last executing test programs:
6.859985892s ago: executing program 3 (id=95):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380))
2.021824564s ago: executing program 0 (id=158):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200), 0x48)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x21a5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$eJzs3T9vI0UUAPC3jmMbKOyCCiGxEhRUUZKWxgElUoQrkAuggIgkEootpESKxB9hUtHSUPIJkJDoaPkANPcNTrr2pOsuRaQ9rb0bOznHOZ/i5P78fk0ms+/NvJmMHKXYyTfv9g9209g/+fl+NBpJVNrRjtMkWlGJ0q9xQfv3AABeZqdZFo+ykXnykohoLK4sAGCB5v79/8/CSwIAFuzzL778dKPT2fwsTRux1f/tuJv/ZZ9/HT3f2I/vohd7sRrNOIvIzo3aW1mWDapprhUf9AfH3Tyz//X/xfgbDyOG+WvRjNaw62L+dmdzLR2ZyB/kdbxZzN/O89ejGW9PmX+7s7k+JT+6tfjw/Yn6V6IZ976N76MXu8Mixvm/rKXpJ9kfj3/6Ki8vz08Gx936MG4sW7rlHw0AAAAAAAAAAAAAAAAAAAAAAK+wleLunHoM7+/Ju4r7d5bO8m+WIy21Lt7PM8pPyoEu3Q80yOLP8n6d1TRNsyJwnF+Nd6pRvZtVAwAAAAAAAAAAAAAAAAAAwIvl6IcfD3Z6vb3DG2mUtwGUr/U/7zjt857q4XsxO7g+nqtSNGeMHEtlTBIxs4x8ETe0Ldc13riq5r/+nnfAxvUxy+O5olVsxg2vqzxdBzvJ9D2sR9nTKA/Jv5MxtXjGuWpXPcrmOn61qY+ac6+99tawMZgRE8mswj56MNq5oie5vIracFenpi8XjYn0S2djrvP89GdFkiziEwgAAAAAAAAAAAAAAAAAACiNX/qd8vBkZmolqy+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4VeP//z9HY1Akj3r++3hGcC0Oj+54iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwGngQAAP//4gNebw==")
accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x0, 0x800)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x41020000, 0x0, 0xfffffffffffffd25)
2.021419204s ago: executing program 2 (id=159):
r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0)
r1 = mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0)
mq_notify(r1, &(0x7f0000001200)={0x0, 0x3f, 0x1})
io_uring_enter(0xffffffffffffffff, 0x1db2, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000001)
r2 = syz_io_uring_setup(0x3732, &(0x7f0000000700)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000140), &(0x7f0000000640)=<r3=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
1.986906407s ago: executing program 2 (id=160):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r5, @ANYBLOB="92"], 0x20}}, 0x0)
1.840954709s ago: executing program 2 (id=161):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0xd931d3864d39dcca)
lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x73, 0x3)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
1.680779073s ago: executing program 1 (id=164):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1)
1.398395788s ago: executing program 4 (id=166):
unshare(0x2040400)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
fsmount(r0, 0x0, 0x0)
1.390138888s ago: executing program 1 (id=167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = getpid()
setreuid(0xee00, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58)
1.37320712s ago: executing program 3 (id=96):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
1.37131416s ago: executing program 4 (id=168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
munlockall()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
sync_file_range(r2, 0x0, 0x0, 0x0)
1.25571711s ago: executing program 1 (id=169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
1.25531516s ago: executing program 4 (id=170):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1}, 0x20)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x541e, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xf1a8, 0x0, "1a96947d01000000000000008a81ca1e1238ec"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x0)
1.237627642s ago: executing program 3 (id=171):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x2, &(0x7f0000000580)={0x28, 0xffff, 0x1})
socket$inet(0x2, 0x1, 0x7)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8041, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c6465627567000000000100000065743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x0, 0x2aa, &(0x7f00000002c0)="$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")
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
1.164994088s ago: executing program 0 (id=172):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
1.163798268s ago: executing program 4 (id=173):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write(r0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
1.102849244s ago: executing program 0 (id=174):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f00000002c0), 0xfe, 0x55d, &(0x7f0000000980)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x125142, 0x14a)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60302, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0xc480, 0x0)
ftruncate(r0, 0x2007ffd)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, 0x0, 0x0)
sendmsg(r2, 0x0, 0x4)
sendfile(r0, r1, 0x0, 0x1000000201005)
1.083420675s ago: executing program 1 (id=175):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x4005, 0x0, 0x9)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298a289e47091", 0xd}], 0x2)
1.040300589s ago: executing program 3 (id=176):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000440)={0x1d, r2, 0x3}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='dat', 0x3}}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x28, r3, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4)
973.519695ms ago: executing program 2 (id=177):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
912.93079ms ago: executing program 3 (id=178):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000002c0)={0x6, 0x8001})
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f00000000c0)='./control\x00', 0x102)
close(r1)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa7000be0)
close(r1)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
904.190661ms ago: executing program 1 (id=179):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0)
865.136384ms ago: executing program 2 (id=180):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001040), 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
creat(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
660.603672ms ago: executing program 0 (id=181):
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
427.322852ms ago: executing program 2 (id=182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)
mbind(&(0x7f0000b28000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00000100000000"], 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
425.216713ms ago: executing program 0 (id=192):
iopl(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r2, 0x84, 0x22, 0x0, 0x0)
349.221249ms ago: executing program 3 (id=183):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200), 0x48)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x21a5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$eJzs3T9vI0UUAPC3jmMbKOyCCiGxEhRUUZKWxgElUoQrkAuggIgkEootpESKxB9hUtHSUPIJkJDoaPkANPcNTrr2pOsuRaQ9rb0bOznHOZ/i5P78fk0ms+/NvJmMHKXYyTfv9g9209g/+fl+NBpJVNrRjtMkWlGJ0q9xQfv3AABeZqdZFo+ykXnykohoLK4sAGCB5v79/8/CSwIAFuzzL778dKPT2fwsTRux1f/tuJv/ZZ9/HT3f2I/vohd7sRrNOIvIzo3aW1mWDapprhUf9AfH3Tyz//X/xfgbDyOG+WvRjNaw62L+dmdzLR2ZyB/kdbxZzN/O89ejGW9PmX+7s7k+JT+6tfjw/Yn6V6IZ976N76MXu8Mixvm/rKXpJ9kfj3/6Ki8vz08Gx936MG4sW7rlHw0AAAAAAAAAAAAAAAAAAAAAAK+wleLunHoM7+/Ju4r7d5bO8m+WIy21Lt7PM8pPyoEu3Q80yOLP8n6d1TRNsyJwnF+Nd6pRvZtVAwAAAAAAAAAAAAAAAAAAwIvl6IcfD3Z6vb3DG2mUtwGUr/U/7zjt857q4XsxO7g+nqtSNGeMHEtlTBIxs4x8ETe0Ldc13riq5r/+nnfAxvUxy+O5olVsxg2vqzxdBzvJ9D2sR9nTKA/Jv5MxtXjGuWpXPcrmOn61qY+ac6+99tawMZgRE8mswj56MNq5oie5vIracFenpi8XjYn0S2djrvP89GdFkiziEwgAAAAAAAAAAAAAAAAAACiNX/qd8vBkZmolqy+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4VeP//z9HY1Akj3r++3hGcC0Oj+54iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwGngQAAP//4gNebw==")
accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x0, 0x800)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x41020000, 0x0, 0xfffffffffffffd25)
345.59746ms ago: executing program 0 (id=194):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x36b, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0))
237.434519ms ago: executing program 4 (id=184):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0)
111.92434ms ago: executing program 4 (id=185):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x101)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
0s ago: executing program 1 (id=186):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1, 0xf, 0x1)
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
read$watch_queue(r2, &(0x7f0000000100)=""/33, 0x21)
pread64(r2, &(0x7f0000000080)=""/128, 0x80, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000100)=ANY=[@ANYBLOB="6e725f699c0000007308002c007646f7087d318e52147fa595fc5e05019cd42a391e30cd1ee7c9be11cf13b51004c0a7ba7d918b07a98d1470bf8768909a7fdc5c9bef245d14261eae04a542476a5552df42df46587767c7235df5acb2803a2f0d38000000007c3b7d3a304751a6c191e71fe091edbe1daff965d138216e743944ca47ed1dc0f234cf1232e7978a41699b00a73500"/162])
kernel console output (not intermixed with test programs):
syzkaller
