last executing test programs: 4.143285643s ago: executing program 4 (id=133): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 4.090472543s ago: executing program 0 (id=136): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 4.041734024s ago: executing program 4 (id=138): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x9) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.026806304s ago: executing program 0 (id=140): memfd_create(0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d2ba7af23", 0x2c}], 0x1}, 0x0) 3.965407524s ago: executing program 1 (id=141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) 3.965089654s ago: executing program 0 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 3.964861144s ago: executing program 4 (id=143): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 653.667106ms ago: executing program 0 (id=145): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 646.212556ms ago: executing program 4 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000072abc8137a77000000000000002012", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r2}, &(0x7f0000001600), &(0x7f0000001640)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300), &(0x7f00000016c0), 0x400, r2}, 0x38) 589.008377ms ago: executing program 4 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x6b93, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 568.556597ms ago: executing program 0 (id=151): futex(0x0, 0x189, 0x2, 0x0, 0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x25, 0x0, 0x0) 473.319977ms ago: executing program 2 (id=154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000200)={[{@data_writeback}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {@journal_checksum}, {}, {@acl}, {@nodioread_nolock}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") 473.116607ms ago: executing program 0 (id=155): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0) 454.075967ms ago: executing program 1 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 357.171608ms ago: executing program 4 (id=158): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 320.792958ms ago: executing program 1 (id=159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)="4484", 0x2}], 0x1, 0x8) 287.587008ms ago: executing program 2 (id=161): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd29, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 277.483079ms ago: executing program 3 (id=162): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0xff00, 0x700, 0x0, 0x0) 276.941288ms ago: executing program 1 (id=163): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) get_robust_list(0x0, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r1, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 256.559389ms ago: executing program 3 (id=164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) times(0x0) 229.884799ms ago: executing program 3 (id=165): socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 224.230679ms ago: executing program 2 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c10100000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 184.918599ms ago: executing program 1 (id=167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x47a, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) 164.833609ms ago: executing program 3 (id=168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 158.671589ms ago: executing program 2 (id=169): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @rand_addr=0x64010100, @loopback}}}], 0x20}, 0x0) 116.4742ms ago: executing program 3 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 111.190349ms ago: executing program 2 (id=171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x4, 0x5}, 0x4, 0x0, 0x0, 0x70f, 0x9800000000000000, 0xff, 0x3, 0x80000000003, 0x0, 0x185, 0x40, 0x3ff, 0x4, 0x100, 0x800f, 0x9, 0x405, 0x9}}, 0xa0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close(r3) 81.181909ms ago: executing program 1 (id=172): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 34.388ms ago: executing program 2 (id=173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 0s ago: executing program 3 (id=174): unshare(0x28000600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x4, r1}, 0x38) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 23.843974][ T29] audit: type=1400 audit(1761887993.493:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.866933][ T29] audit: type=1400 audit(1761887993.513:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.867720][ T3303] cgroup: Unknown subsys name 'net' [ 23.895009][ T29] audit: type=1400 audit(1761887993.553:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.030725][ T3303] cgroup: Unknown subsys name 'cpuset' [ 24.036861][ T3303] cgroup: Unknown subsys name 'rlimit' [ 24.206912][ T29] audit: type=1400 audit(1761887993.853:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.234657][ T29] audit: type=1400 audit(1761887993.853:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.255135][ T29] audit: type=1400 audit(1761887993.853:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.275565][ T29] audit: type=1400 audit(1761887993.853:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.282527][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.295864][ T29] audit: type=1400 audit(1761887993.883:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.329508][ T29] audit: type=1400 audit(1761887993.883:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.352759][ T29] audit: type=1400 