last executing test programs: 8.141680009s ago: executing program 2 (id=7903): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4a}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e05000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7.994722252s ago: executing program 4 (id=7904): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) pipe2(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000580)='#]\x00', &(0x7f0000001700)="c5", 0x1) 7.622972539s ago: executing program 3 (id=7907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='tlb_flush\x00', r0}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x30, 0x64, &(0x7f0000000180)="764d1611439df5a3d9528d1dd7182dd22a63be729b290cddd1ce0f0e7badfc4bf366fd35ee89baa2fd51ee58cc7869aa", &(0x7f0000000300)=""/100, 0x800, 0x0, 0x0, 0xba, &(0x7f0000000380), &(0x7f0000000480)="8e7c561b55415361afee731991ec9940f25d99344418d9b4faa83aaadc58310b41a634b9870bfd0e8b400dcac34c58584b3d8d56a5020ebf2ad4c9bdce890f0300a3311fcf75d357717625f02691c9f64326b89f09b467fd9c85b52c9e0729d41bf52858c0696d039a12a467f1c7d8699de074695ad7c3b80c34d94f4a348fb9eb09c5dd1584c42f9ac49108df5e3fe9683f2fbfca8def6545f5337888fcf290eb697c2be22216f3655e76faee0c125e15e9b581f5c542e187bb", 0x2, 0x0, 0x40}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x104, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 7.285388561s ago: executing program 2 (id=7908): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0xab, 0x2, 0x5, 0x0, 0xed, 0xa00, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffb, 0x400, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x96, 0x0, 0x0, 0x0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x9) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0xb0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x1a8, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1}, {@in=@empty, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x23}, [@algo_auth={0xb8, 0x1, {{'sha256\x00'}, 0x380, "ca8bdaf566099b58b0085179e7b91acc5981a2f76db1cb781fe7cb575f642ed9d3ee2820e6be79e042344d8e2e779c6a0b7e0987ec26fe22919789f93ba510dd3beb28e193dc2a809d980139b787088859f61e644918bfbcb15c16fdb55dead2d61b01c0f99cf65c8a02c8a9cc701a08"}}]}, 0x1a8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 7.174624048s ago: executing program 4 (id=7909): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000418223a07020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'SET\x00'}]}, 0x2c}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c63616368653d6d6d88aba0d159ad61702c61"]) r10 = io_uring_setup(0x2a0c, &(0x7f0000000380)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r9}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f000000e0c0), 0x10010) sendfile(0xffffffffffffffff, r11, &(0x7f0000000100), 0x100000000010001) close_range(r10, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.043263768s ago: executing program 0 (id=7910): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fchdir(0xffffffffffffffff) pipe(0x0) inotify_init() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) syz_usbip_server_init(0x0) 6.410931095s ago: executing program 2 (id=7912): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000070000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000400)=[{0x3}, {0x0, 0xffff}], 0x2) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x1, 0x4, 0x4a0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0xc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x213d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x1, 0x0, 0xffffffff, 0x0}) semop(r3, &(0x7f0000000440)=[{0x1, 0x2000, 0x1800}], 0x1) r9 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x12) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="a5bfa88800000000240012800b00ca84f572eecc010067656e6576650000140002800800010002000000050004008000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x54}}, 0x0) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000480)=0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r13) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xe8, 0xe8, 0x1f0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@dev, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.133555808s ago: executing program 4 (id=7913): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fchdir(0xffffffffffffffff) pipe(0x0) inotify_init() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) syz_usbip_server_init(0x0) 5.258972142s ago: executing program 1 (id=7914): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000006800fdff0000000000000000020000000000000006000700090000000c000880080012000000000008000600f200000008000500", @ANYRES64=r0], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0, {0x48}}, './bus\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) pipe(&(0x7f0000002480)={0xffffffffffffffff}) futimesat(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) eventfd(0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020020031c0081006000000002000020d3"]) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') lseek(r6, 0x73, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e4000000150a010166000000000000000a00000708000340000000040900010073797a31000000006200080096d3c8cfb1633a699304bd530b1196b505f04299d731003f5a63af80e5a5e9ad76253025f7cf86ef1739bc76f2b6f0d21690f7a5834804a39db94d377124be167c9204c1173b7a2de65a4308c458b9c05e3fc759ea3197b06e137a3d439d00004e000800c7e901b158d7338637a455c7db438841825921bb2bf72896631bea00db87defd39a03f557a5a6ee131c3bd8f2991cc3894eff1867dc01ff80a91da182e64a15e6eba9d5b625e6121c1ad0000080003400000000335b832ff7253eb80e75164f057b31e0cc63da1a64c1ca708e38a4344ad3ff7dd5e540ce0cc22bebad24e70b7aa0c8f6c319bf19d5296e8213ee97f"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c881}, 0x4000001) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000500)=[{0x0, 0x0, 0x1000}], 0x2cd6, 0x0) unshare(0x2c040000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="95b12a41820029bc919a906129f72d3d13bf9b34602e64dcfd123d76fb63476e6344d201660174967f6592ea3405bb30bb708651b90420f83b31a3b99440de9da5440c227b9f48e372a33915d2df4fcdf2f3771af094c08273d2e5daa38068a204404bb8856b39ffdecb77542a921355be21e422b0be04c57f75da27bdbfa6628df2bd24d9", @ANYRES32=r10, @ANYRESHEX=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xda498ab7c3600ec2, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.877212341s ago: executing program 3 (id=7915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) pipe(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'pim6reg1\x00', {0x8}, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 4.656366274s ago: executing program 0 (id=7916): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac1414000000000000000000010000f7ff0000000000000000000004000000ffffffffffffffe3000a0060"], 0xb8}}, 0x20040000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18c6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mq_unlink(0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2, r3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r2}, 0x10) poll(&(0x7f0000001280), 0xa4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000e1ffffff08000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000a0000000b6000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000003c0), &(0x7f0000048000)=0x5, 0x0) 4.565323798s ago: executing program 1 (id=7917): r0 = socket(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfd61, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, 0x0) 4.284139072s ago: executing program 2 (id=7918): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000d00)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x64, 0x0, 0x62, 0x10, &(0x7f0000000d80), 0x10}, 0x90) 4.124140136s ago: executing program 3 (id=7919): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 3.757555523s ago: executing program 1 (id=7920): socket$inet_mptcp(0x2, 0x1, 0x106) futex(&(0x7f0000000240), 0x7, 0x2, 0x0, 0x0, 0x1) r0 = open(&(0x7f0000000080)='./bus\x00', 0xa1840, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000005b00)=0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffd) memfd_create(&(0x7f0000001200)='\xf3e\t\x93\xdb\x97\xe8\x93\r\xa1@/2\x96\xee`\x99\xf5\xef`\x02\x7f9\xca\xf9\xd7\xe0m\xbfx\xf4\x16\a3\xeeM?=cg\x92\x1e\x0e7\xa0\x92\xe8\xa3\xac=\x148E\xd2V\x84A\xb9\xa8\x9a\x17\xdc2#a\xe4R\xe8\xe8V\x96\xd6\xa7\xda\x92p\xa1g\xae{c/%\xaaB\x8eY\x86\xb9\x1e\xb8\x168\n\x05\xd1\xc1\xe4l\xeaQ\xa8\xb6\x1eF6\x81\xcf-\xe8<\xd0\x90\x18=\xc4q\xda\xe4/\xfd\xb3j\xebN1h$\xd2\x9f\x8d\x9b\x95)0\x8c\xfa\xbc\x1dm\xe3\x03#\x81\xd5\xf5\x97\x82\xd1O\x84\x95\xb5\x93\xcd\x94\b F\x102\x14a\xca3@pv\xbb\x8b\x96\xd82\xf0C\x85\a\xf4\xb6\xc4C|\xa3\'\xa4\xc2)u\xf2\xb69\x13\xa5\xb5\xe6h\x1f\xdf\xcd7E\xc7\x9b\xb0J\xf9\xc4\xe5\'R?\x1b\x92x\x86\x83\xc2tB\xac\xcc', 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0x5421, 0x0) setuid(0x0) lstat(&(0x7f00000006c0)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) socket(0x0, 0x6, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 3.558192173s ago: executing program 4 (id=7921): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="bf8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0xc8, 0x8, 0x0, 0x5803, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'team0\x00', 'bridge_slave_1\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@mh={{0x28}, {"ebd1"}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 3.345465046s ago: executing program 2 (id=7922): r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x10000, 0x3, {{0xe, 0x4, 0x2, 0x2d, 0x38, 0x68, 0x0, 0x9, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x5, [{@remote, 0x7}, {@empty, 0x902}, {@rand_addr=0x64010101, 0x8a}, {@local, 0x9}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@empty, 0x0}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r7, 0x2f, 0x81, 0x7f, 0x7, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x18, 0x7, 0x77ee}}) socket$inet_tcp(0x2, 0x1, 0x0) r8 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='\x7f#@(*]$%\x00', r8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1c}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) fremovexattr(r1, &(0x7f0000000980)=@random={'security.', 'syz'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x138, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x739}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x5}, 0x8810) sendmsg$inet(r2, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c40)="02f0a6f83feab461130621ebc448f0a429598374d1e6303b02c5a34234510a0c6710599e133a6450d498d8318021ef748cc0c236a3f6eadaefee6a08a84fb946b3c4052e4a3b28a66e495337b9a4a0c831a483599cef1c4998d5c3ef2685d295b1dad10af715c44cf924faaaf4c2b48e26dddf808c39c4465c62d7d9a0ebb474011b78fee9c76eea28106a8a29bac0620655abc3428c4c7aece8614e1129c0272de657d97ab67cdcae4a95258dd90817a6bc47bed0f758ead360ba0b30aa08cca8", 0xc1}], 0x1, &(0x7f0000000d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}, 0x24048800) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000e00)={0x5, 0xad4b, 0x3, 0x9, 0x6}) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r8, 0x0, r11) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000f00), &(0x7f0000000f40)=0x8) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x60, r12, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80000000, 0x1f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) 2.923861561s ago: executing program 0 (id=7923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000340)) io_uring_enter(r1, 0x0, 0x0, 0xb, 0x0, 0x0) 2.550069758s ago: executing program 4 (id=7924): socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa5f198721fa6686dd60a8b4c600140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1900000000000000"], 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r5) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}]}}]}, 0x38}}, 0x0) (async) close(r6) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (async) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) (async) bind$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) 2.503138145s ago: executing program 2 (id=7925): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='tlb_flush\x00', r0}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x30, 0x64, &(0x7f0000000180)="764d1611439df5a3d9528d1dd7182dd22a63be729b290cddd1ce0f0e7badfc4bf366fd35ee89baa2fd51ee58cc7869aa", &(0x7f0000000300)=""/100, 0x800, 0x0, 0x0, 0xba, &(0x7f0000000380), &(0x7f0000000480)="8e7c561b55415361afee731991ec9940f25d99344418d9b4faa83aaadc58310b41a634b9870bfd0e8b400dcac34c58584b3d8d56a5020ebf2ad4c9bdce890f0300a3311fcf75d357717625f02691c9f64326b89f09b467fd9c85b52c9e0729d41bf52858c0696d039a12a467f1c7d8699de074695ad7c3b80c34d94f4a348fb9eb09c5dd1584c42f9ac49108df5e3fe9683f2fbfca8def6545f5337888fcf290eb697c2be22216f3655e76faee0c125e15e9b581f5c542e187bb", 0x2, 0x0, 0x40}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x104, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 2.474440639s ago: executing program 3 (id=7926): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 2.08110955s ago: executing program 1 (id=7927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r8) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000f40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="08002bbd7000fedbdf250c00000014000280060002004e20000008000500b5e20000088c567219513f190826beb3af4f00060000100000080004004000000008000500040000000c00038008002320c8fc2959c858102b48da24b570ca99e7b4204367773cde00498807a05a76d16349f35220ffffd2ab91"], 0x54}, 0x1, 0x0, 0x0, 0x400c000}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002b80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000002c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=@newtaction={0x968, 0x30, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{0x174, 0x1, [@m_connmark={0x170, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x7, 0x101}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x20000000, 0x5, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x0, 0x200, 0x6}}}]}, {0xeb, 0x6, "1a57eaadb03acd28007cb077bf63ac505e8aea9a92ae0a6a7f16754f199d725a6c89c76d204549c229d4d8ad1738485e3d4539f84e4c23603a9039cc7144745a15cac64ccd4d189afbdecfcad3206acb682a0bd47f3edaea6635ed88f45af745b3eb8eff8a5fb18e577099b472980fbcbbf724db9246d000c081786169b69fe1dd34eb49b354831035308a240c92e1898f326d515e22c2b73246d43997c1a80067e3fd8cbde60fdd76ac60d7ac0017b5b1fd8263ef96fa72d023758df5448928df9331c343b269d87bf2d56146be7e0fa683c6fdbd7445050c024c2668a1bfa5e829465c085ae7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x7dc, 0x1, [@m_skbmod={0x17c, 0xd, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x61c}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0x7, 0x5, 0x2cc}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="818b4406268f"}, @TCA_SKBMOD_SMAC={0xa}]}, {0xd4, 0x6, "c3991db1818bd6d8fde6969058323848d3e57c91f1a815acbf75b05b2b145a3991571217c136516528cc43b4f413dc1ba2c003e8a4afab996fe592ac374ed4e3e51b773196f1b72cd6fb88f847606c3e83075c750827d764bbc9c952f9c52e57284d80081db79c3a15c3dcd0df8d2309e3788619bc694fc11a15f2c888cce01395e9ac8dfbb3e6abdb3ac18a074dd5b7530892fd85c168a76929a0cea91a6c20a925d96a685b018459d625e8922a82eb8e8ef5db76bfde8be4baefc2570b1049b2539b065b8866eed086486ed702b1f6"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x8c, 0xc, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffc}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x1cb4, 0x1000}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xd, 0x6, "356d4e379827cc66d9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x134, 