last executing test programs: 2.835139559s ago: executing program 1 (id=416): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r3, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r5 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', r4, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x93, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 2.805019701s ago: executing program 0 (id=417): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875297bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.775081664s ago: executing program 0 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000140001800500020001010000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.843085056s ago: executing program 0 (id=430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10040080) 1.777657463s ago: executing program 0 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x38, 0x1403, 0x80d, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048d0}, 0x60000c4) ioprio_get$uid(0x3, r2) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c0000000d0a010100000000000000000a0000010900020073797a31000000000900010073797a31f4000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000845}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1.769574103s ago: executing program 1 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) 1.710562048s ago: executing program 1 (id=436): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.146050209s ago: executing program 1 (id=437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.047359417s ago: executing program 1 (id=438): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01"], &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 637.342913ms ago: executing program 0 (id=443): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875297bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 607.826456ms ago: executing program 4 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) 606.563276ms ago: executing program 1 (id=447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300)) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x20000) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) syz_clone(0x200000, &(0x7f0000001100)="131bcbb4113c42506330e4dc9e5cac3c7f8872cb355a4ca0b6289bd6afa625bbbb2951891274c25dbf2fe2316bab1575932deb0c77b31448217e0879323d8055d943ef09f227f0efd1d470b7c531a8829136e8beb0fb11707e675d0872b56457b983d0479393aacb248aa307bd9bf8f69ad699fa00e7709e125f06dc69aa3e39312f940e7d29289c55e9c7f7687c6ed7611160c5b3af2fed4575b23bd3b03a5c8e6359855f4218673059cd92459aa454a0c5a54e4fee3480065877c854cf5f4295ac7885227a66460431498b8c250513b911da737326b4678f25460aa20f76e7959e7d4187feac84ca464c74c8ca17e173cef9e6ae3a5cd69a291b29e7221e5fb6a4470922f5f8ccd85377165825f184a4e6e094c2e904af45e717b008b5976135305cce6c3ddb0064f0584ca769a9b34abb446335646e5b5d81a5b670c105a11cebcd58b95c17bbd43c078baadeac38dd69664455fc97d1a23e8bd8c83d33ebd94434dae39b26baae01a7a9243e0446166ce0dd62dcd2df1b15fdf0c76d2ba7f156f343ba5108462db58c9469f073cd551d7cae09242fae3b2a03e4f5b7fa5a102bd62ecfe622de0f0ec252299e32e3ec30694bd33624ccfc389376b4d1b5aa306f0dc9f97848975407232e4075484cbdb67b05140e8ee88433ae29b98188296b2876851119e0770467f468f00e1bd90e8bb873b7a05a7fa6dccc2a647fa2857147be0fe56723c16aa7d981633314719a371cd2ad6ab126c3511e250b4dede01838b14c9b88330de71351e13f01c7e4051aca5565cf13285bc7b531cb436976007b76c38740deac9dd39c16c9f50d6ec457babc15108dd7525b4200d1ed4bc054a91d7881974dfa01871a2a35747ab3744c106a34303cdce34ad8564f49f9bf7068f5f352243a910ffd46699cdce3bed5dd626af6ce9929c4352fbed2ea454c1144276ed6f9140083ace2c9159e398c91f8e9862ae056a1456d1634088ef6ec66bc77fcdf7d0148579f405112acc74f81ca6a0db169165af75ae48cd97eaf7a7b52c5f92f3daae3d24b2a17a52758ea3acbee2a35410625ecb7a2c8182b6aa93d681018b6cf088ad9736f11c409d3424a16950dfe1ae72a1ae16f2e51c375a91e12bd3f4d14b0b6580cdcaa4b1160a6f2f3ab247250efc2322d1ef3f0b6e85d82825b51531154dd6ea73b7dfce225dc45f96124fee31779d6b8fd8338e854c4120c60ddb10ddd662ac9729b25c371f0a6343de061854792e1183723dfcdd6afe4d11b7ca81031a1cd3c9680c0f9fd447bb5cc2b57c0809713b4b4b72aa27d00a9a2361cc60e8a6e66ccc0da9d7f2323b577897c6a6dcab73e0f85ab06498a13d1c6d3cd21519b05a3ed163b720cd50d59469adad9b15d1c5e559007be3d54b9a6740d245eb9af430f84ef4e7c4d4c0498f701cf1e5eebe60ed53020cfa082681510fabd10581f1633ae09cc674b0e56d9a6b3e44eda9c04c36cea23e27ab304b257e08f8546b13b313d10b0a4990f33609918d24edcfd35e90735962bd33acccf6879bd3e53c7f42927950f010b90f6e93af612f1ad91faba3ad1a0fd9e6896230309478c21a58120b03a61b74d59effc2fdf0e476334a0b748ef7de812a489285880d96894932fa632fa7624a7b1dbc9ae26804cbc388c68826d62c32970febff178536c366d1d6bafcb7dac38114257645e4c2d54e5dccaa9cc92c7e83f77ccd3ef0a14b768cc3e5939ba1f80fdfe5fe13107fd5d2e7f4f7b4366846ccc45764f39ecfe13436d1aa4be2ce4a2fc299708df04f2f8e374793f43c139c1995d49bf66d7c8335f6f92f19e45be092d1461fe97249e66f965834ae3125b5e38751351a392625023f3a403bdfccfaaca35ce1c6591f99ca1a99616caea2f53148b852693470ff8c0cf80141edbbe83bd7598bd92aefe4579b4abcbf0ae3a6cb4cd5ffa52ace2f9386b6e294c96a9d0e1b2adb9100861734bc06390df8b242df67801b96f2c22f8198dad94f33a8e49b9967cd47cf3295856c55cc526ea2d0d04335e24ff7a92a09aa634a4006945e806b5f72116773783af44d56833046501fc234fb742105a0abb10a53c44f15638d9e6ac09b350905b4a49e5767c1987f62fe1d07b5ed9172ffefbbce6fb036082b047fb427a91ad7eab5722cf5ce9cf62a2a6cbce25a6137d6749403a19e0415ce54ed5d23bd04593ea9d7f179ca48f491cfeda34ccb8753a6c9c529985551e306b91bcad2b7d44c06d8148340a7c3a236370aadc40c44aa9e0b02e856446377b58ac8386f5b2a6fbdecea4b034ee7b40ecd286927ba2071e5bad63b59857f949c28e7412dea1877efefcd7584c2e105dd5930a8d48964e13af7dfd73408325336056121a8bbd091f2d0394e32b1e0dc91588fef591ba47f04c7fedf2d428f6bd04ee6d5436f128239b54e10644fd08ad7f2ab90169a298dc04cff410caeb51bff0f8522ec58a748fab725995ba2d04fac2023e2de21ce5238af07cdfeca1c139d2f890f6fbaa9650bc677e2a49be2dd08070397495e6c71a9c1607ed4c0921e0a4f90b2a1a52faf95931f30ccde0c980d4b122c4dd4f88ad6028f7b9d2bc248c487ce00b3bc916a4b9bb1896000ac2ea76e2e0f69a2a90872d88260761ef1f374cfb7989e133bc2d1d59f071479e08d1d9a16be95ebde5056a71c042f6f3f7a9544dd11db719090184def746c7f3b531bed6df18a440f1aa72a2ff95551bd8da93a3b06f1e4233efbd4594c75e70d739bee57da5619bb5c9eeae17b2bee9a2cb3ead4691a49000c0a4f74bdda10e94ab8a63e8c00119eb618e0a7d2d9ceecee95f2ce4ca09cb16e49d6760d39bee184837f2b2c15ae8828d1c59074ccf4876bd903ed6ba200c743be9e7b6a2c91aaec66c301c90708d4b30f6f00b7e948ea7338678914febcc69765e717f3bf1b20a1d04f3b14e3a755db509ff6e37fe2318a26680bad6156eabd3f7459e73d35ab2546e18f73ee553f9159f75a21399608c723271245a8747a93bde505783f03051c1de18c99e2ff4b124775e94095288faed20ae74a7baa451cfa3ea885ce7853c14a72f819dd62d53759ed6787d9ce52421c27b830a95e8005f2cbbd70a128f3f3c4b3d80f13368eb13a0ebcaf90e96eb2fe5416c725808969498935f4ba03a2a8e9ec440c134acae5b6d07ace4349a575739ff75c6618898e95d6662ca5cac4ba37d69b92c6158dfc5619bdba157c122799f490c3e7f6307b091b03c326bdd128c468f34687567fcc0bbd7da8acabfd7b3b4da85538198b1e684d8f6507c9c3b265e3f7afbf284a96e46538149264371fb16572177d8ae04092863952865031ddba5a5ad9df2fa9236c473248b159493854cff0ef3e97ba3b57d1d9febd2c6310de26be6ba404f624552e63da38c1111f5bbe943e4f12aee0a566a6b61ea1b08cf9f427352f74251b1f89aa35a180c128491873abd67edd10d31b66d78875ed09a03a3711d3425702ee753c238f931c68c38c4c76125f096086d915c12971767c5d1512bca303d0d010558d5553f98e37fdb6fe2f8da3dad323a644e74d8eacc162d18171a0753330a8c5cfcb7e63587df472dd9d76f94489c0af6623a112efae15e1cef6ed9342df55ea863fa1b0da9503a8c21d9f97628a1b807b47b995f6b62169c9b876d6dfa40f10206923e4a859a52420983c6096846d6a6271d383f8ba9edc8197c5f5a3c206230af6471dcc1ae197b5fcea966367c1d7a15eda5c45affb6698f7f8035ab9aa5899c337a7afab78674bbd187aac6c1b6d1212f55962f15e96d387d594ee0f70ac4a2698403be6f4f591888c1a21549f6970e77b4ca60819c89c61f1160037182d4ca06d914d0020c28fdf965dd614f7e3ed6b2694af3a4a40162f756d6150e67029aae9a9204877345f8e56e810db0eb8eb4bddb7bac8bae5d0db8262eb34b09b2e2ea5afc0c8f91b123ac0307b260c563660e472571d21cc71f0c405aa8e887d5ef71d0fd5ee023cb8e48766fc9c589bef40435469c47157b4d5585a7d195a964ebe916f1b7a4618b63fc10055657a653cc623f8aee03040b6f6adba5cecae1b2487ede5ab82af3fa0698e0670bced19f621a428368073e4ee4d536a627f153f805e0ad7d770fda3bbd1118321c30739cd918d0b5a058f7006fae5530190c14381b4872c792466c0be4102c5d58095a9fec076ca2de6314fcf70b8354d8d9bc1a23230b474fac80ab7caf9bb416808e22c09ccd0a22b36ef2e23e48c722b335bce162c47a40af8ee7e5542144e16b78d26384caa361a3cae798ef28c033064a8fe8ccc9ed003d13e91b74a6f73be501762b69482a970f3202cf58d2733699b3889b5f400eb2aa96e32944fdd6621679e4e7868837c22f314e95be868471cf1d5e13339c19c577b7f873289332da0cfaf7d9c4d4e307e4bd78a66a4f440fe3b3a20bb397c6693531dde3deff2342d9c044ec59add93c1746e369e0cc0e5d6a76349a7e28ebd4a3935f28dd4c5e47dff908749e4018df8dab75c32a7f12720d33792e18635550f39a018336b7be77efb33b565487fe717f0e8588446a697ebb390a045de32e51f8df74cba071b9d0f654d208c9e766470516102bfde4464fbc092a563a17c7c2a82729c469e90f89d98557ec37f9f48f291cc6653ea2023bec2f1b3be8878913b0fde2705a913d09299e58069d97296e9cc6d9092cd5a968bebacc7d047e192da43730fc343633c2b5d78a3b04aa33b356abf9da7f1a12e5c918149382188dbe36752a33043f93345c5dd21beeae49a473d5c4b19956477ee3bedce133c0e0729895e025a97202a4d5461ab153d8099986fd50ea2338a70cc9afafb6bc560bba5fe2d42be05096d3e6286b38cfc4c432ea1ee1b4ad851df4f144e5f18a8ff7bd41190e72d32fd569196000db6ea3515954ff096b5fdc868859a2fbba35ae4028647a151e69ab76374f5a9c2446e04c358f46c44a014798ab24ef59b3b6465e752141d322432f0077c258e34326efb71fb9a996d81a9a021b9d12a19f5fff8b3afc3501d7929cfb0c968b1b22a88a65ec28adf5edf3ae6a17c644c17b11e5e7d6ef484389a4e1eb29f7e07a694a0fa0cc9c971a6f45fc59e7f871b9edff7feae2423e914efcc3fb7d5d9c7c995e267931891d0e195bc4739a7eeb459ee4dcaf86b75df0385791912c805aea462a5e57efa59b6439f71da89b585de179f1618ab3306a2694e8fa9bbe86ae97363ef4193bebad7892b164c165f1443b9ed5e88a3ce9e2920948e06029eee81da9c56d97dc7ab9bf78c1173fb81dbc6cb372340c878a32e2e76a831e60499e8e55670eeb576e48e3f6ea7708e0ae83f41b4d31b5efc9ef6ea2965f8e78a52c63f8f3cf25eb209704fda156a20daa3b87fba67b3fabbabb2dcc8fd812f2cfd969f5265d700b4982bd4541fc1ab645a0907905d6db5dcc9c78955fad7f616c984d8a62782cececff73406eeb30a8332136b58012d249f3c65b83595485336c4f5ef1e7f40e14ff09a4d0f1ffffe7ad78d86421e7392a2f6b8d68ab99ce9d38d7f2e3360e4b4c4d90661c0e00fa4fe64cd7efc4438cfb27d697996f2ae05d73e298e6242514e15f2a44a5aefadf65d69a41194eccb34fb015e07cd245981dc2c3602a4d1e8cfe11ad932c608f5e44e8cbca5169a5e02f725bdf69ebc4bc15ff376dbf8c7cce9384da1c0520128fe80ff8554bac73c84a394373c346814aee0819bcc4e011649f0eaaa3", 