last executing test programs: 2.315759595s ago: executing program 3 (id=183): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.299612366s ago: executing program 3 (id=184): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.961802226s ago: executing program 2 (id=190): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) 1.740514608s ago: executing program 3 (id=193): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000011c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="a51eefe5de4aaa5ee7459930fd5fcd5a9658947b68079f93c4bf3ec5b461d7509abdf7e916fc86bd4826867425621488fe579a2ff9f8bcb4e261363192a1287fce0ce05440a59027f4f3e60cf925b3e0c090757c4a88365d273bfcd7c9dd610321a42dcf34bfa028ba53ff7e2f66087f51c69f0e517d8b327c63d7b9", 0x7c}, {&(0x7f0000000440)}, {&(0x7f0000000480)="4e3f0c95438ee42481fa11509a9cf0df71d005e1360ec3199b9f7f246fcf35c130c21944ae5937e782c9c51db89c184ae15db50fed51d9932597c9d8e5e1cad2197cb16581a0b9fa29d1bff2", 0xfffffe33}, {&(0x7f0000000640)="1a148fe9f66ec6fa1248a188441b7b3d05521edf0aaf5813f3726a0c67872a00b4fb1bd7d23832487b992c6fce5e13863afca3a63d27d0ff6f9ff41f53a6e453de07b015de14bd1877ef7bdd6888dca248c58a202951fb114e21e26d3117273fa691914300f4d324e94ca2c7c5cb313056d1db707a07ec6bae15de6cfffc066fc5ba52f0752ebf1f3667b1fc69ab753f97f665656fa9a96ea22b4278a0b2df7052c436b3b21f3359b78dabfdb690a9788524cb4ac6a8db75a035752700960f90fdedaf690d14cdc61b5e526e14c347fb3cbb188eb61a767cc400cc3ea580fa630c", 0xe1}, {&(0x7f00000007c0)="59c9622fdecce957dc65e994a5290d8bddd75652405bc8fa008dd330191554b300a8ed3a104e7c63e5dcf7c07dcc112f5fa7fecd65e854a684c0c488fece4bd183d5868031ad1f0c9d7ca879a65bd3ff9e8e0c85245f921c3f2338995735690f265c4abc3e0fdcce07c461485886e35f2adb30d9e789fd95ededab1557a6a32f94f038e87746a21295110e845c496a227fdbe1b8194cd0bfaf435cdce63b79e780e627e59347a65b111eebec4e1065b1d7bac7ef1d95340c93c140f1a89e96f9292ee86e22030393125da9", 0xcb}, {&(0x7f00000008c0)="4bf3fbd9a5a87e19a134fc0e2bd9727de07f2c27de0d07415ec40e4491e20e0ab0d75e00fbdabf4134332fa539c345c5f175b5cf164d45a262d05f49adca97ccc7a686adc8e05e44d469a9a305f8e5", 0x4f}, {&(0x7f0000000500)="0740af107de15e4600c359207f5822e9f78e8c12bc0a60ccfd82cdd6314dd2f3656e6b18680467781654f586b8c1e8907fdc0c6d03fa733dc43a95f25a0310", 0x3f}, {&(0x7f0000000b40)="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", 0xf0}, {&(0x7f0000001940)="35420cf810b702ac378c425ae10beb3aed514fa3aecf3a1c688eeeb94442a81b73b62af8d65107200786e7787e0226946173b5ac943423486e17cf81cdbe3b2b762f95c275f12a7fb3460983646c34d97aedf0854247a71e5378bfcbeb9948bce462fbc1565d21cc439a0814590c25a662576ebd633ec950d75e501ff66ebac7dd2e608a4084bb305a6253b0820cb77d32180645b9bef999c33b1127c98618dbc5e091aa5c0a25bd25356d32aefe26d4c841c07cad0002670211d2e0cc0c3ec7757ed15f20968d6f50a4548f07ce60bc7c1c2c5f2c07424fdac27a546b61859a103e3e99252c8e08fd309aa2c6f0bd91a3872ed98a709ec9f0061f30fa9e14eac743a81ac909c2cf84bf9235232a30d27b05a256a6db4fce74de12f023c26a2f0e56faf3a8a6b55dd1a8962e6954c08a79bab6ed52f6d06042f17e760590bf31f42e7137796a66701b617d3eece5263f93ee45e9b8fba9eb6843c6e68fd2702f4db7b22b1a35a2ab2f3665af3447e104e64f641cb06010f4b3132acf299ef2357531f4e3b1c0b02c41f53990000000", 0x18f}], 0x9}, 0x4004800) 1.670179133s ago: executing program 0 (id=195): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 1.576535678s ago: executing program 0 (id=197): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0) 1.562283049s ago: executing program 4 (id=198): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x304e, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 1.5448943s ago: executing program 1 (id=199): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x1) 1.476036334s ago: executing program 0 (id=201): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.428427987s ago: executing program 4 (id=202): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1210090, &(0x7f0000001300)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pwrite64(r0, &(0x7f0000000100)="c6", 0x1, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 1.427983987s ago: executing program 1 (id=203): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.427789707s ago: executing program 1 (id=204): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000280)) 1.330286472s ago: executing program 0 (id=205): setfsgid(0xee00) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='smaps_rollup\x00') 1.263169906s ago: executing program 4 (id=206): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x196, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000300)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/177, 0xb1}}], 0x1, 0x12000, 0x0) 1.176463121s ago: executing program 0 (id=207): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) 1.161396572s ago: executing program 4 (id=208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.158321223s ago: executing program 1 (id=209): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000180)=0x6, 0x8) 1.060619358s ago: executing program 0 (id=210): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.056036298s ago: executing program 