syzkaller login: [ 12.252737][ T2964] udevd (2964) used greatest stack depth: 11856 bytes left
[ 19.206067][ T29] kauditd_printk_skb: 64 callbacks suppressed
[ 19.206083][ T29] audit: type=1400 audit(1725639227.590:76): avc: denied { transition } for pid=3155 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 19.210130][ T29] audit: type=1400 audit(1725639227.590:77): avc: denied { noatsecure } for pid=3155 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 19.212735][ T29] audit: type=1400 audit(1725639227.590:78): avc: denied { write } for pid=3155 comm="sh" path="pipe:[544]" dev="pipefs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 19.215843][ T29] audit: type=1400 audit(1725639227.590:79): avc: denied { rlimitinh } for pid=3155 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 19.218441][ T29] audit: type=1400 audit(1725639227.590:80): avc: denied { siginh } for pid=3155 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 19.586421][ T3156] sshd (3156) used greatest stack depth: 11240 bytes left
[ 20.887528][ T29] audit: type=1400 audit(1725639229.280:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts.
[ 27.088718][ T29] audit: type=1400 audit(1725639235.470:82): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 27.090040][ T3250] cgroup: Unknown subsys name 'net'
[ 27.111536][ T29] audit: type=1400 audit(1725639235.470:83): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.138902][ T29] audit: type=1400 audit(1725639235.510:84): avc: denied { unmount } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.276349][ T3250] cgroup: Unknown subsys name 'rlimit'
[ 27.400050][ T29] audit: type=1400 audit(1725639235.780:85): avc: denied { setattr } for pid=3250 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.423358][ T29] audit: type=1400 audit(1725639235.780:86): avc: denied { create } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.443969][ T29] audit: type=1400 audit(1725639235.780:87): avc: denied { write } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.464738][ T29] audit: type=1400 audit(1725639235.780:88): avc: denied { read } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 27.485007][ T29] audit: type=1400 audit(1725639235.800:89): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 27.489881][ T3254] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 27.509798][ T29] audit: type=1400 audit(1725639235.800:90): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 27.531792][ T3250] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 27.541548][ T29] audit: type=1400 audit(1725639235.910:91): avc: denied { relabelto } for pid=3254 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 28.716215][ T3260] chnl_net:caif_netlink_parms(): no params data found
[ 28.725257][ T3261] chnl_net:caif_netlink_parms(): no params data found
[ 28.742153][ T3269] chnl_net:caif_netlink_parms(): no params data found
[ 28.763580][ T3263] chnl_net:caif_netlink_parms(): no params data found
[ 28.848528][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.855701][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.862855][ T3260] bridge_slave_0: entered allmulticast mode
[ 28.869367][ T3260] bridge_slave_0: entered promiscuous mode
[ 28.897274][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.904417][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.911545][ T3260] bridge_slave_1: entered allmulticast mode
[ 28.918022][ T3260] bridge_slave_1: entered promiscuous mode
[ 28.924138][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.931219][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.938340][ T3261] bridge_slave_0: entered allmulticast mode
[ 28.944811][ T3261] bridge_slave_0: entered promiscuous mode
[ 28.953083][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.960195][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.967495][ T3261] bridge_slave_1: entered allmulticast mode
[ 28.973960][ T3261] bridge_slave_1: entered promiscuous mode
[ 28.984755][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.991885][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.999048][ T3269] bridge_slave_0: entered allmulticast mode
[ 29.005404][ T3269] bridge_slave_0: entered promiscuous mode
[ 29.035586][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.042747][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.050184][ T3269] bridge_slave_1: entered allmulticast mode
[ 29.056736][ T3269] bridge_slave_1: entered promiscuous mode
[ 29.068928][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 29.080921][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 29.091365][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 29.100695][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.107844][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.115210][ T3263] bridge_slave_0: entered allmulticast mode
[ 29.121534][ T3263] bridge_slave_0: entered promiscuous mode
[ 29.133068][ T3265] chnl_net:caif_netlink_parms(): no params data found
[ 29.142859][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 29.157829][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 29.167063][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.174245][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.181572][ T3263] bridge_slave_1: entered allmulticast mode
[ 29.188129][ T3263] bridge_slave_1: entered promiscuous mode
[ 29.207938][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 29.235208][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 29.250018][ T3260] team0: Port device team_slave_0 added
[ 29.256577][ T3261] team0: Port device team_slave_0 added
[ 29.262852][ T3260] team0: Port device team_slave_1 added
[ 29.274126][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 29.290699][ T3261] team0: Port device team_slave_1 added
[ 29.314551][ T3269] team0: Port device team_slave_0 added
[ 29.338196][ T3269] team0: Port device team_slave_1 added
[ 29.344255][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 29.351203][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.377174][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 29.388346][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 29.395327][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.421270][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 29.432355][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 29.439415][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.465565][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 29.477107][ T3263] team0: Port device team_slave_0 added
[ 29.483015][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 29.490062][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.515976][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 29.538334][ T3263] team0: Port device team_slave_1 added
[ 29.557545][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.564835][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.572029][ T3265] bridge_slave_0: entered allmulticast mode
[ 29.578658][ T3265] bridge_slave_0: entered promiscuous mode
[ 29.590285][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 29.597290][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.623333][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 29.635100][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 29.642063][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.668020][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 29.681910][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.689112][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.696273][ T3265] bridge_slave_1: entered allmulticast mode
[ 29.702700][ T3265] bridge_slave_1: entered promiscuous mode
[ 29.733452][ T3261] hsr_slave_0: entered promiscuous mode
[ 29.739517][ T3261] hsr_slave_1: entered promiscuous mode
[ 29.755696][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 29.762653][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.788649][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 29.817309][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 29.826933][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 29.833888][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 29.860191][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 29.877671][ T3260] hsr_slave_0: entered promiscuous mode
[ 29.883936][ T3260] hsr_slave_1: entered promiscuous mode
[ 29.889899][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 29.897483][ T3260] Cannot create hsr debugfs directory
[ 29.904147][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 29.929179][ T3269] hsr_slave_0: entered promiscuous mode
[ 29.935454][ T3269] hsr_slave_1: entered promiscuous mode
[ 29.941443][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 29.949048][ T3269] Cannot create hsr debugfs directory
[ 29.959976][ T3265] team0: Port device team_slave_0 added
[ 29.983795][ T3265] team0: Port device team_slave_1 added
