond_slave_1: entered promiscuous mode [ 302.375401][T15559] bridge0: port 3(bond0) entered blocking state [ 302.381973][T15559] bridge0: port 3(bond0) entered disabled state [ 302.388758][T15559] bond0: entered allmulticast mode [ 302.394464][T15559] bond_slave_0: entered allmulticast mode [ 302.400407][T15559] bond_slave_1: entered allmulticast mode [ 302.644015][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4093'. [ 302.666978][T15581] xfrm1: entered promiscuous mode [ 302.679006][T15581] xfrm1: entered allmulticast mode [ 302.689980][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4093'. [ 303.557420][T15588] netlink: 6 bytes leftover after parsing attributes in process `syz.8.4096'. [ 303.575195][T15588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.407456][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4105'. [ 304.532364][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 304.532380][ T28] audit: type=1400 audit(3927542494.463:2027): avc: denied { mount } for pid=15626 comm="syz.0.4109" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 304.627683][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4113'. [ 304.654883][T15636] hsr_slave_1 (unregistering): left promiscuous mode [ 305.330588][T15646] batman_adv: batadv0: Adding interface: dummy0 [ 305.346731][T15646] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.372725][T15646] batman_adv: batadv0: Interface activated: dummy0 [ 305.439033][T15651] uprobe: syz.8.4118:15651 failed to unregister, leaking uprobe [ 306.390588][ T28] audit: type=1400 audit(3927542496.323:2028): avc: denied { nlmsg_write } for pid=15696 comm="syz.0.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 306.712252][T15721] netlink: 'syz.7.4146': attribute type 39 has an invalid length. [ 307.394884][T15742] netlink: 'syz.0.4155': attribute type 10 has an invalid length. [ 307.410016][T15742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4155'. [ 307.426120][T15742] bond0: entered promiscuous mode [ 307.435130][T15742] bond_slave_0: entered promiscuous mode [ 307.450081][T15742] bond_slave_1: entered promiscuous mode [ 307.481617][T15742] bridge0: port 4(bond0) entered blocking state [ 307.504235][T15742] bridge0: port 4(bond0) entered disabled state [ 307.520053][T15742] bond0: entered allmulticast mode [ 307.537053][T15742] bond_slave_0: entered allmulticast mode [ 307.554724][T15742] bond_slave_1: entered allmulticast mode [ 307.857766][ T28] audit: type=1326 audit(3927542497.793:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.0.4157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2fe54ce59 code=0x0 [ 307.959862][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4158'. [ 307.987808][T15757] macvlan1: entered promiscuous mode [ 307.996550][T15757] bond0: entered promiscuous mode [ 308.005713][T15757] bond_slave_0: entered promiscuous mode [ 308.012562][T15757] bond_slave_1: entered promiscuous mode [ 308.021121][T15757] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 308.240570][T15731] syz.7.4151 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 308.259217][T15731] CPU: 1 UID: 0 PID: 15731 Comm: syz.7.4151 Not tainted syzkaller #0 PREEMPT(lazy) [ 308.259294][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.259310][T15731] Call Trace: [ 308.259317][T15731] [ 308.259326][T15731] __dump_stack+0x1d/0x30 [ 308.259354][T15731] dump_stack_lvl+0x95/0xd0 [ 308.259373][T15731] dump_stack+0x15/0x1b [ 308.259407][T15731] dump_header+0x80/0x240 [ 308.259432][T15731] oom_kill_process+0x295/0x350 [ 308.259466][T15731] out_of_memory+0x97d/0xb80 [ 308.259501][T15731] try_charge_memcg+0x62f/0xa10 [ 308.259603][T15731] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 