2 (id=211): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e0"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.02712503s ago: executing program 1 (id=212): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @a_listen={0x59, 0x2, 0x3, 0x80, 0x7, 0x88, 0x3, "", 0x8, 0x9, 0x9, 0xe6}}, 0xf) 920.540147ms ago: executing program 2 (id=213): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 919.911666ms ago: executing program 2 (id=214): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 919.650136ms ago: executing program 3 (id=215): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) fsync(r0) 850.05693ms ago: executing program 3 (id=216): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='Hh\x7fl\xb1\x84f\x86\f\n\x00', &(0x7f0000000340)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x101}], 0x1, 0x9) 256.347305ms ago: executing program 4 (id=218): unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}}, 0x20000000) 153.085961ms ago: executing program 1 (id=219): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x54, r1, 0xc6daf139ba4fa417, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff03, 0xb, 0xdc}, {0xffffffffffffff23, 0x11, 0x9}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) 51.679557ms ago: executing program 2 (id=220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) epoll_pwait(r1, &(0x7f0000000880)=[{}, {}], 0x2, 0xb8, 0x0, 0x0) 562.9µs ago: executing program 4 (id=221): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}, 0x47c9}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9}, 0x0) 0s ago: executing program 2 (id=231): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 26.001057][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.001072][ T29] audit: type=1400 audit(1769624176.385:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.029996][ T29] audit: type=1400 audit(1769624176.415:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.030717][ T3298] cgroup: Unknown subsys name 'net' [ 26.057697][ T29] audit: type=1400 audit(1769624176.445:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.160235][ T3298] cgroup: Unknown subsys name 'cpuset' [ 26.166325][ T3298] cgroup: Unknown subsys name 'rlimit' [ 26.296125][ T29] audit: type=1400 audit(1769624176.675:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.319401][ T29] audit: type=1400 audit(1769624176.675:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.339913][ T29] audit: type=1400 audit(1769624176.675:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.360407][ T29] audit: type=1400 audit(1769624176.675:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.367646][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.380723][ T29] audit: type=1400 audit(1769624176.685:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.414044][ T29] audit: type=1400 audit(1769624176.685:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.438423][ T29] audit: type=1400 audit(1769624176.705:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.467654][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.488885][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.565173][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.572261][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.579589][ T3311] bridge_slave_0: entered allmulticast mode [ 27.586150][ T3311] bridge_slave_0: entered promiscuous mode [ 27.594383][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.601578][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.608694][ T3311] bridge_slave_1: entered allmulticast mode [ 27.615397][ T3311] bridge_slave_1: entered promiscuous mode [ 27.633633][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.645977][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.678605][ T3311] team0: Port device team_slave_0 added [ 27.695949][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.708195][ T3311] team0: Port device team_slave_1 added [ 27.733063][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.746200][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.753216][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.779226][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.794335][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.801326][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.827316][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.856196][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.907131][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.914265][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.921567][ T3319] bridge_slave_0: entered allmulticast mode [ 27.927909][ T3319] bridge_slave_0: entered promiscuous mode [ 27.945092][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.952162][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.959464][ T3319] bridge_slave_1: entered allmulticast mode [ 27.965809][ T3319] bridge_slave_1: entered promiscuous mode [ 27.984477][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.003535][ T3311] hsr_slave_0: entered