[ 30.023529][ T3263] hsr_slave_0: entered promiscuous mode
[ 30.029622][ T3263] hsr_slave_1: entered promiscuous mode
[ 30.035623][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 30.043176][ T3263] Cannot create hsr debugfs directory
[ 30.056178][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 30.063131][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 30.089067][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 30.102270][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 30.109252][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 30.135477][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 30.205230][ T3265] hsr_slave_0: entered promiscuous mode
[ 30.211602][ T3265] hsr_slave_1: entered promiscuous mode
[ 30.217586][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 30.225212][ T3265] Cannot create hsr debugfs directory
[ 30.297444][ T3260] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 30.319559][ T3260] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 30.328325][ T3260] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 30.349409][ T3260] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 30.391395][ T3269] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 30.400166][ T3269] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 30.412853][ T3269] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 30.440946][ T3261] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 30.450772][ T3269] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 30.460211][ T3261] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 30.469034][ T3261] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 30.477851][ T3261] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 30.526707][ T3263] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 30.537832][ T3263] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 30.575723][ T3265] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 30.584747][ T3263] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 30.595732][ T3263] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 30.608636][ T3265] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 30.617605][ T3265] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 30.630771][ T3265] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 30.658956][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.682504][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.703519][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.721386][ T3260] 8021q: adding VLAN 0 to HW filter on device team0
[ 30.737137][ T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.744363][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.753214][ T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.760322][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.785778][ T3261] 8021q: adding VLAN 0 to HW filter on device team0
[ 30.794082][ T3269] 8021q: adding VLAN 0 to HW filter on device team0
[ 30.818379][ T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.825662][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.834795][ T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.841863][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.850436][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.857537][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.872372][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 30.882777][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 30.902308][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.922686][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 30.933191][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 30.975055][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.982219][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.997129][ T3263] 8021q: adding VLAN 0 to HW filter on device team0
[ 31.011720][ T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.018833][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.035740][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0
[ 31.050658][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.057768][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.074967][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 31.087221][ T3265] 8021q: adding VLAN 0 to HW filter on device team0
[ 31.105024][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 31.117763][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.124933][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.133668][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.140776][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.175632][ T3269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 31.296180][ T3260] veth0_vlan: entered promiscuous mode
[ 31.304006][ T3260] veth1_vlan: entered promiscuous mode
[ 31.335586][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 31.349896][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 31.395021][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 31.420987][ T3261] veth0_vlan: entered promiscuous mode
[ 31.431021][ T3260] veth0_macvtap: entered promiscuous mode
[ 31.441091][ T3260] veth1_macvtap: entered promiscuous mode
[ 31.459821][ T3261] veth1_vlan: entered promiscuous mode
[ 31.484489][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 31.493560][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 31.508374][ T3269] veth0_vlan: entered promiscuous mode
[ 31.515920][ T3265] veth0_vlan: entered promiscuous mode
[ 31.533595][ T3260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.542412][ T3260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.551278][ T3260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.560190][ T3260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.573893][ T3269] veth1_vlan: entered promiscuous mode
[ 31.594775][ T3265] veth1_vlan: entered promiscuous mode
[ 31.618016][ T3261] veth0_macvtap: entered promiscuous mode
[ 31.633208][ T3269] veth0_macvtap: entered promiscuous mode
[ 31.643043][ T3263] veth0_vlan: entered promiscuous mode
[ 31.651893][ T3269] veth1_macvtap: entered promiscuous mode
[ 31.666466][ T3263] veth1_vlan: entered promiscuous mode
[ 31.686072][ T3261] veth1_macvtap: entered promiscuous mode
[ 31.695681][ T3400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[ 31.706503][ T3265] veth0_macvtap: entered promiscuous mode
[ 31.723125][ T3265] veth1_macvtap: entered promiscuous mode
[ 31.734899][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 31.745461][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.756754][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 31.764752][ T3263] veth0_macvtap: entered promiscuous mode
[ 31.772810][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 31.783352][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.793188][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 31.803726][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.814667][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 31.825966][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 31.836558][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.847339][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 31.856415][ T3261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.865263][ T3261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.873958][ T3261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.882815][ T3261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 31.896949][ T3263] veth1_macvtap: entered promiscuous mode
[ 31.905247][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 31.915866][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.925685][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 31.936230][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.946044][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 31.956525][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 31.967270][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 31.986651][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 31.997395][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.007337][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.017780][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.028735][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 32.036200][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.046673][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.056632][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.067118][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.076941][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.087480][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.098294][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 32.112689][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.121569][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.130313][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.139028][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.154078][ T3265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.163214][ T3265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.172015][ T3265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.180736][ T3265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.191139][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 32.201812][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.211711][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 32.222257][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.232111][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 32.242556][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.252455][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 32.262886][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.273602][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 32.294411][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.305028][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.314893][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.325506][ T29] kauditd_printk_skb: 29 callbacks suppressed