308.259628][T15731] __alloc_frozen_pages_noprof+0x18a/0x350 [ 308.259666][T15731] alloc_pages_mpol+0xb3/0x260 [ 308.259695][T15731] alloc_pages_noprof+0x8f/0x140 [ 308.259720][T15731] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 308.259812][T15731] __kvmalloc_node_noprof+0x3d4/0x640 [ 308.259836][T15731] ? futex_hash_allocate+0x190/0x9a0 [ 308.259925][T15731] ? futex_hash_allocate+0x190/0x9a0 [ 308.259957][T15731] futex_hash_allocate+0x190/0x9a0 [ 308.260043][T15731] ? __schedule+0x951/0xd40 [ 308.260062][T15731] ? cap_task_prctl+0x13f/0x6b0 [ 308.260163][T15731] futex_hash_prctl+0xd8/0xf0 [ 308.260261][T15731] __se_sys_prctl+0x4f4/0x1400 [ 308.260290][T15731] __x64_sys_prctl+0x67/0x80 [ 308.260316][T15731] x64_sys_call+0x2533/0x3020 [ 308.260337][T15731] do_syscall_64+0x12c/0x3b0 [ 308.260533][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.260557][T15731] RIP: 0033:0x7ff2eac9ce59 [ 308.260606][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.260638][T15731] RSP: 002b:00007ff2e96ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 308.260706][T15731] RAX: ffffffffffffffda RBX: 00007ff2eaf15fa0 RCX: 00007ff2eac9ce59 [ 308.260724][T15731] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 308.260737][T15731] RBP: 00007ff2ead32d6f R08: 0000000000000000 R09: 0000000000000000 [ 308.260750][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.260763][T15731] R13: 00007ff2eaf16038 R14: 00007ff2eaf15fa0 R15: 00007ffc2cbe0318 [ 308.260841][T15731] [ 308.493642][T15731] memory: usage 307200kB, limit 307200kB, failcnt 615 [ 308.507500][T15731] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 308.518115][ T28] audit: type=1400 audit(3927542498.453:2030): avc: denied { create } for pid=15765 comm="syz.1.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 308.542074][T15731] kmem: usage 306768kB, limit 9007199254740988kB, failcnt 0 [ 308.549922][T15731] Memory cgroup stats for /syz7: [ 308.550213][T15731] cache 65536 [ 308.559250][ T28] audit: type=1400 audit(3927542498.463:2031): avc: denied { write } for pid=15765 comm="syz.1.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 308.579998][T15731] rss 376832 [ 308.583274][T15731] shmem 65536 [ 308.588206][T15731] mapped_file 0 [ 308.599268][T15731] dirty 0 [ 308.609169][T15731] writeback 0 [ 308.614155][T15731] workingset_refault_anon 4573 [ 308.631878][T15731] workingset_refault_file 2176 [ 308.636947][T15731] swap 176128 [ 308.641676][T15731] swapcached 51970048 [ 308.650506][T15731] pgpgin 234972 [ 308.661938][T15731] pgpgout 234864 [ 308.669562][T15731] pgfault 210501 [ 308.682524][T15731] pgmajfault 2668 [ 308.692616][T15731] inactive_anon 155648 [ 308.702525][T15731] active_anon 286720 [ 308.715782][T15731] inactive_file 0 [ 308.725858][T15731] active_file 0 [ 308.732689][T15731] unevictable 0 [ 308.739453][T15731] hierarchical_memory_limit 314572800 [ 308.751861][T15731] hierarchical_memsw_limit 9223372036854771712 [ 308.766497][T15731] total_cache 65536 [ 308.770583][T15731] total_rss 376832 [ 308.786207][T15731] total_shmem 65536 [ 308.807966][T15731] total_mapped_file 0 [ 308.818282][T15731] total_dirty 0 [ 308.826300][T15731] total_writeback 0 [ 308.830159][T15731] total_workingset_refault_anon 4573 [ 308.835836][T15731] total_workingset_refault_file 2176 [ 308.841166][T15731] total_swap 176128 [ 308.845250][T15731] total_swapcached 51970048 [ 308.849855][T15731] total_pgpgin 234972 [ 308.874279][T15731] total_pgpgout 234864 [ 308.879890][T15731] total_pgfault 210501 [ 308.885019][T15731] total_pgmajfault 2668 [ 308.889499][T15731] total_inactive_anon 155648 [ 308.894582][T15731] total_active_anon 286720 [ 308.906877][T15731] total_inactive_file 0 [ 308.916051][T15731] total_active_file 0 [ 308.921629][T15731] total_unevictable 0 [ 308.926876][T15731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1677,pid=9171,uid=0 [ 308.942732][T15731] Memory cgroup out of memory: Killed process 9171 (syz.7.1677) total-vm:96084kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 309.040091][T15795] netlink: 'syz.8.4172': attribute type 49 has an invalid length. [ 310.224382][T15831] netlink: 'syz.2.4185': attribute type 49 has an invalid length. [ 310.602555][ T5073] dummy0: left promiscuous mode [ 310.681192][T15853] ref_ctr increment failed for inode: 0x846 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812174ec00 [ 310.701031][T15852] uprobe: syz.8.4193:15852 failed to unregister, leaking uprobe [ 311.272787][T15869] syz.8.4198 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 311.310084][T15869] CPU: 1 UID: 0 PID: 15869 Comm: syz.8.4198 Not tainted syzkaller #0 PREEMPT(lazy) [ 311.310190][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.310203][T15869] Call Trace: [ 311.310212][T15869] [ 311.310221][T15869] __dump_stack+0x1d/0x30 [ 311.310254][T15869] dump_stack_lvl+0x95/0xd0 [ 311.310275][T15869] dump_stack+0x15/0x1b [ 311.310296][T15869] dump_header+0x80/0x240 [ 311.310318][T15869] oom_kill_process+0x295/0x350 [ 311.310422][T15869] out_of_memory+0x97d/0xb80 [ 311.310456][T15869] try_charge_memcg+0x62f/0xa10 [ 311.310492][T15869] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 311.310569][T15869] __alloc_frozen_pages_noprof+0x18a/0x350 [ 311.310630][T15869] alloc_pages_mpol+0xb3/0x260 [ 311.310688][T15869] alloc_pages_noprof+0x8f/0x140 [ 311.310715][T15869] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 311.310749][T15869] __kvmalloc_node_noprof+0x3d4/0x640 [ 311.310773][T15869] ? futex_hash_allocate+0x190/0x9a0 [ 311.310863][T15869] ? futex_hash_allocate+0x190/0x9a0 [ 311.310898][T15869] futex_hash_allocate+0x190/0x9a0 [ 311.310927][T15869] ? cap_task_prctl+0x13f/0x6b0 [ 311.310979][T15869] futex_hash_prctl+0xd8/0xf0 [ 311.311011][T15869] __se_sys_prctl+0x4f4/0x1400 [ 311.311044][T15869] __x64_sys_prctl+0x67/0x80 [ 311.311066][T15869] x64_sys_call+0x2533/0x3020 [ 311.311129][T15869] do_syscall_64+0x12c/0x3b0 [ 311.311162][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.311190][T15869] RIP: 0033:0x7fc80b71ce59 [ 311.311276][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.311297][T15869] RSP: 002b:00007fc80a177028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 311.311321][T15869] RAX: ffffffffffffffda RBX: 00007fc80b995fa0 RCX: 00007fc80b71ce59 [ 311.311335][T15869] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 311.311350][T15869] RBP: 00007fc80b7b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 311.311365][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.311378][T15869] R13: 00007fc80b996038 R14: 00007fc80b995fa0 R15: 00007ffc631ebce8 [ 311.311433][T15869] [ 311.527805][T15869] memory: usage 282760kB, limit 307200kB, failcnt 61 [ 311.540010][T15869] memory+swap: usage 282824kB, limit 9007199254740988kB, failcnt 0 [ 311.548052][T15869] kmem: usage 282616kB, limit 9007199254740988kB, failcnt 0 [ 311.555443][T15869] Memory cgroup stats for /syz8: [ 311.555770][T15869] cache 0 [ 311.563792][T15869] rss 86016 [ 311.572055][T15869] shmem 0 [ 311.582404][T15869] mapped_file 0 [ 311.586028][T15869] dirty 0 [ 311.589080][T15869] writeback 0 [ 311.592503][T15869] workingset_refault_anon 2256 [ 311.597336][T15869] workingset_refault_file 0 [ 311.601970][T15869] swap 65536 [ 311.605351][T15869] swapcached 14831616 [ 311.609421][T15869] pgpgin 113157 [ 311.613154][T15869] pgpgout 