audit(1761887993.953:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.387729][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.398048][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.456481][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.463622][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.470992][ T3312] bridge_slave_0: entered allmulticast mode [ 26.477377][ T3312] bridge_slave_0: entered promiscuous mode [ 26.485860][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.498332][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 26.507068][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.514340][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.521540][ T3312] bridge_slave_1: entered allmulticast mode [ 26.527826][ T3312] bridge_slave_1: entered promiscuous mode [ 26.555976][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.584095][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.613501][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.635804][ T3312] team0: Port device team_slave_0 added [ 26.651711][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.658829][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.666073][ T3320] bridge_slave_0: entered allmulticast mode [ 26.672525][ T3320] bridge_slave_0: entered promiscuous mode [ 26.684005][ T3312] team0: Port device team_slave_1 added [ 26.689893][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.696957][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.704155][ T3315] bridge_slave_0: entered allmulticast mode [ 26.710569][ T3315] bridge_slave_0: entered promiscuous mode [ 26.725594][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.732681][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.739777][ T3320] bridge_slave_1: entered allmulticast mode [ 26.746060][ T3320] bridge_slave_1: entered promiscuous mode [ 26.757360][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.764454][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.771574][ T3315] bridge_slave_1: entered allmulticast mode [ 26.777788][ T3315] bridge_slave_1: entered promiscuous mode [ 26.817940][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.824916][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.850952][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.862787][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.874876][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.893079][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.906705][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.913683][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.939676][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.958519][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.967960][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.981974][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.989147][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.996340][ T3322] bridge_slave_0: entered allmulticast mode [ 27.002849][ T3322] bridge_slave_0: entered promiscuous mode [ 27.027834][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.035020][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.042312][ T3322] bridge_slave_1: entered allmulticast mode [ 27.048766][ T3322] bridge_slave_1: entered promiscuous mode [ 27.055755][ T3315] team0: Port device team_slave_0 added [ 27.065885][ T3315] team0: Port device team_slave_1 added [ 27.076900][ T3320] team0: Port device team_slave_0 added [ 27.101329][ T3320] team0: Port device team_slave_1 added [ 27.108838][ T3312] hsr_slave_0: entered promiscuous mode [ 27.114909][ T3312] hsr_slave_1: entered promiscuous mode [ 27.142926][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.154875][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.161855][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.187798][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.199118][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.206082][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.232010][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.242892][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.249814][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.276004][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.287903][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.306406][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.313395][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.339309][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.367439][ T3322] team0: Port device team_slave_0 added [ 27.391211][ T3322] team0: Port device team_slave_1 added [ 27.396960][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.404022][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.411167][ T3318] bridge_slave_0: entered allmulticast mode [ 27.417773][ T3318] bridge_slave_0: entered promiscuous mode [ 27.446872][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.454055][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.461379][ T3318] bridge_slave_1: entered allmulticast mode [ 27.467668][ T3318] bridge_slave_1: entered promiscuous mode [ 27.501894][ T3315] hsr_slave_0: entered promiscuous mode [ 27.507816][ T3315] hsr_slave_1: entered promiscuous mode [ 27.513659][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.519368][ T3315] Cannot create hsr debugfs directory [ 27.529474][ T3320] hsr_slave_0: entered promiscuous mode [ 27.535466][ T3320] hsr_slave_1: entered promiscuous mode [ 27.541573][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 27.547367][ T3320] Cannot create hsr debugfs directory [ 