[ 32.325521][ T29] audit: type=1400 audit(1725639240.680:121): avc: denied { map_create } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 32.331669][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.331681][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.350482][ T29] audit: type=1400 audit(1725639240.680:122): avc: denied { map_read map_write } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 32.360304][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.370805][ T29] audit: type=1400 audit(1725639240.680:123): avc: denied { prog_load } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 32.370835][ T29] audit: type=1400 audit(1725639240.680:124): avc: denied { bpf } for pid=3403 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 32.370858][ T29] audit: type=1400 audit(1725639240.680:125): avc: denied { perfmon } for pid=3403 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 32.390411][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 32.400152][ T29] audit: type=1400 audit(1725639240.680:126): avc: denied { prog_run } for pid=3403 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 32.418822][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 32.460488][ T29] audit: type=1400 audit(1725639240.850:127): avc: denied { ioctl } for pid=3403 comm="syz.4.5" path="socket:[2751]" dev="sockfs" ino=2751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 32.473596][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 32.544111][ T3263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.553092][ T3263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.562056][ T3263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.570896][ T3263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 32.598353][ T29] audit: type=1400 audit(1725639240.980:128): avc: denied { create } for pid=3407 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 32.626825][ T29] audit: type=1400 audit(1725639240.980:129): avc: denied { write } for pid=3407 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 32.733179][ T3419] loop0: detected capacity change from 0 to 512
[ 32.752880][ T29] audit: type=1400 audit(1725639241.130:130): avc: denied { block_suspend } for pid=3405 comm="syz.4.7" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 32.766317][ T3419] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 32.787029][ T3419] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 32.794031][ T3421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 32.892319][ T3419] EXT4-fs (loop0): 1 truncate cleaned up
[ 32.907855][ T3419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 32.941122][ T3440] loop2: detected capacity change from 0 to 512
[ 32.950359][ T3440] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.11: corrupted in-inode xattr: invalid ea_ino
[ 32.971340][ T3440] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11: couldn't read orphan inode 15 (err -117)
[ 32.972176][ T3443] loop1: detected capacity change from 0 to 512
[ 32.997513][ T3440] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 33.019243][ T3443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 33.054574][ T3443] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 33.099662][ T3269] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[ 33.118453][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 33.149376][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[ 33.205625][ T3455] tipc: Started in network mode
[ 33.210514][ T3455] tipc: Node identity 2, cluster identity 4711
[ 33.216790][ T3455] tipc: Node number set to 2
[ 33.227650][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 33.255505][ T3457] syz.2.15[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 33.255583][ T3457] syz.2.15[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 33.287328][ T3457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'.
[ 33.307805][ T3457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'.
[ 33.328918][ T3457] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 33.342492][ T3457] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[ 33.384644][ T3461] syzkaller0: entered allmulticast mode
[ 33.483566][ T3461] syzkaller0 (unregistering): left allmulticast mode
[ 33.699818][ T3477] netlink: 14 bytes leftover after parsing attributes in process `syz.1.24'.
[ 33.705532][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'.
[ 33.724404][ C1] vxcan0: j1939_tp_txtimer: 0xffff888115fdc000: tx aborted with unknown reason: -2
[ 33.809367][ T3489] can0: slcan on pts0.
[ 33.904419][ T3489] can0 (unregistered): slcan off pts0.
[ 33.950897][ T3509] loop1: detected capacity change from 0 to 2048
[ 33.973119][ T3512] loop3: detected capacity change from 0 to 2048
[ 33.988260][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 34.017313][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 34.076076][ T3512] loop3: unable to read partition table
[ 34.081758][ T3512] loop3: partition table beyond EOD, truncated
[ 34.087991][ T3512] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[ 34.122407][ T2962] loop3: unable to read partition table
[ 34.128411][ T2962] loop3: partition table beyond EOD, truncated
[ 34.205688][ T3539] loop3: detected capacity change from 0 to 512
[ 34.213704][ T3539] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.37: corrupted in-inode xattr: invalid ea_ino
[ 34.227263][ T3539] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.37: couldn't read orphan inode 15 (err -117)
[ 34.239606][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 34.286337][ T3265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 34.312748][ T3542] Falling back ldisc for ptm0.
[ 34.337123][ T3544] netlink: 830 bytes leftover after parsing attributes in process `syz.3.39'.
[ 34.400389][ T3549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'.
[ 34.536882][ T3555] loop2: detected capacity change from 0 to 512
[ 34.543558][ T3555] EXT4-fs: Ignoring removed bh option
[ 34.549753][ T3555] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 34.559272][ T3555] EXT4-fs (loop2): 1 truncate cleaned up
[ 34.565375][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 34.582403][ T3555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 34.656023][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[ 34.668025][ T3562] dummy0: entered promiscuous mode
[ 34.743156][ T3566] loop4: detected capacity change from 0 to 1024
[ 34.750810][ T3566] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 34.765411][ T3566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043e018, mo2=0002]
[ 34.773558][ T3566] System zones: 0-1, 3-12
[ 34.778409][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 34.795459][ T3566] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 16: comm syz.4.50: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0
[ 34.824482][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 34.862728][ T3573] loop4: detected capacity change from 0 to 128
[ 34.928378][ T3577] netlink: 'syz.1.54': attribute type 10 has an invalid length.
[ 34.947987][ T3577] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[ 34.958374][ T3577] team0: Failed to send options change via netlink (err -105)
[ 34.965977][ T3577] team0: Port device netdevsim1 added
[ 35.012359][ T3581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.56'.
[ 35.021538][ T3581] unsupported nlmsg_type 40
[ 35.043547][ T3585] Illegal XDP return value 4291121152 on prog (id 45) dev N/A, expect packet loss!
[ 35.068165][ T3587] netlink: 'syz.4.59': attribute type 29 has an invalid length.
[ 35.076804][ T3587] netlink: 'syz.4.59': attribute type 29 has an invalid length.
[ 35.085807][ T3587] netlink: 500 bytes leftover after parsing attributes in process `syz.4.59'.