0xf, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1400, 0x7, 0x3, 0x0, 0x3ff}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0x7, 0x7ff}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x20, 0x9, 0x4, 0x0, 0x100}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x6, 0x1, 0x4, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8f1, 0x10000000, 0x4c}, 0x71}}]}, {0x7c, 0x6, "2df5d4a5195352eb8502e9319b4c5de7b5f714819a934334fc16a0e6635b9a961b7b4d1be043f4a2b43041aa2b09df0114e7f910844fd58a777d9ce0e303a69988b79a7fdf6b8cd6e91615372275a8221a9a027f6e57e860ddfbe17061ba4d4145a6763421f19241880e38517ceb3f304e406d976f9e9d9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x184, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x8d52, 0x6, 0x4, 0x3f}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x10000000, 0x9, 0x7}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1f, 0x5, 0x7, 0x0, 0x5}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x200, 0x1, 0xca, 0x4}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x0, 0xfff, 0x2}, 0x6, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x7, 0x7, 0x1}, 0x3, r2}}]}, {0x98, 0x6, "b3c0affcec250b3ed543aa1a30751e5fb226edabb6b418c6c30828cd890b4da63a1daf0d1778bf687d24df74de3b893d2d6962e7fdace6c15835fdaf80ee79463a91c3c0ef3226128d67a1fa49cf18187113ed21d9a7e50804e3980e19c70c73bf91b6f75ee29d5d1e5b54ea79fdbc6e480541aacd08dbb22d8fbe1a45d4463165f8621ded272ccae1ecd5a52c567dfa23bf7026"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x7c, 0xf, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x231}]}, {0x3f, 0x6, "6201393a51c96c7ead5c953734b4309828c614364d4ea7559cbc9dfe91d1dc4de570c1b7983e28f4a9894a2d0bbbd86eecd74c49b46107d9ec3d98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1ac, 0x20, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a42, 0x3, 0x7, 0xfffffffa, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x136, 0xffffffffcffffffc, 0x0, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x7f, 0x20000008, 0x1, 0x5}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xff, 0x8, 0x8, 0x8}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf6, 0x80000000, 0x10000000, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x8, 0x7794, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x3, 0x5, 0x100, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x0, 0x4, 0x7f}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0xffffffffffffffff, 0x7764, 0xfffffffd}, 0x1ddb}}]}, {0x7f, 0x6, "28dc7dded1369d4b7f872ca56b31eba996bd21354312ac40d7f52c1c1c4f3192a9840dc7420bfef08ed48732cff1fdbee63fff1b335fcf9432fed0345e55398171313f95a7686b36bc32a244970ae34ada4029188e102c9127acdc43da3d7d793fa0ca584b5d8354913336b6136cce92d78fd65d42f099e368fb83"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xf0, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x5, 0x7, 0x400}}]}, {0xa4, 0x6, "f54756c38ca571a7370aca702d931adeeb8f432d34e8246fa0f3d3664314792326abacdc0edb2ddb53445f12c039d2f3da6d5c237bd0f40db5a02a5e48ae394e929e29b71a6aa891ff67528973586ff51ced0144956a2c642d9755a61a06c6b2046eab28d0db12410e7b8edea8e2417affcf0a4c31da0a9bc501f882234ac73c74dfe51c324d3055efb5af73976e4ab3da672a6c97172f091d20446c205f1656"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x4}]}, 0x968}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.0806667s ago: executing program 0 (id=7928): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) pipe2(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000580)='#]\x00', &(0x7f0000001700)="c5", 0x1) 1.710047077s ago: executing program 4 (id=7929): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x164, 0x9, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x808000000}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fffffffffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_SKBPRIO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x4080800) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 1.491397141s ago: executing program 3 (id=7930): r0 = socket(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfd61, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, 0x0) 1.17107946s ago: executing program 0 (id=7931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x600, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x2, 0x0, 0x3}}, 0x26) 941.635455ms ago: executing program 1 (id=7932): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2b}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 329.861629ms ago: executing program 3 (id=7933): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x1a, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x54}, 0x90) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{}, {0x35}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[]) socket$kcm(0xa, 0x0, 0x73) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x1451c2, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x800000009) lseek(r4, 0x2007ffb, 0x3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', r6, 0x2f, 0x1, 0x5, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0x100, 0x9}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0xc, 0x0, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6_sctp(0xa, 0x1, 0x84) 182.987842ms ago: executing program 0 (id=7934): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x1, 0x90, [], 0x0, &(0x7f0000000200), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7ffd, 0x4) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrlimit(0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) semop(0x0, &(0x7f0000000400)=[{0x3, 0xfffd, 0x1800}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x0, 0x4}], 0x1) 0s ago: executing program 1 (id=7935): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) unshare(0x600) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4), 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="9ab984010b93", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x10, 0x3a, 0xff, @mcast2, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20100cc, &(0x7f0000000400), 0x1, 0x7b5, &(0x7f0000000440)="$eJzs3U1oHFUcAPD/bDbZfmlS8WBFNCDa4kfStCKpCE1ED4oHwV7Ei6FJS+z2gyaiLUJTvOpNvKlU8KoIetFL6cGLN29ePUm1iPbgcWVmZ5N1s5uP7SZjs78fTPPevJ2+N9n8983Oe8wLoG+Npv+UIg5ExFISMZzvTyJiMEuVI6bqr7v91/sn0y2JWu31P5PsNWk+mo5J7c0P2xURP99I4r6B1fUuXLp8ZqZanbuY58cXz14YX7h0+en5szOn507PnZuYPDZ5dPLIsWcnuz2145WWHS9/+vkbNz975fGrH709/f2bv/+dxFQcz8uaz6NXRmN0+XcSQ/Ufg/VfTbzY68oKMpCfT6lpX1IusEFsSqnpPXwghmMgVt684bjxbaGNAwC2RC3dAIA+k+j/AaDPNO4DNMb2tmIcDPh/ujUd2UD96vgvx1T2c1c2Zr3ndtI0MljOxrVHe1B/+n/88ePXX6ZbbNE4PNDe0tVs4L9N/CdZ/I9ks3ha478+Z2CqB/W3foaIf9g+dxL/r/WgfvEPAAAAAAAAvXN9OiIm243/lZbn/0Sb8b9KRBzuQf3rj/+VbvagGqCNW9MRz7ed/7v8RJeRgTx3TzYfYDA5NV+dS2P/3og4FIOVND+xRh0/vfvrC53Kmuf/pVtaf2MuYN6Om+WWB/nMzizO3Mk5A3W3rkY8WO48/yft/5M2/X9a9tYG6/jmk68e61Q2mm1rxT+wVWrXIg7mT/qL+G/8NyRrP59vPLseGG9cFaz28EvX/ulU//r9fydPbPZUgRZp/7+n7fX/cvyPJM3P61zYfB1ffHjioU5l3V7/DyUnsqeK5o/VjPdmFhcvTkQMJa+u3n9k822GnagRD414SeP/0KNZ/E91uv/X7vo/vWK4sME6J/b98FSnsu77f+BOpfE/u6n+f/OJ01eOnulU/8b6/2eyPv1Qvsf9P1jbRgO06HYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvlSJiXySlseV0qTQ2FrE3Iu6PPaXq+YXFJ0+df+fcbFoWMRKDpVPz1bnDETFczydpfiJLr+SPtOSPRsT+iPi4sjvLj508X50t+uQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILe3w/r/qd8qRbcOANgyu4puAACw7fT/ANB/9P8A0H/a9P8ni2gHALB9fP8HgP7TZf//Xa/bAQAAAAAAAAAAAAAAAAAAAAAAAAA71P5Hrv+SRMTSc7uzLTWUlw0W2jJgq5WKbgBQmIGiGwAUplx0A4DC+I4PJG33VpZTrUuErLzeHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrHwQPrrP/ffmEwYAdoXr2vVqtdKbApwDaz/j/0L+v/Q/+y/j+w3m2+lfX/l2p1jbz1/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6B8Lly6fmalW5y5K3NWJ+Q+6OGp3/kfQk2aUo7vDe1O7RFeJSueigj+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4K/wbAAD//3ZIMe8=") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}, r7}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0x90) kernel console output (not intermixed with test programs): aa:aa:3e) already exists on: batadv_slave_0 [ 704.664543][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.674353][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.684804][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.694667][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.705072][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.714872][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.725368][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.735204][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.745750][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.755570][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.765970][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.775794][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.786254][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.796065][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.806656][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.816503][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.826922][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.838318][T29008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.847146][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.857798][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.867653][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.878100][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.888008][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.898466][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.908285][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.918716][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.928647][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.939104][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.948909][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.959402][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.969222][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.979678][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.989538][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.000008][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.009898][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.020590][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.030407][T29008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.040914][T29008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.052564][T29008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.070392][T29008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.079202][T29008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.088003][T29008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.098896][T29008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.196471][T29064] loop2: detected capacity change from 0 to 128 [ 705.243725][T29065] loop2: detected capacity change from 0 to 128 [ 705.245874][T29067] program syz.3.7263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.509281][T29077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7275'. [ 705.549085][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7275'. [ 705.571864][T29082] loop1: detected capacity change from 0 to 512 [ 706.415828][T29097] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7280'. [ 706.902589][ T29] audit: type=1326 audit(1719548353.936:12743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 706.926409][ T29] audit: type=1326 audit(1719548353.936:12744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 706.951318][ T29] audit: type=1326 audit(1719548353.936:12745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 706.975038][ T29] audit: type=1326 audit(1719548353.936:12746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 706.998626][ T29] audit: type=1326 audit(1719548353.936:12747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 707.022138][ T29] audit: type=1326 audit(1719548353.936:12748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 707.045763][ T29] audit: type=1326 audit(1719548353.936:12749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 707.069348][ T29] audit: type=1326 audit(1719548353.936:12750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 707.092995][ T29] audit: type=1326 audit(1719548353.936:12751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 707.116546][ T29] audit: type=1326 audit(1719548353.936:12752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29105 comm="syz.2.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 707.185397][T29113] loop4: detected capacity change from 0 to 128 [ 707.480257][T29121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7290'. [ 707.509983][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7290'. [ 707.820684][T29126] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 708.075058][T29137] loop2: detected capacity change from 0 to 512 [ 708.341106][T29137] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 708.355823][T29137] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7294: invalid indirect mapped block 1 (level 1) [ 708.369538][T29137] EXT4-fs (loop2): 1 truncate cleaned up [ 708.375638][T29137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.019285][T27936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.035615][T29189] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 710.363639][T29201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=29201 comm=syz.1.7315 [ 710.376390][T29201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=29201 comm=syz.1.7315 [ 710.389273][T29201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=29201 comm=syz.1.7315 [ 711.716788][T29221] syz_tun: entered promiscuous mode [ 711.735553][T29218] syz_tun: left promiscuous mode [ 711.930972][T29227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7325'. [ 711.939951][T29227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7325'. [ 711.949504][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7325'. [ 711.958490][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7325'. [ 712.249096][T29232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7326'. [ 712.267697][T29232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29232 comm=syz.2.7326 [ 712.286837][T29232] vlan2: entered promiscuous mode [ 712.292003][T29232] veth3: entered promiscuous mode [ 712.305045][T29232] veth3: left promiscuous mode [ 712.490460][T29239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=29239 comm=syz.3.7329 [ 712.503267][T29239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=29239 comm=syz.3.7329 [ 712.516002][T29239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=29239 comm=syz.3.7329 [ 712.882015][T29245] loop1: detected capacity change from 0 to 128 [ 712.927540][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 712.927559][ T29] audit: type=1326 audit(1719548359.956:12800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 712.957467][ T29] audit: type=1326 audit(1719548359.966:12801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 712.981159][ T29] audit: type=1326 audit(1719548359.966:12802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.004687][ T29] audit: type=1326 audit(1719548359.966:12803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.028258][ T29] audit: type=1326 audit(1719548359.966:12804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.051881][ T29] audit: type=1326 audit(1719548359.966:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.075483][ T29] audit: type=1326 audit(1719548359.966:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.099206][ T29] audit: type=1326 audit(1719548359.966:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.122839][ T29] audit: type=1326 audit(1719548359.966:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.146521][ T29] audit: type=1326 audit(1719548359.966:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29244 comm="syz.2.