promiscuous mode [ 28.009706][ T3311] hsr_slave_1: entered promiscuous mode [ 28.035644][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.044930][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.052511][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.059698][ T3317] bridge_slave_0: entered allmulticast mode [ 28.066012][ T3317] bridge_slave_0: entered promiscuous mode [ 28.072566][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.079668][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.086810][ T3310] bridge_slave_0: entered allmulticast mode [ 28.093201][ T3310] bridge_slave_0: entered promiscuous mode [ 28.104014][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.111149][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.118334][ T3310] bridge_slave_1: entered allmulticast mode [ 28.124731][ T3310] bridge_slave_1: entered promiscuous mode [ 28.140781][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.150066][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.157204][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.164418][ T3317] bridge_slave_1: entered allmulticast mode [ 28.170903][ T3317] bridge_slave_1: entered promiscuous mode [ 28.190058][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.219099][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.241493][ T3319] team0: Port device team_slave_0 added [ 28.254302][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.263500][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.270636][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.277821][ T3312] bridge_slave_0: entered allmulticast mode [ 28.284239][ T3312] bridge_slave_0: entered promiscuous mode [ 28.291210][ T3319] team0: Port device team_slave_1 added [ 28.296832][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.304033][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.311237][ T3312] bridge_slave_1: entered allmulticast mode [ 28.317623][ T3312] bridge_slave_1: entered promiscuous mode [ 28.335981][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.345901][ T3310] team0: Port device team_slave_0 added [ 28.366648][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.373694][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.399690][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.421535][ T3310] team0: Port device team_slave_1 added [ 28.427630][ T3317] team0: Port device team_slave_0 added [ 28.434383][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.444227][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.451189][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.477240][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.508554][ T3317] team0: Port device team_slave_1 added [ 28.515072][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.559502][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.566444][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.592371][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.604517][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.611513][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.637471][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.650665][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.657619][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.683876][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.699162][ T3312] team0: Port device team_slave_0 added [ 28.705013][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.711976][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.737845][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.754849][ T3319] hsr_slave_0: entered promiscuous mode [ 28.760845][ T3319] hsr_slave_1: entered promiscuous mode [ 28.766689][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 28.772439][ T3319] Cannot create hsr debugfs directory [ 28.778696][ T3312] team0: Port device team_slave_1 added [ 28.800082][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.807115][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.833009][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.844232][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.851198][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.877119][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.913402][ T3317] hsr_slave_0: entered promiscuous mode [ 28.919373][ T3317] hsr_slave_1: entered promiscuous mode [ 28.925159][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.930927][ T3317] Cannot create hsr debugfs directory [ 28.945651][ T3310] hsr_slave_0: entered promiscuous mode [ 28.951728][ T3310] hsr_slave_1: entered promiscuous mode [ 28.957476][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 28.963219][ T3310] Cannot create hsr debugfs directory [ 28.975757][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.985146][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.021660][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.032531][ T3312] hsr_slave_0: entered promiscuous mode [ 29.038552][ T3312] hsr_slave_1: entered promiscuous