0xfe0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) unshare(0x6c000200) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdc00, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) 564.71507ms ago: executing program 4 (id=448): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x8, 0x1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001edff7f0000000000000000181200001624008bd46c60a011b5441574b8498544a6057dbcfbbf1071c0572395df5399d7a50fb0b447019d96710ae88939762a8b2f804f1a63d8f9be30590a82db0ef2ad955da7111f1779971509bdca0fa90023801973a48279c1ab3d2c9ab3cfeaa81e8f11f9af4c033e6d1afd976ccb570d2de0c62275988a3d0d4f77661c1500"/159, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 564.25098ms ago: executing program 0 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_ext_remove_space\x00', r1, 0x0, 0x4804}, 0x4d) r2 = fsopen(&(0x7f0000000400)='proc\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000201040000003aeb000002000018110000", @ANYRES32, @ANYBLOB="0000001a3757d4f726f549500000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x40001, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kyber_adjust\x00', r5, 0x0, 0xfffffffffffffdff}, 0x18) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xd) r7 = fsmount(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(0xffffffffffffffff, 0x0, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x3c, 0x0, 0xfffffffffffffd7b, &(0x7f0000000500)=""/156, 0xce}, 0x41) r8 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8609702833ba8a62ecd2e4cde74667d754bef8b94423f2910a27e3ea3a45362fd42a479d6e6c5c11ce8866d949c3a14753de36d161690b8248a5e5b55b0c343243959fa85a2ceed58591e0d512a870be2d1304e3120345a8f9dc533683cad12b73a1e9785dd246227405f12d2216e7809ce915f9a8c5b962d095fad374a72a4aca3f2b6584717658a522b74c2de7ce72ebc85e9862963f442a37aba392716c961df788394b2527807fdb1a663657a5ddd337dfd1b325cff0f8a2a41b3e6c50bc4240394a4bbd0d024e72f24192bc6216f3fc1c4948909832af51b69d3abb", @ANYRES16=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000200b86382ab8068af000000000000000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000000)={0xc0000008}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x1e, 0x1, 0x0) connect$tipc(r11, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r11, &(0x7f0000000340), 0x2000011a) splice(r11, 0x0, r10, 0x0, 0x4ff9c, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) 563.99804ms ago: executing program 3 (id=450): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 525.352403ms ago: executing program 3 (id=451): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 493.615096ms ago: executing program 4 (id=452): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x12, &(0x7f0000000940)=ANY=[@ANYRES32=0x1], &(0x7f0000000080)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x1, 0x8009, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10020, 0x1, {0x2}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000004018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 476.370628ms ago: executing program 4 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='f2fs_iostat_latency\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_unlink(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x88800) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) close(r1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mq_unlink(&(0x7f00000004c0)='%pB \x00') r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x100, 0x70bf28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0xfcf3}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/217, 0xd9, 0x140, &(0x7f0000000380)=@nfc_llcp={0x27, r3, 0x0, 0x2, 0xfc, 0x1, "a668ca0cb555ed739ba6463d565c92ad26518b13e1bf257ab1083ec5ff9145efcce9d00bee6cb51e7d479b88461dbd06cebd10363c46ad34376714c03d971f", 0xc}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000480)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18) 437.313771ms ago: executing program 4 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 401.556744ms ago: executing program 3 (id=455): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='f2fs_iostat_latency\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_unlink(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x88800) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) close(r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mq_unlink(&(0x7f00000004c0)='%pB \x00') r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x100, 0x70bf28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0xfcf3}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/217, 0xd9, 0x140, &(0x7f0000000380)=@nfc_llcp={0x27, r2, 0x0, 0x2, 0xfc, 0x1, "a668ca0cb555ed739ba6463d565c92ad26518b13e1bf257ab1083ec5ff9145efcce9d00bee6cb51e7d479b88461dbd06cebd10363c46ad34376714c03d971f", 0xc}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) 367.249598ms ago: executing program 4 (id=456): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r3, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r5 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', r4, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x93, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 366.533108ms ago: executing program 2 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) io_uring_register$IORING_REGISTER_FILES(r0, 0x23, 0x0, 0x0) 343.252429ms ago: executing program 3 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) 342.401059ms ago: executing program 2 (id=459): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 267.968616ms ago: executing program 3 (id=460): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01"], &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 267.690816ms ago: executing program 2 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 219.31527ms ago: executing program 2 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 54.284045ms ago: executing program 2 (id=463): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xd, 0xffe0}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20048054) 16.700328ms ago: executing program 3 (id=464): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) 0s ago: executing program 2 (id=465): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. [ 24.774991][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.775005][ T29] audit: type=1400 audit(1767453351.697:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.803921][ T29] audit: type=1400 audit(1767453351.727:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.804671][ T3305] cgroup: Unknown subsys name 'net' [ 24.831545][ T29] audit: type=1400 audit(1767453351.757:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.930004][ T3305] cgroup: Unknown subsys name 'cpuset' [ 24.935994][ T3305] cgroup: Unknown subsys name 'rlimit' [ 25.045922][ T29] audit: type=1400 audit(1767453351.967:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.070328][ T29] audit: type=1400 audit(1767453351.967:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.090782][ T29] audit: type=1400 audit(1767453351.967:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.111297][ T29] audit: type=1400 audit(1767453351.967:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.118023][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.131532][ T29] audit: type=1400 audit(1767453351.977:77): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.164915][ T29] audit: type=1400 audit(1767453351.977:78): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.188211][ T29] audit: type=1400 audit(1767453352.017:79): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.230845][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.304729][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.353426][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.391206][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.415328][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.431528][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.461535][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.468680][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.475959][ T3315] bridge_slave_0: entered allmulticast mode [ 27.482254][ T3315] bridge_slave_0: entered promiscuous mode [ 27.504388][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.511462][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.518654][ T3315] bridge_slave_1: entered allmulticast mode [ 27.525144][ T3315] bridge_slave_1: entered promiscuous mode [ 27.553840][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.560924][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.567998][ T3318] bridge_slave_0: entered allmulticast mode [ 27.574457][ T3318] bridge_slave_0: entered promiscuous mode [ 27.595690][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.602756][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.609918][ T3318] bridge_slave_1: entered allmulticast mode [ 27.616239][ T3318] bridge_slave_1: entered promiscuous mode [ 27.627938][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.648274][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.655507][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.662773][ T3321] bridge_slave_0: entered allmulticast