113123 [ 311.616821][T15869] pgfault 145254 [ 311.620425][T15869] pgmajfault 293 [ 311.624128][T15869] inactive_anon 81920 [ 311.628226][T15869] active_anon 57344 [ 311.632077][T15869] inactive_file 0 [ 311.635881][T15869] active_file 0 [ 311.639556][T15869] unevictable 0 [ 311.643847][T15869] hierarchical_memory_limit 314572800 [ 311.649318][T15869] hierarchical_memsw_limit 9223372036854771712 [ 311.655837][T15869] total_cache 0 [ 311.663772][T15869] total_rss 86016 [ 311.667640][T15869] total_shmem 0 [ 311.671299][T15869] total_mapped_file 0 [ 311.675609][T15869] total_dirty 0 [ 311.682968][T15869] total_writeback 0 [ 311.697664][T15869] total_workingset_refault_anon 2256 [ 311.709147][T15869] total_workingset_refault_file 0 [ 311.720635][T15869] total_swap 65536 [ 311.730199][T15884] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 311.732156][T15869] total_swapcached 14831616 [ 311.750707][T15869] total_pgpgin 113157 [ 311.767215][T15869] total_pgpgout 113123 [ 311.784899][T15869] total_pgfault 145254 [ 311.802376][T15869] total_pgmajfault 293 [ 311.819573][T15869] total_inactive_anon 81920 [ 311.839350][T15869] total_active_anon 57344 [ 311.857479][T15869] total_inactive_file 0 [ 311.869714][T15869] total_active_file 0 [ 311.884280][T15869] total_unevictable 0 [ 311.893289][T15869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4198,pid=15867,uid=0 [ 311.924501][T15869] Memory cgroup out of memory: Killed process 15867 (syz.8.4198) total-vm:96216kB, anon-rss:1356kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 312.130384][T15892] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4207'. [ 312.281918][T15897] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.4209'. [ 312.463850][ T28] audit: type=1326 audit(3927542502.393:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 312.503359][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4213'. [ 312.534009][ T28] audit: type=1326 audit(3927542502.403:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 312.565439][ T28] audit: type=1326 audit(3927542502.403:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 312.606409][ T28] audit: type=1326 audit(3927542502.403:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 312.634022][ T28] audit: type=1326 audit(3927542502.403:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 312.671308][ T28] audit: type=1326 audit(3927542502.403:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 312.746916][ T28] audit: type=1326 audit(3927542502.403:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 313.357430][ T28] audit: type=1326 audit(3927542502.403:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 313.403807][ T28] audit: type=1326 audit(3927542502.403:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 313.480291][ T28] audit: type=1326 audit(3927542502.403:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.4214" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eac9ce59 code=0x7ffc0000 [ 315.000098][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4238'. [ 315.074112][T15987] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 315.085372][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4242'. [ 315.117963][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4243'. [ 315.134671][T15998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4243'. [ 317.015579][T16065] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4269'. [ 317.037567][T16065] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4269'. [ 317.576937][T16086] netlink: 'syz.2.4275': attribute type 4 has an invalid length. [ 317.607037][T16086] netlink: 'syz.2.4275': attribute type 4 has an invalid length. [ 