[ 35.094852][ T3587] unsupported nla_type 40
[ 35.871044][ T3603] loop1: detected capacity change from 0 to 2048
[ 35.886656][ T3603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 35.975312][ T3606] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.63: bg 0: block 234: padding at end of block bitmap is not set
[ 35.980743][ T3608] loop4: detected capacity change from 0 to 1024
[ 35.990197][ T3606] EXT4-fs (loop1): Remounting filesystem read-only
[ 36.002042][ T3608] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[ 36.013724][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 36.029646][ T3606] syz.1.63 (3606) used greatest stack depth: 9432 bytes left
[ 36.052707][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 36.096270][ T3611] loop1: detected capacity change from 0 to 128
[ 36.131781][ T3615] loop2: detected capacity change from 0 to 512
[ 36.149084][ T3615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 36.161732][ T3615] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 36.176856][ T3615] syz.2.68[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 36.176931][ T3615] syz.2.68[3615] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 36.201232][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 36.291863][ T3624] loop2: detected capacity change from 0 to 512
[ 36.302337][ T3624] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 36.312263][ T3626] pim6reg1: entered promiscuous mode
[ 36.317669][ T3626] pim6reg1: entered allmulticast mode
[ 36.717664][ T3635] pim6reg1: entered promiscuous mode
[ 36.723088][ T3635] pim6reg1: entered allmulticast mode
[ 37.335938][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 37.346856][ T3358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 37.385360][ T29] kauditd_printk_skb: 114 callbacks suppressed
[ 37.385377][ T29] audit: type=1400 audit(1725639245.770:245): avc: denied { create } for pid=3679 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 37.414701][ T3681] loop0: detected capacity change from 0 to 512
[ 37.422282][ T3358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 37.433053][ T3681] EXT4-fs: Ignoring removed nobh option
[ 37.443411][ T29] audit: type=1400 audit(1725639245.800:246): avc: denied { connect } for pid=3679 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 37.462908][ T29] audit: type=1400 audit(1725639245.800:247): avc: denied { write } for pid=3679 comm="syz.2.91" path="socket:[4175]" dev="sockfs" ino=4175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 37.491850][ T3681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 37.505581][ T29] audit: type=1400 audit(1725639245.830:248): avc: denied { mounton } for pid=3683 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 37.532372][ T3358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 37.575149][ T3681] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 37.608271][ T3358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 37.624037][ T3681] EXT4-fs (loop0): 1 truncate cleaned up
[ 37.630544][ T3681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 37.717935][ T29] audit: type=1400 audit(1725639246.100:249): avc: denied { search } for pid=3000 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 37.768269][ T3358] bridge_slave_1: left allmulticast mode
[ 37.774447][ T3358] bridge_slave_1: left promiscuous mode
[ 37.780329][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.813547][ T3358] bridge_slave_0: left allmulticast mode
[ 37.819419][ T3358] bridge_slave_0: left promiscuous mode
[ 37.825180][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.867732][ T29] audit: type=1400 audit(1725639246.230:250): avc: denied { view } for pid=3703 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 37.938770][ T29] audit: type=1400 audit(1725639246.320:251): avc: denied { create } for pid=3677 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 37.977845][ T29] audit: type=1400 audit(1725639246.360:252): avc: denied { write } for pid=3709 comm="syz.2.100" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 38.001477][ T29] audit: type=1400 audit(1725639246.360:253): avc: denied { ioctl } for pid=3709 comm="syz.2.100" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 38.076937][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 38.093489][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 38.114565][ T3358] bond0 (unregistering): Released all slaves
[ 38.177015][ T29] audit: type=1400 audit(1725639246.560:254): avc: denied { read } for pid=3723 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 38.253732][ T3358] hsr_slave_0: left promiscuous mode
[ 38.263821][ T3358] hsr_slave_1: left promiscuous mode
[ 38.271264][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 38.278843][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 38.294686][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 38.302105][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 38.314276][ T3358] veth1_macvtap: left promiscuous mode
[ 38.319851][ T3358] veth0_macvtap: left promiscuous mode
[ 38.325428][ T3358] veth1_vlan: left promiscuous mode
[ 38.330680][ T3358] veth0_vlan: left promiscuous mode
[ 38.341496][ T3678] syz.0.90 (3678) used greatest stack depth: 7384 bytes left
[ 38.355694][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 38.446926][ T3358] team0 (unregistering): Port device team_slave_1 removed
[ 38.447386][ T3744] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET)
[ 38.460936][ T3358] team0 (unregistering): Port device team_slave_0 removed
[ 38.687191][ T3683] chnl_net:caif_netlink_parms(): no params data found
[ 38.836238][ T3694] chnl_net:caif_netlink_parms(): no params data found
[ 38.860966][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.868141][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.888907][ T3683] bridge_slave_0: entered allmulticast mode
[ 38.899360][ T3683] bridge_slave_0: entered promiscuous mode
[ 38.906878][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.913963][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.921753][ T3683] bridge_slave_1: entered allmulticast mode
[ 38.936253][ T3683] bridge_slave_1: entered promiscuous mode
[ 38.974290][ T3792] loop0: detected capacity change from 0 to 512
[ 38.981959][ T3792] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 38.993957][ T3683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 39.004067][ T3792] EXT4-fs (loop0): 1 truncate cleaned up
[ 39.006554][ T3790] syzkaller0: entered allmulticast mode
[ 39.015878][ T3792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 39.031687][ T3683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 39.046063][ T3790] syzkaller0 (unregistering): left allmulticast mode
[ 39.135643][ T3683] team0: Port device team_slave_0 added
[ 39.162656][ T3358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 39.184915][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 39.192071][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 39.211542][ T3694] bridge_slave_0: entered allmulticast mode
[ 39.217955][ T3694] bridge_slave_0: entered promiscuous mode
[ 39.224945][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 39.232022][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 39.239355][ T3694] bridge_slave_1: entered allmulticast mode
[ 39.246034][ T3694] bridge_slave_1: entered promiscuous mode
[ 39.261398][ T3683] team0: Port device team_slave_1 added
[ 39.305638][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 39.328466][ T3358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 39.382622][ T3694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 39.396354][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 39.403348][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 39.429305][ T3683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 39.457423][ T3358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 39.470127][ T3694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 39.492646][ T3683] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 39.499807][ T3683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 39.525824][ T3683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 39.547921][ T3358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 39.564049][ T3694] team0: Port device team_slave_0 added
[ 39.571027][ T3694] team0: Port device team_slave_1 added
[ 39.594007][ T3694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 39.601074][ T3694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 39.627002][ T3694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 39.646886][ T3694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 39.653915][ T3694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 39.679890][ T3694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 39.707379][ T3838] loop2: detected capacity change from 0 to 512
[ 39.714644][ T3683] hsr_slave_0: entered promiscuous mode
[ 39.720844][ T3683] hsr_slave_1: entered promiscuous mode
[ 39.728962][ T3838] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[ 39.782348][ T3694] hsr_slave_0: entered promiscuous mode
[ 39.792852][ T3694] hsr_slave_1: entered promiscuous mode
[ 39.809361][ T3694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 39.823220][ T3694] Cannot create hsr debugfs directory
[ 39.864524][ T3358] bridge_slave_1: left allmulticast mode
[ 39.870221][ T3358] bridge_slave_1: left promiscuous mode
[ 39.876124][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 39.894682][ T3854] loop1: detected capacity change from 0 to 1024
[ 39.904417][ T3358] bridge_slave_0: left allmulticast mode
[ 39.910138][ T3358] bridge_slave_0: left promiscuous mode
[ 39.915865][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 39.927084][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 39.960627][ T3864] loop2: detected capacity change from 0 to 512
[ 39.986360][ T3864] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.125: casefold flag without casefold feature
[ 40.009472][ T3864] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.125: couldn't read orphan inode 15 (err -117)
[ 40.022116][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 40.073593][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 40.106469][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 40.123390][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 40.156076][ T3358] bond0 (unregistering): Released all slaves
[ 40.197486][ T3875] loop0: detected capacity change from 0 to 256
[ 40.214197][ T3878] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[ 40.221919][ T3878] netlink: 'syz.2.128': attribute type 4 has an invalid length.
