last executing test programs: 4.278757271s ago: executing program 2 (id=33): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000800)={0x0, 0x4e292, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x4}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.88671183s ago: executing program 3 (id=112): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="a6dc628a600b17cbe584d2e73c68fe1865f3fbcf0e16db6e759d420151c6c57504", 0x21}], 0x1}}], 0x1, 0x4040880) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x59, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x8}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.789748799s ago: executing program 3 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.555679471s ago: executing program 3 (id=116): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x29ab, 0xd480, 0xf040000000000, 0x0, 0x0) 1.453640331s ago: executing program 3 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.222095943s ago: executing program 2 (id=118): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 1.125742182s ago: executing program 1 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 1.111324184s ago: executing program 3 (id=120): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x174) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.090050876s ago: executing program 2 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) 1.002663764s ago: executing program 1 (id=125): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x200bc98, 0x10100, 0x3, 0x80000210}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) 943.84259ms ago: executing program 1 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 878.243845ms ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x55, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 816.157442ms ago: executing program 4 (id=134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 772.726616ms ago: executing program 1 (id=136): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x13f, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) 764.151887ms ago: executing program 0 (id=137): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ftruncate(r0, 0x81ff) 734.05187ms ago: executing program 1 (id=138): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 627.73202ms ago: executing program 4 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) 592.036353ms ago: executing program 4 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 352.253456ms ago: executing program 0 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000000000000c00000000000000000000000000000000000000000000000200000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000000000000440005007f000001000000000000000000000000000100003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 326.358419ms ago: executing program 0 (id=142): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x6a0, 0x5, 0x338, 0x0, 0x0, 0xfeffffff, 0x0, 0x150, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xa8, 0xe000000}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @empty, @multicast2, @icmp_id=0x45, @port=0x4e21}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'xfrm0\x00', {0xff}}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id=0x1}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key, @port=0x4e23}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 318.557519ms ago: executing program 4 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 233.427117ms ago: executing program 3 (id=144): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 232.859017ms ago: executing program 0 (id=145): r0 = socket$inet(0x2, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 192.880721ms ago: executing program 4 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 167.533074ms ago: executing program 2 (id=147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) 167.161463ms ago: executing program 4 (id=148): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x107642, 0x85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 83.867222ms ago: executing program 2 (id=149): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 68.296333ms ago: executing program 0 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 6.648989ms ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 0s ago: executing program 0 (id=152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): [ 18.463347][ T29] audit: type=1400 audit(1766411099.568:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.485288][ T29] audit: type=1400 audit(1766411099.568:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.507806][ T29] audit: type=1400 audit(1766411099.568:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.530648][ T29] audit: type=1400 audit(1766411099.568:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.553586][ T29] audit: type=1400 audit(1766411099.568:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 24.793437][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.793452][ T29] audit: type=1400 audit(1766411105.898:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.822361][ T29] audit: type=1400 audit(1766411105.918:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.823114][ T3307] cgroup: Unknown subsys name 'net' [ 24.849936][ T29] audit: type=1400 audit(1766411105.948:72): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.953315][ T3307] cgroup: Unknown subsys name 'cpuset' [ 24.959357][ T3307] cgroup: Unknown subsys name 'rlimit' [ 25.148219][ T29] audit: type=1400 audit(1766411106.248:73): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.171796][ T29] audit: type=1400 audit(1766411106.248:74): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.192297][ T29] audit: type=1400 audit(1766411106.248:75): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.199272][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.212626][ T29] audit: type=1400 audit(1766411106.248:76): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.241457][ T29] audit: type=1400 audit(1766411106.258:77): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.266276][ T29] audit: type=1400 audit(1766411106.258:78): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.289525][ T29] audit: type=1400 audit(1766411106.268:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.319356][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.439460][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.471572][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 26.484670][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.541682][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.548833][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.555982][ T3318] bridge_slave_0: entered allmulticast mode [ 26.562406][ T3318] bridge_slave_0: entered promiscuous mode [ 26.584228][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.591280][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.598465][ T3318] bridge_slave_1: entered allmulticast mode [ 26.604798][ T3318] bridge_slave_1: entered promiscuous mode [ 26.636378][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.643464][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.650691][ T3322] bridge_slave_0: entered allmulticast mode [ 26.657152][ T3322] bridge_slave_0: entered promiscuous mode [ 26.669761][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.678292][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.685348][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.692517][ T3322] bridge_slave_1: entered allmulticast mode [ 26.698795][ T3322] bridge_slave_1: entered promiscuous mode [ 26.705961][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.717769][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.740998][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.768860][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.775940][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.783131][ T3320] bridge_slave_0: entered allmulticast mode [ 26.789461][ T3320] bridge_slave_0: entered promiscuous mode [ 26.796802][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.818710][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.825857][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.833183][ T3320] bridge_slave_1: entered allmulticast mode [ 26.839453][ T3320] bridge_slave_1: entered promiscuous mode [ 26.846637][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.856719][ T3318] team0: Port device team_slave_0 added [ 26.878400][ T3318] team0: Port device team_slave_1 added [ 26.910924][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.920680][ T3322] team0: Port device team_slave_0 added [ 26.932926][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.940032][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.947241][ T3317] bridge_slave_0: entered allmulticast mode [ 26.953445][ T3317] bridge_slave_0: entered promiscuous mode [ 26.960760][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.970587][ T3322] team0: Port device team_slave_1 added [ 26.976472][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.983418][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.009347][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.024287][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.031468][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.038586][ T3317] bridge_slave_1: entered allmulticast mode [ 27.044928][ T3317] bridge_slave_1: entered promiscuous mode [ 27.060127][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.067080][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.093052][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.121757][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.128907][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.136213][ T3319] bridge_slave_0: entered allmulticast mode [ 27.142644][ T3319] bridge_slave_0: entered promiscuous mode [ 27.153459][ T3320] team0: Port device team_slave_0 added [ 27.159943][ T3320] team0: Port device team_slave_1 added [ 27.165785][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.172736][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.198643][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.210088][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.217156][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.224256][ T3319] bridge_slave_1: entered allmulticast mode [ 27.230588][ T3319] bridge_slave_1: entered promiscuous mode [ 27.237736][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.251400][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.258371][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.284289][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.301157][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.330908][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.337889][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.363869][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.375447][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.382553][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.408487][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.424462][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.447219][ T3318] hsr_slave_0: entered promiscuous mode [ 27.453109][ T3318] hsr_slave_1: entered promiscuous mode [ 27.459774][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.469552][ T3317] team0: Port device team_slave_0 added [ 27.485588][ T3317] team0: Port device team_slave_1 added [ 27.504988][ T3319] team0: Port device team_slave_0 added [ 27.512270][ T3322] hsr_slave_0: entered promiscuous mode [ 27.520743][ T3322] hsr_slave_1: entered promiscuous mode [ 27.526703][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.532400][ T3322] Cannot create hsr debugfs directory [ 27.553217][ T3319] team0: Port device team_slave_1 added [ 27.564122][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.571060][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.596997][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.614542][ T3320] hsr_slave_0: entered promiscuous mode [ 27.620555][ T3320] hsr_slave_1: entered promiscuous mode [ 27.626382][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 27.632089][ T3320] Cannot create hsr debugfs directory [ 27.642045][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.649010][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.674890][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.708977][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.715961][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.741944][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.764898][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.771844][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.797843][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.846373][ T3317] hsr_slave_0: entered promiscuous mode [ 27.852351][ T3317] hsr_slave_1: entered promiscuous mode [ 27.858250][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.863970][ T3317] Cannot create hsr debugfs directory [ 27.903788][ T3319] hsr_slave_0: entered promiscuous mode [ 27.909715][ T3319] hsr_slave_1: entered promiscuous mode [ 27.915687][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 27.921389][ T3319] Cannot create hsr debugfs directory [ 28.014020][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.028503][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.041238][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.054535][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.085235][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.094027][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.102869][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.113973][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.138499][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.152635][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.160930][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.174646][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.206367][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.216710][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.225701][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.235012][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.257927][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.285930][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.295064][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.305380][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.312447][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.322401][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.331936][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.342046][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.355050][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.362101][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.382124][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.416386][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.427939][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.445911][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.452966][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.469536][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.476686][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.486725][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.510844][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.518000][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.527774][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.540649][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.547726][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.569404][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.577510][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.595944][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.603035][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.611568][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.618679][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.630211][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.654976][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.671026][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.678114][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.691908][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.699046][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.730216][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.773090][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.805232][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.836086][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.854469][ T3318] veth0_vlan: entered promiscuous mode [ 28.862682][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.875440][ T3318] veth1_vlan: entered promiscuous mode [ 28.888942][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.942008][ T3318] veth0_macvtap: entered promiscuous mode [ 28.951681][ T3318] veth1_macvtap: entered promiscuous mode [ 28.988736][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.008845][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.053897][ T3322] veth0_vlan: entered promiscuous mode [ 29.061661][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.070820][ T3317] veth0_vlan: entered promiscuous mode [ 29.078299][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.089667][ T3322] veth1_vlan: entered promiscuous mode [ 29.103277][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.115572][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.137408][ T3319] veth0_vlan: entered promiscuous mode [ 29.147106][ T3317] veth1_vlan: entered promiscuous mode [ 29.155828][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.180642][ T3320] veth0_vlan: entered promiscuous mode [ 29.187345][ T3319] veth1_vlan: entered promiscuous mode [ 29.201967][ T3320] veth1_vlan: entered promiscuous mode [ 29.221100][ T3322] veth0_macvtap: entered promiscuous mode [ 29.231607][ T3322] veth1_macvtap: entered promiscuous mode [ 29.243876][ T3317] veth0_macvtap: entered promiscuous mode [ 29.261892][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.279128][ T3317] veth1_macvtap: entered promiscuous mode [ 29.294177][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.304402][ T3319] veth0_macvtap: entered promiscuous mode [ 29.323124][ T3320] veth0_macvtap: entered promiscuous mode [ 29.330472][ T3320] veth1_macvtap: entered promiscuous mode [ 29.341574][ T3319] veth1_macvtap: entered promiscuous mode [ 29.348702][ T345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.369211][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.376971][ T345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.392832][ T345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.402806][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.413804][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.422302][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.432040][ T345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.446533][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.464219][ T345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.474898][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.486655][ T345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.502681][ T345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.514602][ T345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.535565][ T345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.556082][ T2162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.587652][ T2162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.624295][ T2162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.654791][ T2162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.664944][ T2162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.675100][ T2162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.696482][ T2162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.803677][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 29.803689][ T29] audit: type=1400 audit(1766411110.908:136): avc: denied { execute } for pid=3553 comm="syz.3.8" dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.832632][ T3554] process 'syz.3.8' launched '/dev/fd/7' with NULL argv: empty string added [ 29.872448][ T29] audit: type=1400 audit(1766411110.918:137): avc: denied { read write } for pid=3556 comm="syz.2.10" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 29.897036][ T29] audit: type=1400 audit(1766411110.918:138): avc: denied { open } for pid=3556 comm="syz.2.10" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 29.922108][ T29] audit: type=1400 audit(1766411110.948:139): avc: denied { map } for pid=3558 comm="syz.2.11" path="socket:[5138]" dev="sockfs" ino=5138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 29.944908][ T29] audit: type=1326 audit(1766411110.958:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3544 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f560e2e65e7 code=0x7ffc0000 [ 29.968058][ T29] audit: type=1326 audit(1766411110.958:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3544 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f560e28b829 code=0x7ffc0000 [ 29.991127][ T29] audit: type=1326 audit(1766411110.958:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3544 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f560e2ef749 code=0x7ffc0000 [ 30.014476][ T29] audit: type=1400 audit(1766411110.958:143): avc: denied { execute_no_trans } for pid=3553 comm="syz.3.8" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.042373][ T29] audit: type=1326 