mode [ 29.044813][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 29.050674][ T3312] Cannot create hsr debugfs directory [ 29.063111][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.188578][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.210883][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.227990][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.240489][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.262185][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.280289][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.292166][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.302027][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.318457][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.330974][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.339865][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.352051][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.367826][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.375019][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.389177][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.400524][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.407575][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.415445][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.435957][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.446330][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.457842][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.473990][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.488466][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.498326][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.515749][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.529026][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.556581][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.563690][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.584083][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.591143][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.621753][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.661511][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.674202][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.684649][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.727653][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.735238][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.756795][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.771127][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.778188][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.787823][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.798767][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.805877][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.814755][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.822012][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.831778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.838826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.878354][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.892421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.899539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.920168][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.930628][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.946206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.953295][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.970409][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.989369][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.999836][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.027764][ T3311] veth0_vlan: entered promiscuous mode [ 30.061022][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.078848][ T3311] veth1_vlan: entered promiscuous mode [ 30.094126][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.125757][ T3311] veth0_macvtap: entered promiscuous mode [ 30.140665][ T3311] veth1_macvtap: entered promiscuous mode [ 30.178332][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.202040][ T3319] veth0_vlan: entered promiscuous mode [ 30.212249][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.230157][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.254349][ T3310] veth0_vlan: entered promiscuous mode [ 30.263515][ T3319] veth1_vlan: entered promiscuous mode [ 30.272843][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.298398][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.311356][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.320902][ T3312] veth0_vlan: entered promiscuous mode [ 30.336282][ T3310] veth1_vlan: entered promiscuous mode [ 30.350161][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.366819][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.382786][ T3312] veth1_vlan: entered promiscuous mode [ 30.392113][ T3310] veth0_macvtap: entered promiscuous mode [ 30.408788][ T3319] veth0_macvtap: entered promiscuous mode [ 30.429769][ T3319] veth1_macvtap: entered promiscuous