[ 40.229615][ T3878] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.128'.
[ 40.246848][ T3875] vfat: Bad value for 'uid'
[ 40.251397][ T3875] vfat: Bad value for 'uid'
[ 40.397330][ T3358] hsr_slave_0: left promiscuous mode
[ 40.405688][ T3358] hsr_slave_1: left promiscuous mode
[ 40.411400][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 40.419024][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 40.427570][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 40.435026][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 40.457986][ T3358] veth1_macvtap: left promiscuous mode
[ 40.463604][ T3358] veth0_macvtap: left promiscuous mode
[ 40.469290][ T3358] veth1_vlan: left promiscuous mode
[ 40.474607][ T3358] veth0_vlan: left promiscuous mode
[ 40.504890][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 40.521843][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[ 40.534358][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 40.534358][ T50]
[ 40.544137][ T50] EXT4-fs (loop1): Total free blocks count 0
[ 40.550202][ T50] EXT4-fs (loop1): Free/Dirty block details
[ 40.556154][ T50] EXT4-fs (loop1): free_blocks=68451041280
[ 40.561991][ T50] EXT4-fs (loop1): dirty_blocks=16384
[ 40.567399][ T50] EXT4-fs (loop1): Block reservation details
[ 40.573387][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1024
[ 40.591869][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[ 40.662312][ T3358] team0 (unregistering): Port device team_slave_1 removed
[ 40.672957][ T3358] team0 (unregistering): Port device team_slave_0 removed
[ 40.732073][ T3904] pim6reg1: entered promiscuous mode
[ 40.737655][ T3904] pim6reg1: entered allmulticast mode
[ 40.973866][ T3942] loop0: detected capacity change from 0 to 1024
[ 40.986052][ T3942] EXT4-fs: Ignoring removed oldalloc option
[ 41.011455][ T3942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 41.075443][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 41.173846][ T3957] loop0: detected capacity change from 0 to 1024
[ 41.191153][ T3964] capability: warning: `syz.2.143' uses deprecated v2 capabilities in a way that may be insecure
[ 41.232061][ T3957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 41.235028][ T3683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 41.269768][ T3957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.141'.
[ 41.286334][ T3683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 41.302832][ T3683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 41.310343][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 41.325132][ T3694] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 41.339013][ T3978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[ 41.345566][ T3978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 41.353486][ T3978] vhci_hcd vhci_hcd.0: Device attached
[ 41.365858][ T3683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 41.380482][ T3694] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 41.391090][ T3694] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 41.400799][ T3694] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 41.460795][ T3683] 8021q: adding VLAN 0 to HW filter on device bond0
[ 41.484422][ T3683] 8021q: adding VLAN 0 to HW filter on device team0
[ 41.498691][ T28] bridge0: port 1(bridge_slave_0) entered blocking state
[ 41.505769][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 41.507696][ T28] bridge0: port 2(bridge_slave_1) entered blocking state
[ 41.507774][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 41.512812][ T3694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 41.567357][ T3981] vhci_hcd: connection closed
[ 41.567689][ T3358] vhci_hcd: stop threads
[ 41.576729][ T3358] vhci_hcd: release socket
[ 41.581164][ T3358] vhci_hcd: disconnect device
[ 41.601155][ T3694] 8021q: adding VLAN 0 to HW filter on device team0
[ 41.619996][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 41.624394][ T35] usb 5-1: new high-speed USB device number 2 using vhci_hcd
[ 41.627077][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 41.644405][ T35] usb 5-1: enqueue for inactive port 0
[ 41.650184][ T35] usb 5-1: enqueue for inactive port 0
[ 41.657632][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 41.664210][ T35] usb 5-1: enqueue for inactive port 0
[ 41.664730][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 41.701158][ T3694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 41.711682][ T3694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 41.754400][ T35] vhci_hcd: vhci_device speed not set
[ 41.836662][ T3683] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 41.885883][ T3694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 42.059282][ T3694] veth0_vlan: entered promiscuous mode
[ 42.086889][ T3694] veth1_vlan: entered promiscuous mode
[ 42.107708][ T3683] veth0_vlan: entered promiscuous mode
[ 42.147534][ T3683] veth1_vlan: entered promiscuous mode
[ 42.180573][ T4075] vlan2: entered allmulticast mode
[ 42.265907][ T3694] veth0_macvtap: entered promiscuous mode
[ 42.273884][ T3683] veth0_macvtap: entered promiscuous mode
[ 42.287496][ T3694] veth1_macvtap: entered promiscuous mode
[ 42.307002][ T3683] veth1_macvtap: entered promiscuous mode
[ 42.337366][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 42.347956][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.357860][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 42.368432][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.378528][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 42.389234][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.404063][ T3694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 42.418789][ T4099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 42.447950][ T4104] loop0: detected capacity change from 0 to 256
[ 42.459510][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 42.470087][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.479965][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 42.490495][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.500332][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 42.510884][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.533401][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 42.584916][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.595583][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.605438][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.616056][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.625914][ T3683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.636450][ T3683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.649638][ T3683] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 42.659959][ T3683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.668694][ T3683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.677469][ T3683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.686206][ T3683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.715412][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.725907][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.735748][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.746238][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.756085][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.766653][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.776610][ T3694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 42.787064][ T3694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 42.801034][ T3694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 42.867365][ T3694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.876230][ T3694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.884966][ T3694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.893677][ T3694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 43.027553][ T29] kauditd_printk_skb: 87 callbacks suppressed
[ 43.027569][ T29] audit: type=1400 audit(1725639251.410:342): avc: denied { create } for pid=4155 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 43.069085][ T4161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'.