27.553222][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.560224][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.586442][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.598581][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.608047][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.615000][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.640967][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.671460][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.710018][ T3318] team0: Port device team_slave_0 added [ 27.730649][ T3322] hsr_slave_0: entered promiscuous mode [ 27.736580][ T3322] hsr_slave_1: entered promiscuous mode [ 27.742448][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.748155][ T3322] Cannot create hsr debugfs directory [ 27.754316][ T3318] team0: Port device team_slave_1 added [ 27.795400][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.802430][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.828412][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.855782][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.862777][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.888991][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.954488][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.963212][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.973974][ T3318] hsr_slave_0: entered promiscuous mode [ 27.979955][ T3318] hsr_slave_1: entered promiscuous mode [ 27.985895][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.991698][ T3318] Cannot create hsr debugfs directory [ 28.004796][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.022703][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.058293][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.069440][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.078732][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.096232][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.139919][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.148496][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.157795][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.166525][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.211905][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.226137][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.237924][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.247099][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.257068][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.268640][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.286787][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.294067][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.318214][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.325285][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.356921][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.367616][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.381554][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.389938][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.398743][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.414885][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.428718][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.440132][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.461865][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.469021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.477465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.484622][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.507902][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.515059][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.523645][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.530740][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.556584][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.577243][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.597476][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.609489][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.619927][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.639761][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.672635][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.679744][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.688748][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.695902][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.708901][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.739607][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.746683][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.767462][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.774597][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.799736][ T3312] veth0_vlan: entered promiscuous mode [ 28.809987][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.820533][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.843511][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.853354][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.890436][ T3312] veth1_vlan: entered promiscuous mode [ 28.914399][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.952289][ T3312] veth0_macvtap: entered promiscuous mode [ 28.961107][ T3312] veth1_macvtap: entered promiscuous mode [ 28.986252][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.999054][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.010926][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.035183][ T1786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.050283][ T3320] veth0_vlan: entered promiscuous mode [ 29.062485][ T1786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.075124][ T3315] veth0_vlan: entered promiscuous mode [ 29.082493][ T3320] veth1_vlan: entered promiscuous mode [ 29.091474][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.108553][ T3315] veth1_vlan: entered promiscuous mode [ 29.126425][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.142811][ T3320] veth0_macvtap: entered promiscuous mode [ 29.155201][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.155214][ T29] audit: type=1400 audit(1761887998.803:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.A1m6ZE/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.156180][ T3320] veth1_macvtap: entered promiscuous mode [ 29.161390][ T29] audit: type=1400 audit(1761887998.803:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.195453][ T3315] veth0_macvtap: entered promiscuous mode [ 29.218977][ T29] audit: type=1400 audit(1761887998.843:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.A1m6ZE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.244164][ T29] audit: type=1400 audit(1761887998.843:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.250779][ T3318] veth0_vlan: entered promiscuous mode [ 29.266057][ T29] audit: type=1400 audit(1761887998.843:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.A1m6ZE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.274718][ T3318] veth1_vlan: entered promiscuous mode [ 29.298119][ T29] audit: type=1400 audit(1761887998.843:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.A1m6ZE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.322574][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.331044][ T29] audit: type=1400 audit(1761887998.843:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.339924][ T3315] veth1_macvtap: entered promiscuous mode [ 29.358769][ T29] audit: type=1400 audit(1761887998.893:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.374720][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.386399][ T29] audit: type=1400 audit(1761887998.893:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=3687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.401727][ T3318] veth0_macvtap: entered promiscuous mode [ 29.427062][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.432515][ T3318] veth1_macvtap: entered promiscuous mode [ 29.451888][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.461872][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.472494][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.484728][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.493820][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.510529][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.517982][ T29] audit: type=1400 audit(1761887999.163:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.541984][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.542025][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.542060][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.592338][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.604011][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.620458][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.629840][ T3322] veth0_vlan: entered promiscuous mode [ 29.642424][ T177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.658878][ T3322] veth1_vlan: entered promiscuous mode [ 29.676484][ T177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.698895][ T177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.722267][ T177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.736906][ T3322] veth0_macvtap: entered promiscuous mode [ 29.745332][ T3487] syzkaller1: entered promiscuous mode [ 29.751006][ T3487] syzkaller1: entered allmulticast mode [ 29.761498][ T3322] veth1_macvtap: entered promiscuous mode [ 29.789126][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.809194][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.829660][ T177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.861192][ T177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.870066][ T177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920780][ T177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.936202][ T3507] netlink: 'syz.1.12': attribute type 21 has an invalid length. [ 29.957100][ T3511] loop4: detected capacity change from 0 to 128 [ 29.995542][ T3511] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.029929][ T3511] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.108285][ T3519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 30.218681][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.288759][ T3531] netlink: 104 bytes leftover after parsing attributes in process `+}[@'. [ 30.453254][ T3541] vcan0: entered allmulticast mode [ 30.463088][ T3541] vcan0: left allmulticast mode [ 30.480590][ T3543] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 30.492637][ T3543] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 30.587870][ T3551] atomic_op ffff888103594128 conn xmit_atomic 0000000000000000 [ 30.686906][ T3561] unsupported nla_type 52263 [ 31.201927][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 31.379458][ T3587] tipc: Started in network mode [ 31.384539][ T3587] tipc: Node identity ac14140f, cluster identity 4711 [ 31.419794][ T3587] tipc: New replicast peer: 255.255.255.255 [ 31.426008][ T3587] tipc: Enabled bearer , priority 10 [ 31.443651][ T3408] kernel write not supported for file /26/sched (pid: 3408 comm: kworker/1:3) [ 31.459441][ T3591] loop4: detected capacity change from 0 to 1024 [ 31.508982][ T3573] syz.1.37 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 31.523181][ T3573] CPU: 0 UID: 0 PID: 3573 Comm: syz.1.37 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.523293][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 31.523306][ T3573] Call Trace: [ 31.523313][ T3573] [ 31.523358][ T3573] __dump_stack+0x1d/0x30 [ 31.523385][ T3573] dump_stack_lvl+0xe8/0x140 [ 31.523405][ T3573] dump_stack+0x15/0x1b [ 31.523498][ T3573] dump_header+0x81/0x220 [ 31.523517][ T3573] oom_kill_process+0x342/0x400 [ 31.523550][ T3573] out_of_memory+0x979/0xb80 [ 31.523583][ T3573] try_charge_memcg+0x610/0xa10 [ 31.523688][ T3573] obj_cgroup_charge_pages+0xa6/0x150 [ 31.523709][ T3573] __memcg_kmem_charge_page+0x9f/0x170 [ 31.523763][ T3573] __alloc_frozen_pages_noprof+0x188/0x360 [ 31.523801][ T3573] alloc_pages_mpol+0xb3/0x260 [ 31.523824][ T3573] ? alloc_pages_noprof+0xf4/0x130 [ 31.523849][ T3573] alloc_pages_noprof+0x90/0x130 [ 31.523910][ T3573] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 31.523960][ T3573] __kvmalloc_node_noprof+0x483/0x670 [ 31.523996][ T3573] ? ip_set_alloc+0x24/0x30 [ 31.524072][ T3573] ? ip_set_alloc+0x24/0x30 [ 31.524104][ T3573] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 31.524166][ T3573] ip_set_alloc+0x24/0x30 [ 31.524198][ T3573] hash_netiface_create+0x282/0x740 [ 31.524233][ T3573] ? __pfx_hash_netiface_create+0x10/0x10 [ 31.524310][ T3573] ip_set_create+0x3cc/0x970 [ 31.524341][ T3573] ? __nla_parse+0x40/0x60 [ 31.524368][ T3573] nfnetlink_rcv_msg+0x4c6/0x590 [ 31.524475][ T3573] ? __rb_reserve_next+0x43e/0x6f0 [ 31.524511][ T3573] netlink_rcv_skb+0x123/0x220 [ 31.524698][ T3573] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 31.524746][ T3573] nfnetlink_rcv+0x167/0x16c0 [ 31.524794][ T3573] ? kmem_cache_free+0xe4/0x3d0 [ 31.524831][ T3573] ? __kfree_skb+0x109/0x150 [ 31.524905][ T3573] ? nlmon_xmit+0x4f/0x60 [ 31.524929][ T3573] ? consume_skb+0x49/0x150 [ 31.524965][ T3573] ? nlmon_xmit+0x4f/0x60 [ 31.524988][ T3573] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 31.525146][ T3573] ? __dev_queue_xmit+0x1200/0x2000 [ 31.525207][ T3573] ? __dev_queue_xmit+0x182/0x2000 [ 31.525239][ T3573] ? ring_buffer_unlock_commit+0x324/0x370 [ 31.525272][ T3573] ? ref_tracker_free+0x37d/0x3e0 [ 31.525346][ T3573] ? __netlink_deliver_tap+0x4dc/0x500 [ 31.525387][ T3573] netlink_unicast+0x5c0/0x690 [ 31.525419][ T3573] netlink_sendmsg+0x58b/0x6b0 [ 31.525483][ T3573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.525501][ T3573] __sock_sendmsg+0x145/0x180 [ 31.525527][ T3573] ____sys_sendmsg+0x31e/0x4e0 [ 31.525580][ T3573] ___sys_sendmsg+0x17b/0x1d0 [ 31.525680][ T3573] __x64_sys_sendmsg+0xd4/0x160 [ 31.525702][ T3573] x64_sys_call+0x191e/0x3000 [ 31.525736][ T3573] do_syscall_64+0xd2/0x200 [ 31.525780][ T3573] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 31.525812][ T3573] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 31.525898][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.525924][ T3573] RIP: 0033:0x7fc9ada2efc9 [ 31.525940][ T3573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.525957][ T3573] RSP: 002b:00007fc9ac48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.525982][ T3573] RAX: ffffffffffffffda RBX: 00007fc9adc85fa0 RCX: 00007fc9ada2efc9 [ 31.525995][ T3573] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 31.526080][ T3573] RBP: 00007fc9adab1f91 R08: 0000000000000000 R09: 0000000000000000 [ 31.526095][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.526110][ T3573] R13: 00007fc9adc86038 R14: 00007fc9adc85fa0 R15: 00007ffcbc084a68 [ 31.526159][ T3573] [ 31.526167][ T3573] memory: usage 307200kB, limit 307200kB, failcnt 186 [ 31.715556][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.720727][ T3573] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 31.720744][ T3573] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 31.720756][ T3573] Memory cgroup stats for /syz1: [ 31.917744][ T3573] cache 0 [ 31.925990][ T3573] rss 0 [ 31.928857][ T3573] shmem 0 [ 31.931888][ T3573] mapped_file 0 [ 31.934061][ T3596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 31.935339][ T3573] dirty 0 [ 31.935347][ T3573] writeback 0 [ 31.944450][ T3596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 31.947379][ T3573] workingset_refault_anon 12 [ 31.964488][ T3573] workingset_refault_file 1 [ 31.969032][ T3573] swap 167936 [ 31.972504][ T3573] swapcached 8192 [ 31.976139][ T3573] pgpgin 3562 [ 31.979446][ T3573] pgpgout 3560 [ 31.983332][ T3573] pgfault 4077 [ 31.986703][ T3573] pgmajfault 8 [ 31.987649][ T3591] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 31.990183][ T3573] inactive_anon 8192 [ 32.002276][ T3573] active_anon 0 [ 32.005740][ T3573] inactive_file 0 [ 32.009524][ T3573] active_file 0 [ 32.013043][ T3573] unevictable 0 [ 32.016510][ T3573] hierarchical_memory_limit 314572800 [ 32.021964][ T3573] hierarchical_memsw_limit 9223372036854771712 [ 32.028276][ T3573] total_cache 0 [ 32.031978][ T3573] total_rss 0 [ 32.035293][ T3573] total_shmem 0 [ 32.038751][ T3573] total_mapped_file 0 [ 32.042868][ T3573] total_dirty 0 [ 32.046325][ T3573] total_writeback 0 [ 32.050348][ T3573] total_workingset_refault_anon 12 [ 32.051412][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.055455][ T3573] total_workingset_refault_file 1 [ 32.055466][ T3573] total_swap 167936 [ 32.055473][ T3573] total_swapcached 8192 [ 32.055481][ T3573] total_pgpgin 3562 [ 32.055489][ T3573] total_pgpgout 3560 [ 32.063006][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.067966][ T3573] total_pgfault 