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5513d4b29 code=0x7ffc0000 [ 713.881588][T29260] loop2: detected capacity change from 0 to 128 [ 714.051816][T29264] syz_tun: entered promiscuous mode [ 714.065301][T29261] syz_tun: left promiscuous mode [ 714.078131][T29265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7339'. [ 714.705124][T29272] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7341'. [ 714.785172][T29276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7343'. [ 714.797748][T29276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29276 comm=syz.3.7343 [ 714.813716][T29276] veth0_to_team: entered promiscuous mode [ 714.819603][T29276] vlan2: entered promiscuous mode [ 714.827376][T29276] veth0_to_team: left promiscuous mode [ 715.404109][T29284] loop2: detected capacity change from 0 to 512 [ 715.446601][T29284] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 715.514996][T29284] loop2: detected capacity change from 0 to 512 [ 716.423072][T29296] loop3: detected capacity change from 0 to 128 [ 716.835819][T29301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7353'. [ 717.478084][T29314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7358'. [ 717.499576][T29314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=29314 comm=syz.0.7358 [ 717.517972][T29314] vlan2: entered promiscuous mode [ 717.523117][T29314] veth5: entered promiscuous mode [ 717.530021][T29314] veth5: left promiscuous mode [ 717.724774][T29317] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 717.851191][T29319] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 718.927904][T29341] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 719.261094][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7368'. [ 719.537540][T29357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7371'. [ 720.109814][T29363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=29363 comm=syz.4.7373 [ 720.122556][T29363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=29363 comm=syz.4.7373 [ 720.128689][T29365] syz_tun: entered promiscuous mode [ 720.135258][T29363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=29363 comm=syz.4.7373 [ 720.190170][T29362] syz_tun: left promiscuous mode [ 720.782489][T29380] tmpfs: Unknown parameter 's' [ 720.790865][T29380] tmpfs: Unknown parameter 's' [ 720.795850][T29380] tmpfs: Unknown parameter 's' [ 720.800785][T29380] tmpfs: Unknown parameter 's' [ 720.805966][T29380] tmpfs: Unknown parameter 's' [ 720.811140][T29380] tmpfs: Unknown parameter 's' [ 720.818357][T29380] tmpfs: Unknown parameter 's' [ 720.829220][T29380] tmpfs: Unknown parameter 's' [ 720.834188][T29380] tmpfs: Unknown parameter 's' [ 720.839132][T29380] tmpfs: Unknown parameter 's' [ 720.843996][T29380] tmpfs: Unknown parameter 's' [ 720.851443][T29380] tmpfs: Unknown parameter 's' [ 720.856638][T29380] tmpfs: Unknown parameter 's' [ 720.861523][T29380] tmpfs: Unknown parameter 's' [ 720.866408][T29380] tmpfs: Unknown parameter 's' [ 720.872156][T29380] tmpfs: Unknown parameter 's' [ 720.879402][T29380] tmpfs: Unknown parameter 's' [ 720.884754][T29380] tmpfs: Unknown parameter 's' [ 720.889571][T29380] tmpfs: Unknown parameter 's' [ 720.894755][T29380] tmpfs: Unknown parameter 's' [ 720.899590][T29380] tmpfs: Unknown parameter 's' [ 720.904413][T29380] tmpfs: Unknown parameter 's' [ 720.910033][T29380] tmpfs: Unknown parameter 's' [ 720.915614][T29380] tmpfs: Unknown parameter 's' [ 721.018749][T29385] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 721.026008][T29385] team0: Device ipvlan2 failed to register rx_handler [ 721.277950][T29390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7383'. [ 721.689542][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 721.689594][ T29] audit: type=1326 audit(1719548368.716:12890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.720010][ T29] audit: type=1326 audit(1719548368.716:12891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.743633][ T29] audit: type=1326 audit(1719548368.726:12892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.767304][ T29] audit: type=1326 audit(1719548368.726:12893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.790954][ T29] audit: type=1326 audit(1719548368.726:12894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.814481][ T29] audit: type=1326 audit(1719548368.726:12895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.838129][ T29] audit: type=1326 audit(1719548368.726:12896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.861841][ T29] audit: type=1326 audit(1719548368.726:12897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.885544][ T29] audit: type=1326 audit(1719548368.726:12898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 721.909101][ T29] audit: type=1326 audit(1719548368.726:12899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29400 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 722.965440][T29425] loop2: detected capacity change from 0 to 1024 [ 723.042893][T29425] loop2: detected capacity change from 0 to 512 [ 723.106309][T29426] loop3: detected capacity change from 0 to 512 [ 723.138723][T29426] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 723.146888][T29426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 723.153498][T29426] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 723.168465][T29426] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 723.178568][T29426] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz.3.7395: iget: immutable or append flags not allowed on symlinks [ 723.194090][T29426] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7395: couldn't read orphan inode 16 (err -117) [ 723.210342][T29426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.578089][T29008] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.021730][T29439] loop1: detected capacity change from 0 to 8192 [ 724.134176][T29439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7400'. [ 725.507051][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7409'. [ 725.559085][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7408'. [ 725.568823][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7408'. [ 725.578633][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7408'. [ 725.587733][T29465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.595415][T29465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.604617][T29465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.612275][T29465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.003607][T29470] loop3: detected capacity change from 0 to 128 [ 728.358879][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 728.358893][ T29] audit: type=1400 audit(1719548375.386:12969): avc: denied { map } for pid=29500 comm="syz.0.7422" path="socket:[151580]" dev="sockfs" ino=151580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 728.388775][ T29] audit: type=1400 audit(1719548375.386:12970): avc: denied { read } for pid=29500 comm="syz.0.7422" path="socket:[151580]" dev="sockfs" ino=151580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 728.419209][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7423'. [ 729.038383][T29512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 729.046930][T29512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 729.056023][T29512] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 729.062622][T29512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 729.070196][T29512] vhci_hcd vhci_hcd.0: Device attached [ 729.087136][T29513] vhci_hcd: connection closed [ 729.087384][T13656] vhci_hcd: stop threads [ 729.096333][T13656] vhci_hcd: release socket [ 729.100762][T13656] vhci_hcd: disconnect device [ 730.410279][T29542] loop4: detected capacity change from 0 to 128 [ 731.414710][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7436'. [ 731.724669][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7437'. [ 731.733724][T29556] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7437'. [ 731.876042][T29563] loop1: detected capacity change from 0 to 512 [ 732.164998][ T29] audit: type=1326 audit(1719548379.196:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.205327][ T29] audit: type=1326 audit(1719548379.196:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.229249][ T29] audit: type=1326 audit(1719548379.226:12973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.252971][ T29] audit: type=1326 audit(1719548379.226:12974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.277531][ T29] audit: type=1326 audit(1719548379.236:12975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.297547][T29569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7440'. [ 732.304740][ T29] audit: type=1326 audit(1719548379.236:12976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.335352][ T29] audit: type=1326 audit(1719548379.236:12977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.359051][ T29] audit: type=1326 audit(1719548379.246:12978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.0.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 732.963267][T29578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7443'. [ 733.069393][T29581] loop2: detected capacity change from 0 to 512 [ 733.112604][T29581] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7445: Invalid inode bitmap blk 4 in block_group 0 [ 733.126082][T29581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.668741][T29452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.976493][ T9418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.023597][ T9418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.120790][ T9418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.197055][ T9418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.256342][ T9418] bridge_slave_1: left allmulticast mode [ 734.262193][ T9418] bridge_slave_1: left promiscuous mode [ 734.267842][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.276456][ T9418] bridge_slave_0: left allmulticast mode [ 734.282215][ T9418] bridge_slave_0: left promiscuous mode [ 734.287854][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.367244][ T9418] geneve0 (unregistering): left promiscuous mode [ 734.452228][ T9418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.468391][ T9418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.479682][ T9418] bond0 (unregistering): Released all slaves [ 734.600024][ T9418] hsr_slave_0: left promiscuous mode [ 734.609963][ T9418] hsr_slave_1: left promiscuous mode [ 734.616864][ T9418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.624547][ T9418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.639117][ T9418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.646731][ T9418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.678757][ T9418] veth1_macvtap: left promiscuous mode [ 734.684412][ T9418] veth0_macvtap: left promiscuous mode [ 734.689956][ T9418] veth1_vlan: left promiscuous mode [ 734.695182][ T9418] veth0_vlan: left promiscuous mode [ 734.824354][ T9418] team0 (unregistering): Port device team_slave_1 removed [ 734.836328][ T9418] team0 (unregistering): Port device team_slave_0 removed [ 734.883159][T29618] veth2: entered allmulticast mode [ 734.894297][T29597] chnl_net:caif_netlink_parms(): no params data found [ 734.932083][T29597] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.939282][T29597] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.946698][T29597] bridge_slave_0: entered allmulticast mode [ 734.954346][T29597] bridge_slave_0: entered promiscuous mode [ 734.962163][T29597] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.969532][T29597] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.983279][T29597] bridge_slave_1: entered allmulticast mode [ 734.989858][T29597] bridge_slave_1: entered promiscuous mode [ 735.012711][T29597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.023470][T29597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.044050][T29597] team0: Port device team_slave_0 added [ 735.053106][T29597] team0: Port device team_slave_1 added [ 735.072556][T29597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.079691][T29597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.105828][T29597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.118555][T29597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.125903][T29597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.152047][T29597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.185085][T29597] hsr_slave_0: entered promiscuous mode [ 735.194049][T29597] hsr_slave_1: entered promiscuous mode [ 735.201473][T29597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.209437][T29597] Cannot create hsr debugfs directory [ 735.283599][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 735.283658][ T29] audit: type=1326 audit(1719548382.316:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.315684][ T29] audit: type=1326 audit(1719548382.316:12986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.339403][ T29] audit: type=1326 audit(1719548382.316:12987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.363228][ T29] audit: type=1326 audit(1719548382.316:12988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.387041][ T29] audit: type=1326 audit(1719548382.316:12989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.410668][ T29] audit: type=1326 audit(1719548382.316:12990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.434254][ T29] audit: type=1326 audit(1719548382.316:12991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.457990][ T29] audit: type=1326 audit(1719548382.316:12992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.481550][ T29] audit: type=1326 audit(1719548382.316:12993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.505084][ T29] audit: type=1326 audit(1719548382.316:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.4.7457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2545b4b29 code=0x7ffc0000 [ 735.706155][T29632] loop3: detected capacity change from 0 to 2048 [ 735.715065][T29597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 735.725706][T29597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 735.733936][T29597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 735.742558][T29597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 735.761875][T29597] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.761948][T29632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.768932][T29597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.769102][T29597] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.781861][T29632] ext4 filesystem being mounted at /root/syzkaller.eAqBMd/37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 735.788636][T29597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.826219][T29597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.848028][ T3160] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.856950][ T3160] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.879862][T29632] loop3: detected capacity change from 2048 to 64 [ 