mode [ 27.669079][ T3321] bridge_slave_0: entered promiscuous mode [ 27.676204][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.685332][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.692434][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.699566][ T3320] bridge_slave_0: entered allmulticast mode [ 27.705880][ T3320] bridge_slave_0: entered promiscuous mode [ 27.720478][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.727536][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.734769][ T3321] bridge_slave_1: entered allmulticast mode [ 27.741161][ T3321] bridge_slave_1: entered promiscuous mode [ 27.751840][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.758891][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.766179][ T3320] bridge_slave_1: entered allmulticast mode [ 27.772446][ T3320] bridge_slave_1: entered promiscuous mode [ 27.783853][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.805761][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.812857][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.819976][ T3316] bridge_slave_0: entered allmulticast mode [ 27.826370][ T3316] bridge_slave_0: entered promiscuous mode [ 27.833553][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.847443][ T3315] team0: Port device team_slave_0 added [ 27.857354][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.864440][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.871701][ T3316] bridge_slave_1: entered allmulticast mode [ 27.878000][ T3316] bridge_slave_1: entered promiscuous mode [ 27.889306][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.899163][ T3315] team0: Port device team_slave_1 added [ 27.905829][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.923980][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.937927][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.952160][ T3318] team0: Port device team_slave_0 added [ 27.970921][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.980818][ T3318] team0: Port device team_slave_1 added [ 27.991006][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.997940][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.023905][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.040011][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.053951][ T3321] team0: Port device team_slave_0 added [ 28.059761][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.066679][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.092579][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.103901][ T3320] team0: Port device team_slave_0 added [ 28.121152][ T3321] team0: Port device team_slave_1 added [ 28.127233][ T3320] team0: Port device team_slave_1 added [ 28.143622][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.150596][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.176540][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.197499][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.204520][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.230397][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.241680][ T3316] team0: Port device team_slave_0 added [ 28.247534][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.254495][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.280401][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.299869][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.306798][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.332684][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.344173][ T3316] team0: Port device team_slave_1 added [ 28.357839][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.364896][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.390853][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.410301][ T3315] hsr_slave_0: entered promiscuous mode [ 28.416354][ T3315] hsr_slave_1: entered promiscuous mode [ 28.427663][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.434689][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.460672][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.490806][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.497746][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.523659][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.549942][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.556892][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.582802][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.595352][ T3318] hsr_slave_0: entered promiscuous mode [ 28.601199][ T3318] hsr_slave_1: entered promiscuous mode [ 28.606968][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.612712][ T3318] Cannot create hsr debugfs directory [ 28.620385][ T3320] hsr_slave_0: entered promiscuous mode [ 28.626332][ T3320] hsr_slave_1: entered promiscuous mode [ 28.632253][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.637960][ T3320] Cannot create hsr debugfs directory [ 28.673831][ T3321] hsr_slave_0: entered promiscuous mode [ 28.679951][ T3321] hsr_slave_1: entered promiscuous mode [ 28.685655][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 28.691417][ T3321] Cannot create hsr debugfs directory [ 28.724699][ T3316] hsr_slave_0: entered promiscuous mode [ 28.730810][ T3316] hsr_slave_1: entered promiscuous mode [ 28.736498][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.742268][ T3316] Cannot create hsr debugfs directory [ 28.891495][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.902202][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.910997][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.922297][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.943383][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.951889][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.960487][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.972390][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.996323][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.010263][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.019166][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.030771][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.059982][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.068761][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.078564][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.087493][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.120033][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.129198][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.138083][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.147809][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.166891][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.197329][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.208870][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.220986][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.228027][ T911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.250162][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.257295][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.278279][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.294784][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.301905][ T911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.313805][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.322497][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.336905][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.345001][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.352035][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.374481][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.384306][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.396878][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.403927][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.417406][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.424574][ T911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.435652][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.449641][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.456744][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.466538][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.473606][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.491283][ T911] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.498326][ T911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.519882][ T911] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.526930][ T911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.554901][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.576310][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.632912][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.670805][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.679154][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.709021][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.748644][ T3315] veth0_vlan: entered promiscuous mode [ 29.760812][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.777610][ T3315] veth1_vlan: entered promiscuous mode [ 29.820884][ T3315] veth0_macvtap: entered promiscuous mode [ 29.835510][ T3315] veth1_macvtap: entered promiscuous mode [ 29.844970][ T3321] veth0_vlan: entered promiscuous mode [ 29.875677][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.891087][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.903404][ T3321] veth1_vlan: entered promiscuous mode [ 29.913203][ T3320] veth0_vlan: entered promiscuous mode [ 29.926110][ T911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.935688][ T3316] veth0_vlan: entered promiscuous mode [ 29.942345][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.959059][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.968052][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.978315][ T3320] veth1_vlan: entered promiscuous mode [ 29.989015][ T3316] veth1_vlan: entered promiscuous mode [ 29.994522][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 29.994534][ T29] audit: type=1400 audit(1767453356.907:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.R3jegv/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.024925][ T29] audit: type=1400 audit(1767453356.907:91): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.036104][ T3320] veth0_macvtap: entered promiscuous mode [ 30.046877][ T29] audit: type=1400 audit(1767453356.907:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.R3jegv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.077634][ T29] audit: type=1400 audit(1767453356.907:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.077834][ T3321] veth0_macvtap: entered promiscuous mode [ 30.099414][ T29] audit: type=1400 audit(1767453356.907:94): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.R3jegv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.109745][ T3318] veth0_vlan: entered promiscuous mode [ 30.131635][ T29] audit: type=1400 audit(1767453356.907:95): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.R3jegv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.143125][ T3316] veth0_macvtap: entered promiscuous mode [ 30.164316][ T29] audit: type=1400 audit(1767453356.907:96): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.181707][ T3318] veth1_vlan: entered promiscuous mode [ 30.196195][ T29] audit: type=1400 audit(1767453357.117:97): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.196504][ T3320] veth1_macvtap: entered promiscuous mode [ 30.220177][ T29] audit: type=1400 audit(1767453357.147:98): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.240006][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.257251][ T3321] veth1_macvtap: entered promiscuous mode [ 30.264086][ T3316] veth1_macvtap: entered promiscuous mode [ 30.271864][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.286252][ T3318] veth0_macvtap: entered promiscuous mode [ 30.300087][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.307862][ T29] audit: type=1400 audit(1767453357.227:99): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.339883][ T3318] veth1_macvtap: entered promiscuous mode [ 30.353215][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.367725][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.378885][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.388798][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.401989][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.409921][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.420575][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.421486][ T3487] loop5: detected capacity change from 0 to 7 [ 30.441310][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.456986][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.475794][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.498763][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.518688][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.526321][ T3494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 30.544036][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.557712][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.590629][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.608054][ T3494] loop1: detected capacity change from 0 to 128 [ 30.629072][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.637130][ T3494] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.668032][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.702453][ T3494] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.705797][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.726638][ T383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.745180][ T383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.766321][ T3494] IPv6: NLM_F_CREATE should be specified when creating new route [ 30.788603][ T383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.797834][ T383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.893795][ T3524] loop2: detected capacity change from 0 to 128 [ 31.046991][ T911] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.374361][ T3544] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 31.578234][ T3556] loop1: detected capacity change from 0 to 1024 [ 31.585086][ T3556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.601322][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.752994][ T3562] IPVS: lc: FWM 3 0x00000003 - no destination available [ 31.760280][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 31.780331][ T3482] IPVS: starting estimator thread 0... [ 31.808047][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 31.879283][ T3563] IPVS: using max 2400 ests per chain, 120000 per kthread [ 31.903138][ T3573] syzkaller0: entered promiscuous mode [ 31.908720][ T3573] syzkaller0: entered allmulticast mode [ 32.296712][ T3560] serio: Serial port ttyS3 [ 32.490711][ T3556] syz.1.23 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 32.504676][ T3556] CPU: 1 UID: 0 PID: 3556 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.504773][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.504852][ T3556] Call Trace: [ 32.504861][ T3556] [ 32.504868][ T3556] __dump_stack+0x1d/0x30 [ 32.504893][ T3556] dump_stack_lvl+0x95/0xd0 [ 32.504917][ T3556] dump_stack+0x15/0x1b [ 32.504938][ T3556] dump_header+0x81/0x240 [ 32.504962][ T3556] oom_kill_process+0x295/0x350 [ 32.505039][ T3556] out_of_memory+0x97b/0xb80 [ 32.505064][ T3556] try_charge_memcg+0x610/0xa10 [ 32.505106][ T3556] obj_cgroup_charge_pages+0xa6/0x150 [ 32.505146][ T3556] __memcg_kmem_charge_page+0x9f/0x170 [ 32.505175][ T3556] __alloc_frozen_pages_noprof+0x18f/0x360 [ 32.505207][ T3556] alloc_pages_mpol+0xb3/0x260 [ 32.505267][ T3556] alloc_pages_noprof+0x90/0x130 [ 32.505296][ T3556] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 32.505336][ T3556] __kvmalloc_node_noprof+0x492/0x6b0 [ 32.505361][ T3556] ? ip_set_alloc+0x24/0x30 [ 32.505426][ T3556] ? ip_set_alloc+0x24/0x30 [ 32.505455][ T3556] ip_set_alloc+0x24/0x30 [ 32.505557][ T3556] hash_netiface_create+0x282/0x740 [ 32.505585][ T3556] ? __pfx_hash_netiface_create+0x10/0x10 [ 32.505612][ T3556] ip_set_create+0x3cc/0x970 [ 32.505672][ T3556] ? __nla_parse+0x40/0x60 [ 32.505700][ T3556] nfnetlink_rcv_msg+0x4c6/0x590 [ 32.505743][ T3556] netlink_rcv_skb+0x123/0x220 [ 32.505796][ T3556] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 32.505829][ T3556] nfnetlink_rcv+0x167/0x16c0 [ 32.505903][ T3556] ? kmem_cache_free+0xe3/0x3a0 [ 32.505951][ T3556] ? __kfree_skb+0x109/0x150 [ 32.506052][ T3556] ? nlmon_xmit+0x4f/0x60 [ 32.506122][ T3556] ? consume_skb+0x49/0x150 [ 32.506142][ T3556] ? nlmon_xmit+0x4f/0x60 [ 32.506260][ T3556] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 32.506291][ T3556] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 32.506320][ T3556] ? __dev_queue_xmit+0x148/0x1ee0 [ 32.506349][ T3556] ? ref_tracker_free+0x37d/0x3e0 [ 32.506411][ T3556] ? __netlink_deliver_tap+0x4dc/0x500 [ 32.506440][ T3556] netlink_unicast+0x5c0/0x690 [ 32.506465][ T3556] netlink_sendmsg+0x58b/0x6b0 [ 32.506507][ T3556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 32.506545][ T3556] __sock_sendmsg+0x145/0x180 [ 32.506565][ T3556] ____sys_sendmsg+0x31e/0x4a0 [ 32.506593][ T3556] ___sys_sendmsg+0x17b/0x1d0 [ 32.506664][ T3556] __x64_sys_sendmsg+0xd4/0x160 [ 32.506697][ T3556] x64_sys_call+0x17ba/0x3000 [ 32.506723][ T3556] do_syscall_64+0xca/0x2b0 [ 32.506759][ T3556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.506850][ T3556] RIP: 0033:0x7f32b322f749 [ 32.506867][ T3556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.506886][ T3556] RSP: 002b:00007f32b1c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.506908][ T3556] RAX: ffffffffffffffda RBX: 00007f32b3485fa0 RCX: 00007f32b322f749 [ 32.506920][ T3556] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 32.506977][ T3556] RBP: 00007f32b32b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 32.506991][ T3556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.507005][ T3556] R13: 00007f32b3486038 R14: 00007f32b3485fa0 R15: 00007ffd04d34d58 [ 32.507022][ T3556] [ 32.507028][ T3556] memory: usage 307200kB, limit 307200kB, failcnt 1215 [ 32.834406][ T3556] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 32.842304][ T3556] kmem: usage 306660kB, limit 9007199254740988kB, failcnt 0 [ 32.849592][ T3556] Memory cgroup stats for /syz1: [ 32.849762][ T3556] cache 16384 [ 32.857958][ T3556] rss 0 [ 32.860751][ T3556] shmem 0 [ 32.863692][ T3556] mapped_file 0 [ 32.867122][ T3556] dirty 0 [ 32.870137][ T3556] writeback 0 [ 32.873406][ T3556] workingset_refault_anon 102 [ 32.878056][ T3556] workingset_refault_file 1478 [ 32.882842][ T3556] swap 720896 [ 32.886113][ T3556] swapcached 12288 [ 32.889841][ T3556] pgpgin 5591 [ 32.893179][ T3556] pgpgout 5456 [ 32.896547][ T3556] pgfault 4259 [ 32.899931][ T3556] pgmajfault 76 [ 32.903379][ T3556] inactive_anon 536576 [ 32.907421][ T3556] active_anon 0 [ 32.911016][ T3556] inactive_file 8192 [ 32.914928][ T3556] active_file 8192 [ 32.918624][ T3556] unevictable 0 [ 32.922206][ T3556] hierarchical_memory_limit 314572800 [ 32.927582][ T3556] hierarchical_memsw_limit 9223372036854771712 [ 32.933733][ T3556] total_cache 16384 [ 32.937522][ T3556] total_rss 0 [ 32.940803][ T3556] total_shmem 0 [ 32.944249][ T3556] total_mapped_file 0 [ 32.948205][ T3556] total_dirty 0 [ 32.951686][ T3556] total_writeback 0 [ 32.955475][ T3556] total_workingset_refault_anon 102 [ 32.960838][ T3556] total_workingset_refault_file 1478 [ 32.966174][ T3556] total_swap 