mode [ 30.439932][ T3310] veth1_macvtap: entered promiscuous mode [ 30.451880][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.466548][ T3312] veth0_macvtap: entered promiscuous mode [ 30.479764][ T3317] veth0_vlan: entered promiscuous mode [ 30.490695][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.499853][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.515391][ T3317] veth1_vlan: entered promiscuous mode [ 30.523086][ T3312] veth1_macvtap: entered promiscuous mode [ 30.532098][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.554791][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.568138][ T318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.591894][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.599225][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.629684][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.638827][ T3317] veth0_macvtap: entered promiscuous mode [ 30.659364][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.691075][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.714570][ T3317] veth1_macvtap: entered promiscuous mode [ 30.733702][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.750243][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.769692][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787479][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.810967][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836348][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.877836][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.908446][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.926092][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.936051][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.948361][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.958321][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.967964][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.026807][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 31.026824][ T29] audit: type=1400 audit(1769624181.405:129): avc: denied { read write } for pid=3508 comm="syz.0.10" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.060644][ T29] audit: type=1400 audit(1769624181.405:130): avc: denied { open } for pid=3508 comm="syz.0.10" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.101323][ T3514] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 31.113009][ T3514] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 31.196088][ T29] audit: type=1400 audit(1769624181.505:131): avc: denied { map_create } for pid=3510 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.215077][ T29] audit: type=1400 audit(1769624181.505:132): avc: denied { map_read map_write } for pid=3510 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.234727][ T29] audit: type=1400 audit(1769624181.545:133): avc: denied { create } for pid=3517 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.254428][ T29] audit: type=1400 audit(1769624181.545:134): avc: denied { bind } for pid=3517 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.273996][ T29] audit: type=1400 audit(1769624181.555:135): avc: denied { listen } for pid=3517 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.296344][ T29] audit: type=1400 audit(1769624181.675:136): avc: denied { create } for pid=3523 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.408913][ T29] audit: type=1400 audit(1769624181.695:137): avc: denied { listen } for pid=3523 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.428140][ T29] audit: type=1400 audit(1769624181.695:138): avc: denied { accept } for pid=3523 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.569987][ T3549] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 31.644505][ T3556] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32'. [ 31.654622][ T3556] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32'. [ 31.872181][ T3567] loop3: detected capacity change from 0 to 256 [ 31.875442][ T3567] ======================================================= [ 31.875442][ T3567] WARNING: The mand mount option has been deprecated and [ 31.875442][ T3567] and is ignored by this kernel. Remove the mand [ 31.875442][ T3567] option from the mount to silence this warning. [ 31.875442][ T3567] ======================================================= [ 31.946094][ T3567] FAT-fs (loop3): codepage cp950 not found [ 31.989684][ T3560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 31.989718][ T3560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 31.989755][ T3560] vhci_hcd vhci_hcd.0: Device attached [ 32.001776][ T3561] vhci_hcd: connection closed [ 32.002178][ T52] vhci_hcd vhci_hcd.4: stop threads [ 32.002223][ T52] vhci_hcd vhci_hcd.4: release socket [ 32.002240][ T52] vhci_hcd vhci_hcd.4: disconnect device [ 32.852141][ T3610] loop4: detected capacity change from 0 to 512 [ 32.870359][ C0] hrtimer: interrupt took 47984 ns [ 32.875647][ T3610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.937717][ T3610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.971073][ T3610] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.044722][ T3624] loop1: detected capacity change from 0 to 128 [ 33.065750][ T3624] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.095668][ T3624] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.142199][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.161025][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.276589][ T3622] loop2: detected capacity change from 0 to 32768 [ 33.340220][ T3622] loop2: p1 p3 < > [ 33.431865][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.439257][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.471686][ T318] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.751888][ T3681] loop1: detected capacity change from 0 to 512 [ 33.760632][ T3681] EXT4-fs: Ignoring removed nobh option [ 33.767545][ T3681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.780670][ T3681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.793865][ T3681] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.807628][ T3681] EXT4-fs (loop1): 1 truncate cleaned up [ 33.813798][ T3681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.896833][ T3689] Zero length message leads to an empty skb [ 34.442090][ T3680] syz.1.80 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 34.452917][ T3680] CPU: 0 UID: 0 PID: 3680 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.453018][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.453032][ T3680] Call Trace: [ 34.453041][ T3680] [ 34.453048][ T3680] __dump_stack+0x1d/0x30 [ 34.453071][ T3680] dump_stack_lvl+0x95/0xd0 [ 34.453091][ T3680] dump_stack+0x15/0x1b [ 34.453109][ T3680] dump_header+0x80/0x240 [ 34.453161][ T3680] oom_kill_process+0x295/0x350 [ 34.453184][ T3680] out_of_memory+0x97d/0xb80 [ 34.453208][ T3680] try_charge_memcg+0x62e/0xa10 [ 34.453238][ T3680] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 34.453269][ T3680] __read_swap_cache_async+0x17b/0x2d0 [ 34.453300][ T3680] swap_cluster_readahead+0x262/0x3c0 [ 34.453394][ T3680] swapin_readahead+0xde/0x840 [ 34.453421][ T3680] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 34.453555][ T3680] ? lruvec_stat_mod_folio+0xd2/0x110 [ 34.453577][ T3680] ? __rcu_read_unlock+0x4e/0x70 [ 34.453667][ T3680] ? swap_cache_get_folio+0x26f/0x280 [ 34.453717][ T3680] do_swap_page+0x59b/0x2a50 [ 34.453747][ T3680] ? __rcu_read_lock+0x36/0x50 [ 34.453773][ T3680] ? __pfx_default_wake_function+0x10/0x10 [ 34.453813][ T3680] handle_mm_fault+0xb40/0x3030 [ 34.453843][ T3680] ? vma_start_read+0x1c7/0x2c0 [ 34.453870][ T3680] do_user_addr_fault+0x62f/0x1050 [ 34.453894][ T3680] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 34.453915][ T3680] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 34.453984][ T3680] ? irqentry_exit+0x3c/0x510 [ 34.454006][ T3680] exc_page_fault+0x62/0xa0 [ 34.454073][ T3680] asm_exc_page_fault+0x26/0x30 [ 34.454092][ T3680] RIP: 0033:0x7ff423d860b8 [ 34.454111][ T3680] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 34.454162][ T3680] RSP: 002b:00007ffddb9f92d0 EFLAGS: 00010246 [ 34.454185][ T3680] RAX: 0000000000000000 RBX: 000055557cf35500 RCX: 00007ff423d8b78e [ 34.454207][ T3680] RDX: 00007ffddb9f9320 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.454219][ T3680] RBP: 00007ff424047da0 R08: 0000000000000000 R09: 0000000000000000 [ 34.454232][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000086ff [ 34.454243][ T3680] R13: 00007ff42404609c R14: 00000000000084b2 R15: 00007ff424046090 [ 34.454261][ T3680] [ 34.454267][ T3680] memory: usage 307200kB, limit 307200kB, failcnt 322 [ 34.693202][ T3680] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 34.701143][ T3680] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 34.708424][ T3680] Memory cgroup stats for /syz1: [ 34.709596][ T3680] cache 28672 [ 34.717829][ T3680] rss 4096 [ 34.720943][ T3680] shmem 0 [ 34.723863][ T3680] mapped_file 0 [ 34.727343][ T3680] dirty 0 [ 34.730274][ T3680] writeback 16384 [ 34.733892][ T3680] workingset_refault_anon 49 [ 34.738460][ T3680] workingset_refault_file 556 [ 34.743272][ T3680] swap 438272 [ 34.746553][ T3680] swapcached 20480 [ 34.750377][ T3680] pgpgin 7751 [ 34.753647][ T3680] pgpgout 7739 [ 34.757004][ T3680] pgfault 8307 [ 34.760432][ T3680] pgmajfault 12 [ 34.763882][ T3680] inactive_anon 16384 [ 34.767860][ T3680] active_anon 4096 [ 34.771575][ T3680] inactive_file 0 [ 34.775197][ T3680] active_file 28672 [ 34.779003][ T3680] unevictable 0 [ 34.782469][ T3680] hierarchical_memory_limit 314572800 [ 34.787901][ T3680] hierarchical_memsw_limit 9223372036854771712 [ 34.794046][ T3680] total_cache 28672 [ 34.797841][ T3680] total_rss 4096 [ 34.801415][ T3680] total_shmem 0 [ 34.804879][ T3680] total_mapped_file 0 [ 34.808831][ T3680] total_dirty 0 [ 34.812406][ T3680] total_writeback 16384 [ 34.816548][ T3680] total_workingset_refault_anon 49 [ 34.821650][ T3680] total_workingset_refault_file 556 [ 34.826859][ T3680] total_swap 438272 [ 34.830862][ T3680] total_swapcached 