735.881500][T29597] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.902674][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.909803][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.923330][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.930618][T17036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.979438][ T9418] kworker/u8:12: attempt to access beyond end of device [ 735.979438][ T9418] loop3: rw=1, sector=1536, nr_sectors = 136 limit=64 [ 735.993332][ T9418] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 192) [ 736.004722][ T9418] buffer_io_error: 7 callbacks suppressed [ 736.004740][ T9418] Buffer I/O error on device loop3, logical block 192 [ 736.015131][T29597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.017398][ T9418] Buffer I/O error on device loop3, logical block 193 [ 736.030818][ T9418] Buffer I/O error on device loop3, logical block 194 [ 736.037633][ T9418] Buffer I/O error on device loop3, logical block 195 [ 736.044471][ T9418] Buffer I/O error on device loop3, logical block 196 [ 736.051327][ T9418] Buffer I/O error on device loop3, logical block 197 [ 736.058272][ T9418] Buffer I/O error on device loop3, logical block 198 [ 736.065068][ T9418] Buffer I/O error on device loop3, logical block 199 [ 736.071914][ T9418] Buffer I/O error on device loop3, logical block 200 [ 736.078751][ T9418] Buffer I/O error on device loop3, logical block 201 [ 736.090639][T29008] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.105516][T29597] veth0_vlan: entered promiscuous mode [ 736.116225][T29597] veth1_vlan: entered promiscuous mode [ 736.121814][T29633] kmmpd-loop3: attempt to access beyond end of device [ 736.121814][T29633] loop3: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 736.130552][T29597] veth0_macvtap: entered promiscuous mode [ 736.135369][T29633] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 736.143264][T29597] veth1_macvtap: entered promiscuous mode [ 736.167127][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.177709][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.187791][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.198375][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.208325][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.218829][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.228713][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.239200][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.249077][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.259558][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.269488][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.279975][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.289832][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.300267][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.310186][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.320598][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.330447][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.340862][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.351772][T29597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.366028][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.376684][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.386726][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.397189][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.407033][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.417588][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.427559][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.438185][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.448168][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.458666][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.468496][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.478941][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.488797][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.499310][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.509140][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.519574][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.529588][T29597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.540094][T29597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.552218][T29597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.593459][T29597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.602248][T29597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.611331][T29597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.620227][T29597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.641272][T29652] netlink: 'syz.0.7463': attribute type 10 has an invalid length. [ 736.656290][T29652] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 736.827661][ T9415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.873401][ T9415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.923153][ T9415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.005832][ T9415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.083309][ T9415] bridge_slave_1: left allmulticast mode [ 737.088998][ T9415] bridge_slave_1: left promiscuous mode [ 737.094718][ T9415] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.103191][ T9415] bridge_slave_0: left allmulticast mode [ 737.108993][ T9415] bridge_slave_0: left promiscuous mode [ 737.114749][ T9415] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.262768][ T9415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.275358][ T9415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.286336][ T9415] bond0 (unregistering): Released all slaves [ 737.415533][T29669] loop4: detected capacity change from 0 to 512 [ 737.423461][ T9415] hsr_slave_0: left promiscuous mode [ 737.433105][ T9415] hsr_slave_1: left promiscuous mode [ 737.442517][ T9415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.450050][ T9415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.457731][T29669] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 737.457790][ T9415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.457828][ T9415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.472315][T29669] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7465: invalid indirect mapped block 1 (level 1) [ 737.504575][T29669] EXT4-fs (loop4): 1 truncate cleaned up [ 737.510434][ T9415] veth1_macvtap: left promiscuous mode [ 737.510727][T29669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.515950][ T9415] veth0_macvtap: left promiscuous mode [ 737.533443][ T9415] veth1_vlan: left promiscuous mode [ 737.538697][ T9415] veth0_vlan: left promiscuous mode [ 737.671594][ T9415] team0 (unregistering): Port device team_slave_1 removed [ 737.682752][ T9415] team0 (unregistering): Port device team_slave_0 removed [ 737.745836][T29658] chnl_net:caif_netlink_parms(): no params data found [ 737.793852][T29658] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.801096][T29658] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.808520][T29658] bridge_slave_0: entered allmulticast mode [ 737.816209][T29658] bridge_slave_0: entered promiscuous mode [ 737.823292][T29658] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.830466][T29658] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.842585][T29658] bridge_slave_1: entered allmulticast mode [ 737.850562][T27699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.852540][T29658] bridge_slave_1: entered promiscuous mode [ 737.887687][T29658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.898583][T29658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.925504][T29658] team0: Port device team_slave_0 added [ 737.932426][T29658] team0: Port device team_slave_1 added [ 737.950697][T29658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.957668][T29658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.983643][T29658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.998492][T29658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.005530][T29658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.031516][T29658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.076410][T29658] hsr_slave_0: entered promiscuous mode [ 738.083057][T29658] hsr_slave_1: entered promiscuous mode [ 738.089140][T29658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.097149][T29658] Cannot create hsr debugfs directory [ 738.373736][T29658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 738.382769][T29658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 738.391257][T29658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 738.401652][T29658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 738.454512][T29658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.473134][T29658] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.485276][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.492422][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.502037][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.509144][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.596825][T29658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.612418][T29699] sch_tbf: peakrate 3 is lower than or equals to rate 2147483647 ! [ 738.690859][T29658] veth0_vlan: entered promiscuous mode [ 738.703375][T29658] veth1_vlan: entered promiscuous mode [ 738.724980][T29658] veth0_macvtap: entered promiscuous mode [ 738.733808][T29658] veth1_macvtap: entered promiscuous mode [ 738.748408][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.758945][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.768985][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.779472][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.789444][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.800016][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.809920][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.820354][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.830542][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.841010][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.850817][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.861295][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.871191][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.881899][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.891786][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.902236][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.912061][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.922602][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.934450][T29658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.944710][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.955395][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.965449][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.976012][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.985936][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.996391][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.006225][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.016679][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.026492][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.036952][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.046783][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.057249][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.067068][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.077664][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.087543][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.097967][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.107868][T29658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.118460][T29658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.131561][T29658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.153428][T29658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.162388][T29658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.171251][T29658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.180272][T29658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.344207][T29710] loop3: detected capacity change from 0 to 512 [ 739.369390][T29713] loop2: detected capacity change from 0 to 256 [ 739.376480][T29710] EXT4-fs: Ignoring removed bh option [ 739.387859][T29710] EXT4-fs error (device loop3): __ext4_iget:4906: inode #15: block 1803188595: comm syz.3.7468: invalid block [ 739.404753][T29710] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7468: couldn't read orphan inode 15 (err -117) [ 739.423279][T29710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.447045][T29713] loop2: detected capacity change from 0 to 256 [ 739.503101][T29722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 739.545846][T29723] can: request_module (can-proto-0) failed. [ 739.558427][T29723] loop4: detected capacity change from 0 to 512 [ 739.578022][T29723] EXT4-fs: Ignoring removed orlov option [ 739.585270][T29723] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.7478: inode #13: comm syz.4.7478: iget: illegal inode # [ 739.599693][T29723] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.7478: couldn't read orphan inode 13 (err -117) [ 739.613259][T29723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.629455][T29723] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.7478: Logical block already allocated [ 739.695102][T29725] IPVS: length: 33 != 24 [ 740.131962][T29732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29732 comm=syz.2.7480 [ 740.262253][T29585] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 740.264005][T29658] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.557648][T27699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.210737][T29751] loop4: detected capacity change from 0 to 256 [ 741.259095][T29751] FAT-fs (loop4): Unrecognized mount option "uni_Ąl" or missing value [ 741.437079][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 741.437091][ T29] audit: type=1326 audit(1719548388.466:13028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29752 comm="syz.1.7487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x0 [ 741.688177][T29761] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 742.499804][T29769] loop4: detected capacity change from 0 to 1024 [ 742.541598][T29769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 742.548833][T29769] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 742.561395][T29769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.913681][T27699] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.017641][T29781] loop1: detected capacity change from 0 to 1024 [ 743.058570][T29781] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 743.071382][T29781] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 743.093405][T29781] JBD2: no valid journal superblock found [ 743.099193][T29781] EXT4-fs (loop1): Could not load journal inode [ 743.164711][T29781] loop1: detected capacity change from 0 to 512 [ 743.266597][ T29] audit: type=1326 audit(1719548390.296:13029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.290515][ T29] audit: type=1326 audit(1719548390.296:13030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.315407][ T29] audit: type=1326 audit(1719548390.296:13031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.339096][ T29] audit: type=1326 audit(1719548390.326:13032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.363004][ T29] audit: type=1326 audit(1719548390.326:13033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.386761][ T29] audit: type=1326 audit(1719548390.326:13034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.410669][ T29] audit: type=1326 audit(1719548390.326:13035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.434397][ T29] audit: type=1326 audit(1719548390.326:13036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.458071][ T29] audit: type=1326 audit(1719548390.326:13037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.3.