4077 [ 32.071914][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.075996][ T3573] total_pgmajfault 8 [ 32.079808][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.083729][ T3573] total_inactive_anon 8192 [ 32.091201][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.095083][ T3573] total_active_anon 0 [ 32.095092][ T3573] total_inactive_file 0 [ 32.095099][ T3573] total_active_file 0 [ 32.095106][ T3573] total_unevictable 0 [ 32.095194][ T3573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 32.102834][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.102864][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.106901][ T3573] ,cpuset=/ [ 32.114369][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.118762][ T3573] ,mems_allowed=0 [ 32.126125][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.126150][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 32.157013][ T9] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 32.164327][ T3573] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.37,pid=3572,uid=0 [ 32.210852][ T3573] Memory cgroup out of memory: Killed process 3572 (syz.1.37) total-vm:95800kB, anon-rss:1132kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 32.288413][ T3607] fido_id[3607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.302871][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.312949][ T3613] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 32.330321][ T3572] syz.1.37 (3572) used greatest stack depth: 10088 bytes left [ 32.515966][ T3573] syz.1.37 (3573) used greatest stack depth: 7240 bytes left [ 32.540313][ T3413] tipc: Node number set to 2886997007 [ 32.618293][ T3636] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.62'. [ 32.631768][ T3629] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.62'. [ 32.667347][ T3641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.67'. [ 32.686775][ T3643] netlink: 'syz.4.68': attribute type 10 has an invalid length. [ 32.694661][ T3643] batadv0: entered allmulticast mode [ 32.701735][ T3611] loop2: detected capacity change from 0 to 164 [ 32.726927][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.740796][ T3646] netlink: 'syz.4.68': attribute type 10 has an invalid length. [ 32.748523][ T3646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 32.757242][ T3643] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.771095][ T3646] batadv0: entered promiscuous mode [ 32.831830][ T3646] bond0: (slave batadv0): Releasing backup interface [ 32.859392][ T3646] bridge0: port 3(batadv0) entered blocking state [ 32.865973][ T3646] bridge0: port 3(batadv0) entered disabled state [ 32.967003][ T3657] loop4: detected capacity change from 0 to 1024 [ 32.978486][ T3653] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.995970][ T3657] ======================================================= [ 32.995970][ T3657] WARNING: The mand mount option has been deprecated and [ 32.995970][ T3657] and is ignored by this kernel. Remove the mand [ 32.995970][ T3657] option from the mount to silence this warning. [ 32.995970][ T3657] ======================================================= [ 32.997936][ T3653] vhci_hcd: invalid port number 96 [ 33.033878][ T3657] EXT4-fs: inline encryption not supported [ 33.036213][ T3653] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 33.057648][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.074306][ T3663] netlink: 332 bytes leftover after parsing attributes in process `syz.1.76'. [ 33.091184][ T3657] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.74: Allocating blocks 497-513 which overlap fs metadata [ 33.093657][ T3663] netlink: 'syz.1.76': attribute type 9 has an invalid length. [ 33.126378][ T3657] EXT4-fs (loop4): pa ffff8881072b10e0: logic 16, phys. 145, len 23 [ 33.134510][ T3657] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 33.152911][ T3657] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 33.165235][ T3657] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.165235][ T3657] [ 33.175040][ T3657] EXT4-fs (loop4): Total free blocks count 0 [ 33.181351][ T3657] EXT4-fs (loop4): Free/Dirty block details [ 33.187524][ T3657] EXT4-fs (loop4): free_blocks=16 [ 33.192847][ T3657] EXT4-fs (loop4): dirty_blocks=0 [ 33.197873][ T3657] EXT4-fs (loop4): Block reservation details [ 33.203918][ T3657] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 33.264580][ T3669] loop2: detected capacity change from 0 to 256 [ 33.280310][ T58] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 33.290212][ T58] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 33.362390][ T3004] udevd[3004]: worker [3297] terminated by signal 33 (Unknown signal 33) [ 33.400787][ T3004] udevd[3004]: worker [3297] failed while handling '/devices/virtual/block/loop4' [ 33.461488][ T3695] netlink: 'syz.2.89': attribute type 9 has an invalid length. [ 33.495346][ T3699] loop0: detected capacity change from 0 to 1024 [ 33.505161][ T3699] EXT4-fs: inline encryption not supported [ 33.526531][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.558557][ T3699] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.92: Allocating blocks 497-513 which overlap fs metadata [ 33.589817][ T3699] EXT4-fs (loop0): pa ffff888107261690: logic 16, phys. 145, len 23 [ 33.597926][ T3699] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 33.616997][ T3699] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 33.629220][ T3699] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.629220][ T3699] [ 33.639002][ T3699] EXT4-fs (loop0): Total free