audit(1766411110.958:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3544 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f560e2e65e7 code=0x7ffc0000 [ 30.065428][ T29] audit: type=1326 audit(1766411110.958:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3544 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f560e28b829 code=0x7ffc0000 [ 30.460349][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 30.469286][ T3636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'. [ 30.478124][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 30.510060][ T3636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'. [ 30.519024][ T3636] netlink: 'syz.2.17': attribute type 6 has an invalid length. [ 30.567346][ T3642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.834476][ T3660] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 30.850090][ T3662] loop4: detected capacity change from 0 to 512 [ 30.886814][ T3662] ======================================================= [ 30.886814][ T3662] WARNING: The mand mount option has been deprecated and [ 30.886814][ T3662] and is ignored by this kernel. Remove the mand [ 30.886814][ T3662] option from the mount to silence this warning. [ 30.886814][ T3662] ======================================================= [ 30.943968][ T3666] loop2: detected capacity change from 0 to 512 [ 30.951023][ T3666] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.964178][ T3666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.980367][ T3648] loop1: detected capacity change from 0 to 128 [ 30.980584][ T3662] EXT4-fs: inline encryption not supported [ 31.005045][ T3666] EXT4-fs (loop2): 1 truncate cleaned up [ 31.013934][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.037173][ T3662] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.26: bad orphan inode 15 [ 31.064941][ T3648] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 31.082269][ T3648] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.093550][ T3662] ext4_test_bit(bit=14, block=5) = 0 [ 31.099176][ T3662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.128737][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.150286][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.154161][ T3676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.168615][ T3676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.213738][ T3680] loop1: detected capacity change from 0 to 512 [ 31.235160][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.259403][ T3680] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.350740][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.380965][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.495019][ T3008] udevd[3008]: worker [3673] terminated by signal 33 (Unknown signal 33) [ 31.504042][ T3008] udevd[3008]: worker [3673] failed while handling '/devices/virtual/block/loop4' [ 31.505479][ T3704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 31.524347][ T3704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 31.562100][ T3710] loop3: detected capacity change from 0 to 512 [ 31.570165][ T3710] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.635939][ T3710] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 31.795692][ T3742] xt_hashlimit: max too large, truncated to 1048576 [ 31.945713][ T3750] loop4: detected capacity change from 0 to 2048 [ 31.959060][ T3752] loop1: detected capacity change from 0 to 128 [ 31.975526][ T3754] syz.3.63 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.992127][ T3752] FAT-fs (loop1): Directory bread(block 32) failed [ 32.001250][ T3674] Alternate GPT is invalid, using primary GPT. [ 32.007714][ T3674] loop4: p2 p3 p7 [ 32.024838][ T3752] FAT-fs (loop1): Directory bread(block 33) failed [ 32.031904][ T3752] FAT-fs (loop1): Directory bread(block 34) failed [ 32.045204][ T3752] FAT-fs (loop1): Directory bread(block 35) failed [ 32.045300][ T3750] Alternate GPT is invalid, using primary GPT. [ 32.051804][ T3752] FAT-fs (loop1): Directory bread(block 36) failed [ 32.058262][ T3750] loop4: p2 p3 p7 [ 32.076648][ T3752] FAT-fs (loop1): Directory bread(block 37) failed [ 32.093360][ T3752] FAT-fs (loop1): Directory bread(block 38) failed [ 32.101052][ T3752] FAT-fs (loop1): Directory bread(block 39) failed [ 32.116875][ T3752] FAT-fs (loop1): Directory bread(block 40) failed [ 32.135273][ T3752] FAT-fs (loop1): Directory bread(block 41) failed [ 32.200217][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 32.201412][ T3765] loop4: detected capacity change from 0 to 128 [ 32.218683][ T3761] loop0: detected capacity change from 0 to 256 [ 32.238637][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 32.249968][ T3674] udevd[3674]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 32.262808][ T3765] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.297753][ T3765] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.372042][ T1575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.531863][ T3782] loop0: detected capacity change from 0 to 1024 [ 32.550875][ T3782] EXT4-fs: Ignoring removed bh option [ 32.574194][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.620859][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.630471][ T3788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3788 comm=syz.4.78 [ 32.701756][ T3798] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.80'. [ 32.716270][ T3798] netlink: zone id is out of range [ 32.721400][ T3798] netlink: zone id is out of range [ 32.726586][ T3798] netlink: zone id is out of range [ 32.731935][ T3798] netlink: zone id is out of range [ 32.737109][ T3798] netlink: zone id is out of range [ 32.742240][ T3798] netlink: zone id is out of range [ 32.747398][ T3798] netlink: zone id is out of range [ 32.753329][ T3798] netlink: zone id is out of range [ 32.767814][ T3798] netlink: set zone limit has 8 unknown bytes [ 32.930320][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 32.989090][ T3830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'. [ 33.017242][ T3832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.036173][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.071088][ T3843] netlink: 96 bytes leftover after parsing attributes in process `syz.1.102'. [ 33.531066][ T3864] syz.3.112 uses obsolete (PF_INET,SOCK_PACKET) [ 33.540387][ T3865] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.555414][ T3865] smc: net device bond0 erased user defined pnetid SYZ0 [ 33.652148][ T3832] syz.0.98 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 33.666165][ T3832] CPU: 0 UID: 0 PID: 3832 Comm: syz.0.98 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.666211][ T3832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.666221][ T3832] Call Trace: [ 33.666228][ T3832] [ 33.666236][ T3832] __dump_stack+0x1d/0x30 [ 33.666291][ T3832] dump_stack_lvl+0x95/0xd0 [ 33.666304][ T3832] dump_stack+0x15/0x1b [ 33.666324][ T3832] dump_header+0x81/0x240 [ 33.666415][ T3832] oom_kill_process+0x295/0x350 [ 33.666482][ T3832] out_of_memory+0x97b/0xb80 [ 33.666496][ T3832] try_charge_memcg+0x610/0xa10 [ 33.666512][ T3832] obj_cgroup_charge_pages+0xa6/0x150 [ 33.666539][ T3832] __memcg_kmem_charge_page+0x9f/0x170 [ 33.666622][ T3832] __alloc_frozen_pages_noprof+0x18f/0x360 [ 33.666640][ T3832] alloc_pages_mpol+0xb3/0x260 [ 33.666657][ T3832] alloc_pages_noprof+0x90/0x130 [ 33.666698][ T3832] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 33.666719][ T3832] __kvmalloc_node_noprof+0x492/0x6b0 [ 33.666747][ T3832] ? ip_set_alloc+0x24/0x30 [ 33.666764][ T3832] ? ip_set_alloc+0x24/0x30 [ 33.666781][ T3832] ip_set_alloc+0x24/0x30 [ 33.666848][ T3832] hash_netiface_create+0x282/0x740 [ 33.666876][ T3832] ? __pfx_hash_netiface_create+0x10/0x10 [ 33.666967][ T3832] ip_set_create+0x3cc/0x970 [ 33.666983][ T3832] ? __nla_parse+0x40/0x60 [ 33.667083][ T3832] nfnetlink_rcv_msg+0x4c6/0x590 [ 33.667120][ T3832] netlink_rcv_skb+0x123/0x220 [ 33.667137][ T3832] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 33.667155][ T3832] nfnetlink_rcv+0x167/0x16c0 [ 33.667193][ T3832] ? kmem_cache_free+0xe3/0x3a0 [ 33.667268][ T3832] ? __kfree_skb+0x109/0x150 [ 33.667282][ T3832] ? nlmon_xmit+0x4f/0x60 [ 33.667293][ T3832] ? consume_skb+0x49/0x150 [ 33.667307][ T3832] ? nlmon_xmit+0x4f/0x60 [ 33.667345][ T3832] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 33.667420][ T3832] ? __dev_queue_xmit+0x138d/0x1ec0 [ 33.667466][ T3832] ? __dev_queue_xmit+0x148/0x1ec0 [ 33.667545][ T3832] ? try_to_wake_up+0x3f6/0x640 [ 33.667561][ T3832] ? ref_tracker_free+0x37d/0x3e0 [ 33.667577][ T3832] ? __netlink_deliver_tap+0x4dc/0x500 [ 33.667596][ T3832] netlink_unicast+0x5c0/0x690 [ 33.667689][ T3832] netlink_sendmsg+0x58b/0x6b0 [ 33.667820][ T3832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.667837][ T3832] __sock_sendmsg+0x145/0x180 [ 33.667849][ T3832] ____sys_sendmsg+0x31e/0x4a0 [ 33.667992][ T3832] ___sys_sendmsg+0x17b/0x1d0 [ 33.668014][ T3832] __x64_sys_sendmsg+0xd4/0x160 [ 33.668096][ T3832] x64_sys_call+0x17ba/0x3000 [ 33.668112][ T3832] do_syscall_64+0xca/0x2b0 [ 33.668150][ T3832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.668162][ T3832] RIP: 0033:0x7fef5bb9f749 [ 33.668172][ T3832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.668189][ T3832] RSP: 002b:00007fef5a5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.668205][ T3832] RAX: ffffffffffffffda RBX: 00007fef5bdf5fa0 RCX: 00007fef5bb9f749 [ 33.668273][ T3832] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 33.668280][ T3832] RBP: 00007fef5bc23f91 R08: 0000000000000000 R09: 0000000000000000 [ 33.668287][ T3832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.668346][ T3832] R13: 00007fef5bdf6038 R14: 00007fef5bdf5fa0 R15: 00007ffc5f56e328 [ 33.668356][ T3832] [ 33.668360][ T3832] memory: usage 307196kB, limit 307200kB, failcnt 445 [ 33.703769][ T3867] loop4: p1 < > p3 p4 [ 33.707528][ T3832] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 33.707544][ T3832] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 33.722631][ T3867] loop4: p3 start 458752 is beyond EOD, [ 33.726110][ T3832] Memory cgroup stats for /syz0 [ 33.731462][ T3867] truncated [ 33.736929][ T3832] : [ 33.737545][ T3832] cache 24576 [ 33.742749][ T3867] loop4: p4 start 268435456 is beyond EOD, truncated [ 33.884868][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.886569][ T3832] rss 4096 [ 34.062041][ T3832] shmem 0 [ 34.064982][ T3832] mapped_file 4096 [ 34.068688][ T3832] dirty 0 [ 34.071650][ T3832] writeback 0 [ 34.075023][ T3832] workingset_refault_anon 100 [ 34.079694][ T3832] workingset_refault_file 113 [ 34.084382][ T3832] swap 720896 [ 34.087660][ T3832] swapcached 4096 [ 34.091273][ T3832] pgpgin 1526 [ 34.094563][ T3832] pgpgout 1519 [ 34.097945][ T3832] pgfault 6051 [ 34.101292][ T3832] pgmajfault 18 [ 