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x7ffc0000 [ 743.550418][ T3109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.601358][ T3109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.663306][ T3109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.729057][ T3109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.794635][ T3109] bridge_slave_1: left allmulticast mode [ 743.800415][ T3109] bridge_slave_1: left promiscuous mode [ 743.806072][ T3109] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.814109][ T3109] bridge_slave_0: left allmulticast mode [ 743.819796][ T3109] bridge_slave_0: left promiscuous mode [ 743.825459][ T3109] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.967936][ T3109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.984384][ T3109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.001591][ T3109] bond0 (unregistering): Released all slaves [ 744.013648][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7500'. [ 744.062118][T29807] vlan3: entered promiscuous mode [ 744.067225][T29807] veth25: entered promiscuous mode [ 744.074109][T29807] veth25: left promiscuous mode [ 744.126041][ T3109] hsr_slave_0: left promiscuous mode [ 744.136996][ T3109] hsr_slave_1: left promiscuous mode [ 744.145010][ T3109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.152765][ T3109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.160917][ T3109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.168328][ T3109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.180980][ T3109] veth1_macvtap: left promiscuous mode [ 744.186478][ T3109] veth0_macvtap: left promiscuous mode [ 744.192186][ T3109] veth1_vlan: left promiscuous mode [ 744.197434][ T3109] veth0_vlan: left promiscuous mode [ 744.337585][ T3109] team0 (unregistering): Port device team_slave_1 removed [ 744.352903][ T3109] team0 (unregistering): Port device team_slave_0 removed [ 744.428784][T29818] serio: Serial port pts0 [ 744.471667][T29790] chnl_net:caif_netlink_parms(): no params data found [ 744.503382][T29825] netlink: 'syz.3.7507': attribute type 1 has an invalid length. [ 744.541415][T29827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 744.616346][T29826] loop1: detected capacity change from 0 to 512 [ 744.802366][T29790] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.809479][T29790] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.898539][T29790] bridge_slave_0: entered allmulticast mode [ 744.917214][T29790] bridge_slave_0: entered promiscuous mode [ 744.957545][T29790] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.964865][T29790] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.978514][T29790] bridge_slave_1: entered allmulticast mode [ 744.988373][T29790] bridge_slave_1: entered promiscuous mode [ 745.020165][T29790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.042360][T29790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.071332][T29790] team0: Port device team_slave_0 added [ 745.078741][T29790] team0: Port device team_slave_1 added [ 745.100433][T29790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.107474][T29790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.133575][T29790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.145043][T29790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.152046][T29790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.178129][T29790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.215117][T29790] hsr_slave_0: entered promiscuous mode [ 745.225236][T29790] hsr_slave_1: entered promiscuous mode [ 745.231403][T29790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.239019][T29790] Cannot create hsr debugfs directory [ 745.517567][T29790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 745.527664][T29790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 745.548125][T29790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 745.561932][T29790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 745.609133][T29790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.624441][T29790] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.634369][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.641497][T17036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.658830][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.665945][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.695608][T29790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 745.706139][T29790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 745.790195][T29790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.878175][T29865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7515'. [ 745.937692][T29790] veth0_vlan: entered promiscuous mode [ 745.952312][T29790] veth1_vlan: entered promiscuous mode [ 745.966662][T29790] veth0_macvtap: entered promiscuous mode [ 745.979121][T29790] veth1_macvtap: entered promiscuous mode [ 745.990939][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.001422][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.011398][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.021930][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.031793][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.042267][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.052208][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.062662][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.072513][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.082945][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.092786][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.103207][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.113045][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.123623][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.133517][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.143969][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.153778][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.164286][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.176321][T29790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.191537][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.202184][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.212257][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.222843][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.232997][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.243510][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.253500][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.255201][T29873] loop2: detected capacity change from 0 to 512 [ 746.263931][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.263964][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.290498][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.300346][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.310801][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.316671][T29873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.320611][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.320626][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.320641][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.336454][T29873] ext4 filesystem being mounted at /root/syzkaller.12gDu4/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.343694][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.386089][T29790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.396604][T29790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.408318][T29790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.422276][T29790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.431234][T29790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.440031][T29790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.440292][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 746.440303][ T29] audit: type=1326 audit(1719548393.476:13066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.0.7516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x0 [ 746.448782][T29790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.533797][T29597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.629109][ T29] audit: type=1326 audit(1719548393.656:13067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29883 comm="syz.4.7504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x0 [ 746.798144][T29888] netlink: zone id is out of range [ 746.803392][T29888] netlink: del zone limit has 4 unknown bytes [ 747.157558][T29894] netlink: 'syz.2.7521': attribute type 1 has an invalid length. [ 748.145193][T29906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7525'. [ 748.167827][T29906] vlan2: entered promiscuous mode [ 748.173033][T29906] veth7: entered promiscuous mode [ 748.182100][T29906] veth7: left promiscuous mode [ 748.331967][T29914] loop4: detected capacity change from 0 to 512 [ 748.356912][T29914] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 748.394387][T29918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 749.073491][T29935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=29935 comm=syz.2.7532 [ 749.086566][T29935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=29935 comm=syz.2.7532 [ 749.099659][T29935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=29935 comm=syz.2.7532 [ 749.298627][ T29] audit: type=1326 audit(1719548396.326:13068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.322672][ T29] audit: type=1326 audit(1719548396.326:13069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.346667][ T29] audit: type=1326 audit(1719548396.326:13070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.371233][ T29] audit: type=1326 audit(1719548396.326:13071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.395141][ T29] audit: type=1326 audit(1719548396.326:13072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.418716][ T29] audit: type=1326 audit(1719548396.326:13073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.442268][ T29] audit: type=1326 audit(1719548396.326:13074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 749.465978][ T29] audit: type=1326 audit(1719548396.326:13075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29936 comm="syz.1.7534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 750.079856][T29958] netlink: 'syz.2.7538': attribute type 13 has an invalid length. [ 750.087691][T29958] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7538'. [ 750.101777][T29958] erspan0: refused to change device tx_queue_len [ 750.108145][T29958] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 750.230665][T29961] batman_adv: batadv0: Adding interface: macsec1 [ 750.237042][T29961] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.262524][T29961] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 750.266986][T29962] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 750.285274][T29961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7540'. [ 750.294635][T29961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.302143][T29961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.310115][T29961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.317622][T29961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.326503][T29961] batman_adv: batadv0: Removing interface: macsec1 [ 750.793440][T29965] syz_tun: entered promiscuous mode [ 751.627658][T29963] syz_tun: left promiscuous mode [ 752.281835][T29986] loop2: detected capacity change from 0 to 256 [ 752.312086][T29986] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 752.373137][T29986] loop2: detected capacity change from 0 to 512 [ 752.381052][T29986] EXT4-fs (loop2): 1 truncate cleaned up [ 752.388039][T29986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.402272][T29986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.527937][T29992] netlink: 'syz.1.7551': attribute type 4 has an invalid length. [ 752.559304][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 752.559399][ T29] audit: type=1326 audit(1719548399.586:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.591212][ T29] audit: type=1326 audit(1719548399.586:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.615107][ T29] audit: type=1326 audit(1719548399.586:13164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638632][ T29] audit: type=1326 audit(1719548399.586:13165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638660][ T29] audit: type=1326 audit(1719548399.586:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638681][ T29] audit: type=1326 audit(1719548399.586:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638782][ T29] audit: type=1326 audit(1719548399.586:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638895][ T29] audit: type=1326 audit(1719548399.586:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638918][ T29] audit: type=1326 audit(1719548399.586:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 752.638940][ T29] audit: type=1326 audit(1719548399.586:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7ffc0000 [ 753.071065][T30003] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 753.176028][T30009] loop4: detected capacity change from 0 to 512 [ 753.206734][T30009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 753.222152][T30009] EXT4-fs (loop4): 1 orphan inode deleted [ 753.228002][T30009] EXT4-fs (loop4): 1 truncate cleaned up [ 753.234316][T30009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.254506][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7559'. [ 753.264638][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7559'. [ 753.336668][T29790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.601187][T30021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30021 comm=syz.2.7560 [ 753.614216][T30021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=30021 comm=syz.2.7560 [ 753.626933][T30021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=30021 comm=syz.2.7560 [ 753.682751][T30022] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 753.934958][T30024] vlan2: entered allmulticast mode [ 753.940182][T30024] team0: entered allmulticast mode [ 753.945393][T30024] team_slave_0: entered allmulticast mode [ 753.951259][T30024] team_slave_1: entered allmulticast mode [ 753.959433][T30024] team0: left allmulticast mode [ 753.964405][T30024] team_slave_0: left allmulticast mode [ 753.969892][T30024] team_slave_1: left allmulticast mode [ 754.530454][T30037] syz_tun: entered promiscuous mode [ 755.363958][T30035] syz_tun: left promiscuous mode [ 756.287491][T30068] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 757.005682][T30081] loop1: detected capacity change from 0 to 2048 [ 757.034688][T30081] EXT4-fs: Ignoring removed nobh option [ 757.040344][T30081] ext4: Unknown parameter 'uid<00000000000000000000' [ 757.082901][T30081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=30081 comm=syz.1.7581 [ 757.142811][T30086] tipc: Started in network mode [ 757.147811][T30086] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 757.156880][T30086] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0004 [ 757.165001][T30086] tipc: Enabled bearer , priority 10 [ 757.554207][T30094] loop2: detected capacity change from 0 to 1024 [ 757.582649][T30094] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 757.595397][T30094] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 757.609022][T30094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 757.629217][T30094] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 48: comm syz.2.7584: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 757.728746][T29597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.282451][ T3162] tipc: Node number set to 1 [ 758.574885][T30121] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 758.985164][T30123] 9pnet_fd: Insufficient options for proto=fd [ 759.654574][T30136] loop2: detected capacity change from 0 to 256 [ 759.780104][T30139] loop4: detected capacity change from 0 to 8192 [ 759.811206][T30139] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777˙˙˙˙˙˙˙˙18446744073709551615" or missing value [ 759.853549][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 759.853563][ T29] audit: type=1326 audit(1719548406.886:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30138 comm="syz.3.7598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3622186b29 code=0x0 [ 760.398555][T30154] syz_tun: entered promiscuous mode [ 760.719098][T30162] loop1: detected capacity change from 0 to 128 [ 761.228142][T30150] syz_tun: left promiscuous mode [ 761.889485][T30185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7610'. [ 761.891768][T30184] netlink: 'syz.3.7611': attribute type 10 has an invalid length. [ 761.920374][T30184] team0: Port device syz_tun added [ 761.921132][T30185] loop4: detected capacity change from 0 to 256 [ 761.950958][T30184] team0: Port device syz_tun removed [ 761.967770][T30184] bridge_slave_0: left allmulticast mode [ 761.973598][T30184] bridge_slave_0: left promiscuous mode [ 761.979333][T30184] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.988681][T30185] FAT-fs (loop4): Unrecognized mount option "O‹“L ÎĆűçç€rumask=00000000000000000000000" or missing value [ 762.001691][T30184] bridge_slave_1: left allmulticast mode [ 762.007418][T30184] bridge_slave_1: left promiscuous mode [ 762.013307][T30184] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.024538][T30184] bond0: (slave bond_slave_0): Releasing backup interface [ 762.039051][T30184] bond0: (slave bond_slave_1): Releasing backup interface [ 762.078646][T30184] team0: Port device team_slave_0 removed [ 762.094810][T30187] loop1: detected capacity change from 0 to 8192 [ 762.105009][T30184] team0: Port device team_slave_1 removed [ 762.112227][T30184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.119836][T30184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.133033][T30184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.140640][T30184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.157742][T30185] sctp: [Deprecated]: syz.4.7610 (pid 30185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.157742][T30185] Use struct sctp_sack_info instead [ 762.307493][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 762.356956][ T9418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.405940][ T9418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.453392][ T9418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.513746][ T9418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.545226][T30195] chnl_net:caif_netlink_parms(): no params data found [ 762.588084][T30195] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.595252][T30195] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.602752][T30195] bridge_slave_0: entered allmulticast mode [ 762.610555][T30195] bridge_slave_0: entered promiscuous mode [ 762.622142][T30195] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.629346][T30195] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.636982][T30195] bridge_slave_1: entered allmulticast mode [ 762.644178][T30195] bridge_slave_1: entered promiscuous mode [ 762.665933][T30195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.676883][T30195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.710268][T30195] team0: Port device team_slave_0 added [ 762.717137][T30195] team0: Port device team_slave_1 added [ 762.834745][ T9418] bond0 (unregistering): Released all slaves [ 762.842863][T30195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.849857][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.875802][T30195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.887856][T30195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.894882][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.921017][T30195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.956605][T30195] hsr_slave_0: entered promiscuous mode [ 762.963501][T30195] hsr_slave_1: entered promiscuous mode [ 762.971211][T30195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.973857][T30215] SELinux: security_context_str_to_sid (^\{$:/!) failed with errno=-22 [ 762.984387][T30195] Cannot create hsr debugfs directory [ 762.992590][ T9418] tipc: Disabling bearer [ 762.997884][ T9418] tipc: Left network mode [ 763.077877][ T9418] hsr_slave_0: left promiscuous mode [ 763.086525][ T9418] hsr_slave_1: left promiscuous mode [ 763.094874][ T9418] veth1_macvtap: left promiscuous mode [ 763.100481][ T9418] veth0_macvtap: left promiscuous mode [ 763.106132][ T9418] veth1_vlan: left promiscuous mode [ 763.111523][ T9418] veth0_vlan: left promiscuous mode [ 763.118575][T30215] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7618'. [ 763.542996][T30195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 763.557994][T30195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 763.571725][T30195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 763.580817][T30195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 763.640089][T30195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.653655][T30195] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.664451][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.671672][T17036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.684702][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.691800][T10335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.773411][T30195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.845006][T30195] veth0_vlan: entered promiscuous mode [ 763.859589][T30195] veth1_vlan: entered promiscuous mode [ 763.881660][T30195] veth0_macvtap: entered promiscuous mode [ 763.889178][T30195] veth1_macvtap: entered promiscuous mode [ 763.909141][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.919681][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.929514][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.940036][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.949929][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.960396][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.970229][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.980688][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.990518][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.000968][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.010819][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.021331][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.031160][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.041638][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.051515][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.062057][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.075023][T30195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.086375][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.097706][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.107784][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.118344][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.128157][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.138584][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.148419][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.158914][ T29] audit: type=1400 audit(1719548411.176:13207): avc: denied { setopt } for pid=30237 comm="syz.1.7623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 764.179396][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.189263][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.199707][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.209518][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.220015][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.229848][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.240288][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.250161][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.260620][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.275063][T30195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.286268][T30195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.295121][T30195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.303886][T30195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.312610][T30195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.511922][T30249] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 765.094274][T30260] loop3: detected capacity change from 0 to 1024 [ 765.138430][T30260] EXT4-fs: Ignoring removed orlov option [ 765.144238][T30260] ext4: Unknown parameter 'appraise' [ 765.494094][T30274] loop2: detected capacity change from 0 to 1024 [ 765.542585][T30274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.816034][T29597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.912255][T30286] loop3: detected capacity change from 0 to 512 [ 765.913611][ T29] audit: type=1326 audit(1719548412.946:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30256 comm="syz.4.7629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb222db29 code=0x7fc00000 [ 765.953474][T30286] EXT4-fs: Ignoring removed nobh option [ 765.963576][T30286] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 765.972377][T30286] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.7633: attempt to clear invalid blocks 2 len 1 [ 765.986266][T30286] EXT4-fs (loop3): Remounting filesystem read-only [ 765.994197][T30286] EXT4-fs (loop3): 1 truncate cleaned up [ 766.000197][T30286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.013268][T30286] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 766.022874][T30286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.385434][T30294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'. [ 766.404929][T30294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.412301][T30294] IPv6: NLM_F_CREATE should be set when creating new route [ 766.422955][T30294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30294 comm=syz.0.7636 [ 766.438034][ T29] audit: type=1400 audit(1719548413.466:13209): avc: denied { listen } for pid=30289 comm="syz.0.7636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 766.458811][T30294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'. [ 767.528602][T30321] netlink: 'syz.2.7644': attribute type 13 has an invalid length. [ 767.536593][T30321] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7644'. [ 767.548390][T30321] erspan0: refused to change device tx_queue_len [ 767.554787][T30321] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 767.586389][T30321] loop2: detected capacity change from 0 to 2048 [ 767.629904][T30321] loop2: p1 < > p4 [ 767.634305][T30321] loop2: p4 size 8388608 extends beyond EOD, truncated [ 767.749819][T30321] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 767.758680][T30324] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 767.768275][T30324] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 767.777516][T30324] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 767.786289][T30321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7644'. [ 768.536185][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7647'. [ 768.545178][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7647'. [ 769.902060][T30356] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 771.024340][T30377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30377 comm=syz.2.7664 [ 771.039348][T30377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7664'. [ 771.107377][T30382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 771.128055][ C1] vxcan0: j1939_tp_txtimer: 0xffff888112bc6e00: tx aborted with unknown reason: -2 [ 771.137556][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888112bc6200: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 771.155031][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888112bc6e00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 771.294634][T30383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7661'. [ 771.375855][T30387] loop1: detected capacity change from 0 to 128 [ 772.112732][ T29] audit: type=1326 audit(1719548419.146:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.136375][ T29] audit: type=1326 audit(1719548419.146:13211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.159979][ T29] audit: type=1326 audit(1719548419.146:13212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.185391][ T29] audit: type=1326 audit(1719548419.146:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.209264][ T29] audit: type=1326 audit(1719548419.146:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.232909][ T29] audit: type=1326 audit(1719548419.146:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.256651][ T29] audit: type=1326 audit(1719548419.146:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.280422][ T29] audit: type=1326 audit(1719548419.146:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.303887][ T29] audit: type=1326 audit(1719548419.146:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.327498][ T29] audit: type=1326 audit(1719548419.146:13219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30391 comm="syz.1.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe9e4236b29 code=0x7ffc0000 [ 772.832662][T30404] loop1: detected capacity change from 0 to 256 [ 773.874661][T30416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7677'. [ 773.893833][T30416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30416 comm=syz.2.7677 [ 773.912654][T30416] vlan2: entered promiscuous mode [ 773.917767][T30416] veth3: entered promiscuous mode [ 773.924624][T30416] veth3: left promiscuous mode [ 774.281324][T30422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30422 comm=syz.4.7678 [ 774.294160][T30422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=30422 comm=syz.4.7678 [ 774.307007][T30422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=30422 comm=syz.4.7678 [ 775.167248][T30443] loop4: detected capacity change from 0 to 512 [ 775.223757][T30443] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 775.238410][T30443] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7683: invalid indirect mapped block 1 (level 1) [ 775.253786][T30443] EXT4-fs (loop4): 1 truncate cleaned up [ 775.262233][T30443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.349064][T30444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7684'. [ 775.387903][T30444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30444 comm=syz.0.7684 [ 776.075781][T29790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.558983][T30462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30462 comm=syz.4.7691 [ 777.154856][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 777.154870][ T29] audit: type=1326 audit(1719548424.186:13708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.184958][ T29] audit: type=1326 audit(1719548424.186:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.208596][ T29] audit: type=1326 audit(1719548424.186:13710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.232122][ T29] audit: type=1326 audit(1719548424.186:13711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.255709][ T29] audit: type=1326 audit(1719548424.186:13712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.279310][ T29] audit: type=1326 audit(1719548424.186:13713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.302915][ T29] audit: type=1326 audit(1719548424.186:13714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.326654][ T29] audit: type=1326 audit(1719548424.186:13715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.350361][ T29] audit: type=1326 audit(1719548424.186:13716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 777.373964][ T29] audit: type=1326 audit(1719548424.186:13717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30472 comm="syz.2.