318.732421][T16094] ================================================================== [ 318.736105][ T3301] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 318.740651][T16094] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 318.752711][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 318.752775][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.752845][ T3301] Call Trace: [ 318.752852][ T3301] [ 318.752860][ T3301] __dump_stack+0x1d/0x30 [ 318.752883][ T3301] dump_stack_lvl+0x95/0xd0 [ 318.752967][ T3301] dump_stack+0x15/0x1b [ 318.752986][ T3301] dump_header+0x80/0x240 [ 318.753008][ T3301] oom_kill_process+0x295/0x350 [ 318.753042][ T3301] out_of_memory+0x97d/0xb80 [ 318.753071][ T3301] try_charge_memcg+0x62f/0xa10 [ 318.753226][ T3301] charge_memcg+0x6d/0x120 [ 318.753251][ T3301] __mem_cgroup_charge+0x28/0xb0 [ 318.753276][ T3301] filemap_add_folio+0x110/0x350 [ 318.753359][ T3301] __filemap_get_folio_mpol+0x326/0x680 [ 318.753421][ T3301] filemap_fault+0x462/0xb70 [ 318.753454][ T3301] ? __pfx_filemap_map_pages+0x10/0x10 [ 318.753473][ T3301] handle_mm_fault+0x16cd/0x2e70 [ 318.753499][ T3301] ? __pfx_filemap_fault+0x10/0x10 [ 318.753537][ T3301] do_user_addr_fault+0x62f/0x1050 [ 318.753571][ T3301] ? trace_page_fault_user+0x1f/0xa0 [ 318.753687][ T3301] exc_page_fault+0x62/0xa0 [ 318.753711][ T3301] asm_exc_page_fault+0x26/0x30 [ 318.753732][ T3301] RIP: 0033:0x7f65392aae74 [ 318.753748][ T3301] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 318.753772][ T3301] RSP: 002b:00007ffe3fe311b0 EFLAGS: 00010206 [ 318.753789][ T3301] RAX: 0000001b32a24000 RBX: 0000000000000837 RCX: 000000000004da30 [ 318.753804][ T3301] RDX: 000000000b03e97c RSI: 00007ffe3fe31240 RDI: 0000000000000001 [ 318.753894][ T3301] RBP: 00007ffe3fe311ec R08: 000000002a051c5e R09: 3fffffffffffffff [ 318.753908][ T3301] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 318.753921][ T3301] R13: 00000000000927c0 R14: 000000000004d960 R15: 00007ffe3fe31240 [ 318.754011][ T3301] [ 318.754027][ T3301] memory: usage 307200kB, limit 307200kB, failcnt 715 [ 318.761291][T16094] [ 318.761298][T16094] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 318.761318][T16094] tick_do_update_jiffies64+0x113/0x1c0 [ 318.761347][T16094] tick_nohz_handler+0x8d/0x3d0 [ 318.761371][T16094] __hrtimer_run_queues+0x276/0x4f0 [ 318.775875][ T3301] memory+swap: usage 364340kB, limit 9007199254740988kB, failcnt 0 [ 318.780907][T16094] hrtimer_interrupt+0x261/0x850 [ 318.784738][ T3301] kmem: usage 295932kB, limit 9007199254740988kB, failcnt 0 [ 318.787144][T16094] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 318.787173][T16094] sysvec_apic_timer_interrupt+0x6f/0x80 [ 318.791686][ T3301] Memory cgroup stats for [ 318.795984][T16094] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.796014][T16094] __tsan_read8+0x107/0x190 [ 318.796044][T16094] do_shrink_slab+0xf2/0x660 [ 318.802230][ T3301] /syz2 [ 318.804512][T16094] shrink_slab+0x545/0x8f0 [ 319.042514][T16094] shrink_node+0x6d4/0x20a0 [ 319.047083][T16094] do_try_to_free_pages+0x408/0xc90 [ 319.052301][T16094] try_to_free_mem_cgroup_pages+0x201/0x420 [ 319.058211][T16094] try_charge_memcg+0x373/0xa10 [ 319.063074][T16094] charge_memcg+0x6d/0x120 [ 319.067498][T16094] __mem_cgroup_charge+0x28/0xb0 [ 319.072445][T16094] filemap_add_folio+0x110/0x350 [ 319.077394][T16094] __filemap_get_folio_mpol+0x326/0x680 [ 319.082952][T16094] filemap_fault+0x462/0xb70 [ 319.087555][T16094] handle_mm_fault+0x16cd/0x2e70 [ 319.092504][T16094] do_user_addr_fault+0x62f/0x1050 [ 319.097625][T16094] exc_page_fault+0x62/0xa0 [ 319.102133][T16094] asm_exc_page_fault+0x26/0x30 [ 319.107080][T16094] [ 