720896 [ 32.969990][ T3556] total_swapcached 12288 [ 32.974215][ T3556] total_pgpgin 5591 [ 32.977992][ T3556] total_pgpgout 5456 [ 32.981905][ T3556] total_pgfault 4259 [ 32.985781][ T3556] total_pgmajfault 76 [ 32.989756][ T3556] total_inactive_anon 536576 [ 32.994330][ T3556] total_active_anon 0 [ 32.998285][ T3556] total_inactive_file 8192 [ 33.002694][ T3556] total_active_file 8192 [ 33.006927][ T3556] total_unevictable 0 [ 33.010922][ T3556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.23,pid=3555,uid=0 [ 33.025368][ T3556] Memory cgroup out of memory: Killed process 3555 (syz.1.23) total-vm:96148kB, anon-rss:1072kB, file-rss:22620kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 33.189122][ T3585] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 33.199548][ T3585] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 33.245994][ T3585] infiniband syz1: set active [ 33.250714][ T3585] infiniband syz1: added veth0_to_bond [ 33.263166][ T3585] RDS/IB: syz1: added [ 33.267221][ T3585] smc: adding ib device syz1 with port count 1 [ 33.273454][ T3585] smc: ib device syz1 port 1 has no pnetid [ 33.521401][ T3556] syz.1.23 (3556) used greatest stack depth: 7072 bytes left [ 33.647869][ T3598] loop3: detected capacity change from 0 to 1024 [ 33.670255][ T3598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.681945][ T3602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 33.691531][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.701901][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.751385][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 33.870971][ T3617] Zero length message leads to an empty skb [ 33.877344][ T3617] syz_tun: entered allmulticast mode [ 33.890096][ T3617] dvmrp8: entered allmulticast mode [ 33.915392][ T3616] syz_tun: left allmulticast mode [ 33.975660][ T3623] hub 9-0:1.0: USB hub found [ 33.981970][ T3630] netlink: 'syz.0.49': attribute type 16 has an invalid length. [ 33.987238][ T3623] hub 9-0:1.0: 8 ports detected [ 33.989662][ T3630] netlink: 'syz.0.49': attribute type 17 has an invalid length. [ 34.005786][ T3598] serio: Serial port ttyS3 [ 34.095559][ T3634] $Hÿ: renamed from bond0 (while UP) [ 34.111367][ T3634] $Hÿ: entered promiscuous mode [ 34.116425][ T3634] bond_slave_0: entered promiscuous mode [ 34.122201][ T3634] bond_slave_1: entered promiscuous mode [ 34.222483][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.342264][ T3661] loop5: detected capacity change from 0 to 7 [ 34.462145][ T3670] loop3: detected capacity change from 0 to 1024 [ 34.470056][ T3670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.564166][ T3670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.580029][ T3677] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 34.660935][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 34.732777][ T3674] bond0 (unregistering): Released all slaves [ 34.743795][ T3690] random: crng reseeded on system resumption [ 34.875375][ T3703] $Hÿ: renamed from bond0 (while UP) [ 34.882603][ T3703] $Hÿ: entered promiscuous mode [ 34.887716][ T3703] bond_slave_0: entered promiscuous mode [ 34.893494][ T3703] bond_slave_1: entered promiscuous mode [ 35.030328][ T3701] serio: Serial port ttyS3 [ 35.092459][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.257314][ T3728] hub 9-0:1.0: USB hub found [ 35.264239][ T3728] hub 9-0:1.0: 8 ports detected [ 35.316390][ T3733] syz_tun: entered allmulticast mode [ 35.327587][ T3733] dvmrp8: entered allmulticast mode [ 35.335678][ T3732] syz_tun: left allmulticast mode [ 35.368142][ T3736] loop5: detected capacity change from 0 to 7 [ 35.376022][ T3737] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 35.436332][ T3743] loop1: detected capacity change from 0 to 1024 [ 35.437225][ T3745] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 35.449721][ T3743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.480172][ T3743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.669681][ T3737] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 35.769888][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 35.769903][ T29] audit: type=1400 audit(1767453362.697:485): avc: denied { create } for pid=3740 comm="syz.1.92" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.885350][ T3743] serio: Serial port ttyS3 [ 35.901624][ T29] audit: type=1400 audit(1767453362.697:486): avc: denied { read write } for pid=3740 comm="syz.1.92" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.912281][ T3766] syzkaller0: entered promiscuous mode [ 35.924036][ T29] audit: type=1400 audit(1767453362.697:487): avc: denied { open } for pid=3740 comm="syz.1.92" path="/18/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.929503][ T3766] syzkaller0: entered allmulticast mode [ 36.008424][ T29] audit: type=1400 audit(1767453362.887:488): avc: denied { ioctl } for pid=3740 comm="syz.1.92" path="/18/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.086118][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.099454][ T3773] loop5: detected capacity change from 0 to 7 [ 36.154895][ T3781] loop2: detected capacity change from 0 to 7 [ 36.212109][ T3788] loop2: detected capacity change from 0 to 1024 [ 36.235995][ T3788] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.246942][ T3788] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 36.257568][ T3788] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 36.300411][ T3788] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.109: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 36.331638][ T3788] EXT4-fs (loop2): no journal found [ 36.336924][ T3788] EXT4-fs (loop2): can't get journal size [ 36.348949][ T3797] loop4: detected capacity change from 0 to 1024 [ 36.357227][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.373621][ T3797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.439689][ T29] audit: type=1400 audit(1767453363.367:489): avc: denied { remount } for pid=3787 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.459115][ T3788] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 36.468311][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.529960][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.569659][ T3808] netlink: 'syz.0.115': attribute type 4 has an invalid length. [ 36.594162][ T3814] loop2: detected capacity change from 0 to 128 [ 36.601688][ T3808] netlink: 'syz.0.115': attribute type 4 has an invalid length. [ 36.610417][ T3812] IPVS: lc: FWM 3 0x00000003 - no destination available [ 36.617431][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 36.640349][ T3808] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 36.679754][ T3797] serio: Serial port ttyS3 [ 36.718527][ T3824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 36.727496][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.734899][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.745219][ T3824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.752710][ T3824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.765958][ T29] audit: type=1400 audit(1767453363.687:490): avc: denied { read } for pid=3819 comm="syz.2.120" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.789290][ T29] audit: type=1400 audit(1767453363.687:491): avc: denied { open } for pid=3819 comm="syz.2.120" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.812905][ T29] audit: type=1400 audit(1767453363.687:492): avc: denied { ioctl } for pid=3819 comm="syz.2.120" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.888347][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.011588][ T29] audit: type=1400 audit(1767453363.927:493): avc: denied { create } for pid=3835 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.030980][ T29] audit: type=1400 audit(1767453363.927:494): avc: denied { bind } for pid=3835 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.054126][ T3840] netlink: 'syz.4.126': attribute type 16 has an invalid length. [ 37.061889][ T3840] netlink: 'syz.4.126': attribute type 17 has an invalid length. [ 37.070639][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.080410][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.126594][ T3839] $Hÿ: renamed from bond0 (while UP) [ 37.141090][ T3839] $Hÿ: entered promiscuous mode [ 37.146155][ T3839] bond_slave_0: entered promiscuous mode [ 37.151906][ T3839] bond_slave_1: entered promiscuous mode [ 37.212923][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.220029][ T3840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.236437][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.243578][ T3840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.284254][ T3844] lo speed is unknown, defaulting to 1000 [ 37.303179][ T3844] lo speed is unknown, defaulting to 1000 [ 37.319520][ T3844] lo speed is unknown, defaulting to 1000 [ 37.344610][ T3844] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.379751][ T3844] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.403276][ T3844] lo speed is unknown, defaulting to 1000 [ 37.415828][ T3844] lo speed is unknown, defaulting to 1000 [ 37.429944][ T3844] lo speed is unknown, defaulting to 1000 [ 37.436328][ T3844] lo speed is unknown, defaulting to 1000 [ 37.442899][ T3844] lo speed is unknown, defaulting to 1000 [ 37.449493][ T3844] lo speed is unknown, defaulting to 1000 [ 37.455590][ T3844] lo speed is unknown, defaulting to 1000 [ 37.551862][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 37.561119][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.568580][ T3863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.576785][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.584205][ T3863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.651500][ T3867] loop4: detected