last executing test programs: 6.859985892s ago: executing program 3 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)) 2.021824564s ago: executing program 0 (id=158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200), 0x48) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$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") accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x0, 0x800) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x41020000, 0x0, 0xfffffffffffffd25) 2.021419204s ago: executing program 2 (id=159): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0) mq_notify(r1, &(0x7f0000001200)={0x0, 0x3f, 0x1}) io_uring_enter(0xffffffffffffffff, 0x1db2, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000001) r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000140), &(0x7f0000000640)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1.986906407s ago: executing program 2 (id=160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r5, @ANYBLOB="92"], 0x20}}, 0x0) 1.840954709s ago: executing program 2 (id=161): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0xd931d3864d39dcca) lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x73, 0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 1.680779073s ago: executing program 1 (id=164): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 1.398395788s ago: executing program 4 (id=166): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsmount(r0, 0x0, 0x0) 1.390138888s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = getpid() setreuid(0xee00, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) 1.37320712s ago: executing program 3 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.37131416s ago: executing program 4 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) 1.25571711s ago: executing program 1 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.25531516s ago: executing program 4 (id=170): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x541e, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xf1a8, 0x0, "1a96947d01000000000000008a81ca1e1238ec"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1.237627642s ago: executing program 3 (id=171): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x2, &(0x7f0000000580)={0x28, 0xffff, 0x1}) socket$inet(0x2, 0x1, 0x7) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8041, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c6465627567000000000100000065743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x0, 0x2aa, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.164994088s ago: executing program 0 (id=172): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) 1.163798268s ago: executing program 4 (id=173): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write(r0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 1.102849244s ago: executing program 0 (id=174): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f00000002c0), 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") open(&(0x7f0000000080)='./bus\x00', 0x125142, 0x14a) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60302, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0xc480, 0x0) ftruncate(r0, 0x2007ffd) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) sendmsg(r2, 0x0, 0x4) sendfile(r0, r1, 0x0, 0x1000000201005) 1.083420675s ago: executing program 1 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298a289e47091", 0xd}], 0x2) 1.040300589s ago: executing program 3 (id=176): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r2, 0x3}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='dat', 0x3}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x28, r3, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) 973.519695ms ago: executing program 2 (id=177): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 912.93079ms ago: executing program 3 (id=178): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000002c0)={0x6, 0x8001}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x102) close(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa7000be0) close(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 904.190661ms ago: executing program 1 (id=179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) 865.136384ms ago: executing program 2 (id=180): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001040), 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) creat(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 660.603672ms ago: executing program 0 (id=181): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 427.322852ms ago: executing program 2 (id=182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00000100000000"], 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) 425.216713ms ago: executing program 0 (id=192): iopl(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x22, 0x0, 0x0) 349.221249ms ago: executing program 3 (id=183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200), 0x48) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$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") accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x0, 0x800) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x41020000, 0x0, 0xfffffffffffffd25) 345.59746ms ago: executing program 0 (id=194): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x36b, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) 237.434519ms ago: executing program 4 (id=184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0) 111.92434ms ago: executing program 4 (id=185): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=186): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1, 0xf, 0x1) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) read$watch_queue(r2, &(0x7f0000000100)=""/33, 0x21) pread64(r2, &(0x7f0000000080)=""/128, 0x80, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000100)=ANY=[@ANYBLOB="6e725f699c0000007308002c007646f7087d318e52147fa595fc5e05019cd42a391e30cd1ee7c9be11cf13b51004c0a7ba7d918b07a98d1470bf8768909a7fdc5c9bef245d14261eae04a542476a5552df42df46587767c7235df5acb2803a2f0d38000000007c3b7d3a304751a6c191e71fe091edbe1daff965d138216e743944ca47ed1dc0f234cf1232e7978a41699b00a73500"/162]) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 12.252737][ T2964] udevd (2964) used greatest stack depth: 11856 bytes left [ 19.206067][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.206083][ T29] audit: type=1400 audit(1725639227.590:76): avc: denied { transition } for pid=3155 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.210130][ T29] audit: type=1400 audit(1725639227.590:77): avc: denied { noatsecure } for pid=3155 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.212735][ T29] audit: type=1400 audit(1725639227.590:78): avc: denied { write } for pid=3155 comm="sh" path="pipe:[544]" dev="pipefs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.215843][ T29] audit: type=1400 audit(1725639227.590:79): avc: denied { rlimitinh } for pid=3155 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.218441][ T29] audit: type=1400 audit(1725639227.590:80): avc: denied { siginh } for pid=3155 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.586421][ T3156] sshd (3156) used greatest stack depth: 11240 bytes left [ 20.887528][ T29] audit: type=1400 audit(1725639229.280:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 27.088718][ T29] audit: type=1400 audit(1725639235.470:82): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.090040][ T3250] cgroup: Unknown subsys name 'net' [ 27.111536][ T29] audit: type=1400 audit(1725639235.470:83): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.138902][ T29] audit: type=1400 audit(1725639235.510:84): avc: denied { unmount } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.276349][ T3250] cgroup: Unknown subsys name 'rlimit' [ 27.400050][ T29] audit: type=1400 audit(1725639235.780:85): avc: denied { setattr } for pid=3250 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.423358][ T29] audit: type=1400 audit(1725639235.780:86): avc: denied { create } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.443969][ T29] audit: type=1400 audit(1725639235.780:87): avc: denied { write } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.464738][ T29] audit: type=1400 audit(1725639235.780:88): avc: denied { read } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.485007][ T29] audit: type=1400 audit(1725639235.800:89): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.489881][ T3254] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.509798][ T29] audit: type=1400 audit(1725639235.800:90): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.531792][ T3250] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.541548][ T29] audit: type=1400 audit(1725639235.910:91): avc: denied { relabelto } for pid=3254 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.716215][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 28.725257][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 28.742153][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 28.763580][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 28.848528][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.855701][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.862855][ T3260] bridge_slave_0: entered allmulticast mode [ 28.869367][ T3260] bridge_slave_0: entered promiscuous mode [ 28.897274][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.904417][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.911545][ T3260] bridge_slave_1: entered allmulticast mode [ 28.918022][ T3260] bridge_slave_1: entered promiscuous mode [ 28.924138][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.931219][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.938340][ T3261] bridge_slave_0: entered allmulticast mode [ 28.944811][ T3261] bridge_slave_0: entered promiscuous mode [ 28.953083][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.960195][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.967495][ T3261] bridge_slave_1: entered allmulticast mode [ 28.973960][ T3261] bridge_slave_1: entered promiscuous mode [ 28.984755][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.991885][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.999048][ T3269] bridge_slave_0: entered allmulticast mode [ 29.005404][ T3269] bridge_slave_0: entered promiscuous mode [ 29.035586][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.042747][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.050184][ T3269] bridge_slave_1: entered allmulticast mode [ 29.056736][ T3269] bridge_slave_1: entered promiscuous mode [ 29.068928][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.080921][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.091365][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.100695][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.107844][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.115210][ T3263] bridge_slave_0: entered allmulticast mode [ 29.121534][ T3263] bridge_slave_0: entered promiscuous mode [ 29.133068][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 29.142859][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.157829][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.167063][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.174245][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.181572][ T3263] bridge_slave_1: entered allmulticast mode [ 29.188129][ T3263] bridge_slave_1: entered promiscuous mode [ 29.207938][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.235208][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.250018][ T3260] team0: Port device team_slave_0 added [ 29.256577][ T3261] team0: Port device team_slave_0 added [ 29.262852][ T3260] team0: Port device team_slave_1 added [ 29.274126][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.290699][ T3261] team0: Port device team_slave_1 added [ 29.314551][ T3269] team0: Port device team_slave_0 added [ 29.338196][ T3269] team0: Port device team_slave_1 added [ 29.344255][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.351203][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.377174][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.388346][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.395327][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.421270][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.432355][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.439415][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.465565][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.477107][ T3263] team0: Port device team_slave_0 added [ 29.483015][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.490062][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.515976][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.538334][ T3263] team0: Port device team_slave_1 added [ 29.557545][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.564835][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.572029][ T3265] bridge_slave_0: entered allmulticast mode [ 29.578658][ T3265] bridge_slave_0: entered promiscuous mode [ 29.590285][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.597290][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.623333][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.635100][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.642063][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.668020][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.681910][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.689112][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.696273][ T3265] bridge_slave_1: entered allmulticast mode [ 29.702700][ T3265] bridge_slave_1: entered promiscuous mode [ 29.733452][ T3261] hsr_slave_0: entered promiscuous mode [ 29.739517][ T3261] hsr_slave_1: entered promiscuous mode [ 29.755696][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.762653][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.788649][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.817309][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.826933][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.833888][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.860191][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.877671][ T3260] hsr_slave_0: entered promiscuous mode [ 29.883936][ T3260] hsr_slave_1: entered promiscuous mode [ 29.889899][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.897483][ T3260] Cannot create hsr debugfs directory [ 29.904147][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.929179][ T3269] hsr_slave_0: entered promiscuous mode [ 29.935454][ T3269] hsr_slave_1: entered promiscuous mode [ 29.941443][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.949048][ T3269] Cannot create hsr debugfs directory [ 29.959976][ T3265] team0: Port device team_slave_0 added [ 29.983795][ T3265] team0: Port device team_slave_1 added [ 30.023529][ T3263] hsr_slave_0: entered promiscuous mode [ 30.029622][ T3263] hsr_slave_1: entered promiscuous mode [ 30.035623][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.043176][ T3263] Cannot create hsr debugfs directory [ 30.056178][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.063131][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.089067][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.102270][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.109252][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.135477][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.205230][ T3265] hsr_slave_0: entered promiscuous mode [ 30.211602][ T3265] hsr_slave_1: entered promiscuous mode [ 30.217586][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.225212][ T3265] Cannot create hsr debugfs directory [ 30.297444][ T3260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.319559][ T3260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.328325][ T3260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.349409][ T3260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.391395][ T3269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.400166][ T3269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.412853][ T3269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.440946][ T3261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.450772][ T3269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.460211][ T3261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.469034][ T3261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.477851][ T3261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.526707][ T3263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.537832][ T3263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.575723][ T3265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.584747][ T3263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.595732][ T3263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.608636][ T3265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.617605][ T3265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.630771][ T3265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.658956][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.682504][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.703519][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.721386][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.737137][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.744363][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.753214][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.760322][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.785778][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.794082][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.818379][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.825662][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.834795][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.841863][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.850436][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.857537][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.872372][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.882777][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.902308][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.922686][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.933191][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.975055][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.982219][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.997129][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.011720][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.018833][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.035740][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.050658][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.057768][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.074967][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.087221][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.105024][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.117763][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.124933][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.133668][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.140776][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.175632][ T3269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.296180][ T3260] veth0_vlan: entered promiscuous mode [ 31.304006][ T3260] veth1_vlan: entered promiscuous mode [ 31.335586][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.349896][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.395021][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.420987][ T3261] veth0_vlan: entered promiscuous mode [ 31.431021][ T3260] veth0_macvtap: entered promiscuous mode [ 31.441091][ T3260] veth1_macvtap: entered promiscuous mode [ 31.459821][ T3261] veth1_vlan: entered promiscuous mode [ 31.484489][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.493560][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.508374][ T3269] veth0_vlan: entered promiscuous mode [ 31.515920][ T3265] veth0_vlan: entered promiscuous mode [ 31.533595][ T3260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.542412][ T3260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.551278][ T3260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.560190][ T3260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.573893][ T3269] veth1_vlan: entered promiscuous mode [ 31.594775][ T3265] veth1_vlan: entered promiscuous mode [ 31.618016][ T3261] veth0_macvtap: entered promiscuous mode [ 31.633208][ T3269] veth0_macvtap: entered promiscuous mode [ 31.643043][ T3263] veth0_vlan: entered promiscuous mode [ 31.651893][ T3269] veth1_macvtap: entered promiscuous mode [ 31.666466][ T3263] veth1_vlan: entered promiscuous mode [ 31.686072][ T3261] veth1_macvtap: entered promiscuous mode [ 31.695681][ T3400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.706503][ T3265] veth0_macvtap: entered promiscuous mode [ 31.723125][ T3265] veth1_macvtap: entered promiscuous mode [ 31.734899][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.745461][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.756754][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.764752][ T3263] veth0_macvtap: entered promiscuous mode [ 31.772810][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.783352][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.793188][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.803726][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.814667][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.825966][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.836558][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.847339][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.856415][ T3261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865263][ T3261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.873958][ T3261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.882815][ T3261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.896949][ T3263] veth1_macvtap: entered promiscuous mode [ 31.905247][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.915866][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.925685][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.936230][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.946044][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.956525][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.967270][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.986651][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.997395][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.007337][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.017780][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.028735][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.036200][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.046673][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.056632][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.067118][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.076941][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.087480][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.098294][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.112689][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121569][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.130313][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.139028][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.154078][ T3265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.163214][ T3265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.172015][ T3265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.180736][ T3265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191139][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.201812][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.211711][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.222257][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.232111][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.242556][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.252455][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.262886][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.273602][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.294411][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.305028][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.314893][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.325506][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 32.325521][ T29] audit: type=1400 audit(1725639240.680:121): avc: denied { map_create } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.331669][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.331681][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.350482][ T29] audit: type=1400 audit(1725639240.680:122): avc: denied { map_read map_write } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.360304][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.370805][ T29] audit: type=1400 audit(1725639240.680:123): avc: denied { prog_load } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.370835][ T29] audit: type=1400 audit(1725639240.680:124): avc: denied { bpf } for pid=3403 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.370858][ T29] audit: type=1400 audit(1725639240.680:125): avc: denied { perfmon } for pid=3403 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.390411][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.400152][ T29] audit: type=1400 audit(1725639240.680:126): avc: denied { prog_run } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.418822][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.460488][ T29] audit: type=1400 audit(1725639240.850:127): avc: denied { ioctl } for pid=3403 comm="syz.4.5" path="socket:[2751]" dev="sockfs" ino=2751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.473596][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.544111][ T3263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.553092][ T3263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.562056][ T3263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.570896][ T3263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.598353][ T29] audit: type=1400 audit(1725639240.980:128): avc: denied { create } for pid=3407 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.626825][ T29] audit: type=1400 audit(1725639240.980:129): avc: denied { write } for pid=3407 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.733179][ T3419] loop0: detected capacity change from 0 to 512 [ 32.752880][ T29] audit: type=1400 audit(1725639241.130:130): avc: denied { block_suspend } for pid=3405 comm="syz.4.7" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.766317][ T3419] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.787029][ T3419] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.794031][ T3421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.892319][ T3419] EXT4-fs (loop0): 1 truncate cleaned up [ 32.907855][ T3419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.941122][ T3440] loop2: detected capacity change from 0 to 512 [ 32.950359][ T3440] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.11: corrupted in-inode xattr: invalid ea_ino [ 32.971340][ T3440] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11: couldn't read orphan inode 15 (err -117) [ 32.972176][ T3443] loop1: detected capacity change from 0 to 512 [ 32.997513][ T3440] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.019243][ T3443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.054574][ T3443] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.099662][ T3269] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 33.118453][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.149376][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 33.205625][ T3455] tipc: Started in network mode [ 33.210514][ T3455] tipc: Node identity 2, cluster identity 4711 [ 33.216790][ T3455] tipc: Node number set to 2 [ 33.227650][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.255505][ T3457] syz.2.15[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.255583][ T3457] syz.2.15[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.287328][ T3457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 33.307805][ T3457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 33.328918][ T3457] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 33.342492][ T3457] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 33.384644][ T3461] syzkaller0: entered allmulticast mode [ 33.483566][ T3461] syzkaller0 (unregistering): left allmulticast mode [ 33.699818][ T3477] netlink: 14 bytes leftover after parsing attributes in process `syz.1.24'. [ 33.705532][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 33.724404][ C1] vxcan0: j1939_tp_txtimer: 0xffff888115fdc000: tx aborted with unknown reason: -2 [ 33.809367][ T3489] can0: slcan on pts0. [ 33.904419][ T3489] can0 (unregistered): slcan off pts0. [ 33.950897][ T3509] loop1: detected capacity change from 0 to 2048 [ 33.973119][ T3512] loop3: detected capacity change from 0 to 2048 [ 33.988260][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.017313][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.076076][ T3512] loop3: unable to read partition table [ 34.081758][ T3512] loop3: partition table beyond EOD, truncated [ 34.087991][ T3512] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 34.122407][ T2962] loop3: unable to read partition table [ 34.128411][ T2962] loop3: partition table beyond EOD, truncated [ 34.205688][ T3539] loop3: detected capacity change from 0 to 512 [ 34.213704][ T3539] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.37: corrupted in-inode xattr: invalid ea_ino [ 34.227263][ T3539] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.37: couldn't read orphan inode 15 (err -117) [ 34.239606][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.286337][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.312748][ T3542] Falling back ldisc for ptm0. [ 34.337123][ T3544] netlink: 830 bytes leftover after parsing attributes in process `syz.3.39'. [ 34.400389][ T3549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 34.536882][ T3555] loop2: detected capacity change from 0 to 512 [ 34.543558][ T3555] EXT4-fs: Ignoring removed bh option [ 34.549753][ T3555] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 34.559272][ T3555] EXT4-fs (loop2): 1 truncate cleaned up [ 34.565375][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.582403][ T3555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.656023][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 34.668025][ T3562] dummy0: entered promiscuous mode [ 34.743156][ T3566] loop4: detected capacity change from 0 to 1024 [ 34.750810][ T3566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.765411][ T3566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043e018, mo2=0002] [ 34.773558][ T3566] System zones: 0-1, 3-12 [ 34.778409][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.795459][ T3566] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 16: comm syz.4.50: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 34.824482][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.862728][ T3573] loop4: detected capacity change from 0 to 128 [ 34.928378][ T3577] netlink: 'syz.1.54': attribute type 10 has an invalid length. [ 34.947987][ T3577] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 34.958374][ T3577] team0: Failed to send options change via netlink (err -105) [ 34.965977][ T3577] team0: Port device netdevsim1 added [ 35.012359][ T3581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.56'. [ 35.021538][ T3581] unsupported nlmsg_type 40 [ 35.043547][ T3585] Illegal XDP return value 4291121152 on prog (id 45) dev N/A, expect packet loss! [ 35.068165][ T3587] netlink: 'syz.4.59': attribute type 29 has an invalid length. [ 35.076804][ T3587] netlink: 'syz.4.59': attribute type 29 has an invalid length. [ 35.085807][ T3587] netlink: 500 bytes leftover after parsing attributes in process `syz.4.59'. [ 35.094852][ T3587] unsupported nla_type 40 [ 35.871044][ T3603] loop1: detected capacity change from 0 to 2048 [ 35.886656][ T3603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.975312][ T3606] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.63: bg 0: block 234: padding at end of block bitmap is not set [ 35.980743][ T3608] loop4: detected capacity change from 0 to 1024 [ 35.990197][ T3606] EXT4-fs (loop1): Remounting filesystem read-only [ 36.002042][ T3608] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 36.013724][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.029646][ T3606] syz.1.63 (3606) used greatest stack depth: 9432 bytes left [ 36.052707][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.096270][ T3611] loop1: detected capacity change from 0 to 128 [ 36.131781][ T3615] loop2: detected capacity change from 0 to 512 [ 36.149084][ T3615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.161732][ T3615] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.176856][ T3615] syz.2.68[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.176931][ T3615] syz.2.68[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.201232][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.291863][ T3624] loop2: detected capacity change from 0 to 512 [ 36.302337][ T3624] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 36.312263][ T3626] pim6reg1: entered promiscuous mode [ 36.317669][ T3626] pim6reg1: entered allmulticast mode [ 36.717664][ T3635] pim6reg1: entered promiscuous mode [ 36.723088][ T3635] pim6reg1: entered allmulticast mode [ 37.335938][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.346856][ T3358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.385360][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 37.385377][ T29] audit: type=1400 audit(1725639245.770:245): avc: denied { create } for pid=3679 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.414701][ T3681] loop0: detected capacity change from 0 to 512 [ 37.422282][ T3358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.433053][ T3681] EXT4-fs: Ignoring removed nobh option [ 37.443411][ T29] audit: type=1400 audit(1725639245.800:246): avc: denied { connect } for pid=3679 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.462908][ T29] audit: type=1400 audit(1725639245.800:247): avc: denied { write } for pid=3679 comm="syz.2.91" path="socket:[4175]" dev="sockfs" ino=4175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.491850][ T3681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.505581][ T29] audit: type=1400 audit(1725639245.830:248): avc: denied { mounton } for pid=3683 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.532372][ T3358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.575149][ T3681] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.608271][ T3358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.624037][ T3681] EXT4-fs (loop0): 1 truncate cleaned up [ 37.630544][ T3681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.717935][ T29] audit: type=1400 audit(1725639246.100:249): avc: denied { search } for pid=3000 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.768269][ T3358] bridge_slave_1: left allmulticast mode [ 37.774447][ T3358] bridge_slave_1: left promiscuous mode [ 37.780329][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.813547][ T3358] bridge_slave_0: left allmulticast mode [ 37.819419][ T3358] bridge_slave_0: left promiscuous mode [ 37.825180][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.867732][ T29] audit: type=1400 audit(1725639246.230:250): avc: denied { view } for pid=3703 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.938770][ T29] audit: type=1400 audit(1725639246.320:251): avc: denied { create } for pid=3677 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.977845][ T29] audit: type=1400 audit(1725639246.360:252): avc: denied { write } for pid=3709 comm="syz.2.100" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.001477][ T29] audit: type=1400 audit(1725639246.360:253): avc: denied { ioctl } for pid=3709 comm="syz.2.100" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.076937][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.093489][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.114565][ T3358] bond0 (unregistering): Released all slaves [ 38.177015][ T29] audit: type=1400 audit(1725639246.560:254): avc: denied { read } for pid=3723 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.253732][ T3358] hsr_slave_0: left promiscuous mode [ 38.263821][ T3358] hsr_slave_1: left promiscuous mode [ 38.271264][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.278843][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.294686][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.302105][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.314276][ T3358] veth1_macvtap: left promiscuous mode [ 38.319851][ T3358] veth0_macvtap: left promiscuous mode [ 38.325428][ T3358] veth1_vlan: left promiscuous mode [ 38.330680][ T3358] veth0_vlan: left promiscuous mode [ 38.341496][ T3678] syz.0.90 (3678) used greatest stack depth: 7384 bytes left [ 38.355694][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.446926][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 38.447386][ T3744] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET) [ 38.460936][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 38.687191][ T3683] chnl_net:caif_netlink_parms(): no params data found [ 38.836238][ T3694] chnl_net:caif_netlink_parms(): no params data found [ 38.860966][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.868141][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.888907][ T3683] bridge_slave_0: entered allmulticast mode [ 38.899360][ T3683] bridge_slave_0: entered promiscuous mode [ 38.906878][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.913963][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.921753][ T3683] bridge_slave_1: entered allmulticast mode [ 38.936253][ T3683] bridge_slave_1: entered promiscuous mode [ 38.974290][ T3792] loop0: detected capacity change from 0 to 512 [ 38.981959][ T3792] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.993957][ T3683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.004067][ T3792] EXT4-fs (loop0): 1 truncate cleaned up [ 39.006554][ T3790] syzkaller0: entered allmulticast mode [ 39.015878][ T3792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.031687][ T3683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.046063][ T3790] syzkaller0 (unregistering): left allmulticast mode [ 39.135643][ T3683] team0: Port device team_slave_0 added [ 39.162656][ T3358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.184915][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.192071][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.211542][ T3694] bridge_slave_0: entered allmulticast mode [ 39.217955][ T3694] bridge_slave_0: entered promiscuous mode [ 39.224945][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.232022][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.239355][ T3694] bridge_slave_1: entered allmulticast mode [ 39.246034][ T3694] bridge_slave_1: entered promiscuous mode [ 39.261398][ T3683] team0: Port device team_slave_1 added [ 39.305638][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.328466][ T3358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.382622][ T3694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.396354][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.403348][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.429305][ T3683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.457423][ T3358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.470127][ T3694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.492646][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.499807][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.525824][ T3683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.547921][ T3358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.564049][ T3694] team0: Port device team_slave_0 added [ 39.571027][ T3694] team0: Port device team_slave_1 added [ 39.594007][ T3694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.601074][ T3694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.627002][ T3694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.646886][ T3694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.653915][ T3694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.679890][ T3694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.707379][ T3838] loop2: detected capacity change from 0 to 512 [ 39.714644][ T3683] hsr_slave_0: entered promiscuous mode [ 39.720844][ T3683] hsr_slave_1: entered promiscuous mode [ 39.728962][ T3838] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 39.782348][ T3694] hsr_slave_0: entered promiscuous mode [ 39.792852][ T3694] hsr_slave_1: entered promiscuous mode [ 39.809361][ T3694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.823220][ T3694] Cannot create hsr debugfs directory [ 39.864524][ T3358] bridge_slave_1: left allmulticast mode [ 39.870221][ T3358] bridge_slave_1: left promiscuous mode [ 39.876124][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.894682][ T3854] loop1: detected capacity change from 0 to 1024 [ 39.904417][ T3358] bridge_slave_0: left allmulticast mode [ 39.910138][ T3358] bridge_slave_0: left promiscuous mode [ 39.915865][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.927084][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.960627][ T3864] loop2: detected capacity change from 0 to 512 [ 39.986360][ T3864] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.125: casefold flag without casefold feature [ 40.009472][ T3864] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.125: couldn't read orphan inode 15 (err -117) [ 40.022116][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.073593][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.106469][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.123390][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.156076][ T3358] bond0 (unregistering): Released all slaves [ 40.197486][ T3875] loop0: detected capacity change from 0 to 256 [ 40.214197][ T3878] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 40.221919][ T3878] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 40.229615][ T3878] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.128'. [ 40.246848][ T3875] vfat: Bad value for 'uid' [ 40.251397][ T3875] vfat: Bad value for 'uid' [ 40.397330][ T3358] hsr_slave_0: left promiscuous mode [ 40.405688][ T3358] hsr_slave_1: left promiscuous mode [ 40.411400][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.419024][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.427570][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.435026][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.457986][ T3358] veth1_macvtap: left promiscuous mode [ 40.463604][ T3358] veth0_macvtap: left promiscuous mode [ 40.469290][ T3358] veth1_vlan: left promiscuous mode [ 40.474607][ T3358] veth0_vlan: left promiscuous mode [ 40.504890][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.521843][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.534358][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.534358][ T50] [ 40.544137][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 40.550202][ T50] EXT4-fs (loop1): Free/Dirty block details [ 40.556154][ T50] EXT4-fs (loop1): free_blocks=68451041280 [ 40.561991][ T50] EXT4-fs (loop1): dirty_blocks=16384 [ 40.567399][ T50] EXT4-fs (loop1): Block reservation details [ 40.573387][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1024 [ 40.591869][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 40.662312][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 40.672957][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 40.732073][ T3904] pim6reg1: entered promiscuous mode [ 40.737655][ T3904] pim6reg1: entered allmulticast mode [ 40.973866][ T3942] loop0: detected capacity change from 0 to 1024 [ 40.986052][ T3942] EXT4-fs: Ignoring removed oldalloc option [ 41.011455][ T3942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.075443][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.173846][ T3957] loop0: detected capacity change from 0 to 1024 [ 41.191153][ T3964] capability: warning: `syz.2.143' uses deprecated v2 capabilities in a way that may be insecure [ 41.232061][ T3957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.235028][ T3683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.269768][ T3957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.141'. [ 41.286334][ T3683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.302832][ T3683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.310343][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.325132][ T3694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.339013][ T3978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 41.345566][ T3978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 41.353486][ T3978] vhci_hcd vhci_hcd.0: Device attached [ 41.365858][ T3683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.380482][ T3694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.391090][ T3694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.400799][ T3694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.460795][ T3683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.484422][ T3683] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.498691][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.505769][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.507696][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.507774][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.512812][ T3694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.567357][ T3981] vhci_hcd: connection closed [ 41.567689][ T3358] vhci_hcd: stop threads [ 41.576729][ T3358] vhci_hcd: release socket [ 41.581164][ T3358] vhci_hcd: disconnect device [ 41.601155][ T3694] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.619996][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.624394][ T35] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 41.627077][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.644405][ T35] usb 5-1: enqueue for inactive port 0 [ 41.650184][ T35] usb 5-1: enqueue for inactive port 0 [ 41.657632][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.664210][ T35] usb 5-1: enqueue for inactive port 0 [ 41.664730][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.701158][ T3694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.711682][ T3694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.754400][ T35] vhci_hcd: vhci_device speed not set [ 41.836662][ T3683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.885883][ T3694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.059282][ T3694] veth0_vlan: entered promiscuous mode [ 42.086889][ T3694] veth1_vlan: entered promiscuous mode [ 42.107708][ T3683] veth0_vlan: entered promiscuous mode [ 42.147534][ T3683] veth1_vlan: entered promiscuous mode [ 42.180573][ T4075] vlan2: entered allmulticast mode [ 42.265907][ T3694] veth0_macvtap: entered promiscuous mode [ 42.273884][ T3683] veth0_macvtap: entered promiscuous mode [ 42.287496][ T3694] veth1_macvtap: entered promiscuous mode [ 42.307002][ T3683] veth1_macvtap: entered promiscuous mode [ 42.337366][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.347956][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.357860][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.368432][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.378528][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.389234][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.404063][ T3694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.418789][ T4099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.447950][ T4104] loop0: detected capacity change from 0 to 256 [ 42.459510][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.470087][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.479965][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.490495][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.500332][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.510884][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.533401][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.584916][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.595583][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.605438][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.616056][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.625914][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.636450][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.649638][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.659959][ T3683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.668694][ T3683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.677469][ T3683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.686206][ T3683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.715412][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.725907][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.735748][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.746238][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.756085][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.766653][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.776610][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.787064][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.801034][ T3694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.867365][ T3694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.876230][ T3694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.884966][ T3694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.893677][ T3694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.027553][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 43.027569][ T29] audit: type=1400 audit(1725639251.410:342): avc: denied { create } for pid=4155 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 43.069085][ T4161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 43.101626][ T4161] Zero length message leads to an empty skb [ 43.109337][ T29] audit: type=1400 audit(1725639251.440:343): avc: denied { sys_admin } for pid=4155 comm="syz.1.167" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 43.150722][ T4172] xt_nat: multiple ranges no longer supported [ 43.172179][ T4170] pim6reg1: entered promiscuous mode [ 43.177633][ T4170] pim6reg1: entered allmulticast mode [ 43.213473][ T4175] loop3: detected capacity change from 0 to 128 [ 43.248938][ T4175] ======================================================= [ 43.248938][ T4175] WARNING: The mand mount option has been deprecated and [ 43.248938][ T4175] and is ignored by this kernel. Remove the mand [ 43.248938][ T4175] option from the mount to silence this warning. [ 43.248938][ T4175] ======================================================= [ 43.321402][ T4187] loop0: detected capacity change from 0 to 1024 [ 43.349329][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.375345][ T4200] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 43.415565][ T29] audit: type=1400 audit(1725639251.790:344): avc: denied { connect } for pid=4186 comm="syz.0.174" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.530005][ T29] audit: type=1400 audit(1725639251.890:345): avc: denied { watch } for pid=4207 comm="syz.3.178" path="/3/control" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.552290][ T29] audit: type=1326 audit(1725639251.900:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000 [ 43.575677][ T29] audit: type=1326 audit(1725639251.900:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000 [ 43.598979][ T29] audit: type=1326 audit(1725639251.910:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000 [ 43.622304][ T29] audit: type=1326 audit(1725639251.910:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000 [ 43.661462][ T29] audit: type=1326 audit(1725639251.910:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000 [ 43.680753][ T4212] loop2: detected capacity change from 0 to 2048 [ 43.684930][ T29] audit: type=1326 audit(1725639252.000:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000 [ 43.729493][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.731659][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.822773][ T4217] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.830776][ T4218] mmap: syz.4.173 (4218) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.839037][ T4217] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1372 with error 28 [ 43.861972][ T4217] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.861972][ T4217] [ 43.871692][ T4217] EXT4-fs (loop2): Total free blocks count 0 [ 43.877791][ T4217] EXT4-fs (loop2): Free/Dirty block details [ 43.883766][ T4217] EXT4-fs (loop2): free_blocks=2415919104 [ 43.889538][ T4217] EXT4-fs (loop2): dirty_blocks=1376 [ 43.894910][ T4217] EXT4-fs (loop2): Block reservation details [ 43.900973][ T4217] EXT4-fs (loop2): i_reserved_data_blocks=86 [ 43.977535][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.076685][ T4227] loop2: detected capacity change from 0 to 512 [ 44.093735][ T4227] EXT4-fs: Ignoring removed nobh option [ 44.106245][ T4228] loop3: detected capacity change from 0 to 256 [ 44.127376][ T4227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.152254][ T4227] EXT4-fs (loop2): 1 truncate cleaned up [ 44.166801][ T4227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.393735][ T4235] syz.4.185[4235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.393809][ T4235] syz.4.185[4235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.457342][ T4238] tmpfs: Unknown parameter 'nr_iœ' [ 44.713223][ T4222] ================================================================== [ 44.721506][ T4222] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 44.728896][ T4222] [ 44.731218][ T4222] read-write to 0xffff8881129bfe68 of 4 bytes by task 4221 on cpu 0: [ 44.739285][ T4222] mem_cgroup_iter+0x28e/0x380 [ 44.743552][ T4221] syz.2.182 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 44.744051][ T4222] shrink_node+0x74a/0x1d40 [ 44.744081][ T4222] do_try_to_free_pages+0x3c6/0xc50 [ 44.755026][ T4221] CPU: 0 UID: 0 PID: 4221 Comm: syz.2.182 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 44.759583][ T4222] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 44.764759][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 44.775318][ T4222] try_charge_memcg+0x2bc/0x810 [ 44.781189][ T4221] Call Trace: [ 44.781199][ T4221] [ 44.791229][ T4222] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 44.791260][ T4222] __read_swap_cache_async+0x2b7/0x520 [ 44.791289][ T4222] swap_cluster_readahead+0x276/0x3f0 [ 44.796132][ T4221] dump_stack_lvl+0xf2/0x150 [ 44.799409][ T4222] swapin_readahead+0xe4/0x760 [ 44.802520][ T4221] dump_stack+0x15/0x20 [ 44.808569][ T4222] do_swap_page+0x3da/0x1ef0 [ 44.814010][ T4221] dump_header+0x83/0x2d0 [ 44.819370][ T4222] handle_mm_fault+0x8cb/0x2a30 [ 44.823966][ T4221] oom_kill_process+0x341/0x4c0 [ 44.828708][ T4222] exc_page_fault+0x3b9/0x650 [ 44.832907][ T4221] out_of_memory+0x9af/0xbe0 [ 44.837476][ T4222] asm_exc_page_fault+0x26/0x30 [ 44.841789][ T4221] ? __rcu_read_unlock+0x4e/0x70 [ 44.846621][ T4222] [ 44.846629][ T4222] read to 0xffff8881129bfe68 of 4 bytes by task 4222 on cpu 1: [ 44.851457][ T4221] mem_cgroup_out_of_memory+0x13e/0x190 [ 44.856108][ T4222] mem_cgroup_iter+0x93/0x380 [ 44.860685][ T4221] try_charge_memcg+0x51b/0x810 [ 44.865505][ T4222] shrink_node+0x74a/0x1d40 [ 44.870434][ T4221] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 44.872739][ T4222] do_try_to_free_pages+0x3c6/0xc50 [ 44.880267][ T4221] __read_swap_cache_async+0x2b7/0x520 [ 44.885793][ T4222] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 44.890457][ T4221] swap_cluster_readahead+0x276/0x3f0 [ 44.895278][ T4222] try_charge_memcg+0x2bc/0x810 [ 44.899767][ T4221] swapin_readahead+0xe4/0x760 [ 44.905808][ T4222] obj_cgroup_charge_pages+0xbd/0x1a0 [ 44.910991][ T4221] ? __filemap_get_folio+0x420/0x5b0 [ 44.916427][ T4222] __memcg_kmem_charge_page+0x9d/0x170 [ 44.922305][ T4221] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 44.927652][ T4222] __alloc_pages_noprof+0x1bc/0x360 [ 44.932489][ T4221] ? swap_cache_get_folio+0x77/0x210 [ 44.937226][ T4222] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 44.942576][ T4221] do_swap_page+0x3da/0x1ef0 [ 44.947834][ T4222] alloc_pages_noprof+0xe1/0x100 [ 44.953272][ T4221] ? cgroup_rstat_updated+0x99/0x550 [ 44.958804][ T4222] __vmalloc_node_range_noprof+0x736/0xec0 [ 44.964026][ T4221] ? __rcu_read_lock+0x36/0x50 [ 44.969291][ T4222] __kvmalloc_node_noprof+0x121/0x170 [ 44.974649][ T4221] ? pte_offset_map_nolock+0x124/0x1d0 [ 44.979217][ T4222] ip_set_alloc+0x1f/0x30 [ 44.979244][ T4222] hash_netiface_create+0x273/0x730 [ 44.979270][ T4222] ip_set_create+0x359/0x8a0 [ 44.984199][ T4221] handle_mm_fault+0x8cb/0x2a30 [ 44.989461][ T4222] nfnetlink_rcv_msg+0x4a9/0x570 [ 44.995260][ T4221] exc_page_fault+0x3b9/0x650 [ 44.999993][ T4222] netlink_rcv_skb+0x12c/0x230 [ 45.005349][ T4221] asm_exc_page_fault+0x26/0x30 [ 45.010785][ T4222] nfnetlink_rcv+0x16c/0x15e0 [ 45.015110][ T4221] RIP: 0033:0x7f7d1dc009cc [ 45.020276][ T4222] netlink_unicast+0x599/0x670 [ 45.024856][ T4221] Code: 72 64 0f 1f 40 00 69 3d e6 4c e1 00 e8 03 00 00 48 8d 1d c7 55 2e 00 e8 92 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 45.029693][ T4222] netlink_sendmsg+0x5cc/0x6e0 [ 45.034607][ T4221] RSP: 002b:00007fffb1dcfcf0 EFLAGS: 00010206 [ 45.039263][ T4222] __sock_sendmsg+0x140/0x180 [ 45.044006][ T4221] [ 45.044012][ T4221] RAX: 0000000000000000 RBX: 00007f7d1dee5f80 RCX: 0000000000000000 [ 45.048878][ T4222] ____sys_sendmsg+0x312/0x410 [ 45.053555][ T4221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555581892808 [ 45.057948][ T4222] __sys_sendmsg+0x1e9/0x280 [ 45.062695][ T4221] RBP: 00007f7d1dee7a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 45.082283][ T4222] __x64_sys_sendmsg+0x46/0x50 [ 45.087029][ T4221] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000af23 [ 45.093076][ T4222] x64_sys_call+0x2689/0x2d60 [ 45.093106][ T4222] do_syscall_64+0xc9/0x1c0 [ 45.093128][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.097785][ T4221] R13: 00007fffb1dcfdf0 R14: 0000000000000032 R15: ffffffffffffffff [ 45.100097][ T4222] [ 45.100103][ T4222] value changed: 0x0000014b -> 0x0000014c [ 45.108059][ T4221] [ 45.112816][ T4222] [ 45.112821][ T4222] Reported by Kernel Concurrency Sanitizer on: [ 45.120822][ T4221] memory: usage 307200kB, limit 307200kB, failcnt 102 [ 45.125352][ T4222] CPU: 1 UID: 0 PID: 4222 Comm: syz.2.182 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 45.125382][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 45.125394][ T4222] ================================================================== [ 45.228538][ T4221] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 45.236566][ T4221] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0 [ 45.243865][ T4221] Memory cgroup stats for /syz2: [ 45.246439][ T4221] cache 126976 [ 45.254848][ T4221] rss 4096 [ 45.257883][ T4221] shmem 0 [ 45.260862][ T4221] mapped_file 110592 [ 45.264823][ T4221] dirty 122880 [ 45.268200][ T4221] writeback 12288 [ 45.271891][ T4221] workingset_refault_anon 8 [ 45.276431][ T4221] workingset_refault_file 15 [ 45.281027][ T4221] swap 536576 [ 45.284414][ T4221] swapcached 24576 [ 45.288129][ T4221] pgpgin 3430 [ 45.291447][ T4221] pgpgout 3393 [ 45.294829][ T4221] pgfault 7155 [ 45.298197][ T4221] pgmajfault 5 [ 45.301607][ T4221] inactive_anon 0 [ 45.305277][ T4221] active_anon 24576 [ 45.309099][ T4221] inactive_file 0 [ 45.312815][ T4221] active_file 126976 [ 45.316941][ T4221] unevictable 0 [ 45.320419][ T4221] hierarchical_memory_limit 314572800 [ 45.325838][ T4221] hierarchical_memsw_limit 9223372036854771712 [ 45.332023][ T4221] total_cache 126976 [ 45.335932][ T4221] total_rss 4096 [ 45.339485][ T4221] total_shmem 0 [ 45.342949][ T4221] total_mapped_file 110592 [ 45.347374][ T4221] total_dirty 122880 [ 45.351310][ T4221] total_writeback 12288 [ 45.355560][ T4221] total_workingset_refault_anon 8 [ 45.360576][ T4221] total_workingset_refault_file 15 [ 45.365697][ T4221] total_swap 536576 [ 45.371218][ T4221] total_swapcached 24576 [ 45.375474][ T4221] total_pgpgin 3430 [ 45.379364][ T4221] total_pgpgout 3393 [ 45.383327][ T4221] total_pgfault 7155 [ 45.387230][ T4221] total_pgmajfault 5 [ 45.391116][ T4221] total_inactive_anon 0 [ 45.395301][ T4221] total_active_anon 24576 [ 45.399626][ T4221] total_inactive_file 0 [ 45.403763][ T4221] total_active_file 126976 [ 45.408185][ T4221] total_unevictable 0 [ 45.412230][ T4221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.182,pid=4221,uid=0 [ 45.427289][ T4221] Memory cgroup out of memory: Killed process 4221 (syz.2.182) total-vm:89116kB, anon-rss:568kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 45.669475][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.