[ 43.101626][ T4161] Zero length message leads to an empty skb
[ 43.109337][ T29] audit: type=1400 audit(1725639251.440:343): avc: denied { sys_admin } for pid=4155 comm="syz.1.167" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 43.150722][ T4172] xt_nat: multiple ranges no longer supported
[ 43.172179][ T4170] pim6reg1: entered promiscuous mode
[ 43.177633][ T4170] pim6reg1: entered allmulticast mode
[ 43.213473][ T4175] loop3: detected capacity change from 0 to 128
[ 43.248938][ T4175] =======================================================
[ 43.248938][ T4175] WARNING: The mand mount option has been deprecated and
[ 43.248938][ T4175] and is ignored by this kernel. Remove the mand
[ 43.248938][ T4175] option from the mount to silence this warning.
[ 43.248938][ T4175] =======================================================
[ 43.321402][ T4187] loop0: detected capacity change from 0 to 1024
[ 43.349329][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 43.375345][ T4200] vxcan1: tx drop: invalid sa for name 0x0000000000000003
[ 43.415565][ T29] audit: type=1400 audit(1725639251.790:344): avc: denied { connect } for pid=4186 comm="syz.0.174" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 43.530005][ T29] audit: type=1400 audit(1725639251.890:345): avc: denied { watch } for pid=4207 comm="syz.3.178" path="/3/control" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 43.552290][ T29] audit: type=1326 audit(1725639251.900:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000
[ 43.575677][ T29] audit: type=1326 audit(1725639251.900:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000
[ 43.598979][ T29] audit: type=1326 audit(1725639251.910:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000
[ 43.622304][ T29] audit: type=1326 audit(1725639251.910:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000
[ 43.661462][ T29] audit: type=1326 audit(1725639251.910:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000
[ 43.680753][ T4212] loop2: detected capacity change from 0 to 2048
[ 43.684930][ T29] audit: type=1326 audit(1725639252.000:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48cfffcef9 code=0x7ffc0000
[ 43.729493][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 43.731659][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 43.822773][ T4217] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 43.830776][ T4218] mmap: syz.4.173 (4218) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 43.839037][ T4217] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1372 with error 28
[ 43.861972][ T4217] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 43.861972][ T4217]
[ 43.871692][ T4217] EXT4-fs (loop2): Total free blocks count 0
[ 43.877791][ T4217] EXT4-fs (loop2): Free/Dirty block details
[ 43.883766][ T4217] EXT4-fs (loop2): free_blocks=2415919104
[ 43.889538][ T4217] EXT4-fs (loop2): dirty_blocks=1376
[ 43.894910][ T4217] EXT4-fs (loop2): Block reservation details
[ 43.900973][ T4217] EXT4-fs (loop2): i_reserved_data_blocks=86
[ 43.977535][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 44.076685][ T4227] loop2: detected capacity change from 0 to 512
[ 44.093735][ T4227] EXT4-fs: Ignoring removed nobh option
[ 44.106245][ T4228] loop3: detected capacity change from 0 to 256
[ 44.127376][ T4227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 44.152254][ T4227] EXT4-fs (loop2): 1 truncate cleaned up
[ 44.166801][ T4227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 44.393735][ T4235] syz.4.185[4235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 44.393809][ T4235] syz.4.185[4235] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 44.457342][ T4238] tmpfs: Unknown parameter 'nr_i�'
[ 44.713223][ T4222] ==================================================================
[ 44.721506][ T4222] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter
[ 44.728896][ T4222]
[ 44.731218][ T4222] read-write to 0xffff8881129bfe68 of 4 bytes by task 4221 on cpu 0:
[ 44.739285][ T4222] mem_cgroup_iter+0x28e/0x380
[ 44.743552][ T4221] syz.2.182 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 44.744051][ T4222] shrink_node+0x74a/0x1d40
[ 44.744081][ T4222] do_try_to_free_pages+0x3c6/0xc50
[ 44.755026][ T4221] CPU: 0 UID: 0 PID: 4221 Comm: syz.2.182 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0
[ 44.759583][ T4222] try_to_free_mem_cgroup_pages+0x1f3/0x4f0
[ 44.764759][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 44.775318][ T4222] try_charge_memcg+0x2bc/0x810
[ 44.781189][ T4221] Call Trace:
[ 44.781199][ T4221] <TASK>
[ 44.791229][ T4222] mem_cgroup_swapin_charge_folio+0x107/0x1a0
[ 44.791260][ T4222] __read_swap_cache_async+0x2b7/0x520
[ 44.791289][ T4222] swap_cluster_readahead+0x276/0x3f0
[ 44.796132][ T4221] dump_stack_lvl+0xf2/0x150
[ 44.799409][ T4222] swapin_readahead+0xe4/0x760
[ 44.802520][ T4221] dump_stack+0x15/0x20
[ 44.808569][ T4222] do_swap_page+0x3da/0x1ef0
[ 44.814010][ T4221] dump_header+0x83/0x2d0
[ 44.819370][ T4222] handle_mm_fault+0x8cb/0x2a30
[ 44.823966][ T4221] oom_kill_process+0x341/0x4c0
[ 44.828708][ T4222] exc_page_fault+0x3b9/0x650
[ 44.832907][ T4221] out_of_memory+0x9af/0xbe0
[ 44.837476][ T4222] asm_exc_page_fault+0x26/0x30
[ 44.841789][ T4221] ? __rcu_read_unlock+0x4e/0x70
[ 44.846621][ T4222]
[ 44.846629][ T4222] read to 0xffff8881129bfe68 of 4 bytes by task 4222 on cpu 1:
[ 44.851457][ T4221] mem_cgroup_out_of_memory+0x13e/0x190
[ 44.856108][ T4222] mem_cgroup_iter+0x93/0x380
[ 44.860685][ T4221] try_charge_memcg+0x51b/0x810