capacity change from 0 to 1024 [ 37.659523][ T3867] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.670466][ T3867] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 37.680299][ T3867] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.690753][ T3867] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.137: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.710228][ T3867] EXT4-fs (loop4): no journal found [ 37.715434][ T3867] EXT4-fs (loop4): can't get journal size [ 37.727316][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.777152][ T3867] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 37.834215][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.921281][ T3885] loop5: detected capacity change from 0 to 7 [ 37.980997][ T3889] syz1: rxe_newlink: already configured on veth0_to_bond [ 38.009749][ T3892] loop3: detected capacity change from 0 to 2048 [ 38.038465][ T3892] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.078950][ T3892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.135046][ T3907] syzkaller0: entered promiscuous mode [ 38.140573][ T3907] syzkaller0: entered allmulticast mode [ 38.200519][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.252035][ T3915] hub 9-0:1.0: USB hub found [ 38.258209][ T3915] hub 9-0:1.0: 8 ports detected [ 38.322133][ T3924] loop5: detected capacity change from 0 to 7 [ 38.387101][ T3929] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.398101][ T3929] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 38.413019][ T3929] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.435149][ T3929] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.162: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.465670][ T3929] EXT4-fs (loop0): no journal found [ 38.470942][ T3929] EXT4-fs (loop0): can't get journal size [ 38.477558][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.492446][ T3929] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 38.513919][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.555760][ T3939] syzkaller0: entered promiscuous mode [ 38.561324][ T3939] syzkaller0: entered allmulticast mode [ 38.768540][ T3968] hub 9-0:1.0: USB hub found [ 38.773514][ T3968] hub 9-0:1.0: 8 ports detected [ 39.008451][ T3998] validate_nla: 2 callbacks suppressed [ 39.008465][ T3998] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 39.032331][ T3998] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 39.085499][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 39.095199][ T3998] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 39.102425][ T4009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.109925][ T4009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.132809][ T4009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.140260][ T4009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.772182][ T4062] syzkaller0: entered promiscuous mode [ 39.777767][ T4062] syzkaller0: entered allmulticast mode [ 39.853960][ T4068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 39.884403][ T4068] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.897051][ T4068] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.909396][ T4068] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.944197][ T4066] lo speed is unknown, defaulting to 1000 [ 40.019393][ T4066] bond0 (unregistering): Released all slaves [ 40.256714][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 40.311801][ T4096] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 40.322831][ T4096] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 40.338709][ T4096] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.350939][ T4096] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.230: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 40.371510][ T4096] EXT4-fs (loop1): no journal found [ 40.376798][ T4096] EXT4-fs (loop1): can't get journal size [ 40.394054][ T4096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.403937][ T4098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.418216][ T4096] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 40.427546][ T4098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.448625][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.575674][ T416] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.760403][ T4118] set_capacity_and_notify: 11 callbacks suppressed [ 40.760419][ T4118] loop5: detected capacity change from 0 to 7 [ 40.801852][ T4120] hub 9-0:1.0: USB hub found [ 40.807690][ T4120] hub 9-0:1.0: 8 ports detected [ 40.939350][ T4125] lo speed is unknown, defaulting to 1000 [ 41.221042][ T4142] loop3: detected capacity change from 0 to 1024 [ 41.245120][ T4142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.281252][ T4142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.398110][ T4153] syzkaller0: entered promiscuous mode [ 41.403697][ T4153] syzkaller0: entered allmulticast mode [ 41.414551][ T4151] lo speed is unknown, defaulting to 1000 [ 41.437078][ T4105] serio: Serial port ttyS3 [ 41.507120][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 41.522224][ T4157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.529665][ T4157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.549814][ T4157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.557309][ T4157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.588612][ T4159] loop2: detected capacity change from 0 to 1024 [ 41.605657][ T4159] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 41.616648][ T4159] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 41.644653][ T4159] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.646945][ T4155] serio: Serial port ttyS3 [ 41.679523][ T4159] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.255: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 41.721535][ T4159] EXT4-fs (loop2): no journal found [ 41.726841][ T4159] EXT4-fs (loop2): can't get journal size [ 41.820894][ T4159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.871234][ T4159] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 41.899540][ T4098] syz.4.232 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 41.913609][ T4098] CPU: 1 UID: 0 PID: 4098 Comm: syz.4.232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.913652][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.913665][ T4098] Call Trace: [ 41.913673][ T4098] [ 41.913682][ T4098] __dump_stack+0x1d/0x30 [ 41.913714][ T4098] dump_stack_lvl+0x95/0xd0 [ 41.913737][ T4098] dump_stack+0x15/0x1b [ 41.913754][ T4098] dump_header+0x81/0x240 [ 41.913821][ T4098] oom_kill_process+0x295/0x350 [ 41.913933][ T4098] out_of_memory+0x97b/0xb80 [ 41.913956][ T4098] try_charge_memcg+0x610/0xa10 [ 41.914066][ T4098] obj_cgroup_charge_pages+0xa6/0x150 [ 41.914091][ T4098] __memcg_kmem_charge_page+0x9f/0x170 [ 41.914118][ T4098] __alloc_frozen_pages_noprof+0x18f/0x360 [ 41.914173][ T4098] alloc_pages_mpol+0xb3/0x260 [ 41.914200][ T4098] alloc_pages_noprof+0x90/0x130 [ 41.914235][ T4098] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 41.914336][ T4098] __kvmalloc_node_noprof+0x492/0x6b0 [ 41.914363][ T4098] ? ip_set_alloc+0x24/0x30 [ 41.914388][ T4098] ? ip_set_alloc+0x24/0x30 [ 41.914431][ T4098] ip_set_alloc+0x24/0x30 [ 41.914490][ T4098] hash_netiface_create+0x282/0x740 [ 41.914535][ T4098] ? __pfx_hash_netiface_create+0x10/0x10 [ 41.914607][ T4098] ip_set_create+0x3cc/0x970 [ 41.914646][ T4098] ? __nla_parse+0x40/0x60 [ 41.914668][ T4098] nfnetlink_rcv_msg+0x4c6/0x590 [ 41.914719][ T4098] netlink_rcv_skb+0x123/0x220 [ 41.914744][ T4098] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 41.914830][ T4098] nfnetlink_rcv+0x167/0x16c0 [ 41.914850][ T4098] ? kmem_cache_free+0xe3/0x3a0 [ 41.914871][ T4098] ? __kfree_skb+0x109/0x150 [ 41.914892][ T4098] ? nlmon_xmit+0x4f/0x60 [ 41.914960][ T4098] ? consume_skb+0x49/0x150 [ 41.914981][ T4098] ? nlmon_xmit+0x4f/0x60 [ 41.914997][ T4098] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 41.915158][ T4098] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 41.915186][ T4098] ? __dev_queue_xmit+0x148/0x1ee0 [ 41.915244][ T4098] ? ref_tracker_free+0x37d/0x3e0 [ 41.915268][ T4098] ? __netlink_deliver_tap+0x4dc/0x500 [ 41.915301][ T4098] netlink_unicast+0x5c0/0x690 [ 41.915390][ T4098] netlink_sendmsg+0x58b/0x6b0 [ 41.915420][ T4098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.915468][ T4098] __sock_sendmsg+0x145/0x180 [ 41.915563][ T4098] ____sys_sendmsg+0x31e/0x4a0 [ 41.915663][ T4098] ___sys_sendmsg+0x17b/0x1d0 [ 41.915706][ T4098] __x64_sys_sendmsg+0xd4/0x160 [ 41.915746][ T4098] x64_sys_call+0x17ba/0x3000 [ 41.915771][ T4098] do_syscall_64+0xca/0x2b0 [ 41.915869][ T4098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.915893][ T4098] RIP: 0033:0x7f41312df749 [ 41.915910][ T4098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.915996][ T4098] RSP: 002b:00007f412fd3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.916081][ T4098] RAX: ffffffffffffffda RBX: 00007f4131535fa0 RCX: 00007f41312df749 [ 41.916095][ T4098] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 41.916109][ T4098] RBP: 00007f4131363f91 R08: 0000000000000000 R09: 0000000000000000 [ 41.916123][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.916137][ T4098] R13: 00007f4131536038 R14: 00007f4131535fa0 R15: 00007ffe26603da8 [ 41.916157][ T4098] [ 41.916243][ T4098] memory: usage 307200kB, limit 307200kB, failcnt 1219 [ 42.021830][ T4166] loop0: detected capacity change from 0 to 1024 [ 42.025352][ T4098] memory+swap: usage 307916kB, limit 9007199254740988kB, failcnt 0 [ 42.025367][ T4098] kmem: usage 306656kB, limit 9007199254740988kB, failcnt 0 [ 42.043396][ T4166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.045343][ T4098] Memory cgroup stats for /syz4: [ 42.046951][ T4098] cache 32768 [ 42.052427][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.055209][ T4098] rss 0 [ 42.160216][ T4166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.162723][ T4098] shmem 0 [ 42.302630][ T4166] serio: Serial port ttyS3 [ 42.305344][ T4098] mapped_file 0 [ 42.316085][ T4098] dirty 0 [ 42.318998][ T4098] writeback 0 [ 42.322286][ T4098] workingset_refault_anon 63 [ 42.326860][ T4098] workingset_refault_file 1400 [ 42.331622][ T4098] swap 733184 [ 42.334895][ T4098] swapcached 0 [ 42.338248][ T4098] pgpgin 13181 [ 42.341704][ T4098] pgpgout 13045 [ 42.345181][ T4098] pgfault 23107 [ 42.348612][ T4098] pgmajfault 31 [ 42.352079][ T4098] inactive_anon 81920 [ 42.356061][ T4098] active_anon 442368 [ 42.360012][ T4098] inactive_file 0 [ 42.363635][ T4098] active_file 32768 [ 42.367500][ T4098] unevictable 0 [ 42.371005][ T4098] hierarchical_memory_limit 314572800 [ 42.376410][ T4098] hierarchical_memsw_limit 9223372036854771712 [ 42.382652][ T4098] total_cache 32768 [ 42.386476][ T4098] total_rss 0 [ 42.389794][ T4098] total_shmem 0 [ 42.393241][ T4098] total_mapped_file 0 [ 42.397211][ T4098] total_dirty 0 [ 42.400735][ T4098] total_writeback 0 [ 42.404537][ T4098] total_workingset_refault_anon 63 [ 42.409671][ T4098] total_workingset_refault_file 1400 [ 42.414967][ T4098] total_swap 733184 [ 42.418842][ T4098] total_swapcached 0 [ 42.422757][ T4098] total_pgpgin 13181 [ 42.426641][ T4098] total_pgpgout 13045 [ 42.430875][ T4098] total_pgfault 23107 [ 42.434898][ T4098] total_pgmajfault 31 [ 42.438872][ T4098] total_inactive_anon 81920 [ 42.443460][ T4098] total_active_anon 442368 [ 42.447862][ T4098] total_inactive_file 0 [ 42.452028][ T4098] total_active_file 32768 [ 42.456344][ T4098] total_unevictable 0 [ 42.460363][ T4098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.232,pid=4097,uid=0 [ 42.474984][ T4098] Memory cgroup out of memory: Killed process 4097 (syz.4.232) total-vm:96148kB, anon-rss:1192kB, file-rss:22584kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 42.492906][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.572872][ T4175] loop2: detected capacity change from 0 to 1024 [ 42.601749][ T4175] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 42.612822][ T4175] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 42.624622][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.688044][ T4175] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.698431][ T4175] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.257: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 42.699130][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.716854][ T4175] EXT4-fs (loop2): no journal found [ 42.730484][ T4175] EXT4-fs (loop2): can't get journal size [ 42.746370][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.801309][ T4175] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 42.824717][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.837338][ T4196] loop5: detected capacity change from 0 to 7 [ 42.888781][ T4198] loop0: detected capacity change from 0 to 1024 [ 42.900070][ T4198] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 42.911004][ T4198] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 42.925685][ T4198] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.936093][ T4198] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.270: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 42.965974][ T4198] EXT4-fs (loop0): no journal found [ 42.971255][ T4198] EXT4-fs (loop0): can't get journal size [ 42.977906][ T4198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.998767][ T4203] lo speed is unknown, defaulting to 1000 [ 43.005403][ T4198] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 43.024022][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.108756][ T4211] loop0: detected capacity change from 0 to 512 [ 43.122170][ T4209] hub 9-0:1.0: USB hub found [ 43.127272][ T4209] hub 9-0:1.0: 8 ports detected [ 43.142490][ T4211] EXT4-fs: Ignoring removed orlov option [ 43.151421][ T4211] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.197405][ T4211] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.272: corrupted in-inode xattr: e_value size too large [ 43.243887][ T4211] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.272: couldn't read orphan inode 15 (err -117) [ 43.281047][ T4233] loop5: detected capacity change from 0 to 7 [ 43.309794][ T4211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.342257][ T4240] loop1: detected capacity change from 0 to 1024 [ 43.355136][ T4240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.366235][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 43.366247][ T29] audit: type=1400 audit(1767453370.287:867): avc: denied { read append open } for pid=4210 comm="syz.0.272" path="/71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/net_prio.prioidx" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.418888][ T29] audit: type=1400 audit(1767453370.297:868): avc: denied { ioctl } for pid=4210 comm="syz.0.272" path="/71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/net_prio.prioidx" dev="loop0" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.464942][ T29] audit: type=1400 audit(1767453370.297:869): avc: denied { setattr } for pid=4210 comm="syz.0.272" name="net_prio.prioidx" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.504109][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.520300][ T4240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.560465][ T4255] hub 9-0:1.0: USB hub found [ 43.572868][ T4255] hub 9-0:1.0: 8 ports detected [ 43.764167][ T4240] serio: Serial port ttyS3 [ 43.902896][ T4269] lo speed is unknown, defaulting to 1000 [ 43.921201][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.019472][ T29] audit: type=1400 audit(1767453370.947:870): avc: denied { load_policy } for pid=4291 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.022651][ T4292] SELinux: failed to load policy [ 44.097033][ T29] audit: type=1326 audit(1767453371.017:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 44.120976][ T29] audit: type=1326 audit(1767453371.037:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 44.144238][ T29] audit: type=1326 audit(1767453371.037:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 44.167528][ T29] audit: type=1326 audit(1767453371.037:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 44.190755][ T29] audit: type=1326 audit(1767453371.037:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 44.213967][ T29] audit: type=1326 audit(1767453371.037:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 44.291146][ T4315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.303955][ T4315] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.328123][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.369503][ T4320] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 44.375678][ T4322] $Hÿ: renamed from bond0 (while UP) [ 44.384527][ T4322] $Hÿ: entered promiscuous mode [ 44.389607][ T4322] bond_slave_0: entered promiscuous mode [ 44.395366][ T4322] bond_slave_1: entered promiscuous mode [ 44.406363][ T10] lo speed is unknown, defaulting to 1000 [ 44.412141][ T10] syz2: Port: 1 Link DOWN [ 44.417082][ T4320] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 44.428052][ T10] lo speed is unknown, defaulting to 1000 [ 44.434635][ T10] syz2: Port: 1 Link ACTIVE [ 44.441748][ T4320] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 44.637155][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 44.698539][ T4339] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.709519][ T4339] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 44.751066][ T4339] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.777149][ T4339] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.321: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 44.821055][ T4339] EXT4-fs (loop0): no journal found [ 44.826288][ T4339] EXT4-fs (loop0): can't get journal size [ 44.834451][ T4339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.859769][ T4339] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 44.887466][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.019654][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 45.047737][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.055358][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.075674][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.083153][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.146374][ T4375] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 45.157478][ T4375] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 45.170406][ T4375] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.175639][ T4377] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 45.180968][ T4375] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.335: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.191427][ T4377] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 45.209642][ T4375] EXT4-fs (loop0): no journal found [ 45.219991][ T4377] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.223952][ T4375] EXT4-fs (loop0): can't get journal size [ 45.234178][ T4377] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.336: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.240991][ T4375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.290269][ T4375] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 45.298996][ T4377] EXT4-fs (loop4): no journal found [ 45.304314][ T4377] EXT4-fs (loop4): can't get journal size [ 45.319403][ T4377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.333318][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.348295][ T4377] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 