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 778.102339][T30491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7702'. [ 778.111648][T30491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30491 comm=syz.0.7702 [ 780.482009][ T3162] kernel write not supported for file /30523/timerslack_ns (pid: 3162 comm: kworker/0:6) [ 781.239169][T30534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30534 comm=syz.4.7716 [ 781.251994][T30534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=30534 comm=syz.4.7716 [ 781.264820][T30534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=30534 comm=syz.4.7716 [ 782.507476][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 782.507489][ T29] audit: type=1326 audit(1719548429.536:13809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30549 comm="syz.2.7724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x0 [ 783.053134][T30564] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 783.809402][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7728'. [ 785.107610][T30588] 9pnet_fd: Insufficient options for proto=fd [ 786.623525][T30604] loop1: detected capacity change from 0 to 2048 [ 786.810265][T30606] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 787.396856][T30619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30619 comm=syz.0.7744 [ 787.409771][T30619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=30619 comm=syz.0.7744 [ 787.422697][T30619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=30619 comm=syz.0.7744 [ 788.677115][T30634] 9pnet_fd: Insufficient options for proto=fd [ 790.287496][T30652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7756'. [ 790.305682][T30652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30652 comm=syz.4.7756 [ 790.324801][T30652] vlan2: entered promiscuous mode [ 790.329979][T30652] veth3: entered promiscuous mode [ 790.338696][T30652] veth3: left promiscuous mode [ 790.947191][T30657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7758'. [ 791.570561][T30666] loop1: detected capacity change from 0 to 512 [ 791.661680][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7762'. [ 791.754241][T30668] syz_tun: entered promiscuous mode [ 792.586689][T30665] syz_tun: left promiscuous mode [ 792.804097][T30681] 9pnet_fd: Insufficient options for proto=fd [ 793.348509][T30686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7770'. [ 793.357734][T30686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30686 comm=syz.2.7770 [ 793.776189][T30695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.929633][ T6007] unregister_netdevice: waiting for vxcan0 to become free. Usage count = 2 [ 795.010698][T30711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7779'. [ 795.025938][T30711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30711 comm=syz.2.7779 [ 795.042742][T30711] vlan2: entered promiscuous mode [ 795.048288][T30711] veth5: entered promiscuous mode [ 795.058676][T30711] veth5: left promiscuous mode [ 795.221970][T30713] syz_tun: entered promiscuous mode [ 796.052369][T30712] syz_tun: left promiscuous mode [ 797.114450][T30729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7785'. [ 797.123708][T30729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30729 comm=syz.3.7785 [ 798.517205][T30745] 9pnet_fd: Insufficient options for proto=fd [ 799.330136][T30755] syz_tun: entered promiscuous mode [ 800.162673][T30753] syz_tun: left promiscuous mode [ 801.076490][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7803'. [ 801.646189][T30781] 9pnet_fd: Insufficient options for proto=fd [ 801.999838][ T29] audit: type=1326 audit(1719548449.026:13810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30785 comm="syz.1.7808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9e4236b29 code=0x0 [ 802.656184][T30798] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 803.425182][ T29] audit: type=1326 audit(1719548450.456:13811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.3.7812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc777687b29 code=0x0 [ 803.608968][T30809] syz_tun: entered promiscuous mode [ 804.439323][T30804] syz_tun: left promiscuous mode [ 805.352128][T30829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7819'. [ 805.404344][T30832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 806.155477][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7823'. [ 806.164932][T30840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30840 comm=syz.1.7823 [ 806.308852][ T29] audit: type=1326 audit(1719548453.336:13812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30838 comm="syz.0.7824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x0 [ 806.361830][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7822'. [ 807.381257][T30856] 9pnet_fd: Insufficient options for proto=fd [ 808.929125][T30887] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 809.780844][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7840'. [ 811.713566][T30924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30924 comm=syz.3.7849 [ 811.726329][T30924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=30924 comm=syz.3.7849 [ 811.739033][T30924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=30924 comm=syz.3.7849 [ 812.682824][T30937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7855'. [ 812.698888][T30937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30937 comm=syz.2.7855 [ 812.717258][T30937] vlan2: entered promiscuous mode [ 812.722362][T30937] veth7: entered promiscuous mode [ 812.736036][T30937] veth7: left promiscuous mode [ 812.795996][T30941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 813.390398][T30946] loop3: detected capacity change from 0 to 1024 [ 813.434484][T30946] EXT4-fs: Ignoring removed orlov option [ 813.440188][T30946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 813.451116][T30946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.468488][T30946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7857'. [ 813.782893][T30195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.521595][ T29] audit: type=1326 audit(1719548462.556:13813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.3.7868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc777687b29 code=0x0 [ 816.063726][T30990] loop4: detected capacity change from 0 to 512 [ 816.089124][T30990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 816.100397][T30990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 816.109875][T30990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7870: bg 0: block 248: padding at end of block bitmap is not set [ 816.125474][T30990] Quota error (device loop4): write_blk: dquota write failed [ 816.132883][T30990] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 816.142862][T30990] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.7870: Failed to acquire dquot type 1 [ 816.156511][T30990] EXT4-fs (loop4): 1 truncate cleaned up [ 816.163057][T30990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 816.214191][T30994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7871'. [ 816.262028][T30997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=30997 comm=syz.1.7872 [ 816.274818][T30997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=30997 comm=syz.1.7872 [ 816.287665][T30997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=30997 comm=syz.1.7872 [ 816.301074][T29790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.310201][ T29] audit: type=1326 audit(1719548463.346:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 816.340375][ T29] audit: type=1326 audit(1719548463.366:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.7871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8279a89b29 code=0x7ffc0000 [ 816.503164][T31000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7873'. [ 816.523803][T31000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31000 comm=syz.0.7873 [ 816.539696][T31000] vlan2: entered promiscuous mode [ 816.544753][T31000] veth9: entered promiscuous mode [ 816.554559][T31000] veth9: left promiscuous mode [ 817.144535][T31008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7877'. [ 818.298669][T31023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7881'. [ 818.999849][T31027] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.125865][T31036] loop4: detected capacity change from 0 to 256 [ 819.174895][T31036] FAT-fs (loop4): Unrecognized mount option "dotQ" or missing value [ 819.190296][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7885'. [ 819.199626][T31037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31037 comm=syz.0.7885 [ 820.141444][T31046] syz_tun: entered promiscuous mode [ 820.598995][T31054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7892'. [ 820.625675][T31054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31054 comm=syz.1.7892 [ 820.647347][T31054] vlan3: entered promiscuous mode [ 820.652466][T31054] veth27: entered promiscuous mode [ 820.654260][T31052] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 820.665813][T31054] veth27: left promiscuous mode [ 820.972258][T31044] syz_tun: left promiscuous mode [ 821.667430][T31066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.409413][T31073] xt_CONNSECMARK: invalid mode: 0 [ 823.472361][T31088] netlink: 'syz.2.7903': attribute type 10 has an invalid length. [ 823.488105][T31088] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 823.669059][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7905'. [ 823.938047][T31094] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7906'. [ 824.882390][T31110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 825.055328][T31097] syz.3.7907 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 825.069559][T31097] CPU: 0 PID: 31097 Comm: syz.3.7907 Not tainted 6.10.0-rc5-syzkaller-00155-g66e55ff12e73 #0 [ 825.079879][T31097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 825.089932][T31097] Call Trace: [ 825.093212][T31097] [ 825.096204][T31097] dump_stack_lvl+0xf2/0x150 [ 825.100805][T31097] dump_stack+0x15/0x20 [ 825.104971][T31097] dump_header+0x83/0x2d0 [ 825.109369][T31097] oom_kill_process+0x33e/0x4c0 [ 825.114291][T31097] out_of_memory+0x9af/0xbe0 [ 825.118886][T31097] mem_cgroup_out_of_memory+0x13e/0x190 [ 825.124491][T31097] try_charge_memcg+0x745/0xcd0 [ 825.129360][T31097] ? get_page_from_freelist+0x1a2a/0x1a70 [ 825.135083][T31097] obj_cgroup_charge_pages+0xbd/0x1d0 [ 825.140495][T31097] __memcg_kmem_charge_page+0x9d/0x170 [ 825.145982][T31097] __alloc_pages_noprof+0x1bc/0x360 [ 825.151235][T31097] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 825.156633][T31097] alloc_pages_noprof+0xe1/0x100 [ 825.161605][T31097] __vmalloc_node_range_noprof+0x719/0xef0 [ 825.167532][T31097] kvmalloc_node_noprof+0x121/0x170 [ 825.172730][T31097] ? ip_set_alloc+0x1f/0x30 [ 825.177242][T31097] ip_set_alloc+0x1f/0x30 [ 825.181608][T31097] hash_netiface_create+0x273/0x730 [ 825.186993][T31097] ? __nla_parse+0x40/0x60 [ 825.191455][T31097] ? __pfx_hash_netiface_create+0x10/0x10 [ 825.197516][T31097] ip_set_create+0x359/0x8a0 [ 825.202137][T31097] ? memchr+0x1/0x50 [ 825.206123][T31097] ? __nla_parse+0x40/0x60 [ 825.210601][T31097] nfnetlink_rcv_msg+0x4a9/0x570 [ 825.215616][T31097] netlink_rcv_skb+0x12c/0x230 [ 825.220403][T31097] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 825.226182][T31097] nfnetlink_rcv+0x16c/0x15b0 [ 825.230911][T31097] ? kmem_cache_free+0xd8/0x280 [ 825.235854][T31097] ? nlmon_xmit+0x51/0x60 [ 825.240197][T31097] ? __kfree_skb+0x102/0x150 [ 825.244809][T31097] ? consume_skb+0x57/0x180 [ 825.249417][T31097] ? nlmon_xmit+0x51/0x60 [ 825.253769][T31097] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 825.259053][T31097] ? __dev_queue_xmit+0xb21/0x1e50 [ 825.264244][T31097] ? ref_tracker_free+0x3a5/0x410 [ 825.269333][T31097] ? __netlink_deliver_tap+0x495/0x4c0 [ 825.274804][T31097] netlink_unicast+0x58d/0x660 [ 825.279574][T31097] netlink_sendmsg+0x5ca/0x6e0 [ 825.284427][T31097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.289720][T31097] __sock_sendmsg+0x140/0x180 [ 825.294404][T31097] ____sys_sendmsg+0x312/0x410 [ 825.299203][T31097] __sys_sendmsg+0x1e9/0x280 [ 825.303808][T31097] __x64_sys_sendmsg+0x46/0x50 [ 825.308625][T31097] x64_sys_call+0xb25/0x2d70 [ 825.313221][T31097] do_syscall_64+0xc9/0x1c0 [ 825.317738][T31097] ? clear_bhb_loop+0x55/0xb0 [ 825.322415][T31097] ? clear_bhb_loop+0x55/0xb0 [ 825.327193][T31097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.333110][T31097] RIP: 0033:0x7fc777687b29 [ 825.337522][T31097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.357215][T31097] RSP: 002b:00007fc776909048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.365635][T31097] RAX: ffffffffffffffda RBX: 00007fc777815fa0 RCX: 00007fc777687b29 [ 825.373606][T31097] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 825.381648][T31097] RBP: 00007fc777708756 R08: 0000000000000000 R09: 0000000000000000 [ 825.389624][T31097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.397599][T31097] R13: 000000000000000b R14: 00007fc777815fa0 R15: 00007ffe50a0dd08 [ 825.405684][T31097] [ 825.408843][T31097] memory: usage 307200kB, limit 307200kB, failcnt 689 [ 825.415613][T31097] memory+swap: usage 307764kB, limit 9007199254740988kB, failcnt 0 [ 825.423528][T31097] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 825.430864][T31097] Memory cgroup stats for /syz3: [ 825.431053][T31097] cache 28672 [ 825.439280][T31097] rss 0 [ 825.442057][T31097] shmem 0 [ 825.444981][T31097] mapped_file 0 [ 825.448500][T31097] dirty 16384 [ 825.451808][T31097] writeback 0 [ 825.455130][T31097] workingset_refault_anon 255 [ 825.459821][T31097] workingset_refault_file 1161 [ 825.464573][T31097] swap 577536 [ 825.467868][T31097] swapcached 20480 [ 825.471609][T31097] pgpgin 523698 [ 825.475053][T31097] pgpgout 523686 [ 825.478630][T31097] pgfault 563218 [ 825.482280][T31097] pgmajfault 220 [ 825.485813][T31097] inactive_anon 20480 [ 825.489815][T31097] active_anon 0 [ 825.493259][T31097] inactive_file 24576 [ 825.497230][T31097] active_file 4096 [ 825.500965][T31097] unevictable 0 [ 825.504406][T31097] hierarchical_memory_limit 314572800 [ 825.509796][T31097] hierarchical_memsw_limit 9223372036854771712 [ 825.515944][T31097] total_cache 28672 [ 825.519885][T31097] total_rss 0 [ 825.523160][T31097] total_shmem 