319.109405][T16094] read to 0xffffffff86c07a00 of 8 bytes by task 16094 on cpu 0: [ 319.117123][T16094] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 319.123385][T16094] count_shadow_nodes+0x6a/0x250 [ 319.128341][T16094] do_shrink_slab+0x63/0x660 [ 319.132942][T16094] shrink_slab+0x545/0x8f0 [ 319.137371][T16094] shrink_node+0x6d4/0x20a0 [ 319.141884][T16094] do_try_to_free_pages+0x408/0xc90 [ 319.147088][T16094] try_to_free_mem_cgroup_pages+0x201/0x420 [ 319.152988][T16094] try_charge_memcg+0x373/0xa10 [ 319.157846][T16094] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 319.163483][T16094] __alloc_frozen_pages_noprof+0x18a/0x350 [ 319.169307][T16094] alloc_pages_mpol+0xb3/0x260 [ 319.174096][T16094] alloc_pages_noprof+0x8f/0x140 [ 319.179049][T16094] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 319.184953][T16094] __kvmalloc_node_noprof+0x3d4/0x640 [ 319.190341][T16094] futex_hash_allocate+0x190/0x9a0 [ 319.195470][T16094] futex_hash_prctl+0xd8/0xf0 [ 319.200158][T16094] __se_sys_prctl+0x4f4/0x1400 [ 319.204944][T16094] __x64_sys_prctl+0x67/0x80 [ 319.209547][T16094] x64_sys_call+0x2533/0x3020 [ 319.214249][T16094] do_syscall_64+0x12c/0x3b0 [ 319.218872][T16094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.224786][T16094] [ 319.227202][T16094] value changed: 0x000000010000071f -> 0x0000000100000720 [ 319.234339][T16094] [ 319.236677][T16094] Reported by Kernel Concurrency Sanitizer on: [ 319.242830][T16094] CPU: 0 UID: 0 PID: 16094 Comm: syz.2.4276 Not tainted syzkaller #0 PREEMPT(lazy) [ 319.252214][T16094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.262274][T16094] ================================================================== [ 319.318072][ T3301] : [ 319.318260][ T3301] cache 11280384 [ 319.343826][ T3301] rss 200704 [ 319.356755][ T3301] shmem 11280384 [ 319.371111][ T3301] mapped_file 0 [ 319.384786][ T3301] dirty 0 [ 319.397461][ T3301] writeback 0 [ 319.404961][ T3301] workingset_refault_anon 4264 [ 319.410029][ T3301] workingset_refault_file 4036 [ 319.415280][ T3301] swap 58511360 [ 319.419040][ T3301] swapcached 87269376 [ 319.423977][ T3301] pgpgin 298724 [ 319.427951][ T3301] pgpgout 295907 [ 319.432143][ T3301] pgfault 253006 [ 319.436037][ T3301] pgmajfault 2519 [ 319.440087][ T3301] inactive_anon 389120 [ 319.449727][ T3301] active_anon 11149312 [ 319.455138][ T3301] inactive_file 0 [ 319.459046][ T3301] active_file 0 [ 319.466276][ T3301] unevictable 0 [ 319.469865][ T3301] hierarchical_memory_limit 314572800 [ 319.475661][ T3301] hierarchical_memsw_limit 9223372036854771712 [ 319.481925][ T3301] total_cache 11280384 [ 319.486809][ T3301] total_rss 200704 [ 319.490702][ T3301] total_shmem 11280384 [ 319.495588][ T3301] total_mapped_file 0 [ 319.500171][ T3301] total_dirty 0 [ 319.503707][ T3301] total_writeback 0 [ 319.507720][ T3301] total_workingset_refault_anon 4264 [ 319.513152][ T3301] total_workingset_refault_file 4036 [ 319.518449][ T3301] total_swap 58511360 [ 319.522492][ T3301] total_swapcached 87269376 [ 319.527012][ T3301] total_pgpgin 298724 [ 319.530977][ T3301] total_pgpgout 295907 [ 319.535199][ T3301] total_pgfault 253006 [ 319.539312][ T3301] total_pgmajfault 2519 [ 319.543554][ T3301] total_inactive_anon 389120 [ 319.548173][ T3301] total_active_anon 11149312 [ 319.552820][ T3301] total_inactive_file 0 [ 319.557032][ T3301] total_active_file 0 [ 319.561084][ T3301] total_unevictable 0 [ 319.565137][ T3301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4276,pid=16093,uid=0 [ 319.579932][ T3301] Memory cgroup out of memory: Killed process 16093 (syz.2.4276) total-vm:96216kB, anon-rss:1420kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0