34.104760][ T3832] inactive_anon 4096 [ 34.108706][ T3832] active_anon 0 [ 34.112262][ T3832] inactive_file 0 [ 34.116047][ T3832] active_file 24576 [ 34.119843][ T3832] unevictable 0 [ 34.123309][ T3832] hierarchical_memory_limit 314572800 [ 34.128665][ T3832] hierarchical_memsw_limit 9223372036854771712 [ 34.134820][ T3832] total_cache 24576 [ 34.138614][ T3832] total_rss 4096 [ 34.142136][ T3832] total_shmem 0 [ 34.145593][ T3832] total_mapped_file 4096 [ 34.149828][ T3832] total_dirty 0 [ 34.153612][ T3832] total_writeback 0 [ 34.157406][ T3832] total_workingset_refault_anon 100 [ 34.162928][ T3832] total_workingset_refault_file 113 [ 34.168117][ T3832] total_swap 720896 [ 34.171986][ T3832] total_swapcached 4096 [ 34.176177][ T3832] total_pgpgin 1526 [ 34.179979][ T3832] total_pgpgout 1519 [ 34.184023][ T3832] total_pgfault 6051 [ 34.188010][ T3832] total_pgmajfault 18 [ 34.191995][ T3832] total_inactive_anon 4096 [ 34.196444][ T3832] total_active_anon 0 [ 34.200440][ T3832] total_inactive_file 0 [ 34.204694][ T3832] total_active_file 24576 [ 34.205693][ T3878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.209003][ T3832] total_unevictable 0 [ 34.209013][ T3832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.98,pid=3831,uid=0 [ 34.240243][ T3832] Memory cgroup out of memory: Killed process 3831 (syz.0.98) total-vm:96016kB, anon-rss:1264kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 34.257760][ T3831] syz.0.98 (3831) used greatest stack depth: 10088 bytes left [ 34.316400][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.346435][ T3832] syz.0.98 (3832) used greatest stack depth: 6216 bytes left [ 34.379675][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.507923][ T3903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.558993][ T3906] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 34.567270][ T3906] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 34.699022][ T3923] EXT4-fs: Ignoring removed oldalloc option [ 34.705062][ T3923] EXT4-fs: Ignoring removed bh option [ 34.733994][ T3923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.821381][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 34.821395][ T29] audit: type=1400 audit(1766411115.918:515): avc: denied { ioctl } for pid=3930 comm="syz.4.140" path="socket:[5623]" dev="sockfs" ino=5623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.852730][ T29] audit: type=1400 audit(1766411115.918:516): avc: denied { write } for pid=3930 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.872729][ T29] audit: type=1400 audit(1766411115.918:517): avc: denied { nlmsg_write } for pid=3930 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.108974][ T29] audit: type=1400 audit(1766411116.208:518): avc: denied { name_bind } for pid=3940 comm="syz.0.142" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.134129][ T29] audit: type=1400 audit(1766411116.208:519): avc: denied { node_bind } for pid=3940 comm="syz.0.142" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.151356][ T3943] unsupported nlmsg_type 40 [ 35.276329][ T29] audit: type=1400 audit(1766411116.378:520): avc: denied { read append } for pid=3952 comm="syz.4.148" name="file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.427482][ T345] ================================================================== [ 35.435587][ T345] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 35.445042][ T345] [ 35.447351][ T345] write to 0xffff88810c41b8f2 of 2 bytes by task 3923 on cpu 0: [ 35.454959][ T345] copy_folio_from_iter_atomic+0x760/0x1150 [ 35.460854][ T345] generic_perform_write+0x2c2/0x490 [ 35.466127][ T345] ext4_buffered_write_iter+0x1ee/0x3c0 [ 35.471668][ T345] ext4_file_write_iter+0x387/0xf60 [ 35.476860][ T345] iter_file_splice_write+0x66b/0xa20 [ 35.482219][ T345] direct_splice_actor+0x156/0x2a0 [ 35.487318][ T345] splice_direct_to_actor+0x312/0x680 [ 35.492682][ T345] do_splice_direct+0xda/0x150 [ 35.497432][ T345] do_sendfile+0x380/0x650 [ 35.501835][ T345] __x64_sys_sendfile64+0x105/0x150 [ 35.507019][ T345] x64_sys_call+0x2db1/0x3000 [ 35.511683][ T345] do_syscall_64+0xca/0x2b0 [ 35.516179][ T345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.522056][ T345] [ 35.524362][ T345] read to 0xffff88810c41b800 of 1024 bytes by task 345 on cpu 1: [ 35.532068][ T345] copy_folio_from_iter_atomic+0x760/0x1150 [ 35.537954][ T345] generic_perform_write+0x2c2/0x490 [ 35.543230][ T345] shmem_file_write_iter+0xc5/0xf0 [ 35.548331][ T345] lo_rw_aio+0x673/0x720 [ 35.552563][ T345] loop_process_work+0x56d/0xaa0 [ 35.557486][ T345] loop_workfn+0x31/0x40 [ 35.561708][ T345] process_scheduled_works+0x4ce/0x9d0 [ 35.567153][ T345] worker_thread+0x582/0x770 [ 35.571733][ T345] kthread+0x489/0x510 [ 35.575795][ T345] ret_from_fork+0x149/0x290 [ 35.580375][ T345] ret_from_fork_asm+0x1a/0x30 [ 35.585128][ T345] [ 35.587432][ T345] Reported by Kernel Concurrency Sanitizer on: [ 35.593560][ T345] CPU: 1 UID: 0 PID: 345 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.603346][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.613384][ T345] Workqueue: loop1 loop_workfn [ 35.618135][ T345] ================================================================== [ 35.642070][ T29] audit: type=1400 audit(1766411116.728:521): avc: denied { unmount } for pid=3958 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.745520][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.