[ 44.865505][ T4222] shrink_node+0x74a/0x1d40
[ 44.870434][ T4221] mem_cgroup_swapin_charge_folio+0x107/0x1a0
[ 44.872739][ T4222] do_try_to_free_pages+0x3c6/0xc50
[ 44.880267][ T4221] __read_swap_cache_async+0x2b7/0x520
[ 44.885793][ T4222] try_to_free_mem_cgroup_pages+0x1f3/0x4f0
[ 44.890457][ T4221] swap_cluster_readahead+0x276/0x3f0
[ 44.895278][ T4222] try_charge_memcg+0x2bc/0x810
[ 44.899767][ T4221] swapin_readahead+0xe4/0x760
[ 44.905808][ T4222] obj_cgroup_charge_pages+0xbd/0x1a0
[ 44.910991][ T4221] ? __filemap_get_folio+0x420/0x5b0
[ 44.916427][ T4222] __memcg_kmem_charge_page+0x9d/0x170
[ 44.922305][ T4221] ? __lruvec_stat_mod_folio+0xdb/0x120
[ 44.927652][ T4222] __alloc_pages_noprof+0x1bc/0x360
[ 44.932489][ T4221] ? swap_cache_get_folio+0x77/0x210
[ 44.937226][ T4222] alloc_pages_mpol_noprof+0xb1/0x1e0
[ 44.942576][ T4221] do_swap_page+0x3da/0x1ef0
[ 44.947834][ T4222] alloc_pages_noprof+0xe1/0x100
[ 44.953272][ T4221] ? cgroup_rstat_updated+0x99/0x550
[ 44.958804][ T4222] __vmalloc_node_range_noprof+0x736/0xec0
[ 44.964026][ T4221] ? __rcu_read_lock+0x36/0x50
[ 44.969291][ T4222] __kvmalloc_node_noprof+0x121/0x170
[ 44.974649][ T4221] ? pte_offset_map_nolock+0x124/0x1d0
[ 44.979217][ T4222] ip_set_alloc+0x1f/0x30
[ 44.979244][ T4222] hash_netiface_create+0x273/0x730
[ 44.979270][ T4222] ip_set_create+0x359/0x8a0
[ 44.984199][ T4221] handle_mm_fault+0x8cb/0x2a30
[ 44.989461][ T4222] nfnetlink_rcv_msg+0x4a9/0x570
[ 44.995260][ T4221] exc_page_fault+0x3b9/0x650
[ 44.999993][ T4222] netlink_rcv_skb+0x12c/0x230
[ 45.005349][ T4221] asm_exc_page_fault+0x26/0x30
[ 45.010785][ T4222] nfnetlink_rcv+0x16c/0x15e0
[ 45.015110][ T4221] RIP: 0033:0x7f7d1dc009cc
[ 45.020276][ T4222] netlink_unicast+0x599/0x670
[ 45.024856][ T4221] Code: 72 64 0f 1f 40 00 69 3d e6 4c e1 00 e8 03 00 00 48 8d 1d c7 55 2e 00 e8 92 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00
[ 45.029693][ T4222] netlink_sendmsg+0x5cc/0x6e0
[ 45.034607][ T4221] RSP: 002b:00007fffb1dcfcf0 EFLAGS: 00010206
[ 45.039263][ T4222] __sock_sendmsg+0x140/0x180
[ 45.044006][ T4221]
[ 45.044012][ T4221] RAX: 0000000000000000 RBX: 00007f7d1dee5f80 RCX: 0000000000000000
[ 45.048878][ T4222] ____sys_sendmsg+0x312/0x410
[ 45.053555][ T4221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555581892808
[ 45.057948][ T4222] __sys_sendmsg+0x1e9/0x280
[ 45.062695][ T4221] RBP: 00007f7d1dee7a80 R08: 0000000000000000 R09: 7fffffffffffffff
[ 45.082283][ T4222] __x64_sys_sendmsg+0x46/0x50
[ 45.087029][ T4221] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000af23
[ 45.093076][ T4222] x64_sys_call+0x2689/0x2d60
[ 45.093106][ T4222] do_syscall_64+0xc9/0x1c0
[ 45.093128][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 45.097785][ T4221] R13: 00007fffb1dcfdf0 R14: 0000000000000032 R15: ffffffffffffffff
[ 45.100097][ T4222]
[ 45.100103][ T4222] value changed: 0x0000014b -> 0x0000014c
[ 45.108059][ T4221] </TASK>
[ 45.112816][ T4222]
[ 45.112821][ T4222] Reported by Kernel Concurrency Sanitizer on:
[ 45.120822][ T4221] memory: usage 307200kB, limit 307200kB, failcnt 102
[ 45.125352][ T4222] CPU: 1 UID: 0 PID: 4222 Comm: syz.2.182 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0
[ 45.125382][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 45.125394][ T4222] ==================================================================
[ 45.228538][ T4221] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0
[ 45.236566][ T4221] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0
[ 45.243865][ T4221] Memory cgroup stats for /syz2:
[ 45.246439][ T4221] cache 126976
[ 45.254848][ T4221] rss 4096
[ 45.257883][ T4221] shmem 0
[ 45.260862][ T4221] mapped_file 110592
[ 45.264823][ T4221] dirty 122880
[ 45.268200][ T4221] writeback 12288
[ 45.271891][ T4221] workingset_refault_anon 8
[ 45.276431][ T4221] workingset_refault_file 15
[ 45.281027][ T4221] swap 536576
[ 45.284414][ T4221] swapcached 24576
[ 45.288129][ T4221] pgpgin 3430
[ 45.291447][ T4221] pgpgout 3393
[ 45.294829][ T4221] pgfault 7155
[ 45.298197][ T4221] pgmajfault 5
[ 45.301607][ T4221] inactive_anon 0
[ 45.305277][ T4221] active_anon 24576
[ 45.309099][ T4221] inactive_file 0
[ 45.312815][ T4221] active_file 126976
[ 45.316941][ T4221] unevictable 0
[ 45.320419][ T4221] hierarchical_memory_limit 314572800
[ 45.325838][ T4221] hierarchical_memsw_limit 9223372036854771712
[ 45.332023][ T4221] total_cache 126976
[ 45.335932][ T4221] total_rss 4096
[ 45.339485][ T4221] total_shmem 0
[ 45.342949][ T4221] total_mapped_file 110592
[ 45.347374][ T4221] total_dirty 122880
[ 45.351310][ T4221] total_writeback 12288
[ 45.355560][ T4221] total_workingset_refault_anon 8
[ 45.360576][ T4221] total_workingset_refault_file 15
[ 45.365697][ T4221] total_swap 536576
[ 45.371218][ T4221] total_swapcached 24576
[ 45.375474][ T4221] total_pgpgin 3430
[ 45.379364][ T4221] total_pgpgout 3393
[ 45.383327][ T4221] total_pgfault 7155
[ 45.387230][ T4221] total_pgmajfault 5
[ 45.391116][ T4221] total_inactive_anon 0
[ 45.395301][ T4221] total_active_anon 24576
[ 45.399626][ T4221] total_inactive_file 0
[ 45.403763][ T4221] total_active_file 126976
[ 45.408185][ T4221] total_unevictable 0
[ 45.412230][ T4221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.182,pid=4221,uid=0
[ 45.427289][ T4221] Memory cgroup out of memory: Killed process 4221 (syz.2.182) total-vm:89116kB, anon-rss:568kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[ 45.669475][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.