45.369648][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.431934][ T4397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.454307][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.553790][ T4410] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.572161][ T4410] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.584416][ T4410] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.650865][ T4397] serio: Serial port ttyS3 [ 45.809646][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.946217][ T4438] syzkaller0: entered promiscuous mode [ 45.951794][ T4438] syzkaller0: entered allmulticast mode [ 46.206456][ T4448] set_capacity_and_notify: 12 callbacks suppressed [ 46.206537][ T4448] loop5: detected capacity change from 0 to 7 [ 46.304162][ T4456] loop2: detected capacity change from 0 to 1024 [ 46.315410][ T4456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.340887][ T4456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.363196][ T4456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 46.576391][ T4456] serio: Serial port ttyS3 [ 46.595802][ T4480] loop0: detected capacity change from 0 to 1024 [ 46.602580][ T4480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.621079][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.704155][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.714772][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.898864][ T4486] lo speed is unknown, defaulting to 1000 [ 46.913728][ T4499] loop2: detected capacity change from 0 to 1024 [ 46.927980][ T4499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.934927][ T4497] siw: device registration error -23 [ 46.960413][ T4499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.219711][ T4506] serio: Serial port ttyS3 [ 47.359231][ T4512] loop1: detected capacity change from 0 to 128 [ 47.418091][ T4487] serio: Serial port ttyS3 [ 47.515161][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.602838][ T4524] loop2: detected capacity change from 0 to 1024 [ 47.631326][ T4524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.680028][ T4524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.699921][ T4524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.393'. [ 47.743620][ T4480] syz.0.381 (4480) used greatest stack depth: 6216 bytes left [ 47.774107][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.813724][ T4524] serio: Serial port ttyS3 [ 47.908335][ T4543] loop0: detected capacity change from 0 to 512 [ 47.922328][ T4543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.936430][ T4543] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.991375][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.001011][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.053444][ T4555] loop2: detected capacity change from 0 to 7 [ 48.163044][ T4571] hub 9-0:1.0: USB hub found [ 48.167775][ T4571] hub 9-0:1.0: 8 ports detected [ 48.273535][ T4579] loop1: detected capacity change from 0 to 128 [ 48.280791][ T4579] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.293027][ T4579] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.326612][ T4582] loop2: detected capacity change from 0 to 7 [ 49.065416][ T4595] lo speed is unknown, defaulting to 1000 [ 49.372743][ T416] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.511484][ T4620] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.533841][ T4620] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.553444][ T4620] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.563333][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 49.563345][ T29] audit: type=1326 audit(1767453376.487:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 49.580666][ T4627] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 49.594026][ T29] audit: type=1326 audit(1767453376.487:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 49.623821][ T29] audit: type=1326 audit(1767453376.487:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc13b51f783 code=0x7ffc0000 [ 49.646951][ T29] audit: type=1326 audit(1767453376.487:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc13b51e1ff code=0x7ffc0000 [ 49.670110][ T29] audit: type=1326 audit(1767453376.487:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc13b51f7d7 code=0x7ffc0000 [ 49.693354][ T29] audit: type=1326 audit(1767453376.497:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc13b51df90 code=0x7ffc0000 [ 49.709349][ T4629] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 49.716756][ T29] audit: type=1326 audit(1767453376.497:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc13b51e3aa code=0x7ffc0000 [ 49.747480][ T29] audit: type=1326 audit(1767453376.497:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 49.770813][ T29] audit: type=1326 audit(1767453376.497:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 49.794171][ T29] audit: type=1326 audit(1767453376.497:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13b51f749 code=0x7ffc0000 [ 49.830697][ T4624] bridge_slave_0: left allmulticast mode [ 49.836450][ T4624] bridge_slave_0: left promiscuous mode [ 49.842200][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.852509][ T4624] bridge_slave_1: left allmulticast mode [ 49.858164][ T4624] bridge_slave_1: left promiscuous mode [ 49.863894][ T4624] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.897121][ T4629] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 49.997240][ T4624] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 50.022437][ T4624] bond_slave_0: left promiscuous mode [ 50.052791][ T4624] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 50.099946][ T4624] bond_slave_1: left promiscuous mode [ 50.128713][ T4624] team0: Port device team_slave_0 removed [ 50.139115][ T4624] team0: Port device team_slave_1 removed [ 50.319867][ T4624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.400328][ T10] syz1: Port: 1 Link DOWN [ 50.502705][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.628357][ T4667] lo speed is unknown, defaulting to 1000 [ 50.793617][ T4692] bridge_slave_0: left allmulticast mode [ 50.799452][ T4692] bridge_slave_0: left promiscuous mode [ 50.805140][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.837021][ T4692] bridge_slave_1: left allmulticast mode [ 50.842762][ T4692] bridge_slave_1: left promiscuous mode [ 50.848541][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.849077][ T4701] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.870297][ T4692] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 50.877660][ T4701] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.898650][ T4692] bond_slave_0: left promiscuous mode [ 50.919488][ T4692] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 50.927048][ T4692] bond_slave_1: left promiscuous mode [ 50.935730][ T4692] team0: Port device team_slave_0 removed [ 50.944466][ T4692] team0: Port device team_slave_1 removed [ 50.953984][ T4692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.970093][ T4673] lo speed is unknown, defaulting to 1000 [ 51.095452][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 51.171753][ T4692] ================================================================== [ 51.179847][ T4692] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 51.187844][ T4692] [ 51.190166][ T4692] write to 0xffff88811a921a14 of 4 bytes by task 4701 on cpu 0: [ 51.197784][ T4692] xas_set_mark+0x12b/0x140 [ 51.202292][ T4692] tag_pages_for_writeback+0xc2/0x290 [ 51.207666][ T4692] writeback_iter+0x340/0x820 [ 51.212346][ T4692] mpage_writepages+0x87/0x1250 [ 51.217205][ T4692] fat_writepages+0x24/0x30 [ 51.221712][ T4692] do_writepages+0x1c6/0x310 [ 51.226303][ T4692] file_write_and_wait_range+0x156/0x2c0 [ 51.231940][ T4692] __generic_file_fsync+0x46/0x160 [ 51.237055][ T4692] fat_file_fsync+0x49/0x100 [ 51.241649][ T4692] vfs_fsync_range+0x10d/0x130 [ 51.246406][ T4692] generic_file_write_iter+0x1b8/0x2f0 [ 51.251861][ T4692] iter_file_splice_write+0x66b/0xa20 [ 51.257228][ T4692] direct_splice_actor+0x156/0x2a0 [ 51.262334][ T4692] splice_direct_to_actor+0x312/0x680 [ 51.267705][ T4692] do_splice_direct+0xda/0x150 [ 51.272468][ T4692] do_sendfile+0x380/0x650 [ 51.276889][ T4692] __x64_sys_sendfile64+0x105/0x150 [ 51.282090][ T4692] x64_sys_call+0x2db1/0x3000 [ 51.286768][ T4692] do_syscall_64+0xca/0x2b0 [ 51.291282][ T4692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.297170][ T4692] [ 51.299487][ T4692] read to 0xffff88811a921a14 of 4 bytes by task 4692 on cpu 1: [ 51.307026][ T4692] file_write_and_wait_range+0x10e/0x2c0 [ 51.312662][ T4692] __generic_file_fsync+0x46/0x160 [ 51.317767][ T4692] fat_file_fsync+0x49/0x100 [ 51.322451][ T4692] vfs_fsync_range+0x10d/0x130 [ 51.327215][ T4692] generic_file_write_iter+0x1b8/0x2f0 [ 51.332680][ T4692] iter_file_splice_write+0x66b/0xa20 [ 51.338051][ T4692] direct_splice_actor+0x156/0x2a0 [ 51.343155][ T4692] splice_direct_to_actor+0x312/0x680 [ 51.348527][ T4692] do_splice_direct+0xda/0x150 [ 51.353289][ T4692] do_sendfile+0x380/0x650 [ 51.357709][ T4692] __x64_sys_sendfile64+0x105/0x150 [ 51.362906][ T4692] x64_sys_call+0x2db1/0x3000 [ 51.367583][ T4692] do_syscall_64+0xca/0x2b0 [ 51.372125][ T4692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.378018][ T4692] [ 51.380337][ T4692] value changed: 0x02000021 -> 0x04000021 [ 51.386047][ T4692] [ 51.388359][ T4692] Reported by Kernel Concurrency Sanitizer on: [ 51.394501][ T4692] CPU: 1 UID: 0 PID: 4692 Comm: syz.4.456 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.404127][ T4692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.414181][ T4692] ================================================================== [ 51.606072][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)