20480 [ 34.835126][ T3680] total_pgpgin 7751 [ 34.838905][ T3680] total_pgpgout 7739 [ 34.843058][ T3680] total_pgfault 8307 [ 34.846956][ T3680] total_pgmajfault 12 [ 34.851018][ T3680] total_inactive_anon 16384 [ 34.855563][ T3680] total_active_anon 4096 [ 34.859835][ T3680] total_inactive_file 0 [ 34.864042][ T3680] total_active_file 28672 [ 34.868342][ T3680] total_unevictable 0 [ 34.872345][ T3680] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.80,pid=3680,uid=0 [ 34.886778][ T3680] Memory cgroup out of memory: Killed process 3680 (syz.1.80) total-vm:96180kB, anon-rss:1156kB, file-rss:22208kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 34.945575][ T3692] syz.1.80 (3692) used greatest stack depth: 9832 bytes left [ 34.954574][ T3681] syz.1.80 (3681) used greatest stack depth: 7240 bytes left [ 34.972073][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 34.997528][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.069161][ T3736] vlan2: entered allmulticast mode [ 35.074593][ T3736] bond0: entered allmulticast mode [ 35.080053][ T3736] bond_slave_0: entered allmulticast mode [ 35.085788][ T3736] bond_slave_1: entered allmulticast mode [ 35.119448][ T3742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.103'. [ 35.146377][ T3742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.156348][ T3742] bond_slave_0: left allmulticast mode [ 35.163399][ T3742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.172495][ T3742] bond_slave_1: left allmulticast mode [ 35.178908][ T3742] bond0 (unregistering): Released all slaves [ 35.272991][ T3752] mmap: syz.2.110 (3752) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.351173][ T3766] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure [ 35.559891][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.163931][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 36.164000][ T29] audit: type=1400 audit(1769624186.545:226): avc: denied { name_bind } for pid=3799 comm="syz.3.127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.221120][ T3796] loop1: detected capacity change from 0 to 8192 [ 36.283711][ T29] audit: type=1400 audit(1769624186.655:227): avc: denied { mount } for pid=3795 comm="syz.1.137" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.305569][ T29] audit: type=1400 audit(1769624186.655:228): avc: denied { bind } for pid=3808 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.369114][ T29] audit: type=1400 audit(1769624186.745:229): avc: denied { watch } for pid=3810 comm="syz.0.132" path="/31" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.425540][ T3819] loop0: detected capacity change from 0 to 512 [ 36.442076][ T3819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.635984][ T3819] EXT4-fs (loop0): 1 truncate cleaned up [ 36.654806][ T29] audit: type=1326 audit(1769624187.035:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3816 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d720aeb9 code=0x7fc00000 [ 36.678173][ T29] audit: type=1326 audit(1769624187.035:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3816 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9d720aeb9 code=0x7fc00000 [ 36.700409][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.701414][ T29] audit: type=1326 audit(1769624187.035:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3816 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d720aeb9 code=0x7fc00000 [ 36.730775][ T29] audit: type=1326 audit(1769624187.035:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3816 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d720aeb9 code=0x7fc00000 [ 36.754149][ T29] audit: type=1326 audit(1769624187.035:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3816 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d720aeb9 code=0x7fc00000 [ 36.777425][ T29] audit: type=1326 audit(1769624187.035:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3816 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d720aeb9 code=0x7fc00000 [ 36.801508][ T3819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.876176][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.898100][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.910062][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.033726][ T3842] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 37.102937][ T3849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.146'. [ 37.125240][ T3849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 37.382967][ T3861] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 37.492218][ T3876] loop0: detected capacity change from 0 to 8192 [ 37.544339][ T3881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 37.553293][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 37.562127][ T3881] netlink: 'syz.2.159': attribute type 12 has an invalid length. [ 37.573977][ T3881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 37.579106][ T41] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.582841][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 