0 [ 825.526646][T31097] total_mapped_file 0 [ 825.530912][T31097] total_dirty 16384 [ 825.534740][T31097] total_writeback 0 [ 825.538546][T31097] total_workingset_refault_anon 255 [ 825.543849][T31097] total_workingset_refault_file 1161 [ 825.549128][T31097] total_swap 577536 [ 825.552958][T31097] total_swapcached 20480 [ 825.557199][T31097] total_pgpgin 523698 [ 825.561202][T31097] total_pgpgout 523686 [ 825.565253][T31097] total_pgfault 563218 [ 825.569310][T31097] total_pgmajfault 220 [ 825.573398][T31097] total_inactive_anon 20480 [ 825.578011][T31097] total_active_anon 0 [ 825.582054][T31097] total_inactive_file 24576 [ 825.586545][T31097] total_active_file 4096 [ 825.590801][T31097] total_unevictable 0 [ 825.594774][T31097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7907,pid=31093,uid=0 [ 825.609775][T31097] Memory cgroup out of memory: Killed process 31093 (syz.3.7907) total-vm:82668kB, anon-rss:580kB, file-rss:9392kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 825.789241][T31117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7912'. [ 825.798326][T31117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7912'. [ 826.064309][T31124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 826.166112][T31125] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 826.177428][T31125] vhci_hcd: invalid port number 129 [ 828.186410][T31152] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '" ' [ 828.258480][ T29] audit: type=1400 audit(1719548475.286:13816): avc: denied { setattr } for pid=31149 comm="syz.2.7922" name="QIPCRTR" dev="sockfs" ino=157414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 829.285804][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7926'. [ 829.723063][T31171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7927'. [ 829.749194][T31171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31171 comm=syz.1.7927 [ 829.775688][T31171] vlan3: entered promiscuous mode [ 829.780771][T31171] veth29: entered promiscuous mode [ 829.793987][T31171] veth29: left promiscuous mode [ 829.915522][T29597] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 829.926454][T29597] CPU: 1 PID: 29597 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00155-g66e55ff12e73 #0 [ 829.936911][T29597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 829.946946][T29597] Call Trace: [ 829.950210][T29597] [ 829.953258][T29597] dump_stack_lvl+0xf2/0x150 [ 829.957933][T29597] dump_stack+0x15/0x20 [ 829.962076][T29597] dump_header+0x83/0x2d0 [ 829.966477][T29597] oom_kill_process+0x33e/0x4c0 [ 829.971320][T29597] out_of_memory+0x9af/0xbe0 [ 829.975972][T29597] mem_cgroup_out_of_memory+0x13e/0x190 [ 829.981526][T29597] try_charge_memcg+0x745/0xcd0 [ 829.986485][T29597] ? _raw_spin_unlock+0x26/0x50 [ 829.991357][T29597] ? radix_tree_lookup+0xf9/0x150 [ 829.996379][T29597] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 830.002429][T29597] __read_swap_cache_async+0x2b9/0x520 [ 830.007944][T29597] swap_cluster_readahead+0x276/0x3f0 [ 830.013304][T29597] swapin_readahead+0xe2/0x7a0 [ 830.018105][T29597] ? __filemap_get_folio+0x420/0x5b0 [ 830.023369][T29597] ? swap_cache_get_folio+0x6e/0x210 [ 830.028664][T29597] do_swap_page+0x3bc/0x1840 [ 830.033241][T29597] ? __rcu_read_lock+0x36/0x50 [ 830.038047][T29597] handle_mm_fault+0x809/0x2a80 [ 830.042995][T29597] ? mas_walk+0x204/0x320 [ 830.047333][T29597] exc_page_fault+0x3b9/0x650 [ 830.052035][T29597] asm_exc_page_fault+0x26/0x30 [ 830.056866][T29597] RIP: 0033:0x7f827995e932 [ 830.061290][T29597] Code: d7 82 de 1b 43 48 f7 a4 24 b8 00 00 00 48 8b 05 74 ae de 00 48 69 8c 24 b0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca 8b 48 08 <39> 4c 24 0c 48 89 d0 4c 0f 45 ea 4c 29 f0 48 3b 05 59 ad de 00 73 [ 830.080885][T29597] RSP: 002b:00007ffee2187c70 EFLAGS: 00010216 [ 830.087059][T29597] RAX: 0000001b2d720000 RBX: 0000000000000119 RCX: 0000000000000007 [ 830.095018][T29597] RDX: 00000000000ca8b1 RSI: 00007ffee2187d20 RDI: 0000000000000001 [ 830.102975][T29597] RBP: 00007ffee2187cbc R08: 0000000024cd8449 R09: 7fffffffffffffff [ 830.110973][T29597] R10: 00007f8279bee0b8 R11: 00007f8279bee080 R12: 0000000000000032 [ 830.118980][T29597] R13: 00000000000ca58c R14: 00000000000ca4b2 R15: 00007ffee2187d20 [ 830.126931][T29597] [ 830.130734][T29597] memory: usage 307200kB, limit 307200kB, failcnt 410 [ 830.137647][T29597] memory+swap: usage 308040kB, limit 9007199254740988kB, failcnt 0 [ 830.145966][T29597] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 830.153295][T29597] Memory cgroup stats for /syz2: [ 830.153695][T29597] cache 32768 [ 830.161980][T29597] rss 0 [ 830.164717][T29597] shmem 0 [ 830.167624][T29597] mapped_file 65536 [ 830.171499][T29597] dirty 0 [ 830.174429][T29597] writeback 0 [ 830.177684][T29597] workingset_refault_anon 91 [ 830.182262][T29597] workingset_refault_file 4646 [ 830.187002][T29597] swap 860160 [ 830.190290][T29597] swapcached 12288 [ 830.193989][T29597] pgpgin 633091 [ 830.197419][T29597] pgpgout 633080 [ 830.201021][T29597] pgfault 651069 [ 830.204538][T29597] pgmajfault 94 [ 830.207968][T29597] inactive_anon 12288 [ 830.211935][T29597] active_anon 0 [ 830.215365][T29597] inactive_file 28672 [ 830.219316][T29597] active_file 4096 [ 830.223024][T29597] unevictable 0 [ 830.226455][T29597] hierarchical_memory_limit 314572800 [ 830.231856][T29597] hierarchical_memsw_limit 9223372036854771712 [ 830.237978][T29597] total_cache 32768 [ 830.241788][T29597] total_rss 0 [ 830.245045][T29597] total_shmem 0 [ 830.248474][T29597] total_mapped_file 65536 [ 830.252790][T29597] total_dirty 0 [ 830.256218][T29597] total_writeback 0 [ 830.260006][T29597] total_workingset_refault_anon 91 [ 830.265104][T29597] total_workingset_refault_file 4646 [ 830.270403][T29597] total_swap 860160 [ 830.274189][T29597] total_swapcached 12288 [ 830.278424][T29597] total_pgpgin 633091 [ 830.282472][T29597] total_pgpgout 633080 [ 830.286510][T29597] total_pgfault 651070 [ 830.290597][T29597] total_pgmajfault 94 [ 830.294576][T29597] total_inactive_anon 12288 [ 830.299047][T29597] total_active_anon 0 [ 830.303011][T29597] total_inactive_file 28672 [ 830.307558][T29597] total_active_file 4096 [ 830.311791][T29597] total_unevictable 0 [ 830.315744][T29597] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6823,pid=27629,uid=0 [ 830.330743][T29597] Memory cgroup out of memory: Killed process 27631 (syz.2.6823) total-vm:80752kB, anon-rss:456kB, file-rss:9388kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 831.009658][T31166] ================================================================== [ 831.017768][T31166] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 831.027584][T31166] [ 831.029898][T31166] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 0: [ 831.037971][T31166] tick_do_update_jiffies64+0x112/0x1b0 [ 831.043527][T31166] tick_nohz_handler+0x7c/0x2d0 [ 831.048453][T31166] __hrtimer_run_queues+0x20d/0x5e0 [ 831.053649][T31166] hrtimer_interrupt+0x210/0x7b0 [ 831.058588][T31166] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 831.064491][T31166] sysvec_apic_timer_interrupt+0x6e/0x80 [ 831.070124][T31166] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.076107][T31166] kcsan_setup_watchpoint+0x404/0x410 [ 831.081486][T31166] __crc32c_le_base+0xf6/0x520 [ 831.086262][T31166] chksum_update+0x32/0x50 [ 831.090685][T31166] crypto_shash_update+0x4a/0x60 [ 831.095646][T31166] jbd2_journal_commit_transaction+0x123b/0x33e0 [ 831.101983][T31166] kjournald2+0x243/0x430 [ 831.106313][T31166] kthread+0x1d1/0x210 [ 831.110375][T31166] ret_from_fork+0x4b/0x60 [ 831.114780][T31166] ret_from_fork_asm+0x1a/0x30 [ 831.119536][T31166] [ 831.121845][T31166] read to 0xffffffff860079c0 of 8 bytes by task 31166 on cpu 1: [ 831.129458][T31166] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 831.135796][T31166] count_shadow_nodes+0x6b/0x230 [ 831.140727][T31166] do_shrink_slab+0x5a/0x690 [ 831.145307][T31166] shrink_slab+0x4ed/0x860 [ 831.149715][T31166] shrink_node+0xa0d/0x13c0 [ 831.154213][T31166] do_try_to_free_pages+0x3c6/0xc50 [ 831.159402][T31166] try_to_free_mem_cgroup_pages+0x1eb/0x4e0 [ 831.165285][T31166] try_charge_memcg+0x27a/0xcd0 [ 831.170126][T31166] obj_cgroup_charge_pages+0xbd/0x1d0 [ 831.175493][T31166] __memcg_kmem_charge_page+0x9d/0x170 [ 831.180946][T31166] __alloc_pages_noprof+0x1bc/0x360 [ 831.186130][T31166] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 831.191513][T31166] alloc_pages_noprof+0xe1/0x100 [ 831.196443][T31166] __vmalloc_node_range_noprof+0x719/0xef0 [ 831.202239][T31166] kvmalloc_node_noprof+0x121/0x170 [ 831.207426][T31166] ip_set_alloc+0x1f/0x30 [ 831.211748][T31166] hash_netiface_create+0x273/0x730 [ 831.216935][T31166] ip_set_create+0x359/0x8a0 [ 831.221518][T31166] nfnetlink_rcv_msg+0x4a9/0x570 [ 831.226447][T31166] netlink_rcv_skb+0x12c/0x230 [ 831.231220][T31166] nfnetlink_rcv+0x16c/0x15b0 [ 831.235885][T31166] netlink_unicast+0x58d/0x660 [ 831.240636][T31166] netlink_sendmsg+0x5ca/0x6e0 [ 831.245391][T31166] __sock_sendmsg+0x140/0x180 [ 831.250057][T31166] ____sys_sendmsg+0x312/0x410 [ 831.254808][T31166] __sys_sendmsg+0x1e9/0x280 [ 831.259385][T31166] __x64_sys_sendmsg+0x46/0x50 [ 831.264163][T31166] x64_sys_call+0xb25/0x2d70 [ 831.268748][T31166] do_syscall_64+0xc9/0x1c0 [ 831.273242][T31166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.279124][T31166] [ 831.281430][T31166] value changed: 0x000000010000cf23 -> 0x000000010000cf24 [ 831.288519][T31166] [ 831.290823][T31166] Reported by Kernel Concurrency Sanitizer on: [ 831.296954][T31166] CPU: 1 PID: 31166 Comm: syz.2.7925 Not tainted 6.10.0-rc5-syzkaller-00155-g66e55ff12e73 #0 [ 831.307267][T31166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 831.317306][T31166] ================================================================== [ 831.375540][T31184] program syz.3.7933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.550995][ T29] audit: type=1326 audit(1719548478.576:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.590090][ T29] audit: type=1326 audit(1719548478.616:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.613833][ T29] audit: type=1326 audit(1719548478.616:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.637519][ T29] audit: type=1326 audit(1719548478.616:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.661146][ T29] audit: type=1326 audit(1719548478.616:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.684876][ T29] audit: type=1326 audit(1719548478.616:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.708531][ T29] audit: type=1326 audit(1719548478.616:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.732269][ T29] audit: type=1326 audit(1719548478.616:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 831.755771][ T29] audit: type=1326 audit(1719548478.616:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31185 comm="syz.0.7934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b4ceeb29 code=0x7ffc0000 [ 832.411282][ T30] oom_reaper: reaped process 27631 (syz.2.6823), now anon-rss:68kB, file-rss:8356kB, shmem-rss:0kB [ 832.427074][T31160] syz.2.7925 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 832.438064][T31160] CPU: 0 PID: 31160 Comm: syz.2.7925 Not tainted 6.10.0-rc5-syzkaller-00155-g66e55ff12e73 #0 [ 832.448334][T31160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 832.458384][T31160] Call Trace: [ 832.461711][T31160] [ 832.464667][T31160] dump_stack_lvl+0xf2/0x150 [ 832.469262][T31160] dump_stack+0x15/0x20 [ 832.473417][T31160] dump_header+0x83/0x2d0 [ 832.477756][T31160] oom_kill_process+0x33e/0x4c0 [ 832.482606][T31160] out_of_memory+0x9af/0xbe0 [ 832.487210][T31160] mem_cgroup_out_of_memory+0x13e/0x190 [ 832.492815][T31160] try_charge_memcg+0x745/0xcd0 [ 832.497673][T31160] ? _raw_spin_unlock+0x26/0x50 [ 832.502579][T31160] ? radix_tree_lookup+0xf9/0x150 [ 832.507617][T31160] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 832.513769][T31160] __read_swap_cache_async+0x2b9/0x520 [ 832.519305][T31160] swap_cluster_readahead+0x380/0x3f0 [ 832.524731][T31160] swapin_readahead+0xe2/0x7a0 [ 832.529493][T31160] ? __filemap_get_folio+0x420/0x5b0 [ 832.534784][T31160] ? swap_cache_get_folio+0x6e/0x210 [ 832.540148][T31160] do_swap_page+0x3bc/0x1840 [ 832.544751][T31160] ? __rcu_read_lock+0x36/0x50 [ 832.549611][T31160] handle_mm_fault+0x809/0x2a80 [ 832.554503][T31160] ? mas_walk+0x204/0x320 [ 832.558941][T31160] exc_page_fault+0x3b9/0x650 [ 832.563619][T31160] asm_exc_page_fault+0x26/0x30 [ 832.568569][T31160] RIP: 0033:0x7f827995e24c [ 832.573032][T31160] Code: 00 69 3d 6b b4 de 00 e8 03 00 00 48 8d 1d 6c 9d 2b 00 e8 47 b8 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d0 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 8f ee ff ff eb [ 832.592687][T31160] RSP: 002b:00007ffee2187a50 EFLAGS: 00010206 [ 832.598737][T31160] RAX: 0000000000000000 RBX: 00007f8279c17fa0 RCX: 0000000000000000 [ 832.606719][T31160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556a71808 [ 832.614773][T31160] RBP: 00007f8279c199a0 R08: 0000000000000000 R09: 7fffffffffffffff [ 832.622730][T31160] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000ca8c7 [ 832.630716][T31160] R13: 0000000000000032 R14: 00007f8279c199a0 R15: 00007ffee2187b30 [ 832.639345][T31160] [ 832.642778][T31160] memory: usage 307200kB, limit 307200kB, failcnt 3834 [ 832.649655][T31160] memory+swap: usage 308052kB, limit 9007199254740988kB, failcnt 0 [ 832.657619][T31160] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 832.664906][T31160] Memory cgroup stats for /syz2: [ 832.665018][T31160] cache 24576 [ 832.673244][T31160] rss 0 [ 832.675980][T31160] shmem 0 [ 832.678930][T31160] mapped_file 65536 [ 832.682750][T31160] dirty 16384 [ 832.686097][T31160] writeback 0 [ 832.689355][T31160] workingset_refault_anon 97 [ 832.694015][T31160] workingset_refault_file 4666 [ 832.698831][T31160] swap 872448 [ 832.702132][T31160] swapcached 0 [ 832.705491][T31160] pgpgin 633118 [ 832.708958][T31160] pgpgout 633112 [ 832.712567][T31160] pgfault 651081 [ 832.716098][T31160] pgmajfault 102 [ 832.719659][T31160] inactive_anon 0 [ 832.723277][T31160] active_anon 0 [ 832.726710][T31160] inactive_file 20480 [ 832.730738][T31160] active_file 4096 [ 832.734444][T31160] unevictable 0 [ 832.737874][T31160] hierarchical_memory_limit 314572800 [ 832.743236][T31160] hierarchical_memsw_limit 9223372036854771712 [ 832.749371][T31160] total_cache 24576 [ 832.753298][T31160] total_rss 0 [ 832.756568][T31160] total_shmem 0 [ 832.760049][T31160] total_mapped_file 65536 [ 832.764377][T31160] total_dirty 16384 [ 832.768195][T31160] total_writeback 0 [ 832.772017][T31160] total_workingset_refault_anon 97 [ 832.777110][T31160] total_workingset_refault_file 4666 [ 832.782381][T31160] total_swap 872448 [ 832.786167][T31160] total_swapcached 0 [ 832.790077][T31160] total_pgpgin 633118 [ 832.794249][T31160] total_pgpgout 633112 [ 832.798299][T31160] total_pgfault 651082 [ 832.802372][T31160] total_pgmajfault 102 [ 832.806423][T31160] total_inactive_anon 0 [ 832.810630][T31160] total_active_anon 0 [ 832.814585][T31160] total_inactive_file 20480 [ 832.819073][T31160] total_active_file 4096 [ 832.823349][T31160] total_unevictable 0 [ 832.827315][T31160] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7925,pid=31160,uid=0 [ 832.842231][T31160] Memory cgroup out of memory: Killed process 31160 (syz.2.7925) total-vm:82668kB, anon-rss:452kB, file-rss:9384kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000