blocks count 0 [ 33.645052][ T3699] EXT4-fs (loop0): Free/Dirty block details [ 33.651118][ T3699] EXT4-fs (loop0): free_blocks=16 [ 33.656277][ T3699] EXT4-fs (loop0): dirty_blocks=0 [ 33.661357][ T3699] EXT4-fs (loop0): Block reservation details [ 33.667328][ T3699] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 33.697728][ T3720] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 33.705973][ T3719] loop3: detected capacity change from 0 to 256 [ 33.712556][ T3720] batadv0: entered allmulticast mode [ 33.722974][ T3720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.731699][ T3720] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 33.778016][ T3723] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.789057][ T3720] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 33.802693][ T3723] vhci_hcd: invalid port number 96 [ 33.807821][ T3723] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 33.815045][ T3720] batadv0: entered promiscuous mode [ 33.824030][ T3720] bond0: (slave batadv0): Releasing backup interface [ 33.833299][ T3720] bridge0: port 3(batadv0) entered blocking state [ 33.839890][ T3720] bridge0: port 3(batadv0) entered disabled state [ 33.983682][ T3750] atomic_op ffff88813ca97128 conn xmit_atomic 0000000000000000 [ 34.058624][ T3767] loop1: detected capacity change from 0 to 256 [ 34.176629][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 34.176645][ T29] audit: type=1400 audit(1761888003.823:289): avc: denied { mounton } for pid=3782 comm="syz.3.123" path="/proc/50/task" dev="proc" ino=5359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 34.260185][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 34.269492][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 34.311116][ T29] audit: type=1400 audit(1761888003.953:290): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.335424][ T29] audit: type=1400 audit(1761888003.953:291): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.359510][ T29] audit: type=1400 audit(1761888003.953:292): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.429159][ T29] audit: type=1400 audit(1761888003.993:293): avc: denied { map_create } for pid=3800 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.448731][ T29] audit: type=1400 audit(1761888003.993:294): avc: denied { perfmon } for pid=3800 comm="syz.1.128" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.469691][ T29] audit: type=1400 audit(1761888003.993:295): avc: denied { map_read map_write } for pid=3800 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.489650][ T29] audit: type=1400 audit(1761888003.993:296): avc: denied { prog_load } for pid=3800 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.508546][ T29] audit: type=1400 audit(1761888003.993:297): avc: denied { bpf } for pid=3800 comm="syz.1.128" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.528972][ T29] audit: type=1400 audit(1761888003.993:298): avc: denied { prog_run } for pid=3800 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.601564][ T3824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.043556][ T3848] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 38.061893][ T3843] syzkaller0: entered promiscuous mode [ 38.067571][ T3843] syzkaller0: entered allmulticast mode [ 38.126814][ T3858] loop3: detected capacity change from 0 to 1024 [ 38.145198][ T3858] EXT4-fs: Ignoring removed orlov option [ 38.191129][ T3858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.206810][ T3866] loop2: detected capacity change from 0 to 512 [ 38.246780][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.285027][ T3866] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.305537][ T3875] __nla_validate_parse: 10 callbacks suppressed [ 38.305553][ T3875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 38.305794][ T3866] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 38.407963][ T3887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.601884][ T3904] serio: Serial port ptm0 [ 38.616759][ T3908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.172'. [ 38.677497][ T3004] ================================================================== [ 38.685600][ T3004] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 38.692211][ T3004] [ 38.694531][ T3004] read-write to 0xffff8881072d9d80 of 4 bytes by task 3306 on cpu 1: [ 38.702593][ T3004] dont_mount+0x2a/0x40 [ 38.706774][ T3004] vfs_unlink+0x28f/0x420 [ 38.711117][ T3004] do_unlinkat+0x24e/0x480 [ 38.715547][ T3004] __x64_sys_unlink+0x2e/0x40 [ 38.720234][ T3004] x64_sys_call+0x2dcf/0x3000 [ 38.724918][ T3004] do_syscall_64+0xd2/0x200 [ 38.729427][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.735331][ T3004] [ 38.737671][ T3004] read to 0xffff8881072d9d80 of 4 bytes by task 3004 on cpu 0: [ 38.745212][ T3004] lookup_fast+0xf0/0x320 [ 38.749560][ T3004] walk_component+0x3f/0x220 [ 38.754159][ T3004] path_lookupat+0xfe/0x2a0 [ 38.758671][ T3004] filename_lookup+0x147/0x340 [ 38.763447][ T3004] do_readlinkat+0x7d/0x320 [ 38.767939][ T3004] __x64_sys_readlink+0x47/0x60 [ 38.772776][ T3004] x64_sys_call+0x28de/0x3000 [ 38.777452][ T3004] do_syscall_64+0xd2/0x200 [ 38.781952][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.787836][ T3004] [ 38.790150][ T3004] value changed: 0x00300080 -> 0x00004080 [ 38.795870][ T3004] [ 38.798273][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 38.804416][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.813694][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.823745][ T3004] ==================================================================