37.582868][ T3881] netlink: 'syz.2.159': attribute type 12 has an invalid length. [ 37.612921][ T41] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.622254][ T41] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.631328][ T52] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.979856][ T3909] loop3: detected capacity change from 0 to 128 [ 38.427001][ T3937] sctp: [Deprecated]: syz.0.181 (pid 3937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.427001][ T3937] Use struct sctp_sack_info instead [ 38.679395][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 38.679643][ T3658] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.841053][ T3959] loop2: detected capacity change from 0 to 8192 [ 39.036229][ T3968] netlink: 'syz.0.194': attribute type 8 has an invalid length. [ 39.043926][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 39.055424][ T3968] bond0: entered promiscuous mode [ 39.060607][ T3968] bond_slave_0: entered promiscuous mode [ 39.066522][ T3968] bond_slave_1: entered promiscuous mode [ 39.076318][ T3968] gretap0: entered promiscuous mode [ 39.082476][ T3968] ip6gretap0: entered promiscuous mode [ 39.089177][ T3968] hsr1: entered promiscuous mode [ 39.141371][ T3972] loop1: detected capacity change from 0 to 2048 [ 39.162640][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.180238][ T3976] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3976 comm=syz.0.197 [ 39.232530][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.286144][ T3982] loop0: detected capacity change from 0 to 1024 [ 39.299217][ T3982] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.331191][ T3982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.351212][ T3982] EXT4-fs (loop0): shut down requested (0) [ 39.358837][ T3991] loop1: detected capacity change from 0 to 2048 [ 39.370135][ T3992] loop4: detected capacity change from 0 to 1024 [ 39.377366][ T3991] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.390753][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.404536][ T3992] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.423747][ T3991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.443920][ T3992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.202: bg 0: block 112: padding at end of block bitmap is not set [ 39.458660][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.467992][ T3992] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 39.480476][ T3992] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.480476][ T3992] [ 39.490880][ T3992] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 39.519684][ T3991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.204: bg 0: block 234: padding at end of block bitmap is not set [ 39.522562][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.547738][ T3991] EXT4-fs (loop1): Remounting filesystem read-only [ 39.565814][ T4002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 39.622231][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.693288][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.863689][ T4028] loop3: detected capacity change from 0 to 128 [ 39.876037][ T4028] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 39.884211][ T4028] FAT-fs (loop3): Filesystem has been set read-only [ 39.899773][ T4028] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 40.760398][ T4038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.219'. [ 40.792899][ T4046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.830774][ T2999] ================================================================== [ 40.838872][ T2999] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 40.846074][ T2999] [ 40.848393][ T2999] read-write to 0xffff888107b3e900 of 4 bytes by task 3304 on cpu 0: [ 40.856449][ T2999] dont_mount+0x2a/0x40 [ 40.860684][ T2999] vfs_unlink+0x2ae/0x440 [ 40.865028][ T2999] do_unlinkat+0x1e2/0x4b0 [ 40.869426][ T2999] __x64_sys_unlink+0x2e/0x40 [ 40.874135][ T2999] x64_sys_call+0x2f48/0x3000 [ 40.878801][ T2999] do_syscall_64+0xc0/0x2a0 [ 40.883296][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.889182][ T2999] [ 40.891489][ T2999] read to 0xffff888107b3e900 of 4 bytes by task 2999 on cpu 1: [ 40.899011][ T2999] step_into_slowpath+0x139/0x4c0 [ 40.904115][ T2999] path_lookupat+0x330/0x500 [ 40.908706][ T2999] filename_lookup+0x190/0x390 [ 40.913458][ T2999] do_readlinkat+0x7d/0x340 [ 40.917956][ T2999] __x64_sys_readlink+0x47/0x60 [ 40.922805][ T2999] x64_sys_call+0x2af1/0x3000 [ 40.927482][ T2999] do_syscall_64+0xc0/0x2a0 [ 40.931977][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.937855][ T2999] [ 40.940158][ T2999] value changed: 0x00300080 -> 0x00004080 [ 40.945854][ T2999] [ 40.948158][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 40.954290][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.963566][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.973604][ T2999] ================================================================== [ 41.709412][ T3658] Bluetooth: hci0: Opcode 0x1003 failed: -110